last executing test programs: 26m6.243839872s ago: executing program 4 (id=3519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r1, 0x0, 0x0, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x7ff}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)}], 0x1}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004", @ANYRESHEX=r0, @ANYRESHEX], 0x44}, 0x1, 0x2}, 0x4000040) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000002b58041b5000000000000109022400010000000709040000020000000009215a000001220500f144a77100000800d6"], 0x0) 26m0.065690662s ago: executing program 4 (id=3531): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100, 0x1, 0x3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x1002000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) syz_open_dev$sndpcmc(0x0, 0x4, 0x200081) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syslog(0x4, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x5d62, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x8}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="bc", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @remote, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="7f", 0x1}], 0x1}}], 0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x8, 0x1ff, 0xc, 0xf, 0x1}, &(0x7f0000000000)=0x98) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x4000007fffffff}) fcntl$lock(r5, 0x5, &(0x7f00000001c0)={0x1, 0x1, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 25m45.384131438s ago: executing program 4 (id=3563): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{}, &(0x7f00000005c0), &(0x7f0000000080)='%-010d \x00'}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}]}}]}}]}, 0x54}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000000000000e46d"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) io_uring_setup(0x354a, &(0x7f00000000c0)={0x0, 0x145e, 0x800, 0x0, 0x32b}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shmget(0x1, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000080), 0x84, &(0x7f0000000200)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x65]}}]}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) prctl$PR_SET_MM(0x35, 0x6, &(0x7f0000f77000/0x4000)=nil) 25m44.253799513s ago: executing program 3 (id=3566): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC], 0x0) 25m43.050468234s ago: executing program 4 (id=3572): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8", 0x20, 0x404c801, 0x0, 0x0) 25m42.850510568s ago: executing program 32 (id=3536): sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70000010000000085000000060000008500000005000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25m42.782862831s ago: executing program 4 (id=3575): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_open_dev$radio(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000006c0)={0x980000, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000d00)={0x2c8, 0x2, 0x1, 0x0, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x7}, [@generic="bf82153c801620c37fbfa403ac3dff29570cdf36554a8bf545357ceaa152805985bf36f6d30bfe00b7fa583ae7e7237bb54aaa22fe6589a01187db2eda3414ff239917973adb4f236537216457ae236efbedb7d6666e48582452e8e55af207f1102dd1e8b98feaa8ab256917292e72729166e661ee479be5b1f9f7eed5e7169b8a2b878ff8ad98c28afcb42fad4922347d78e0f16122e0f30b413bd0e6acbca8beca1a950fd4c44cdf2c4da2fa268c7a7374076e8fd2055959bb", @nested={0x126, 0x10f, 0x0, 0x1, [@generic="da732a17f88704890b99dda95c7fba350d811cb528377fb5453a407fea8626b320e1f655c42bcd55c23bff2cdb8e10072bc90ad87c9096f693ed21a2cfefd9c1b44fae1969c2d735ca62a1cbcb86971f54d34106d78ed5dffaa3b06374f2572e672cabdcc76dfd24ba6a46ede2d57557d7a76f31cb1bd176758a712c5d533df4dd54f83bc452dea652", @nested={0x4, 0x6a}, @generic="3d51cbbbed82463cde0a88abb306a0148b39f3c30ec5a3166f5427e959344c086c321ebf09cf50cf3a994addb46b27439ed08a79ec38dd42e6f3e5386ed4867aeff7bceb", @nested={0x4, 0xcd}, @nested={0x4, 0x13d}, @generic="825f463aaae306c728f9b468e8450789c0f85bf7933e53c792c4c5e1a1e03147f8f5e5aa9d2b192ada110cd065323b369497ee7d2f7ddd3675149425b3492a8aad8b02a4ad8a907103"]}, @typed={0x8, 0x46, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="347ef0a9b40f45e8401e9dc1072c477f23d75e21a4a778fd1c2bec914d451d0b7a99f40cfde47a7152e0e00a0986ea1ddeae4366a8d79a23d891c7d450be289ea7f394e5beb3fa0499ae156f0b2242941b332ce7e8686a2cceb559dbabd2b9e2465b579df423908373b9920a591d59d22c359d5ef2a9a2ea4ddbf94c28d4de4693df1f30c9452d2bfd4f67cf80560f5fc515b89dd7a97ad9a6c47f51284e491992597244765497a6eb4ad147d47e1376e7f4053a44a0daa6c90b25fa9401332cde3ffafb865cde5bf176", @generic]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@link_local, @local, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x20, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @private=0xa010102, @multicast1}, {0x2001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x5, 0x2100, @void}}}}}}}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000070000880240007800800060048000000080005"], 0x164}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 25m41.599653034s ago: executing program 4 (id=3577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) ioctl$int_out(0xffffffffffffffff, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000300)=""/102392, 0x18ff8) chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x836d9fb164f927b3) r7 = add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) keyctl$revoke(0x3, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='pkcs7_test\x00', 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f00000000c0)={0xd5, 0x0, 0x7c}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 25m40.359134186s ago: executing program 3 (id=3578): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{}, 0x0, &(0x7f0000000080)='%-010d \x00'}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x2}, @TCA_FLOWER_KEY_MPLS_OPTS={0x30, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x4}]}}]}}]}, 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) io_uring_setup(0x354a, &(0x7f00000000c0)={0x0, 0x145e, 0x800, 0x0, 0x32b}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shmget(0x1, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000080), 0x84, &(0x7f0000000200)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x65]}}]}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) prctl$PR_SET_MM(0x35, 0x6, &(0x7f0000f77000/0x4000)=nil) 25m34.621847921s ago: executing program 3 (id=3587): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r6, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x81) unshare(0x64000600) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=r2) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) 25m30.986251016s ago: executing program 3 (id=3593): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000800)=[{0x5, 0x800, 0xd1, &(0x7f0000000380)="ea810f84d845da35eb008761a7c95c71347e2bc538d8c18785997e26d0dee16e8aaf23dc8d582de8e29f7d26b352e1db62c2ca63221b6f1ee395c093d7a97c6a4e4f2c8d700aa8ba97cb1f3f80c9fee2f9b4f0e6e5d23ffbe433c6ae4093d6590a187d220e1c9a6e374d8c5c95c680654cf2ee7d5c462be1e406d97af692c684d64018023e88c9e1b56a7757fccec57c764dde12d9323bbd3e7b063f2512b66f253cfcae1378d25b68c4d8b705fff31dcae0b684b456633bbfb84450930d2ff61b7dccf77a9ab55335f2e2f6001d7d1b15"}, {0x8, 0xc800, 0xdf, &(0x7f0000000480)="a13f0519d1451e90fa653345ca7bc91541cee79251e6ebfcf6aeb57eebbe014482db18f51f8c0898b943c9bf46baaa7752d5b5739c49b4291d53d39e6f86187d9c55ced25628c2a3a58b516b7ffcd136e5972a1c8884d282b67b283764f62e8d1924a8149d94ee28a9c6f4293bba66202df1fd2a07936d314c7f470b0a9c2261ec79ecfea7abce0085e87e7dff4c0d1c84a0080909f8077c14df4bfb6cb12ad4c38f29c97dfc260e026f9971ede9a0295b110eabfd5cdfececa2a10e63c23be487dfb867b407b602883af5ac63b481b6e5113dc66f35e8f5adeb1d07527d06"}, {0x200, 0x900, 0x7e, &(0x7f0000000580)="922eb96eaef643acf24983a57ef0b16f19eeb732ab48ee0b7e84f07735146ecde5f33e482fa6e789e832c971cde5e1e6c28fe4f4305a0a6755a4d5a057013edf2d73c55ce3ba6cfeba4d8fb79d887765328406f0ad769e25efeacc533921fb780be35b545bd89a2f64564e40c213bbcac8dffc9e4fa32a9cdc7386064e34"}, {0x7, 0x200, 0x0, 0x0}, {0x8, 0xc001, 0x8, &(0x7f0000000640)="2c22299b75b188ea"}, {0x8, 0x4400, 0x7e, &(0x7f0000000680)="d9e7c01976103304cba5771c9b60b5eb859ac354a921b7c6db9c9a7bb6f7965f94ffc4e0d68fd380807414fc917dbc2e5169f940fb630c518143d127b470c6f4a0f8d9633de27b50acc7409e857b60f435e4fcd55586258541e4faf7f1952ca42658e7449d1ef7564bdffaec25d3e5e75b12105d6b3e3e96043185293279"}, {0xfffe, 0x7e01, 0xed, &(0x7f0000000700)="12efb62c428b7dc62eefe5247e408b727016a01ed6a1af70323ee091a9ffb8c076947a8a0ea56e1eb78c7c25db3dc7e218ddb9de9954c291141b7bc331dfb91269ce476002a1b4fdb00880579b5ac9762a30d2d604fd590e32a0ce116f7a09d537f62d1fa4ecc42e7098464ba14d6739c5aba715a1273aa402312fd338e54de8dffdf69037e5b6959aa4c58248687b3be014dc934cd2fd5b2fdb89896d1b78a55d072abd1b2414bef2351bff3ff835b6e05f668de17a8c99f489fcaa23208b721e020298a738b9dc66ddecf5ebb1f979cf2251890c69fb8330341dba15e2e2d3bf03eead90162291de9d60536b"}], 0x7}) 25m26.161941863s ago: executing program 33 (id=3577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) ioctl$int_out(0xffffffffffffffff, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000300)=""/102392, 0x18ff8) chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x836d9fb164f927b3) r7 = add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) keyctl$revoke(0x3, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='pkcs7_test\x00', 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f00000000c0)={0xd5, 0x0, 0x7c}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 25m24.377063511s ago: executing program 3 (id=3607): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100030000220f00000c000600e200000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x400000000000217, 0x42, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g&\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05N\xb9\x1dOr\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000001800000100000000000000001c140000fe000001000000008400130064677356d4ab77b7a20000000000000a000000000000000000000000000000000000000300000000000000000000000700000000000000070000000f0000000000000f00000000000000000f00000000000000000000000000000000000000000000000300000008000000070000000000000d04000000070000000000000000000000020000000000"], 0xa0}}, 0x0) ftruncate(r6, 0xffff) close(0x3) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000001c0)={r6, 0x1, 0x0, 0x8000}) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x400, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r8, 0x32d7, 0x0, 0x46, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r11, 0x40a0ae49, &(0x7f0000000180)={0x0, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x4000}) accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x10, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 25m17.583479008s ago: executing program 3 (id=3621): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100, 0x1, 0x3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x1002000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) syz_open_dev$sndpcmc(0x0, 0x4, 0x200081) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syslog(0x4, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x5d62, 0x0, 0x0, 0x0, 0x0) mlockall(0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x8}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="bc", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @remote, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="7f", 0x1}], 0x1}}], 0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x8, 0x1ff, 0xc, 0xf, 0x1}, &(0x7f0000000000)=0x98) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x4000007fffffff}) fcntl$lock(r6, 0x5, &(0x7f00000001c0)={0x1, 0x1, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 25m2.563599952s ago: executing program 34 (id=3621): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100, 0x1, 0x3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x1002000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) syz_open_dev$sndpcmc(0x0, 0x4, 0x200081) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syslog(0x4, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x5d62, 0x0, 0x0, 0x0, 0x0) mlockall(0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x8}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="bc", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @remote, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="7f", 0x1}], 0x1}}], 0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}, 0x8, 0x1ff, 0xc, 0xf, 0x1}, &(0x7f0000000000)=0x98) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x4000007fffffff}) fcntl$lock(r6, 0x5, &(0x7f00000001c0)={0x1, 0x1, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 24m21.349575658s ago: executing program 5 (id=3754): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f00000000c0)=[{0xfffffffffffffffe, 0x1, {0x0, 0xf0, 0x1}, {0x1, 0xf0}, 0x2, 0xfd}], 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0xdf713edc9e173dbe, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000140), 0x0, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000003940)=0x10) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000003980)={0x6, 0x4, 0x0, 0x10006, 0x14, "070000000000000000000000004843ff7700"}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x9, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB="df000081", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r4, &(0x7f0000000440)="0cd94fe3607f"}, 0x20) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f00000002c0)=0x625) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r5, 0x0, 0x0, 0x41) ioctl$IMHOLD_L1(r5, 0x80044948, &(0x7f00000000c0)=0x40) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 24m17.303100192s ago: executing program 5 (id=3768): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_procfs(r0, &(0x7f0000000000)='attr/keycreate\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=@newtaction={0x14, 0x30, 0x10b}, 0x14}}, 0x20040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x15, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="ceaa00000000000071101a000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x3}, 0x94) socket$kcm(0x2c, 0x3, 0x0) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000a40)='\xb9\x9b\xf2:\a\xac\xc9=itch\x000\xeb\x89\x02\xb8\x86u8\x8b1\xcc\xb1\xb7\xd0\xd58z\xf4\x13\x8bn\x1f\xfa\xdb\xd8\xbd\xf2\xc6\x84N\x8e\xa8\xc3\xb5m\x96\x8d\xcf\x89O\xde\tw{\xf5\xfb\xa4?\xc8\x02\x00\x00\x00s\xb0=\xc0\xb9\xc4\xa1&\x19\xb6\xd4\x1d\xb4\xa3W\x8f@t\xa0X\x1e\t\x92B\xa2\x91\x04\x94>]hb\x90\xd1\xee\x83\xd7pD\xfc\xd1 }\xdd\xab\x1fj\xf0\xd6K:\xe2\'\xfb-cv\x89\xd0\x87\x82=\xcd\xaa\xad_\xdd\xa2\xb2^\x14\xff2P\r$\x8d\xb6w\xcfS+\xe8b:\x18\xc3\b\xb3\xc0\x1b\xaa\x94\x9e\xf4\n\x1b\x11.\xc4FU\xff\x14\xbc\x82\xce\xb5\x03\xc5', 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r9 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) mknodat(r1, &(0x7f0000000100)='./file0/file0\x00', 0x101, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000140)) 24m10.755093785s ago: executing program 5 (id=3784): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) symlinkat(&(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x8008, 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xffffff65, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcfadf25110000eb0700341797fef490678a4074a40200"], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x40811) syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) close(0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00000102030109021200010000000009"], 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) 24m2.130069035s ago: executing program 5 (id=3805): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = getpgrp(0x0) fanotify_init(0x8, 0x1) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000380)=""/141, 0x18) getdents64(r2, &(0x7f0000000440)=""/177, 0xb1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fallocate(0xffffffffffffffff, 0x3, 0xa48b, 0x8000c60) fanotify_init(0x200, 0x0) syz_io_uring_setup(0x20005325, 0x0, &(0x7f0000000140), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18020000", @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf25010000001400020077673200000000000000000000000000f001088030000080080003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b2800008024000100000000000000000000000000000000000000000000000000000000000000000088010080240002003099ace9f33b89487dd6902e2affad7fcfdf1fa9cd361539fd39689b86522f0408000a0001000000580109800400008088000080060001000200000008000200ac1414bb050003e1ffffffff050001000200000008000200ac1e00010500030002000000060001000a00000014000200ff0200000000000000000000000000010500030002000000060001000200000008000200ac14140a0500030002000000060001000200000008000200ac1e01010500030000000000ac0000800600010002000000080002000a0101000500030000000000060001000200000008000200ac1414170500030003000000060001000200000008000200ac1e00010500030003000000060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fc00000000000000000000000000000005000300010000000600010002000000080002000a01010105000300010000001c000080060001000200000008000200ffffffff0500030001000000040000800400008004000080"], 0x218}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) 23m59.342300691s ago: executing program 5 (id=3814): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040), 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x0, 0xfffffffe}, 0xc) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) userfaultfd(0x80001) 23m55.247676751s ago: executing program 5 (id=3826): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a0000000400e5d82c19ef8bb87c10961af30000dd0000c00db2ed2d000a00000000000000", @ANYBLOB="c82e8710ba84c66e42ed26dd56f50f557628dba70ac311463a589b2539893f90b92d84266d0ba55ca08b12bb6fe24fad633f66c8cf03f0ba8fba1f1aadb44e898843063ba68aa0508449da798bd9f379697a1f50d01533148afd0eeb5fbcdc138dc880aa288f74ec7af66d61b942bcc82a6c09cc93ccdae5e76988b9e875fd18bf898c094e6623b22d7fc5e6078d0a6ca55602bdec68c5d4", @ANYRES8, @ANYBLOB="4913db26092dfc3364cfd7aa97b6c6cba6e036a5b94cb5a5a32ba0fd26823ce393672fa244203a9852f0bb244443f25839e867d5ecce8e3e481e082a1207fff807168d8b12a30e5d8a038b", @ANYRES32, @ANYRES16=0x0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xce10fd0612eff814, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r4, &(0x7f0000000340)) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0xfffff001) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x23}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@getqdisc={0x0, 0x26, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xc, 0x8}, {0x9, 0xfff1}, {0xf, 0xb}}, [{}, {}, {}, {}, {}, {}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) 23m54.983078384s ago: executing program 35 (id=3826): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a0000000400e5d82c19ef8bb87c10961af30000dd0000c00db2ed2d000a00000000000000", @ANYBLOB="c82e8710ba84c66e42ed26dd56f50f557628dba70ac311463a589b2539893f90b92d84266d0ba55ca08b12bb6fe24fad633f66c8cf03f0ba8fba1f1aadb44e898843063ba68aa0508449da798bd9f379697a1f50d01533148afd0eeb5fbcdc138dc880aa288f74ec7af66d61b942bcc82a6c09cc93ccdae5e76988b9e875fd18bf898c094e6623b22d7fc5e6078d0a6ca55602bdec68c5d4", @ANYRES8, @ANYBLOB="4913db26092dfc3364cfd7aa97b6c6cba6e036a5b94cb5a5a32ba0fd26823ce393672fa244203a9852f0bb244443f25839e867d5ecce8e3e481e082a1207fff807168d8b12a30e5d8a038b", @ANYRES32, @ANYRES16=0x0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xce10fd0612eff814, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r4, &(0x7f0000000340)) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0xfffff001) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x23}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@getqdisc={0x0, 0x26, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xc, 0x8}, {0x9, 0xfff1}, {0xf, 0xb}}, [{}, {}, {}, {}, {}, {}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) 22m38.88593701s ago: executing program 6 (id=4033): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x7ff}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)}], 0x1}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004", @ANYRESHEX=r0, @ANYRESHEX=r3], 0x44}, 0x1, 0x2}, 0x4000040) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000002b58041b5000000000000109022400010000000709040000020000000009215a000001220500f144a77100000800d6"], 0x0) 22m33.881729046s ago: executing program 6 (id=4048): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)) 22m33.785473743s ago: executing program 6 (id=4049): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 22m26.475753265s ago: executing program 6 (id=4062): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100030000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x400000000000217, 0x42, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g&\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05N\xb9\x1dOr\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000001800000100000000000000001c140000fe000001000000008400130064677356d4ab77b7a20000000000000a000000000000000000000000000000000000000300000000000000000000000700000000000000070000000f0000000000000f00000000000000000f00000000000000000000000000000000000000000000000300000008000000070000000000000d04000000070000000000000000000000020000000000"], 0xa0}}, 0x0) ftruncate(r6, 0xffff) close(0x3) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000001c0)={r6, 0x1, 0x0, 0x8000}) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x400, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r8, 0x32d7, 0x0, 0x46, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r11, 0x40a0ae49, &(0x7f0000000180)={0x0, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x4000}) accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x10, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 22m24.560854379s ago: executing program 6 (id=4070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) writev(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020, 0x0, 0x0}, 0x2020) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYRESOCT=r5, @ANYBLOB], 0x84}}, 0x20008040) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x3]}]}, 0x6c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 22m23.362827674s ago: executing program 6 (id=4072): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001300)=""/102400, 0x19000) syz_open_dev$dri(0x0, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f000001b780)=[{{&(0x7f0000001080)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001100)="83fc1e00893a724a490386c2cf39e8a9e08d0b7c7b45d7e81cf65230734c6b56af40c20585b3a4596607b57cab1b5f3447e7f7843cafc04b6735f833e05439eb36881afe0e942dde2694ea2c6e4f6bb112d9a45cb0e864c44a5d33eaee1086182ce697fe72b47b662a191518c19755c49e8969e4e068ce7c7eafb2f3d76f37fd4f73cca4f2906bd02907a47a8d0c7e0a626df3aeb7f82fc0aab7fd951f5dc9655776ee2a90ae8cfc7d644214278e4129e35e3764e7fbeae2f6b2265840", 0xbd}], 0x1}}, {{&(0x7f00000011c0)={0xa, 0x4e21, 0x2858552c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f000001b5c0)=[{&(0x7f0000001200)="b4a8f92363c210a067e1725078a530b972b4c0725165cc12e7d0fff31b1d83e51cc0a42eab444706a38dd5c0db2c33a24e3f0e32ed52665bfb3e74a6d056d47b3fde831a3db77203ee7142ca11e61f0a953911586672d36cf8eb0d7e49cd3c9b517c94affe0d78ac6af8cb28e316a376f7b9a7ad3704b7d96c5b4f5df33eced8fdd541eb2bddc155410bcaeae8e7c58d3cbac3eba9ab548082ad5dddeeb7b5124b13cbd1113d34f596febe293a75c19e9860b34a7dd12f16d986c48f37b8f567ee54f699acf036e0fafea82fedd788d5bd59e16a954c31dc8a1da5c0aa15dad420fc4231d54a870d03c7b4f15a", 0xed}, {&(0x7f000001a300)="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", 0x1000}, {&(0x7f000001b300)="94d7767e80d41afb24004c1bcdfa7caaad0c6d36b13c911d40e8caeba5a2a0cc82a54ca613f52463e9352e95065a1f84ef0144435fccb9eef2305424ba07c3128b38b2d17810e02ada4e5c5b2af6c940c9a600c63b574dbe9ad413c982819fe2182fe4717f3b5b8499a81aad7298fabc245ae3db05ff2a1d32e31b3cce896940d9ca9a8bf201c96703ec13172efb8fa5081748a78d", 0x95}, {&(0x7f000001b3c0)="a716ecf4b72b4df491779272ca80354edee7d973b69421c063212e188c9de2141b60c5c497d367a0afff618910fc3bed2a08c8bb90fe79d714522cbccc8abca8056f59e22bcb0ee1818b2933239f8da6fb63b0365de9f4b6b4f8a2b9b667061e643edfe67247ba7c72673e6438ec37a22651cefd94645d1b0fb8c0c19c47d727fbdea0390c212c8e03a6a1a80689396b085a127f45e9053079596dd849bba9d522d391f739027e7602901b3127d1440591bf0a8285e2850a85a049039adc6020bfab555bfcc605e1d6b421f822b821b0cf38b3c6021aaadf636c542086955acb", 0xe0}, {&(0x7f000001b4c0)="d9fe8b84e0842511935c01ed383e3a712bddd13e75e109e3d218565953019c93431817c6158cd4ae060de613e4ab62271ad26a5bbe0e4d9bb59f8913e4975daef0a3b648a084c111a3ee8507776cc077fa01a359147954cf71ab2564273a4d03baa492e988a002a07a2855ba6ca4464d3f5ffe505475091ae9a379dd477a0a8995b32a4b562152d5169802347bbc6da0f6d4487e431e4700efac54dd2c3972356968edc008ad57be3b98211e8f12988216baeafbbf8eac4fb710299172929b7d7366c6986300f33572d0c9033d38", 