last executing test programs: 7m38.922887513s ago: executing program 3 (id=1545): r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x103842) dup3(r0, r1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}}, 0x0, 0x0, 0x4e, 0x0, "49df4ffe5d9c533da378c3ec111d08000000000000009d73660f5d9459f47415f6e029b01d99291517d8a400ed5a20356ce10b0602fe218f3dea0baeaa030000008adda2ddfc936ea8b049d100"}, 0xd8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048854}, 0x40010) recvmmsg(r3, &(0x7f0000000e40)=[{{&(0x7f0000000280)=@caif=@dgm, 0x80, &(0x7f0000000040), 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000001f40), 0x10000350, &(0x7f0000000f00)=""/225, 0xdd}, 0x1001}, {{&(0x7f00000003c0)=@generic, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)=""/77}, {&(0x7f0000000a00)=""/109}, {&(0x7f0000001000)=""/189}, {&(0x7f0000000b40)=""/82}, {&(0x7f0000000bc0)=""/90}, {&(0x7f0000000c40)=""/99}, {&(0x7f0000000cc0)=""/213}, {&(0x7f0000002180)=""/4096}], 0x0, &(0x7f0000000300)=""/26}, 0xdc3}], 0x2, 0x100, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xde3ebb5) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040) 7m38.433846431s ago: executing program 3 (id=1549): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}, 0x1c) connect$inet6(r1, &(0x7f0000001dc0)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7ff}, 0x1c) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000002c0)="23000000010006", 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000030000180080006000100000014000400fc020000000000000000000000000000060001000a000000060005"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000580)={0x201, 0x0, &(0x7f0000000200), &(0x7f0000000400), 0x0, &(0x7f0000000340), 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000b80)={&(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r7, r6, 0x1, 0x7f, 0x88, 0x80000000, {0x9, 0x97, 0x5, 0xe2, 0x1, 0x7, 0x3, 0x4, 0xb4, 0xfffc, 0x550, 0x9, 0x10, 0x4, "9e573c4abac150d8ab666985cc4944c46d8543740fe654467e184c5087f1dde3"}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/237, 0xed}], 0x1}, 0x0) r10 = io_uring_setup(0x6858, &(0x7f0000000100)={0x0, 0xf0ce, 0x3480, 0x0, 0x14}) io_uring_enter(r10, 0x0, 0xcb, 0xf, &(0x7f0000000000)={[0x20]}, 0x18) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x41}, 0x0) 7m37.624685365s ago: executing program 3 (id=1551): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="0000000000000000007919b800000000009500"/32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000500)=ANY=[@ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0xfe2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001c15ce8b214c7778d1528e77c027ea84a79e6aa067eca201ea1d8b58d0f823b6dba6bf877fae88cbddce7d22ad8aaaea049dfff333c87b0c93ff5b3c93593df5ba813dcaae34b37659b5ef82dfdaaaaf9eea976153f40065939ad4db7bdd482bd65b97e71d231aec1d693ca863bdc6e62a72be0017c0e20bb18ada4d836e67eef659a4db079adda664795b8c658ef86e8cf83369afd1a98eb2fcc641ecebbbe0ea60c067ca8f8aa8412945890e4842bbab39dea1ca5d90e424", @ANYRES16=r4, @ANYBLOB="080025bd7000fcdbdf250900000005002d000100000008002c000300000008003b00ff00000008000b000000001005002a0000000000050035007f0000000a0009000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x40000) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r6, 0x16, 0x0, @void}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000040), 0x4) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x24020400) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'IDLETIMER\x00'}, &(0x7f0000000440)=0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="fc0000000000000000000000010000000f0000000000000011000000000000000000000001eb00000400000000000002400000000000000000000000070000008908b03575497573890fe3ac1e00010e010101e000000144189d7000000006b57ba75bc50000a9fe00001006000000070000000800110000000000000000000000000000000000000052ba8c52b0da907a7a8a9d0c8c8ac039522629a23fa3c15bee020000000000000000"], 0x88}, 0x0) 7m35.825095681s ago: executing program 3 (id=1554): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) unshare(0x20400) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000001"], 0x50) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 7m35.529354914s ago: executing program 3 (id=1555): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3ff, 0x7, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x3, 0x3}}]}}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010800000000000000000300000a10000300686173683a69702d6d616300050001000700000005000500020000000900020073797a310000000005000400000000000c0007800800064000000000"], 0x54}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0xc8, &(0x7f0000000040)=""/200}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x1, 0xffffffffffffffff}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2000020a, &(0x7f0000000200)=[{0x80, 0x7, 0x0, 0x9}, {0xfff3, 0x6, 0x8, 0xb}, {0x3}, {0x49, 0x7, 0x2, 0x9}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x80000}) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r7}) io_uring_setup(0xf9f, &(0x7f0000000240)={0x0, 0x9924, 0x1, 0x3, 0x180}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x400000000, 0x5, 0xfffffffffffffffb, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0xb, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdx:De', 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB=' !I'], 0x0, 0x0, 0x0, 0x0}, 0x0) 7m31.766055418s ago: executing program 3 (id=1565): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) unshare(0x20000400) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f00000001c0), 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0x8, 0x1000, 0x20000, 0x0, 0x36, 0x1000, 0x4}, 0x9c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x1a41, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) write$P9_RSTATu(r4, &(0x7f0000000540)={0xe1, 0x7d, 0x2, {{0x0, 0xcb, 0x403, 0xfe, {0x48, 0x3, 0x8}, 0x46100000, 0x1, 0x2, 0x0, 0x9, '/dev/ppp\x00', 0x1, '\xff', 0x8d, '\xec+\xb801\xf8Iw\x97\xfdF\x86\xddR\x19\x88\a\x8e:&*\xeb1Y\x14\xae\x91jN\xddlc\xb3x\xc4\xcd\x8e\xcd\xd2\xc7\x8a\xd5w\x10\xd0Y\xa5\xe9\xa6\xf5\x14\xe8\x9b\x88N7n\xa6[I\xc6\x88-\x95\x15\xf6B\x8a\x90\x8e1_\x1f\x04mOs\xf2\x7f\xaaO\x93?\xa5\x1f\x9f\xeb\x9e\xbd\xb8\xf2\xd3\x8f\xca%\xd3\xc4;Y\xd9\x82\xd2\x7f\xffV\xea\xf4\x8b\xcb\xb1M\xae-\xd0\xcd\xc9\xae\xa5z\xe3g\xdb\xeb$\xc0It\xed\xc5/ 8\x99\xfc\x80\xb0\x94\a]\xe1\xc0', 0x1, '\x00'}, 0x1, '\x00'}}, 0xe1) 7m16.067622709s ago: executing program 32 (id=1565): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) unshare(0x20000400) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f00000001c0), 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0x8, 0x1000, 0x20000, 0x0, 0x36, 0x1000, 0x4}, 0x9c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x1a41, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) write$P9_RSTATu(r4, &(0x7f0000000540)={0xe1, 0x7d, 0x2, {{0x0, 0xcb, 0x403, 0xfe, {0x48, 0x3, 0x8}, 0x46100000, 0x1, 0x2, 0x0, 0x9, '/dev/ppp\x00', 0x1, '\xff', 0x8d, '\xec+\xb801\xf8Iw\x97\xfdF\x86\xddR\x19\x88\a\x8e:&*\xeb1Y\x14\xae\x91jN\xddlc\xb3x\xc4\xcd\x8e\xcd\xd2\xc7\x8a\xd5w\x10\xd0Y\xa5\xe9\xa6\xf5\x14\xe8\x9b\x88N7n\xa6[I\xc6\x88-\x95\x15\xf6B\x8a\x90\x8e1_\x1f\x04mOs\xf2\x7f\xaaO\x93?\xa5\x1f\x9f\xeb\x9e\xbd\xb8\xf2\xd3\x8f\xca%\xd3\xc4;Y\xd9\x82\xd2\x7f\xffV\xea\xf4\x8b\xcb\xb1M\xae-\xd0\xcd\xc9\xae\xa5z\xe3g\xdb\xeb$\xc0It\xed\xc5/ 8\x99\xfc\x80\xb0\x94\a]\xe1\xc0', 0x1, '\x00'}, 0x1, '\x00'}}, 0xe1) 7m2.187142936s ago: executing program 0 (id=1684): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r1, 0x1}, 0xc) 7m1.978113027s ago: executing program 0 (id=1687): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 7m1.87182698s ago: executing program 0 (id=1689): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b708"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) 7m1.666197768s ago: executing program 0 (id=1692): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x5, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2000000}, 0x50) 7m1.516056432s ago: executing program 0 (id=1694): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 7m1.400358422s ago: executing program 0 (id=1696): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2e, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xffbf) 7m0.951375739s ago: executing program 4 (id=1700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a00", @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 7m0.518406291s ago: executing program 4 (id=1702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x10000, r4, 0x0, 0x1c000000007400}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 7m0.342284212s ago: executing program 4 (id=1704): bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xe, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@alu={0x4, 0x0, 0x4, 0x8, 0x0, 0x0, 0x4}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m0.220049873s ago: executing program 4 (id=1705): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11, 0x4}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) 7m0.10197478s ago: executing program 4 (id=1706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0xc, 0x5, 0x4, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000100), 0x0}, 0x20) 6m59.966789539s ago: executing program 4 (id=1708): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m59.691226939s ago: executing program 2 (id=1711): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) execve(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) readv(r0, &(0x7f00000001c0), 0x2d7) 6m58.738002065s ago: executing program 2 (id=1712): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000900000000000000010000006b011c00000000001800000001000000000000000035000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m58.561560499s ago: executing program 2 (id=1713): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m58.532622109s ago: executing program 2 (id=1714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000001000000ff00000007", @ANYRES32=0x0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0x75, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f00000007c0), 0x0}, 0x20) 6m58.441345398s ago: executing program 2 (id=1715): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="12000000040000000800000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x37) 6m58.318201905s ago: executing program 2 (id=1716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0380, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000080)=r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 6m45.500645379s ago: executing program 33 (id=1696): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2e, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xffbf) 6m44.458413521s ago: executing program 34 (id=1708): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m42.404333709s ago: executing program 35 (id=1716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0380, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000080)=r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1m26.462130509s ago: executing program 5 (id=2184): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000040)={0x8, 0x102, 0x2, {0x2, 0x7, 0xd0, 0x7}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x54, 0x5, 0xffffffffffffff94, 0x5, 0x9, 0x3, 0x10000, 0xffff, 0x8000000000000000, 0xa, 0x5}) r4 = socket$pptp(0x18, 0x1, 0x2) accept(r4, 0x0, 0x0) r5 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002020000402505a1a44000010203010902640002010000080904000001020d0000052406000105240000000d240f011000000000000000000624ee00000808241c0b0007160d090581030800002400090401"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xc4, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x3, 0x1, 0x0, 0x90, 0xf3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x5}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x5, 0x5, [0x1, 0x9, 0x3, 0x9, 0xa], 0xb3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x46, 0x6, 0x2}, @as_header={0x7, 0x24, 0x1, 0x4, 0x3}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfff, 0x6, 0x1, "81aa0ba085"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x81, 0x4, {0x7, 0x25, 0x1, 0x83, 0x5, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x6, 0x2, 0x2, 0xef, "814dc942eb042720"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x4, 0x5, 0x9b, "13d45b91607af3"}, @as_header={0x7, 0x24, 0x1, 0xc, 0xc, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xc, 0x6, 0x4, {0x7, 0x25, 0x1, 0x81, 0x3}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xfc, 0x1, 0x15, 0x8, 0x2}, 0x5f, &(0x7f0000000140)=ANY=[@ANYBLOB="050f5f00a43c0cf3ab8ea9dbbf97196f5bd6a0d6000201100035100b06ddde63c1818f92e730d1f47e3edaaad04db4e1a7e1a6244aaa1af8f81f6be3e15b8fce566748453f2117bcea3d63c870b207100212480100"/95], 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1037}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x422}}, {0xfe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}]}) 1m23.030678972s ago: executing program 5 (id=2201): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @broadcast}}}, 0x84) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000240)=[0x5, 0xdbb5, 0x40]) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000010000085000000500000009500000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff65, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="34040007", @ANYRES16=r5, @ANYBLOB="05022cbd7000f9dbdf25120000001800018014000200626f6e645f736c6176655f31000000000800060045ffffff"], 0x34}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="52fb64364baa3f901787a470c8b8767a87fb253f9cb6730f011facb0c2b0800a9976b7fd8a3083ebc241", @ANYRES32, @ANYRES8], 0x34}, 0x1, 0x0, 0x0, 0x4b9702dee4ac411b}, 0x4004854) 1m20.38429143s ago: executing program 5 (id=2210): r0 = io_uring_setup(0x78bc, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x17, &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x2}, 0x1) mmap(&(0x7f0000fd1000/0x1000)=nil, 0x1000, 0x3000008, 0x20031, r0, 0xb9ddd000) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, &(0x7f0000000180)=0x3ff, 0xc, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 1m20.26020606s ago: executing program 5 (id=2212): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000001880)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="73f4", 0x2}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0x5, @private2, 0x7a}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000000200)="c2", 0x1}], 0x1}}], 0x2, 0xc010) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 1m18.945034583s ago: executing program 5 (id=2214): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x37}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1m18.679339521s ago: executing program 5 (id=2217): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x191d, 0x8, 0x8000, 0x40000250}, 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open(&(0x7f0000000c00)='./file0\x00', 0x202180, 0xf3) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1, 0x8f, 0x3b16) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES16], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x7) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wlan1\x00'}) 1m3.022986309s ago: executing program 36 (id=2217): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x191d, 0x8, 0x8000, 0x40000250}, 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open(&(0x7f0000000c00)='./file0\x00', 0x202180, 0xf3) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1, 0x8f, 0x3b16) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES16], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x7) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wlan1\x00'}) 8.280547751s ago: executing program 8 (id=2378): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x12, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x191d, 0x8, 0x8000, 0x40000250}, 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open(&(0x7f0000000c00)='./file0\x00', 0x202180, 0xf3) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1, 0x8f, 0x3b16) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES16], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x7) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wlan1\x00'}) 6.614671308s ago: executing program 1 (id=2388): fchmod(0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001800), 0x800, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r2 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r2, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/16], 0xd0ec2) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x2080, 0x0) r7 = fsmount(r6, 0x1, 0x6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100000000000000010200850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x45) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0x2, 0xe9e8, {{0x29, 0x4, 0x1, 0x7, 0xa4, 0x65, 0x0, 0xe, 0x29, 0x0, @multicast1, @multicast1, {[@ssrr={0x89, 0x17, 0x3a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @generic={0x83, 0xf, "c7913002b78cbdda61a67c7ea5"}, @cipso={0x86, 0x5a, 0x2, [{0x1, 0xe, "4d548e73f48a80cc776f9054"}, {0x7, 0xb, "1c07b69bed8453e85c"}, {0x0, 0xc, "04204160ba7a86a7718b"}, {0x2, 0xf, "e056ac7f5663bc704d85b9a3c6"}, {0x5, 0x2}, {0x1, 0xa, "72148dc6430e196f"}, {0x1, 0x2}, {0x1, 0x12, "2b21d75ecb8168329bb94b698c3326d0"}]}, @rr={0x7, 0xf, 0xbb, [@local, @remote, @broadcast]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x19, &(0x7f0000000580)=ANY=[@ANYBLOB="bf490100000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000006d68800000000000b7080000000000007b8af8ff00000000b7080000100000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018180000", @ANYRES32=r7, @ANYBLOB="00000000000000006eaa5b608a2e9e664b737052f25dfe20630d1119880a68491e87a498615d6b0df3218f200a001e5401f81ce634197c0fa05afa6af2667a285548d9939f439e1c859a55df53c1e1bca50da9c9bae0131e1ef30bb350698b042f33c0d6"], &(0x7f0000000040)='syzkaller\x00', 0x3ff, 0x9, &(0x7f0000000080)=""/9, 0x40f00, 0x60, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x3, 0x2}, {0x5, 0x4, 0xe, 0x2}, {0x0, 0x2, 0xf, 0x7}, {0x0, 0x5, 0xd, 0x5}, {0x1, 0x5, 0x8, 0x5}, {0x2, 0x4, 0xb, 0xb}, {0x1, 0x4, 0x1}, {0x2, 0x4, 0x7, 0xa}, {0x4, 0x4, 0x6, 0xb}, {0x4, 0x2}], 0x10, 0xad7}, 0x94) syz_fuse_handle_req(r0, &(0x7f0000002240)="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", 0x2000, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.165131196s ago: executing program 8 (id=2389): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, r1, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0xffa6, 0x0, 0xd0}, 0x20008000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) syz_emit_ethernet(0xa0, &(0x7f0000000280)={@random="52661aa500", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x6a, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x896f, [0xfffc]}, {}, {}, {0xa888}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "042a0ad4064345439911d1d23bfe795f21ea6e87411072d506c5923a6c12897aa03bcd6e"}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x2, {0xa, 0x4e20, 0x6, @local, 0x5}, r3}}, 0x38) r4 = timerfd_create(0x0, 0x800) r5 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd=r4, 0x2, 0x0}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r2, 0x1, 0x0) mknodat$loop(r8, &(0x7f0000000080)='./file1\x00', 0xffff2000, 0x1) 5.871909696s ago: executing program 1 (id=2392): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000003780)=[{{&(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r3, 0xd}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0x1, 0x0, &(0x7f0000000000)) fsopen(0x0, 0x0) syz_emit_ethernet(0x73, &(0x7f0000000980)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x3d, 0x3a, 0xff, @private1, @mcast2, {[], @dest_unreach={0x1, 0x6, 0x0, 0x10, '\x00', {0x6, 0x6, "8ab169", 0xff, 0x2f, 0xff, @private0, @remote, [@fragment={0x3c, 0x0, 0xb0, 0x0, 0x0, 0x17, 0x67}], "dfbe44563f"}}}}}}}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000280)=""/33, 0x21, 0x0, &(0x7f00000002c0)=""/202, 0xca}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x4584300864c832d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000740)}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x13a03}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) 4.42803644s ago: executing program 6 (id=2393): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x12, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x191d, 0x8, 0x8000, 0x40000250}, 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open(&(0x7f0000000c00)='./file0\x00', 0x202180, 0xf3) mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1, 0x8f, 0x3b16) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES16], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x7) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wlan1\x00'}) 4.413450784s ago: executing program 8 (id=2395): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000040000000000002000000850000009900000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40ffd, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x11, &(0x7f0000001540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0xfe, @remote, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05", @ANYRES16=r4], 0x0) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000140)=0x8, 0x4) openat$cgroup_ro(r4, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) 3.726076818s ago: executing program 7 (id=2396): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="200000000000040003000000000000000000001020"], 0x0) 3.356486927s ago: executing program 7 (id=2397): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, {[@ssrr={0x89, 0x3, 0xa2}, @timestamp={0x44, 0x4, 0x3, 0x3, 0xd}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180a19dce68500009fd48f38148ae6a9d080b2638200410000009500000400"/45], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000900)="a4", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4) shutdown(r5, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000200)="568e1d05d3fe3a51eb307bd51476", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="08000400"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x404c094) 3.082539292s ago: executing program 9 (id=2263): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x8, 0x80400}) 2.945214946s ago: executing program 7 (id=2398): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x141) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file1\x00') 2.88022451s ago: executing program 9 (id=2399): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) poll(&(0x7f0000b2c000)=[{r1}], 0x2c, 0xffffffffffbffff8) r3 = dup2(r0, r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r2], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc}, 0x94) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, 0x0, 0x0, 0x3000000000000000}]) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3e) 2.772171334s ago: executing program 7 (id=2400): fchmod(0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000001800), 0x800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r1 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r1, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/16], 0xd0ec2) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x2080, 0x0) r6 = fsmount(r5, 0x1, 0x6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100000000000000010200850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x45) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0x2, 0xe9e8, {{0x29, 0x4, 0x1, 0x7, 0xa4, 0x65, 0x0, 0xe, 0x29, 0x0, @multicast1, @multicast1, {[@ssrr={0x89, 0x17, 0x3a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @generic={0x83, 0xf, "c7913002b78cbdda61a67c7ea5"}, @cipso={0x86, 0x5a, 0x2, [{0x1, 0xe, "4d548e73f48a80cc776f9054"}, {0x7, 0xb, "1c07b69bed8453e85c"}, {0x0, 0xc, "04204160ba7a86a7718b"}, {0x2, 0xf, "e056ac7f5663bc704d85b9a3c6"}, {0x5, 0x2}, {0x1, 0xa, "72148dc6430e196f"}, {0x1, 0x2}, {0x1, 0x12, "2b21d75ecb8168329bb94b698c3326d0"}]}, @rr={0x7, 0xf, 0xbb, [@local, @remote, @broadcast]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x19, &(0x7f0000000580)=ANY=[@ANYBLOB="bf490100000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000006d68800000000000b7080000000000007b8af8ff00000000b7080000100000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018180000", @ANYRES32=r6, @ANYBLOB="00000000000000006eaa5b608a2e9e664b737052f25dfe20630d1119880a68491e87a498615d6b0df3218f200a001e5401f81ce634197c0fa05afa6af2667a285548d9939f439e1c859a55df53c1e1bca50da9c9bae0131e1ef30bb350698b042f33c0d6"], &(0x7f0000000040)='syzkaller\x00', 0x3ff, 0x9, &(0x7f0000000080)=""/9, 0x40f00, 0x60, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x3, 0x2}, {0x5, 0x4, 0xe, 0x2}, {0x0, 0x2, 0xf, 0x7}, {0x0, 0x5, 0xd, 0x5}, {0x1, 0x5, 0x8, 0x5}, {0x2, 0x4, 0xb, 0xb}, {0x1, 0x4, 0x1}, {0x2, 0x4, 0x7, 0xa}, {0x4, 0x4, 0x6, 0xb}, {0x4, 0x2}], 0x10, 0xad7}, 0x94) 2.650082776s ago: executing program 6 (id=2401): r0 = inotify_init() close_range(r0, 0xffffffffffffffff, 0x0) 2.543847528s ago: executing program 1 (id=2402): socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) timer_create(0x0, 0x0, 0x0) timer_getoverrun(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040008, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4048854}, 0x40010) recvmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000280)=@caif=@dgm, 0x80, &(0x7f0000000040)}, 0x8}, {{0x0, 0x0, &(0x7f0000001f40), 0x0, &(0x7f0000000f00)=""/225, 0xe1}, 0x1001}, {{&(0x7f00000003c0)=@generic, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f0000001000)=""/189, 0xbd}, {&(0x7f0000000b40)=""/82, 0x52}, {&(0x7f0000000bc0)=""/90, 0x5a}, {&(0x7f0000000c40)=""/99, 0x63}, {&(0x7f0000000cc0)=""/213, 0xd5}, {&(0x7f0000002180)=""/4096, 0x1000}], 0x7, &(0x7f0000000300)=""/26, 0x1a}, 0xdc3}], 0x3, 0x100, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040) 2.435506832s ago: executing program 6 (id=2403): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x1, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf177c000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.215805854s ago: executing program 6 (id=2404): mount$cgroup2(0x0, &(0x7f00000006c0)='.\x00', &(0x7f0000000000), 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB='nsdelegate=']) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e3, 0x0) syz_io_uring_setup(0x5d99, 0x0, &(0x7f0000000140), 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0x3}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4624, 0x40003, @mcast1}, {0x2, 0xfff9, 0xe0100000, @remote, 0xffffffff}, r2, 0x9dffffff}}, 0x48) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x80, &(0x7f00000003c0)={[{@max={'max', 0x3d, 0x3ea9468}}]}) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) r6 = socket(0x22, 0x2, 0x4) unshare(0x2040400) getpid() getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) bind$bt_l2cap(r6, 0x0, 0x0) mount$afs(&(0x7f0000000280)=@cell={0x25, '', 'syz1'}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x2a0880, &(0x7f0000000700)={[{@dyn}, {@dyn}], [{@euid_eq={'euid', 0x3d, r5}}, {@subj_user={'subj_user', 0x3d, '/dev/infiniband/rdma_cm\x00'}}, {@dont_hash}, {@obj_role={'obj_role', 0x3d, 'max'}}, {@seclabel}, {@fsname={'fsname', 0x3d, './binderfs\x00'}}, {@permit_directio}]}) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r3) sendfile(r3, r3, &(0x7f0000000480)=0x3, 0xfffffffffffffffa) socket$nl_xfrm(0x10, 0x3, 0x6) 2.213616253s ago: executing program 8 (id=2405): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x80000001, 0xd, 0x20363159, 0x7, 0xa, [{0x8000007, 0x8001}, {0x5d, 0xffffff67}, {0x615, 0x59}, {0x8, 0x53}, {0x1ff, 0x1}, {0x7fffffff, 0xcc6}, {0x81, 0x1}, {0x46, 0x4}], 0x9, 0x6, 0x8, 0x1, 0x2}}) 2.209837247s ago: executing program 7 (id=2406): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82403) ioctl$CEC_S_MODE(r4, 0x40046109, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r5) 1.910413212s ago: executing program 8 (id=2407): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x6c7e, &(0x7f0000000140)={0x0, 0x0, 0x3000}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x20) 1.778183405s ago: executing program 8 (id=2408): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000003780)=[{{&(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r3, 0xd}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0x1, 0x0, &(0x7f0000000000)) fsopen(0x0, 0x0) syz_emit_ethernet(0x73, &(0x7f0000000980)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x3d, 0x3a, 0xff, @private1, @mcast2, {[], @dest_unreach={0x1, 0x6, 0x0, 0x10, '\x00', {0x6, 0x6, "8ab169", 0xff, 0x2f, 0xff, @private0, @remote, [@fragment={0x3c, 0x0, 0xb0, 0x0, 0x0, 0x17, 0x67}], "dfbe44563f"}}}}}}}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000280)=""/33, 0x21, 0x0, &(0x7f00000002c0)=""/202, 0xca}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x13a03}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) 1.739002692s ago: executing program 6 (id=2409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x44, r1, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) (fail_nth: 4) 466.4695ms ago: executing program 9 (id=2410): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @broadcast}}}, 0x84) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000240)=[0x5, 0xdbb5, 0x40]) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000010000085000000500000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff65, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="34040007", @ANYRES16=r4, @ANYBLOB="05022cbd7000f9dbdf25120000001800018014000200626f6e645f736c6176655f31000000000800060045ffffff"], 0x34}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="52fb64364baa3f901787a470c8b8767a87fb253f9cb6730f011facb0c2b0800a9976b7fd8a3083ebc241", @ANYRES32, @ANYRES8], 0x34}, 0x1, 0x0, 0x0, 0x4b9702dee4ac411b}, 0x4004854) 418.055963ms ago: executing program 6 (id=2411): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e2a, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@private=0xa010100, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0xfffffffc, 0x3, 0x3, 0xba, 0x0, 0x8000000}}, 0xe8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0ff5000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfe) 327.998083ms ago: executing program 1 (id=2412): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000140), 0x3, 0x2) preadv(r2, &(0x7f00000005c0), 0x0, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x3) unshare(0x28000600) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x8010) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff85000000730000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="e07b292fe079989cb9547ed387db", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3, 0x10000000}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYRESDEC=0x0, @ANYBLOB="0000000000000000c86284eed10000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4000, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 268.877526ms ago: executing program 7 (id=2413): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x1c, r5, 0x31, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000003}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x8, {0x0, 0xea60}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "60001706111000"}}, 0x48}, 0x1, 0x0, 0x0, 0x400d4}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x1000002, @private2, 0xffffffff}}, 0x8, 0x2}, 0x90) 38.071049ms ago: executing program 1 (id=2414): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fa6b079a848a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)={0xb0, 0x0, 0x0, [{{0x2, 0x1, 0xfffffffffffffc01, 0x2, 0xac6, 0x41de, {0x64, 0x7, 0xdd3, 0x0, 0x100, 0x9, 0x2a8, 0x6ae, 0x0, 0x1000, 0x7ff, r2, 0x0, 0xfffffffc, 0x80}}, {0x5, 0x4, 0x3, 0x55da8eb3, 'syz'}}]}, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=2415): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001940)=@newtfilter={0xf20, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x41}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @filter_kind_options=@f_u32={{0x8}, {0xebc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffef, 0xfff1}}, @TCA_U32_LINK={0x8, 0x3, 0x2c0000}, @TCA_U32_INDEV={0x14, 0x8, 'team0\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0xfe}, @TCA_U32_ACT={0xe8c, 0x7, [@m_simple={0x38, 0x12, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0xfffffbff, 0x10000000, 0x2, 0x8}, 0x80, 0xd}, [{0xc9, 0x2, 0x1, 0x400, 0x8, 0x1}, {0x0, 0x6, 0x47ecf86e, 0x0, 0x1, 0x6}, {0x2, 0x2072, 0x425, 0x7fff, 0x1, 0x77}, {0x1, 0x8, 0x10001, 0x1, 0x4, 0x10}, {0x5, 0x1000, 0x2, 0x83, 0x3, 0x8}, {0xfffffffc, 0x8, 0x1, 0x1, 0x80000000}, {0x5d, 0x1000, 0x1ff, 0xe849, 0x8, 0x4}, {0x7, 0x2, 0x28, 0x4, 0x7, 0x7}, {0x8, 0x1, 0x9b, 0x6, 0x4, 0x8000}, {0x80, 0x2, 0x7, 0x5, 0x7ff, 0x893}, {0x2, 0x2, 0x5, 0x3, 0x65, 0x9}, {0x1, 0x4, 0x4, 0x9, 0x6, 0xe}, {0xffff, 0x100, 0x3, 0x7, 0x6, 0x7}, {0x4, 0x7ff, 0x5, 0x7, 0x5, 0x1}, {0x7, 0x7fff, 0x0, 0x4004, 0x9, 0x80}, {0x5, 0x48, 0xa94, 0x6, 0xffffffff, 0xff}, {0x7, 0xff00, 0x4, 0x7, 0x9, 0xb}, {0x5, 0xa3, 0xb, 0x9, 0x4800, 0x6b}, {0x9, 0x1, 0x2, 0x1, 0x8, 0x2f1}, {0xd32, 0x1000, 0x80, 0x81, 0x9, 0x1}, {0xf5, 0x9, 0x3, 0xb000000, 0x4, 0x5}, {0x4, 0x400, 0x1, 0x7ff, 0x36, 0x7}, {0xfffffffe, 0x80000000, 0x3, 0x0, 0xc, 0x1}, {0x10, 0x3, 0x3, 0x7, 0x2, 0xfffffffa}, {0xfffffff7, 0x4, 0x1, 0x6c88, 0x5, 0x10000}, {0xa, 0xec35, 0x2, 0x9, 0x6, 0x9}, {0x2, 0x0, 0x3, 0x8, 0x6, 0x1000}, {0xfffffffb, 0x200, 0x2, 0x5, 0xfffffffc, 0x7}, {0x3, 0x401, 0x1, 0xf3, 0xef0, 0xfffffffa}, {0x3, 0x0, 0x8, 0xe32, 0x400, 0x8}, {0x7f, 0x4, 0xfffffffe, 0xfffffffb, 0x1, 0x80}, {0x4, 0x8, 0x6, 0x99, 0x6, 0x1000}, {0x593, 0x8, 0x6, 0x7, 0xd2df, 0x4}, {0x0, 0x7, 0x1, 0xaf96, 0x10, 0xfffffff7}, {0x0, 0x5, 0x1ff, 0x7, 0x1ff, 0x4}, {0x3, 0x3ff, 0x3, 0x3, 0x40019, 0xb5}, {0x2, 0x3, 0xf0, 0xff, 0xfffffffe, 0x8b}, {0x10000, 0x1ff, 0x2, 0x97cf, 0x45b}, {0x9, 0x3, 0x80000000, 0x80000000, 0x0, 0xb}, {0x9, 0xd9f5, 0xe3, 0xb, 0x5, 0x4}, {0x7, 0xf, 0x2, 0x3, 0x10000, 0xfffff001}, {0x8, 0xfffffffb, 0xfff, 0x4, 0x731b482, 0x8}, {0x1, 0xc738, 0x9, 0x2, 0x8, 0x7}, {0x7, 0x7ff, 0x8, 0xffffffd8, 0x0, 0xfffffffb}, {0x200, 0x3, 0x3, 0xfff, 0x2, 0x2}, {0x0, 0x1, 0xff, 0xffffd21c, 0x4, 0x3}, {0xe2, 0x0, 0x9, 0x4, 0xfffff001, 0x400}, {0x0, 0x1000, 0x80, 0x4, 0x4f, 0xfffffffe}, {0x7e, 0x400, 0x8, 0x5, 0x7, 0x8}, {0x8, 0x0, 0x6, 0x2, 0x5, 0xffffff81}, {0x8, 0x100, 0xff, 0x1ff, 0x964, 0x8000}, {0x80, 0x0, 0x3, 0x4, 0x1, 0x18}, {0x5, 0xcc7, 0x8, 0x80, 0x0, 0x1}, {0x3, 0x4, 0x5, 0x7e, 0x8, 0xfffffff5}, {0x2, 0x9, 0x8, 0x9, 0x1}, {0x7, 0x1, 0x8, 0x3ff, 0x2df, 0x6}, {0xc, 0x20c05, 0xb, 0x101, 0x2}, {0x3, 0x56, 0x6, 0x3, 0x7, 0x9}, {0x5, 0x6, 0x8, 0x7, 0x7, 0x1}, {0x5, 0x7, 0x9, 0xd3, 0x8, 0x1}, {0x3, 0x1, 0x455, 0xc9000000, 0x9, 0x10000}, {0x9, 0x8, 0x8, 0x0, 0x1, 0x9}, {0xb47, 0x1, 0x2, 0x852, 0xf, 0xff}, {0xe, 0x3, 0x401, 0x3, 0x9, 0xffffa36b}, {0x4, 0x80000001, 0x2, 0x9f0, 0x2, 0x6}, {0xfffffffc, 0x80000000, 0x0, 0x0, 0xd, 0x4}, {0x5, 0x4, 0x401, 0x0, 0x9, 0x1}, {0x1, 0x5, 0x8, 0x0, 0x7, 0x1000}, {0xa, 0x80, 0x6, 0x9, 0x5852, 0x1}, {0x2, 0x0, 0x7fffffff, 0xa4c8, 0x5, 0x4}, {0x9, 0x12, 0x101, 0x1000, 0x2, 0x1}, {0x6, 0x10001, 0x100, 0x3, 0x2}, {0x7d, 0x4, 0x7, 0x0, 0x81, 0x7}, {0x80000000, 0x4f, 0x101, 0x8, 0xe, 0x6}, {0x187, 0x5, 0x6, 0x1, 0x6, 0x1000}, {0x0, 0xf, 0x1, 0x8e, 0x4, 0x8}, {0x1, 0x2, 0xccf, 0xffffffb5, 0x17a, 0x1}, {0x81, 0x0, 0x7ff, 0x8, 0x8001, 0x1}, {0x81, 0x2, 0x1, 0x1, 0x5, 0x6}, {0x10000, 0x2, 0x1000, 0x81, 0x4, 0x92}, {0x1, 0x1, 0x80000001, 0x6, 0x7fff, 0xfffffff8}, {0x5, 0x5, 0xad, 0x2, 0x400, 0x3}, {0x9, 0x9, 0x6, 0x2, 0x8, 0x94a}, {0x2, 0x1, 0x6, 0x10000, 0x9366, 0x5}, {0xff, 0x3, 0x4, 0x2, 0x4, 0x2}, {0x80, 0x7f, 0x0, 0x4, 0x6, 0x5}, {0x4, 0x9, 0x6, 0x100000, 0xfa1, 0xfffffff5}, {0x7, 0x101, 0x93d0, 0xf3, 0x3, 0x9}, {0x8000, 0x2, 0x0, 0xfb7, 0x8, 0x1000}, {0x7fff, 0x0, 0x3, 0x0, 0xff, 0x8}, {0x1a4e, 0x9, 0x6, 0x7, 0x7, 0x9}, {0x7, 0x7, 0x0, 0xf, 0x0, 0x4}, {0x9, 0x9, 0x8, 0xbc5, 0x81, 0x100}, {0x40, 0x4, 0x7, 0x800, 0x4, 0x7}, {0xb12a, 0x9, 0xa9, 0x1ff, 0x6, 0x7}, {0x100, 0x1b00, 0x1ff, 0x5, 0x1, 0x8}, {0x5df, 0x7fff, 0xc000, 0x8, 0x5, 0xca4}, {0xf, 0xa, 0x6, 0x3, 0x10000, 0x6}, {0x7, 0x200, 0x5, 0x510, 0x8, 0x7}, {0x5cc0e9e5, 0x3, 0x0, 0x7fff, 0x7fffffff, 0x5}, {0x10, 0xfff, 0xffffffff, 0x3ff, 0x1, 0x8}, {0x1, 0x1, 0xd, 0xfff, 0x2, 0x35d}, {0x6, 0x8, 0x6, 0x8, 0x8, 0x3ff}, {0x7, 0x7, 0x5, 0x6, 0x2, 0xcdf}, {0x9, 0x7, 0xa92c, 0x9, 0xa8, 0x4}, {0x1, 0x9, 0x10001, 0xfa6, 0x3, 0x8}, {0x5, 0xdad, 0x1, 0xe2f, 0xd, 0x6}, {0x3, 0x4, 0x2, 0x6, 0x1, 0x8001}, {0xb, 0x439d3188, 0xffff, 0x5, 0x1ff, 0x1}, {0xe2a0, 0x54, 0xffffffff, 0x6, 0x3, 0x80000000}, {0x1000, 0x4, 0xd3, 0x4, 0xdc, 0x2}, {0x6, 0x2, 0x8, 0x4, 0xfe3, 0x4}, {0x6, 0x4, 0x8, 0x9, 0x7f, 0x8}, {0x9, 0x2, 0x5, 0xfffffff8, 0xffffffff, 0x10001}, {0x0, 0x4, 0x30d, 0x2, 0x3e5, 0x7}, {0x8, 0xfff, 0x9, 0x2, 0x1, 0x8}, {0x8, 0x80000000, 0x2, 0x6, 0x5, 0x7fffffff}, {0x80000001, 0x5, 0x80000001, 0xdc, 0x2}, {0x80, 0x4, 0x0, 0x7, 0x1, 0x8}, {0x2, 0x200, 0x5be, 0xfffffff3, 0x7, 0x800}, {0x1000, 0x1, 0x3, 0x9, 0xa, 0x5}, {0xc, 0x4000000, 0x5ea, 0x10, 0x8, 0x80000000}, {0xf, 0x2, 0x80000001, 0x5, 0x2a59, 0x1}, {0x3e87, 0x3, 0x5, 0x9, 0x1, 0x9}, {0xffffff64, 0x0, 0x7, 0x3, 0xae85, 0x25c98821}, {0x0, 0x7, 0xd, 0x400, 0x6, 0xe6c}, {0xffffffff, 0x2, 0x0, 0x100, 0x4, 0x5855}, {0x6528, 0x5, 0x96, 0x8001, 0xe246, 0x6}], [{0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x7}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x6, 0x1}, {}, {}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2}, {0xe2e05a6e9f46ef72, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x9a2799bccd0b4636, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xf20}, 0x1, 0x0, 0x0, 0x4050}, 0x20000040) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) unshare(0x2a020480) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fstat(r0, &(0x7f00000001c0)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff}) kernel console output (not intermixed with test programs): 702197][T12620] Call Trace: [ 861.702208][T12620] [ 861.702219][T12620] dump_stack_lvl+0xe8/0x150 [ 861.702260][T12620] should_fail_ex+0x46b/0x600 [ 861.702294][T12620] ? __alloc_skb+0x1d7/0x390 [ 861.702332][T12620] should_failslab+0xa8/0x100 [ 861.702359][T12620] ? __alloc_skb+0x1d7/0x390 [ 861.702393][T12620] kmem_cache_alloc_node_noprof+0x8a/0x6d0 [ 861.702426][T12620] ? lockdep_hardirqs_on+0x7a/0x110 [ 861.702461][T12620] ? __alloc_skb+0x193/0x390 [ 861.702499][T12620] __alloc_skb+0x1d7/0x390 [ 861.702541][T12620] netlink_ack+0x146/0xa50 [ 861.702569][T12620] ? __pfx_genl_rcv_msg+0x10/0x10 [ 861.702610][T12620] ? __pfx_ref_tracker_free+0x10/0x10 [ 861.702647][T12620] netlink_rcv_skb+0x2b6/0x4b0 [ 861.702676][T12620] ? __pfx_genl_rcv_msg+0x10/0x10 [ 861.702713][T12620] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 