last executing test programs: 34m27.052004889s ago: executing program 32 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000008000000dd00000040"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 33m35.539747785s ago: executing program 33 (id=240): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 32m18.189633706s ago: executing program 34 (id=325): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r4}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 15m57.167472496s ago: executing program 35 (id=2156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fecbd680b650", 0x8}], 0x2}, 0x5) 15m56.145458809s ago: executing program 36 (id=2169): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbf9, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c001}, 0x80) 15m54.476964005s ago: executing program 37 (id=2196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="14002c800dcced729e8ff3e5dc542180657c08"], 0x30}, 0x1, 0x0, 0x0, 0x24004904}, 0xc0) 13m57.825629172s ago: executing program 9 (id=2684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x10080000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x3, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6f, 0xffff, 0x3ff, 0xebc9, 0xd, 0x9, 0x7, 0x5, 0x2f32}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c065}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 13m56.739597874s ago: executing program 9 (id=2696): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, 0x0, 0x80) 13m56.688261655s ago: executing program 9 (id=2697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x5c, 0x0, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4, 0xea0}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 13m55.52758277s ago: executing program 0 (id=2707): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={0x44, r5, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xd}, @device_b, @device_a, @initial, {0x8}}, 0x0, 0x0, 0x13, @val={0x10, 0x1, 0xc1}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x4000800) 13m55.301117578s ago: executing program 0 (id=2709): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xfff2}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x1a}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb0c0}]}}]}, 0xfffffffffffffded}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x7) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13m55.229777708s ago: executing program 9 (id=2711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 13m55.062266215s ago: executing program 2 (id=2712): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, &(0x7f00000005c0)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r1, r0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) syz_emit_ethernet(0x10c6, &(0x7f00000005c0)=ANY=[], 0x0) 13m54.977079484s ago: executing program 0 (id=2713): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r2, 0x5, 0x4, 0x27dfdbf9, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac01, 0xfac01, 0xfac00]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0xc06c0c4) 13m54.965889079s ago: executing program 8 (id=2714): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000016"], 0x14}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70004ff000008009e"], 0x44}}, 0x28000) 13m54.887780798s ago: executing program 9 (id=2715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0xf9, 0x2, 0x3, 0x1000, 0x9, 0x6}, {0x1, 0x0, 0x1, 0x6, 0xc}, 0x4, 0x4, 0x1a9a}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0x6, 0xb}, {0x5, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x44084) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 13m54.844763409s ago: executing program 2 (id=2716): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x80) 13m54.718646393s ago: executing program 2 (id=2717): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x410) 13m54.718424148s ago: executing program 8 (id=2718): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x3, {0x1}, {0x0, 0xf0, 0x4}, 0xfd, 0xfe}, {0x2, 0x2, {0x1, 0x0, 0x1}, {}, 0x1}, {0x4, 0x2, {0x2, 0xff, 0x4}, {0x0, 0x0, 0x3}, 0xff, 0xfe}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 13m54.517687826s ago: executing program 0 (id=2719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050004000000fcdbdf272e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000202020279015f"], 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x8060044) 13m54.346904146s ago: executing program 0 (id=2720): ioctl(0xffffffffffffffff, 0x8b32, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2e6, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x2000000002}}, {{@in=@local, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x4, 0x1, 0x6a, 0xf800000, 0x0, 0x80000000}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 13m54.332599909s ago: executing program 8 (id=2721): unshare(0x22020400) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xa, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a0060", @ANYBLOB='\x00'/83], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000) 13m54.287655582s ago: executing program 2 (id=2722): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xfff2}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x1a}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb0c0}]}}]}, 0xfffffffffffffded}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x7) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13m54.198218758s ago: executing program 0 (id=2723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x478, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x40ff, 0x2, 0x3, 0x4, 0x0, {0x4, 0x1, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x40, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x8, 0x2, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7fd, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x7, 0x7, 0x8, 0x8001, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0xffff, 0x2, 0x5, 0x8009, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x100002, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x840, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x8, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x400002, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x0, 0x6, 0x2, 0x7, 0x2, 0x4, 0x7a0, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x6, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x8001, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0x50001, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x2001, 0x2006, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0xfffffffe, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x0, 0xa, 0x8, 0x5, 0x4, 0x9, 0xfffc, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 13m54.014163732s ago: executing program 8 (id=2724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 13m53.752759782s ago: executing program 8 (id=2725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, r1, 0x105, 0xffffffff, 0xb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac13, 0xfac02]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 13m53.57196373s ago: executing program 2 (id=2726): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x80) 13m53.427207723s ago: executing program 9 (id=2727): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0xffffffffffffffff, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 13m53.419798283s ago: executing program 8 (id=2728): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r2, 0x5, 0x4, 0x27dfdbf9, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac01, 0xfac09, 0xfac00]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0xc06c0c4) 13m53.3482665s ago: executing program 2 (id=2729): socket(0x2b, 0x80801, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180), 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) listen(r4, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 13m39.087639639s ago: executing program 38 (id=2723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x478, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x40ff, 0x2, 0x3, 0x4, 0x0, {0x4, 0x1, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x40, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x8, 0x2, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7fd, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x7, 0x7, 0x8, 0x8001, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0xffff, 0x2, 0x5, 0x8009, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x100002, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x840, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x8, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x400002, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x0, 0x6, 0x2, 0x7, 0x2, 0x4, 0x7a0, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x6, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x8001, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0x50001, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x2001, 0x2006, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0xfffffffe, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x0, 0xa, 0x8, 0x5, 0x4, 0x9, 0xfffc, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 13m38.092211311s ago: executing program 39 (id=2727): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0xffffffffffffffff, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 13m38.028744493s ago: executing program 40 (id=2728): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r2, 0x5, 0x4, 0x27dfdbf9, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac01, 0xfac09, 0xfac00]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0xc06c0c4) 13m37.941718888s ago: executing program 41 (id=2729): socket(0x2b, 0x80801, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180), 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) listen(r4, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 4m2.595698226s ago: executing program 5 (id=6551): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (fail_nth: 1) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r4, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 4m1.358831554s ago: executing program 5 (id=6556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000003d00), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='syz_tun\x00', 0x10) listen(r2, 0x5) (async) listen(r2, 0x5) syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000080)=0x5, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000080)=0x5, 0x4) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000000)={0x8248851b466bc885, 0x16, 0x6, "da441b5bdf3e"}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000000)={0x8248851b466bc885, 0x16, 0x6, "da441b5bdf3e"}, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000003d40)={0x0, 0x9, 0x1, {0xa, @pix_mp={0x80000000, 0x3, 0x3432564e, 0x8, 0x5, [{0x6, 0x4}, {0x800, 0x10001}, {0x9, 0xd}, {0x10000, 0x2}, {0x3, 0x1}, {0x5, 0x2}, {0x15}, {0x9, 0x5}], 0x1, 0x8, 0x6, 0x2, 0x6}}, 0x90}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x60}}, 0x0) 3m55.987396285s ago: executing program 5 (id=6586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) 3m54.382653302s ago: executing program 5 (id=6602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 3m54.281932518s ago: executing program 5 (id=6605): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x10000, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 3m53.233571859s ago: executing program 5 (id=6610): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000540000060100000000000000"], 0x1c}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x10000, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r4, r5, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r2) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000180)={0x198, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$VIDIOC_S_PRIORITY(r7, 0x40045644, 0x2) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 3m37.974262968s ago: executing program 42 (id=6610): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000540000060100000000000000"], 0x1c}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x10000, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r4, r5, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r2) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000180)={0x198, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$VIDIOC_S_PRIORITY(r7, 0x40045644, 0x2) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 31.658822834s ago: executing program 7 (id=7652): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000810000"], 0x14) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r5}, 0x3f) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0) 30.877601447s ago: executing program 1 (id=7659): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x0) 29.184721735s ago: executing program 1 (id=7661): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0) 29.053301005s ago: executing program 7 (id=7665): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="b106d8e6da1a56dbbc6559cba83ab4188b858542ce191eb1300fe05f2a4a515ea4", 0x21}], 0x1}}], 0x1, 0xc044) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 28.129110828s ago: executing program 7 (id=7670): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1090a4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000640)={0x1f, 0x4, 0x4}) 26.202999139s ago: executing program 1 (id=7671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0xfffffefd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x9, 0x7860, 0x7}, 0x25}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b40)=ANY=[@ANYBLOB="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"], 0x2b0}}, 0x40000) ioprio_set$pid(0x2, 0x0, 0x6000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@delchain={0x0, 0x65, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0xe, 0xfff1}, {0x6, 0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x2a, &(0x7f00000013c0)=ANY=[@ANYRES64=r7, @ANYBLOB, @ANYRES64=r0, @ANYRESDEC, @ANYBLOB="0000000000000000b705000052b6956e44104f4579a53427e5ac0800000085000000a5000000950000000000000018fd00000200000000000000000000008500000064000000b7080000000000007b8af8ff000000b860c874a340ff59007b8af0ff00000000bfa10000000000000701", @ANYRES8=r3, @ANYRES64=r7, @ANYRES16], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x12}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) acct(&(0x7f00000001c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xfffffffd}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000000100000"], 0x1c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000000)='4', 0x1}], 0x2) syz_clone(0x80280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 25.477021477s ago: executing program 7 (id=7674): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="b106d8e6da1a56dbbc6559cba83ab4188b858542ce191e", 0x17}], 0x1}}], 0x1, 0xc044) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 24.904339277s ago: executing program 7 (id=7678): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) 23.943366295s ago: executing program 7 (id=7682): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0) 23.823087388s ago: executing program 4 (id=7684): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1090a4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000640)={0x1f, 0x4, 0x4}) 23.641394141s ago: executing program 3 (id=7687): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000810000"], 0x14) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0) 23.544460641s ago: executing program 4 (id=7688): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="b106d8e6da1a56dbbc6559cba83ab4188b858542ce191e", 0x17}], 0x1}}], 0x1, 0xc044) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 23.413965192s ago: executing program 4 (id=7690): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 21.982579732s ago: executing program 1 (id=7691): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r3, 0x0, 0xee01) fchown(r3, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50) openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x6400, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0d00000000000200040000000300000041010000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00^\x00'/27], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x42, r5}, 0x38) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg$can_raw(r2, &(0x7f00000004c0)={&(0x7f0000000140)=@xdp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000380)=""/201, 0xc9}, {&(0x7f0000000040)=""/41, 0x29}], 0x3, &(0x7f0000000480)=""/14, 0xe}, 0x10000) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004200)=@newtfilter={0x90, 0x2c, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0xf}, {0xffff}, {0xffff, 0xffe6}}, [@TCA_CHAIN={0x8, 0xb, 0x3ff}, @filter_kind_options=@f_cgroup={{0xb}, {0x58, 0x2, [@TCA_CGROUP_ACT={0x54, 0x1, [@m_connmark={0x50, 0x1b, 0x0, 0x0, {{0xd}, {0x4}, {0x1d, 0x6, "56060cbb646e48f64cadc0ebc7dc8c74697ac962eb3a75dad7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000003140)=""/4099, 0x1003}], 0x2}, 0x40000020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0xffffffe4) 20.433934644s ago: executing program 4 (id=7692): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="b106d8e6da1a56dbbc6559cba83ab4188b858542ce191eb1300fe05f2a4a515ea4", 0x21}], 0x1}}], 0x1, 0xc044) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 20.419991224s ago: executing program 6 (id=7693): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) 19.968576447s ago: executing program 1 (id=7694): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) r2 = request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0x0) unshare(0x20040600) sendfile(r0, r0, &(0x7f0000000380)=0x5, 0xb49) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000400)=[{&(0x7f0000007280)=""/102400, 0x19000}], 0x1, 0xeffffffd, 0x7) syz_clone3(&(0x7f00000004c0)={0x201080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r3], 0x1}, 0x58) keyctl$read(0xb, r2, &(0x7f0000000840)=""/231, 