0xce}], 0x5, &(0x7f000001b640)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @rthdr={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x0, 0x9, 0x0, [@dev={0xfe, 0x80, '\x00', 0x29}]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x84, 0x3, '\x00', [@pad1, @ra={0x5, 0x2, 0x7ff}, @hao={0xc9, 0x10, @mcast2}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hopopts={{0x28, 0x29, 0x36, {0x3a, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x7}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xff}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x32, 0x5, '\x00', [@ra={0x5, 0x2, 0xfe00}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x101}}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x130}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000005c0)={0x0, 0x17, 0x59ea}, 0x8) 22m7.981456476s ago: executing program 36 (id=4072): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001300)=""/102400, 0x19000) syz_open_dev$dri(0x0, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f000001b780)=[{{&(0x7f0000001080)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001100)="83fc1e00893a724a490386c2cf39e8a9e08d0b7c7b45d7e81cf65230734c6b56af40c20585b3a4596607b57cab1b5f3447e7f7843cafc04b6735f833e05439eb36881afe0e942dde2694ea2c6e4f6bb112d9a45cb0e864c44a5d33eaee1086182ce697fe72b47b662a191518c19755c49e8969e4e068ce7c7eafb2f3d76f37fd4f73cca4f2906bd02907a47a8d0c7e0a626df3aeb7f82fc0aab7fd951f5dc9655776ee2a90ae8cfc7d644214278e4129e35e3764e7fbeae2f6b2265840", 0xbd}], 0x1}}, {{&(0x7f00000011c0)={0xa, 0x4e21, 0x2858552c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f000001b5c0)=[{&(0x7f0000001200)="b4a8f92363c210a067e1725078a530b972b4c0725165cc12e7d0fff31b1d83e51cc0a42eab444706a38dd5c0db2c33a24e3f0e32ed52665bfb3e74a6d056d47b3fde831a3db77203ee7142ca11e61f0a953911586672d36cf8eb0d7e49cd3c9b517c94affe0d78ac6af8cb28e316a376f7b9a7ad3704b7d96c5b4f5df33eced8fdd541eb2bddc155410bcaeae8e7c58d3cbac3eba9ab548082ad5dddeeb7b5124b13cbd1113d34f596febe293a75c19e9860b34a7dd12f16d986c48f37b8f567ee54f699acf036e0fafea82fedd788d5bd59e16a954c31dc8a1da5c0aa15dad420fc4231d54a870d03c7b4f15a", 0xed}, {&(0x7f000001a300)="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", 0x1000}, {&(0x7f000001b300)="94d7767e80d41afb24004c1bcdfa7caaad0c6d36b13c911d40e8caeba5a2a0cc82a54ca613f52463e9352e95065a1f84ef0144435fccb9eef2305424ba07c3128b38b2d17810e02ada4e5c5b2af6c940c9a600c63b574dbe9ad413c982819fe2182fe4717f3b5b8499a81aad7298fabc245ae3db05ff2a1d32e31b3cce896940d9ca9a8bf201c96703ec13172efb8fa5081748a78d", 0x95}, {&(0x7f000001b3c0)="a716ecf4b72b4df491779272ca80354edee7d973b69421c063212e188c9de2141b60c5c497d367a0afff618910fc3bed2a08c8bb90fe79d714522cbccc8abca8056f59e22bcb0ee1818b2933239f8da6fb63b0365de9f4b6b4f8a2b9b667061e643edfe67247ba7c72673e6438ec37a22651cefd94645d1b0fb8c0c19c47d727fbdea0390c212c8e03a6a1a80689396b085a127f45e9053079596dd849bba9d522d391f739027e7602901b3127d1440591bf0a8285e2850a85a049039adc6020bfab555bfcc605e1d6b421f822b821b0cf38b3c6021aaadf636c542086955acb", 0xe0}, {&(0x7f000001b4c0)="d9fe8b84e0842511935c01ed383e3a712bddd13e75e109e3d218565953019c93431817c6158cd4ae060de613e4ab62271ad26a5bbe0e4d9bb59f8913e4975daef0a3b648a084c111a3ee8507776cc077fa01a359147954cf71ab2564273a4d03baa492e988a002a07a2855ba6ca4464d3f5ffe505475091ae9a379dd477a0a8995b32a4b562152d5169802347bbc6da0f6d4487e431e4700efac54dd2c3972356968edc008ad57be3b98211e8f12988216baeafbbf8eac4fb710299172929b7d7366c6986300f33572d0c9033d38", 0xce}], 0x5, &(0x7f000001b640)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @rthdr={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x0, 0x9, 0x0, [@dev={0xfe, 0x80, '\x00', 0x29}]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x84, 0x3, '\x00', [@pad1, @ra={0x5, 0x2, 0x7ff}, @hao={0xc9, 0x10, @mcast2}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hopopts={{0x28, 0x29, 0x36, {0x3a, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x7}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xff}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x32, 0x5, '\x00', [@ra={0x5, 0x2, 0xfe00}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x101}}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x130}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000005c0)={0x0, 0x17, 0x59ea}, 0x8) 19m25.03576739s ago: executing program 1 (id=4481): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x214, &(0x7f00000009c0)={[{0x8c, 0x4e00, "8ccf3e7fdcee7224f330b76643c212a44717d51899f2f47547104b8622e0913083ea67c84d4a42acc362bc9bf4bdf127162f29a0ff1ad243d979102b2e21b2825d2dbf82c83c998d7174e2ea7501946c9476ceeb9a857f2394677bd7761df3aeeca146a9d5607f624863ff990d354bce1885bda14f83efc5b31f5cbaf5736a73200f24d7af6ac6d0582e40df"}, {0x90, 0x4e00, "53b7c3034f769419ad957b5b42f9f9e9a2920156c453203745700c51237f2f293403aad7d45f3b0af088c34e6d4c67a29aa6697ea126da6ca92eabcfde0f422f8c2dadb72f879f630324d6a9bea8e58f4e087acd60543e3f928b0d5670631884856269d416a76d381871edcb4c58abf08c7a8583d3c618c62f347ab37da6328a9d500c49da1a6de5c0f6c3a1576a19fa"}, {0xeb, 0x4e00, "347e2d7b13ca549ebbdd8debb671f5309bf906037bf5b68807409e32f67d1da1fecf013ccc0f5d713d6a765a0d93a86cdf2a293309c6d301adf1069ef620c1b6ea989396c51cf1510da024a0aea0d4df4661a394aff0b616b9b5a1dc1f406c305f24d4dd3aae83a7e8100a7ea794e316dae30cdb71a135de418b2f53c6d155dd91bae9304448d03fa91ee549dffcd26dd20efe566bce2bbc295cb81d5701fa1e2e42897b05a3c5c7805c623d1d369eb09829abc86e7222cb9e6cdb22e19e0a357a1332b507cd2950257e997b7aec157447ade626b858f36061f0a9ed50c90b6ceb2bc132bf4373234c3146"}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x110, &(0x7f0000000c80)={[{0x6, 0x4e00, "131cb37b458d"}, {0x9d, 0x4e00, "77bab67fcf22a23aa8a449f1dd5a7af3b3d105851a4ef1c20170b0a4e2415d48811f353b1daa05227ceac63165574a6008c408cdc0b12d89b99138625926478140d157c9ae29f1dff19d79787550959a1167825f88c5d4f70df15d20f83b389f591741439a66d5170a2ea6532376a4555b3de9545fa583b5c46c64a625f55c66d2aabf0f19b8d4b7eb30731f29f6c653a2cf13a3ece4d8fef56879e7dc"}, {0x58, 0x4e00, "b188a9bec0bc005a3235437afadf4b96b33455cd38ca89c6ceb562a4ab687792641c7f17cb0b00075dfec9ffb2856fd91684cdb543c08afd3dafcc3672b97eaedd2cd4c1014e355bca6ab325e928cefe1b7311791f82f7c8"}, {}]}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000100)={0x818, 0x3f7, 0x1, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7f7, './file0', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, [""]}, 0x818}, 0x1, 0x0, 0x0, 0x4080}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x50, 0x0, &(0x7f0000000000)=0xff5f) 19m20.848203965s ago: executing program 1 (id=4493): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)=@multiplanar_userptr={0x3, 0x5, 0x4, 0x100000, 0x10, {0x0, 0xea60}, {0x2, 0xc, 0x6, 0x8, 0x9, 0x1, "fb4ccd8f"}, 0x6, 0x2, {&(0x7f00000001c0)=[{0x4, 0x7, {0x0}, 0x2e26}, {0x7, 0x7, {0x0}, 0x7c}]}, 0xd96}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 19m18.841135144s ago: executing program 1 (id=4499): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000800)=[{0x5, 0x800, 0xd1, &(0x7f0000000380)="ea810f84d845da35eb008761a7c95c71347e2bc538d8c18785997e26d0dee16e8aaf23dc8d582de8e29f7d26b352e1db62c2ca63221b6f1ee395c093d7a97c6a4e4f2c8d700aa8ba97cb1f3f80c9fee2f9b4f0e6e5d23ffbe433c6ae4093d6590a187d220e1c9a6e374d8c5c95c680654cf2ee7d5c462be1e406d97af692c684d64018023e88c9e1b56a7757fccec57c764dde12d9323bbd3e7b063f2512b66f253cfcae1378d25b68c4d8b705fff31dcae0b684b456633bbfb84450930d2ff61b7dccf77a9ab55335f2e2f6001d7d1b15"}, {0x8, 0xc800, 0xc4, &(0x7f0000000480)="a13f0519d1451e90fa653345ca7bc91541cee79251e6ebfcf6aeb57eebbe014482db18f51f8c0898b943c9bf46baaa7752d5b5739c49b4291d53d39e6f86187d9c55ced25628c2a3a58b516b7ffcd136e5972a1c8884d282b67b283764f62e8d1924a8149d94ee28a9c6f4293bba66202df1fd2a07936d314c7f470b0a9c2261ec79ecfea7abce0085e87e7dff4c0d1c84a0080909f8077c14df4bfb6cb12ad4c38f29c97dfc260e026f9971ede9a0295b110eabfd5cdfececa2a10e63c23be487dfb867"}, {0x200, 0x900, 0x7e, &(0x7f0000000580)="922eb96eaef643acf24983a57ef0b16f19eeb732ab48ee0b7e84f07735146ecde5f33e482fa6e789e832c971cde5e1e6c28fe4f4305a0a6755a4d5a057013edf2d73c55ce3ba6cfeba4d8fb79d887765328406f0ad769e25efeacc533921fb780be35b545bd89a2f64564e40c213bbcac8dffc9e4fa32a9cdc7386064e34"}, {0x7, 0x200, 0x7, &(0x7f0000000600)="26e82b8ff415fa"}, {0x8, 0xc001, 0x8, &(0x7f0000000640)="2c22299b75b188ea"}, {0x8, 0x4400, 0x7e, &(0x7f0000000680)="d9e7c01976103304cba5771c9b60b5eb859ac354a921b7c6db9c9a7bb6f7965f94ffc4e0d68fd380807414fc917dbc2e5169f940fb630c518143d127b470c6f4a0f8d9633de27b50acc7409e857b60f435e4fcd55586258541e4faf7f1952ca42658e7449d1ef7564bdffaec25d3e5e75b12105d6b3e3e96043185293279"}, {0xfffe, 0x7e01, 0xed, &(0x7f0000000700)="12efb62c428b7dc62eefe5247e408b727016a01ed6a1af70323ee091a9ffb8c076947a8a0ea56e1eb78c7c25db3dc7e218ddb9de9954c291141b7bc331dfb91269ce476002a1b4fdb00880579b5ac9762a30d2d604fd590e32a0ce116f7a09d537f62d1fa4ecc42e7098464ba14d6739c5aba715a1273aa402312fd338e54de8dffdf69037e5b6959aa4c58248687b3be014dc934cd2fd5b2fdb89896d1b78a55d072abd1b2414bef2351bff3ff835b6e05f668de17a8c99f489fcaa23208b721e020298a738b9dc66ddecf5ebb1f979cf2251890c69fb8330341dba15e2e2d3bf03eead90162291de9d60536b"}], 0x7}) 19m11.065803569s ago: executing program 1 (id=4512): r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x4, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000400)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x15, 0x3, 'rr\x00', 0x1, 0x3, 0x72}, 0x2c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502"], 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000640)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000082505a8a440000102030109021b"], &(0x7f0000000580)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x3, 0x4, 0xe0, 0x8, 0x5}, 0xe2, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x5, [{0x0, 0x0}, {0xb7, &(0x7f00000003c0)=@string={0xb7, 0x3, "1f78ef6917772fe2d030b94366f53616ec2f2ea55c18042b32271b34948cba1463a69461d46bd4a737d98a3cec6be008f0b6e44e6a4a60713bdbdb5db3f22eb15befaee727789373138dd350ff54a8b24cedb5dcc11c7fa75a87123152ae222f74f7d6b5efdb786a9f9fa1141f7d9efdf1bc56ae661671011b23b7a10bf7fba0fb7dd1bba862b6d35459837608a2baa30e085344ae1db62d3d8ed29827787cadabd9b64c3e26f0c248cdb8e4ea3e381a30975d329b"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2001}}, {0x29, &(0x7f0000000500)=ANY=[@ANYBLOB]}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x427}}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000600)={@empty, @rand_addr=0x64010102}, 0xc) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x4, 0x7, 0x26, 0x7, 0x3, 0x9, 0x1, 0x6}}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000000c0)={{0x3}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) 19m4.461453688s ago: executing program 1 (id=4524): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa1010000, 0x0, 0x0, 0x0, 0x832]}}) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000000)={0xa, 0x5, 0x200}, 0xc) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000002000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, 0x0, 0x34) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000100)=[@uexit={0x0, 0x18, 0x7f}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c03, 0x4, 0xc0, 0x9}}, @uexit={0x0, 0x18, 0xffff}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x52b, 0x7, 0x3, 0x7}}, @cpuid={0x64, 0x18, {0x40, 0x39}}, @wr_crn={0x67, 0x20, {0x4, 0xb}}, @nested_create_vm={0x12d, 0x18, 0x3}, @in_dx={0x69, 0x20, {0xf4be, 0x2}}], 0x128}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r10, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) r11 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, &(0x7f0000000240)=[@nested_vmresume={0x130, 0x18}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x3, 0x8}}, @rdmsr={0x66, 0x18, {0x28f}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x8a, 0x7fffffff, 0x0, 0x7fffffff}}, @rdmsr={0x66, 0x18}, @set_irq_handler={0xc8, 0x20, {0xca, 0x1}}, @nested_load_code={0x12e, 0x7d, {0x0, "440f01c9c74424002d000000c7442402b3a54648ff2c24400fc75c12bf66baf80cb83add6388ef66bafc0c66ed0f08f3263e440f06b9800000c00f3235004000000f3065260f01c248b8ce0d937d000000000f23c80f21f8350c0000000f23f8260fad7300"}}, @enable_nested={0x12c, 0x18}, @code={0xa, 0x6d, {"450f30b8010000000f01c10fbebe00200000440f38caa20078000048b800000000000000000f23d00f21f835000000020f23f8b9800000c00f3235000800000f3066b80d010f00d8470f00995f4e0000c4a2153899002000000f01f8"}}, @nested_create_vm={0x12d, 0x18}, @nested_vmresume={0x130, 0x18}, @out_dx={0x6a, 0x28, {0x893d, 0x0, 0x7be4}}, @wr_drn={0x68, 0x20, {0x6, 0x8}}, @rdmsr={0x66, 0x18, {0xc0010063}}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @wrmsr={0x65, 0x20, {0x289, 0x6}}], 0x2ba}) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000540)=@x86={0x5, 0x6, 0x1, 0x0, 0x5b6bcbb, 0x5, 0x3, 0x2, 0x75, 0x4, 0xfa, 0x4, 0x0, 0x3, 0x7fffffff, 0x5, 0x5, 0xb1, 0x0, '\x00', 0x0, 0xf}) 19m1.732943094s ago: executing program 1 (id=4531): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001300)=""/102400, 0x19000) syz_open_dev$dri(0x0, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f000001b780)=[{{&(0x7f0000001080)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001100)="83fc1e00893a724a490386c2cf39e8a9e08d0b7c7b45d7e81cf65230734c6b56af40c20585b3a4596607b57cab1b5f3447e7f7843cafc04b6735f833e05439eb36881afe0e942dde2694ea2c6e4f6bb112d9a45cb0e864c44a5d33eaee1086182ce697fe72b47b662a191518c19755c49e8969e4e068ce7c7eafb2f3d76f37fd4f73cca4f2906bd02907a47a8d0c7e0a626df3aeb7f82fc0aab7fd951f5dc9655776ee2a90ae8cfc7d644214278e4129e35e3764e7fbeae2f6b2265840", 0xbd}], 0x1}}, {{&(0x7f00000011c0)={0xa, 0x4e21, 0x2858552c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f000001b5c0)=[{&(0x7f0000001200)="b4a8f92363c210a067e1725078a530b972b4c0725165cc12e7d0fff31b1d83e51cc0a42eab444706a38dd5c0db2c33a24e3f0e32ed52665bfb3e74a6d056d47b3fde831a3db77203ee7142ca11e61f0a953911586672d36cf8eb0d7e49cd3c9b517c94affe0d78ac6af8cb28e316a376f7b9a7ad3704b7d96c5b4f5df33eced8fdd541eb2bddc155410bcaeae8e7c58d3cbac3eba9ab548082ad5dddeeb7b5124b13cbd1113d34f596febe293a75c19e9860b34a7dd12f16d986c48f37b8f567ee54f699acf036e0fafea82fedd788d5bd59e16a954c31dc8a1da5c0aa15dad420fc4231d54a870d03c7b4f15a", 0xed}, {&(0x7f000001a300)="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", 0x1000}, {&(0x7f000001b300)="94d7767e80d41afb24004c1bcdfa7caaad0c6d36b13c911d40e8caeba5a2a0cc82a54ca613f52463e9352e95065a1f84ef0144435fccb9eef2305424ba07c3128b38b2d17810e02ada4e5c5b2af6c940c9a600c63b574dbe9ad413c982819fe2182fe4717f3b5b8499a81aad7298fabc245ae3db05ff2a1d32e31b3cce896940d9ca9a8bf201c96703ec13172efb8fa5081748a78d", 0x95}, {&(0x7f000001b3c0)="a716ecf4b72b4df491779272ca80354edee7d973b69421c063212e188c9de2141b60c5c497d367a0afff618910fc3bed2a08c8bb90fe79d714522cbccc8abca8056f59e22bcb0ee1818b2933239f8da6fb63b0365de9f4b6b4f8a2b9b667061e643edfe67247ba7c72673e6438ec37a22651cefd94645d1b0fb8c0c19c47d727fbdea0390c212c8e03a6a1a80689396b085a127f45e9053079596dd849bba9d522d391f739027e7602901b3127d1440591bf0a8285e2850a85a049039adc6020bfab555bfcc605e1d6b421f822b821b0cf38b3c6021aaadf636c542086955acb", 0xe0}, {&(0x7f000001b4c0)="d9fe8b84e0842511935c01ed383e3a712bddd13e75e109e3d218565953019c93431817c6158cd4ae060de613e4ab62271ad26a5bbe0e4d9bb59f8913e4975daef0a3b648a084c111a3ee8507776cc077fa01a359147954cf71ab2564273a4d03baa492e988a002a07a2855ba6ca4464d3f5ffe505475091ae9a379dd477a0a8995b32a4b562152d5169802347bbc6da0f6d4487e431e4700efac54dd2c3972356968edc008ad57be3b98211e8f12988216baeafbbf8eac4fb710299172929b7d7366c6986300f33572d0c9033d38", 0xce}], 0x5, &(0x7f000001b640)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @rthdr={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x0, 0x9, 0x0, [@dev={0xfe, 0x80, '\x00', 0x29}]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x84, 0x3, '\x00', [@pad1, @ra={0x5, 0x2, 0x7ff}, @hao={0xc9, 0x10, @mcast2}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hopopts={{0x28, 0x29, 0x36, {0x3a, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x7}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xff}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x32, 0x5, '\x00', [@ra={0x5, 0x2, 0xfe00}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x101}}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x130}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000005c0)={0x0, 0x17, 0x59ea}, 0x8) 18m46.608057547s ago: executing program 37 (id=4531): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001300)=""/102400, 0x19000) syz_open_dev$dri(0x0, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f000001b780)=[{{&(0x7f0000001080)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001100)="83fc1e00893a724a490386c2cf39e8a9e08d0b7c7b45d7e81cf65230734c6b56af40c20585b3a4596607b57cab1b5f3447e7f7843cafc04b6735f833e05439eb36881afe0e942dde2694ea2c6e4f6bb112d9a45cb0e864c44a5d33eaee1086182ce697fe72b47b662a191518c19755c49e8969e4e068ce7c7eafb2f3d76f37fd4f73cca4f2906bd02907a47a8d0c7e0a626df3aeb7f82fc0aab7fd951f5dc9655776ee2a90ae8cfc7d644214278e4129e35e3764e7fbeae2f6b2265840", 0xbd}], 0x1}}, {{&(0x7f00000011c0)={0xa, 0x4e21, 0x2858552c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f000001b5c0)=[{&(0x7f0000001200)="b4a8f92363c210a067e1725078a530b972b4c0725165cc12e7d0fff31b1d83e51cc0a42eab444706a38dd5c0db2c33a24e3f0e32ed52665bfb3e74a6d056d47b3fde831a3db77203ee7142ca11e61f0a953911586672d36cf8eb0d7e49cd3c9b517c94affe0d78ac6af8cb28e316a376f7b9a7ad3704b7d96c5b4f5df33eced8fdd541eb2bddc155410bcaeae8e7c58d3cbac3eba9ab548082ad5dddeeb7b5124b13cbd1113d34f596febe293a75c19e9860b34a7dd12f16d986c48f37b8f567ee54f699acf036e0fafea82fedd788d5bd59e16a954c31dc8a1da5c0aa15dad420fc4231d54a870d03c7b4f15a", 0xed}, {&(0x7f000001a300)="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", 0x1000}, {&(0x7f000001b300)="94d7767e80d41afb24004c1bcdfa7caaad0c6d36b13c911d40e8caeba5a2a0cc82a54ca613f52463e9352e95065a1f84ef0144435fccb9eef2305424ba07c3128b38b2d17810e02ada4e5c5b2af6c940c9a600c63b574dbe9ad413c982819fe2182fe4717f3b5b8499a81aad7298fabc245ae3db05ff2a1d32e31b3cce896940d9ca9a8bf201c96703ec13172efb8fa5081748a78d", 0x95}, {&(0x7f000001b3c0)="a716ecf4b72b4df491779272ca80354edee7d973b69421c063212e188c9de2141b60c5c497d367a0afff618910fc3bed2a08c8bb90fe79d714522cbccc8abca8056f59e22bcb0ee1818b2933239f8da6fb63b0365de9f4b6b4f8a2b9b667061e643edfe67247ba7c72673e6438ec37a22651cefd94645d1b0fb8c0c19c47d727fbdea0390c212c8e03a6a1a80689396b085a127f45e9053079596dd849bba9d522d391f739027e7602901b3127d1440591bf0a8285e2850a85a049039adc6020bfab555bfcc605e1d6b421f822b821b0cf38b3c6021aaadf636c542086955acb", 0xe0}, {&(0x7f000001b4c0)="d9fe8b84e0842511935c01ed383e3a712bddd13e75e109e3d218565953019c93431817c6158cd4ae060de613e4ab62271ad26a5bbe0e4d9bb59f8913e4975daef0a3b648a084c111a3ee8507776cc077fa01a359147954cf71ab2564273a4d03baa492e988a002a07a2855ba6ca4464d3f5ffe505475091ae9a379dd477a0a8995b32a4b562152d5169802347bbc6da0f6d4487e431e4700efac54dd2c3972356968edc008ad57be3b98211e8f12988216baeafbbf8eac4fb710299172929b7d7366c6986300f33572d0c9033d38", 0xce}], 0x5, &(0x7f000001b640)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @rthdr={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x0, 0x9, 0x0, [@dev={0xfe, 0x80, '\x00', 0x29}]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x84, 0x3, '\x00', [@pad1, @ra={0x5, 0x2, 0x7ff}, @hao={0xc9, 0x10, @mcast2}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hopopts={{0x28, 0x29, 0x36, {0x3a, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x7}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xff}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x32, 0x5, '\x00', [@ra={0x5, 0x2, 0xfe00}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x101}}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x130}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000005c0)={0x0, 0x17, 0x59ea}, 0x8) 16.499325499s ago: executing program 7 (id=6993): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = syz_io_uring_complete(0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0xc0f85403, &(0x7f0000000240)) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000180)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='xprtrdma_prepsend_failed\x00', r2, 0x0, 0x56}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r6, 0x407, 0xc000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 14.266300329s ago: executing program 8 (id=7000): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x7c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_MULTI_BOOLOPT={0xc}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}]}}}, @IFLA_MASTER={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, &(0x7f0000000380), &(0x7f0000000480)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xc, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[r3, r3, r3], &(0x7f0000000600)=[{0x3, 0x2, 0xd}, {0x5, 0x2, 0x1, 0xa}], 0x10, 0x5da}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0x59, 0x7f, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000340)=""/131, 0x83, 0x20, &(0x7f0000000240)={0x2, 0x4e20, @private=0xa010100}, 0x10) r8 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a00000000001010400000000000000000a00000a3c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c000280050001000000000008000740000000000c00164000000000000100"], 0xa0}}, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x403, 0x7fff, 0x16, "b0bfd0ff40000096004e149b78ef4100"}) r9 = syz_open_pts(r6, 0x0) r10 = dup3(r9, r6, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0xff) pipe2$9p(&(0x7f0000000000), 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) 13.355407745s ago: executing program 7 (id=7001): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000580)=""/174, 0xae) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44011}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000308000540000000001c0008"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 12.627487101s ago: executing program 9 (id=7004): r0 = gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x8, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@gettfilter={0x4c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x6, 0x5}, {0xfff3, 0xa}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8e6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5000000010f000040400e5ad600079", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c", @ANYBLOB="712ed0de2bd80e18861d15eafd4985d89d20e295f538919d87be580f811d89183a27e85cb88ed74b50e81858c395ab97d266c506ae235087fde79bb3d99b6bdff24e1f4657e9c6b0019aa6f664d1f07a9e0aade48d173854421a8581e824a3b9c88fe0b5b6076eae648d84788e9379617ec9138ce6db4870e5a5a5fce19be0e6a1", @ANYRESHEX, @ANYRES32=r0, @ANYBLOB="12c5388131c7279621e1c19dbc1c86c7b9468a285ebc5518342727142aa2bd63419530ffad8747ba9e4afe3cdd88aa9023aea4288b8f3e6bdc21269462fa7d9afaee6813d2ae70836cdcd10c69ae87daf809b3cc7c71630ea2664ed4b54a3b95a0efc7ad0c1d0ef0d0dec6a603b9330efc32802c086cc26fa38419a39dba0febd95ea8fc012d250424481c106fbb81b6b6bf4dd61db0602a14000000f5e0163ee5b3994fcfee470ffaeb83b0629a7b0777c867d31c6139ad5e591c7461ce882cbbb7889924ae1762a866d0259d4452acf4559ac81b0a80b4de9bc30ed0eb1fa2e757dd1142d546a2a985ba2fec37cad296e0007123114fc8e6e6c820e9044873c1453da0b6bdc29ea849eb19695f48155ec41cda5eb756bda2c47d99b0ba7a55913760cad1d93241ca"], 0x50}}, 0x20008844) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0xff, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) 10.321416604s ago: executing program 8 (id=7007): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x22) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x40000029) fcntl$notify(r2, 0x402, 0x1c) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket(0xa, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x201, 0x70bd27, 0x8000000, {0x7, 0x0, 0x0, r8, 0x80, 0x8e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200400c5}, 0x4000850) r9 = dup(r5) sendmsg$inet_sctp(r9, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f0000000480)=[@sndinfo={0x20, 0x84, 0x2, {0x5, 0x3, 0x0, 0x8000}}], 0x20, 0x48d5}, 0x8050) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x8, 0x1, 0x4}, 0x10) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) unshare(0x60400) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x14bc1, 0x0) 10.230085157s ago: executing program 7 (id=7008): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0], 0x40}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r6, &(0x7f0000002640)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x158, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2f, 0x0, r3}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd29, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x67, 0x3, {{'deflate\x00'}, 0xf8, "6f85bf85a2fc88fd5132a7226878830e7135efbf027ac5cab808d6a4b3ab2c"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) 9.501433565s ago: executing program 9 (id=7010): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) close(r4) (fail_nth: 3) 8.158824814s