861.702754][T12620] ? netlink_deliver_tap+0x2e/0x1b0 [ 861.702780][T12620] ? netlink_deliver_tap+0x2e/0x1b0 [ 861.702811][T12620] genl_rcv+0x28/0x40 [ 861.702843][T12620] netlink_unicast+0x831/0x9f0 [ 861.702876][T12620] ? __pfx_netlink_unicast+0x10/0x10 [ 861.702899][T12620] ? __alloc_skb+0x193/0x390 [ 861.702947][T12620] ? netlink_sendmsg+0x650/0xb40 [ 861.702973][T12620] ? skb_put+0x11b/0x210 [ 861.703000][T12620] netlink_sendmsg+0x813/0xb40 [ 861.703039][T12620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.703071][T12620] ? is_bpf_text_address+0x292/0x2b0 [ 861.703108][T12620] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 861.703141][T12620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.703171][T12620] __sock_sendmsg+0x21c/0x270 [ 861.703208][T12620] ____sys_sendmsg+0x4e1/0x800 [ 861.703244][T12620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 861.703282][T12620] ? import_iovec+0x73/0xa0 [ 861.703323][T12620] ___sys_sendmsg+0x2a5/0x360 [ 861.703348][T12620] ? __lock_acquire+0x6b5/0x2cf0 [ 861.703388][T12620] ? __pfx____sys_sendmsg+0x10/0x10 [ 861.703454][T12620] ? __fget_files+0x2a/0x420 [ 861.703481][T12620] ? __fget_files+0x3a6/0x420 [ 861.703520][T12620] __x64_sys_sendmsg+0x1c3/0x2a0 [ 861.703550][T12620] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 861.703588][T12620] ? __pfx_ksys_write+0x10/0x10 [ 861.703637][T12620] do_syscall_64+0xe2/0xf80 [ 861.703673][T12620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.703697][T12620] ? trace_irq_disable+0x37/0x100 [ 861.703723][T12620] ? clear_bhb_loop+0x60/0xb0 [ 861.703753][T12620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.703777][T12620] RIP: 0033:0x7f8acc2facb9 [ 861.703799][T12620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.703821][T12620] RSP: 002b:00007f8aca556028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.703849][T12620] RAX: ffffffffffffffda RBX: 00007f8acc575fa0 RCX: 00007f8acc2facb9 [ 861.703868][T12620] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 861.703884][T12620] RBP: 00007f8aca556090 R08: 0000000000000000 R09: 0000000000000000 [ 861.703901][T12620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.703917][T12620] R13: 00007f8acc576038 R14: 00007f8acc575fa0 R15: 00007fffd9d49708 [ 861.703970][T12620] [ 861.944552][ T6036] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 862.117994][ T6036] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 862.118062][ T6036] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 862.118095][ T6036] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 862.118124][ T6036] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 862.118154][ T6036] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 862.119350][ T6036] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 862.119407][ T6036] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 862.119438][ T6036] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 862.119468][ T6036] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 862.119496][ T6036] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 862.120770][ T6036] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 862.120848][ T6036] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 862.120878][ T6036] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 862.120907][ T6036] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 862.121037][ T6036] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 862.141527][ T5990] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 862.141594][ T5990] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 862.142354][ T5990] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 862.158264][ T6036] usb 6-1: string descriptor 0 read error: -22 [ 862.158431][ T6036] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 862.158459][ T6036] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.385719][ T5990] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 862.435571][ T5990] usb 8-1: USB disconnect, device number 21 [ 862.540454][ T6036] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 862.647446][ T5843] usb 6-1: USB disconnect, device number 42 [ 862.811517][T12630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2060'. [ 862.851554][T12630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2060'. [ 862.851595][T12630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2060'. [ 863.681294][T12641] FAULT_INJECTION: forcing a failure. [ 863.681294][T12641] name failslab, interval 1, probability 0, space 0, times 0 [ 863.681363][T12641] CPU: 0 UID: 0 PID: 12641 Comm: syz.1.2064 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 863.681400][T12641] Tainted: [L]=SOFTLOCKUP [ 863.681410][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 863.681427][T12641] Call Trace: [ 863.681437][T12641] [ 863.681448][T12641] dump_stack_lvl+0xe8/0x150 [ 863.681489][T12641] should_fail_ex+0x46b/0x600 [ 863.681513][T12641] ? getname_flags+0xb7/0x540 [ 863.681530][T12641] should_failslab+0xa8/0x100 [ 863.681548][T12641] ? getname_flags+0xb7/0x540 [ 863.681562][T12641] kmem_cache_alloc_noprof+0x83/0x6a0 [ 863.681592][T12641] getname_flags+0xb7/0x540 [ 863.681612][T12641] do_sys_openat2+0xca/0x220 [ 863.681630][T12641] ? lockdep_hardirqs_on+0x7a/0x110 [ 863.681656][T12641] ? __pfx_do_sys_openat2+0x10/0x10 [ 863.681685][T12641] __x64_sys_openat+0x138/0x170 [ 863.681708][T12641] do_syscall_64+0xe2/0xf80 [ 863.681731][T12641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.681749][T12641] ? clear_bhb_loop+0x60/0xb0 [ 863.681769][T12641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.681786][T12641] RIP: 0033:0x7f8acc2facb9 [ 863.681803][T12641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.681819][T12641] RSP: 002b:00007f8aca535028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 863.681837][T12641] RAX: ffffffffffffffda RBX: 00007f8acc576090 RCX: 00007f8acc2facb9 [ 863.681850][T12641] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 863.681862][T12641] RBP: 00007f8aca535090 R08: 0000000000000000 R09: 0000000000000000 [ 863.681873][T12641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.681884][T12641] R13: 00007f8acc576128 R14: 00007f8acc576090 R15: 00007fffd9d49708 [ 863.681910][T12641] [ 866.340831][T12652] FAULT_INJECTION: forcing a failure. [ 866.340831][T12652] name failslab, interval 1, probability 0, space 0, times 0 [ 866.340892][T12652] CPU: 0 UID: 0 PID: 12652 Comm: syz.5.2068 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 866.340925][T12652] Tainted: [L]=SOFTLOCKUP [ 866.340935][T12652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 866.340955][T12652] Call Trace: [ 866.340965][T12652] [ 866.340977][T12652] dump_stack_lvl+0xe8/0x150 [ 866.341017][T12652] should_fail_ex+0x46b/0x600 [ 866.341051][T12652] ? skb_clone+0x212/0x3a0 [ 866.341077][T12652] should_failslab+0xa8/0x100 [ 866.341102][T12652] ? skb_clone+0x212/0x3a0 [ 866.341131][T12652] kmem_cache_alloc_noprof+0x83/0x6a0 [ 866.341164][T12652] ? __netlink_lookup+0xc6/0x8b0 [ 866.341201][T12652] skb_clone+0x212/0x3a0 [ 866.341234][T12652] __netlink_deliver_tap+0x404/0x850 [ 866.341276][T12652] ? netlink_deliver_tap+0x2e/0x1b0 [ 866.341304][T12652] netlink_deliver_tap+0x19c/0x1b0 [ 866.341333][T12652] netlink_unicast+0x805/0x9f0 [ 866.341368][T12652] ? __pfx_netlink_unicast+0x10/0x10 [ 866.341392][T12652] ? __alloc_skb+0x193/0x390 [ 866.341430][T12652] ? netlink_sendmsg+0x650/0xb40 [ 866.341456][T12652] ? skb_put+0x11b/0x210 [ 866.341484][T12652] netlink_sendmsg+0x813/0xb40 [ 866.341522][T12652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.341554][T12652] ? is_bpf_text_address+0x292/0x2b0 [ 866.341590][T12652] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 866.341622][T12652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.341652][T12652] __sock_sendmsg+0x21c/0x270 [ 866.341687][T12652] ____sys_sendmsg+0x4e1/0x800 [ 866.341723][T12652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 866.341759][T12652] ? import_iovec+0x73/0xa0 [ 866.341798][T12652] ___sys_sendmsg+0x2a5/0x360 [ 866.341823][T12652] ? __lock_acquire+0x6b5/0x2cf0 [ 866.341861][T12652] ? __pfx____sys_sendmsg+0x10/0x10 [ 866.341934][T12652] ? __fget_files+0x2a/0x420 [ 866.341959][T12652] ? __fget_files+0x3a6/0x420 [ 866.341997][T12652] __x64_sys_sendmsg+0x1c3/0x2a0 [ 866.342027][T12652] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 866.342064][T12652] ? __pfx_ksys_write+0x10/0x10 [ 866.342113][T12652] do_syscall_64+0xe2/0xf80 [ 866.342147][T12652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.342171][T12652] ? trace_irq_disable+0x37/0x100 [ 866.342198][T12652] ? clear_bhb_loop+0x60/0xb0 [ 866.342228][T12652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.342253][T12652] RIP: 0033:0x7f1e69d7acb9 [ 866.342275][T12652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.342298][T12652] RSP: 002b:00007f1e67fd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 866.342325][T12652] RAX: ffffffffffffffda RBX: 00007f1e69ff5fa0 RCX: 00007f1e69d7acb9 [ 866.342344][T12652] RDX: 0000000004044010 RSI: 0000200000000080 RDI: 0000000000000003 [ 866.342362][T12652] RBP: 00007f1e67fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 866.342378][T12652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.342394][T12652] R13: 00007f1e69ff6038 R14: 00007f1e69ff5fa0 R15: 00007ffc3ad90238 [ 866.342433][T12652] [ 867.163873][ T5990] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 867.318781][ T5990] usb 6-1: config 1 has an invalid interface number: 140 but max is 0 [ 867.318817][ T5990] usb 6-1: config 1 has no interface number 0 [ 867.318871][ T5990] usb 6-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 867.318900][ T5990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.409684][ T5990] usb 6-1: MBOX3: Invalid descriptor size=18. [ 867.608489][T12025] usb 6-1: USB disconnect, device number 43 [ 867.642761][ T5990] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 867.802767][ T5990] usb 9-1: Using ep0 maxpacket: 32 [ 867.805430][ T5990] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 867.805462][ T5990] usb 9-1: config 0 has no interface number 0 [ 867.805621][ T5990] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 867.808711][ T5990] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 867.808745][ T5990] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.808770][ T5990] usb 9-1: Product: syz [ 867.808788][ T5990] usb 9-1: Manufacturer: syz [ 867.808807][ T5990] usb 9-1: SerialNumber: syz [ 867.888105][ T5990] usb 9-1: config 0 descriptor?? [ 867.889715][T12672] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 868.110363][T12672] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 869.467798][T12702] input: syz0 as /devices/virtual/input/input35 [ 871.028207][ T5990] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 871.028461][ T5990] asix 9-1:0.188: probe with driver asix failed with error -71 [ 871.063139][ T5990] usb 9-1: USB disconnect, device number 6 [ 871.842545][T12722] FAULT_INJECTION: forcing a failure. [ 871.842545][T12722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.843739][T12722] CPU: 1 UID: 0 PID: 12722 Comm: syz.7.2081 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 871.843782][T12722] Tainted: [L]=SOFTLOCKUP [ 871.843792][T12722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 871.843808][T12722] Call Trace: [ 871.843819][T12722] [ 871.843831][T12722] dump_stack_lvl+0xe8/0x150 [ 871.843871][T12722] should_fail_ex+0x46b/0x600 [ 871.843906][T12722] _copy_from_user+0x2d/0xb0 [ 871.843944][T12722] fb_set_user_cmap+0x1da/0x4f0 [ 871.843987][T12722] ? __pfx_fb_set_user_cmap+0x10/0x10 [ 871.844043][T12722] do_fb_ioctl+0x5dc/0x800 [ 871.844073][T12722] ? __pfx_do_fb_ioctl+0x10/0x10 [ 871.844122][T12722] ? __asan_memset+0x22/0x50 [ 871.844159][T12722] ? __pfx_smack_file_ioctl+0x10/0x10 [ 871.844206][T12722] ? __fget_files+0x3a6/0x420 [ 871.844231][T12722] ? __fget_files+0x2a/0x420 [ 871.844261][T12722] ? bpf_lsm_file_ioctl+0x9/0x20 [ 871.844336][T12722] ? __pfx_fb_ioctl+0x10/0x10 [ 871.844362][T12722] __se_sys_ioctl+0xff/0x170 [ 871.844400][T12722] do_syscall_64+0xe2/0xf80 [ 871.844433][T12722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.844458][T12722] ? trace_irq_disable+0x37/0x100 [ 871.844484][T12722] ? clear_bhb_loop+0x60/0xb0 [ 871.844514][T12722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.844539][T12722] RIP: 0033:0x7f7cc062acb9 [ 871.844561][T12722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.844583][T12722] RSP: 002b:00007f7cbe886028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 871.844610][T12722] RAX: ffffffffffffffda RBX: 00007f7cc08a5fa0 RCX: 00007f7cc062acb9 [ 871.844629][T12722] RDX: 0000200000000100 RSI: 0000000000004605 RDI: 0000000000000003 [ 871.844646][T12722] RBP: 00007f7cbe886090 R08: 0000000000000000 R09: 0000000000000000 [ 871.844663][T12722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.844678][T12722] R13: 00007f7cc08a6038 R14: 00007f7cc08a5fa0 R15: 00007ffdb6e75668 [ 871.844716][T12722] [ 875.418068][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.418149][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.587716][ T37] kauditd_printk_skb: 44 callbacks suppressed [ 875.587739][ T37] audit: type=1326 audit(1769359907.961:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.8.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7b92acb9 code=0x7ffc0000 [ 875.587793][ T37] audit: type=1326 audit(1769359907.961:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.8.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7b92acb9 code=0x7ffc0000 [ 875.588813][ T37] audit: type=1326 audit(1769359907.961:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.8.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f5f7b92acb9 code=0x7ffc0000 [ 875.588868][ T37] audit: type=1326 audit(1769359907.961:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.8.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7b92acb9 code=0x7ffc0000 [ 875.588919][ T37] audit: type=1326 audit(1769359907.961:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.8.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7b92acb9 code=0x7ffc0000 [ 875.589718][ T37] audit: type=1326 audit(1769359907.961:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.8.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f5f7b92acb9 code=0x7ffc0000 [ 875.589773][ T37] audit: type=1326 audit(1769359907.961:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.8.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7b92acb9 code=0x7ffc0000 [ 875.589823][ T37] audit: type=1326 audit(1769359907.961:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.8.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7b92acb9 code=0x7ffc0000 [ 875.590698][ T37] audit: type=1326 audit(1769359907.961:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.8.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f5f7b92acb9 code=0x7ffc0000 [ 875.590752][ T37] audit: type=1326 audit(1769359907.961:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12758 comm="syz.8.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7b92acb9 code=0x7ffc0000 [ 876.082370][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2092'. [ 876.960008][T12821] FAULT_INJECTION: forcing a failure. [ 876.960008][T12821] name failslab, interval 1, probability 0, space 0, times 0 [ 876.960052][T12821] CPU: 1 UID: 0 PID: 12821 Comm: syz.6.2096 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 876.960085][T12821] Tainted: [L]=SOFTLOCKUP [ 876.960093][T12821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 876.960114][T12821] Call Trace: [ 876.960124][T12821] [ 876.960135][T12821] dump_stack_lvl+0xe8/0x150 [ 876.960176][T12821] should_fail_ex+0x46b/0x600 [ 876.960210][T12821] ? __d_alloc+0x37/0x6f0 [ 876.960237][T12821] should_failslab+0xa8/0x100 [ 876.960263][T12821] ? __d_alloc+0x37/0x6f0 [ 876.960287][T12821] kmem_cache_alloc_lru_noprof+0x87/0x6a0 [ 876.960332][T12821] __d_alloc+0x37/0x6f0 [ 876.960368][T12821] d_alloc_parallel+0xe6/0x1610 [ 876.960401][T12821] ? __d_lookup+0x66/0x780 [ 876.960434][T12821] ? __d_lookup+0x66/0x780 [ 876.960470][T12821] ? __d_lookup+0x66/0x780 [ 876.960504][T12821] ? __pfx_d_alloc_parallel+0x10/0x10 [ 876.960542][T12821] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 876.960577][T12821] path_openat+0xcc6/0x3e70 [ 876.960648][T12821] ? __pfx_path_openat+0x10/0x10 [ 876.960696][T12821] ? do_raw_spin_lock+0x12b/0x2f0 [ 876.960739][T12821] do_filp_open+0x22d/0x490 [ 876.960774][T12821] ? __pfx_do_filp_open+0x10/0x10 [ 876.960803][T12821] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 876.960857][T12821] ? alloc_fd+0x64e/0x6c0 [ 876.960894][T12821] do_sys_openat2+0x12f/0x220 [ 876.960936][T12821] ? __pfx_do_sys_openat2+0x10/0x10 [ 876.960964][T12821] ? ksys_write+0x248/0x270 [ 876.961000][T12821] ? __pfx_ksys_write+0x10/0x10 [ 876.961038][T12821] __x64_sys_openat+0x138/0x170 [ 876.961069][T12821] do_syscall_64+0xe2/0xf80 [ 876.961103][T12821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.961127][T12821] ? trace_irq_disable+0x37/0x100 [ 876.961153][T12821] ? clear_bhb_loop+0x60/0xb0 [ 876.961183][T12821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.961207][T12821] RIP: 0033:0x7f5ba21cacb9 [ 876.961229][T12821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.961251][T12821] RSP: 002b:00007f5ba0405028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 876.961277][T12821] RAX: ffffffffffffffda RBX: 00007f5ba2446090 RCX: 00007f5ba21cacb9 [ 876.961296][T12821] RDX: 0000000000103a42 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 876.961314][T12821] RBP: 00007f5ba0405090 R08: 0000000000000000 R09: 0000000000000000 [ 876.961331][T12821] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000001 [ 876.961347][T12821] R13: 00007f5ba2446128 R14: 00007f5ba2446090 R15: 00007ffc8137a538 [ 876.961386][T12821] [ 881.371350][T12842] FAULT_INJECTION: forcing a failure. [ 881.371350][T12842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.371395][T12842] CPU: 1 UID: 0 PID: 12842 Comm: syz.6.2101 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 881.371428][T12842] Tainted: [L]=SOFTLOCKUP [ 881.371438][T12842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 881.371453][T12842] Call Trace: [ 881.371462][T12842] [ 881.371474][T12842] dump_stack_lvl+0xe8/0x150 [ 881.371513][T12842] should_fail_ex+0x46b/0x600 [ 881.371548][T12842] _copy_from_user+0x2d/0xb0 [ 881.371586][T12842] ___sys_sendmsg+0x1c6/0x360 [ 881.371611][T12842] ? __lock_acquire+0x6b5/0x2cf0 [ 881.371651][T12842] ? __pfx____sys_sendmsg+0x10/0x10 [ 881.371673][T12842] ? __lock_acquire+0x6b5/0x2cf0 [ 881.371711][T12842] ? kstrtouint+0x6e/0xe0 [ 881.371778][T12842] __sys_sendmmsg+0x282/0x4e0 [ 881.371810][T12842] ? __pfx___sys_sendmmsg+0x10/0x10 [ 881.371846][T12842] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 881.371895][T12842] ? ksys_write+0x248/0x270 [ 881.371933][T12842] ? __pfx_ksys_write+0x10/0x10 [ 881.371975][T12842] __x64_sys_sendmmsg+0xa0/0xc0 [ 881.372003][T12842] do_syscall_64+0xe2/0xf80 [ 881.372035][T12842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.372059][T12842] ? trace_irq_disable+0x37/0x100 [ 881.372084][T12842] ? clear_bhb_loop+0x60/0xb0 [ 881.372112][T12842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.372137][T12842] RIP: 