0xe7) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x21, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}}) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x5, {0x2, 0x4e22, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d700000010"], 0x10b8}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) prlimit64(0x0, 0xe, 0x0, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000ffdbdf25260000000c00018008000100", @ANYRES64=r10], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4000080) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x5, 0x1000, 0x3, @mcast2, @dev={0xfe, 0x80, '\x00', 0xe}, 0x8, 0x1, 0x8000, 0x7fff}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x88, r9, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0xfffffffffffffeca}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xc2}, @ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x0, 0x3, 0x68}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 19.966859683s ago: executing program 6 (id=7695): r0 = io_uring_setup(0x369f, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xfefffffd}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x3235, &(0x7f0000000080)={0x0, 0x2bf0, 0x20, 0x3, 0x12a}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg$can_raw(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1}, 0x1021) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4000, 0x1, 0xe, 0x81}, 0x10) r6 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r9, 0x0, 0x0, 0x0, 0x12001, 0x1}) io_uring_enter(r6, 0x5d62, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) close(r0) 19.966464999s ago: executing program 3 (id=7696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 19.887531513s ago: executing program 4 (id=7697): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r3, 0x0, 0xee01) fchown(r3, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50) openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x6400, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0d00000000000200040000000300000041010000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00^\x00'/27], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x42, r5}, 0x38) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0xffffffe4) 18.845703774s ago: executing program 6 (id=7698): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 18.687271333s ago: executing program 6 (id=7699): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1090a4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000640)={0x1f, 0x4, 0x4}) 17.967724852s ago: executing program 3 (id=7700): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 17.937295627s ago: executing program 4 (id=7701): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14d556a62676"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xe2bf268aaf6847d0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 17.791212642s ago: executing program 3 (id=7702): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 17.715163556s ago: executing program 3 (id=7703): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="b106d8e6da1a56dbbc6559cba83ab4188b858542ce191eb1300fe05f2a4a515ea4", 0x21}], 0x1}}], 0x1, 0xc044) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 17.631509508s ago: executing program 3 (id=7704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x200000, 0x200003, 0x2, 0x0, 0x9}) r4 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x1) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0xf5ff, 0x0}, &(0x7f00000000c0)="a2b2536b0513", 0x0, 0x0, 0x6, 0x0, 0x0}) 17.47592305s ago: executing program 1 (id=7705): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000810000"], 0x14) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0) 17.119095304s ago: executing program 6 (id=7706): openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x114, 0x20, 0x1, 0x3, 0x25dfdbfb, "", [@nested={0x103, 0x117, 0x0, 0x1, [@typed={0xc, 0xad, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8", @typed={0x8, 0xeb, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000480)=@v3={0x3000000, [{0x9ba, 0x6}, {0x7, 0x5}], r2}, 0x18, 0x1) sendmmsg$unix(r0, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, 0xee01}}}], 0x59, 0x80c0}}], 0x2, 0x41070) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 16.75680778s ago: executing program 6 (id=7707): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) 8.23211388s ago: executing program 43 (id=7682): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0) 2.566141126s ago: executing program 44 (id=7701): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14d556a62676"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xe2bf268aaf6847d0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 913.340501ms ago: executing program 45 (id=7707): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) 434.757194ms ago: executing program 46 (id=7704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x200000, 0x200003, 0x2, 0x0, 0x9}) r4 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x1) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0xf5ff, 0x0}, &(0x7f00000000c0)="a2b2536b0513", 0x0, 0x0, 0x6, 0x0, 0x0}) 0s ago: executing program 47 (id=7705): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000810000"], 0x14) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0) kernel console output (not intermixed with test programs): usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2160.016043][ T6003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2160.016063][ T6003] usb 2-1: Product: syz [ 2160.016077][ T6003] usb 2-1: Manufacturer: syz [ 2160.016091][ T6003] usb 2-1: SerialNumber: syz [ 2160.028402][ T6003] usb 2-1: config 0 descriptor?? [ 2160.035352][ T6003] smsc75xx v1.0.0 [ 2161.114949][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.115023][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.726035][ T6003] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2161.726066][ T6003] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2161.726084][ T6003] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 2161.728443][ T6003] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 2161.794360][ T6003] usb 2-1: USB disconnect, device number 18 [ 2161.832068][T30346] FAULT_INJECTION: forcing a failure. [ 2161.832068][T30346] name failslab, interval 1, probability 0, space 0, times 0 [ 2161.832103][T30346] CPU: 1 UID: 0 PID: 30346 Comm: syz.7.7122 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2161.832128][T30346] Tainted: [L]=SOFTLOCKUP [ 2161.832135][T30346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2161.832147][T30346] Call Trace: [ 2161.832155][T30346] [ 2161.832163][T30346] dump_stack_lvl+0xe8/0x150 [ 2161.832191][T30346] should_fail_ex+0x46c/0x600 [ 2161.832403][T30346] should_failslab+0xa8/0x100 [ 2161.832424][T30346] __kmalloc_noprof+0xe0/0x7e0 [ 2161.832465][T30346] ? tomoyo_encode+0x28b/0x550 [ 2161.832491][T30346] tomoyo_encode+0x28b/0x550 [ 2161.832513][T30346] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2161.832533][T30346] ? tomoyo_domain+0xd9/0x130 [ 2161.832556][T30346] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2161.832581][T30346] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2161.832608][T30346] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2161.832631][T30346] ? __lock_acquire+0x6b6/0x2cf0 [ 2161.832659][T30346] ? do_raw_spin_lock+0x121/0x290 [ 2161.832712][T30346] ? __fget_files+0x2a/0x420 [ 2161.832736][T30346] ? __fget_files+0x2a/0x420 [ 2161.832755][T30346] ? __fget_files+0x3a6/0x420 [ 2161.832774][T30346] ? __fget_files+0x2a/0x420 [ 2161.832797][T30346] security_file_ioctl+0xcb/0x2d0 [ 2161.832827][T30346] __se_sys_ioctl+0x47/0x170 [ 2161.832856][T30346] do_syscall_64+0xec/0xf80 [ 2161.832877][T30346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2161.832894][T30346] ? trace_irq_disable+0x37/0x100 [ 2161.832915][T30346] ? clear_bhb_loop+0x60/0xb0 [ 2161.832938][T30346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2161.832957][T30346] RIP: 0033:0x7f9b87c8f749 [ 2161.832977][T30346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2161.832994][T30346] RSP: 002b:00007f9b85ef6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2161.833016][T30346] RAX: ffffffffffffffda RBX: 00007f9b87ee5fa0 RCX: 00007f9b87c8f749 [ 2161.833032][T30346] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2161.833045][T30346] RBP: 00007f9b85ef6090 R08: 0000000000000000 R09: 0000000000000000 [ 2161.833058][T30346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2161.833070][T30346] R13: 00007f9b87ee6038 R14: 00007f9b87ee5fa0 R15: 00007ffd909605e8 [ 2161.833103][T30346] [ 2161.833124][T30346] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2161.937682][T30321] udevd[30321]: setting mode of /dev/bus/usb/002/018 to 020664 failed: No such file or directory [ 2161.937934][T30321] udevd[30321]: setting owner of /dev/bus/usb/002/018 to uid=0, gid=0 failed: No such file or directory [ 2162.366581][ T6003] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2162.368332][T30362] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7126'. [ 2162.526297][ T6003] usb 2-1: Using ep0 maxpacket: 32 [ 2162.528831][ T6003] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2162.528857][ T6003] usb 2-1: config 0 has no interface number 0 [ 2162.532247][ T6003] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2162.532276][ T6003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2162.532295][ T6003] usb 2-1: Product: syz [ 2162.532310][ T6003] usb 2-1: Manufacturer: syz [ 2162.532324][ T6003] usb 2-1: SerialNumber: syz [ 2162.561299][ T924] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2162.586516][ T5871] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 2162.604991][ T6003] usb 2-1: config 0 descriptor?? [ 2162.627668][ T6003] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2162.627696][ T6003] usb 2-1: selecting invalid altsetting 1 [ 2162.627712][ T6003] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2162.633252][ T6003] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2162.633626][ T6003] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2162.633676][ T6003] usb 2-1: media controller created [ 2162.700469][ T6003] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2162.706299][ T924] usb 4-1: Using ep0 maxpacket: 32 [ 2162.715212][ T924] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2162.715237][ T924] usb 4-1: config 0 has no interface number 0 [ 2162.751363][ T924] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2162.751392][ T924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2162.751412][ T924] usb 4-1: Product: syz [ 2162.751426][ T924] usb 4-1: Manufacturer: syz [ 2162.751440][ T924] usb 4-1: SerialNumber: syz [ 2162.754219][ T5871] usb 8-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=d0.40 [ 2162.754237][ T5871] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2162.754247][ T5871] usb 8-1: Product: syz [ 2162.754255][ T5871] usb 8-1: Manufacturer: syz [ 2162.754263][ T5871] usb 8-1: SerialNumber: syz [ 2162.790331][ T924] usb 4-1: config 0 descriptor?? [ 2162.792890][ T37] audit: type=1326 audit(2162.532:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30379 comm="syz.4.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4dd3f749 code=0x7ffc0000 [ 2162.793958][ T37] audit: type=1326 audit(2162.532:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30379 comm="syz.4.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4dd3f749 code=0x7ffc0000 [ 2162.795982][ T37] audit: type=1326 audit(2162.532:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30379 comm="syz.4.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0e4dd3f749 code=0x7ffc0000 [ 2162.812995][ T5871] usb 8-1: config 0 descriptor?? [ 2162.818113][ T37] audit: type=1326 audit(2162.542:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30379 comm="syz.4.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4dd3f749 code=0x7ffc0000 [ 2162.824399][ T37] audit: type=1326 audit(2162.562:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30379 comm="syz.4.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4dd3f749 code=0x7ffc0000 [ 2162.824449][ T37] audit: type=1326 audit(2162.562:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30379 comm="syz.4.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f0e4dd3f749 code=0x7ffc0000 [ 2162.840920][ T924] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2162.840948][ T924] usb 4-1: selecting invalid altsetting 1 [ 2162.840964][ T924] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2162.850793][ T5871] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input27 [ 2163.012010][ T37] audit: type=1326 audit(2162.752:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30379 comm="syz.4.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f0e4dd3f749 code=0x7ffc0000 [ 2163.016957][ T37] audit: type=1326 audit(2162.752:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30379 comm="syz.4.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4dd3f749 code=0x7ffc0000 [ 2163.017909][ T37] audit: type=1326 audit(2162.762:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30379 comm="syz.4.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4dd3f749 code=0x7ffc0000 [ 2163.064266][ T924] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2163.085997][ T924] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2163.086293][ T924] usb 4-1: media controller created [ 2163.087167][ T5155] bcm5974 8-1:0.0: could not read from device [ 2163.163415][ T37] audit: type=1326 audit(2162.902:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30379 comm="syz.4.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e4dd3f749 code=0x7ffc0000 [ 2163.185725][ T924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2163.189088][ T5871] usb 8-1: USB disconnect, device number 8 [ 2163.352474][ T6003] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2163.352531][ T6003] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2163.387256][ T6003] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2163.565317][T30385] FAULT_INJECTION: forcing a failure. [ 2163.565317][T30385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2163.565347][T30385] CPU: 0 UID: 0 PID: 30385 Comm: syz.6.7134 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2163.565362][T30385] Tainted: [L]=SOFTLOCKUP [ 2163.565366][T30385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2163.565373][T30385] Call Trace: [ 2163.565377][T30385] [ 2163.565385][T30385] dump_stack_lvl+0xe8/0x150 [ 2163.565416][T30385] should_fail_ex+0x46c/0x600 [ 2163.565444][T30385] strncpy_from_user+0x36/0x2c0 [ 2163.565467][T30385] getname_flags+0xf3/0x540 [ 2163.565487][T30385] __x64_sys_unlinkat+0xac/0xf0 [ 2163.565513][T30385] do_syscall_64+0xec/0xf80 [ 2163.565529][T30385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2163.565546][T30385] ? trace_irq_disable+0x37/0x100 [ 2163.565565][T30385] ? clear_bhb_loop+0x60/0xb0 [ 2163.565587][T30385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2163.565606][T30385] RIP: 0033:0x7f27dbabf749 [ 2163.565624][T30385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2163.565639][T30385] RSP: 002b:00007f27d9d26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 2163.565656][T30385] RAX: ffffffffffffffda RBX: 00007f27dbd15fa0 RCX: 00007f27dbabf749 [ 2163.565670][T30385] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 2163.565683][T30385] RBP: 00007f27d9d26090 R08: 0000000000000000 R09: 0000000000000000 [ 2163.565694][T30385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2163.565704][T30385] R13: 00007f27dbd16038 R14: 00007f27dbd15fa0 R15: 00007ffec6da97f8 [ 2163.565731][T30385] [ 2163.649912][ T924] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2163.649965][ T924] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2163.650413][ T924] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2163.763110][ T6003] usb 2-1: USB disconnect, device number 19 [ 2163.875414][ T924] usb 4-1: USB disconnect, device number 74 [ 2163.909307][T30321] udevd[30321]: setting owner of /dev/bus/usb/004/074 to uid=0, gid=0 failed: No such file or directory [ 2164.031227][T30393] Unsupported ieee802154 address type: 0 [ 2164.200804][T30404] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7141'. [ 2164.255097][T30408] FAULT_INJECTION: forcing a failure. [ 2164.255097][T30408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2164.255132][T30408] CPU: 1 UID: 0 PID: 30408 Comm: syz.6.7144 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2164.255148][T30408] Tainted: [L]=SOFTLOCKUP [ 2164.255153][T30408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2164.255160][T30408] Call Trace: [ 2164.255166][T30408] [ 2164.255171][T30408] dump_stack_lvl+0xe8/0x150 [ 2164.255190][T30408] should_fail_ex+0x46c/0x600 [ 2164.255208][T30408] _copy_to_user+0x31/0xb0 [ 2164.255220][T30408] simple_read_from_buffer+0xe1/0x170 [ 2164.255233][T30408] proc_fail_nth_read+0x1b6/0x220 [ 2164.255250][T30408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2164.255267][T30408] ? rw_verify_area+0x2ac/0x4e0 [ 2164.255280][T30408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2164.255298][T30408] vfs_read+0x206/0xa30 [ 2164.255316][T30408] ? __pfx_vfs_read+0x10/0x10 [ 2164.255330][T30408] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2164.255342][T30408] ? lockdep_hardirqs_on+0x7b/0x110 [ 2164.255353][T30408] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2164.255363][T30408] ? mutex_lock_nested+0x154/0x1d0 [ 2164.255376][T30408] ? fdget_pos+0x253/0x320 [ 2164.255391][T30408] ksys_read+0x14b/0x260 [ 2164.255405][T30408] ? __pfx_ksys_read+0x10/0x10 [ 2164.255425][T30408] do_syscall_64+0xec/0xf80 [ 2164.255435][T30408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2164.255446][T30408] ? trace_irq_disable+0x37/0x100 [ 2164.255457][T30408] ? clear_bhb_loop+0x60/0xb0 [ 2164.255469][T30408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2164.255479][T30408] RIP: 0033:0x7f27dbabe15c [ 