ago: executing program 9 (id=7011): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) fchmod(r0, 0x15a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdc02, {0x0, 0x0, 0x74, 0x0, 0x2000, 0x55007}, [@IFLA_NET_NS_PID={0x8}, @IFLA_MAP={0x24, 0xe, {0x3, 0x6, 0x9, 0x1, 0x8, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) dup(0xffffffffffffffff) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) 7.167296914s ago: executing program 8 (id=7015): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0xfffc, 0x0, 0x0, 0x1}, 'syz0\x00', 0x57}) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000200)=""/190, 0xbe}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000080)=""/52, 0x34}, {&(0x7f0000000100)=""/67, 0x43}, {&(0x7f00000002c0)=""/182, 0xb6}], 0x6) 6.810980739s ago: executing program 2 (id=7018): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) fgetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="62747266732e2e2f3115ff8bddd3ca62696e64657266732f62"], &(0x7f0000000080)=""/25, 0x19) (async, rerun: 32) dup3(r1, r0, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x3, r4, 0x0, 0x0) (async) sendmsg(r3, 0x0, 0x0) (async) r5 = socket(0x1, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYRES8=r3, @ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x60842, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000800)="0f20e035020000000f22e066470fe219c4c2353974ca00c4c2053c1ce248b8c6000000000000000f23d00f21f835000000020f23f83e400f0d6d080f0766baf80cb844d2f581ef66bafc0ced642e0f01c3b9800000c00f3235001000000f30", 0x5f}], 0x1, 0x14, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_GET_LAPIC(r9, 0x8400ae8e, &(0x7f0000000400)) (rerun: 32) close_range(r8, r9, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000200)={@mcast1}, 0x14) (async) r10 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r10, 0xffffffff80000601, 0xee01, 0x0) (async, rerun: 64) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000100)={@hyper, 0x2}) (async, rerun: 64) r11 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 6.800991413s ago: executing program 7 (id=7019): io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000002060108000000000000000000000000050005000a0000c4050001000700000005000400000000000900020073797a31000000000c0003"], 0x44}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x400, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x9, 0x81, 0xd1, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400dc}, 0x44840) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000a0000b4bf769aafcc43b7f900080000002200000c0000000000000000000000005f00f2d75b34a6ad04f51230ed8dda482ccb21a3b9420049d924c437b8113823d3975f3f76635939e96e8bab5e427385471d9eca7811c3bd4736124e97e3"], 0x0, 0x2e}, 0x28) bind$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000080)='wlan0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1b, 0x1a, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000000)="94", 0x1}, {0x0}, {&(0x7f00000000c0)="54269795ebcc9b5a1dabef7ca539d6d2bcd2823fb7a453d5", 0x18}, {&(0x7f0000000740)="d82f7abfce654089dd7b6d016cf4a994df24d093e66c358a728f7070fa3164ad6bf4ca93d54bdbb982a80ebec301bfe89e14bdd2d4ee6c6b8125fdf1c182871c0c21c036636af281a13c2d314ead591f0f49c79194623f1d94f7d184163aa4bf5392bed42af98196681ceac01c8916145e3d588f75920dcb561b18b26c2fc054f05000ed9445ea3b30cbfb183f2ac95f4c0378ef07fd173ced52ee204fed545f3b367234934a13ff6e3740f2bed5bf06a0c27dbe016fd915b01ce436c85b9d94ed38b145216457c39948", 0xca}], 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendmmsg(r8, &(0x7f00000029c0), 0x400006d, 0x20000004) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5.91923746s ago: executing program 8 (id=7020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000008210480000007895000000000000420000000000bdc71a9b340ef9a240ab12c80fe903eb454b49ba78d135695e6dcb76f9482e78afcecbd48429f45439"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r8, 0x111, 0x5, 0x5, 0x4) r9 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r10 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x25000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) r12 = syz_open_dev$swradio(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r12, 0x4020565a, &(0x7f0000000140)={0x6, 0x4, 0x2}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 5.705208388s ago: executing program 2 (id=7022): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000500)) 5.367393538s ago: executing program 2 (id=7023): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 4.716232537s ago: executing program 0 (id=7024): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = dup2(r0, r0) sendmsg$AUDIT_SET(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x3c, 0x3e9, 0x8, 0x70bd27, 0x25dfdbfe, {0x42, 0x1, 0x1, r1, 0x3ff, 0x7fff, 0x7, 0x8, 0x0, 0x8, 0x8}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x44000894) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) getpid() r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x22020600) socket(0x11, 0xa, 0xffffffd) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 4.215228422s ago: executing program 7 (id=7025): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r2 = syz_io_uring_setup(0x245, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x3, 0x22d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 4.101265577s ago: executing program 2 (id=7026): mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@delnexthop={0x17, 0x69, 0xb, 0x70bd28, 0x0, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}]}, 0x50}}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="e40000000201010800000000000000000a0a"], 0xe4}, 0x1, 0x0, 0x0, 0x8014}, 0x8010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001108000440000000150900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 3.941200291s ago: executing program 0 (id=7027): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) 3.827283852s ago: executing program 0 (id=7028): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000140)={0x4, 0x5, 0x58000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x100000001, r0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000200)={0xc, r4}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f00000003c0)={0xffffffffffffff68, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}}) fchmodat(r0, &(0x7f0000000080)='./file0\x00', 0xd2225bfdf06b6bfc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000280)={0x9}, 0x0) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000558000/0x4000)=nil) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = eventfd(0xfffff189) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000680)={0x1, r6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x0, 0x20004010) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) 3.339667915s ago: executing program 2 (id=7029): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0], 0x40}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r6, &(0x7f0000002640)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x158, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2f, 0x0, r3}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd29, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x67, 0x3, {{'deflate\x00'}, 0xf8, "6f85bf85a2fc88fd5132a7226878830e7135efbf027ac5cab808d6a4b3ab2c"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) 3.266306327s ago: executing program 8 (id=7030): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x400840, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @none}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) splice(r3, 0x0, r2, 0x0, 0x40006, 0x6) r4 = eventfd(0xc) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf8, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xab}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc8d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xca14}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x70000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x715}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa9b7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x801) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) dup(0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000840)) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0884113, &(0x7f0000000380)={0x1, 0x20, 0xfffffd0a, 0x10001, 0xfffffffffffffffd, 0x6, 0x5, 0x10, 0xfbfffffffffffffd, 0x200000000000009, 0x2, 0x1}) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r11, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000400)={0x40, 0xd8f84ce48bb67326, 0x1, "02"}, 0x0, 0x0}) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) readv(r7, &(0x7f0000000100)=[{&(0x7f00000005c0)=""/183, 0xb7}], 0x1) 3.214576839s ago: executing program 9 (id=7031): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x1}) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @adapter={0xffe, 0x3ff, 0x8001, 0xbd7f, 0x1}}]}) r3 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r3, 0x4}) write$eventfd(r3, &(0x7f0000000080)=0x430f, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9f"], 0x0, 0x58, 0x0, 0xa, 0x3}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xf}, &(0x7f0000000040)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="c80000000002010000000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010c00028005000100980000003c0003800c00028005000100890000002c00fb7f1400030000000000000000000000ffffac1e000114000400ff0100000000000800000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1414aa0c000280050001"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x808000, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYBLOB="1cd28d1c28e24b61e19efa3f5c04faae2c67726f75705f69643deb28699f6b110f2951d875ed9818b9b4a6ef92b750c92203bd0d6f3923178b0e0000000caaccb617e2fdbdb26bf788657b36c783a7439d5abd86a0dea684dd55aee15c21b5b48408d60500b17ee343569504b8c7dd0e2ac88bcbfb1c7dbf5ff046d098054a1bec14d42750e2c038c92c", @ANYRES8=r2]) read$FUSE(r9, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) 2.759652603s ago: executing program 0 (id=7032): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f00000003c0)={'\x00', 0x2, 0x0, 0xe}) ioprio_set$uid(0x3, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xff) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x14, 0xb, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) renameat2(r5, &(0x7f00000006c0)='./cgroup\x00', r5, &(0x7f00000003c0)='./mnt\x00', 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x7e) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) 2.707299433s ago: executing program 7 (id=7033): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0], 0x40}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r7, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x158, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2f, 0x0, r3}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd29, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x67, 0x3, {{'deflate\x00'}, 0xf8, "6f85bf85a2fc88fd5132a7226878830e7135efbf027ac5cab808d6a4b3ab2c"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) 1.786420609s ago: executing program 0 (id=7034): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001040), 0x802, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0xfffffffd, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$kcm(0x21, 0x2, 0xa) close_range(r6, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r1, &(0x7f0000002640)={0x2020}, 0x2020) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x9cb, 0x6}, 0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x308, 0x0, 0x308, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x308}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) gettid() write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x118) 1.594965557s ago: executing program 2 (id=7035): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000580)=""/174, 0xae) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44011}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000308000540000000001c0008"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.359304364s ago: executing program 9 (id=7036): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="100000005304"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xc076) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x1, 0x103) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x8101}, 0x8800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00012abd70df252e00000006000400a2aa0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000001040), 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={0x0, &(0x7f0000000100)="62f820"}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r3, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000000004, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='qnx4\x00', 0x0, 0x0) 342.544878ms ago: executing program 0 (id=7037): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)}], 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x7ff}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)}], 0x1}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[], 0x44}, 0x1, 0x2}, 0x4000040) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.210011ms ago: executing program 9 (id=7038): r0 = fsopen(&(0x7f00000001c0)='bfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="fcffffff000000000000004d189070269e0b3b00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRES8=0x0, @ANYRESDEC=r4], 0x94}, 0x1, 0x0, 0x0, 0x4800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10000, 0x0) r9 = fanotify_init(0xf00, 0x1000) fanotify_mark(r9, 0x105, 0x1000003a, r8, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r9, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x80000000}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x53}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}]}, &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 8 (id=7039): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000002c0), 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffff00700000000000019078ac1e0001ac2d14aa030590780300000045000000000000008f50942ec5b3e15f00000000441c0003ac1e000100000000ac141400000000000000000000000000860600000000441c0003ac1414aa00000000ac1e000100000000ffff8816eedb0b45fc4358cf0b90cffcf158b1ad334974aea8576d2e1b04ffff00"/154], 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e24, 0x1, @local, 0xfffffffa}, 0x1c) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r7}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, '\a\x00'}, 0x10}, 0x2, 0x0, 0x0, 0x4080}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) kernel console output (not intermixed with test programs): ter (table count: 16). [ 2615.664821][T18321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2615.668963][T23014] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2615.681535][T12353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2615.694057][T23014] usb 8-1: media controller created [ 2615.702316][T23014] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2615.714772][T23014] dvb-usb: bulk message failed: -22 (6/0) [ 2615.726001][T23014] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2615.740076][T23014] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input83 [ 2615.757304][T23014] dvb-usb: schedule remote query interval to 150 msecs. [ 2615.765610][T23014] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2615.776640][T31166] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6642'. [ 2615.788204][ T30] audit: type=1400 audit(1768045785.455:794): avc: denied { write } for pid=31162 comm="syz.9.6642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2615.834118][T12488] usb 8-1: USB disconnect, device number 63 [ 2615.886718][T31172] nr0: entered allmulticast mode [ 2615.890834][ T30] audit: type=1400 audit(1768045785.555:795): avc: denied { ioctl } for pid=31162 comm="syz.9.6642" path="socket:[131409]" dev="sockfs" ino=131409 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2615.918037][T12488] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2616.016990][T23014] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 2616.103698][T23063] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2616.190662][T31152] delete_channel: no stack [ 2616.235818][T23014] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 2616.253159][T23014] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2616.263611][T23063] usb 3-1: Using ep0 maxpacket: 16 [ 2616.274994][T23014] usb 9-1: config 220 has an invalid descriptor of length 48, skipping remainder of the config [ 2616.278376][T23063] usb 3-1: config 255 has an invalid interface number: 245 but max is 3 [ 2616.285370][T23014] usb 9-1: config 220 has no interface number 2 [ 2616.285430][T23014] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2616.285461][T23014] usb 9-1: config 220 interface 0 has no altsetting 0 [ 2616.285481][T23014] usb 9-1: config 220 interface 76 has no altsetting 0 [ 2616.285501][T23014] usb 9-1: config 220 interface 1 has no altsetting 0 [ 2616.287613][T23014] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2616.334730][T23063] usb 3-1: config 255 has an invalid descriptor of length 176, skipping remainder of the config [ 2616.354345][T23014] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2616.362491][T23014] usb 9-1: Product: syz [ 2616.366764][T23014] usb 9-1: Manufacturer: syz [ 2616.371397][T23014] usb 9-1: SerialNumber: syz [ 2616.401698][T23063] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 4 [ 2616.417952][T23063] usb 3-1: config 255 has no interface number 0 [ 2616.426666][T23063] usb 3-1: config 255 interface 245 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2616.442206][T23063] usb 3-1: config 255 interface 245 has no altsetting 0 [ 2616.453521][T23063] usb 3-1: New USB device found, idVendor=0c52, idProduct=2222, bcdDevice=8d.fc [ 2616.462796][T23063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2616.472792][T23063] usb 3-1: Product: syz [ 2616.479538][T23063] usb 3-1: Manufacturer: syz [ 2616.484460][T23063] usb 3-1: SerialNumber: syz [ 2616.621177][T23014] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2616.636970][T23014] uvcvideo 9-1:220.0: No valid video chain found. [ 2616.655530][T23014] usb 9-1: selecting invalid altsetting 0 [ 2616.688682][T23014] usb 9-1: selecting invalid altsetting 0 [ 2616.714089][T23014] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 2616.755977][T23014] usb 9-1: USB disconnect, device number 23 [ 2616.813563][T12488] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 2616.848805][T23063] ftdi_sio 3-1:255.245: FTDI USB Serial Device converter detected [ 2616.868133][T23063] ftdi_sio ttyUSB0: unknown device type: 0x8dfc [ 2616.894938][T23063] usb 3-1: USB disconnect, device number 59 [ 2616.921774][T23063] ftdi_sio 3-1:255.245: device disconnected [ 2616.993289][T12488] usb 10-1: device descriptor read/64, error -71 [ 2617.244222][T12488] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 2617.382987][T12488] usb 10-1: device descriptor read/64, error -71 [ 2617.563351][T12488] usb usb10-port1: attempt power cycle [ 2617.826052][ T48] net_ratelimit: 6 callbacks suppressed [ 2617.826070][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2617.902751][T12488] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 2618.032886][T12488] usb 10-1: device descriptor read/8, error -71 [ 2618.702896][T12488] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 2618.902929][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2618.913726][T12488] usb 10-1: device descriptor read/8, error -71 [ 2619.412350][T21561] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2619.475157][T12488] usb usb10-port1: unable to enumerate USB device [ 2619.478495][T28578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2619.642263][T21561] usb 1-1: Using ep0 maxpacket: 32 [ 2619.658527][T21561] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 2619.670110][T21561] usb 1-1: config 0 has no interface number 0 [ 2619.678696][T21561] usb 1-1: config 0 interface 48 has no altsetting 0 [ 2619.695014][T21561] usb 1-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=74.d5 [ 2619.704679][T21561] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2619.716932][T21561] usb 1-1: Product: syz [ 2619.721236][T21561] usb 1-1: Manufacturer: syz [ 2619.885165][T21561] usb 1-1: SerialNumber: syz [ 2620.107701][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2620.142067][T19478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2620.151103][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2620.152932][T21561] usb 1-1: config 0 descriptor?? [ 2620.164493][T28578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2620.190447][T21561] HFC-S_USB 1-1:0.48: probe with driver HFC-S_USB failed with error -5 [ 2620.395180][T31199] fuse: Bad value for 'fd' [ 2620.402428][T31199] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 2620.783758][T19478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2620.792543][T28578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2620.801082][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2620.991422][T21561] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 2621.048040][T31222] bridge0: port 3(gretap0) entered blocking state [ 2621.056174][T31222] bridge0: port 3(gretap0) entered disabled state [ 2621.067213][T31222] gretap0: entered allmulticast mode [ 2621.108230][T31222] gretap0: entered promiscuous mode [ 2621.117397][T31222] bridge0: port 3(gretap0) entered blocking state [ 2621.124052][T31222] bridge0: port 3(gretap0) entered forwarding state [ 2621.472613][T21561] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2621.482691][T21561] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2621.502032][T21561] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2621.515556][T21561] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2621.537177][T21561] usb 10-1: Product: syz [ 2621.542434][T21561] usb 10-1: Manufacturer: syz [ 2621.547256][T21561] usb 10-1: SerialNumber: syz [ 2621.598456][T21561] usb 10-1: config 0 descriptor?? [ 2621.608498][T21561] usb 10-1: selecting invalid altsetting 0 [ 2621.900975][T31230] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6658'. [ 2623.261205][T21561] usb 1-1: USB disconnect, device number 85 [ 2623.365655][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2623.375991][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2623.384946][ T5821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2623.395548][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2623.403134][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2623.843326][T31241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6661'. [ 2624.066764][ T48] net_ratelimit: 2 callbacks suppressed [ 2624.066784][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2624.139628][T31233] lo speed is unknown, defaulting to 1000 [ 2625.017362][ T48] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 2625.224916][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2625.732793][T27605] Bluetooth: hci3: command tx timeout [ 2625.739904][T23014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2625.749025][ T48] usb 8-1: device descriptor read/64, error -71 [ 2625.756046][T23063] usb 10-1: USB disconnect, device number 33 [ 2625.827957][T31233] chnl_net:caif_netlink_parms(): no params data found [ 2625.909168][T24945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2625.917969][T21561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2625.934823][T12353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2625.953128][T31260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=31260 comm=syz.2.6665 [ 2625.988773][T23014] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2625.999007][ T48] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 2626.158587][T23014] usb 1-1: Using ep0 maxpacket: 32 [ 2626.158756][ T48] usb 8-1: device descriptor read/64, error -71 [ 2626.171675][T23014] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 2626.194840][T23014] usb 1-1: config 0 has no interface number 0 [ 2626.208915][T23014] usb 1-1: config 0 interface 48 has no altsetting 0 [ 2626.233569][T31233] bridge0: port 1(bridge_slave_0) entered blocking state [ 2626.243970][T23014] usb 1-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=74.d5 [ 2626.270478][T23014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2626.293093][T23014] usb 1-1: Product: syz [ 2626.299476][ T48] usb usb8-port1: attempt power cycle [ 2626.302952][T23014] usb 1-1: Manufacturer: syz [ 2626.309327][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2626.326667][T31233] bridge0: port 1(bridge_slave_0) entered disabled state [ 2626.329613][T23014] usb 1-1: SerialNumber: syz [ 2626.358839][T23014] usb 1-1: config 0 descriptor?? [ 2626.380638][T23014] HFC-S_USB 1-1:0.48: probe with driver HFC-S_USB failed with error -5 [ 2626.395026][T31233] bridge_slave_0: entered allmulticast mode [ 2626.423228][T31233] bridge_slave_0: entered promiscuous mode [ 2626.486037][T31233] bridge0: port 2(bridge_slave_1) entered blocking state [ 2626.509456][T31233] bridge0: port 2(bridge_slave_1) entered disabled state [ 2626.540679][T31233] bridge_slave_1: entered allmulticast mode [ 2626.576470][T31253] fuse: Bad value for 'fd' [ 2626.583300][T31253] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 2626.606620][T31233] bridge_slave_1: entered promiscuous mode [ 2626.718744][ T48] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 2626.779020][ T48] usb 8-1: device descriptor read/8, error -71 [ 2626.872356][T21649] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2626.923172][T21649] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2627.039951][ T48] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 2627.059949][ T48] usb 8-1: device descriptor read/8, error -71 [ 2627.076018][T31233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2627.168337][ T48] usb usb8-port1: unable to enumerate USB device [ 2627.189880][T21649] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2627.208397][T21649] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2627.465991][T31233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2627.484511][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2627.672069][T21649] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2627.687902][T21649] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2627.818534][T27605] Bluetooth: hci3: command tx timeout [ 2627.828634][T21649] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2627.839206][T21649] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2627.858772][T31233] team0: Port device team_slave_0 added [ 2627.891667][T31233] team0: Port device team_slave_1 added [ 2627.901219][T31279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6670'. [ 2628.110206][T23014] usb 1-1: USB disconnect, device number 86 [ 2628.185571][T31233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2628.218925][T31233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2628.366704][T31233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2628.389187][T31233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2628.396116][T31233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2628.955182][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2628.963637][T31233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2628.990397][T12353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2629.047317][T23014] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2629.287606][T23014] usb 1-1: Using ep0 maxpacket: 32 [ 2629.298408][T23014] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 2629.310070][T23014] usb 1-1: config 0 has no interface number 0 [ 2629.322865][T23014] usb 1-1: config 0 interface 48 has no altsetting 0 [ 2629.896822][T27605] Bluetooth: hci3: command tx timeout [ 2629.934203][T31292] can0: slcan on ttyS3. [ 2629.958785][T31233] hsr_slave_0: entered promiscuous mode [ 2629.966100][T31233] hsr_slave_1: entered promiscuous mode [ 2629.979761][T23014] usb 1-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=74.d5 [ 2629.982100][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2630.007840][T31293] can0 (unregistered): slcan off ttyS3. [ 2630.012999][T23014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2630.033972][T23014] usb 1-1: Product: syz [ 2630.086105][T31233] debugfs: 'hsr0' already exists in 'hsr' [ 2630.095042][T31233] Cannot create hsr debugfs directory [ 2630.115241][T23014] usb 1-1: Manufacturer: syz [ 2630.140849][T23014] usb 1-1: SerialNumber: syz [ 2630.215148][T23014] usb 1-1: config 0 descriptor?? [ 2630.229726][T23014] HFC-S_USB 1-1:0.48: probe with driver HFC-S_USB failed with error -5 [ 2630.358291][T21649] bridge_slave_1: left allmulticast mode [ 2630.364188][T21649] bridge_slave_1: left promiscuous mode [ 2630.391729][T21649] bridge0: port 2(bridge_slave_1) entered disabled state [ 2630.433351][T31284] fuse: Bad value for 'fd' [ 2630.440849][T31284] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 2630.465371][T21649] bridge_slave_0: left allmulticast mode [ 2630.495492][T21649] bridge_slave_0: left promiscuous mode [ 2630.524604][T21649] bridge0: port 1(bridge_slave_0) entered disabled state [ 2631.139130][T31306] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2631.168155][T31306] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6676'. [ 2631.921192][T28782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2631.941872][ T1026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2631.951149][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2632.137449][T23014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2632.153706][T23014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2632.154112][T27605] Bluetooth: hci3: command tx timeout [ 2632.233640][T21561] usb 1-1: USB disconnect, device number 87 [ 2632.946107][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2633.978534][T28782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2634.611187][T21649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2634.637599][T21649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2634.672645][T21649] bond0 (unregistering): Released all slaves [ 2634.727150][T31330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2634.751555][T31330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2635.070412][T23063] net_ratelimit: 5 callbacks suppressed [ 2635.070430][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2635.165295][T21649] bond1 (unregistering): Released all slaves [ 2635.184518][T12353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2635.193470][T31326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2636.092926][T31333] netlink: 208 bytes leftover after parsing attributes in process `syz.0.6682'. [ 2636.382404][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2636.671141][T31338] Process accounting resumed [ 2636.732759][T31343] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6685'. [ 2637.349020][T31345] qnx4: unable to read the superblock [ 2637.417408][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2637.691760][T31350] loop5: detected capacity change from 0 to 7 [ 2637.730425][T31343] lo speed is unknown, defaulting to 1000 [ 2637.819056][ C1] blk_print_req_error: 136 callbacks suppressed [ 2637.819089][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2637.834994][ C1] buffer_io_error: 6 callbacks suppressed [ 2637.835013][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2638.189721][ T6247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2638.200559][T12353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2638.209206][T23014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2638.219585][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2638.225296][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2638.242832][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2638.252436][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 2638.266975][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2638.276575][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 2638.284895][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2638.294477][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 2638.302782][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2638.312334][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 2638.324935][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2638.334530][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 2638.344463][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2638.354065][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 2638.362154][T31350] ldm_validate_partition_table(): Disk read failed. [ 2638.416222][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2638.425797][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2638.451088][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2638.460727][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 2638.466671][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2638.468994][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 2638.485669][T31350] Dev loop5: unable to read RDB block 0 [ 2638.506055][T31350] loop5: unable to read partition table [ 2638.511771][T31350] loop5: partition table beyond EOD, truncated [ 2638.521309][T31350] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 2638.553116][T21649] hsr_slave_0: left promiscuous mode [ 2638.562214][T21649] hsr_slave_1: left promiscuous mode [ 2638.601153][T21649] veth1_macvtap: left promiscuous mode [ 2638.606746][T21649] veth0_macvtap: left promiscuous mode [ 2638.612713][T21649] veth1_vlan: left promiscuous mode [ 2638.618012][T21649] veth0_vlan: left promiscuous mode [ 2640.769945][T23063] net_ratelimit: 1 callbacks suppressed [ 2640.769962][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2640.894178][T21649] team0 (unregistering): Port device team_slave_1 removed [ 2640.952087][T21649] team0 (unregistering): Port device team_slave_0 removed [ 2640.991477][T31381] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.6694'. [ 2641.251312][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2641.351122][T23063] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2641.491019][T23063] usb 3-1: device descriptor read/64, error -71 [ 2641.811012][T23063] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2641.834565][T28782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2642.011142][T23063] usb 3-1: device descriptor read/64, error -71 [ 2642.207984][T31394] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2642.405683][T31394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6696'. [ 2642.505184][T23063] usb usb3-port1: attempt power cycle [ 2642.570473][T28782] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 2642.754765][T28782] usb 8-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6 [ 2642.770284][T28782] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2642.778277][T28782] usb 8-1: Product: syz [ 2642.801053][T28782] usb 8-1: Manufacturer: syz [ 2642.805643][T28782] usb 8-1: SerialNumber: syz [ 2642.863417][T23063] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2642.871203][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2642.900975][T23063] usb 3-1: device descriptor read/8, error -71 [ 2643.160151][T23063] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2643.210771][T23063] usb 3-1: device descriptor read/8, error -71 [ 2643.340097][T23063] usb usb3-port1: unable to enumerate USB device [ 2643.812451][T17032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2643.822550][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2643.835240][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2643.894170][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2644.171207][T31397] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6698'. [ 2644.290719][T23014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2644.303451][T18608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2645.204260][T28782] pwc: Visionite VCS-UC300 USB webcam detected. [ 2645.211110][T31233] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2645.226612][T28782] pwc: Failed to set LED on/off time (-71) [ 2645.239848][T28782] pwc: send_video_command error -71 [ 2645.259153][T28782] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2645.278890][T31399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6700'. [ 2645.287925][T28782] Philips webcam 8-1:5.0: probe with driver Philips webcam failed with error -71 [ 2645.321656][T31233] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2645.323237][T28782] usb 8-1: USB disconnect, device number 68 [ 2645.443465][T31405] Mount JFS Failure: -5 [ 2645.821583][T31233] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2645.942707][T31403] qnx4: unable to read the superblock [ 2645.953163][T21649] IPVS: stop unused estimator thread 0... [ 2645.971115][T31233] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2646.186258][T31233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2646.216149][T31233] 8021q: adding VLAN 0 to HW filter on device team0 [ 2646.218963][T28782] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2646.245829][T23063] net_ratelimit: 3 callbacks suppressed [ 2646.245845][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2646.274257][T16008] bridge0: port 1(bridge_slave_0) entered blocking state [ 2646.281357][T16008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2646.304699][T16008] bridge0: port 2(bridge_slave_1) entered blocking state [ 2646.311778][T16008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2646.406602][T28782] usb 3-1: device descriptor read/64, error -71 [ 2646.785112][T28782] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2646.928827][T28782] usb 3-1: device descriptor read/64, error -71 [ 2647.038532][T28782] usb usb3-port1: attempt power cycle [ 2647.267401][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2647.361724][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2647.418035][T28782] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2647.438651][T28782] usb 3-1: device descriptor read/8, error -71 [ 2647.527925][ T48] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2647.655661][T31233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2647.688472][T28782] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2647.697483][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 2647.723888][T28782] usb 3-1: device descriptor read/8, error -71 [ 2647.751519][ T48] usb 1-1: config index 0 descriptor too short (expected 2066, got 18) [ 2647.929917][T28782] usb usb3-port1: unable to enumerate USB device [ 2647.988542][ T48] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2648.037955][T23063] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 2648.097429][ T48] usb 1-1: New USB device strings: Mfr=1, Product=253, SerialNumber=2 [ 2648.139230][ T48] usb 1-1: Product: syz [ 2648.143416][ T48] usb 1-1: Manufacturer: syz [ 2648.157722][ T48] usb 1-1: SerialNumber: syz [ 2648.195254][ T48] usb 1-1: config 0 descriptor?? [ 2648.257591][T23063] usb 10-1: Using ep0 maxpacket: 32 [ 2648.271010][T23063] usb 10-1: config 0 has an invalid interface number: 48 but max is 0 [ 2648.299559][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2648.299934][T23063] usb 10-1: config 0 has no interface number 0 [ 2648.305854][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2648.321893][T28782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2648.357579][T23063] usb 10-1: config 0 interface 48 has no altsetting 0 [ 2648.376891][T23063] usb 10-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=74.d5 [ 2648.399449][T23063] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2648.416837][ T10] usb 1-1: USB disconnect, device number 88 [ 2648.417548][T23063] usb 10-1: Product: syz [ 2648.440696][T23063] usb 10-1: Manufacturer: syz [ 2648.446150][T23063] usb 10-1: SerialNumber: syz [ 2648.606478][T23063] usb 10-1: config 0 descriptor?? [ 2648.616454][T23063] HFC-S_USB 10-1:0.48: probe with driver HFC-S_USB failed with error -5 [ 2648.839686][T31443] fuse: Bad value for 'fd' [ 2648.915056][T31443] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 2648.964986][T27605] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2649.099030][T31233] veth0_vlan: entered promiscuous mode [ 2649.117620][T31233] veth1_vlan: entered promiscuous mode [ 2649.271576][T31457] netlink: 208 bytes leftover after parsing attributes in process `syz.7.6709'. [ 2649.586725][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2649.674078][T31233] veth0_macvtap: entered promiscuous mode [ 2649.702122][T31233] veth1_macvtap: entered promiscuous mode [ 2649.734024][T31461] FAULT_INJECTION: forcing a failure. [ 2649.734024][T31461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2649.764914][T31461] CPU: 0 UID: 0 PID: 31461 Comm: syz.0.6710 Tainted: G L syzkaller #0 PREEMPT(full) [ 2649.764948][T31461] Tainted: [L]=SOFTLOCKUP [ 2649.764955][T31461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2649.764968][T31461] Call Trace: [ 2649.764975][T31461] [ 2649.764983][T31461] dump_stack_lvl+0x16c/0x1f0 [ 2649.765016][T31461] should_fail_ex+0x512/0x640 [ 2649.765049][T31461] _copy_from_user+0x2e/0xd0 [ 2649.765079][T31461] kvm_arch_vm_ioctl+0xf86/0x18b0 [ 2649.765114][T31461] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 2649.765153][T31461] ? __lock_acquire+0x436/0x2890 [ 2649.765192][T31461] ? __lock_acquire+0x436/0x2890 [ 2649.765221][T31461] ? __lock_acquire+0x436/0x2890 [ 2649.765268][T31461] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2649.765293][T31461] ? is_bpf_text_address+0x94/0x1a0 [ 2649.765318][T31461] ? kernel_text_address+0x8d/0x100 [ 2649.765346][T31461] ? __kernel_text_address+0xd/0x40 [ 2649.765372][T31461] ? unwind_get_return_address+0x59/0xa0 [ 2649.765400][T31461] ? arch_stack_walk+0xa6/0x100 [ 2649.765437][T31461] ? stack_trace_save+0x8e/0xc0 [ 2649.765458][T31461] ? __pfx_stack_trace_save+0x10/0x10 [ 2649.765482][T31461] ? stack_depot_save_flags+0x29/0x9b0 [ 2649.765510][T31461] ? __lock_acquire+0x436/0x2890 [ 2649.765537][T31461] ? kasan_save_stack+0x42/0x60 [ 2649.765558][T31461] ? kasan_save_stack+0x33/0x60 [ 2649.765579][T31461] ? kasan_save_track+0x14/0x30 [ 2649.765602][T31461] ? kasan_save_free_info+0x3b/0x60 [ 2649.765619][T31461] ? __kasan_slab_free+0x5f/0x80 [ 2649.765643][T31461] ? kfree+0x2f8/0x6e0 [ 2649.765660][T31461] ? tomoyo_path_number_perm+0x470/0x580 [ 2649.765685][T31461] ? security_file_ioctl+0x9b/0x240 [ 2649.765711][T31461] ? __x64_sys_ioctl+0xb7/0x210 [ 2649.765733][T31461] ? do_syscall_64+0xcd/0xf80 [ 2649.765765][T31461] kvm_vm_ioctl+0x1b03/0x4090 [ 2649.765807][T31461] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 2649.765850][T31461] ? kasan_quarantine_put+0x10a/0x240 [ 2649.765875][T31461] ? lockdep_hardirqs_on+0x7c/0x110 [ 2649.765909][T31461] ? find_held_lock+0x2b/0x80 [ 2649.765941][T31461] ? tomoyo_path_number_perm+0x295/0x580 [ 2649.765969][T31461] ? tomoyo_path_number_perm+0x18d/0x580 [ 2649.765997][T31461] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2649.766023][T31461] ? find_held_lock+0x2b/0x80 [ 2649.766059][T31461] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2649.766087][T31461] ? do_vfs_ioctl+0x128/0x14f0 [ 2649.766110][T31461] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2649.766135][T31461] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2649.766174][T31461] ? hook_file_ioctl_common+0x144/0x410 [ 2649.766213][T31461] ? selinux_file_ioctl+0x180/0x270 [ 2649.766239][T31461] ? selinux_file_ioctl+0xb4/0x270 [ 2649.766268][T31461] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 2649.766297][T31461] __x64_sys_ioctl+0x18e/0x210 [ 2649.766322][T31461] do_syscall_64+0xcd/0xf80 [ 2649.766349][T31461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2649.766371][T31461] RIP: 0033:0x7f4962d8f749 [ 2649.766388][T31461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2649.766408][T31461] RSP: 002b:00007f4963ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2649.766427][T31461] RAX: ffffffffffffffda RBX: 00007f4962fe5fa0 RCX: 00007f4962d8f749 [ 2649.766439][T31461] RDX: 0000200000000180 RSI: 00000000400caed0 RDI: 0000000000000004 [ 2649.766453][T31461] RBP: 00007f4963ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 2649.766467][T31461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2649.766480][T31461] R13: 00007f4962fe6038 R14: 00007f4962fe5fa0 R15: 00007ffff15a94e8 [ 2649.766502][T31233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2649.766511][T31461] [ 2650.139770][T31233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2650.155743][T16008] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2650.176285][T16008] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2650.218294][T16008] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2650.253007][T16008] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2650.297239][T16008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2650.318270][T16008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2650.377088][T18276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2650.385008][T18276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2650.510218][T23014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2650.536139][T28782] usb 10-1: USB disconnect, device number 34 [ 2650.587406][T23063] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2650.639266][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2650.786466][T23063] usb 3-1: Using ep0 maxpacket: 16 [ 2650.813744][T23063] usb 3-1: config 255 has an invalid interface number: 245 but max is 3 [ 2650.893803][T23063] usb 3-1: config 255 has an invalid descriptor of length 176, skipping remainder of the config [ 2650.978555][T23063] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 4 [ 2650.994036][T23063] usb 3-1: config 255 has no interface number 0 [ 2651.103070][T23063] usb 3-1: config 255 interface 245 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2651.117288][T23063] usb 3-1: config 255 interface 245 has no altsetting 0 [ 2651.126806][T23063] usb 3-1: New USB device found, idVendor=0c52, idProduct=2222, bcdDevice=8d.fc [ 2651.137107][T23063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2651.145101][T23063] usb 3-1: Product: syz [ 2651.149420][T23063] usb 3-1: Manufacturer: syz [ 2651.154052][T23063] usb 3-1: SerialNumber: syz [ 2651.206345][T23014] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 2651.226962][ T10] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 2651.379811][T23014] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2651.390740][T23014] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2651.407669][ T10] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2651.419506][T23014] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2651.431961][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2651.441682][T23014] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2651.453168][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2651.464230][T23014] usb 1-1: Product: syz [ 2651.468559][T23014] usb 1-1: Manufacturer: syz [ 2651.473249][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2651.481672][T23014] usb 1-1: SerialNumber: syz [ 2651.488347][ T10] usb 9-1: Product: syz [ 2651.493893][T23014] usb 1-1: config 0 descriptor?? [ 2651.499077][ T10] usb 9-1: Manufacturer: syz [ 2651.504479][ T10] usb 9-1: SerialNumber: syz [ 2651.507888][T23014] usb 1-1: selecting invalid altsetting 0 [ 2651.520518][ T10] usb 9-1: config 0 descriptor?? [ 2651.551898][ T10] usb 9-1: selecting invalid altsetting 0 [ 2651.647385][T28782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2652.639849][T31488] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6718'. [ 2653.102199][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2653.349374][T23063] ftdi_sio 3-1:255.245: FTDI USB Serial Device converter detected [ 2653.378401][T23063] ftdi_sio ttyUSB0: unknown device type: 0x8dfc [ 2653.389589][ T10] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 2653.410831][T23063] usb 3-1: USB disconnect, device number 68 [ 2653.535006][ T10] usb 10-1: device descriptor read/64, error -71 [ 2653.537839][T23063] ftdi_sio 3-1:255.245: device disconnected [ 2653.552915][T12353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2653.566209][T23014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2653.669799][T31493] bridge3: entered promiscuous mode [ 2653.680510][T31493] bridge3: entered allmulticast mode [ 2653.846110][ T10] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 2654.082964][T23014] usb 1-1: USB disconnect, device number 89 [ 2654.222825][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2654.236296][T21561] usb 9-1: USB disconnect, device number 24 [ 2654.304549][ T10] usb 10-1: device descriptor read/64, error -71 [ 2655.381304][ T10] usb usb10-port1: attempt power cycle [ 2655.402197][T28782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2655.514295][T23063] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2655.873817][ T10] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 2655.893778][T23063] usb 3-1: device descriptor read/64, error -71 [ 2656.165282][T23063] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2656.181348][ T10] usb 10-1: device not accepting address 37, error -71 [ 