0033:0x7f5ba21cacb9 [ 881.372159][T12842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.372181][T12842] RSP: 002b:00007f5ba0426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 881.372207][T12842] RAX: ffffffffffffffda RBX: 00007f5ba2445fa0 RCX: 00007f5ba21cacb9 [ 881.372226][T12842] RDX: 0000000000000002 RSI: 000020000000b900 RDI: 0000000000000004 [ 881.372242][T12842] RBP: 00007f5ba0426090 R08: 0000000000000000 R09: 0000000000000000 [ 881.372258][T12842] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 881.372275][T12842] R13: 00007f5ba2446038 R14: 00007f5ba2445fa0 R15: 00007ffc8137a538 [ 881.372312][T12842] [ 883.085053][ T5114] Bluetooth: hci4: command 0x0406 tx timeout [ 884.504495][T12887] syzkaller1: entered promiscuous mode [ 884.504543][T12887] syzkaller1: entered allmulticast mode [ 884.652730][T11976] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 884.815043][T11976] usb 9-1: Using ep0 maxpacket: 16 [ 884.821775][T11976] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 884.821806][T11976] usb 9-1: config 0 has no interface number 0 [ 884.821854][T11976] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.821885][T11976] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.821928][T11976] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 884.821953][T11976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.898145][T11976] usb 9-1: config 0 descriptor?? [ 885.553879][T11976] uclogic 0003:28BD:0071.001D: pen parameters not found [ 885.553911][T11976] uclogic 0003:28BD:0071.001D: interface is invalid, ignoring [ 885.766090][ T6389] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 885.914193][ T6389] usb 7-1: Using ep0 maxpacket: 8 [ 885.916166][ T6389] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 885.916199][ T6389] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.916222][ T6389] usb 7-1: config 0 has no interfaces? [ 885.916257][ T6389] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 885.916285][ T6389] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.973903][ T6389] usb 7-1: config 0 descriptor?? [ 886.200139][ T6036] usb 7-1: USB disconnect, device number 7 [ 886.980426][T12916] ceph: No mds server is up or the cluster is laggy [ 888.010384][T12773] usb 9-1: USB disconnect, device number 7 [ 888.472782][ T31] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 888.525219][T12979] program syz.7.2133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 888.585763][T12982] sctp: [Deprecated]: syz.6.2132 (pid 12982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 888.585763][T12982] Use struct sctp_sack_info instead [ 888.626374][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 888.626410][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 888.626440][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 888.626465][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 888.626512][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 888.626538][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.708935][ T31] usb 2-1: config 0 descriptor?? [ 888.872776][ T6389] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 889.007235][ T31] hdpvr 2-1:0.0: unexpected answer of status request, len -71 [ 889.007271][ T31] hdpvr 2-1:0.0: device init failed [ 889.007367][ T31] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 889.023503][ T6389] usb 9-1: Using ep0 maxpacket: 16 [ 889.200762][ T6389] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.200822][ T6389] usb 9-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.200855][ T6389] usb 9-1: config 0 interface 0 has no altsetting 0 [ 889.200890][ T6389] usb 9-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.00 [ 889.200918][ T6389] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.224287][ T31] usb 2-1: USB disconnect, device number 30 [ 889.264132][ T6389] usb 9-1: config 0 descriptor?? [ 889.554214][ T6389] usb 9-1: string descriptor 0 read error: -71 [ 889.654307][ T6389] usb 9-1: USB disconnect, device number 8 [ 890.304361][ T31] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 890.482731][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 890.488768][ T31] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 890.488802][ T31] usb 6-1: config 0 has no interface number 0 [ 890.488855][ T31] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.488885][ T31] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.488930][ T31] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 890.488957][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.554966][ T31] usb 6-1: config 0 descriptor?? [ 890.722703][T11976] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 890.750149][T13030] comedi comedi3: comedi_config --init_data is deprecated [ 890.835324][T13030] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.2144'. [ 890.885482][T11976] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 890.885520][T11976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.932695][T11976] usb 2-1: config 0 descriptor?? [ 891.014211][T11976] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 891.174568][T11976] gp8psk: usb in 128 operation failed. [ 891.236720][T13024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.262190][T13024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.310029][T11976] gp8psk: usb in 137 operation failed. [ 891.310059][T11976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 891.311144][T11976] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 891.311220][T11976] usb 2-1: media controller created [ 891.568319][T11976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 891.625393][ T31] uclogic 0003:28BD:0071.001E: pen parameters not found [ 891.625424][ T31] uclogic 0003:28BD:0071.001E: interface is invalid, ignoring [ 891.745711][T11976] gp8psk_fe: Frontend attached [ 891.747020][T11976] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 891.749304][T11976] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 891.899298][T13038] FAULT_INJECTION: forcing a failure. [ 891.899298][T13038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.899344][T13038] CPU: 1 UID: 0 PID: 13038 Comm: syz.7.2146 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 891.899378][T13038] Tainted: [L]=SOFTLOCKUP [ 891.899388][T13038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 891.899404][T13038] Call Trace: [ 891.899415][T13038] [ 891.899425][T13038] dump_stack_lvl+0xe8/0x150 [ 891.899465][T13038] should_fail_ex+0x46b/0x600 [ 891.899501][T13038] _copy_from_iter+0x1d3/0x1670 [ 891.899535][T13038] ? kmalloc_reserve+0xbd/0x290 [ 891.899572][T13038] ? rcu_is_watching+0x15/0xb0 [ 891.899596][T13038] ? kmalloc_reserve+0xbd/0x290 [ 891.899637][T13038] ? __pfx__copy_from_iter+0x10/0x10 [ 891.899669][T13038] ? __build_skb_around+0x22d/0x3c0 [ 891.899707][T13038] ? __alloc_skb+0x193/0x390 [ 891.899744][T13038] ? netlink_sendmsg+0x650/0xb40 [ 891.899771][T13038] ? skb_put+0x11b/0x210 [ 891.899798][T13038] netlink_sendmsg+0x6c0/0xb40 [ 891.899836][T13038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 891.899867][T13038] ? is_bpf_text_address+0x292/0x2b0 [ 891.899902][T13038] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 891.899935][T13038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 891.899964][T13038] __sock_sendmsg+0x21c/0x270 [ 891.899999][T13038] ____sys_sendmsg+0x4e1/0x800 [ 891.900034][T13038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 891.900070][T13038] ? import_iovec+0x73/0xa0 [ 891.900109][T13038] ___sys_sendmsg+0x2a5/0x360 [ 891.900133][T13038] ? __lock_acquire+0x6b5/0x2cf0 [ 891.900178][T13038] ? __pfx____sys_sendmsg+0x10/0x10 [ 891.900244][T13038] ? __fget_files+0x2a/0x420 [ 891.900268][T13038] ? __fget_files+0x3a6/0x420 [ 891.900305][T13038] __x64_sys_sendmsg+0x1c3/0x2a0 [ 891.900334][T13038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 891.900371][T13038] ? __pfx_ksys_write+0x10/0x10 [ 891.900419][T13038] do_syscall_64+0xe2/0xf80 [ 891.900453][T13038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.900476][T13038] ? trace_irq_disable+0x37/0x100 [ 891.900502][T13038] ? clear_bhb_loop+0x60/0xb0 [ 891.900532][T13038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.900556][T13038] RIP: 0033:0x7f7cc062acb9 [ 891.900578][T13038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.900599][T13038] RSP: 002b:00007f7cbe886028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 891.900626][T13038] RAX: ffffffffffffffda RBX: 00007f7cc08a5fa0 RCX: 00007f7cc062acb9 [ 891.900644][T13038] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 891.900660][T13038] RBP: 00007f7cbe886090 R08: 0000000000000000 R09: 0000000000000000 [ 891.900676][T13038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.900692][T13038] R13: 00007f7cc08a6038 R14: 00007f7cc08a5fa0 R15: 00007ffdb6e75668 [ 891.900730][T13038] [ 894.134006][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 894.372692][T11976] gp8psk: usb in 138 operation failed. [ 894.372718][T11976] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 894.372733][T11976] gp8psk: found Genpix USB device pID = 203 (hex) [ 894.373497][ T6389] usb 6-1: USB disconnect, device number 44 [ 894.994920][T13055] FAULT_INJECTION: forcing a failure. [ 894.994920][T13055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.994968][T13055] CPU: 0 UID: 0 PID: 13055 Comm: syz.7.2149 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 894.995002][T13055] Tainted: [L]=SOFTLOCKUP [ 894.995012][T13055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 894.995028][T13055] Call Trace: [ 894.995038][T13055] [ 894.995049][T13055] dump_stack_lvl+0xe8/0x150 [ 894.995088][T13055] should_fail_ex+0x46b/0x600 [ 894.995123][T13055] _copy_from_user+0x2d/0xb0 [ 894.995166][T13055] ___sys_sendmsg+0x1c6/0x360 [ 894.995201][T13055] ? __pfx____sys_sendmsg+0x10/0x10 [ 894.995251][T13055] ? lockdep_hardirqs_on+0x7a/0x110 [ 894.995315][T13055] __sys_sendmmsg+0x282/0x4e0 [ 894.995353][T13055] ? __pfx___sys_sendmmsg+0x10/0x10 [ 894.995389][T13055] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 894.995432][T13055] ? ksys_write+0x248/0x270 [ 894.995470][T13055] ? __pfx_ksys_write+0x10/0x10 [ 894.995511][T13055] __x64_sys_sendmmsg+0xa0/0xc0 [ 894.995539][T13055] do_syscall_64+0xe2/0xf80 [ 894.995572][T13055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.995598][T13055] ? trace_irq_disable+0x37/0x100 [ 894.995626][T13055] ? clear_bhb_loop+0x60/0xb0 [ 894.995656][T13055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.995681][T13055] RIP: 0033:0x7f7cc062acb9 [ 894.995703][T13055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.995724][T13055] RSP: 002b:00007f7cbe800028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 894.995758][T13055] RAX: ffffffffffffffda RBX: 00007f7cc08a6090 RCX: 00007f7cc062acb9 [ 894.995777][T13055] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000005 [ 894.995794][T13055] RBP: 00007f7cbe800090 R08: 0000000000000000 R09: 0000000000000000 [ 894.995811][T13055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.995825][T13055] R13: 00007f7cc08a6128 R14: 00007f7cc08a6090 R15: 00007ffdb6e75668 [ 894.995864][T13055] [ 895.310210][ T5843] usb 2-1: USB disconnect, device number 31 [ 895.602108][ T31] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 895.770789][ T31] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 895.770822][ T31] usb 6-1: config 0 has no interface number 0 [ 895.770873][ T31] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.770964][ T31] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.771008][ T31] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 895.771035][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.051176][ T31] usb 6-1: config 0 descriptor?? [ 896.444759][ T5843] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 896.717502][ T31] input: HID 04d9:a055 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:04D9:A055.001F/input/input36 [ 896.752157][T13060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.753330][T13060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.893015][ T5843] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 896.913462][T12086] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 897.056375][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 897.058442][ T5843] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 897.058463][ T5843] usb 2-1: config 0 has no interface number 0 [ 897.058499][ T5843] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.058520][ T5843] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.058549][ T5843] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 897.058568][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.124241][T12086] usb 9-1: Using ep0 maxpacket: 32 [ 897.127185][T12086] usb 9-1: config 9 has an invalid interface number: 251 but max is 2 [ 897.127215][T12086] usb 9-1: config 9 has an invalid interface number: 125 but max is 2 [ 897.127239][T12086] usb 9-1: config 9 has no interface number 1 [ 897.127259][T12086] usb 9-1: config 9 has no interface number 2 [ 897.127320][T12086] usb 9-1: config 9 interface 0 has no altsetting 0 [ 897.127342][T12086] usb 9-1: config 9 interface 251 has no altsetting 0 [ 897.127364][T12086] usb 9-1: config 9 interface 125 has no altsetting 0 [ 897.134363][T12086] usb 9-1: New USB device found, idVendor=05c6, idProduct=9275, bcdDevice=e0.8f [ 897.134400][T12086] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.134424][T12086] usb 9-1: Product: syz [ 897.134443][T12086] usb 9-1: Manufacturer: syz [ 897.134460][T12086] usb 9-1: SerialNumber: syz [ 897.263980][ T5843] usb 2-1: config 0 descriptor?? [ 897.555614][T13086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.599187][T13086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.993020][T12086] usb 9-1: selecting invalid altsetting 0 [ 897.993048][T12086] usb 9-1: Could not set interface, error -22 [ 897.998978][ T5843] uclogic 0003:28BD:0071.0020: pen parameters not found [ 897.999006][ T5843] uclogic 0003:28BD:0071.0020: interface is invalid, ignoring [ 898.107563][T12086] usb 9-1: USB disconnect, device number 9 [ 898.399690][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 898.399712][ T37] audit: type=1326 audit(1769359930.771:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13098 comm="syz.6.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba21cacb9 code=0x7ffc0000 [ 898.441957][ T37] audit: type=1326 audit(1769359930.771:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13098 comm="syz.6.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba21cacb9 code=0x7ffc0000 [ 898.471868][ T31] holtek_kbd 0003:04D9:A055.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.5-1/input1 [ 898.494338][ T37] audit: type=1326 audit(1769359930.871:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13098 comm="syz.6.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f5ba21cacb9 code=0x7ffc0000 [ 898.494399][ T37] audit: type=1326 audit(1769359930.871:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13098 comm="syz.6.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba21cacb9 code=0x7ffc0000 [ 898.494448][ T37] audit: type=1326 audit(1769359930.871:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13098 comm="syz.6.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba21cacb9 code=0x7ffc0000 [ 898.494507][ T37] audit: type=1326 audit(1769359930.871:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13098 comm="syz.6.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ba21cacb9 code=0x7ffc0000 [ 899.916130][ T9] usb 2-1: USB disconnect, device number 32 [ 900.616968][T12710] usb 6-1: reset high-speed USB device number 45 using dummy_hcd [ 900.660652][T12710] usb 6-1: device reset changed ep0 maxpacket size! [ 900.802669][ T31] usb 6-1: USB disconnect, device number 45 [ 900.912897][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 901.081498][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.095549][ T9] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 901.095585][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.095610][ T9] usb 7-1: Product: syz [ 901.095636][ T9] usb 7-1: Manufacturer: syz [ 901.095654][ T9] usb 7-1: SerialNumber: syz [ 901.146987][ T9] usb 7-1: config 0 descriptor?? [ 901.395899][ T9] usb 7-1: USB disconnect, device number 8 [ 901.612756][T11976] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 901.775493][T11976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.775552][T11976] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 901.775580][T11976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.811387][T11976] usb 2-1: config 0 descriptor?? [ 903.176715][T13166] netlink: 'syz.5.2174': attribute type 2 has an invalid length. [ 903.176972][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2174'. [ 903.671640][T13164] erofs (device nullb0): cannot find valid erofs superblock [ 904.420719][T11976] usbhid 2-1:0.0: can't add hid device: -71 [ 904.420815][T11976] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 904.470015][T11976] usb 2-1: USB disconnect, device number 33 [ 904.542749][ T31] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 904.631876][T13176] netlink: 'syz.1.2176': attribute type 2 has an invalid length. [ 904.702710][ T31] usb 6-1: device descriptor read/64, error -71 [ 906.542761][ T31] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 907.077406][ T31] usb 6-1: device descriptor read/64, error -71 [ 907.183316][ T31] usb usb6-port1: attempt power cycle [ 907.307726][T13192] FAULT_INJECTION: forcing a failure. [ 907.307726][T13192] name failslab, interval 1, probability 0, space 0, times 0 [ 907.307771][T13192] CPU: 1 UID: 0 PID: 13192 Comm: syz.8.2180 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 907.307804][T13192] Tainted: [L]=SOFTLOCKUP [ 907.307814][T13192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 907.307830][T13192] Call Trace: [ 907.307840][T13192] [ 907.307861][T13192] dump_stack_lvl+0xe8/0x150 [ 907.307901][T13192] should_fail_ex+0x46b/0x600 [ 907.307939][T13192] should_failslab+0xa8/0x100 [ 907.307966][T13192] __kmalloc_cache_noprof+0x83/0x6b0 [ 907.308004][T13192] ? reuseport_alloc+0x13d/0x520 [ 907.308032][T13192] ? reuseport_alloc+0x25/0x520 [ 907.308052][T13192] reuseport_alloc+0x13d/0x520 [ 907.308074][T13192] ? sctp_v4_is_any+0x35/0x60 [ 907.308099][T13192] ? reuseport_alloc+0x25/0x520 [ 907.308121][T13192] ? sctp_is_ep_boundall+0x14e/0x1b0 [ 907.308148][T13192] ? sctp_hash_endpoint+0x2b/0x620 [ 907.308184][T13192] sctp_hash_endpoint+0x4dd/0x620 [ 907.308220][T13192] ? sctp_hash_endpoint+0x2b/0x620 [ 907.308266][T13192] sctp_inet_listen+0x6c6/0x940 [ 907.308303][T13192] ? __pfx_sctp_inet_listen+0x10/0x10 [ 907.308339][T13192] ? __fget_files+0x2a/0x420 [ 907.308363][T13192] ? __fget_files+0x3a6/0x420 [ 907.308387][T13192] ? __fget_files+0x2a/0x420 [ 907.308424][T13192] __x64_sys_listen+0x1cd/0x240 [ 907.308464][T13192] do_syscall_64+0xe2/0xf80 [ 907.308497][T13192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.308521][T13192] ? trace_irq_disable+0x37/0x100 [ 907.308546][T13192] ? clear_bhb_loop+0x60/0xb0 [ 907.308577][T13192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.308601][T13192] RIP: 0033:0x7f5f7b92acb9 [ 907.308623][T13192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.308645][T13192] RSP: 