2164.255489][T30408] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2164.255501][T30408] RSP: 002b:00007f27d9d26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2164.255521][T30408] RAX: ffffffffffffffda RBX: 00007f27dbd15fa0 RCX: 00007f27dbabe15c [ 2164.255536][T30408] RDX: 000000000000000f RSI: 00007f27d9d260a0 RDI: 0000000000000005 [ 2164.255548][T30408] RBP: 00007f27d9d26090 R08: 0000000000000000 R09: 0000000000000000 [ 2164.255559][T30408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2164.255569][T30408] R13: 00007f27dbd16038 R14: 00007f27dbd15fa0 R15: 00007ffec6da97f8 [ 2164.255599][T30408] [ 2164.704372][T30427] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7148'. [ 2164.825917][T30431] FAULT_INJECTION: forcing a failure. [ 2164.825917][T30431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2164.825943][T30431] CPU: 0 UID: 0 PID: 30431 Comm: syz.3.7150 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2164.825959][T30431] Tainted: [L]=SOFTLOCKUP [ 2164.825963][T30431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2164.825970][T30431] Call Trace: [ 2164.825975][T30431] [ 2164.825980][T30431] dump_stack_lvl+0xe8/0x150 [ 2164.825999][T30431] should_fail_ex+0x46c/0x600 [ 2164.826017][T30431] _copy_to_user+0x31/0xb0 [ 2164.826030][T30431] simple_read_from_buffer+0xe1/0x170 [ 2164.826043][T30431] proc_fail_nth_read+0x1b6/0x220 [ 2164.826124][T30431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2164.826161][T30431] ? rw_verify_area+0x2ac/0x4e0 [ 2164.826184][T30431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2164.826210][T30431] vfs_read+0x206/0xa30 [ 2164.826266][T30431] ? __pfx_vfs_read+0x10/0x10 [ 2164.826293][T30431] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2164.826315][T30431] ? lockdep_hardirqs_on+0x7b/0x110 [ 2164.826332][T30431] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2164.826349][T30431] ? mutex_lock_nested+0x154/0x1d0 [ 2164.826371][T30431] ? fdget_pos+0x253/0x320 [ 2164.826398][T30431] ksys_read+0x14b/0x260 [ 2164.826423][T30431] ? __pfx_ksys_read+0x10/0x10 [ 2164.826445][T30431] ? fput+0xa0/0xd0 [ 2164.826476][T30431] do_syscall_64+0xec/0xf80 [ 2164.826496][T30431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2164.826515][T30431] ? trace_irq_disable+0x37/0x100 [ 2164.826535][T30431] ? clear_bhb_loop+0x60/0xb0 [ 2164.826559][T30431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2164.826579][T30431] RIP: 0033:0x7f89dd52e15c [ 2164.826598][T30431] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2164.826614][T30431] RSP: 002b:00007f89db78e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2164.826634][T30431] RAX: ffffffffffffffda RBX: 00007f89dd785fa0 RCX: 00007f89dd52e15c [ 2164.826648][T30431] RDX: 000000000000000f RSI: 00007f89db78e0a0 RDI: 0000000000000006 [ 2164.826662][T30431] RBP: 00007f89db78e090 R08: 0000000000000000 R09: 0000000000000000 [ 2164.826674][T30431] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 2164.826687][T30431] R13: 00007f89dd786038 R14: 00007f89dd785fa0 R15: 00007fffb92475e8 [ 2164.826719][T30431] [ 2164.946752][ T5871] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 2165.098854][ T5871] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2165.099605][ T5871] usb 7-1: not running at top speed; connect to a high speed hub [ 2165.101400][ T5871] usb 7-1: config 12 has an invalid interface number: 138 but max is 0 [ 2165.101425][ T5871] usb 7-1: config 12 has no interface number 0 [ 2165.101476][ T5871] usb 7-1: config 12 interface 138 altsetting 66 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2165.101504][ T5871] usb 7-1: config 12 interface 138 has no altsetting 0 [ 2165.108238][ T5871] usb 7-1: New USB device found, idVendor=2013, idProduct=0264, bcdDevice=23.39 [ 2165.108268][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2165.108287][ T5871] usb 7-1: Product: syz [ 2165.108301][ T5871] usb 7-1: Manufacturer: syz [ 2165.108315][ T5871] usb 7-1: SerialNumber: syz [ 2165.118985][T30425] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2165.656342][T21735] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 2165.686769][T30452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7158'. [ 2165.786309][T21735] usb 5-1: device descriptor read/64, error -71 [ 2165.829634][T30449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7159'. [ 2165.836069][T30449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7159'. [ 2165.837948][T30449] netlink: 200 bytes leftover after parsing attributes in process `syz.3.7159'. [ 2167.558488][T21735] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 2167.916370][T21735] usb 5-1: device descriptor read/64, error -71 [ 2169.431716][T21735] usb usb5-port1: attempt power cycle [ 2169.522492][ T5871] usb 7-1: USB disconnect, device number 12 [ 2170.056370][T21735] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2170.078452][T21735] usb 5-1: config index 0 descriptor too short (expected 2084, got 36) [ 2170.078506][T21735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2170.078528][T21735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2170.078558][T21735] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 2170.078577][T21735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2170.084200][T21735] usb 5-1: config 0 descriptor?? [ 2170.166386][T30491] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7171'. [ 2170.415854][T30493] FAULT_INJECTION: forcing a failure. [ 2170.415854][T30493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2170.415879][T30493] CPU: 0 UID: 0 PID: 30493 Comm: syz.7.7172 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2170.415894][T30493] Tainted: [L]=SOFTLOCKUP [ 2170.415900][T30493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2170.415911][T30493] Call Trace: [ 2170.415919][T30493] [ 2170.415928][T30493] dump_stack_lvl+0xe8/0x150 [ 2170.415958][T30493] should_fail_ex+0x46c/0x600 [ 2170.415989][T30493] strncpy_from_user+0x36/0x2c0 [ 2170.416016][T30493] getname_flags+0xf3/0x540 [ 2170.416031][T30493] __x64_sys_rename+0x5d/0x90 [ 2170.416042][T30493] do_syscall_64+0xec/0xf80 [ 2170.416053][T30493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2170.416063][T30493] ? trace_irq_disable+0x37/0x100 [ 2170.416083][T30493] ? clear_bhb_loop+0x60/0xb0 [ 2170.416110][T30493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2170.416126][T30493] RIP: 0033:0x7f9b87c8f749 [ 2170.416142][T30493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2170.416158][T30493] RSP: 002b:00007f9b85ef6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 2170.416178][T30493] RAX: ffffffffffffffda RBX: 00007f9b87ee5fa0 RCX: 00007f9b87c8f749 [ 2170.416191][T30493] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180 [ 2170.416204][T30493] RBP: 00007f9b85ef6090 R08: 0000000000000000 R09: 0000000000000000 [ 2170.416216][T30493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2170.416227][T30493] R13: 00007f9b87ee6038 R14: 00007f9b87ee5fa0 R15: 00007ffd909605e8 [ 2170.416254][T30493] [ 2170.594377][T21735] dragonrise 0003:0079:0006.0006: unknown main item tag 0x0 [ 2170.594415][T21735] dragonrise 0003:0079:0006.0006: unknown main item tag 0x0 [ 2170.626285][T21735] dragonrise 0003:0079:0006.0006: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0 [ 2170.626319][T21735] dragonrise 0003:0079:0006.0006: no inputs found [ 2170.626333][T21735] dragonrise 0003:0079:0006.0006: force feedback init failed [ 2173.483980][ T6159] usb 5-1: USB disconnect, device number 16 [ 2173.693467][T30514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7178'. [ 2173.693529][T30514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7178'. [ 2173.693590][T30514] netlink: 200 bytes leftover after parsing attributes in process `syz.1.7178'. [ 2173.911935][ T5856] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 2174.036460][ T5856] usb 4-1: device descriptor read/64, error -71 [ 2175.676285][ T5856] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 2175.826285][ T5856] usb 4-1: device descriptor read/64, error -71 [ 2175.936891][ T5856] usb usb4-port1: attempt power cycle [ 2176.276271][ T5856] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 2176.298315][ T5856] usb 4-1: device descriptor read/8, error -71 [ 2177.400741][T30565] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7182'. [ 2177.416282][ T5856] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 2177.444899][ T5856] usb 4-1: device descriptor read/8, error -71 [ 2177.531970][T30570] FAULT_INJECTION: forcing a failure. [ 2177.531970][T30570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2177.532087][T30570] CPU: 1 UID: 0 PID: 30570 Comm: syz.7.7199 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2177.532114][T30570] Tainted: [L]=SOFTLOCKUP [ 2177.532122][T30570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2177.532135][T30570] Call Trace: [ 2177.532143][T30570] [ 2177.532152][T30570] dump_stack_lvl+0xe8/0x150 [ 2177.532183][T30570] should_fail_ex+0x46c/0x600 [ 2177.532214][T30570] _copy_to_user+0x31/0xb0 [ 2177.532236][T30570] simple_read_from_buffer+0xe1/0x170 [ 2177.532262][T30570] proc_fail_nth_read+0x1b6/0x220 [ 2177.532292][T30570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2177.532323][T30570] ? rw_verify_area+0x2ac/0x4e0 [ 2177.532348][T30570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2177.532377][T30570] vfs_read+0x206/0xa30 [ 2177.532410][T30570] ? __pfx_vfs_read+0x10/0x10 [ 2177.532438][T30570] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2177.532462][T30570] ? lockdep_hardirqs_on+0x7b/0x110 [ 2177.532481][T30570] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2177.532500][T30570] ? mutex_lock_nested+0x154/0x1d0 [ 2177.532523][T30570] ? fdget_pos+0x253/0x320 [ 2177.532552][T30570] ksys_read+0x14b/0x260 [ 2177.532580][T30570] ? __pfx_ksys_read+0x10/0x10 [ 2177.532616][T30570] do_syscall_64+0xec/0xf80 [ 2177.532636][T30570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2177.532656][T30570] ? trace_irq_disable+0x37/0x100 [ 2177.532677][T30570] ? clear_bhb_loop+0x60/0xb0 [ 2177.532700][T30570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2177.532720][T30570] RIP: 0033:0x7f9b87c8e15c [ 2177.532737][T30570] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2177.532755][T30570] RSP: 002b:00007f9b85ef6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2177.532776][T30570] RAX: ffffffffffffffda RBX: 00007f9b87ee5fa0 RCX: 00007f9b87c8e15c [ 2177.532790][T30570] RDX: 000000000000000f RSI: 00007f9b85ef60a0 RDI: 0000000000000007 [ 2177.532803][T30570] RBP: 00007f9b85ef6090 R08: 0000000000000000 R09: 0000000000000000 [ 2177.532816][T30570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2177.532828][T30570] R13: 00007f9b87ee6038 R14: 00007f9b87ee5fa0 R15: 00007ffd909605e8 [ 2177.532869][T30570] [ 2177.551805][ T5856] usb usb4-port1: unable to enumerate USB device [ 2177.651345][T30572] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7200'. [ 2177.651370][T30572] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7200'. [ 2177.676566][ T6525] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2177.717145][T28826] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2177.841212][ T6525] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 2177.841230][ T6525] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2177.841240][ T6525] usb 5-1: config 8 has no interface number 0 [ 2177.841269][ T6525] usb 5-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2177.841284][ T6525] usb 5-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 255 [ 2177.841296][ T6525] usb 5-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2177.841310][ T6525] usb 5-1: config 8 interface 177 has no altsetting 0 [ 2177.841329][ T6525] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2177.841340][ T6525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2177.844886][T30555] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2177.886380][T28826] usb 2-1: Using ep0 maxpacket: 8 [ 2177.890606][T28826] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 2177.890636][T28826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2177.907065][T28826] usb 2-1: config 0 descriptor?? [ 2177.996436][ T5856] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 2178.048995][ T6525] usb 5-1: string descriptor 0 read error: -71 [ 2178.106707][ T6525] ir_toy 5-1:8.177: required endpoints not found [ 2178.126449][ T5856] usb 8-1: device descriptor read/64, error -71 [ 2178.143170][ T6525] usb 5-1: USB disconnect, device number 17 [ 2178.245968][T28826] usb 2-1: string descriptor 0 read error: -71 [ 2178.246092][T28826] uvcvideo 2-1:0.0: Found UVC 0.00 device (2833:0201) [ 2178.247278][T28826] uvcvideo 2-1:0.0: No valid video chain found. [ 2178.265198][T28826] usb 2-1: USB disconnect, device number 20 [ 2178.389231][ T5856] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 2178.526352][ T5856] usb 8-1: device descriptor read/64, error -71 [ 2178.651141][ T5856] usb usb8-port1: attempt power cycle [ 2178.769478][T30595] fuse: Unknown parameter 'dd' [ 2178.927545][T30598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7210'. [ 2178.996268][ T5856] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 2179.016948][ T5856] usb 8-1: device descriptor read/8, error -71 [ 2179.107016][T30603] FAULT_INJECTION: forcing a failure. [ 2179.107016][T30603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2179.107052][T30603] CPU: 1 UID: 0 PID: 30603 Comm: syz.1.7212 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2179.107078][T30603] Tainted: [L]=SOFTLOCKUP [ 2179.107085][T30603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2179.107097][T30603] Call Trace: [ 2179.107104][T30603] [ 2179.107113][T30603] dump_stack_lvl+0xe8/0x150 [ 2179.107143][T30603] should_fail_ex+0x46c/0x600 [ 2179.107173][T30603] _copy_from_user+0x2d/0xb0 [ 2179.107194][T30603] ___sys_sendmsg+0x158/0x2a0 [ 2179.107220][T30603] ? __pfx____sys_sendmsg+0x10/0x10 [ 2179.107276][T30603] ? __fget_files+0x2a/0x420 [ 2179.107297][T30603] ? __fget_files+0x3a6/0x420 [ 2179.107327][T30603] __x64_sys_sendmsg+0x1a1/0x260 [ 2179.107355][T30603] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2179.107388][T30603] ? __pfx_ksys_write+0x10/0x10 [ 2179.107425][T30603] do_syscall_64+0xec/0xf80 [ 2179.107446][T30603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2179.107465][T30603] ? trace_irq_disable+0x37/0x100 [ 2179.107493][T30603] ? clear_bhb_loop+0x60/0xb0 [ 2179.107516][T30603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2179.107536][T30603] RIP: 0033:0x7fbab334f749 [ 2179.107554][T30603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2179.107570][T30603] RSP: 002b:00007fbab15ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2179.107590][T30603] RAX: ffffffffffffffda RBX: 00007fbab35a5fa0 RCX: 00007fbab334f749 [ 2179.107604][T30603] RDX: 0000000000000014 RSI: 00002000000014c0 RDI: 0000000000000003 [ 2179.107617][T30603] RBP: 00007fbab15ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2179.107629][T30603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2179.107640][T30603] R13: 00007fbab35a6038 R14: 00007fbab35a5fa0 R15: 00007ffc81a62c68 [ 2179.107672][T30603] [ 2179.256244][ T5856] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 2179.282528][ T5856] usb 8-1: device descriptor read/8, error -71 [ 2179.386852][ T5856] usb usb8-port1: unable to enumerate USB device [ 2180.836764][T30607] netlink: 612 bytes leftover after parsing attributes in process `syz.1.7214'. [ 2180.836856][T30607] netlink: 136 bytes leftover after parsing attributes in process `syz.1.7214'. [ 2181.081049][T21735] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2181.184147][T30638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7223'. [ 2181.196680][T30639] bridge_slave_1: entered promiscuous mode [ 2181.252761][T21735] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 2181.252778][T21735] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2181.252788][T21735] usb 7-1: config 8 has no interface number 0 [ 2181.252814][T21735] usb 7-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2181.252834][T21735] usb 7-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 255 [ 2181.252847][T21735] usb 7-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2181.252859][T21735] usb 7-1: config 8 interface 177 has no altsetting 0 [ 2181.252878][T21735] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2181.252889][T21735] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.268230][T30622] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2181.474143][T21735] usb 7-1: string descriptor 0 read error: -71 [ 2181.487938][T21735] ir_toy 7-1:8.177: required endpoints not found [ 2181.510137][T21735] usb 7-1: USB disconnect, device number 13 [ 2182.029760][ T6525] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2182.176484][ T6525] usb 4-1: Using ep0 maxpacket: 8 [ 2182.181364][ T6525] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 2182.181391][ T6525] usb 4-1: config 179 has no interface number 0 [ 2182.181452][ T6525] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2182.181478][ T6525] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2182.181504][ T6525] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2182.181530][ T6525] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2182.181556][ T6525] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2182.181596][ T6525] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2182.181617][ T6525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2182.298763][T30657] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2183.486983][T30673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2183.487277][T30673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2183.997256][T30657] kAFS: unable to lookup cell 'syz0' [ 2184.036804][T28826] usb 4-1: USB disconnect, device number 79 [ 2184.036886][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2184.036944][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2185.001306][T21735] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 