2656.708439][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2656.745098][T28578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2656.949671][T31514] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6725'. [ 2657.844085][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2658.074063][T31518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=31518 comm=syz.9.6726 [ 2659.004238][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2659.202691][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2659.214327][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2659.223270][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2659.231093][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2659.238905][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2659.577528][T31524] lo speed is unknown, defaulting to 1000 [ 2659.868218][T18608] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2659.895364][T28578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2660.363807][ T10] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2660.450642][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2660.611962][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 2660.634731][ T30] audit: type=1400 audit(1768045830.327:796): avc: denied { lock } for pid=31533 comm="syz.8.6730" path="socket:[134785]" dev="sockfs" ino=134785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2660.641454][ T10] usb 1-1: config 255 has an invalid interface number: 245 but max is 3 [ 2660.683748][T18608] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2660.756175][ T10] usb 1-1: config 255 has an invalid descriptor of length 176, skipping remainder of the config [ 2660.801320][ T10] usb 1-1: config 255 has 1 interface, different from the descriptor's value: 4 [ 2660.830871][ T10] usb 1-1: config 255 has no interface number 0 [ 2660.848650][ T10] usb 1-1: config 255 interface 245 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2660.870792][T31524] chnl_net:caif_netlink_parms(): no params data found [ 2660.892961][ T10] usb 1-1: config 255 interface 245 has no altsetting 0 [ 2660.918929][ T10] usb 1-1: New USB device found, idVendor=0c52, idProduct=2222, bcdDevice=8d.fc [ 2660.948348][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2660.977708][ T10] usb 1-1: Product: syz [ 2661.010996][ T10] usb 1-1: Manufacturer: syz [ 2661.020443][ T10] usb 1-1: SerialNumber: syz [ 2661.034495][T18608] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2661.342417][T18608] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2661.426462][T27605] Bluetooth: hci2: command tx timeout [ 2661.763016][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2661.891197][T23063] usb 3-1: device descriptor read/64, error -110 [ 2661.968025][T31524] bridge0: port 1(bridge_slave_0) entered blocking state [ 2661.994025][T31524] bridge0: port 1(bridge_slave_0) entered disabled state [ 2662.012089][T31524] bridge_slave_0: entered allmulticast mode [ 2662.020943][T23063] usb usb3-port1: attempt power cycle [ 2662.032225][T31524] bridge_slave_0: entered promiscuous mode [ 2662.049196][T31548] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 2662.051327][T31524] bridge0: port 2(bridge_slave_1) entered blocking state [ 2662.083654][T31524] bridge0: port 2(bridge_slave_1) entered disabled state [ 2662.122286][T31524] bridge_slave_1: entered allmulticast mode [ 2662.129454][T31524] bridge_slave_1: entered promiscuous mode [ 2662.272126][T31524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2662.281970][T31550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31550 comm=syz.8.6734 [ 2662.307138][T31524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2662.361878][T18608] gretap0: left allmulticast mode [ 2662.367053][T18608] gretap0: left promiscuous mode [ 2662.380631][T18608] bridge0: port 3(gretap0) entered disabled state [ 2662.390851][T23063] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2662.437427][T18608] bridge_slave_1: left allmulticast mode [ 2662.447901][T18608] bridge_slave_1: left promiscuous mode [ 2662.586295][T18608] bridge0: port 2(bridge_slave_1) entered disabled state [ 2662.620602][T23063] usb 3-1: device not accepting address 71, error -71 [ 2662.629513][T18608] bridge_slave_0: left allmulticast mode [ 2662.635319][T18608] bridge_slave_0: left promiscuous mode [ 2662.640976][ T24] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 2662.649228][T18608] bridge0: port 1(bridge_slave_0) entered disabled state [ 2662.993123][T28578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2663.002747][T23014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2663.127317][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2663.192258][ T24] usb 9-1: device descriptor read/64, error -71 [ 2663.232236][ T10] ftdi_sio 1-1:255.245: FTDI USB Serial Device converter detected [ 2663.275925][ T10] ftdi_sio ttyUSB0: unknown device type: 0x8dfc [ 2663.341114][ T10] usb 1-1: USB disconnect, device number 90 [ 2663.369479][ T10] ftdi_sio 1-1:255.245: device disconnected [ 2663.480122][T27605] Bluetooth: hci2: command tx timeout [ 2663.552843][T31568] fuse: Unknown parameter '0xffffffffffffffff' [ 2664.085592][ T24] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 2664.197201][T31568] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6739'. [ 2664.218754][T31560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2664.234274][ T24] usb 9-1: device descriptor read/64, error -71 [ 2664.369721][ T24] usb usb9-port1: attempt power cycle [ 2664.735177][ T24] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 2664.785749][ T24] usb 9-1: device descriptor read/8, error -71 [ 2665.029351][ T24] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 2665.046589][T31575] Mount JFS Failure: -5 [ 2665.230134][ T24] usb 9-1: device descriptor read/8, error -71 [ 2665.251442][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2665.359269][ T24] usb usb9-port1: unable to enumerate USB device [ 2665.558964][T27605] Bluetooth: hci2: command tx timeout [ 2665.806172][T31579] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2666.018497][T31579] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 2666.029814][T31579] overlayfs: failed to look up (tracing) for ino (-66) [ 2666.244862][ T30] audit: type=1400 audit(1768045835.490:797): avc: denied { mount } for pid=31576 comm="syz.8.6741" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2666.301779][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2666.679938][ T8127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2666.965616][T18608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2666.978086][T18608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2666.989462][T18608] bond0 (unregistering): Released all slaves [ 2667.127881][T18608] bond1 (unregistering): (slave veth3): Releasing active interface [ 2667.140343][T18608] bond1 (unregistering): Released all slaves [ 2667.271255][ T30] audit: type=1400 audit(1768045836.961:798): avc: denied { unmount } for pid=31233 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2667.328153][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2667.568365][T18608] tipc: Left network mode [ 2667.574365][T31524] team0: Port device team_slave_0 added [ 2667.864951][T27605] Bluetooth: hci2: command tx timeout [ 2667.882582][T31524] team0: Port device team_slave_1 added [ 2667.946183][T31524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2667.953420][T31524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2667.980821][T31524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2668.040577][T31524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2668.047852][T31524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2668.074724][T31524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2669.349274][T31524] hsr_slave_0: entered promiscuous mode [ 2669.360609][T31524] hsr_slave_1: entered promiscuous mode [ 2669.366877][T31524] debugfs: 'hsr0' already exists in 'hsr' [ 2669.372825][T31524] Cannot create hsr debugfs directory [ 2669.382402][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2669.704374][T31605] bridge12: entered promiscuous mode [ 2669.717241][T31605] bridge12: entered allmulticast mode [ 2669.790252][T18608] hsr_slave_0: left promiscuous mode [ 2669.863612][T18608] veth1_macvtap: left allmulticast mode [ 2669.887766][T28578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2669.891470][T18608] veth1_macvtap: left promiscuous mode [ 2669.949386][T18608] veth0_macvtap: left promiscuous mode [ 2669.996175][T18608] veth1_vlan: left promiscuous mode [ 2670.026905][T18608] veth0_vlan: left promiscuous mode [ 2670.146703][T28578] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2670.326600][T28578] usb 1-1: device descriptor read/64, error -71 [ 2670.451031][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2670.566608][T28578] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2670.692502][T23063] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 2670.736407][T28578] usb 1-1: device descriptor read/64, error -71 [ 2670.878096][T28578] usb usb1-port1: attempt power cycle [ 2671.326043][T23063] usb 10-1: device descriptor read/64, error -71 [ 2671.349723][T28578] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2671.386666][T28578] usb 1-1: device descriptor read/8, error -71 [ 2671.480735][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2672.671242][T31560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2672.680193][T12353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2672.688508][T28578] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 2672.735391][T23063] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 2672.916073][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2673.275066][ T10] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 2673.428362][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 2673.455487][ T10] usb 9-1: config 255 has an invalid interface number: 245 but max is 3 [ 2673.463881][ T10] usb 9-1: config 255 has an invalid descriptor of length 176, skipping remainder of the config [ 2673.504933][ T10] usb 9-1: config 255 has 1 interface, different from the descriptor's value: 4 [ 2673.522355][ T10] usb 9-1: config 255 has no interface number 0 [ 2673.536403][ T10] usb 9-1: config 255 interface 245 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2673.574979][ T10] usb 9-1: config 255 interface 245 has no altsetting 0 [ 2673.595073][ T10] usb 9-1: New USB device found, idVendor=0c52, idProduct=2222, bcdDevice=8d.fc [ 2673.604169][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2673.664858][ T10] usb 9-1: Product: syz [ 2673.669105][ T10] usb 9-1: Manufacturer: syz [ 2673.673717][ T10] usb 9-1: SerialNumber: syz [ 2673.719856][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2673.785324][T18608] team0 (unregistering): Port device team_slave_1 removed [ 2673.992770][T18608] team0 (unregistering): Port device team_slave_0 removed [ 2674.158962][T31628] FAULT_INJECTION: forcing a failure. [ 2674.158962][T31628] name failslab, interval 1, probability 0, space 0, times 0 [ 2674.171748][T31628] CPU: 0 UID: 0 PID: 31628 Comm: syz.2.6751 Tainted: G L syzkaller #0 PREEMPT(full) [ 2674.171783][T31628] Tainted: [L]=SOFTLOCKUP [ 2674.171792][T31628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2674.171805][T31628] Call Trace: [ 2674.171815][T31628] [ 2674.171825][T31628] dump_stack_lvl+0x16c/0x1f0 [ 2674.171860][T31628] should_fail_ex+0x512/0x640 [ 2674.171892][T31628] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 2674.171919][T31628] should_failslab+0xc2/0x120 [ 2674.171949][T31628] kmem_cache_alloc_node_noprof+0x86/0x800 [ 2674.171972][T31628] ? __alloc_skb+0x156/0x410 [ 2674.171999][T31628] ? __alloc_skb+0x156/0x410 [ 2674.172017][T31628] __alloc_skb+0x156/0x410 [ 2674.172035][T31628] ? __alloc_skb+0x35d/0x410 [ 2674.172054][T31628] ? __pfx___alloc_skb+0x10/0x10 [ 2674.172093][T31628] ? netlink_autobind.isra.0+0x158/0x370 [ 2674.172130][T31628] netlink_alloc_large_skb+0x69/0x140 [ 2674.172160][T31628] netlink_sendmsg+0x698/0xdd0 [ 2674.172193][T31628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2674.172232][T31628] ____sys_sendmsg+0xa5d/0xc30 [ 2674.172263][T31628] ? copy_msghdr_from_user+0x10a/0x160 [ 2674.172287][T31628] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2674.172330][T31628] ___sys_sendmsg+0x134/0x1d0 [ 2674.172355][T31628] ? __pfx____sys_sendmsg+0x10/0x10 [ 2674.172416][T31628] __sys_sendmsg+0x16d/0x220 [ 2674.172441][T31628] ? __pfx___sys_sendmsg+0x10/0x10 [ 2674.172483][T31628] do_syscall_64+0xcd/0xf80 [ 2674.172516][T31628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2674.172538][T31628] RIP: 0033:0x7f5c1d98f749 [ 2674.172556][T31628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2674.172576][T31628] RSP: 002b:00007f5c1e7db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2674.172599][T31628] RAX: ffffffffffffffda RBX: 00007f5c1dbe6180 RCX: 00007f5c1d98f749 [ 2674.172614][T31628] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000008 [ 2674.172628][T31628] RBP: 00007f5c1e7db090 R08: 0000000000000000 R09: 0000000000000000 [ 2674.172642][T31628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2674.172655][T31628] R13: 00007f5c1dbe6218 R14: 00007f5c1dbe6180 R15: 00007ffc7899bd78 [ 2674.172686][T31628] [ 2674.780375][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2675.771632][T28578] usb 1-1: device descriptor read/8, error -71 [ 2675.803375][T31560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2675.894316][T28578] usb usb1-port1: unable to enumerate USB device [ 2675.964241][T21561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2676.045508][ T10] ftdi_sio 9-1:255.245: FTDI USB Serial Device converter detected [ 2676.065759][ T10] ftdi_sio ttyUSB0: unknown device type: 0x8dfc [ 2676.075652][ T10] usb 9-1: USB disconnect, device number 29 [ 2676.082638][ T10] ftdi_sio 9-1:255.245: device disconnected [ 2676.109945][T31610] bridge7: entered promiscuous mode [ 2676.115807][T31610] bridge7: entered allmulticast mode [ 2676.193656][T28578] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2676.433778][T28578] usb 1-1: Using ep0 maxpacket: 8 [ 2676.446435][T28578] usb 1-1: config 1 has an invalid interface number: 133 but max is 0 [ 2676.454829][T28578] usb 1-1: config 1 has no interface number 0 [ 2676.460979][T28578] usb 1-1: config 1 interface 133 altsetting 4 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 2676.801176][T18608] IPVS: stop unused estimator thread 0... [ 2676.839948][ T10] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 2676.847084][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2676.847561][T28578] usb 1-1: config 1 interface 133 has no altsetting 0 [ 2676.871504][T28578] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=40.f3 [ 2676.881811][T28578] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2677.041275][ T10] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2677.051226][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2677.059928][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2677.068998][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2677.077663][ T10] usb 9-1: Product: syz [ 2677.081965][ T10] usb 9-1: Manufacturer: syz [ 2677.087261][ T10] usb 9-1: SerialNumber: syz [ 2677.674197][ T10] usb 9-1: config 0 descriptor?? [ 2677.691787][ T10] usb 9-1: selecting invalid altsetting 0 [ 2677.701139][T28578] usb 1-1: string descriptor 0 read error: -71 [ 2677.727227][T28578] usb 1-1: USB disconnect, device number 95 [ 2678.881461][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2678.947936][T31524] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2678.972031][T31524] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2678.993211][T28578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2679.017273][T31524] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2679.064257][T31524] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2679.249351][T31524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2679.302535][T31524] 8021q: adding VLAN 0 to HW filter on device team0 [ 2679.328088][ T3692] bridge0: port 1(bridge_slave_0) entered blocking state [ 2679.335172][ T3692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2679.386891][ T30] audit: type=1400 audit(1768045849.087:799): avc: denied { write } for pid=31658 comm="syz.2.6761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2679.431867][ T3692] bridge0: port 2(bridge_slave_1) entered blocking state [ 2679.439257][ T3692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2679.955044][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2680.439524][T31524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2680.474091][ T6764] usb 9-1: USB disconnect, device number 30 [ 2680.845146][T31687] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.6764'. [ 2681.624442][T31686] Mount JFS Failure: -5 [ 2681.664896][T31560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2681.946011][T31699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=31699 comm=syz.9.6767 [ 2682.031310][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2682.191208][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2682.732496][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2684.047219][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2684.228442][T31524] veth0_vlan: entered promiscuous mode [ 2684.264996][T31524] veth1_vlan: entered promiscuous mode [ 2684.316609][T31524] veth0_macvtap: entered promiscuous mode [ 2684.345740][T31524] veth1_macvtap: entered promiscuous mode [ 2684.376392][ T30] audit: type=1400 audit(1768045854.069:800): avc: denied { read write } for pid=31715 comm="syz.8.6772" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2684.451794][T31524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2684.489618][ T30] audit: type=1400 audit(1768045854.069:801): avc: denied { open } for pid=31715 comm="syz.8.6772" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2684.519170][T31524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2684.550798][ T3692] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2684.603079][ T3692] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2684.702843][ T3692] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2684.792142][ T6247] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2684.884663][ T6000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2684.895547][ T6000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2684.979327][ T8127] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 2685.003996][T21649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2685.020318][T21649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2685.073929][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2685.082071][T21506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2685.091876][T21561] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 2685.125516][ T30] audit: type=1400 audit(1768045854.829:802): avc: denied { set_context_mgr } for pid=31724 comm="syz.7.6727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2685.443102][ T8127] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2685.455602][ T8127] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2685.462525][T21561] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2685.475571][ T8127] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2685.484892][T21561] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2685.498978][ T8127] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2685.517374][ T8127] usb 3-1: Product: syz [ 2685.526428][T21561] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2685.535685][ T8127] usb 3-1: Manufacturer: syz [ 2685.544061][T21561] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2685.552616][ T8127] usb 3-1: SerialNumber: syz [ 2685.560136][ T8127] usb 3-1: config 0 descriptor?? [ 2685.565294][T21561] usb 9-1: Product: syz [ 2685.569769][T21561] usb 9-1: Manufacturer: syz [ 2685.577524][ T8127] usb 3-1: selecting invalid altsetting 0 [ 2685.585077][T21561] usb 9-1: SerialNumber: syz [ 2685.603034][T21561] usb 9-1: config 0 descriptor?? [ 2685.626980][T21561] usb 9-1: selecting invalid altsetting 0 [ 2686.114505][T31560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2686.119326][T31735] netlink: 'syz.0.6771': attribute type 10 has an invalid length. [ 2686.127535][T31735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2686.153860][T31735] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2686.202534][T31735] netlink: 'syz.0.6771': attribute type 10 has an invalid length. [ 2686.202559][T31735] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6771'. [ 2686.202586][T31735] batadv0: entered promiscuous mode [ 2686.202606][T31735] batadv0: entered allmulticast mode [ 2686.223039][T31735] bond0: (slave batadv0): Releasing backup interface [ 2686.272448][T31735] bridge0: port 3(batadv0) entered blocking state [ 2686.272551][T31735] bridge0: port 3(batadv0) entered disabled state [ 2686.399771][T31738] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20003 [ 2686.668496][T21649] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2686.668546][T21649] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2687.151975][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2687.238077][ T8127] usb 10-1: new full-speed USB device number 41 using dummy_hcd [ 2687.409464][ T8127] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2687.434897][ T8127] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2687.453570][ T8127] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2687.471130][ T8127] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2687.492864][ T8127] usb 10-1: Product: syz [ 2687.505420][ T8127] usb 10-1: Manufacturer: syz [ 2687.515431][ T8127] usb 10-1: SerialNumber: syz [ 2687.524416][ T8127] usb 10-1: config 0 descriptor?? [ 2687.536885][ T8127] usb 10-1: selecting invalid altsetting 0 [ 2687.733191][ T8127] usb 3-1: USB disconnect, device number 73 [ 2688.744785][T21561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2688.924239][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2688.985875][T23063] usb 9-1: USB disconnect, device number 31 [ 2690.055005][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2690.357715][T31763] fuse: Unknown parameter '0xffffffffffffffff' [ 2690.428093][T31763] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6783'. [ 2690.654576][T31751] usb 10-1: USB disconnect, device number 41 [ 2691.373881][T31560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2691.808183][T31751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2691.816476][ T8127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2691.861157][T31778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=31778 comm=syz.7.6786 [ 2692.075112][T31781] Mount JFS Failure: -5 [ 2692.429869][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2692.496538][T31785] FAULT_INJECTION: forcing a failure. [ 2692.496538][T31785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2692.526181][T31785] CPU: 0 UID: 0 PID: 31785 Comm: syz.0.6788 Tainted: G L syzkaller #0 PREEMPT(full) [ 2692.526203][T31785] Tainted: [L]=SOFTLOCKUP [ 2692.526208][T31785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2692.526215][T31785] Call Trace: [ 2692.526220][T31785] [ 2692.526225][T31785] dump_stack_lvl+0x16c/0x1f0 [ 2692.526246][T31785] should_fail_ex+0x512/0x640 [ 2692.526267][T31785] _copy_from_user+0x2e/0xd0 [ 2692.526285][T31785] __sys_bpf+0x248/0x4980 [ 2692.526305][T31785] ? __pfx___sys_bpf+0x10/0x10 [ 2692.526320][T31785] ? find_held_lock+0x2b/0x80 [ 2692.526342][T31785] ? find_held_lock+0x2b/0x80 [ 2692.526362][T31785] ? __mutex_unlock_slowpath+0x161/0x790 [ 2692.526388][T31785] ? fput+0x70/0xf0 [ 2692.526399][T31785] ? ksys_write+0x1ac/0x250 [ 2692.526413][T31785] ? __pfx_ksys_write+0x10/0x10 [ 2692.526430][T31785] __x64_sys_bpf+0x78/0xc0 [ 2692.526446][T31785] ? lockdep_hardirqs_on+0x7c/0x110 [ 2692.526462][T31785] do_syscall_64+0xcd/0xf80 [ 2692.526478][T31785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2692.526490][T31785] RIP: 0033:0x7f4962d8f749 [ 2692.526500][T31785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2692.526512][T31785] RSP: 002b:00007f4963ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2692.526525][T31785] RAX: ffffffffffffffda RBX: 00007f4962fe5fa0 RCX: 00007f4962d8f749 [ 2692.526539][T31785] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000002 [ 2692.526553][T31785] RBP: 00007f4963ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 2692.526565][T31785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2692.526577][T31785] R13: 00007f4962fe6038 R14: 00007f4962fe5fa0 R15: 00007ffff15a94e8 [ 2692.526603][T31785] [ 2692.858834][T31787] FAULT_INJECTION: forcing a failure. [ 