002b:00007f5f79b86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 907.308671][T13192] RAX: ffffffffffffffda RBX: 00007f5f7bba5fa0 RCX: 00007f5f7b92acb9 [ 907.308689][T13192] RDX: 0000000000000000 RSI: 0000000000000050 RDI: 0000000000000003 [ 907.308704][T13192] RBP: 00007f5f79b86090 R08: 0000000000000000 R09: 0000000000000000 [ 907.308720][T13192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.308735][T13192] R13: 00007f5f7bba6038 R14: 00007f5f7bba5fa0 R15: 00007ffd4578c8b8 [ 907.308777][T13192] [ 907.562694][ T31] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 907.732763][ T31] usb 6-1: device descriptor read/8, error -71 [ 908.026473][T13204] kernel profiling enabled (shift: 9) [ 908.502773][ T31] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 908.550156][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.550233][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.560222][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 908.560259][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.560282][ T31] usb 6-1: Product: syz [ 908.560298][ T31] usb 6-1: Manufacturer: syz [ 908.560315][ T31] usb 6-1: SerialNumber: syz [ 908.648845][ T31] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 908.648898][ T31] cdc_ncm 6-1:1.0: bind() failure [ 908.786721][T13225] overlayfs: failed lookup in lower (newroot/59, name='file1', err=-40): overlapping layers [ 909.446895][T13205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.447462][T13205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.815653][T13237] FAULT_INJECTION: forcing a failure. [ 909.815653][T13237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.815702][T13237] CPU: 0 UID: 0 PID: 13237 Comm: syz.8.2192 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 909.815735][T13237] Tainted: [L]=SOFTLOCKUP [ 909.815745][T13237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 909.815760][T13237] Call Trace: [ 909.815769][T13237] [ 909.815781][T13237] dump_stack_lvl+0xe8/0x150 [ 909.815820][T13237] should_fail_ex+0x46b/0x600 [ 909.815856][T13237] _copy_from_iter+0x1d3/0x1670 [ 909.815890][T13237] ? kmalloc_reserve+0xbd/0x290 [ 909.815927][T13237] ? rcu_is_watching+0x15/0xb0 [ 909.815952][T13237] ? kmalloc_reserve+0xbd/0x290 [ 909.815991][T13237] ? __pfx__copy_from_iter+0x10/0x10 [ 909.816030][T13237] ? __build_skb_around+0x22d/0x3c0 [ 909.816066][T13237] ? __alloc_skb+0x193/0x390 [ 909.816100][T13237] ? netlink_sendmsg+0x650/0xb40 [ 909.816125][T13237] ? skb_put+0x11b/0x210 [ 909.816149][T13237] netlink_sendmsg+0x6c0/0xb40 [ 909.816188][T13237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 909.816218][T13237] ? is_bpf_text_address+0x292/0x2b0 [ 909.816252][T13237] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 909.816284][T13237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 909.816313][T13237] __sock_sendmsg+0x21c/0x270 [ 909.816346][T13237] ____sys_sendmsg+0x4e1/0x800 [ 909.816381][T13237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 909.816413][T13237] ? import_iovec+0x73/0xa0 [ 909.816452][T13237] ___sys_sendmsg+0x2a5/0x360 [ 909.816475][T13237] ? __lock_acquire+0x6b5/0x2cf0 [ 909.816516][T13237] ? __pfx____sys_sendmsg+0x10/0x10 [ 909.816576][T13237] ? __fget_files+0x2a/0x420 [ 909.816601][T13237] ? __fget_files+0x3a6/0x420 [ 909.816637][T13237] __x64_sys_sendmsg+0x1c3/0x2a0 [ 909.816665][T13237] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 909.816702][T13237] ? __pfx_ksys_write+0x10/0x10 [ 909.816747][T13237] do_syscall_64+0xe2/0xf80 [ 909.816779][T13237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.816802][T13237] ? trace_irq_disable+0x37/0x100 [ 909.816828][T13237] ? clear_bhb_loop+0x60/0xb0 [ 909.816856][T13237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.816879][T13237] RIP: 0033:0x7f5f7b92acb9 [ 909.816901][T13237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.816920][T13237] RSP: 002b:00007f5f79b86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 909.816946][T13237] RAX: ffffffffffffffda RBX: 00007f5f7bba5fa0 RCX: 00007f5f7b92acb9 [ 909.816963][T13237] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 909.816979][T13237] RBP: 00007f5f79b86090 R08: 0000000000000000 R09: 0000000000000000 [ 909.816994][T13237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.817016][T13237] R13: 00007f5f7bba6038 R14: 00007f5f7bba5fa0 R15: 00007ffd4578c8b8 [ 909.817054][T13237] [ 910.268739][T13236] netlink: 'syz.1.2191': attribute type 23 has an invalid length. [ 910.722755][ T5843] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 910.889357][ T5843] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 910.889394][ T5843] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.889418][ T5843] usb 8-1: config 0 has no interface number 0 [ 910.889469][ T5843] usb 8-1: config 0 interface 119 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 910.890816][ T5843] usb 8-1: config 0 interface 119 has no altsetting 0 [ 910.890860][ T5843] usb 8-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=51.96 [ 910.890888][ T5843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.056438][ T5843] usb 8-1: config 0 descriptor?? [ 911.059205][ T5843] usb 8-1: NFC: intf ffff8880394af000 id ffffffff8e339420 [ 911.195887][ T5843] usb 6-1: USB disconnect, device number 49 [ 911.465174][T12086] IPVS: starting estimator thread 0... [ 911.475512][T13257] batman_adv: batadv0: Adding interface: dummy0 [ 911.475533][T13257] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.477875][T13257] batman_adv: batadv0: Interface activated: dummy0 [ 911.872892][T13261] IPVS: using max 9 ests per chain, 21600 per kthread [ 912.378333][T13264] batadv0: mtu less than device minimum [ 912.429381][T13264] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 912.487985][T13264] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 912.537654][T13264] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 912.571376][T13264] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 912.592452][T13264] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 912.618277][T13264] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 912.653852][T13264] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 912.676833][T13264] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 912.697636][T13264] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 912.746390][T13251] FAULT_INJECTION: forcing a failure. [ 912.746390][T13251] name failslab, interval 1, probability 0, space 0, times 0 [ 912.746422][T13251] CPU: 0 UID: 0 PID: 13251 Comm: syz.8.2197 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 912.746446][T13251] Tainted: [L]=SOFTLOCKUP [ 912.746453][T13251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 912.746464][T13251] Call Trace: [ 912.746470][T13251] [ 912.746478][T13251] dump_stack_lvl+0xe8/0x150 [ 912.746506][T13251] should_fail_ex+0x46b/0x600 [ 912.746530][T13251] ? security_inode_alloc+0x39/0x310 [ 912.746550][T13251] should_failslab+0xa8/0x100 [ 912.746567][T13251] ? security_inode_alloc+0x39/0x310 [ 912.746586][T13251] kmem_cache_alloc_noprof+0x83/0x6a0 [ 912.746615][T13251] security_inode_alloc+0x39/0x310 [ 912.746637][T13251] inode_init_always_gfp+0x9bf/0xd70 [ 912.746659][T13251] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 912.746675][T13251] alloc_inode+0x82/0x1b0 [ 912.746692][T13251] new_inode+0x22/0x170 [ 912.746712][T13251] shmem_get_inode+0x351/0xde0 [ 912.746746][T13251] __shmem_file_setup+0x162/0x300 [ 912.746773][T13251] __se_sys_memfd_create+0x3cd/0xa80 [ 912.746794][T13251] ? ksys_write+0x248/0x270 [ 912.746827][T13251] ? __pfx___se_sys_memfd_create+0x10/0x10 [ 912.746847][T13251] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 912.746868][T13251] ? syscall_user_dispatch+0x4e/0x90 [ 912.746899][T13251] do_syscall_64+0xe2/0xf80 [ 912.746923][T13251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.746944][T13251] ? trace_irq_disable+0x37/0x100 [ 912.746962][T13251] ? clear_bhb_loop+0x60/0xb0 [ 912.746983][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.747000][T13251] RIP: 0033:0x7f5f7b92acb9 [ 912.747015][T13251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.747030][T13251] RSP: 002b:00007f5f79b86028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 912.747048][T13251] RAX: ffffffffffffffda RBX: 00007f5f7bba5fa0 RCX: 00007f5f7b92acb9 [ 912.747061][T13251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000900 [ 912.747073][T13251] RBP: 00007f5f79b86090 R08: 0000000000000000 R09: 0000000000000000 [ 912.747096][T13251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.747106][T13251] R13: 00007f5f7bba6038 R14: 00007f5f7bba5fa0 R15: 00007ffd4578c8b8 [ 912.747131][T13251] [ 913.484992][ T9] usb 8-1: USB disconnect, device number 22 [ 913.982746][T12086] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 914.145221][T12086] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 914.145257][T12086] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 914.145286][T12086] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 914.145311][T12086] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 914.145356][T12086] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 914.145382][T12086] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.229160][T12086] usb 2-1: config 0 descriptor?? [ 914.242767][ T5990] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 914.344643][T13292] snd_dummy snd_dummy.0: control 0:3:0:syz0:0 is already present [ 914.418034][ T5990] usb 8-1: config 6 has an invalid interface number: 2 but max is 0 [ 914.418067][ T5990] usb 8-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 914.418091][ T5990] usb 8-1: config 6 has no interface number 0 [ 914.418141][ T5990] usb 8-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 914.516851][ T5990] usb 8-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 914.516890][ T5990] usb 8-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 914.516916][ T5990] usb 8-1: Product: syz [ 914.516933][ T5990] usb 8-1: Manufacturer: syz [ 914.516949][ T5990] usb 8-1: SerialNumber: syz [ 914.575648][ T5990] hso 8-1:6.2: Failed to find INT IN ep [ 914.811098][T13298] 9p: Bad value for 'wfdno' [ 914.838447][ T5843] usb 8-1: USB disconnect, device number 23 [ 915.239425][T12086] hdpvr 2-1:0.0: unexpected answer of status request, len -71 [ 915.239456][T12086] hdpvr 2-1:0.0: device init failed [ 915.239547][T12086] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 915.280198][T12086] usb 2-1: USB disconnect, device number 34 [ 915.484287][T13308] program syz.5.2214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 915.594108][T13309] FAULT_INJECTION: forcing a failure. [ 915.594108][T13309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.594141][T13309] CPU: 1 UID: 0 PID: 13309 Comm: syz.6.2213 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 915.594166][T13309] Tainted: [L]=SOFTLOCKUP [ 915.594173][T13309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 915.594184][T13309] Call Trace: [ 915.594191][T13309] [ 915.594198][T13309] dump_stack_lvl+0xe8/0x150 [ 915.594227][T13309] should_fail_ex+0x46b/0x600 [ 915.594252][T13309] _copy_to_user+0x31/0xb0 [ 915.594301][T13309] simple_read_from_buffer+0xe1/0x170 [ 915.594333][T13309] proc_fail_nth_read+0x1be/0x230 [ 915.594371][T13309] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 915.594410][T13309] ? rw_verify_area+0x2ac/0x4e0 [ 915.594442][T13309] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 915.594469][T13309] vfs_read+0x212/0xa70 [ 915.594526][T13309] ? __pfx_vfs_read+0x10/0x10 [ 915.594562][T13309] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 915.594594][T13309] ? lockdep_hardirqs_on+0x7a/0x110 [ 915.594625][T13309] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 915.594659][T13309] ? mutex_lock_nested+0x152/0x1d0 [ 915.594683][T13309] ? fdget_pos+0x252/0x320 [ 915.594718][T13309] ksys_read+0x156/0x270 [ 915.594754][T13309] ? __pfx_ksys_read+0x10/0x10 [ 915.594799][T13309] do_syscall_64+0xe2/0xf80 [ 915.594831][T13309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.594854][T13309] ? trace_irq_disable+0x37/0x100 [ 915.594880][T13309] ? clear_bhb_loop+0x60/0xb0 [ 915.594909][T13309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.594933][T13309] RIP: 0033:0x7f5ba218b58e [ 915.594954][T13309] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 915.594976][T13309] RSP: 002b:00007f5ba0425fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 915.595002][T13309] RAX: ffffffffffffffda RBX: 00007f5ba04266c0 RCX: 00007f5ba218b58e [ 915.595020][T13309] RDX: 000000000000000f RSI: 00007f5ba04260a0 RDI: 0000000000000004 [ 915.595036][T13309] RBP: 00007f5ba0426090 R08: 0000000000000000 R09: 0000000000000000 [ 915.595051][T13309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.595067][T13309] R13: 00007f5ba2446038 R14: 00007f5ba2445fa0 R15: 00007ffc8137a538 [ 915.595104][T13309] [ 915.902715][T12086] usb 8-1: new low-speed USB device number 24 using dummy_hcd [ 916.055171][T12086] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 916.055241][T12086] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 916.055277][T12086] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 916.055308][T12086] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 916.055338][T12086] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 916.056771][T12086] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 916.056828][T12086] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 916.056860][T12086] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 916.056890][T12086] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 916.056921][T12086] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 916.058375][T12086] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 916.058432][T12086] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 916.058464][T12086] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 916.058494][T12086] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 916.058533][T12086] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 916.245293][T12086] usb 8-1: string descriptor 0 read error: -22 [ 916.245453][T12086] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 916.245483][T12086] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.325957][T12086] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 916.492729][ T31] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 916.645220][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 916.646514][ T31] usb 2-1: config 190 has an invalid interface number: 63 but max is 0 [ 916.646549][ T31] usb 2-1: config 190 has no interface number 0 [ 916.646587][ T31] usb 2-1: config 190 interface 63 has no altsetting 0 [ 916.649083][ T31] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=9c.13 [ 916.649115][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.649144][ T31] usb 2-1: Product: syz [ 916.649157][ T31] usb 2-1: Manufacturer: syz [ 916.649168][ T31] usb 2-1: SerialNumber: syz [ 916.744427][T13326] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2218'. [ 916.782908][T11976] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 916.957584][T11976] usb 9-1: Using ep0 maxpacket: 32 [ 916.960506][T11976] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 916.960539][T11976] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 916.960564][T11976] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 916.960590][T11976] usb 9-1: config 1 has no interface number 0 [ 916.960647][T11976] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 916.960678][T11976] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 916.964728][T11976] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 916.964763][T11976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=228 [ 916.964788][T11976] usb 9-1: SerialNumber: syz [ 917.649499][T11976] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 917.836776][ T31] flexcop_usb: set interface failed. [ 917.836872][ T31] b2c2_flexcop_usb 2-1:190.63: probe with driver b2c2_flexcop_usb failed with error -22 [ 917.863175][ T31] usb 2-1: USB disconnect, device number 35 [ 917.907036][T13324] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2222'. [ 918.512526][ T31] usb 8-1: USB disconnect, device number 24 [ 918.637910][T11976] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 919.012275][T11976] usb 9-1: USB disconnect, device number 10 [ 919.048853][T11976] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 919.335126][T13359] fuse: Bad value for 'fd' [ 919.335921][T13359] fuse: Bad value for 'fd' [ 919.973241][T13349] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 919.973412][T13349] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 920.071905][T13349] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 920.072483][T13349] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 920.146881][T13349] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 920.164127][T13349] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 920.164266][T13349] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 920.230112][T13349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 920.230208][T13349] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 920.296484][T13349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 920.296621][T13349] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 920.367664][T13349] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 920.686655][T11976] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 920.702852][ T31] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 920.838866][T11976] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 920.841321][T11976] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 920.841355][T11976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.841378][T11976] usb 7-1: Product: syz [ 920.841394][T11976] usb 7-1: Manufacturer: syz [ 920.841412][T11976] usb 7-1: SerialNumber: syz [ 920.884295][ T31] usb 9-1: Using ep0 maxpacket: 16 [ 920.886692][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.886746][ T31] usb 9-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 920.886774][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.924264][T11976] usb 7-1: config 0 descriptor?? [ 920.935726][ T31] usb 9-1: config 0 descriptor?? [ 920.971780][T11976] streamzap 7-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 921.052773][ T9] usb 8-1: new low-speed USB device number 25 using dummy_hcd [ 921.158565][T12710] usb 7-1: USB disconnect, device number 9 [ 921.169425][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2240'. [ 921.246488][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 921.246557][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 921.246590][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 921.246622][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 921.246652][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 921.251332][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 921.251396][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 921.251428][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 921.251459][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 921.251488][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 921.253421][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 921.253486][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 