2185.147937][T21735] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2185.147956][T21735] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2185.170006][T21735] usb 7-1: config 0 descriptor?? [ 2185.178904][T21735] cp210x 7-1:0.0: cp210x converter detected [ 2185.318311][T30285] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 2185.326768][T15802] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2186.236260][T15802] usb 5-1: Using ep0 maxpacket: 16 [ 2186.240810][T30285] usb 8-1: Using ep0 maxpacket: 16 [ 2186.270392][T15802] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2186.270425][T15802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2186.312585][T30285] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2186.312864][T30285] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2186.312885][T30285] usb 8-1: Product: syz [ 2186.312900][T30285] usb 8-1: Manufacturer: syz [ 2186.312914][T30285] usb 8-1: SerialNumber: syz [ 2186.333815][T30285] usb 8-1: config 0 descriptor?? [ 2186.350543][T15802] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2186.350572][T15802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2186.350637][T15802] usb 5-1: Product: syz [ 2186.350652][T15802] usb 5-1: Manufacturer: syz [ 2186.350666][T15802] usb 5-1: SerialNumber: syz [ 2186.401437][T15802] usb 5-1: config 0 descriptor?? [ 2186.411312][T28824] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2186.440273][T15802] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2186.440294][T15802] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 2186.473087][T21735] usb 7-1: cp210x converter now attached to ttyUSB0 [ 2186.568912][T30697] 9p: Bad value for 'wfdno' [ 2186.568950][T28824] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 2186.568985][T28824] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2186.569003][T28824] usb 2-1: config 8 has no interface number 0 [ 2186.569113][T28824] usb 2-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2186.569138][T28824] usb 2-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 255 [ 2186.569171][T28824] usb 2-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2186.569254][T28824] usb 2-1: config 8 interface 177 has no altsetting 0 [ 2186.569287][T28824] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2186.569309][T28824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.590919][T30699] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2186.688782][ T6525] usb 7-1: USB disconnect, device number 14 [ 2186.715799][ T6525] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2186.804896][T28824] usb 2-1: string descriptor 0 read error: -71 [ 2186.817716][T28824] ir_toy 2-1:8.177: required endpoints not found [ 2186.830222][T28824] usb 2-1: USB disconnect, device number 21 [ 2186.847419][ T6525] cp210x 7-1:0.0: device disconnected [ 2186.911971][T30708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2186.915222][T30708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2186.964489][T21735] usb 8-1: USB disconnect, device number 13 [ 2187.023623][T15802] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2187.025734][T15802] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 2187.029014][T15802] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 2187.029034][T15802] em28xx 5-1:0.0: No AC97 audio processor [ 2187.055915][T15802] usb 5-1: USB disconnect, device number 18 [ 2187.061160][T15802] em28xx 5-1:0.0: Disconnecting em28xx [ 2187.079753][T15802] em28xx 5-1:0.0: Freeing device [ 2187.821525][T30737] FAULT_INJECTION: forcing a failure. [ 2187.821525][T30737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2187.821549][T30737] CPU: 1 UID: 0 PID: 30737 Comm: syz.3.7261 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2187.821564][T30737] Tainted: [L]=SOFTLOCKUP [ 2187.821568][T30737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2187.821575][T30737] Call Trace: [ 2187.821580][T30737] [ 2187.821586][T30737] dump_stack_lvl+0xe8/0x150 [ 2187.821604][T30737] should_fail_ex+0x46c/0x600 [ 2187.821621][T30737] _copy_to_user+0x31/0xb0 [ 2187.821634][T30737] simple_read_from_buffer+0xe1/0x170 [ 2187.821648][T30737] proc_fail_nth_read+0x1b6/0x220 [ 2187.821665][T30737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2187.821682][T30737] ? rw_verify_area+0x2ac/0x4e0 [ 2187.821695][T30737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2187.821711][T30737] vfs_read+0x206/0xa30 [ 2187.821729][T30737] ? __pfx_vfs_read+0x10/0x10 [ 2187.821743][T30737] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2187.821755][T30737] ? lockdep_hardirqs_on+0x7b/0x110 [ 2187.821765][T30737] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2187.821775][T30737] ? mutex_lock_nested+0x154/0x1d0 [ 2187.821788][T30737] ? fdget_pos+0x253/0x320 [ 2187.821803][T30737] ksys_read+0x14b/0x260 [ 2187.821816][T30737] ? __pfx_filldir+0x10/0x10 [ 2187.821831][T30737] ? __pfx_ksys_read+0x10/0x10 [ 2187.821851][T30737] do_syscall_64+0xec/0xf80 [ 2187.821861][T30737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2187.821871][T30737] ? trace_irq_disable+0x37/0x100 [ 2187.821883][T30737] ? clear_bhb_loop+0x60/0xb0 [ 2187.821895][T30737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2187.821905][T30737] RIP: 0033:0x7f89dd52e15c [ 2187.821916][T30737] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2187.821925][T30737] RSP: 002b:00007f89db78e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2187.821937][T30737] RAX: ffffffffffffffda RBX: 00007f89dd785fa0 RCX: 00007f89dd52e15c [ 2187.821945][T30737] RDX: 000000000000000f RSI: 00007f89db78e0a0 RDI: 0000000000000007 [ 2187.821952][T30737] RBP: 00007f89db78e090 R08: 0000000000000000 R09: 0000000000000000 [ 2187.821958][T30737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2187.821964][T30737] R13: 00007f89dd786038 R14: 00007f89dd785fa0 R15: 00007fffb92475e8 [ 2187.821980][T30737] [ 2187.896255][T15802] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2188.046253][T15802] usb 5-1: Using ep0 maxpacket: 8 [ 2188.048620][T15802] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2188.048646][T15802] usb 5-1: config 179 has no interface number 0 [ 2188.048694][T15802] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2188.048719][T15802] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2188.048746][T15802] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2188.048771][T15802] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2188.048796][T15802] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2188.048836][T15802] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2188.048875][T15802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2188.061158][T30733] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2188.960798][T30738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2188.969132][T30738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2189.743926][T15802] usb 5-1: USB disconnect, device number 19 [ 2189.743997][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2189.744031][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2191.846374][T28824] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2192.696239][T22199] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 2192.866916][T22199] usb 8-1: Using ep0 maxpacket: 16 [ 2192.870154][T22199] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2192.870185][T22199] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2192.873743][T22199] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2192.873772][T22199] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.873792][T22199] usb 8-1: Product: syz [ 2192.873806][T22199] usb 8-1: Manufacturer: syz [ 2192.873820][T22199] usb 8-1: SerialNumber: syz [ 2192.879890][T22199] usb 8-1: config 0 descriptor?? [ 2192.930199][T28824] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 2192.930227][T28824] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2192.930247][T28824] usb 7-1: config 8 has no interface number 0 [ 2192.930341][T28824] usb 7-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2192.930368][T28824] usb 7-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 255 [ 2192.930392][T28824] usb 7-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2192.930420][T28824] usb 7-1: config 8 interface 177 has no altsetting 0 [ 2192.930499][T28824] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2192.930522][T28824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2192.953127][T22199] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2192.953162][T22199] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 2192.973412][T30754] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2193.375943][T28824] usb 7-1: string descriptor 0 read error: -71 [ 2193.379467][T28824] ir_toy 7-1:8.177: required endpoints not found [ 2193.403799][T28824] usb 7-1: USB disconnect, device number 15 [ 2193.565507][T22199] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 2193.566607][T22199] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 2193.611024][T22199] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 2193.611045][T22199] em28xx 8-1:0.0: No AC97 audio processor [ 2193.659456][T22199] usb 8-1: USB disconnect, device number 14 [ 2193.661807][T22199] em28xx 8-1:0.0: Disconnecting em28xx [ 2193.719072][T22199] em28xx 8-1:0.0: Freeing device [ 2194.429924][T22199] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2194.436816][T30793] Smack: duplicate mount options [ 2194.556463][T22199] usb 5-1: device descriptor read/64, error -71 [ 2195.976834][T22199] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2196.113225][T22199] usb 5-1: device descriptor read/64, error -71 [ 2196.126242][T21735] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2196.217509][T22199] usb usb5-port1: attempt power cycle [ 2196.292584][T21735] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 2196.292614][T21735] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2196.292633][T21735] usb 2-1: config 8 has no interface number 0 [ 2196.292678][T21735] usb 2-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2196.292705][T21735] usb 2-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 255 [ 2196.292728][T21735] usb 2-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2196.292755][T21735] usb 2-1: config 8 interface 177 has no altsetting 0 [ 2196.292787][T21735] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2196.292809][T21735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2196.304930][T30803] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2196.512853][T21735] usb 2-1: string descriptor 0 read error: -71 [ 2196.515732][T21735] ir_toy 2-1:8.177: required endpoints not found [ 2196.557322][T21735] usb 2-1: USB disconnect, device number 22 [ 2196.565137][T22199] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2196.577001][T22199] usb 5-1: device descriptor read/8, error -71 [ 2196.687012][T28824] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 2196.750187][T30830] FAULT_INJECTION: forcing a failure. [ 2196.750187][T30830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2196.750212][T30830] CPU: 1 UID: 0 PID: 30830 Comm: syz.3.7295 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2196.750227][T30830] Tainted: [L]=SOFTLOCKUP [ 2196.750231][T30830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2196.750238][T30830] Call Trace: [ 2196.750243][T30830] [ 2196.750248][T30830] dump_stack_lvl+0xe8/0x150 [ 2196.750267][T30830] should_fail_ex+0x46c/0x600 [ 2196.750284][T30830] strncpy_from_user+0x36/0x2c0 [ 2196.750300][T30830] getname_flags+0xf3/0x540 [ 2196.750313][T30830] __x64_sys_linkat+0xb4/0xf0 [ 2196.750324][T30830] do_syscall_64+0xec/0xf80 [ 2196.750335][T30830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2196.750348][T30830] ? trace_irq_disable+0x37/0x100 [ 2196.750359][T30830] ? clear_bhb_loop+0x60/0xb0 [ 2196.750372][T30830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2196.750382][T30830] RIP: 0033:0x7f89dd52f749 [ 2196.750393][T30830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2196.750402][T30830] RSP: 002b:00007f89db78e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 2196.750414][T30830] RAX: ffffffffffffffda RBX: 00007f89dd785fa0 RCX: 00007f89dd52f749 [ 2196.750422][T30830] RDX: 0000000000000003 RSI: 0000200000000100 RDI: 0000000000000003 [ 2196.750428][T30830] RBP: 00007f89db78e090 R08: 0000000000000000 R09: 0000000000000000 [ 2196.750435][T30830] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 2196.750442][T30830] R13: 00007f89dd786038 R14: 00007f89dd785fa0 R15: 00007fffb92475e8 [ 2196.750458][T30830] [ 2196.821129][T22199] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2196.837069][T22199] usb 5-1: device descriptor read/8, error -71 [ 2196.838899][T28824] usb 8-1: Using ep0 maxpacket: 16 [ 2196.841701][T28824] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2196.841729][T28824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2196.845653][T28824] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2196.845679][T28824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2196.845698][T28824] usb 8-1: Product: syz [ 2196.845713][T28824] usb 8-1: Manufacturer: syz [ 2196.845727][T28824] usb 8-1: SerialNumber: syz [ 2196.855191][T28824] usb 8-1: config 0 descriptor?? [ 2196.878878][T28824] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2196.878911][T28824] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 2196.946934][T22199] usb usb5-port1: unable to enumerate USB device [ 2197.138019][T30832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7296'. [ 2197.407237][ T37] kauditd_printk_skb: 62 callbacks suppressed [ 2197.407258][ T37] audit: type=1107 audit(2197.122:1400): pid=30834 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 2197.530052][T28824] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 2197.533541][T28824] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 2197.536969][T28824] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 2197.536989][T28824] em28xx 8-1:0.0: No AC97 audio processor [ 2197.579728][T28824] usb 8-1: USB disconnect, device number 15 [ 2197.581897][T28824] em28xx 8-1:0.0: Disconnecting em28xx [ 2197.592953][T28824] em28xx 8-1:0.0: Freeing device [ 2197.793220][T30845] FAULT_INJECTION: forcing a failure. [ 2197.793220][T30845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2197.793255][T30845] CPU: 0 UID: 0 PID: 30845 Comm: syz.1.7297 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2197.793280][T30845] Tainted: [L]=SOFTLOCKUP [ 2197.793287][T30845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2197.793299][T30845] Call Trace: [ 2197.793307][T30845] [ 2197.793316][T30845] dump_stack_lvl+0xe8/0x150 [ 2197.793348][T30845] should_fail_ex+0x46c/0x600 [ 2197.793377][T30845] _copy_from_user+0x2d/0xb0 [ 2197.793398][T30845] sk_getsockopt+0x1ac/0x2460 [ 2197.793420][T30845] ? get_pid_task+0x20/0x1f0 [ 2197.793463][T30845] ? __pfx_sk_getsockopt+0x10/0x10 [ 2197.793497][T30845] ? __lock_acquire+0x6b6/0x2cf0 [ 2197.793529][T30845] ? __might_fault+0xb0/0x130 [ 2197.793557][T30845] ? __might_fault+0xb0/0x130 [ 2197.793604][T30845] do_sock_getsockopt+0x20a/0x3d0 [ 2197.793632][T30845] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2197.793656][T30845] ? __fget_files+0x3a6/0x420 [ 2197.793677][T30845] ? __fget_files+0x2a/0x420 [ 2197.793703][T30845] __x64_sys_getsockopt+0x1ab/0x250 [ 2197.793734][T30845] do_syscall_64+0xec/0xf80 [ 2197.793754][T30845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2197.793773][T30845] ? trace_irq_disable+0x37/0x100 [ 2197.793794][T30845] ? clear_bhb_loop+0x60/0xb0 [ 2197.793818][T30845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2197.793838][T30845] RIP: 0033:0x7fbab334f749 [ 2197.793855][T30845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2197.793873][T30845] RSP: 002b:00007fbab15ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2197.793894][T30845] RAX: ffffffffffffffda RBX: 00007fbab35a5fa0 RCX: 00007fbab334f749 [ 2197.793910][T30845] RDX: 000000000000003b RSI: 0000000000000001 RDI: 0000000000000004 [ 2197.793922][T30845] RBP: 00007fbab15ae090 R08: 0000200000000540 R09: 0000000000000000 [ 2197.793936][T30845] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2197.793950][T30845] R13: 00007fbab35a6038 R14: 00007fbab35a5fa0 R15: 00007ffc81a62c68 [ 2197.793981][T30845] [ 2199.529013][T30285] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2199.726315][T30285] usb 7-1: Using ep0 maxpacket: 16 [ 2199.732941][T30285] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2199.732974][T30285] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2199.733008][T30285] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2199.733030][T30285] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2199.785745][T30285] usb 7-1: config 0 descriptor?? [ 2199.841573][T28827] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2199.842077][T28824] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2199.986238][T28484] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2199.991670][T28824] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 2199.991697][T28824] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2199.991717][T28824] usb 4-1: config 8 has no interface number 0 [ 2199.991823][T28824] usb 4-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2199.991850][T28824] usb 4-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 255 [ 2199.991873][T28824] usb 4-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2199.992110][T28824] usb 4-1: config 8 interface 177 has no altsetting 0 [ 2199.992144][T28824] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2199.992166][T28824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2200.000785][T28827] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 2200.000812][T28827] usb 2-1: config 1 has no interface number 0 [ 