2692.858834][T31787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2692.871954][T31787] CPU: 0 UID: 0 PID: 31787 Comm: syz.8.6790 Tainted: G L syzkaller #0 PREEMPT(full) [ 2692.871984][T31787] Tainted: [L]=SOFTLOCKUP [ 2692.871990][T31787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2692.872002][T31787] Call Trace: [ 2692.872009][T31787] [ 2692.872022][T31787] dump_stack_lvl+0x16c/0x1f0 [ 2692.872048][T31787] should_fail_ex+0x512/0x640 [ 2692.872069][T31787] _copy_from_iter+0x2a4/0x16c0 [ 2692.872093][T31787] ? __build_skb_around+0x278/0x390 [ 2692.872115][T31787] ? __pfx__copy_from_iter+0x10/0x10 [ 2692.872134][T31787] ? __alloc_skb+0x35d/0x410 [ 2692.872145][T31787] ? __pfx___alloc_skb+0x10/0x10 [ 2692.872161][T31787] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 2692.872185][T31787] pfkey_sendmsg+0x1d1/0x850 [ 2692.872203][T31787] ____sys_sendmsg+0xa5d/0xc30 [ 2692.872219][T31787] ? copy_msghdr_from_user+0x10a/0x160 [ 2692.872232][T31787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2692.872254][T31787] ___sys_sendmsg+0x134/0x1d0 [ 2692.872267][T31787] ? __pfx____sys_sendmsg+0x10/0x10 [ 2692.872298][T31787] __sys_sendmsg+0x16d/0x220 [ 2692.872311][T31787] ? __pfx___sys_sendmsg+0x10/0x10 [ 2692.872333][T31787] do_syscall_64+0xcd/0xf80 [ 2692.872350][T31787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2692.872364][T31787] RIP: 0033:0x7f04e798f749 [ 2692.872379][T31787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2692.872397][T31787] RSP: 002b:00007f04e8893038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2692.872415][T31787] RAX: ffffffffffffffda RBX: 00007f04e7be5fa0 RCX: 00007f04e798f749 [ 2692.872427][T31787] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2692.872439][T31787] RBP: 00007f04e8893090 R08: 0000000000000000 R09: 0000000000000000 [ 2692.872451][T31787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2692.872461][T31787] R13: 00007f04e7be6038 R14: 00007f04e7be5fa0 R15: 00007fff66e88c28 [ 2692.872477][T31787] [ 2694.076551][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2694.189374][T31795] FAULT_INJECTION: forcing a failure. [ 2694.189374][T31795] name failslab, interval 1, probability 0, space 0, times 0 [ 2694.234724][T31795] CPU: 0 UID: 0 PID: 31795 Comm: syz.8.6794 Tainted: G L syzkaller #0 PREEMPT(full) [ 2694.234758][T31795] Tainted: [L]=SOFTLOCKUP [ 2694.234765][T31795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2694.234777][T31795] Call Trace: [ 2694.234784][T31795] [ 2694.234792][T31795] dump_stack_lvl+0x16c/0x1f0 [ 2694.234824][T31795] should_fail_ex+0x512/0x640 [ 2694.234854][T31795] ? fs_reclaim_acquire+0xae/0x150 [ 2694.234884][T31795] should_failslab+0xc2/0x120 [ 2694.234915][T31795] __kmalloc_noprof+0xeb/0x910 [ 2694.234946][T31795] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2694.234980][T31795] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2694.235006][T31795] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2694.235034][T31795] ? tomoyo_profile+0x47/0x60 [ 2694.235067][T31795] tomoyo_path_number_perm+0x245/0x580 [ 2694.235092][T31795] ? tomoyo_path_number_perm+0x237/0x580 [ 2694.235119][T31795] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2694.235145][T31795] ? find_held_lock+0x2b/0x80 [ 2694.235200][T31795] ? find_held_lock+0x2b/0x80 [ 2694.235229][T31795] ? hook_file_ioctl_common+0x144/0x410 [ 2694.235268][T31795] ? __fget_files+0x20e/0x3c0 [ 2694.235303][T31795] security_file_ioctl+0x9b/0x240 [ 2694.235333][T31795] __x64_sys_ioctl+0xb7/0x210 [ 2694.235360][T31795] do_syscall_64+0xcd/0xf80 [ 2694.235389][T31795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2694.235411][T31795] RIP: 0033:0x7f04e798f749 [ 2694.235429][T31795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2694.235449][T31795] RSP: 002b:00007f04e8893038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2694.235469][T31795] RAX: ffffffffffffffda RBX: 00007f04e7be5fa0 RCX: 00007f04e798f749 [ 2694.235483][T31795] RDX: 0000200000000180 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 2694.235495][T31795] RBP: 00007f04e8893090 R08: 0000000000000000 R09: 0000000000000000 [ 2694.235507][T31795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2694.235519][T31795] R13: 00007f04e7be6038 R14: 00007f04e7be5fa0 R15: 00007fff66e88c28 [ 2694.235548][T31795] [ 2694.235557][T31795] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2694.562672][ T30] audit: type=1400 audit(1768045864.264:803): avc: denied { ioctl } for pid=31798 comm="syz.8.6796" path="socket:[135753]" dev="sockfs" ino=135753 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2694.824444][ T8127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2694.894464][T21561] usb 10-1: new full-speed USB device number 42 using dummy_hcd [ 2695.176972][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2695.213607][T21561] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2695.243367][T21561] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2695.253130][T31806] lo speed is unknown, defaulting to 1000 [ 2695.269059][T31808] qnx4: unable to read the superblock [ 2695.319879][T21561] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2695.345189][T21561] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2695.387547][T21561] usb 10-1: Product: syz [ 2695.419071][T21561] usb 10-1: Manufacturer: syz [ 2695.423781][T21561] usb 10-1: SerialNumber: syz [ 2695.445887][T31802] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6793'. [ 2695.467818][T21561] usb 10-1: config 0 descriptor?? [ 2695.495740][T21561] usb 10-1: selecting invalid altsetting 0 [ 2696.313976][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2697.628919][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2697.869532][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2698.668522][T31560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2699.773034][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2699.784395][T31845] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.6805'. [ 2701.359117][T21506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2701.367290][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2701.381169][T28578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2702.033465][T31852] random: crng reseeded on system resumption [ 2702.124840][T31852] Restarting kernel threads ... [ 2702.132624][T31852] Done restarting kernel threads. [ 2702.606051][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2702.981258][T31857] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6807'. [ 2703.100528][T29281] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2703.237846][T21506] usb 10-1: USB disconnect, device number 42 [ 2703.280063][T29281] usb 1-1: Using ep0 maxpacket: 32 [ 2703.293459][T29281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2703.310068][T29281] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 2703.363985][T29281] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2703.559519][T31864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=31864 comm=syz.8.6810 [ 2703.569914][T29281] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2703.596740][T29281] usb 1-1: Product: syz [ 2704.286000][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2704.309659][T29281] usb 1-1: Manufacturer: syz [ 2704.314316][T29281] usb 1-1: SerialNumber: syz [ 2704.326474][T29281] usb 1-1: config 0 descriptor?? [ 2704.481472][T21506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2704.521512][T31872] Mount JFS Failure: -5 [ 2705.367410][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2706.589642][ T6764] usb 1-1: USB disconnect, device number 96 [ 2706.639727][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2707.277366][T31893] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2707.461016][T31893] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6808'. [ 2707.539488][T21561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2707.725667][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2708.754073][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2709.700372][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2709.767138][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2709.787629][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2710.366294][T31905] [U] `è [ 2710.576792][T21506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2712.130712][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2712.544946][T21506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2713.170751][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2713.333160][T31918] can0: slcan on ttyS3. [ 2713.628095][T21561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2713.894932][T31918] can0 (unregistered): slcan off ttyS3. [ 2714.445667][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2716.259002][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2716.497758][T31935] Mount JFS Failure: -5 [ 2716.705310][T21561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2716.841876][T21561] IPVS: starting estimator thread 0... [ 2716.953249][T31939] IPVS: using max 64 ests per chain, 153600 per kthread [ 2717.978068][T21561] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 2717.985536][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2718.205190][T21561] usb 9-1: Using ep0 maxpacket: 32 [ 2718.226174][T21561] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2718.266327][T21561] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 2718.306830][T21561] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2718.343570][T21561] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2718.382530][T21561] usb 9-1: Product: syz [ 2718.386691][T21561] usb 9-1: Manufacturer: syz [ 2718.391255][T21561] usb 9-1: SerialNumber: syz [ 2718.454592][T21561] usb 9-1: config 0 descriptor?? [ 2719.661645][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2719.772071][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2720.213522][T31956] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2720.391330][T31956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6829'. [ 2720.734621][T29281] usb 9-1: USB disconnect, device number 32 [ 2721.887466][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2723.034440][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2723.235931][T21561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2723.397724][T31968] can0: slcan on ttyS3. [ 2723.890509][T31968] can0 (unregistered): slcan off ttyS3. [ 2723.909914][T29281] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 2724.093615][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2724.109646][T29281] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2724.119456][T29281] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2724.193351][T29281] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2724.196198][T31975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=31975 comm=syz.2.6838 [ 2724.259850][T29281] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2724.279519][T29281] usb 9-1: Product: syz [ 2724.293643][T29281] usb 9-1: Manufacturer: syz [ 2724.298279][T29281] usb 9-1: SerialNumber: syz [ 2724.320223][T29281] usb 9-1: config 0 descriptor?? [ 2725.351874][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2725.392189][T29281] usb 9-1: can't set config #0, error -71 [ 2725.437316][T29281] usb 9-1: USB disconnect, device number 33 [ 2726.249800][T31751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2726.467163][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2726.794467][T31991] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=31991 comm=syz.2.6844 [ 2726.848802][T31995] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2726.870052][T31995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6843'. [ 2727.086305][T31999] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2727.419168][T31998] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6837'. [ 2727.597971][T32001] FAULT_INJECTION: forcing a failure. [ 2727.597971][T32001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2727.795195][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2727.817865][T32001] CPU: 1 UID: 0 PID: 32001 Comm: syz.8.6845 Tainted: G L syzkaller #0 PREEMPT(full) [ 2727.817901][T32001] Tainted: [L]=SOFTLOCKUP [ 2727.817908][T32001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2727.817919][T32001] Call Trace: [ 2727.817926][T32001] [ 2727.817934][T32001] dump_stack_lvl+0x16c/0x1f0 [ 2727.817968][T32001] should_fail_ex+0x512/0x640 [ 2727.818004][T32001] _copy_from_user+0x2e/0xd0 [ 2727.818035][T32001] drm_ioctl+0x4fb/0xc30 [ 2727.818069][T32001] ? __pfx_drm_wait_vblank_ioctl+0x10/0x10 [ 2727.818098][T32001] ? __pfx_drm_ioctl+0x10/0x10 [ 2727.818136][T32001] ? selinux_file_ioctl+0x180/0x270 [ 2727.818163][T32001] ? selinux_file_ioctl+0xb4/0x270 [ 2727.818190][T32001] ? __pfx_drm_ioctl+0x10/0x10 [ 2727.818218][T32001] __x64_sys_ioctl+0x18e/0x210 [ 2727.818243][T32001] do_syscall_64+0xcd/0xf80 [ 2727.818271][T32001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2727.818300][T32001] RIP: 0033:0x7f04e798f749 [ 2727.818317][T32001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2727.818336][T32001] RSP: 002b:00007f04e8872038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2727.818356][T32001] RAX: ffffffffffffffda RBX: 00007f04e7be6090 RCX: 00007f04e798f749 [ 2727.818370][T32001] RDX: 0000200000000080 RSI: 00000000c018643a RDI: 0000000000000004 [ 2727.818383][T32001] RBP: 00007f04e8872090 R08: 0000000000000000 R09: 0000000000000000 [ 2727.818394][T32001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2727.818405][T32001] R13: 00007f04e7be6128 R14: 00007f04e7be6090 R15: 00007fff66e88c28 [ 2727.818434][T32001] [ 2728.836012][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2729.009940][T32019] Mount JFS Failure: -5 [ 2729.303607][T21561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2729.416472][T32021] FAULT_INJECTION: forcing a failure. [ 2729.416472][T32021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2729.472953][T32021] CPU: 0 UID: 0 PID: 32021 Comm: syz.9.6851 Tainted: G L syzkaller #0 PREEMPT(full) [ 2729.472990][T32021] Tainted: [L]=SOFTLOCKUP [ 2729.472998][T32021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2729.473012][T32021] Call Trace: [ 2729.473020][T32021] [ 2729.473029][T32021] dump_stack_lvl+0x16c/0x1f0 [ 2729.473063][T32021] should_fail_ex+0x512/0x640 [ 2729.473100][T32021] _copy_to_user+0x32/0xd0 [ 2729.473135][T32021] simple_read_from_buffer+0xcb/0x170 [ 2729.473166][T32021] proc_fail_nth_read+0x197/0x240 [ 2729.473192][T32021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2729.473217][T32021] ? rw_verify_area+0xcf/0x6c0 [ 2729.473242][T32021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2729.473266][T32021] vfs_read+0x1e4/0xcf0 [ 2729.473295][T32021] ? __pfx___mutex_lock+0x10/0x10 [ 2729.473329][T32021] ? __pfx_vfs_read+0x10/0x10 [ 2729.473364][T32021] ? __fget_files+0x20e/0x3c0 [ 2729.473408][T32021] ksys_read+0x12a/0x250 [ 2729.473435][T32021] ? __pfx_ksys_read+0x10/0x10 [ 2729.473474][T32021] do_syscall_64+0xcd/0xf80 [ 2729.473505][T32021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2729.473528][T32021] RIP: 0033:0x7f4ee798e15c [ 2729.473546][T32021] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2729.473567][T32021] RSP: 002b:00007f4ee880c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2729.473588][T32021] RAX: ffffffffffffffda RBX: 00007f4ee7be5fa0 RCX: 00007f4ee798e15c [ 2729.473604][T32021] RDX: 000000000000000f RSI: 00007f4ee880c0a0 RDI: 0000000000000004 [ 2729.473618][T32021] RBP: 00007f4ee880c090 R08: 0000000000000000 R09: 0000000000000000 [ 2729.473632][T32021] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 2729.473646][T32021] R13: 00007f4ee7be6038 R14: 00007f4ee7be5fa0 R15: 00007ffc8529c4f8 [ 2729.473677][T32021] [ 2729.908902][T32028] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2729.966616][T32028] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6848'. [ 2729.995165][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2730.046666][ T24] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 2730.328031][ T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2730.356988][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2730.368958][T32033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=32033 comm=syz.7.6854 [ 2730.390351][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2730.419687][ T24] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2730.456458][ T24] usb 3-1: Product: syz [ 2730.472976][ T24] usb 3-1: Manufacturer: syz [ 2730.491385][ T24] usb 3-1: SerialNumber: syz [ 2730.518090][ T24] usb 3-1: config 0 descriptor?? [ 2730.548753][ T24] usb 3-1: selecting invalid altsetting 0 [ 2730.865496][ T24] usb 3-1: USB disconnect, device number 74 [ 2731.050974][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2731.467012][T21561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2732.100677][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2732.359400][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2733.425079][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2734.475694][T32086] qnx4: unable to read the superblock [ 2734.486622][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2734.503688][T32087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=32087 comm=syz.2.6870 [ 2734.776109][T32090] netlink: 'syz.0.6871': attribute type 74 has an invalid length. [ 2735.748977][T31751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2735.758401][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2737.126735][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2737.535338][T32118] netlink: 'syz.0.6878': attribute type 10 has an invalid length. [ 2737.555354][T32118] batadv0: left allmulticast mode [ 2737.560414][T32118] batadv0: left promiscuous mode [ 2737.582385][T32120] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input85 [ 2737.603080][T32118] bridge0: port 3(batadv0) entered disabled state [ 2737.621051][T32122] netlink: 'syz.0.6878': attribute type 10 has an invalid length. [ 2737.831684][T32122] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6878'. [ 2737.841561][T32118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2737.906098][T32118] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2737.935331][T32122] batadv0: entered promiscuous mode [ 2737.940561][T32122] batadv0: entered allmulticast mode [ 2737.995537][T32132] fuse: Unknown parameter '0xffffffffffffffff' [ 2738.017609][T32122] bond0: (slave batadv0): Releasing backup interface [ 2738.250820][T32135] Mount JFS Failure: -5 [ 2738.356110][ T5863] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 2738.428481][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2738.439813][T32122] bridge0: port 3(batadv0) entered blocking state [ 2738.447258][T32122] bridge0: port 3(batadv0) entered disabled state [ 2738.451480][T32136] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6880'. [ 2738.552506][ T5863] usb 9-1: device descriptor read/64, error -71 [ 2738.822047][T21561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2738.888249][ T5863] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 2738.917558][ T6000] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2738.927375][ T6000] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2739.193487][T29796] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 2739.253186][ T5863] usb 9-1: device descriptor read/64, error -71 [ 2739.372211][ T5863] usb usb9-port1: attempt power cycle [ 2739.439352][T29796] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2739.456192][T29796] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2739.466008][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2739.496100][T29796] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2739.512078][T29796] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2739.554496][T29796] usb 3-1: Product: syz [ 2739.580205][T29796] usb 3-1: Manufacturer: syz [ 2739.616897][T29796] usb 3-1: SerialNumber: syz [ 2739.644913][T29796] usb 3-1: config 0 descriptor?? [ 2739.704580][T29796] usb 3-1: selecting invalid altsetting 0 [ 2739.731824][ T5863] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 2739.766103][ T5863] usb 9-1: device descriptor read/8, error -71 [ 2739.908838][T32152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=32152 comm=syz.9.6887 [ 2740.052201][ T5863] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2740.172400][ T5863] usb 9-1: device descriptor read/8, error -71 [ 2740.292129][ T5863] usb usb9-port1: unable to enumerate USB device [ 2740.488483][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2741.041983][T29796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2741.055727][T32156] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6888'. [ 2742.185843][T29796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2742.214686][T19473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2742.233797][ T6247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2742.242824][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2742.251412][T19473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2743.035883][T29796] usb 3-1: USB disconnect, device number 75 [ 2743.203760][ T30] audit: type=1400 audit(1768046423.934:804): avc: denied { mount } for pid=32175 comm="syz.8.6894" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2743.281765][T32176] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2743.297390][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2743.330080][ T30] audit: type=1400 audit(1768046423.964:805): avc: denied { mounton } for pid=32175 comm="syz.8.6894" path="/44/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2743.414682][ T30] audit: type=1400 audit(1768046423.964:806): avc: denied { read } for pid=32175 comm="syz.8.6894" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2743.494052][ T30] audit: type=1400 audit(1768046424.054:807): avc: denied { read } for pid=32175 comm="syz.8.6894" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2743.560515][ T30] audit: type=1400 audit(1768046424.054:808): avc: denied { read } for pid=32175 comm="syz.8.6894" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2743.612082][ T30] audit: type=1400 audit(1768046424.054:809): avc: denied { read } for pid=32175 comm="syz.8.6894" name="/" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2743.697224][ T30] audit: type=1400 audit(1768046424.054:810): avc: denied { open } for pid=32175 comm="syz.8.6894" path="/44/file0" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2743.871129][ T30] audit: type=1400 audit(1768046424.054:811): avc: denied { read } for pid=32175 comm="syz.8.6894" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2744.441415][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2744.459854][ T30] audit: type=1400 audit(1768046424.054:812): avc: denied { read } for pid=32175 comm="syz.8.6894" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2744.493436][T12488] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 2744.522543][ T30] audit: type=1400 audit(1768046424.054:813): avc: denied { read } for pid=32175 comm="syz.8.6894" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2744.679857][T12488] usb 9-1: Using ep0 maxpacket: 32 [ 2744.692739][T32203] netlink: 'syz.9.6898': attribute type 10 has an invalid length. [ 2744.709346][T32204] fuse: Unknown parameter '0xffffffffffffffff' [ 2744.719426][T12488] usb 9-1: config 0 has an invalid interface number: 48 but max is 0 [ 2744.729162][T32203] netlink: 'syz.9.6898': attribute type 10 has an invalid length. [ 2744.737184][T32203] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6898'. [ 2744.757486][T12488] usb 9-1: config 0 has no interface number 0 [ 2744.767409][T12488] usb 9-1: config 0 interface 48 has no altsetting 0 [ 2744.812312][T32206] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6900'. [ 2744.829743][T12488] usb 9-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=74.d5 [ 2744.872607][T12488] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2744.919523][T12488] usb 9-1: Product: syz [ 2744.936587][T12488] usb 9-1: Manufacturer: syz [ 2744.960331][T12488] usb 9-1: SerialNumber: syz [ 2744.994286][T12488] usb 9-1: config 0 descriptor?? [ 2745.039502][T12488] HFC-S_USB 9-1:0.48: probe with driver HFC-S_USB failed with error -5 [ 2745.214669][T31751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2745.239324][T32189] fuse: Bad value for 'fd' [ 2745.246767][T32189] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 2745.355208][T32203] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20003 [ 2745.536443][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2747.104193][T31751] usb 