921.253811][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 921.253899][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 921.253945][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 921.259028][ T9] usb 8-1: string descriptor 0 read error: -22 [ 921.263335][ T9] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 921.263379][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.322782][ T5114] Bluetooth: hci1: command 0x0406 tx timeout [ 921.472179][ T9] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 921.672968][ T31] usbhid 9-1:0.0: can't add hid device: -71 [ 921.673103][ T31] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 921.702824][ T31] usb 9-1: USB disconnect, device number 11 [ 922.119737][ T5114] Bluetooth: hci7: command 0x2016 tx timeout [ 922.212737][ T5114] Bluetooth: hci4: command 0x0406 tx timeout [ 922.272811][ T5114] Bluetooth: hci0: command 0x0406 tx timeout [ 922.354217][ T5114] Bluetooth: hci2: command 0x0c1a tx timeout [ 922.956842][T11671] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 923.112744][T11671] usb 9-1: Using ep0 maxpacket: 16 [ 923.115198][T11671] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.115239][T11671] usb 9-1: config 0 interface 0 has no altsetting 0 [ 923.115279][T11671] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 923.115307][T11671] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.121420][T11671] usb 9-1: config 0 descriptor?? [ 923.392692][ T5114] Bluetooth: hci1: command 0x0406 tx timeout [ 923.611572][T11671] nzxt-smart2 0003:1E71:2009.0021: unknown main item tag 0x0 [ 923.611618][T11671] nzxt-smart2 0003:1E71:2009.0021: unknown main item tag 0x0 [ 923.611652][T11671] nzxt-smart2 0003:1E71:2009.0021: unknown main item tag 0x0 [ 923.643451][T11671] nzxt-smart2 0003:1E71:2009.0021: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 923.948591][T12086] usb 8-1: USB disconnect, device number 25 [ 923.962268][T11671] usb 9-1: USB disconnect, device number 12 [ 923.999450][T13392] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2246'. [ 924.193233][ T5114] Bluetooth: hci7: command 0x2016 tx timeout [ 924.273083][ T5114] Bluetooth: hci4: command 0x0406 tx timeout [ 925.535548][T13396] fido_id[13396]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 926.352721][ T5114] Bluetooth: hci0: command 0x0406 tx timeout [ 926.352769][ T5114] Bluetooth: hci2: command 0x0c1a tx timeout [ 926.352798][ T5114] Bluetooth: hci7: command 0x2016 tx timeout [ 927.637339][T13415] FAULT_INJECTION: forcing a failure. [ 927.637339][T13415] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 927.637383][T13415] CPU: 1 UID: 0 PID: 13415 Comm: syz.6.2254 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 927.637416][T13415] Tainted: [L]=SOFTLOCKUP [ 927.637426][T13415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 927.637441][T13415] Call Trace: [ 927.637451][T13415] [ 927.637462][T13415] dump_stack_lvl+0xe8/0x150 [ 927.637513][T13415] should_fail_ex+0x46b/0x600 [ 927.637550][T13415] prepare_alloc_pages+0x22a/0x6b0 [ 927.637584][T13415] __alloc_frozen_pages_noprof+0x12f/0x380 [ 927.637614][T13415] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 927.637638][T13415] ? do_raw_spin_lock+0x12b/0x2f0 [ 927.637676][T13415] ? policy_nodemask+0x27c/0x710 [ 927.637720][T13415] alloc_pages_mpol+0xd1/0x380 [ 927.637748][T13415] vma_alloc_folio_noprof+0xea/0x290 [ 927.637777][T13415] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 927.637802][T13415] ? ___pte_offset_map+0x29/0x200 [ 927.637836][T13415] ? ___pte_offset_map+0x29/0x200 [ 927.637872][T13415] folio_prealloc+0x30/0x170 [ 927.637911][T13415] do_pte_missing+0x86a/0x27a0 [ 927.637946][T13415] ? handle_mm_fault+0xe7/0x13c0 [ 927.637985][T13415] handle_mm_fault+0xd0a/0x13c0 [ 927.638026][T13415] ? handle_mm_fault+0xe7/0x13c0 [ 927.638064][T13415] ? __pfx_handle_mm_fault+0x10/0x10 [ 927.638121][T13415] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 927.638149][T13415] do_user_addr_fault+0x75b/0x1360 [ 927.638197][T13415] exc_page_fault+0x6a/0xc0 [ 927.638232][T13415] asm_exc_page_fault+0x26/0x30 [ 927.638254][T13415] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 927.638280][T13415] Code: 1b 05 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 1b 05 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 927.638302][T13415] RSP: 0018:ffffc9000d0e7b48 EFLAGS: 00050206 [ 927.638324][T13415] RAX: ffffffff84881301 RBX: 0000000000001000 RCX: 0000000000000240 [ 927.638341][T13415] RDX: 0000000000000000 RSI: ffff8880729a6dc0 RDI: 0000200000002000 [ 927.638359][T13415] RBP: ffffc9000d0e7c90 R08: ffff8880729a6fff R09: 1ffff1100e534dff [ 927.638377][T13415] R10: dffffc0000000000 R11: ffffed100e534e00 R12: 0000200000002240 [ 927.638396][T13415] R13: 00007ffffffff000 R14: ffff8880729a6000 R15: 0000200000001240 [ 927.638424][T13415] ? _copy_from_user+0x31/0xb0 [ 927.638467][T13415] _copy_to_user+0x8a/0xb0 [ 927.638511][T13415] pagemap_read+0x4dd/0x7a0 [ 927.638553][T13415] ? __pfx_pagemap_read+0x10/0x10 [ 927.638590][T13415] ? rw_verify_area+0x2ac/0x4e0 [ 927.638622][T13415] ? __pfx_pagemap_read+0x10/0x10 [ 927.638655][T13415] vfs_read+0x212/0xa70 [ 927.638697][T13415] ? __pfx_vfs_read+0x10/0x10 [ 927.638731][T13415] ? __fget_files+0x2a/0x420 [ 927.638762][T13415] ? __fget_files+0x2a/0x420 [ 927.638785][T13415] ? __fget_files+0x3a6/0x420 [ 927.638807][T13415] ? __fget_files+0x2a/0x420 [ 927.638843][T13415] __x64_sys_pread64+0x19c/0x230 [ 927.638882][T13415] ? __pfx___x64_sys_pread64+0x10/0x10 [ 927.638932][T13415] do_syscall_64+0xe2/0xf80 [ 927.638964][T13415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.638987][T13415] ? trace_irq_disable+0x37/0x100 [ 927.639012][T13415] ? clear_bhb_loop+0x60/0xb0 [ 927.639041][T13415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.639065][T13415] RIP: 0033:0x7f5ba21cacb9 [ 927.639086][T13415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.639106][T13415] RSP: 002b:00007f5ba0426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 927.639131][T13415] RAX: ffffffffffffffda RBX: 00007f5ba2445fa0 RCX: 00007f5ba21cacb9 [ 927.639149][T13415] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000004 [ 927.639165][T13415] RBP: 00007f5ba0426090 R08: 0000000000000000 R09: 0000000000000000 [ 927.639181][T13415] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.639197][T13415] R13: 00007f5ba2446038 R14: 00007f5ba2445fa0 R15: 00007ffc8137a538 [ 927.639236][T13415] [ 928.350861][T13421] netlink: 'syz.6.2257': attribute type 13 has an invalid length. [ 928.432820][ T5801] Bluetooth: hci2: command 0x0c1a tx timeout [ 928.819071][T13421] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.819898][T13421] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.357488][T13434] FAULT_INJECTION: forcing a failure. [ 930.357488][T13434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.357531][T13434] CPU: 0 UID: 0 PID: 13434 Comm: syz.1.2261 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 930.357565][T13434] Tainted: [L]=SOFTLOCKUP [ 930.357574][T13434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 930.357590][T13434] Call Trace: [ 930.357600][T13434] [ 930.357611][T13434] dump_stack_lvl+0xe8/0x150 [ 930.357650][T13434] should_fail_ex+0x46b/0x600 [ 930.357684][T13434] _copy_from_user+0x2d/0xb0 [ 930.357721][T13434] sctp_setsockopt+0x1c4/0x12c0 [ 930.357751][T13434] ? sock_common_setsockopt+0x36/0xc0 [ 930.357784][T13434] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 930.357820][T13434] do_sock_setsockopt+0x17c/0x1b0 [ 930.357849][T13434] __x64_sys_setsockopt+0x143/0x1b0 [ 930.357878][T13434] do_syscall_64+0xe2/0xf80 [ 930.357910][T13434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.357934][T13434] ? trace_irq_disable+0x37/0x100 [ 930.357959][T13434] ? clear_bhb_loop+0x60/0xb0 [ 930.357988][T13434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.358011][T13434] RIP: 0033:0x7f8acc2facb9 [ 930.358033][T13434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.358054][T13434] RSP: 002b:00007f8aca556028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 930.358081][T13434] RAX: ffffffffffffffda RBX: 00007f8acc575fa0 RCX: 00007f8acc2facb9 [ 930.358099][T13434] RDX: 0000000000000085 RSI: 0000000000000084 RDI: 0000000000000003 [ 930.358115][T13434] RBP: 00007f8aca556090 R08: 0000000000000090 R09: 0000000000000000 [ 930.358131][T13434] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.358146][T13434] R13: 00007f8acc576038 R14: 00007f8acc575fa0 R15: 00007fffd9d49708 [ 930.358184][T13434] [ 933.854518][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 933.868361][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 933.888333][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 933.908086][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 933.927543][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 934.358407][T13421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.462415][T13421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.037843][ T5801] Bluetooth: hci3: command tx timeout [ 936.838877][T13460] ip6gre1: entered allmulticast mode [ 936.852136][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.852334][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.547596][ T5801] Bluetooth: hci3: command tx timeout [ 939.504668][ T5801] Bluetooth: hci7: unexpected event for opcode 0x200c [ 939.862986][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.891284][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.142957][T13484] FAULT_INJECTION: forcing a failure. [ 940.142957][T13484] name failslab, interval 1, probability 0, space 0, times 0 [ 940.143006][T13484] CPU: 0 UID: 0 PID: 13484 Comm: syz.1.2275 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 940.143065][T13484] Tainted: [L]=SOFTLOCKUP [ 940.143080][T13484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 940.143107][T13484] Call Trace: [ 940.143118][T13484] [ 940.143129][T13484] dump_stack_lvl+0xe8/0x150 [ 940.143168][T13484] should_fail_ex+0x46b/0x600 [ 940.143204][T13484] should_failslab+0xa8/0x100 [ 940.143231][T13484] __kvmalloc_node_noprof+0x16f/0x8f0 [ 940.143269][T13484] ? traverse+0xde/0x580 [ 940.143309][T13484] traverse+0xde/0x580 [ 940.143341][T13484] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 940.143379][T13484] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 940.143415][T13484] ? seq_read_iter+0xb8/0xe20 [ 940.143453][T13484] seq_read_iter+0xd09/0xe20 [ 940.143489][T13484] ? __lock_acquire+0x6b5/0x2cf0 [ 940.143541][T13484] proc_reg_read_iter+0x1bf/0x290 [ 940.143570][T13484] vfs_read+0x58b/0xa70 [ 940.143614][T13484] ? __pfx_vfs_read+0x10/0x10 [ 940.143659][T13484] ? __fget_files+0x2a/0x420 [ 940.143696][T13484] __x64_sys_pread64+0x19c/0x230 [ 940.143737][T13484] ? __pfx___x64_sys_pread64+0x10/0x10 [ 940.143785][T13484] do_syscall_64+0xe2/0xf80 [ 940.143817][T13484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.143842][T13484] ? trace_irq_disable+0x37/0x100 [ 940.143868][T13484] ? clear_bhb_loop+0x60/0xb0 [ 940.143898][T13484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.143929][T13484] RIP: 0033:0x7f8acc2facb9 [ 940.143951][T13484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.143972][T13484] RSP: 002b:00007f8aca556028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 940.143998][T13484] RAX: ffffffffffffffda RBX: 00007f8acc575fa0 RCX: 00007f8acc2facb9 [ 940.144017][T13484] RDX: 00000000000000b5 RSI: 0000200000000180 RDI: 0000000000000003 [ 940.144033][T13484] RBP: 00007f8aca556090 R08: 0000000000000000 R09: 0000000000000000 [ 940.144048][T13484] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 940.144064][T13484] R13: 00007f8acc576038 R14: 00007f8acc575fa0 R15: 00007fffd9d49708 [ 940.144101][T13484] [ 940.498881][T13489] xfs: Unknown parameter 'grpquota' [ 940.514445][ T5801] Bluetooth: hci4: unexpected event for opcode 0x0c57 [ 940.593137][ T5801] Bluetooth: hci3: command tx timeout [ 941.076938][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.112041][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.625024][ T5801] Bluetooth: hci3: command tx timeout [ 943.998431][ T8486] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.072679][ T6389] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 944.305017][ T6389] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 944.305051][ T6389] usb 2-1: config 0 has no interface number 0 [ 944.308273][ T6389] usb 2-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96 [ 944.308306][ T6389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.308331][ T6389] usb 2-1: Product: syz [ 944.308349][ T6389] usb 2-1: Manufacturer: syz [ 944.308368][ T6389] usb 2-1: SerialNumber: syz [ 944.375743][ T6389] usb 2-1: config 0 descriptor?? [ 944.391187][ T6389] cx231xx 2-1:0.1: New device syz syz @ 12 Mbps (2013:0259) with 1 interfaces [ 944.391226][ T6389] cx231xx 2-1:0.1: Not found matching IAD interface [ 944.589335][T13507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2284'. [ 944.638577][ T8486] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.790221][ T5990] usb 2-1: USB disconnect, device number 36 [ 945.236120][ T8486] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.562683][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 945.619349][ T37] audit: type=1326 audit(1769359977.948:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13540 comm="syz.1.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8acc2facb9 code=0x7ffc0000 [ 945.619589][ T37] audit: type=1326 audit(1769359977.988:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13540 comm="syz.1.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f8acc2facb9 code=0x7ffc0000 [ 945.619919][ T37] audit: type=1326 audit(1769359977.988:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13540 comm="syz.1.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8acc2facb9 code=0x7ffc0000 [ 945.620165][ T37] audit: type=1326 audit(1769359977.988:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13540 comm="syz.1.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f8acc2facb9 code=0x7ffc0000 [ 945.620422][ T37] audit: type=1326 audit(1769359977.988:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13540 comm="syz.1.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8acc2facb9 code=0x7ffc0000 [ 945.620750][ T37] audit: type=1326 audit(1769359977.988:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13540 comm="syz.1.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f8acc2facb9 code=0x7ffc0000 [ 945.621205][ T37] audit: type=1326 audit(1769359977.988:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13540 comm="syz.1.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8acc2facb9 code=0x7ffc0000 [ 945.621258][ T37] audit: type=1326 audit(1769359977.988:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13540 comm="syz.1.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8acc2facb9 code=0x7ffc0000 [ 945.710905][ T37] audit: type=1326 audit(1769359978.078:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13540 comm="syz.1.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8acc2facb9 code=0x7ffc0000 [ 945.710964][ T37] audit: type=1326 audit(1769359978.078:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13540 comm="syz.1.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8acc2facb9 code=0x7ffc0000 [ 945.753244][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 945.761191][ T9] usb 7-1: config 0 has an invalid interface number: 76 but max is 0 [ 945.761282][ T9] usb 7-1: config 0 has no interface number 0 [ 945.871791][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 945.871878][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.871957][ T9] usb 7-1: Product: syz [ 945.872022][ T9] usb 7-1: Manufacturer: syz [ 945.872073][ T9] usb 7-1: SerialNumber: syz [ 945.966635][ T9] usb 7-1: config 0 descriptor?? [ 945.994411][ T9] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 945.994472][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 945.994503][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 946.035760][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 946.045051][ T9] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 946.045223][ T9] usb 7-1: media controller created [ 946.045347][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 946.045399][ T9] dw2102: i2c transfer failed. [ 946.045445][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 946.045495][ T9] dw2102: i2c transfer failed. [ 946.045550][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 946.045605][ T9] dw2102: i2c transfer failed. [ 946.045665][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 946.045715][ T9] dw2102: i2c transfer failed. [ 946.045759][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 946.045803][ T9] dw2102: i2c transfer failed. [ 946.045853][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 946.045897][ T9] dw2102: i2c transfer failed. [ 946.045928][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 946.107525][ T8486] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.189383][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 946.211280][T13533] dvb-usb: bulk message failed: -22 (3/0) [ 946.211306][T13533] dw2102: i2c transfer failed. [ 946.211316][T13533] dw2102: i2c wr: len=176 is too big! [ 946.211316][T13533] [ 946.351250][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 946.351273][ T9] dw2102: command 0x0e transfer failed. [ 946.351281][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 946.351298][ T9] dw2102: command 0x0e transfer failed. [ 946.390644][T13556] binder: 13553:13556 ioctl c0306201 0 returned -14 [ 946.514723][T11976] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 946.654339][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 946.654369][ T9] dw2102: command 0x0e transfer failed. [ 946.654381][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 946.654398][ T9] dw2102: command 0x0e transfer failed. [ 946.654409][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 946.654426][ T9] dw2102: command 0x51 transfer failed. [ 946.698584][T11976] usb 2-1: Using ep0 maxpacket: 32 [ 946.731800][T11976] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 946.731837][T11976] usb 2-1: config 0 has no interface number 0 [ 946.747734][T11976] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 946.747771][T11976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.747794][T11976] usb 2-1: Product: syz [ 946.747811][T11976] usb 2-1: Manufacturer: syz [ 946.747827][T11976] usb 2-1: SerialNumber: syz [ 946.793398][T11976] usb 2-1: config 0 descriptor?? [ 946.797372][T11976] smsc95xx v2.0.0 [ 946.797398][T11976] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 946.797687][T11976] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 946.950927][ T9] DVB: Unable to find symbol ds3000_attach() [ 946.950946][ T9] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 947.041179][T13442] chnl_net:caif_netlink_parms(): no params data found [ 947.353938][ T9] rc_core: IR keymap rc-su3000 not found [ 947.353966][ T9] Registered IR keymap rc-empty [ 947.356876][ T9] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 947.393815][ T9] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input37 [ 947.437846][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 947.437875][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 