2200.000861][T28827] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 64 [ 2200.000885][T28827] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 80 [ 2200.000908][T28827] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x8A has an invalid bInterval 32, changing to 9 [ 2200.079438][T28827] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2200.079468][T28827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2200.079487][T28827] usb 2-1: Product: syz [ 2200.079501][T28827] usb 2-1: Manufacturer: syz [ 2200.079515][T28827] usb 2-1: SerialNumber: syz [ 2200.089407][T30857] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2200.089705][T30857] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2200.098653][T28827] usb 2-1: Error in usbnet_get_endpoints (-22) [ 2200.116218][T28484] usb 5-1: device descriptor read/64, error -71 [ 2200.207876][T30863] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2200.287061][T30285] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 2200.376551][T28484] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2200.416102][T28824] usb 4-1: string descriptor 0 read error: -71 [ 2200.420194][T28824] ir_toy 4-1:8.177: required endpoints not found [ 2200.526366][T28484] usb 5-1: device descriptor read/64, error -71 [ 2200.531859][T28824] usb 4-1: USB disconnect, device number 80 [ 2200.640198][T28484] usb usb5-port1: attempt power cycle [ 2200.763151][T28826] usb 7-1: USB disconnect, device number 16 [ 2200.977774][T28484] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2201.010082][T28484] usb 5-1: device descriptor read/8, error -71 [ 2201.246374][T28484] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2201.280921][T28484] usb 5-1: device descriptor read/8, error -71 [ 2201.386601][T28484] usb usb5-port1: unable to enumerate USB device [ 2201.435124][T30882] FAULT_INJECTION: forcing a failure. [ 2201.435124][T30882] name failslab, interval 1, probability 0, space 0, times 0 [ 2201.435161][T30882] CPU: 1 UID: 0 PID: 30882 Comm: syz.7.7316 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2201.435189][T30882] Tainted: [L]=SOFTLOCKUP [ 2201.435196][T30882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2201.435210][T30882] Call Trace: [ 2201.435217][T30882] [ 2201.435226][T30882] dump_stack_lvl+0xe8/0x150 [ 2201.435262][T30882] should_fail_ex+0x46c/0x600 [ 2201.435294][T30882] should_failslab+0xa8/0x100 [ 2201.435315][T30882] __kmalloc_cache_noprof+0x84/0x6d0 [ 2201.435345][T30882] ? sctp_datamsg_from_user+0x88/0xef0 [ 2201.435374][T30882] sctp_datamsg_from_user+0x88/0xef0 [ 2201.435396][T30882] ? __sk_mem_raise_allocated+0x290/0x1300 [ 2201.435423][T30882] ? __genradix_ptr+0x1e1/0x220 [ 2201.435450][T30882] ? __sk_mem_schedule+0x7f/0xf0 [ 2201.435475][T30882] ? sctp_stream_init_ext+0x165/0x180 [ 2201.435500][T30882] sctp_sendmsg_to_asoc+0x1059/0x18d0 [ 2201.435535][T30882] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2201.435555][T30882] ? lockdep_hardirqs_on+0x7b/0x110 [ 2201.435574][T30882] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2201.435606][T30882] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 2201.435633][T30882] ? __local_bh_enable+0x1e2/0x2f0 [ 2201.435662][T30882] ? __local_bh_enable_ip+0x1af/0x2c0 [ 2201.435684][T30882] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 2201.435718][T30882] sctp_sendmsg+0x174f/0x25d0 [ 2201.435758][T30882] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2201.435788][T30882] ? __lock_acquire+0x6b6/0x2cf0 [ 2201.435828][T30882] ? sock_rps_record_flow+0x19/0x410 [ 2201.435855][T30882] ? inet_sendmsg+0x2f4/0x370 [ 2201.435877][T30882] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2201.435906][T30882] __sock_sendmsg+0x19c/0x270 [ 2201.435938][T30882] sock_write_iter+0x27f/0x370 [ 2201.435967][T30882] ? __pfx_sock_write_iter+0x10/0x10 [ 2201.436023][T30882] vfs_write+0x5d5/0xb40 [ 2201.436054][T30882] ? __pfx_sock_write_iter+0x10/0x10 [ 2201.436081][T30882] ? __pfx_vfs_write+0x10/0x10 [ 2201.436115][T30882] ? __fget_files+0x2a/0x420 [ 2201.436140][T30882] ksys_write+0x14b/0x260 [ 2201.436166][T30882] ? __pfx_ksys_write+0x10/0x10 [ 2201.436198][T30882] do_syscall_64+0xec/0xf80 [ 2201.436215][T30882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2201.436233][T30882] ? trace_irq_disable+0x37/0x100 [ 2201.436251][T30882] ? clear_bhb_loop+0x60/0xb0 [ 2201.436274][T30882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2201.436293][T30882] RIP: 0033:0x7f9b87c8f749 [ 2201.436311][T30882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2201.436327][T30882] RSP: 002b:00007f9b85ef6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2201.436346][T30882] RAX: ffffffffffffffda RBX: 00007f9b87ee5fa0 RCX: 00007f9b87c8f749 [ 2201.436360][T30882] RDX: 000000000000fed7 RSI: 0000200000000100 RDI: 0000000000000004 [ 2201.436371][T30882] RBP: 00007f9b85ef6090 R08: 0000000000000000 R09: 0000000000000000 [ 2201.436383][T30882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2201.436393][T30882] R13: 00007f9b87ee6038 R14: 00007f9b87ee5fa0 R15: 00007ffd909605e8 [ 2201.436422][T30882] [ 2201.795749][T28484] usb 2-1: USB disconnect, device number 23 [ 2202.023527][T30897] tmpfs: Bad value for 'nr_inodes' [ 2203.336340][ T6808] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2203.496700][ T6808] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 2203.496727][ T6808] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2203.496746][ T6808] usb 4-1: config 8 has no interface number 0 [ 2203.496790][ T6808] usb 4-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2203.496815][ T6808] usb 4-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 255 [ 2203.496839][ T6808] usb 4-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2203.496865][ T6808] usb 4-1: config 8 interface 177 has no altsetting 0 [ 2203.496897][ T6808] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2203.496920][ T6808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2203.513001][T30902] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2203.716648][ T6808] usb 4-1: string descriptor 0 read error: -71 [ 2203.719502][ T6808] ir_toy 4-1:8.177: required endpoints not found [ 2203.773846][ T6808] usb 4-1: USB disconnect, device number 81 [ 2204.186334][ T6808] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2204.346271][ T6808] usb 5-1: device descriptor read/64, error -71 [ 2204.589947][ T6808] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2204.717140][ T6808] usb 5-1: device descriptor read/64, error -71 [ 2204.826665][ T6808] usb usb5-port1: attempt power cycle [ 2205.124304][T30966] overlayfs: missing 'lowerdir' [ 2205.152480][T30964] FAULT_INJECTION: forcing a failure. [ 2205.152480][T30964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2205.152518][T30964] CPU: 0 UID: 0 PID: 30964 Comm: syz.6.7349 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2205.152535][T30964] Tainted: [L]=SOFTLOCKUP [ 2205.152539][T30964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2205.152545][T30964] Call Trace: [ 2205.152550][T30964] [ 2205.152556][T30964] dump_stack_lvl+0xe8/0x150 [ 2205.152575][T30964] should_fail_ex+0x46c/0x600 [ 2205.152592][T30964] _copy_to_iter+0x1de/0x1790 [ 2205.152624][T30964] ? __pfx__copy_to_iter+0x10/0x10 [ 2205.152639][T30964] ? __pfx_default_wake_function+0x10/0x10 [ 2205.152658][T30964] ? ldsem_down_read+0x12/0x40 [ 2205.152684][T30964] tty_read+0x29e/0x690 [ 2205.152703][T30964] ? __pfx_tty_read+0x10/0x10 [ 2205.152728][T30964] vfs_read+0x563/0xa30 [ 2205.152747][T30964] ? __pfx_vfs_read+0x10/0x10 [ 2205.152766][T30964] ? __fget_files+0x2a/0x420 [ 2205.152782][T30964] ksys_read+0x14b/0x260 [ 2205.152797][T30964] ? __pfx_ksys_read+0x10/0x10 [ 2205.152817][T30964] do_syscall_64+0xec/0xf80 [ 2205.152831][T30964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2205.152841][T30964] ? trace_irq_disable+0x37/0x100 [ 2205.152853][T30964] ? clear_bhb_loop+0x60/0xb0 [ 2205.152865][T30964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2205.152878][T30964] RIP: 0033:0x7f27dbabf749 [ 2205.152888][T30964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2205.152898][T30964] RSP: 002b:00007f27d9d26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2205.152910][T30964] RAX: ffffffffffffffda RBX: 00007f27dbd15fa0 RCX: 00007f27dbabf749 [ 2205.152918][T30964] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000004 [ 2205.152926][T30964] RBP: 00007f27d9d26090 R08: 0000000000000000 R09: 0000000000000000 [ 2205.152934][T30964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2205.152940][T30964] R13: 00007f27dbd16038 R14: 00007f27dbd15fa0 R15: 00007ffec6da97f8 [ 2205.152957][T30964] [ 2205.186267][ T6808] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2205.196341][T28824] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2205.207856][ T6808] usb 5-1: device descriptor read/8, error -71 [ 2206.268392][T28824] usb 2-1: Using ep0 maxpacket: 8 [ 2206.406978][T28824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2206.407013][T28824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2206.407033][T28824] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2206.407054][T28824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2206.407090][T28824] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2206.407111][T28824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2206.407403][ T6808] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2206.427206][ T6808] usb 5-1: device descriptor read/8, error -71 [ 2206.495955][T28824] usb 2-1: config 0 descriptor?? [ 2206.542075][ T6808] usb usb5-port1: unable to enumerate USB device [ 2206.576270][T28484] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2206.651480][ T6808] libceph: connect (1)[c::]:6789 error -101 [ 2206.651675][ T6808] libceph: mon0 (1)[c::]:6789 connect error [ 2206.659913][ T6808] libceph: connect (1)[c::]:6789 error -101 [ 2206.660106][ T6808] libceph: mon0 (1)[c::]:6789 connect error [ 2206.933303][T28484] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 2206.933427][T28484] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2206.933627][T28484] usb 7-1: config 8 has no interface number 0 [ 2206.934486][T28484] usb 7-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2206.939881][T28484] usb 7-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 255 [ 2206.940005][T28484] usb 7-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2206.940089][T28484] usb 7-1: config 8 interface 177 has no altsetting 0 [ 2206.940398][T28484] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2206.940532][T28484] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.276397][T28824] usb 2-1: USB disconnect, device number 24 [ 2207.280762][ T6808] libceph: connect (1)[c::]:6789 error -101 [ 2207.280898][ T6808] libceph: mon0 (1)[c::]:6789 connect error [ 2207.340441][T30975] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 2207.408540][T30979] ceph: No mds server is up or the cluster is laggy [ 2207.547944][T28484] usb 7-1: string descriptor 0 read error: -71 [ 2207.551875][T28484] ir_toy 7-1:8.177: required endpoints not found [ 2207.610509][T28484] usb 7-1: USB disconnect, device number 17 [ 2208.426383][T28484] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2208.556361][T28484] usb 4-1: device descriptor read/64, error -71 [ 2208.806243][T28484] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2208.938510][T28484] usb 4-1: device descriptor read/64, error -71 [ 2208.986511][ T6003] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2209.046593][T28484] usb usb4-port1: attempt power cycle [ 2209.127827][T31027] FAULT_INJECTION: forcing a failure. [ 2209.127827][T31027] name failslab, interval 1, probability 0, space 0, times 0 [ 2209.127863][T31027] CPU: 1 UID: 0 PID: 31027 Comm: syz.7.7371 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2209.127890][T31027] Tainted: [L]=SOFTLOCKUP [ 2209.127896][T31027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2209.127909][T31027] Call Trace: [ 2209.127917][T31027] [ 2209.127926][T31027] dump_stack_lvl+0xe8/0x150 [ 2209.127955][T31027] should_fail_ex+0x46c/0x600 [ 2209.127985][T31027] should_failslab+0xa8/0x100 [ 2209.128005][T31027] __kmalloc_noprof+0xe0/0x7e0 [ 2209.128031][T31027] ? tomoyo_encode+0x28b/0x550 [ 2209.128054][T31027] tomoyo_encode+0x28b/0x550 [ 2209.128077][T31027] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2209.128096][T31027] ? tomoyo_domain+0xd9/0x130 [ 2209.128118][T31027] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2209.128144][T31027] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2209.128176][T31027] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2209.128200][T31027] ? __lock_acquire+0x6b6/0x2cf0 [ 2209.128227][T31027] ? do_raw_spin_lock+0x121/0x290 [ 2209.128275][T31027] ? __fget_files+0x2a/0x420 [ 2209.128297][T31027] ? __fget_files+0x2a/0x420 [ 2209.128315][T31027] ? __fget_files+0x3a6/0x420 [ 2209.128333][T31027] ? __fget_files+0x2a/0x420 [ 2209.128355][T31027] security_file_ioctl+0xcb/0x2d0 [ 2209.128384][T31027] __se_sys_ioctl+0x47/0x170 [ 2209.128411][T31027] do_syscall_64+0xec/0xf80 [ 2209.128430][T31027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2209.128448][T31027] ? trace_irq_disable+0x37/0x100 [ 2209.128467][T31027] ? clear_bhb_loop+0x60/0xb0 [ 2209.128488][T31027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2209.128507][T31027] RIP: 0033:0x7f9b87c8f749 [ 2209.128531][T31027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2209.128548][T31027] RSP: 002b:00007f9b85ef6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2209.128568][T31027] RAX: ffffffffffffffda RBX: 00007f9b87ee5fa0 RCX: 00007f9b87c8f749 [ 2209.128582][T31027] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 2209.128594][T31027] RBP: 00007f9b85ef6090 R08: 0000000000000000 R09: 0000000000000000 [ 2209.128606][T31027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2209.128618][T31027] R13: 00007f9b87ee6038 R14: 00007f9b87ee5fa0 R15: 00007ffd909605e8 [ 2209.128647][T31027] [ 2209.128729][T31027] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2209.136266][ T6003] usb 7-1: Using ep0 maxpacket: 8 [ 2209.141828][ T6003] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 2209.141856][ T6003] usb 7-1: config 179 has no interface number 0 [ 2209.141902][ T6003] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2209.141927][ T6003] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2209.141952][ T6003] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2209.141978][ T6003] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2209.142002][ T6003] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2209.142041][ T6003] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2209.142062][ T6003] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2209.177387][T31017] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2209.366645][ T6525] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2209.387921][T28484] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2209.409069][T28484] usb 4-1: device descriptor read/8, error -71 [ 2209.548409][ T6525] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 2209.548428][ T6525] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2209.593961][ T6525] usb 2-1: config 0 descriptor?? [ 2209.646346][T28484] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2209.671009][T28484] usb 4-1: device descriptor read/8, error -71 [ 2209.726391][ T6525] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 2209.776844][T28484] usb usb4-port1: unable to enumerate USB device [ 2209.861991][ T6525] usb 2-1: USB disconnect, device number 25 [ 2212.507412][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2212.507478][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2212.507552][ T6525] usb 7-1: USB disconnect, device number 18 [ 2212.877686][T31095] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2212.879990][T31095] FAULT_INJECTION: forcing a failure. [ 2212.879990][T31095] name failslab, interval 1, probability 0, space 0, times 0 [ 2212.880014][T31095] CPU: 1 UID: 0 PID: 31095 Comm: syz.6.7400 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2212.880029][T31095] Tainted: [L]=SOFTLOCKUP [ 2212.880033][T31095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2212.880040][T31095] Call Trace: [ 2212.880044][T31095] [ 2212.880050][T31095] dump_stack_lvl+0xe8/0x150 [ 2212.880069][T31095] should_fail_ex+0x46c/0x600 [ 2212.880086][T31095] ? alloc_empty_file+0x55/0x1d0 [ 2212.880099][T31095] should_failslab+0xa8/0x100 [ 2212.880109][T31095] ? alloc_empty_file+0x55/0x1d0 [ 2212.880119][T31095] kmem_cache_alloc_noprof+0x84/0x6c0 [ 2212.880134][T31095] ? make_vfsuid+0x49/0xa0 [ 2212.880152][T31095] alloc_empty_file+0x55/0x1d0 [ 2212.880164][T31095] dentry_open+0x44/0xa0 [ 2212.880175][T31095] ovl_dir_read+0x85/0x480 [ 2212.880191][T31095] ? __pfx_ovl_dir_read+0x10/0x10 [ 2212.880202][T31095] ? ovl_path_upper+0x105/0x170 [ 2212.880213][T31095] ? ovl_path_next+0x3b8/0x470 [ 2212.880233][T31095] ovl_dir_read_merged+0x2b8/0x4b0 [ 2212.880247][T31095] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 2212.880260][T31095] ? __pfx_ovl_fill_merge+0x10/0x10 [ 2212.880277][T31095] ? __kasan_kmalloc+0x93/0xb0 [ 2212.880294][T31095] ? __kmalloc_cache_noprof+0x1fb/0x6d0 [ 2212.880309][T31095] ? ovl_iterate+0xddc/0x2330 [ 2212.880323][T31095] ovl_iterate+0xea3/0x2330 [ 2212.880340][T31095] ? check_path+0x21/0x40 [ 2212.880358][T31095] ? __pfx_ovl_iterate+0x10/0x10 [ 2212.880371][T31095] ? __lock_acquire+0x6b6/0x2cf0 [ 2212.880397][T31095] ? do_raw_spin_lock+0x121/0x290 [ 2212.880415][T31095] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2212.880427][T31095] ? lockdep_hardirqs_on+0x7b/0x110 [ 2212.880438][T31095] ? rwbase_write_lock+0x56f/0x750 [ 2212.880454][T31095] ? __pfx_ovl_iterate+0x10/0x10 [ 2212.880467][T31095] wrap_directory_iterator+0x99/0xe0 [ 2212.880483][T31095] iterate_dir+0x3a5/0x580 [ 2212.880499][T31095] __se_sys_getdents+0xe4/0x250 [ 2212.880521][T31095] ? __pfx___se_sys_getdents+0x10/0x10 [ 2212.880544][T31095] ? ksys_write+0x230/0x260 [ 2212.880565][T31095] ? __pfx_filldir+0x10/0x10 [ 2212.880592][T31095] ? __pfx_ksys_write+0x10/0x10 [ 2212.880626][T31095] do_syscall_64+0xec/0xf80 [ 2212.880645][T31095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2212.880663][T31095] ? trace_irq_disable+0x37/0x100 [ 2212.880683][T31095] ? clear_bhb_loop+0x60/0xb0 [ 2212.880699][T31095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2212.880709][T31095] RIP: 0033:0x7f27dbabf749 [ 2212.880720][T31095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2212.880729][T31095] RSP: 002b:00007f27d9d26038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 2212.880741][T31095] RAX: ffffffffffffffda RBX: 00007f27dbd15fa0 RCX: 00007f27dbabf749 [ 2212.880750][T31095] RDX: 0000000000009005 RSI: 0000200000000280 RDI: 0000000000000003 [ 2212.880756][T31095] RBP: 00007f27d9d26090 R08: 0000000000000000 R09: 0000000000000000 [ 2212.880763][T31095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2212.880769][T31095] R13: 00007f27dbd16038 R14: 00007f27dbd15fa0 R15: 00007ffec6da97f8 [ 2212.880786][T31095] [ 2213.607445][T31120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7411'. [ 2213.696683][T31124] netlink: 'syz.4.7413': attribute type 10 has an invalid length. [ 2213.731080][T31126] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2213.740090][T31124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2213.744858][T31124] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2213.806321][ T6525] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 2213.956452][ T6525] usb 8-1: Using ep0 maxpacket: 8 [ 2213.960105][ T6525] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 2213.960131][ T6525] usb 8-1: config 179 has no interface number 0 [ 2213.960181][ T6525] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2213.960196][ T6525] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2213.960210][ T6525] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2213.960223][ T6525] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2213.960236][ T6525] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2213.960260][ T6525] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2213.960272][ T6525] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2213.966827][T31114] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2214.393499][T31114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2214.393782][T31114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2215.173097][ T6525] usb 8-1: USB disconnect, device number 16 [ 2215.173171][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2215.173231][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2215.469664][T13157] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 2215.487401][ T6808] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2215.646279][ T6808] usb 2-1: Using ep0 maxpacket: 8 [ 2215.653638][ T6808] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2215.653666][ T6808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2215.653683][ T6808] usb 2-1: Product: syz [ 2215.653695][ T6808] usb 2-1: Manufacturer: syz [ 2215.653707][ T6808] usb 2-1: SerialNumber: syz [ 2215.669923][ T6808] usb 2-1: config 0 descriptor?? [ 2215.901570][ T6808] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2217.556449][T27745] Bluetooth: hci0: command 0x0406 tx timeout [ 2217.577738][T22199] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2217.728657][T22199] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 2217.728687][T22199] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2217.728706][T22199] usb 4-1: config 8 has no interface number 0 [ 2217.728753][T22199] usb 4-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2217.728779][T22199] usb 4-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 255 [ 2217.728802][T22199] usb 4-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2217.728827][T22199] usb 4-1: config 8 interface 177 has no altsetting 0 [ 2217.728858][T22199] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2217.728880][T22199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2217.735096][T31161] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2217.960062][T22199] usb 4-1: string descriptor 0 read error: -71 [ 2217.964153][T22199] ir_toy 4-1:8.177: required endpoints not found [ 2217.991589][T22199] usb 4-1: USB disconnect, device number 86 [ 2218.676335][T28824] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2218.826350][T28824] usb 5-1: Using ep0 maxpacket: 8 [ 2218.829874][T28824] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2218.829902][T28824] usb 5-1: config 179 has no interface number 0 [ 2218.829949][T28824] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2218.829976][T28824] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2218.830003][T28824] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2218.830028][T28824] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2218.830054][T28824] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2218.830203][T28824] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2218.830227][T28824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2218.938676][T31178] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2219.822414][T31183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2219.831275][T31183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2220.476201][ T6808] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2220.479472][T13157] Bluetooth: hci0: command 0x0406 tx timeout [ 2220.486956][T28484] usb 5-1: USB disconnect, device number 32 [ 2220.487041][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2220.487102][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2220.507030][ T6808] usb 2-1: USB disconnect, device number 26 [ 2220.668073][T27745] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 2223.038772][T27745] Bluetooth: hci4: command 0x0406 tx timeout [ 2223.041972][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2223.042043][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.301166][T28484] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2224.349628][T28484] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 2224.349656][T28484] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2224.349678][T28484] usb 7-1: config 8 has no interface number 0 [ 2224.349748][T28484] usb 7-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2224.349772][T28484] usb 7-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 255 [ 2224.349793][T28484] usb 7-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2224.349818][T28484] usb 7-1: config 8 interface 177 has no altsetting 0 [ 2224.349850][T28484] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2224.349873][T28484] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2224.356058][T31218] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2224.588738][T21735] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 2224.593425][T28484] usb 7-1: string descriptor 0 read error: -71 [ 2224.598565][T28484] ir_toy 7-1:8.177: required endpoints not found [ 2224.629091][T28484] usb 7-1: USB disconnect, device number 19 [ 2224.738671][T21735] usb 8-1: config 8 has an invalid interface number: 177 but max is 0 [ 2224.738699][T21735] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2224.738715][T21735] usb 8-1: config 8 has no interface number 0 [ 2224.738757][T21735] usb 8-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2224.738781][T21735] usb 8-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 255 [ 2224.738804][T21735] usb 8-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2224.738828][T21735] usb 8-1: config 8 interface 177 has no altsetting 0 [ 2224.738859][T21735] usb 8-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2224.738880][T21735] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2224.845256][T31228] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 2225.049674][T21735] usb 8-1: string descriptor 0 read error: -71 [ 2225.064105][T21735] ir_toy 8-1:8.177: required endpoints not found [ 2225.076269][T27745] Bluetooth: hci4: command 0x0406 tx timeout [ 2225.081801][T21735] usb 8-1: USB disconnect, device number 17 [ 2227.706302][ T6003] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2229.069052][ T6003] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 2229.069079][ T6003] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2229.069097][ T6003] usb 2-1: config 8 has no interface number 0 [ 2229.069140][ T6003] usb 2-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2229.069164][ T6003] usb 2-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 255 [ 2229.069185][ T6003] usb 2-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2229.069208][ T6003] usb 2-1: config 8 interface 177 has no altsetting 0 [ 2229.069237][ T6003] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2229.069258][ T6003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2229.074625][T31274] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2229.336703][ T6003] usb 2-1: string descriptor 0 read error: -71 [ 2229.339836][ T6003] ir_toy 2-1:8.177: required endpoints not found [ 2229.369806][ T6003] usb 2-1: USB disconnect, device number 27 [ 2229.382642][T22199] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2229.539901][T22199] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 2229.539930][T22199] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2229.539949][T22199] usb 7-1: config 8 has no interface number 0 [ 2229.539993][T22199] usb 7-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2229.540017][T22199] usb 7-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 255 [ 2229.540039][T22199] usb 7-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2229.540064][T22199] usb 7-1: config 8 interface 177 has no altsetting 0 [ 2229.540097][T22199] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2229.540119][T22199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2229.638765][T31291] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2229.850516][T22199] usb 7-1: string descriptor 0 read error: -71 [ 2229.853481][T22199] ir_toy 7-1:8.177: required endpoints not found [ 2229.887969][T22199] usb 7-1: USB disconnect, device number 20 [ 2230.276322][ T6808] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 2230.546234][ T6808] usb 8-1: Using ep0 maxpacket: 8 [ 2230.549548][ T6808] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 2230.549575][ T6808] usb 8-1: config 179 has no interface number 0 [ 2230.549622][ T6808] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2230.549649][ T6808] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2230.549674][ T6808] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2230.549737][ T6808] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2230.549764][ T6808] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2230.549804][ T6808] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2230.549827][ T6808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2230.602138][T31313] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2231.461407][T31328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2231.472244][T31328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2232.184009][ T6808] usb 8-1: USB disconnect, device number 18 [ 2232.184083][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2232.184144][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2233.868876][T28826] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2234.018825][T28826] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 2234.018856][T28826] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2234.018875][T28826] usb 5-1: config 8 has no interface number 0 [ 2234.018925][T28826] usb 5-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2234.018951][T28826] usb 5-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 255 [ 2234.018975][T28826] usb 5-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2234.019003][T28826] usb 5-1: config 8 interface 177 has no altsetting 0 [ 2234.019036][T28826] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2234.019058][T28826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.024997][T31330] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2234.249619][T28826] usb 5-1: string descriptor 0 read error: -71 [ 2234.252553][T28826] ir_toy 5-1:8.177: required endpoints not found [ 2234.299840][T28826] usb 5-1: USB disconnect, device number 33 [ 2235.436310][T28824] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2235.574326][T31384] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7512'. [ 2235.586430][T28824] usb 7-1: Using ep0 maxpacket: 8 [ 2235.588366][T28824] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 2235.588392][T28824] usb 7-1: config 179 has no interface number 0 [ 2235.588446][T28824] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2235.588471][T28824] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2235.588498][T28824] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2235.588522][T28824] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2235.588548][T28824] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2235.588589][T28824] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2235.588612][T28824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2235.766991][T31367] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2237.207797][T31390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2237.222484][T31390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2237.857844][T28484] usb 7-1: USB disconnect, device number 21 [ 2237.858099][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2237.858160][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2238.393744][T31410] FAULT_INJECTION: forcing a failure. [ 2238.393744][T31410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2238.393778][T31410] CPU: 1 UID: 0 PID: 31410 Comm: syz.1.7520 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2238.393797][T31410] Tainted: [L]=SOFTLOCKUP [ 2238.393801][T31410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2238.393808][T31410] Call Trace: [ 2238.393813][T31410] [ 2238.393818][T31410] dump_stack_lvl+0xe8/0x150 [ 2238.393837][T31410] should_fail_ex+0x46c/0x600 [ 2238.393854][T31410] _copy_from_iter+0x1cd/0x1630 [ 2238.393870][T31410] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2238.393887][T31410] ? __pfx__copy_from_iter+0x10/0x10 [ 2238.393904][T31410] ? set_page_refcounted+0xa0/0x1e0 [ 2238.393921][T31410] ? page_copy_sane+0x4e/0x280 [ 2238.393936][T31410] copy_page_from_iter+0xdd/0x170 [ 2238.393953][T31410] tun_get_user+0x1d40/0x3de0 [ 2238.393968][T31410] ? tun_get_user+0x6fc/0x3de0 [ 2238.393987][T31410] ? __pfx_tun_get_user+0x10/0x10 [ 2238.394001][T31410] ? __lock_acquire+0x6b6/0x2cf0 [ 2238.394016][T31410] ? kstrtoull+0x12f/0x1d0 [ 2238.394033][T31410] ? ref_tracker_alloc+0x2fe/0x450 [ 2238.394046][T31410] ? get_pid_task+0x20/0x1f0 [ 2238.394061][T31410] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2238.394076][T31410] ? tun_get+0x1c/0x2f0 [ 2238.394087][T31410] ? tun_get+0x1c/0x2f0 [ 2238.394102][T31410] ? tun_get+0x1c/0x2f0 [ 2238.394114][T31410] ? tun_get+0x1c/0x2f0 [ 2238.394127][T31410] tun_chr_write_iter+0x119/0x200 [ 2238.394141][T31410] vfs_write+0x5d5/0xb40 [ 2238.394158][T31410] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2238.394174][T31410] ? __pfx_vfs_write+0x10/0x10 [ 2238.394192][T31410] ? __fget_files+0x2a/0x420 [ 2238.394208][T31410] ksys_write+0x14b/0x260 [ 2238.394223][T31410] ? __pfx_ksys_write+0x10/0x10 [ 2238.394242][T31410] do_syscall_64+0xec/0xf80 [ 2238.394253][T31410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2238.394263][T31410] ? trace_irq_disable+0x37/0x100 [ 2238.394275][T31410] ? clear_bhb_loop+0x60/0xb0 [ 2238.394287][T31410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2238.394297][T31410] RIP: 0033:0x7fbab334e1ff [ 2238.394313][T31410] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2238.394322][T31410] RSP: 002b:00007fbab15ae000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2238.394334][T31410] RAX: ffffffffffffffda RBX: 00007fbab35a5fa0 RCX: 00007fbab334e1ff [ 2238.394343][T31410] RDX: 000000000000003e RSI: 0000200000000180 RDI: 00000000000000c8 [ 2238.394350][T31410] RBP: 00007fbab15ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2238.394356][T31410] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 2238.394363][T31410] R13: 00007fbab35a6038 R14: 00007fbab35a5fa0 R15: 00007ffc81a62c68 [ 2238.394379][T31410] [ 2239.429324][T31435] FAULT_INJECTION: forcing a failure. [ 2239.429324][T31435] name failslab, interval 1, probability 0, space 0, times 0 [ 2239.429362][T31435] CPU: 0 UID: 0 PID: 31435 Comm: syz.6.7519 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2239.429390][T31435] Tainted: [L]=SOFTLOCKUP [ 2239.429397][T31435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2239.429410][T31435] Call Trace: [ 2239.429418][T31435] [ 2239.429427][T31435] dump_stack_lvl+0xe8/0x150 [ 2239.429458][T31435] should_fail_ex+0x46c/0x600 [ 2239.429487][T31435] ? __alloc_skb+0x1dc/0x3a0 [ 2239.429508][T31435] should_failslab+0xa8/0x100 [ 2239.429529][T31435] ? __alloc_skb+0x1dc/0x3a0 [ 2239.429548][T31435] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 2239.429576][T31435] ? lockdep_hardirqs_on+0x7b/0x110 [ 2239.429598][T31435] ? __alloc_skb+0x198/0x3a0 [ 2239.429620][T31435] __alloc_skb+0x1dc/0x3a0 [ 2239.429645][T31435] netlink_sendmsg+0x5c6/0xb30 [ 2239.429680][T31435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2239.429713][T31435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2239.429737][T31435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2239.429760][T31435] __sock_sendmsg+0x21c/0x270 [ 2239.429789][T31435] ____sys_sendmsg+0x508/0x810 [ 2239.429816][T31435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2239.429843][T31435] ? import_iovec+0x74/0xa0 [ 2239.429863][T31435] ___sys_sendmsg+0x21f/0x2a0 [ 2239.429889][T31435] ? __pfx____sys_sendmsg+0x10/0x10 [ 2239.429946][T31435] ? __fget_files+0x2a/0x420 [ 2239.429965][T31435] ? __fget_files+0x3a6/0x420 [ 2239.429996][T31435] __x64_sys_sendmsg+0x1a1/0x260 [ 2239.430022][T31435] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2239.430055][T31435] ? __pfx_ksys_write+0x10/0x10 [ 2239.430093][T31435] do_syscall_64+0xec/0xf80 [ 2239.430112][T31435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2239.430130][T31435] ? trace_irq_disable+0x37/0x100 [ 2239.430157][T31435] ? clear_bhb_loop+0x60/0xb0 [ 2239.430181][T31435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2239.430200][T31435] RIP: 0033:0x7f27dbabf749 [ 2239.430218][T31435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2239.430234][T31435] RSP: 002b:00007f27d9d26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2239.430257][T31435] RAX: ffffffffffffffda RBX: 00007f27dbd15fa0 RCX: 00007f27dbabf749 [ 2239.430272][T31435] RDX: 0000000000004800 RSI: 00002000000005c0 RDI: 0000000000000003 [ 2239.430286][T31435] RBP: 00007f27d9d26090 R08: 0000000000000000 R09: 0000000000000000 [ 2239.430299][T31435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2239.430312][T31435] R13: 00007f27dbd16038 R14: 00007f27dbd15fa0 R15: 00007ffec6da97f8 [ 2239.430343][T31435] [ 2239.566550][ T6159] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 2239.736267][ T6159] usb 8-1: Using ep0 maxpacket: 8 [ 2239.738504][ T6159] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 2239.738532][ T6159] usb 8-1: config 179 has no interface number 0 [ 2239.738567][ T6159] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2239.738581][ T6159] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2239.738595][ T6159] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2239.738608][ T6159] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2239.738622][ T6159] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2239.738645][ T6159] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2239.738656][ T6159] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2239.807740][T31431] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2239.986373][T28824] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2240.170394][T28824] usb 5-1: Using ep0 maxpacket: 16 [ 2240.184246][T28824] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 2240.184274][T28824] usb 5-1: config 1 has no interface number 0 [ 2240.186865][T28824] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2240.186895][T28824] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2240.186916][T28824] usb 5-1: config 1 interface 105 has no altsetting 0 [ 2240.210411][T28824] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2240.210552][T28824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.210575][T28824] usb 5-1: Product: syz [ 2240.210589][T28824] usb 5-1: Manufacturer: syz [ 2240.210603][T28824] usb 5-1: SerialNumber: syz [ 2240.439536][T31446] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2240.439610][T31446] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2240.913398][T31446] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2240.913796][T31446] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2241.537306][T28824] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 2241.538855][T28824] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 2242.870806][T31431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2242.871107][T31431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2242.904728][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2242.904756][ T6003] usb 8-1: USB disconnect, device number 19 [ 2242.904829][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2243.135125][T28824] aqc111 5-1:1.105 eth4: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f6:9f:16:ab:d4:52 [ 2243.151446][T28824] usb 5-1: USB disconnect, device number 34 [ 2243.154715][T28824] aqc111 5-1:1.105 eth4: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 2244.493289][T28824] aqc111 5-1:1.105 eth4 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2244.493431][T28824] aqc111 5-1:1.105 eth4 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2244.493694][T28824] aqc111 5-1:1.105 eth4 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 2244.606271][ T6003] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2244.759270][ T6003] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 2244.759299][ T6003] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2244.759319][ T6003] usb 2-1: config 8 has no interface number 0 [ 2244.759362][ T6003] usb 2-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2244.759389][ T6003] usb 2-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 255 [ 2244.759413][ T6003] usb 2-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2244.759445][ T6003] usb 2-1: config 8 interface 177 has no altsetting 0 [ 2244.759479][ T6003] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2244.759502][ T6003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2244.766325][T31502] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2244.969086][ T6003] usb 2-1: string descriptor 0 read error: -71 [ 2244.984285][ T6003] ir_toy 2-1:8.177: required endpoints not found [ 2245.010748][ T6003] usb 2-1: USB disconnect, device number 28 [ 2245.156826][T31526] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7570'. [ 2245.856272][ T6003] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2246.024702][T31554] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7582'. [ 2246.041565][ T6003] usb 5-1: Using ep0 maxpacket: 8 [ 2246.043975][ T6003] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2246.044000][ T6003] usb 5-1: config 179 has no interface number 0 [ 2246.044058][ T6003] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2246.044083][ T6003] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2246.044129][ T6003] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2246.044154][ T6003] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2246.044177][ T6003] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2246.044216][ T6003] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2246.044236][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2246.145018][T31540] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2246.359853][T31558] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7584'. [ 2247.680235][T31563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.690252][T31563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2248.352711][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2248.352784][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2248.352852][T28826] usb 5-1: USB disconnect, device number 35 [ 2249.426352][T28826] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 2249.578776][T28826] usb 8-1: config 8 has an invalid interface number: 177 but max is 0 [ 2249.578807][T28826] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2249.578824][T28826] usb 8-1: config 8 has no interface number 0 [ 2249.578869][T28826] usb 8-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2249.578894][T28826] usb 8-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 255 [ 2249.578918][T28826] usb 8-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2249.578946][T28826] usb 8-1: config 8 interface 177 has no altsetting 0 [ 2249.578976][T28826] usb 8-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2249.579007][T28826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2249.598872][T31576] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2249.804321][T28826] usb 8-1: string descriptor 0 read error: -71 [ 2249.810413][T28826] ir_toy 8-1:8.177: required endpoints not found [ 2249.850087][T28826] usb 8-1: USB disconnect, device number 20 [ 2249.939344][T31597] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7597'. [ 2250.381098][T31565] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2250.526289][T31565] usb 4-1: Using ep0 maxpacket: 8 [ 2250.531705][T31565] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 2250.531732][T31565] usb 4-1: config 179 has no interface number 0 [ 2250.531778][T31565] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2250.531802][T31565] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2250.531827][T31565] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2250.531851][T31565] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2250.531876][T31565] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2250.531915][T31565] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2250.531937][T31565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2250.571789][T31601] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2251.384729][T31623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2251.391688][T31623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2252.095416][T22202] usb 4-1: USB disconnect, device number 87 [ 2252.095446][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2252.095502][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2252.231070][T31628] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7610'. [ 2252.267851][T30285] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 2252.446229][T30285] usb 8-1: Using ep0 maxpacket: 16 [ 2252.448941][T30285] usb 8-1: config 0 has an invalid interface number: 77 but max is 0 [ 2252.448975][T30285] usb 8-1: config 0 has no interface number 0 [ 2252.449027][T30285] usb 8-1: config 0 interface 77 has no altsetting 0 [ 2252.452985][T30285] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=8c.11 [ 2252.453016][T30285] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2252.453036][T30285] usb 8-1: Product: syz [ 2252.453051][T30285] usb 8-1: Manufacturer: syz [ 2252.453064][T30285] usb 8-1: SerialNumber: syz [ 2252.521093][T30285] usb 8-1: config 0 descriptor?? [ 2252.754562][T31621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2252.755082][T31621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2252.768430][T31621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2252.768934][T31621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2252.783270][T31621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2252.783785][T31621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2252.795024][T30285] ath6kl: Failed to submit usb control message: -71 [ 2252.795073][T30285] ath6kl: unable to send the bmi data to the device: -71 [ 2252.795087][T30285] ath6kl: Unable to send get target info: -71 [ 2252.876573][T30285] ath6kl: Failed to init ath6kl core: -71 [ 2252.877701][T30285] ath6kl_usb 8-1:0.77: probe with driver ath6kl_usb failed with error -71 [ 2252.885446][T30285] usb 8-1: USB disconnect, device number 21 [ 2253.569542][T31657] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7624'. [ 2253.926728][T28826] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2254.079129][T28826] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 2254.079158][T28826] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2254.079176][T28826] usb 7-1: config 8 has no interface number 0 [ 2254.079219][T28826] usb 7-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2254.079244][T28826] usb 7-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 255 [ 2254.079267][T28826] usb 7-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2254.079392][T28826] usb 7-1: config 8 interface 177 has no altsetting 0 [ 2254.079426][T28826] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2254.079448][T28826] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2254.102330][T31642] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2254.323757][T28826] usb 7-1: string descriptor 0 read error: -71 [ 2254.325514][T28826] ir_toy 7-1:8.177: required endpoints not found [ 2254.350472][T28826] usb 7-1: USB disconnect, device number 22 [ 2254.576293][T28484] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2254.756521][T28484] usb 2-1: Using ep0 maxpacket: 8 [ 2254.764648][T28484] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2254.764676][T28484] usb 2-1: config 179 has no interface number 0 [ 2254.764723][T28484] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2254.764750][T28484] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2254.764777][T28484] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2254.764802][T28484] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2254.764836][T28484] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2254.764878][T28484] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2254.764900][T28484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2254.916979][T31680] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2256.013501][T31695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2256.037476][T31695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2256.648459][T28484] usb 2-1: USB disconnect, device number 29 [ 2256.694501][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2256.770927][T31698] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7638'. [ 2256.846316][T15802] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 2257.046233][T15802] usb 7-1: Using ep0 maxpacket: 16 [ 2257.048631][T15802] usb 7-1: config 0 has an invalid interface number: 77 but max is 0 [ 2257.048666][T15802] usb 7-1: config 0 has no interface number 0 [ 2257.048712][T15802] usb 7-1: config 0 interface 77 has no altsetting 0 [ 2257.051671][T15802] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=8c.11 [ 2257.051697][T15802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2257.051715][T15802] usb 7-1: Product: syz [ 2257.051729][T15802] usb 7-1: Manufacturer: syz [ 2257.051742][T15802] usb 7-1: SerialNumber: syz [ 2257.118908][T15802] usb 7-1: config 0 descriptor?? [ 2257.370788][T31694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2257.373961][T31694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2257.396098][T31694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2257.398619][T31694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2257.404934][T31694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2257.413258][T31694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2257.441002][T15802] ath6kl: Failed to submit usb control message: -71 [ 2257.441054][T15802] ath6kl: unable to send the bmi data to the device: -71 [ 2257.441068][T15802] ath6kl: Unable to send get target info: -71 [ 2257.496158][T15802] ath6kl: Failed to init ath6kl core: -71 [ 2257.498131][T15802] ath6kl_usb 7-1:0.77: probe with driver ath6kl_usb failed with error -71 [ 2257.516672][T15802] usb 7-1: USB disconnect, device number 23 [ 2258.146284][T15802] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2258.276269][T15802] usb 5-1: device descriptor read/64, error -71 [ 2258.316649][T28826] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2258.478586][T28826] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 2258.478615][T28826] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2258.478634][T28826] usb 4-1: config 8 has no interface number 0 [ 2258.478683][T28826] usb 4-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2258.478709][T28826] usb 4-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8D has invalid maxpacket 255 [ 2258.478733][T28826] usb 4-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2258.478759][T28826] usb 4-1: config 8 interface 177 has no altsetting 0 [ 2258.478791][T28826] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2258.478813][T28826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2258.484019][T31717] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2258.485620][T31730] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7654'. [ 2258.516267][T15802] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2258.516602][ T5871] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 2258.666330][T15802] usb 5-1: device descriptor read/64, error -71 [ 2258.687552][T28826] usb 4-1: string descriptor 0 read error: -71 [ 2258.690396][T28826] ir_toy 4-1:8.177: required endpoints not found [ 2258.696235][ T5871] usb 8-1: Using ep0 maxpacket: 8 [ 2258.706004][T28826] usb 4-1: USB disconnect, device number 88 [ 2258.709332][ T5871] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 2258.709358][ T5871] usb 8-1: config 179 has no interface number 0 [ 2258.709405][ T5871] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2258.709432][ T5871] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2258.709460][ T5871] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2258.709486][ T5871] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2258.709511][ T5871] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2258.709552][ T5871] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2258.709573][ T5871] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2258.776542][T15802] usb usb5-port1: attempt power cycle [ 2258.843845][T31722] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 2259.887135][T31744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2259.898693][T31744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2260.522280][T28826] usb 8-1: USB disconnect, device number 22 [ 2260.522738][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2260.522818][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2260.616350][T15802] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2260.645864][T15802] usb 5-1: device descriptor read/8, error -71 [ 2261.076315][ T6159] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2261.081343][T31760] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7668'. [ 2261.126305][T30285] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2261.180420][T15802] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2261.197924][T15802] usb 5-1: Using ep0 maxpacket: 8 [ 2261.209477][T15802] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2261.209506][T15802] usb 5-1: config 179 has no interface number 0 [ 