9-1: USB disconnect, device number 38 [ 2747.141253][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2747.608261][T27605] Bluetooth: hci3: command 0x0406 tx timeout [ 2748.204210][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2748.226447][T25603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2748.236777][T29796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2748.246170][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2748.288832][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2749.197559][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 2749.197578][ T30] audit: type=1400 audit(1768046429.937:834): avc: denied { mounton } for pid=32220 comm="syz.8.6906" path="/48/file0" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2749.227137][T32224] Invalid source name [ 2749.231134][T32224] UBIFS error (pid: 32224): cannot open "./file0", error -22 [ 2749.330818][T32228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=32228 comm=syz.9.6908 [ 2749.370251][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2750.531496][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2750.639240][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2751.378333][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2752.611651][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2752.745360][T23063] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2752.795742][T32262] fuse: Unknown parameter '0xffffffffffffffff' [ 2753.688243][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2753.706301][T23063] usb 1-1: Using ep0 maxpacket: 32 [ 2754.724031][T18769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2754.732161][T29796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2754.761611][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2754.815889][T28782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2754.874139][T28782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2754.931388][T23063] usb 1-1: device descriptor read/all, error -71 [ 2755.373880][T32274] geneve2: entered promiscuous mode [ 2755.383963][T32274] geneve2: entered allmulticast mode [ 2755.593994][T32282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=32282 comm=syz.7.6921 [ 2755.733830][T29796] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 2755.823832][T23063] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 2755.913963][T28782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2755.926100][T29796] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2755.938621][T29796] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2755.953108][T29796] usb 10-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 2755.974641][T29796] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2755.994672][T23063] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 2755.997175][T29796] usb 10-1: config 0 descriptor?? [ 2756.058947][T32288] netlink: 'syz.2.6923': attribute type 10 has an invalid length. [ 2756.097605][T23063] usb 1-1: config 8 has no interface number 0 [ 2756.104715][T32288] netlink: 'syz.2.6923': attribute type 10 has an invalid length. [ 2756.133283][T32288] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6923'. [ 2756.148008][T23063] usb 1-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2756.169433][T23063] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 2756.181233][T23063] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x87 has an invalid bInterval 182, changing to 4 [ 2756.248493][T23063] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid maxpacket 31645, setting to 1023 [ 2756.292338][T23063] usb 1-1: config 8 interface 177 has no altsetting 0 [ 2756.321749][T23063] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2756.346303][T32289] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20003 [ 2756.386718][ T30] audit: type=1400 audit(1768046437.130:835): avc: denied { listen } for pid=32280 comm="syz.9.6919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2756.428379][T23063] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2756.470664][T32277] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2756.610867][T29796] lg-g15 0003:046D:C225.0044: unknown main item tag 0x0 [ 2756.662336][T29796] lg-g15 0003:046D:C225.0044: hidraw0: USB HID v0.00 Device [HID 046d:c225] on usb-dummy_hcd.9-1/input0 [ 2756.704840][T23063] usb 1-1: string descriptor 0 read error: -71 [ 2756.712346][T23063] ir_toy 1-1:8.177: required endpoints not found [ 2756.752027][T23063] usb 1-1: USB disconnect, device number 98 [ 2756.987998][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2757.012235][T32281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2757.544518][T32281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2757.586302][T31751] usb 10-1: USB disconnect, device number 43 [ 2757.784318][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2758.868741][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2759.063204][T32305] Mount JFS Failure: -5 [ 2760.138227][T19473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2760.231977][T31751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2760.794619][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2760.965672][T32318] qnx4: unable to read the superblock [ 2761.194980][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2762.000930][T23063] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2762.103336][T32329] Mount JFS Failure: -5 [ 2762.342396][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2762.410519][T23063] usb 3-1: Using ep0 maxpacket: 32 [ 2762.429139][T23063] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 2762.476744][T23063] usb 3-1: config 0 has no interface number 0 [ 2762.539579][T23063] usb 3-1: config 0 interface 48 has no altsetting 0 [ 2762.604922][T23063] usb 3-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=74.d5 [ 2762.730494][T23063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2762.744212][T23063] usb 3-1: Product: syz [ 2762.759184][T23063] usb 3-1: Manufacturer: syz [ 2762.773338][T23063] usb 3-1: SerialNumber: syz [ 2762.776343][T32335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=32335 comm=syz.0.6935 [ 2763.342733][T23063] usb 3-1: config 0 descriptor?? [ 2763.362889][T19473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2763.382455][T23063] HFC-S_USB 3-1:0.48: probe with driver HFC-S_USB failed with error -5 [ 2763.607316][T32325] fuse: Bad value for 'fd' [ 2763.623422][T32342] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.6937'. [ 2763.645803][T32325] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 2763.830456][T29796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2764.730591][ T5863] usb 3-1: USB disconnect, device number 76 [ 2764.751325][T18769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2764.766511][T28782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2764.786690][T19473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2764.840352][T31751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2765.953128][T19473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2767.068143][T28782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2768.023335][T32364] ucma_write: process 1792 (syz.0.6943) changed security contexts after opening file descriptor, this is not allowed. [ 2768.252005][T31751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2768.291096][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2768.962158][T32382] fuse: Unknown parameter '0xffffffffffffffff' [ 2769.239175][T32383] qnx4: unable to read the superblock [ 2769.311011][T32386] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6946'. [ 2769.320413][T31751] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 2769.379703][T32382] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6945'. [ 2769.497408][T31751] usb 10-1: Using ep0 maxpacket: 8 [ 2769.526351][T31751] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2769.565068][T31751] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2769.603465][T31751] usb 10-1: Product: syz [ 2769.628546][T31751] usb 10-1: Manufacturer: syz [ 2769.648445][T31751] usb 10-1: SerialNumber: syz [ 2769.745524][T31751] usb 10-1: config 0 descriptor?? [ 2770.069495][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2770.077662][T29796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2770.205566][ T6048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2770.218971][T29796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2770.229050][T21506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2770.252220][T32380] ptrace attach of "./syz-executor exec"[21537] was attempted by "./syz-executor exec"[32380] [ 2770.274644][T31751] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2771.111885][T18321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2771.116380][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2771.126692][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2771.135143][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2772.258298][T31751] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2772.290133][T23063] net_ratelimit: 2 callbacks suppressed [ 2772.290151][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2772.341618][T31751] usb 10-1: USB disconnect, device number 44 [ 2772.647825][T32409] Mount JFS Failure: -5 [ 2773.272310][T32423] Mount JFS Failure: -5 [ 2773.360194][T29281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2774.225920][T21506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2774.389742][T19473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2774.561622][T32431] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6960'. [ 2775.901758][T17826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2775.915243][T29796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2775.923334][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2776.088799][T29796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2776.809737][T32450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=32450 comm=syz.0.6953 [ 2776.863669][T28831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2776.874706][ T6764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2778.035464][T23063] net_ratelimit: 2 callbacks suppressed [ 2778.035481][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2778.082911][ T6764] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2778.165442][T32458] netlink: 208 bytes leftover after parsing attributes in process `syz.7.6964'. [ 2778.257738][ T6764] usb 3-1: Using ep0 maxpacket: 32 [ 2778.589134][ T6764] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 2778.776384][T32464] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2778.790684][T32464] overlayfs: overlapping lowerdir path [ 2779.070072][ T6764] usb 3-1: config 0 has no interface number 0 [ 2779.092538][ T6764] usb 3-1: config 0 interface 48 has no altsetting 0 [ 2779.106755][T28782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2779.263050][ T6764] usb 3-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=74.d5 [ 2779.775329][T31751] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 2779.823342][ T6764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2779.834900][ T6764] usb 3-1: Product: syz [ 2779.848900][ T6764] usb 3-1: Manufacturer: syz [ 2779.853772][ T6764] usb 3-1: SerialNumber: syz [ 2779.902376][ T8127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2779.907699][ T6764] usb 3-1: config 0 descriptor?? [ 2779.931778][T31751] usb 9-1: Using ep0 maxpacket: 8 [ 2779.939110][T31751] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2779.951759][T31751] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2779.962585][T31751] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2779.973480][T31751] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2779.990640][T31751] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2780.002942][T31751] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2780.011223][ T6764] HFC-S_USB 3-1:0.48: probe with driver HFC-S_USB failed with error -5 [ 2780.061896][T28782] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 2780.099384][T32472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2780.146606][T19473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2780.225748][T29281] usb 3-1: USB disconnect, device number 77 [ 2780.277327][T32472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2780.316466][T28782] usb 8-1: Using ep0 maxpacket: 32 [ 2780.317075][T31751] usb 9-1: usb_control_msg returned -32 [ 2780.338780][T32472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2780.349464][T31751] usbtmc 9-1:16.0: can't read capabilities [ 2780.358470][T32472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2780.382761][T28782] usb 8-1: config 0 has an invalid interface number: 48 but max is 0 [ 2780.399629][T32472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2780.417153][T28782] usb 8-1: config 0 has no interface number 0 [ 2780.565241][T28782] usb 8-1: config 0 interface 48 has no altsetting 0 [ 2781.137642][T28782] usb 8-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=74.d5 [ 2781.177706][T28782] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2781.197207][T19473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2781.222269][T28782] usb 8-1: Product: syz [ 2781.327231][T28782] usb 8-1: Manufacturer: syz [ 2781.364661][T28782] usb 8-1: SerialNumber: syz [ 2781.418299][T28782] usb 8-1: config 0 descriptor?? [ 2781.462990][T28782] HFC-S_USB 8-1:0.48: probe with driver HFC-S_USB failed with error -5 [ 2781.701189][T32468] fuse: Bad value for 'fd' [ 2781.710003][T32468] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 2782.414512][T28782] usb 9-1: USB disconnect, device number 39 [ 2782.723313][ T30] audit: type=1400 audit(1768046463.473:836): avc: denied { ioctl } for pid=32486 comm="syz.8.6974" path="socket:[139408]" dev="sockfs" ino=139408 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2783.000487][T28782] usb 8-1: USB disconnect, device number 69 [ 2783.265530][T32470] net_ratelimit: 6 callbacks suppressed [ 2783.265543][T32470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2783.634647][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2784.696070][T32505] netlink: 208 bytes leftover after parsing attributes in process `syz.0.6979'. [ 2784.918695][T28782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2785.117621][T32512] Invalid source name [ 2785.179749][T21561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2785.216180][T32514] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2785.220131][T32513] Mount JFS Failure: -5 [ 2785.312852][T32514] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6980'. [ 2785.575502][T32519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=32519 comm=syz.0.6983 [ 2785.739344][ T8127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2785.981431][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2786.768314][T21561] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 2787.123676][T12488] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 2787.138201][T21561] usb 9-1: Using ep0 maxpacket: 16 [ 2787.144965][T21561] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2787.160829][T21561] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2787.170374][T21561] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2787.179683][T21561] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2787.191249][T21561] usb 9-1: config 0 descriptor?? [ 2787.195009][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2787.338035][T12488] usb 10-1: Using ep0 maxpacket: 32 [ 2787.465768][T12488] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2787.488615][T32535] qnx4: unable to read the superblock [ 2787.535225][T12488] usb 10-1: config 7 has an invalid interface number: 187 but max is 0 [ 2787.570925][T12488] usb 10-1: config 7 has no interface number 0 [ 2787.634003][T12488] usb 10-1: config 7 interface 187 has no altsetting 0 [ 2787.830347][T12488] usb 10-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 2787.889281][ T30] audit: type=1400 audit(1768046468.596:837): avc: denied { write } for pid=32524 comm="syz.8.6985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2787.959473][T21561] usbhid 9-1:0.0: can't add hid device: -71 [ 2787.976908][T12488] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2787.995301][T12488] usb 10-1: Product: syz [ 2788.020665][T21561] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2788.068615][T21561] usb 9-1: USB disconnect, device number 40 [ 2788.223070][T23063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2788.242759][T12488] usb 10-1: Manufacturer: syz [ 2788.777642][ T8127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2788.814983][T12488] usb 10-1: SerialNumber: syz [ 2789.162209][T12488] usb 10-1: Limiting number of CPorts to U8_MAX [ 2789.200796][T12488] usb 10-1: Not enough endpoints found in device, aborting! [ 2789.218346][T32557] fuse: Unknown parameter '0xffffffffffffffff' [ 2789.262728][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2789.339453][ T8127] usb 8-1: new full-speed USB device number 70 using dummy_hcd [ 2789.388404][T32563] fuse: Unknown parameter '0xffffffffffffffff' [ 2789.395116][T32564] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6994'. [ 2789.417089][T32563] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6996'. [ 2789.533086][ T8127] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2789.571527][ T8127] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2789.603619][ T8127] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2789.653506][ T8127] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2789.694660][ T8127] usb 8-1: Product: syz [ 2789.726803][ T8127] usb 8-1: Manufacturer: syz [ 2789.746812][ T8127] usb 8-1: SerialNumber: syz [ 2789.772068][ T8127] usb 8-1: config 0 descriptor?? [ 2789.796574][ T8127] usb 8-1: selecting invalid altsetting 0 [ 2790.155339][ T8127] usb 10-1: USB disconnect, device number 45 [ 2790.309321][T12488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2790.913450][T32570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2790.922741][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2791.341188][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2791.495005][T32580] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2791.824549][T28578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2791.824889][T32582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6998'. [ 2792.230059][T21561] usb 8-1: USB disconnect, device number 70 [ 2792.421294][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2792.898254][T32596] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2792.917969][T32594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61456 sclass=netlink_route_socket pid=32594 comm=syz.9.7004 [ 2792.983932][T32597] bridge1: entered promiscuous mode [ 2792.990626][T32597] bridge1: entered allmulticast mode [ 2793.355092][T21561] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 2793.611903][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2793.678739][T32596] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7001'. [ 2793.735112][T21561] usb 9-1: device descriptor read/64, error -71 [ 2793.984784][T21561] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 2794.114060][T32603] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.7005'. [ 2794.136242][T21561] usb 9-1: device descriptor read/64, error -71 [ 2794.247352][T21561] usb usb9-port1: attempt power cycle [ 2794.434485][ T5963] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2794.604797][ T5963] usb 3-1: device descriptor read/64, error -71 [ 2794.629326][T28782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2794.634621][T21561] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 2794.817674][T21506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2794.855469][T28578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2794.959588][T21561] usb 9-1: device descriptor read/8, error -71 [ 2795.054176][ T5963] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2795.194503][ T5963] usb 3-1: device descriptor read/64, error -71 [ 2795.318920][ T5963] usb usb3-port1: attempt power cycle [ 2795.355841][T32615] fuse: Unknown parameter '0xffffffffffffffff' [ 2795.385222][T32614] Mount JFS Failure: -5 [ 2795.513078][T32616] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7008'. [ 2795.656679][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2795.743844][ T5963] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2795.821103][ T5963] usb 3-1: device descriptor read/8, error -71 [ 2796.123123][T32623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2796.132698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2796.144324][T32623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2796.167430][T32623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2796.176557][T32623] FAULT_INJECTION: forcing a failure. [ 2796.176557][T32623] name failslab, interval 1, probability 0, space 0, times 0 [ 2796.190093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2796.198854][T32623] CPU: 0 UID: 0 PID: 32623 Comm: syz.9.7010 Tainted: G L syzkaller #0 PREEMPT(full) [ 2796.198888][T32623] Tainted: [L]=SOFTLOCKUP [ 2796.198896][T32623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2796.198909][T32623] Call Trace: [ 2796.198917][T32623] [ 2796.198926][T32623] dump_stack_lvl+0x16c/0x1f0 [ 2796.198960][T32623] should_fail_ex+0x512/0x640 [ 2796.198992][T32623] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 2796.199020][T32623] should_failslab+0xc2/0x120 [ 2796.199048][T32623] kmem_cache_alloc_node_noprof+0x86/0x800 [ 2796.199071][T32623] ? __alloc_skb+0x156/0x410 [ 2796.199097][T32623] ? __alloc_skb+0x156/0x410 [ 2796.199114][T32623] __alloc_skb+0x156/0x410 [ 2796.199133][T32623] ? __alloc_skb+0x35d/0x410 [ 2796.199152][T32623] ? __pfx___alloc_skb+0x10/0x10 [ 2796.199184][T32623] ? netlink_has_listeners+0x180/0x430 [ 2796.199220][T32623] mptcp_event+0x179/0x750 [ 2796.199251][T32623] ? __pfx_mptcp_event+0x10/0x10 [ 2796.199281][T32623] ? do_raw_write_lock+0x121/0x3b0 [ 2796.199320][T32623] mptcp_pm_connection_closed+0xae/0xc0 [ 2796.199347][T32623] __mptcp_close+0x58b/0xc10 [ 2796.199378][T32623] ? __pfx___mptcp_close+0x10/0x10 [ 2796.199409][T32623] mptcp_close+0x28/0xe0 [ 2796.199434][T32623] inet_release+0xed/0x200 [ 2796.199457][T32623] __sock_release+0xb3/0x270 [ 2796.199493][T32623] ? __pfx_sock_close+0x10/0x10 [ 2796.199518][T32623] sock_close+0x1c/0x30 [ 2796.199541][T32623] __fput+0x402/0xb70 [ 2796.199569][T32623] fput_close_sync+0x118/0x260 [ 2796.199591][T32623] ? __pfx_fput_close_sync+0x10/0x10 [ 2796.199611][T32623] ? dnotify_flush+0x79/0x4c0 [ 2796.199643][T32623] __x64_sys_close+0x8b/0x120 [ 2796.199667][T32623] do_syscall_64+0xcd/0xf80 [ 2796.199698][T32623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2796.199720][T32623] RIP: 0033:0x7f4ee798f749 [ 2796.199738][T32623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2796.199758][T32623] RSP: 002b:00007f4ee87eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2796.199779][T32623] RAX: ffffffffffffffda RBX: 00007f4ee7be6090 RCX: 00007f4ee798f749 [ 2796.199794][T32623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2796.199807][T32623] RBP: 00007f4ee87eb090 R08: 0000000000000000 R09: 0000000000000000 [ 2796.199819][T32623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2796.199832][T32623] R13: 00007f4ee7be6128 R14: 00007f4ee7be6090 R15: 00007ffc8529c4f8 [ 2796.199863][T32623] [ 2797.137966][T24945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2797.263398][ T5963] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2797.501645][ T5963] usb 3-1: device not accepting address 81, error -71 [ 2797.547704][ T5963] usb usb3-port1: unable to enumerate USB device [ 2797.908256][T32634] netlink: 208 bytes leftover after parsing attributes in process `syz.2.7014'. [ 2798.455913][T32642] input: syz0 as /devices/virtual/input/input86 [ 2799.854525][ T30] audit: type=1400 audit(1768046480.612:838): avc: denied { write } for pid=32666 comm="syz.2.7022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2800.478045][T28782] net_ratelimit: 5 callbacks suppressed [ 2800.478083][T28782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2800.841865][ T30] audit: type=1400 audit(1768046481.582:839): avc: denied { setopt } for pid=32659 comm="syz.8.7020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2801.245213][T21561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2801.494774][T28782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2801.671664][T32693] netlink: 208 bytes leftover after parsing attributes in process `syz.2.7026'. [ 2802.296884][T32701] fuse: Unknown parameter '0xffffffffffffffff' [ 2802.527374][T32701] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7029'. [ 2802.534477][T19473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2803.386125][T32713] fuse: Unknown parameter '0xffffffffffffffff' [ 2803.393448][T21561] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 2803.521538][T32714] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7033'. [ 2803.625588][T19473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2803.777358][T32715] fuse: Bad value for 'fd' [ 2803.811284][T21561] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2804.983220][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2805.009165][T21561] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2805.010120][T27605] Bluetooth: hci2: command 0x0405 tx timeout [ 2805.029938][T21561] usb 9-1: config 0 descriptor?? [ 2805.035717][T31751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2805.044882][T29796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2805.064852][T21561] cp210x 9-1:0.0: cp210x converter detected [ 2805.173946][T32725] qnx4: unable to read the superblock [ 2805.223803][T32727] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2805.310115][T21561] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 2805.340711][T32727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7035'. [ 2805.350139][T21561] cp210x 9-1:0.0: querying part number failed [ 2805.397415][T21561] usb 9-1: cp210x converter now attached to ttyUSB0 [ 2805.432017][T21561] usb 9-1: USB disconnect, device number 45 [ 2805.457100][T21561] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2805.486174][T21561] cp210x 9-1:0.0: device disconnected [ 2805.722934][ T30] audit: type=1400 audit(1768046486.485:840): avc: denied { watch_sb } for pid=32729 comm="syz.9.7038" path="/599/file0" dev="tmpfs" ino=3306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2832.519710][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2832.526086][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2910.746282][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2910.753274][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P32731 P32711/1:b..l [ 2910.762502][ C1] rcu: (detected by 1, t=10502 jiffies, g=189257, q=232 ncpus=2) [ 2910.770298][ C1] task:syz.7.7033 state:R running task stack:26248 pid:32711 tgid:32708 ppid:31524 task_flags:0x400040 flags:0x00080002 [ 2910.784931][ C1] Call Trace: [ 2910.788208][ C1] [ 2910.791136][ C1] ? __schedule+0x10b9/0x6150 [ 2910.795838][ C1] __schedule+0x1139/0x6150 [ 2910.800361][ C1] ? __pfx___schedule+0x10/0x10 [ 2910.805222][ C1] ? mark_held_locks+0x49/0x80 [ 2910.809991][ C1] preempt_schedule_irq+0x51/0x90 [ 2910.815033][ C1] irqentry_exit+0x1d8/0x8c0 [ 2910.819651][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2910.825642][ C1] RIP: 0010:unwind_next_frame+0x1f6/0x20b0 [ 2910.831462][ C1] Code: 89 c3 39 d0 0f 83 17 16 00 00 48 ba 00 00 00 00 00 fc ff df 89 c1 48 8d 3c 8d 98 a6 dc 91 49 89 f8 49 c1 e8 03 45 0f b6 04 10 <48> 89 fa 83 e2 07 83 c2 03 44 38 c2 7c 2f 45 84 c0 74 2a 48 89 4c [ 2910.851093][ C1] RSP: 0018:ffffc9000e3eeca8 EFLAGS: 00000a02 [ 2910.857171][ C1] RAX: 0000000000000012 RBX: 0000000000000001 RCX: 0000000000000012 [ 2910.865143][ C1] RDX: dffffc0000000000 RSI: 00000000000a7c45 RDI: ffffffff91dca6e0 [ 2910.873111][ C1] RBP: ffffc9000e3eed60 R08: 0000000000000000 R09: 00000000255fd699 [ 2910.881075][ C1] R10: 0000000000000002 R11: 0000000000000012 R12: ffffc9000e3eed68 [ 2910.889040][ C1] R13: ffffc9000e3eed18 R14: ffffc9000e3eed4d R15: ffffffff810012a5 [ 2910.897015][ C1] ? asm_exc_page_fault+0x25/0x30 [ 2910.902065][ C1] ? unwind_next_frame+0xa86/0x20b0 [ 2910.907269][ C1] ? asm_exc_page_fault+0x26/0x30 [ 2910.912328][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2910.918489][ C1] arch_stack_walk+0x94/0x100 [ 2910.923173][ C1] ? asm_exc_page_fault+0x26/0x30 [ 2910.928194][ C1] stack_trace_save+0x8e/0xc0 [ 2910.932867][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2910.938239][ C1] ? __lock_acquire+0x436/0x2890 [ 2910.943175][ C1] save_stack+0x160/0x1f0 [ 2910.947504][ C1] ? __pfx_save_stack+0x10/0x10 [ 2910.952353][ C1] ? post_alloc_hook+0x1af/0x220 [ 2910.957299][ C1] ? get_page_from_freelist+0xd0b/0x31a0 [ 2910.962921][ C1] ? __alloc_frozen_pages_noprof+0x25f/0x2430 [ 2910.968980][ C1] ? alloc_pages_mpol+0x1fb/0x550 [ 2910.974001][ C1] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 2910.979549][ C1] ? vma_alloc_folio_noprof+0xed/0x1e0 [ 2910.985009][ C1] ? do_wp_page+0x1183/0x5010 [ 2910.989681][ C1] ? __handle_mm_fault+0x1bd2/0x2bb0 [ 2910.994970][ C1] ? handle_mm_fault+0x3fe/0xad0 [ 2910.999916][ C1] ? do_user_addr_fault+0x7a6/0x1370 [ 2911.005200][ C1] ? exc_page_fault+0x64/0xc0 [ 2911.009874][ C1] ? asm_exc_page_fault+0x26/0x30 [ 2911.014898][ C1] ? __lock_acquire+0x436/0x2890 [ 2911.019841][ C1] __set_page_owner+0x91/0x560 [ 2911.024610][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 2911.029977][ C1] ? bad_range+0x261/0x4c0 [ 2911.034391][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2911.039594][ C1] post_alloc_hook+0x1af/0x220 [ 2911.044373][ C1] get_page_from_freelist+0xd0b/0x31a0 [ 2911.049833][ C1] ? __pfx___might_resched+0x10/0x10 [ 2911.055114][ C1] ? should_fail_alloc_page+0xee/0x130 [ 2911.060583][ C1] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 2911.066470][ C1] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 2911.072628][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2911.078526][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2911.084844][ C1] ? smp_call_function_many_cond+0x120f/0x15e0 [ 2911.090992][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2911.096190][ C1] ? smp_call_function_many_cond+0x457/0x15e0 [ 2911.102265][ C1] ? __lock_acquire+0x436/0x2890 [ 2911.107208][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2911.113100][ C1] ? policy_nodemask+0xea/0x4e0 [ 2911.117960][ C1] alloc_pages_mpol+0x1fb/0x550 [ 2911.122814][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2911.128195][ C1] folio_alloc_mpol_noprof+0x36/0x2f0 [ 2911.133573][ C1] vma_alloc_folio_noprof+0xed/0x1e0 [ 2911.138859][ C1] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2911.144757][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 2911.149518][ C1] do_wp_page+0x1183/0x5010 [ 2911.154029][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 2911.158884][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2911.164275][ C1] __handle_mm_fault+0x1bd2/0x2bb0 [ 2911.169397][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 2911.174877][ C1] ? find_vma+0xbf/0x140 [ 2911.179123][ C1] ? __pfx_find_vma+0x10/0x10 [ 2911.183801][ C1] handle_mm_fault+0x3fe/0xad0 [ 2911.188575][ C1] do_user_addr_fault+0x7a6/0x1370 [ 2911.193690][ C1] ? rcu_is_watching+0x12/0xc0 [ 2911.198450][ C1] exc_page_fault+0x64/0xc0 [ 2911.202958][ C1] asm_exc_page_fault+0x26/0x30 [ 2911.207806][ C1] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 2911.213538][ C1] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 97 c0 03 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 2911.233139][ C1] RSP: 0018:ffffc9000e3ef9e8 EFLAGS: 00050246 [ 2911.239203][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000167030 [ 2911.247162][ C1] RDX: 0000000000080000 RSI: ffffffff893b6963 RDI: 0000000000000005 [ 2911.255121][ C1] RBP: ffffc9000e3efd88 R08: 0000000000000005 R09: 0000000000000000 [ 2911.263082][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 2911.271045][ C1] R13: 0000200000167000 R14: ffffc9000e3efdcc R15: 0000000000000002 [ 2911.279019][ C1] ? ____sys_recvmsg+0x2e3/0x6b0 [ 2911.283967][ C1] ____sys_recvmsg+0x2ee/0x6b0 [ 2911.288742][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2911.294037][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2911.299244][ C1] ___sys_recvmsg+0x114/0x1a0 [ 2911.303924][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 2911.309148][ C1] ? __pfx___might_resched+0x10/0x10 [ 2911.314435][ C1] do_recvmmsg+0x2fe/0x750 [ 2911.318854][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 2911.323811][ C1] ? find_held_lock+0x2b/0x80 [ 2911.328496][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 2911.333523][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2911.339074][ C1] do_syscall_64+0xcd/0xf80 [ 2911.343584][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2911.349473][ C1] RIP: 0033:0x7f616e78f749 [ 2911.353877][ C1] RSP: 002b:00007f616f5fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2911.362283][ C1] RAX: ffffffffffffffda RBX: 00007f616e9e6090 RCX: 00007f616e78f749 [ 2911.370246][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2911.378207][ C1] RBP: 00007f616e813f91 R08: 0000000000000000 R09: 0000000000000000 [ 2911.386167][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2911.394128][ C1] R13: 00007f616e9e6128 R14: 00007f616e9e6090 R15: 00007ffe18f7dc28 [ 2911.402109][ C1] [ 2911.405119][ C1] task:syz.9.7038 state:R running task stack:26856 pid:32731 tgid:32729 ppid:21537 task_flags:0x400140 flags:0x00080000 [ 2911.418633][ C1] Call Trace: [ 2911.421906][ C1] [ 2911.424831][ C1] ? __lock_acquire+0x436/0x2890 [ 2911.429787][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 2911.434809][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2911.440006][ C1] ? find_held_lock+0x2b/0x80 [ 2911.444687][ C1] ? __bpf_ringbuf_reserve+0x5fd/0xa80 [ 2911.450157][ C1] ? lock_acquire+0x179/0x330 [ 2911.454840][ C1] ? __xdp_return+0x354/0xb20 [ 2911.459522][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2911.464721][ C1] ? rcu_is_watching+0x12/0xc0 [ 2911.469478][ C1] ? xdp_test_run_batch.constprop.0+0xe77/0x1f20 [ 2911.475816][ C1] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 2911.482399][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2911.487599][ C1] ? irqentry_exit+0x1dd/0x8c0 [ 2911.492378][ C1] ? bpf_test_run_xdp_live+0x33f/0x770 [ 2911.497838][ C1] ? bpf_test_run_xdp_live+0x365/0x770 [ 2911.503297][ C1] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 2911.509108][ C1] ? __pfx___schedule+0x10/0x10 [ 2911.513960][ C1] ? find_held_lock+0x2b/0x80 [ 2911.518653][ C1] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 2911.524564][ C1] ? 0xffffffffa02057c0 [ 2911.528714][ C1] ? 0xffffffffa02057c0 [ 2911.532865][ C1] ? 0xffffffffa02057c0 [ 2911.537006][ C1] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 2911.542906][ C1] ? bpf_prog_test_run_xdp+0xd3d/0x1660 [ 2911.548454][ C1] ? __fget_files+0x204/0x3c0 [ 2911.553137][ C1] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2911.558940][ C1] ? __might_fault+0x50/0x190 [ 2911.563614][ C1] ? fput+0x70/0xf0 [ 2911.567414][ C1] ? __bpf_prog_get+0x97/0x2a0 [ 2911.572172][ C1] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2911.577976][ C1] ? __sys_bpf+0x1035/0x4980 [ 2911.582564][ C1] ? futex_private_hash_put+0x160/0x1b0 [ 2911.588124][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 2911.592910][ C1] ? __pfx_futex_wait+0x10/0x10 [ 2911.597785][ C1] ? do_futex+0x122/0x350 [ 2911.602136][ C1] ? exc_page_fault+0x64/0xc0 [ 2911.606818][ C1] ? xfd_validate_state+0x61/0x180 [ 2911.611941][ C1] ? __x64_sys_bpf+0x78/0xc0 [ 2911.616551][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2911.621757][ C1] ? do_syscall_64+0xcd/0xf80 [ 2911.626443][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2911.632521][ C1] [ 2911.635530][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g189257 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 2911.646800][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2911.656757][ C1] rcu: RCU grace-period kthread stack dump: [ 2911.662633][ C1] task:rcu_preempt state:R running task stack:28064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 2911.676138][ C1] Call Trace: [ 2911.679409][ C1] [ 2911.682338][ C1] ? __schedule+0x10b9/0x6150 [ 2911.687014][ C1] __schedule+0x1139/0x6150 [ 2911.691517][ C1] ? __lock_acquire+0x436/0x2890 [ 2911.696457][ C1] ? __mod_timer+0x8f2/0xd30 [ 2911.701056][ C1] ? __pfx___schedule+0x10/0x10 [ 2911.705901][ C1] ? find_held_lock+0x2b/0x80 [ 2911.710587][ C1] ? schedule+0x2d7/0x3a0 [ 2911.714926][ C1] schedule+0xe7/0x3a0 [ 2911.718993][ C1] schedule_timeout+0x123/0x290 [ 2911.723838][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2911.729205][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2911.734488][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2911.740291][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 2911.745748][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 2911.750514][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2911.755797][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2911.760994][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 2911.765930][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 2911.770782][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2911.776591][ C1] rcu_gp_kthread+0x26d/0x380 [ 2911.781279][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2911.786490][ C1] ? rcu_is_watching+0x12/0xc0 [ 2911.791254][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2911.796462][ C1] ? __kthread_parkme+0x19e/0x250 [ 2911.801488][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2911.806689][ C1] kthread+0x3c5/0x780 [ 2911.810760][ C1] ? __pfx_kthread+0x10/0x10 [ 2911.815362][ C1] ? rcu_is_watching+0x12/0xc0 [ 2911.820126][ C1] ? __pfx_kthread+0x10/0x10 [ 2911.824726][ C1] ret_from_fork+0x983/0xb10 [ 2911.829336][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2911.834464][ C1] ? __switch_to+0x7af/0x10d0 [ 2911.839152][ C1] ? __pfx_kthread+0x10/0x10 [ 2911.843748][ C1] ret_from_fork_asm+0x1a/0x30 [ 2911.848541][ C1] [ 2911.851581][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2911.857911][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2911.868416][ C1] Tainted: [L]=SOFTLOCKUP [ 2911.872727][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2911.882768][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2911.888491][ C1] Code: 96 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 19 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2911.908094][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 2911.914156][ C1] RAX: 000000000b33eff3 RBX: 0000000000000001 RCX: ffffffff8b7846d9 [ 2911.922123][ C1] RDX: 0000000000000000 RSI: ffffffff8dace97a RDI: ffffffff8bf2b400 [ 2911.930088][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 2911.938054][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 2911.946018][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b8d0 R15: 0000000000000000 [ 2911.953978][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 2911.962900][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2911.969476][ C1] CR2: 0000200000167030 CR3: 00000000761df000 CR4: 00000000003526f0 [ 2911.977443][ C1] Call Trace: [ 2911.980711][ C1] [ 2911.983630][ C1] default_idle+0x13/0x20 [ 2911.987967][ C1] default_idle_call+0x6c/0xb0 [ 2911.992733][ C1] do_idle+0x38d/0x510 [ 2911.996807][ C1] ? __pfx_do_idle+0x10/0x10 [ 2912.001408][ C1] cpu_startup_entry+0x4f/0x60 [ 2912.006177][ C1] start_secondary+0x21d/0x2d0 [ 2912.010942][ C1] ? __pfx_start_secondary+0x10/0x10 [ 2912.016226][ C1] common_startup_64+0x13e/0x148 [ 2912.021181][ C1] [ 2912.561017][T31560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2912.569482][T31560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2912.582507][T19473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog SYZFAIL: failed to send rpc fd=3 want=6168 sent=0 n=-1 (errno 32: Broken pipe) [ 2913.197388][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2913.203692][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2913.260185][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2913.280580][T19438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2913.289949][T21506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2913.298806][T19473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2913.306917][T12604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2913.325044][T32743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2913.416429][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2914.466477][T31234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2914.534655][T31234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2914.555677][T31234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2914.638874][T31234] Bluetooth: hci2: command 0x0405 tx timeout [ 2914.808609][T31234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2914.836790][T32723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2916.045947][T26635] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2916.082676][T32747] lo speed is unknown, defaulting to 1000 [ 2916.168691][T26635] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2916.241952][T26635] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2916.375198][T26635] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2916.496169][T32747] chnl_net:caif_netlink_parms(): no params data found [ 2916.544045][T26635] bridge_slave_1: left allmulticast mode [ 2916.549697][T26635] bridge_slave_1: left promiscuous mode [ 2916.555613][T26635] bridge0: port 2(bridge_slave_1) entered disabled state [ 2916.565836][T26635] bridge_slave_0: left allmulticast mode [ 2916.571458][T26635] bridge_slave_0: left promiscuous mode [ 2916.577396][T26635] bridge0: port 1(bridge_slave_0) entered disabled state [ 2916.875277][T32723] Bluetooth: hci4: command tx timeout [ 2916.926089][T26635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2916.938584][T26635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2916.948323][T26635] bond0 (unregistering): Released all slaves [ 2916.981370][T32747] bridge0: port 1(bridge_slave_0) entered blocking state [ 2916.988847][T32747] bridge0: port 1(bridge_slave_0) entered disabled state [ 2916.996249][T32747] bridge_slave_0: entered allmulticast mode [ 2917.003813][T32747] bridge_slave_0: entered promiscuous mode [ 2917.012516][T32747] bridge0: port 2(bridge_slave_1) entered blocking state [ 2917.019745][T32747] bridge0: port 2(bridge_slave_1) entered disabled state [ 2917.027051][T32747] bridge_slave_1: entered allmulticast mode [ 2917.035949][T32747] bridge_slave_1: entered promiscuous mode [ 2917.080495][T32747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2917.092534][T32747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2917.130001][T32747] team0: Port device team_slave_0 added [ 2917.156034][T32747] team0: Port device team_slave_1 added [ 2917.196620][T32747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2917.203635][T32747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2917.229679][T32747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2917.246075][T26635] hsr_slave_0: left promiscuous mode [ 2917.251750][T26635] hsr_slave_1: left promiscuous mode [ 2917.257592][T26635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2917.265136][T26635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2917.273608][T26635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2917.280974][T26635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2917.301136][T26635] veth1_macvtap: left promiscuous mode [ 2917.306763][T26635] veth0_macvtap: left promiscuous mode [ 2917.312300][T26635] veth1_vlan: left promiscuous mode [ 2917.317756][T26635] veth0_vlan: left promiscuous mode [ 2917.655931][T26635] team0 (unregistering): Port device team_slave_1 removed [ 2917.689190][T26635] team0 (unregistering): Port device team_slave_0 removed [ 2918.037208][T32747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2918.045043][T32747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2918.071674][T32747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2918.118519][T32747] hsr_slave_0: entered promiscuous mode [ 2918.125125][T32747] hsr_slave_1: entered promiscuous mode [ 2918.131281][T32747] debugfs: 'hsr0' already exists in 'hsr' [ 2918.137300][T32747] Cannot create hsr debugfs directory [ 2918.421289][T26635] IPVS: stop unused estimator thread 0... [ 2918.537082][T26635] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2918.582279][T32747] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2918.592205][T32747] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2918.621484][T26635] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2918.636313][T32747] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2918.645553][T32747] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2918.705805][T26635] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2918.732126][T32747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2918.747591][T32747] 8021q: adding VLAN 0 to HW filter on device team0 [ 2918.775701][T26635] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2918.789526][T21649] bridge0: port 1(bridge_slave_0) entered blocking state [ 2918.796607][T21649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2918.810689][T17826] bridge0: port 2(bridge_slave_1) entered blocking state [ 2918.817760][T17826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2918.958369][T26635] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2918.962327][T32723] Bluetooth: hci4: command tx timeout [ 2919.045405][T26635] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2919.067477][T32747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2919.140554][T26635] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2919.214462][T26635] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2919.264284][T32747] veth0_vlan: entered promiscuous mode [ 2919.279220][T32747] veth1_vlan: entered promiscuous mode [ 2919.308088][T32747] veth0_macvtap: entered promiscuous mode [ 2919.317708][T32747] veth1_macvtap: entered promiscuous mode [ 2919.358453][T32747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2919.377165][T32747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2919.418412][T26635] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2919.444823][T17826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2919.454557][T17826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2919.463969][T17826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2919.476512][T17826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2919.538973][T26635] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2919.567426][T17826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2919.575924][T17826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2919.609896][T26635] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2919.625376][T18276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2919.633475][T18276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2919.708595][T26635] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2919.836864][T26635] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2919.942598][T26635] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2919.989686][T26635] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2920.049381][T26635] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2920.148559][T26635] bridge_slave_1: left allmulticast mode [ 2920.156044][T26635] bridge_slave_1: left promiscuous mode [ 2920.162963][T26635] bridge0: port 2(bridge_slave_1) entered disabled state [ 2920.171330][T26635] bridge_slave_0: left allmulticast mode [ 2920.177137][T26635] bridge_slave_0: left promiscuous mode [ 2920.182880][T26635] bridge0: port 1(bridge_slave_0) entered disabled state [ 2920.194728][T26635] bridge0: port 3(batadv0) entered disabled state [ 2920.202622][T26635] bridge_slave_1: left allmulticast mode [ 2920.208897][T26635] bridge_slave_1: left promiscuous mode [ 2920.214571][T26635] bridge0: port 2(bridge_slave_1) entered disabled state [ 2920.223184][T26635] bridge_slave_0: left allmulticast mode [ 2920.228800][T26635] bridge_slave_0: left promiscuous mode [ 2920.235044][T26635] bridge0: port 1(bridge_slave_0) entered disabled state [ 2920.258086][T26635] bridge_slave_1: left allmulticast mode [ 2920.264631][T26635] bridge_slave_1: left promiscuous mode [ 2920.270256][T26635] bridge0: port 2(bridge_slave_1) entered disabled state [ 2920.280537][T26635] bridge_slave_0: left allmulticast mode [ 2920.286473][T26635] bridge_slave_0: left promiscuous mode [ 2920.292413][T26635] bridge0: port 1(bridge_slave_0) entered disabled state [ 2920.301976][T26635] bridge_slave_1: left allmulticast mode [ 2920.308703][T26635] bridge_slave_1: left promiscuous mode [ 2920.314920][T26635] bridge0: port 2(bridge_slave_1) entered disabled state [ 2920.323158][T26635] bridge_slave_0: left allmulticast mode [ 2920.328776][T26635] bridge_slave_0: left promiscuous mode [ 2920.335098][T26635] bridge0: port 1(bridge_slave_0) entered disabled state