947.437892][ T9] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 947.500084][ T9] usb 7-1: USB disconnect, device number 10 [ 947.787739][ T9] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 947.882715][T12710] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 948.038628][T12710] usb 8-1: Using ep0 maxpacket: 8 [ 948.041247][T12710] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.041288][T12710] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 948.041338][T12710] usb 8-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 948.041365][T12710] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.057316][T12710] usb 8-1: config 0 descriptor?? [ 948.653102][T12710] cougar 0003:060B:700A.0022: item fetching failed at offset 0/3 [ 948.654047][T12710] cougar 0003:060B:700A.0022: parse failed [ 948.654167][T12710] cougar 0003:060B:700A.0022: probe with driver cougar failed with error -22 [ 948.874076][T12710] usb 8-1: USB disconnect, device number 26 [ 949.171968][ T8486] bridge_slave_1: left allmulticast mode [ 949.172003][ T8486] bridge_slave_1: left promiscuous mode [ 949.172272][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.297443][ T8486] bridge_slave_0: left allmulticast mode [ 949.297479][ T8486] bridge_slave_0: left promiscuous mode [ 949.298076][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.690467][T13582] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2306'. [ 950.097945][ T9] usb 2-1: USB disconnect, device number 37 [ 952.088362][T13599] net_ratelimit: 10 callbacks suppressed [ 952.088386][T13599] openvswitch: netlink: IP tunnel TTL not specified. [ 952.203235][T13601] FAULT_INJECTION: forcing a failure. [ 952.203235][T13601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.203280][T13601] CPU: 1 UID: 0 PID: 13601 Comm: syz.8.2313 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 952.203314][T13601] Tainted: [L]=SOFTLOCKUP [ 952.203324][T13601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 952.203339][T13601] Call Trace: [ 952.203348][T13601] [ 952.203360][T13601] dump_stack_lvl+0xe8/0x150 [ 952.203400][T13601] should_fail_ex+0x46b/0x600 [ 952.203437][T13601] _copy_from_iter+0x1d3/0x1670 [ 952.203471][T13601] ? kmalloc_reserve+0xbd/0x290 [ 952.203507][T13601] ? rcu_is_watching+0x15/0xb0 [ 952.203532][T13601] ? kmalloc_reserve+0xbd/0x290 [ 952.203573][T13601] ? __pfx__copy_from_iter+0x10/0x10 [ 952.203604][T13601] ? __build_skb_around+0x22d/0x3c0 [ 952.203642][T13601] ? __alloc_skb+0x193/0x390 [ 952.203678][T13601] ? netlink_sendmsg+0x650/0xb40 [ 952.203704][T13601] ? skb_put+0x11b/0x210 [ 952.203730][T13601] netlink_sendmsg+0x6c0/0xb40 [ 952.203769][T13601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.203801][T13601] ? is_bpf_text_address+0x292/0x2b0 [ 952.203837][T13601] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 952.203871][T13601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.203908][T13601] __sock_sendmsg+0x21c/0x270 [ 952.203944][T13601] ____sys_sendmsg+0x4e1/0x800 [ 952.203980][T13601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 952.204015][T13601] ? import_iovec+0x73/0xa0 [ 952.204055][T13601] ___sys_sendmsg+0x2a5/0x360 [ 952.204079][T13601] ? __lock_acquire+0x6b5/0x2cf0 [ 952.204117][T13601] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.204180][T13601] ? __fget_files+0x2a/0x420 [ 952.204207][T13601] ? __fget_files+0x3a6/0x420 [ 952.204243][T13601] __x64_sys_sendmsg+0x1c3/0x2a0 [ 952.204272][T13601] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 952.204309][T13601] ? __pfx_ksys_write+0x10/0x10 [ 952.204358][T13601] do_syscall_64+0xe2/0xf80 [ 952.204392][T13601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.204415][T13601] ? trace_irq_disable+0x37/0x100 [ 952.204442][T13601] ? clear_bhb_loop+0x60/0xb0 [ 952.204471][T13601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.204495][T13601] RIP: 0033:0x7f5f7b92acb9 [ 952.204517][T13601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.204540][T13601] RSP: 002b:00007f5f79b86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 952.204567][T13601] RAX: ffffffffffffffda RBX: 00007f5f7bba5fa0 RCX: 00007f5f7b92acb9 [ 952.204586][T13601] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 952.204603][T13601] RBP: 00007f5f79b86090 R08: 0000000000000000 R09: 0000000000000000 [ 952.204620][T13601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.204637][T13601] R13: 00007f5f7bba6038 R14: 00007f5f7bba5fa0 R15: 00007ffd4578c8b8 [ 952.204675][T13601] [ 953.705598][T13606] FAULT_INJECTION: forcing a failure. [ 953.705598][T13606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.705643][T13606] CPU: 0 UID: 0 PID: 13606 Comm: syz.8.2316 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 953.705676][T13606] Tainted: [L]=SOFTLOCKUP [ 953.705686][T13606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 953.705701][T13606] Call Trace: [ 953.705711][T13606] [ 953.705722][T13606] dump_stack_lvl+0xe8/0x150 [ 953.705761][T13606] should_fail_ex+0x46b/0x600 [ 953.705795][T13606] _copy_from_user+0x2d/0xb0 [ 953.705833][T13606] ___sys_sendmsg+0x1c6/0x360 [ 953.705860][T13606] ? __lock_acquire+0x6b5/0x2cf0 [ 953.705898][T13606] ? __pfx____sys_sendmsg+0x10/0x10 [ 953.705962][T13606] ? __fget_files+0x2a/0x420 [ 953.705988][T13606] ? __fget_files+0x3a6/0x420 [ 953.706025][T13606] __x64_sys_sendmsg+0x1c3/0x2a0 [ 953.706063][T13606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 953.706098][T13606] ? __pfx_ksys_write+0x10/0x10 [ 953.706145][T13606] do_syscall_64+0xe2/0xf80 [ 953.706180][T13606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.706203][T13606] ? trace_irq_disable+0x37/0x100 [ 953.706230][T13606] ? clear_bhb_loop+0x60/0xb0 [ 953.706260][T13606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.706284][T13606] RIP: 0033:0x7f5f7b92acb9 [ 953.706306][T13606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.706328][T13606] RSP: 002b:00007f5f79b86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 953.706354][T13606] RAX: ffffffffffffffda RBX: 00007f5f7bba5fa0 RCX: 00007f5f7b92acb9 [ 953.706373][T13606] RDX: 9590f6cc3ea35512 RSI: 0000200000000000 RDI: 0000000000000003 [ 953.706391][T13606] RBP: 00007f5f79b86090 R08: 0000000000000000 R09: 0000000000000000 [ 953.706406][T13606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.706422][T13606] R13: 00007f5f7bba6038 R14: 00007f5f7bba5fa0 R15: 00007ffd4578c8b8 [ 953.706459][T13606] [ 954.004664][T13609] netlink: 62 bytes leftover after parsing attributes in process `syz.1.2315'. [ 955.702187][T13619] FAULT_INJECTION: forcing a failure. [ 955.702187][T13619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 955.702225][T13619] CPU: 1 UID: 0 PID: 13619 Comm: syz.6.2312 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 955.702252][T13619] Tainted: [L]=SOFTLOCKUP [ 955.702260][T13619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 955.702272][T13619] Call Trace: [ 955.702280][T13619] [ 955.702288][T13619] dump_stack_lvl+0xe8/0x150 [ 955.702321][T13619] should_fail_ex+0x46b/0x600 [ 955.702349][T13619] _copy_from_iter+0x1d3/0x1670 [ 955.702376][T13619] ? kmalloc_reserve+0xbd/0x290 [ 955.702406][T13619] ? rcu_is_watching+0x15/0xb0 [ 955.702425][T13619] ? kmalloc_reserve+0xbd/0x290 [ 955.702456][T13619] ? __pfx__copy_from_iter+0x10/0x10 [ 955.702481][T13619] ? __build_skb_around+0x22d/0x3c0 [ 955.702518][T13619] ? __alloc_skb+0x193/0x390 [ 955.702546][T13619] ? netlink_sendmsg+0x650/0xb40 [ 955.702567][T13619] ? skb_put+0x11b/0x210 [ 955.702587][T13619] netlink_sendmsg+0x6c0/0xb40 [ 955.702616][T13619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 955.702640][T13619] ? is_bpf_text_address+0x292/0x2b0 [ 955.702679][T13619] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 955.702704][T13619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 955.702727][T13619] __sock_sendmsg+0x21c/0x270 [ 955.702754][T13619] ____sys_sendmsg+0x4e1/0x800 [ 955.702782][T13619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 955.702809][T13619] ? import_iovec+0x73/0xa0 [ 955.702840][T13619] ___sys_sendmsg+0x2a5/0x360 [ 955.702859][T13619] ? __lock_acquire+0x6b5/0x2cf0 [ 955.702889][T13619] ? __pfx____sys_sendmsg+0x10/0x10 [ 955.702952][T13619] ? __fget_files+0x2a/0x420 [ 955.702972][T13619] ? __fget_files+0x3a6/0x420 [ 955.703001][T13619] __x64_sys_sendmsg+0x1c3/0x2a0 [ 955.703023][T13619] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 955.703052][T13619] ? __pfx_ksys_write+0x10/0x10 [ 955.703089][T13619] do_syscall_64+0xe2/0xf80 [ 955.703121][T13619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.703140][T13619] ? trace_irq_disable+0x37/0x100 [ 955.703161][T13619] ? clear_bhb_loop+0x60/0xb0 [ 955.703184][T13619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.703203][T13619] RIP: 0033:0x7f5ba21cacb9 [ 955.703221][T13619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.703238][T13619] RSP: 002b:00007f5ba0426028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 955.703259][T13619] RAX: ffffffffffffffda RBX: 00007f5ba2445fa0 RCX: 00007f5ba21cacb9 [ 955.703273][T13619] RDX: 000000000c000810 RSI: 0000200000001100 RDI: 0000000000000004 [ 955.703286][T13619] RBP: 00007f5ba0426090 R08: 0000000000000000 R09: 0000000000000000 [ 955.703299][T13619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.703311][T13619] R13: 00007f5ba2446038 R14: 00007f5ba2445fa0 R15: 00007ffc8137a538 [ 955.703340][T13619] [ 956.347951][T13623] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2317'. [ 959.008923][ T8486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.096170][ T8486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.135548][ T8486] bond0 (unregistering): Released all slaves [ 959.313735][T13622] ip6gre1: entered allmulticast mode [ 959.607539][T13442] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.607676][T13442] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.607950][T13442] bridge_slave_0: entered allmulticast mode [ 959.692975][T13442] bridge_slave_0: entered promiscuous mode [ 959.769075][T13442] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.769210][T13442] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.769485][T13442] bridge_slave_1: entered allmulticast mode [ 959.802863][T12710] kernel write not supported for file bpf-prog (pid: 12710 comm: kworker/1:7) [ 959.827407][T13442] bridge_slave_1: entered promiscuous mode [ 960.610737][T13442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.697635][T13442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.098713][T13655] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input38 [ 962.272739][T13662] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2330'. [ 964.849739][T13442] team0: Port device team_slave_0 added [ 964.968239][T13442] team0: Port device team_slave_1 added [ 966.138998][T13683] ip6gre1: entered allmulticast mode [ 966.171239][T13685] FAULT_INJECTION: forcing a failure. [ 966.171239][T13685] name failslab, interval 1, probability 0, space 0, times 0 [ 966.171283][T13685] CPU: 0 UID: 0 PID: 13685 Comm: syz.6.2329 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 966.171316][T13685] Tainted: [L]=SOFTLOCKUP [ 966.171325][T13685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 966.171341][T13685] Call Trace: [ 966.171350][T13685] [ 966.171362][T13685] dump_stack_lvl+0xe8/0x150 [ 966.171400][T13685] should_fail_ex+0x46b/0x600 [ 966.171437][T13685] should_failslab+0xa8/0x100 [ 966.171464][T13685] __kmalloc_noprof+0xdf/0x7c0 [ 966.171498][T13685] ? kfree+0x4d/0x8f0 [ 966.171526][T13685] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 966.171560][T13685] tomoyo_realpath_from_path+0xe3/0x5d0 [ 966.171590][T13685] ? tomoyo_domain+0xd8/0x130 [ 966.171625][T13685] ? tomoyo_path_number_perm+0x219/0x630 [ 966.171661][T13685] tomoyo_path_number_perm+0x246/0x630 [ 966.171701][T13685] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 966.171737][T13685] ? __lock_acquire+0x6b5/0x2cf0 [ 966.171774][T13685] ? do_raw_spin_lock+0x12b/0x2f0 [ 966.171839][T13685] ? __fget_files+0x2a/0x420 [ 966.171870][T13685] ? __fget_files+0x2a/0x420 [ 966.171894][T13685] ? __fget_files+0x3a6/0x420 [ 966.171919][T13685] ? __fget_files+0x2a/0x420 [ 966.171949][T13685] security_file_ioctl+0xc3/0x2a0 [ 966.171989][T13685] __se_sys_ioctl+0x47/0x170 [ 966.172025][T13685] do_syscall_64+0xe2/0xf80 [ 966.172060][T13685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.172083][T13685] ? trace_irq_disable+0x37/0x100 [ 966.172109][T13685] ? clear_bhb_loop+0x60/0xb0 [ 966.172139][T13685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.172164][T13685] RIP: 0033:0x7f5ba21cacb9 [ 966.172186][T13685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.172215][T13685] RSP: 002b:00007f5ba0426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 966.172242][T13685] RAX: ffffffffffffffda RBX: 00007f5ba2445fa0 RCX: 00007f5ba21cacb9 [ 966.172260][T13685] RDX: 00002000000000c0 RSI: 000000008010aa01 RDI: 0000000000000003 [ 966.172278][T13685] RBP: 00007f5ba0426090 R08: 0000000000000000 R09: 0000000000000000 [ 966.172295][T13685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.172310][T13685] R13: 00007f5ba2446038 R14: 00007f5ba2445fa0 R15: 00007ffc8137a538 [ 966.172349][T13685] [ 966.172359][T13685] ERROR: Out of memory at tomoyo_realpath_from_path. [ 966.520743][T13442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.520761][T13442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.520787][T13442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.626121][T13442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.626143][T13442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.626297][T13442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.669575][T13679] FAULT_INJECTION: forcing a failure. [ 966.669575][T13679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.669683][T13679] CPU: 1 UID: 0 PID: 13679 Comm: syz.8.2333 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 966.669769][T13679] Tainted: [L]=SOFTLOCKUP [ 966.669791][T13679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 966.669842][T13679] Call Trace: [ 966.669880][T13679] [ 966.669926][T13679] dump_stack_lvl+0xe8/0x150 [ 966.670039][T13679] should_fail_ex+0x46b/0x600 [ 966.670116][T13679] _copy_from_user+0x2d/0xb0 [ 966.670207][T13679] do_handle_open+0xf2/0x970 [ 966.670292][T13679] ? __pfx_do_handle_open+0x10/0x10 [ 966.670375][T13679] ? ksys_write+0x248/0x270 [ 966.670468][T13679] ? __pfx_ksys_write+0x10/0x10 [ 966.670562][T13679] ? syscall_user_dispatch+0x4e/0x90 [ 966.670677][T13679] do_syscall_64+0xe2/0xf80 [ 966.670763][T13679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.670819][T13679] ? trace_irq_disable+0x37/0x100 [ 966.670885][T13679] ? clear_bhb_loop+0x60/0xb0 [ 966.670968][T13679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.671031][T13679] RIP: 0033:0x7f5f7b92acb9 [ 966.671093][T13679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.671148][T13679] RSP: 002b:00007f5f79b86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 966.671236][T13679] RAX: ffffffffffffffda RBX: 00007f5f7bba5fa0 RCX: 00007f5f7b92acb9 [ 966.671304][T13679] RDX: 0200000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 966.671369][T13679] RBP: 00007f5f79b86090 R08: 0000000000000000 R09: 0000000000000000 [ 966.671419][T13679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.671453][T13679] R13: 00007f5f7bba6038 R14: 00007f5f7bba5fa0 R15: 00007ffd4578c8b8 [ 966.671556][T13679] [ 966.910347][T13691] FAULT_INJECTION: forcing a failure. [ 966.910347][T13691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.910393][T13691] CPU: 1 UID: 0 PID: 13691 Comm: syz.6.2336 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 966.910427][T13691] Tainted: [L]=SOFTLOCKUP [ 966.910437][T13691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 966.910453][T13691] Call Trace: [ 966.910463][T13691] [ 966.910475][T13691] dump_stack_lvl+0xe8/0x150 [ 966.910514][T13691] should_fail_ex+0x46b/0x600 [ 966.910550][T13691] _copy_to_user+0x31/0xb0 [ 966.910588][T13691] simple_read_from_buffer+0xe1/0x170 [ 966.910620][T13691] proc_fail_nth_read+0x1be/0x230 [ 966.910659][T13691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 966.910698][T13691] ? rw_verify_area+0x2ac/0x4e0 [ 966.910731][T13691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 966.910768][T13691] vfs_read+0x212/0xa70 [ 966.910812][T13691] ? __pfx_vfs_read+0x10/0x10 [ 966.910848][T13691] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 966.910892][T13691] ? lockdep_hardirqs_on+0x7a/0x110 [ 966.910926][T13691] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 966.910960][T13691] ? mutex_lock_nested+0x152/0x1d0 [ 966.910984][T13691] ? fdget_pos+0x252/0x320 [ 966.911020][T13691] ksys_read+0x156/0x270 [ 966.911057][T13691] ? __pfx_ksys_read+0x10/0x10 [ 966.911102][T13691] do_syscall_64+0xe2/0xf80 [ 966.911143][T13691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.911168][T13691] ? trace_irq_disable+0x37/0x100 [ 966.911194][T13691] ? clear_bhb_loop+0x60/0xb0 [ 966.911225][T13691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.911250][T13691] RIP: 0033:0x7f5ba218b58e [ 966.911271][T13691] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 966.911294][T13691] RSP: 002b:00007f5ba0425fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 966.911320][T13691] RAX: ffffffffffffffda RBX: 00007f5ba04266c0 RCX: 00007f5ba218b58e [ 966.911339][T13691] RDX: 000000000000000f RSI: 00007f5ba04260a0 RDI: 0000000000000004 [ 966.911355][T13691] RBP: 00007f5ba0426090 R08: 0000000000000000 R09: 0000000000000000 [ 966.911370][T13691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.911386][T13691] R13: 00007f5ba2446038 R14: 00007f5ba2445fa0 R15: 00007ffc8137a538 [ 966.911426][T13691] [ 967.280996][ T8486] hsr_slave_0: left promiscuous mode [ 968.189890][ T8486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 968.189926][ T8486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.304624][ T8486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.304656][ T8486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.578209][ T8486] veth1_macvtap: left promiscuous mode [ 968.578324][ T8486] veth0_macvtap: left promiscuous mode [ 968.578591][ T8486] veth1_vlan: left promiscuous mode [ 968.578787][ T8486] veth0_vlan: left promiscuous mode [ 968.682763][ T9] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 968.851492][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 968.870379][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 968.870431][ T9] usb 8-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 968.870467][ T9] usb 8-1: config 1 interface 0 has no altsetting 1 [ 968.923271][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 968.923309][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.923333][ T9] usb 8-1: Product: syz [ 968.923351][ T9] usb 8-1: Manufacturer: syz [ 968.923369][ T9] usb 8-1: SerialNumber: syz [ 969.011075][ T9] smsusb:smsusb_probe: board id=8, interface number 0 [ 969.203061][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 969.725175][ T6389] usb 8-1: USB disconnect, device number 27 [ 974.634923][ T8486] team0 (unregistering): Port device team_slave_1 removed [ 974.944281][ T8486] team0 (unregistering): Port device team_slave_0 removed [ 978.231466][T13442] hsr_slave_0: entered promiscuous mode [ 978.252463][T13442] hsr_slave_1: entered promiscuous mode [ 978.259614][T13442] debugfs: 'hsr0' already exists in 'hsr' [ 978.259646][T13442] Cannot create hsr debugfs directory [ 978.682951][T11671] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 978.849245][T11671] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.849279][T11671] usb 7-1: config 0 has no interfaces? [ 978.849316][T11671] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 978.849344][T11671] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.131443][T11671] usb 7-1: config 0 descriptor?? [ 980.066341][ T6389] usb 7-1: USB disconnect, device number 11 [ 982.196451][ T8486] IPVS: stop unused estimator thread 0... [ 982.599523][T13813] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 982.673948][T13813] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 982.733302][T13442] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 982.793433][T13442] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 982.923275][T13442] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 983.051594][T13442] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 983.360588][T13847] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 983.360623][T13847] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 983.360665][T13847] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 983.392880][ T6389] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 983.579636][ T6389] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 983.579673][ T6389] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 983.579710][ T6389] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 983.579736][ T6389] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 983.579782][ T6389] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 983.579810][ T6389] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.661131][ T6389] usb 9-1: config 0 descriptor?? [ 984.268917][ T6389] hdpvr 9-1:0.0: unexpected answer of status request, len -71 [ 984.268947][ T6389] hdpvr 9-1:0.0: device init failed [ 984.269036][ T6389] hdpvr 9-1:0.0: probe with driver hdpvr failed with error -12 [ 984.323081][ T6389] usb 9-1: USB disconnect, device number 13 [ 984.410192][T13442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 984.458730][T13442] 8021q: adding VLAN 0 to HW filter on device team0 [ 984.487714][T12793] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.489971][T12793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.513483][T13835] "syz.7.2375" (13835) uses obsolete ecb(arc4) skcipher [ 984.549148][T12798] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.554143][T12798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.668635][ T31] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 984.835946][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.835978][ T31] usb 7-1: config 0 has no interfaces? [ 984.836013][ T31] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 984.836039][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.901653][ T31] usb 7-1: config 0 descriptor?? [ 985.375551][T13854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.376354][T13854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.382097][T11976] usb 7-1: USB disconnect, device number 12 [ 985.604123][T13442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.772729][T11976] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 986.943256][T11976] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 986.943320][T11976] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 986.943353][T11976] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 986.943382][T11976] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 986.943412][T11976] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 986.944715][T11976] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 986.944775][T11976] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 986.944814][T11976] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 986.944843][T11976] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 986.944884][T11976] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 986.946070][T11976] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 986.946127][T11976] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 986.946159][T11976] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 986.946189][T11976] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 986.946219][T11976] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 986.949638][T11976] usb 9-1: string descriptor 0 read error: -22 [ 986.949829][T11976] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 986.949857][T11976] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.167672][T11976] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 987.385878][ T6389] usb 9-1: USB disconnect, device number 14 [ 987.728388][T13442] veth0_vlan: entered promiscuous mode [ 987.764585][T13442] veth1_vlan: entered promiscuous mode [ 987.828802][ T37] kauditd_printk_skb: 25 callbacks suppressed [ 987.828819][ T37] audit: type=1326 audit(1769360020.198:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba21cacb9 code=0x7ffc0000 [ 987.828855][ T37] audit: type=1326 audit(1769360020.198:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba21cacb9 code=0x7ffc0000 [ 987.829311][ T37] audit: type=1326 audit(1769360020.198:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba21cacb9 code=0x7ffc0000 [ 987.840316][ T37] audit: type=1326 audit(1769360020.198:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5ba21cacb9 code=0x7ffc0000 [ 987.840497][ T37] audit: type=1326 audit(1769360020.208:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba21cacb9 code=0x7ffc0000 [ 987.880409][ T37] audit: type=1326 audit(1769360020.228:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba21cacb9 code=0x7ffc0000 [ 987.880471][ T37] audit: type=1326 audit(1769360020.248:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba21cacb9 code=0x7ffc0000 [ 987.880531][ T37] audit: type=1326 audit(1769360020.248:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba21cacb9 code=0x7ffc0000 [ 987.880579][ T37] audit: type=1326 audit(1769360020.248:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f5ba21cacb9 code=0x7ffc0000 [ 987.880628][ T37] audit: type=1326 audit(1769360020.248:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13903 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba21cacb9 code=0x7ffc0000 [ 988.081605][T13442] veth0_macvtap: entered promiscuous mode [ 988.096798][T13442] veth1_macvtap: entered promiscuous mode [ 988.154414][T13442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 988.177165][T13442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 988.192066][T11976] kernel write not supported for file bpf-prog (pid: 11976 comm: kworker/0:3) [ 988.205748][T11976] kernel write not supported for file bpf-prog (pid: 11976 comm: kworker/0:3) [ 988.291717][ T146] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.311826][ T146] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.325730][ T146] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.348882][ T146] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.706183][T13929] ip6gre1: entered allmulticast mode [ 989.915418][ T2355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.915442][ T2355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.248257][ T1469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.248283][ T1469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.398792][T13935] Dead loop on virtual device ip6_vti0, fix it urgently! [ 990.493430][T12086] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 990.543538][ T6389] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 990.655953][T12086] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 990.656021][T12086] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 990.656043][T12086] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 990.656064][T12086] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 990.656084][T12086] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 990.674329][T12086] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 990.674395][T12086] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 990.674489][T12086] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 990.674577][T12086] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 990.674653][T12086] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 990.681274][T12086] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 990.681414][T12086] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 990.681473][T12086] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 990.681504][T12086] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 990.681581][T12086] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 990.705123][T12086] usb 7-1: string descriptor 0 read error: -22 [ 990.705312][T12086] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 990.705342][T12086] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.705951][ T6389] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.705978][ T6389] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 990.708484][ T6389] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 990.708516][ T6389] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 990.708540][ T6389] usb 9-1: SerialNumber: syz [ 991.034368][T12086] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 991.124394][ T6389] usb 9-1: 0:2 : does not exist [ 991.149473][T12086] usb 7-1: USB disconnect, device number 13 [ 991.256945][ T6389] usb 9-1: USB disconnect, device number 15 [ 991.385603][T13767] udevd[13767]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 991.857373][T12086] kernel write not supported for file bpf-prog (pid: 12086 comm: kworker/0:6) [ 992.142076][T13968] cgroup2: Unexpected value for 'nsdelegate' [ 992.205741][T13968] binder: Bad value for 'max' [ 992.712909][T13979] FAULT_INJECTION: forcing a failure. [ 992.712909][T13979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 992.712960][T13979] CPU: 0 UID: 0 PID: 13979 Comm: syz.6.2409 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 992.712994][T13979] Tainted: [L]=SOFTLOCKUP [ 992.713004][T13979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 992.713019][T13979] Call Trace: [ 992.713029][T13979] [ 992.713041][T13979] dump_stack_lvl+0xe8/0x150 [ 992.713081][T13979] should_fail_ex+0x46b/0x600 [ 992.713117][T13979] _copy_from_iter+0x1d3/0x1670 [ 992.713160][T13979] ? kmalloc_reserve+0xbd/0x290 [ 992.713198][T13979] ? rcu_is_watching+0x15/0xb0 [ 992.713222][T13979] ? kmalloc_reserve+0xbd/0x290 [ 992.713263][T13979] ? __pfx__copy_from_iter+0x10/0x10 [ 992.713297][T13979] ? __build_skb_around+0x22d/0x3c0 [ 992.713336][T13979] ? __alloc_skb+0x193/0x390 [ 992.713373][T13979] ? netlink_sendmsg+0x650/0xb40 [ 992.713400][T13979] ? skb_put+0x11b/0x210 [ 992.713426][T13979] netlink_sendmsg+0x6c0/0xb40 [ 992.713464][T13979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 992.713495][T13979] ? is_bpf_text_address+0x292/0x2b0 [ 992.713529][T13979] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 992.713561][T13979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 992.713591][T13979] __sock_sendmsg+0x21c/0x270 [ 992.713626][T13979] ____sys_sendmsg+0x4e1/0x800 [ 992.713660][T13979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 992.713697][T13979] ? import_iovec+0x73/0xa0 [ 992.713736][T13979] ___sys_sendmsg+0x2a5/0x360 [ 992.713768][T13979] ? __lock_acquire+0x6b5/0x2cf0 [ 992.713806][T13979] ? __pfx____sys_sendmsg+0x10/0x10 [ 992.713870][T13979] ? __fget_files+0x2a/0x420 [ 992.713897][T13979] ? __fget_files+0x3a6/0x420 [ 992.713933][T13979] __x64_sys_sendmsg+0x1c3/0x2a0 [ 992.713962][T13979] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 992.713999][T13979] ? __pfx_ksys_write+0x10/0x10 [ 992.714044][T13979] do_syscall_64+0xe2/0xf80 [ 992.714078][T13979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.714103][T13979] ? trace_irq_disable+0x37/0x100 [ 992.714128][T13979] ? clear_bhb_loop+0x60/0xb0 [ 992.714165][T13979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.714190][T13979] RIP: 0033:0x7f5ba21cacb9 [ 992.714212][T13979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.714234][T13979] RSP: 002b:00007f5ba0426028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 992.714260][T13979] RAX: ffffffffffffffda RBX: 00007f5ba2445fa0 RCX: 00007f5ba21cacb9 [ 992.714278][T13979] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 992.714295][T13979] RBP: 00007f5ba0426090 R08: 0000000000000000 R09: 0000000000000000 [ 992.714312][T13979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.714327][T13979] R13: 00007f5ba2446038 R14: 00007f5ba2445fa0 R15: 00007ffc8137a538 [ 992.714364][T13979] [ 994.136688][T13989] fuse: Bad value for 'fd' [ 994.138473][T13989] fuse: Bad value for 'fd' [ 995.861303][ T5843] ------------[ cut here ]------------ [ 995.861318][ T5843] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 995.861338][ T5843] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x3b5/0x5d0, CPU#1: kworker/1:3/5843 [ 995.861373][ T5843] Modules linked in: [ 995.861391][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 995.861415][ T5843] Tainted: [L]=SOFTLOCKUP [ 995.861422][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 995.861434][ T5843] Workqueue: events drm_fb_helper_damage_work [ 995.861455][ T5843] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 995.861473][ T5843] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 4f 93 e9 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 995.861488][ T5843] RSP: 0018:ffffc90004eef860 EFLAGS: 00010246 [ 995.861502][ T5843] RAX: 1ffff110283e3c00 RBX: ffffffff8f322e30 RCX: 0000000000000000 [ 995.861516][ T5843] RDX: ffffffff8b7eace0 RSI: ffffffff8b806a40 RDI: ffffffff8f322e30 [ 995.861529][ T5843] RBP: ffffc90004eef948 R08: 0000000000000000 R09: 0000000000000000 [ 995.861541][ T5843] R10: dffffc0000000000 R11: fffffbfff1e4f72f R12: ffffffff8b806a40 [ 995.861554][ T5843] R13: ffff888141f1e000 R14: 1ffff920009ddf10 R15: ffffffff8b7eace0 [ 995.861568][ T5843] FS: 0000000000000000(0000) GS:ffff8881268fa000(0000) knlGS:0000000000000000 [ 995.861583][ T5843] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 995.861595][ T5843] CR2: 0000000000000000 CR3: 000000003d79c000 CR4: 00000000003526f0 [ 995.861610][ T5843] Call Trace: [ 995.861617][ T5843] [ 995.861628][ T5843] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 995.861646][ T5843] ? rt_spin_unlock+0x14f/0x200 [ 995.861666][ T5843] ? __pfx_autoremove_wake_function+0x10/0x10 [ 995.861690][ T5843] ? rt_spin_unlock+0x160/0x200 [ 995.861711][ T5843] ? drm_vblank_get+0x147/0x260 [ 995.861730][ T5843] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 995.861758][ T5843] drm_fb_helper_damage_work+0x131/0x6f0 [ 995.861779][ T5843] ? process_scheduled_works+0xa0f/0x17a0 [ 995.861803][ T5843] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 995.861826][ T5843] ? process_scheduled_works+0xa0f/0x17a0 [ 995.861845][ T5843] ? process_scheduled_works+0xa0f/0x17a0 [ 995.861866][ T5843] process_scheduled_works+0xaec/0x17a0 [ 995.861915][ T5843] ? __pfx_process_scheduled_works+0x10/0x10 [ 995.861934][ T5843] ? do_raw_spin_lock+0x12b/0x2f0 [ 995.861961][ T5843] ? assign_work+0x3d3/0x440 [ 995.861985][ T5843] worker_thread+0x89f/0xd90 [ 995.862025][ T5843] kthread+0x726/0x8b0 [ 995.862053][ T5843] ? __pfx_worker_thread+0x10/0x10 [ 995.862074][ T5843] ? __pfx_kthread+0x10/0x10 [ 995.862096][ T5843] ? rt_spin_unlock+0x14f/0x200 [ 995.862139][ T5843] ? rt_spin_unlock+0x160/0x200 [ 995.862159][ T5843] ? __pfx_kthread+0x10/0x10 [ 995.862184][ T5843] ret_from_fork+0x51b/0xa40 [ 995.862207][ T5843] ? __pfx_ret_from_fork+0x10/0x10 [ 995.862226][ T5843] ? __switch_to+0xc82/0x1410 [ 995.862246][ T5843] ? __pfx_kthread+0x10/0x10 [ 995.862272][ T5843] ret_from_fork_asm+0x1a/0x30 [ 995.862310][ T5843] [ 995.862324][ T5843] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 995.862338][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 995.862361][ T5843] Tainted: [L]=SOFTLOCKUP [ 995.862368][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 995.862379][ T5843] Workqueue: events drm_fb_helper_damage_work [ 995.862397][ T5843] Call Trace: [ 995.862404][ T5843] [ 995.862411][ T5843] vpanic+0x1e0/0x670 [ 995.862438][ T5843] panic+0xc5/0xd0 [ 995.862461][ T5843] ? __pfx_panic+0x10/0x10 [ 995.862492][ T5843] ? ret_from_fork_asm+0x1a/0x30 [ 995.862571][ T5843] __warn+0x315/0x4a0 [ 995.862605][ T5843] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 995.862624][ T5843] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 995.862642][ T5843] __report_bug+0x29a/0x540 [ 995.862671][ T5843] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 995.862689][ T5843] ? __pfx___report_bug+0x10/0x10 [ 995.862727][ T5843] report_bug_entry+0x19a/0x290 [ 995.862750][ T5843] ? drm_wait_one_vblank+0x5a2/0x5d0 [ 995.862766][ T5843] ? drm_wait_one_vblank+0x5a7/0x5d0 [ 995.862782][ T5843] handle_bug+0xca/0x200 [ 995.862799][ T5843] exc_invalid_op+0x1a/0x50 [ 995.862815][ T5843] asm_exc_invalid_op+0x1a/0x20 [ 995.862832][ T5843] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 995.862850][ T5843] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 4f 93 e9 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 995.862865][ T5843] RSP: 0018:ffffc90004eef860 EFLAGS: 00010246 [ 995.862880][ T5843] RAX: 1ffff110283e3c00 RBX: ffffffff8f322e30 RCX: 0000000000000000 [ 995.862893][ T5843] RDX: ffffffff8b7eace0 RSI: ffffffff8b806a40 RDI: ffffffff8f322e30 [ 995.862912][ T5843] RBP: ffffc90004eef948 R08: 0000000000000000 R09: 0000000000000000 [ 995.862924][ T5843] R10: dffffc0000000000 R11: fffffbfff1e4f72f R12: ffffffff8b806a40 [ 995.862937][ T5843] R13: ffff888141f1e000 R14: 1ffff920009ddf10 R15: ffffffff8b7eace0 [ 995.862972][ T5843] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 995.862989][ T5843] ? rt_spin_unlock+0x14f/0x200 [ 995.863008][ T5843] ? __pfx_autoremove_wake_function+0x10/0x10 [ 995.863032][ T5843] ? rt_spin_unlock+0x160/0x200 [ 995.863053][ T5843] ? drm_vblank_get+0x147/0x260 [ 995.863072][ T5843] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 995.863100][ T5843] drm_fb_helper_damage_work+0x131/0x6f0 [ 995.863121][ T5843] ? process_scheduled_works+0xa0f/0x17a0 [ 995.863144][ T5843] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 995.863168][ T5843] ? process_scheduled_works+0xa0f/0x17a0 [ 995.863188][ T5843] ? process_scheduled_works+0xa0f/0x17a0 [ 995.863209][ T5843] process_scheduled_works+0xaec/0x17a0 [ 995.863251][ T5843] ? __pfx_process_scheduled_works+0x10/0x10 [ 995.863270][ T5843] ? do_raw_spin_lock+0x12b/0x2f0 [ 995.863295][ T5843] ? assign_work+0x3d3/0x440 [ 995.863319][ T5843] worker_thread+0x89f/0xd90 [ 995.863359][ T5843] kthread+0x726/0x8b0 [ 995.863386][ T5843] ? __pfx_worker_thread+0x10/0x10 [ 995.863406][ T5843] ? __pfx_kthread+0x10/0x10 [ 995.863429][ T5843] ? rt_spin_unlock+0x14f/0x200 [ 995.863451][ T5843] ? rt_spin_unlock+0x160/0x200 [ 995.863468][ T5843] ? __pfx_kthread+0x10/0x10 [ 995.863493][ T5843] ret_from_fork+0x51b/0xa40 [ 995.863516][ T5843] ? __pfx_ret_from_fork+0x10/0x10 [ 995.863534][ T5843] ? __switch_to+0xc82/0x1410 [ 995.863553][ T5843] ? __pfx_kthread+0x10/0x10 [ 995.863580][ T5843] ret_from_fork_asm+0x1a/0x30 [ 995.863618][ T5843] [ 995.864234][ T5843] Kernel Offset: disabled