2261.209555][T15802] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2261.209581][T15802] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2261.209608][T15802] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2261.209634][T15802] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2261.209660][T15802] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2261.209702][T15802] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2261.209724][T15802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2261.215863][T31752] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2261.226287][ T6159] usb 2-1: Using ep0 maxpacket: 8 [ 2261.272205][ T6159] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2261.272234][ T6159] usb 2-1: config 179 has no interface number 0 [ 2261.272284][ T6159] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2261.272310][ T6159] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2261.272337][ T6159] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2261.272362][ T6159] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2261.272387][ T6159] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2261.272430][ T6159] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2261.272452][ T6159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2261.276320][T30285] usb 4-1: Using ep0 maxpacket: 16 [ 2261.278944][T30285] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 2261.278969][T30285] usb 4-1: config 1 has no interface number 0 [ 2261.279019][T30285] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2261.279044][T30285] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2261.279067][T30285] usb 4-1: config 1 interface 105 has no altsetting 0 [ 2261.474561][T30285] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2261.474593][T30285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.474614][T30285] usb 4-1: Product: syz [ 2261.474629][T30285] usb 4-1: Manufacturer: syz [ 2261.474644][T30285] usb 4-1: SerialNumber: syz [ 2261.561963][T31753] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2261.608334][T31754] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2261.608820][T31754] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2262.876305][T31764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2262.876666][T31764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2264.484692][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2264.484692][T28484] usb 5-1: USB disconnect, device number 39 [ 2264.484913][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2264.511960][T30285] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 2264.728952][T30285] usb 4-1: USB disconnect, device number 89 [ 2264.923023][ T6159] usb 2-1: USB disconnect, device number 30 [ 2264.923102][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2264.923164][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2264.942268][T31782] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7675'. [ 2265.850720][T31787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7679'. [ 2266.269153][T28826] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 2266.426788][T28826] usb 8-1: Using ep0 maxpacket: 8 [ 2266.428555][T28826] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 2266.428582][T28826] usb 8-1: config 179 has no interface number 0 [ 2266.428628][T28826] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2266.428653][T28826] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2266.428679][T28826] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2266.428703][T28826] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2266.428729][T28826] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2266.428768][T28826] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2266.428790][T28826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2266.535496][T31794] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2266.546310][T28484] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2266.640334][T31812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7671'. [ 2266.721019][T28484] usb 4-1: Using ep0 maxpacket: 8 [ 2266.879385][T28484] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 2266.879416][T28484] usb 4-1: config 179 has no interface number 0 [ 2266.879596][T28484] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2266.879624][T28484] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2266.879652][T28484] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2266.879796][T28484] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2266.879823][T28484] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2266.879865][T28484] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2266.880004][T28484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.769221][T31803] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2267.822471][T31816] Process accounting resumed [ 2268.714019][T31820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2268.722670][T31820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2271.627824][T31847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7696'. [ 2272.756358][ T6159] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2272.845678][T31867] netlink: 'syz.6.7706': attribute type 1 has an invalid length. [ 2272.845700][T31867] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7706'. [ 2272.845716][T31867] NCSI netlink: No device for ifindex 0 [ 2272.916320][ T6159] usb 2-1: Using ep0 maxpacket: 8 [ 2272.933268][ T6159] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2272.933296][ T6159] usb 2-1: config 179 has no interface number 0 [ 2272.933343][ T6159] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2272.933370][ T6159] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2272.933397][ T6159] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2272.933422][ T6159] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2272.933529][ T6159] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2272.933576][ T6159] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2272.933598][ T6159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.055633][T31865] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2280.596372][T13157] Bluetooth: hci1: command 0x0406 tx timeout [ 2282.821695][T28823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2282.896989][T28823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2282.900310][T28823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2282.940060][T28823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2282.970423][T28823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2283.570830][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.571027][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2287.035243][T31869] chnl_net:caif_netlink_parms(): no params data found [ 2288.378981][T31880] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2288.400040][T31880] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2288.423079][T31880] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2288.445956][T31880] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2288.466949][T31880] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2344.468953][T31888] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2344.681318][T31888] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2344.809150][T31888] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2345.009562][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.009783][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.071923][T31888] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2345.323462][T31888] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2406.450562][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.453766][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2424.356927][ T38] INFO: task kworker/1:10:6159 blocked for more than 143 seconds. [ 2424.357074][ T38] Tainted: G L syzkaller #0 [ 2424.357087][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2424.357097][ T38] task:kworker/1:10 state:D stack:20984 pid:6159 tgid:6159 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2424.357152][ T38] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 2424.357298][ T38] Call Trace: [ 2424.357306][ T38] [ 2424.357321][ T38] __schedule+0x145f/0x5070 [ 2424.357372][ T38] ? __pfx___schedule+0x10/0x10 [ 2424.357524][ T38] ? irqentry_exit+0x5dd/0x660 [ 2424.357547][ T38] ? __pfx___schedule+0x10/0x10 [ 2424.357578][ T38] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 2424.357615][ T38] rt_mutex_schedule+0x77/0xf0 [ 2424.357760][ T38] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 2424.357784][ T38] __rt_mutex_slowlock_locked+0x1dfe/0x25e0 [ 2424.357806][ T38] ? __lock_acquire+0x146f/0x2cf0 [ 2424.357841][ T38] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 2424.357985][ T38] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 2424.358019][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2424.358046][ T38] ? rcu_is_watching+0x15/0xb0 [ 2424.358069][ T38] __rwbase_read_lock+0xbc/0x180 [ 2424.358412][ T38] ? __pfx___rwbase_read_lock+0x10/0x10 [ 2424.358447][ T38] down_read+0x127/0x1f0 [ 2424.358468][ T38] ? __pfx_down_read+0x10/0x10 [ 2424.358490][ T38] ? __asan_memset+0x22/0x50 [ 2424.361231][ T38] ? blake2s_final+0x14c/0x260 [ 2424.361263][ T38] wg_noise_handshake_consume_initiation+0x4bf/0x900 [ 2424.361302][ T38] ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10 [ 2424.364556][ T38] ? __asan_memset+0x22/0x50 [ 2424.364602][ T38] ? __pfx_compute_mac1+0x10/0x10 [ 2424.370984][ T38] ? wg_cookie_validate_packet+0x208/0x320 [ 2424.371037][ T38] ? __local_bh_enable_ip+0x1af/0x2c0 [ 2424.394174][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 2424.394214][ T38] wg_packet_handshake_receive_worker+0x67d/0xf90 [ 2424.394237][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 2424.394268][ T38] ? look_up_lock_class+0x57/0x110 [ 2424.420005][ T38] ? wg_packet_handshake_receive_worker+0x152/0xf90 [ 2424.420057][ T38] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 2424.436515][ T38] ? finish_task_switch+0x162/0x940 [ 2424.436559][ T38] ? do_raw_spin_lock+0x121/0x290 [ 2424.447611][ T38] ? lock_acquire+0x107/0x340 [ 2424.447651][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2424.447678][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 2424.474929][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 2424.474975][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 2424.474998][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 2424.532306][ T38] process_scheduled_works+0xad1/0x1770 [ 2424.532368][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 2424.532389][ T38] ? do_raw_spin_lock+0x121/0x290 [ 2424.536391][ T38] worker_thread+0x8a0/0xda0 [ 2424.536447][ T38] kthread+0x711/0x8a0 [ 2424.554978][ T38] ? __pfx_worker_thread+0x10/0x10 [ 2424.555012][ T38] ? __pfx_kthread+0x10/0x10 [ 2424.555037][ T38] ? rt_spin_unlock+0x150/0x200 [ 2424.573558][ T38] ? rt_spin_unlock+0x161/0x200 [ 2424.573594][ T38] ? __pfx_kthread+0x10/0x10 [ 2424.573624][ T38] ret_from_fork+0x510/0xa50 [ 2424.590111][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2424.590144][ T38] ? __switch_to+0xc9e/0x1480 [ 2424.590178][ T38] ? __pfx_kthread+0x10/0x10 [ 2424.609923][ T38] ret_from_fork_asm+0x1a/0x30 [ 2424.609981][ T38] [ 2424.629975][ T38] INFO: task syz.3.7704:31861 blocked for more than 143 seconds. [ 2424.629998][ T38] Tainted: G L syzkaller #0 [ 2424.654639][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2424.654654][ T38] task:syz.3.7704 state:D stack:24952 pid:31861 tgid:31861 ppid:27890 task_flags:0x400040 flags:0x00080002 [ 2424.654709][ T38] Call Trace: [ 2424.654717][ T38] [ 2424.654731][ T38] __schedule+0x145f/0x5070 [ 2424.671648][ T38] ? __pfx___schedule+0x10/0x10 [ 2424.671700][ T38] ? schedule+0x91/0x360 [ 2424.687773][ T38] schedule+0x165/0x360 [ 2424.687816][ T38] schedule_timeout+0x9a/0x270 [ 2424.687847][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 2424.702779][ T38] ? do_raw_spin_lock+0x121/0x290 [ 2424.702823][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 2424.702844][ T38] ? wait_for_completion+0x267/0x5d0 [ 2424.719867][ T38] wait_for_completion+0x2bf/0x5d0 [ 2424.719897][ T38] ? rt_spin_unlock+0x150/0x200 [ 2424.719935][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 2424.744498][ T38] __synchronize_srcu+0x2ec/0x380 [ 2424.744539][ T38] ? reacquire_held_locks+0x104/0x190 [ 2424.752263][ T38] ? __pfx___synchronize_srcu+0x10/0x10 [ 2424.752302][ T38] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 2424.752332][ T38] ? read_tsc+0x9/0x20 [ 2424.752349][ T38] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 2424.780605][ T38] ? synchronize_srcu+0x25e/0x280 [ 2424.780648][ T38] mmu_notifier_unregister+0x2c1/0x3b0 [ 2424.780683][ T38] kvm_put_kvm+0x606/0xa80 [ 2424.826665][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 2424.826704][ T38] kvm_vm_release+0x46/0x50 [ 2424.826728][ T38] __fput+0x45b/0xa80 [ 2424.829481][ T38] task_work_run+0x1d4/0x260 [ 2424.829520][ T38] ? __pfx_task_work_run+0x10/0x10 [ 2424.836460][ T38] exit_to_user_mode_loop+0xef/0x4e0 [ 2424.836496][ T38] ? rcu_is_watching+0x15/0xb0 [ 2424.836519][ T38] do_syscall_64+0x2b7/0xf80 [ 2424.847858][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2424.847894][ T38] ? clear_bhb_loop+0x60/0xb0 [ 2424.847919][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2424.847939][ T38] RIP: 0033:0x7f89dd52f749 [ 2424.867500][ T38] RSP: 002b:00007fffb9247748 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2424.867531][ T38] RAX: 0000000000000000 RBX: 00007f89dd787da0 RCX: 00007f89dd52f749 [ 2424.867545][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2424.867558][ T38] RBP: 00007f89dd787da0 R08: 000000000001652c R09: 0000000db9247a3f [ 2424.867573][ T38] R10: 00007f89dd787cb0 R11: 0000000000000246 R12: 000000000022ae79 [ 2424.867587][ T38] R13: 00007f89dd786090 R14: ffffffffffffffff R15: 00007fffb9247860 [ 2424.886376][ T38] [ 2424.886417][ T38] [ 2424.886417][ T38] Showing all locks held in the system: [ 2424.886429][ T38] 4 locks held by ktimers/0/16: [ 2424.886443][ T38] 4 locks held by pr/legacy/17: [ 2424.900993][ T38] 4 locks held by rcuc/1/28: [ 2424.901010][ T38] #0: ffffffff8d44eac0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 2424.901077][ T38] #1: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 2424.918684][ T38] #2: ffffffff8d5aea60 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x211/0x1af0 [ 2424.942930][ T38] #3: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2424.943001][ T38] 1 lock held by khungtaskd/38: [ 2424.943012][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2424.973576][ T38] 3 locks held by kcompactd0/41: [ 2424.973589][ T38] #0: ffff8880b8933cd0 ((lock)#2){+.+.}-{3:3}, at: lru_add_drain_cpu_zone+0x142/0x410 [ 2424.996815][ T38] #1: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 2424.996877][ T38] #2: ffff8880b8942cd8 (&pcp->lock){+.+.}-{3:3}, at: drain_pages_zone+0x99/0x160 [ 2425.016020][ T38] 6 locks held by kworker/u8:3/58: [ 2425.016034][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2425.040773][ T38] #1: ffffc9000124fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2425.067758][ T38] #2: ffff88805d953300 (&devlink->lock_key#42){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 2425.067837][ T38] #3: ffff888092fd1920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 2425.115031][ T38] #4: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 2425.118492][ T38] #5: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xda0/0x2960 [ 2425.118546][ T38] 4 locks held by kworker/u8:4/69: [ 2425.140888][ T38] 4 locks held by kworker/0:2/805: [ 2425.140916][ T38] 6 locks held by kworker/u8:9/1410: [ 2425.140928][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2425.169570][ T38] #1: ffffc9000521fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2425.169637][ T38] #2: ffff88801eef0300 (&devlink->lock_key#25){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 2425.183427][ T38] #3: ffff888049b9c120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 2425.206362][ T38] #4: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 2425.206426][ T38] #5: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xda0/0x2960 [ 2425.213859][ T38] 6 locks held by kworker/u8:10/2136: [ 2425.213873][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2425.231701][ T38] #1: ffffc900058afbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2425.231767][ T38] #2: ffff888048c0f300 (&devlink->lock_key#24){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 2425.241438][ T38] #3: ffff888049a27520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 2425.265447][ T38] #4: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 2425.265510][ T38] #5: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xda0/0x2960 [ 2425.292172][ T38] 6 locks held by kworker/u8:11/3285: [ 2425.292192][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2425.314428][ T38] #1: ffffc9000c817bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2425.314496][ T38] #2: ffff88803391e300 (&devlink->lock_key#41){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 2425.338345][ T38] #3: ffff88801e6a2d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 2425.358011][ T38] #4: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 2425.358077][ T38] #5: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xda0/0x2960 [ 2425.398768][ T38] 4 locks held by kworker/u8:12/3456: [ 2425.398782][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2425.416384][ T38] #1: ffffc9000ca77bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2425.416449][ T38] #2: ffff88809b0608b8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x450 [ 2425.461422][ T38] #3: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xda0/0x2960 [ 2425.461484][ T38] 3 locks held by kworker/u8:17/4321: [ 2425.461497][ T38] #0: ffff88814d31e938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2425.496720][ T38] #1: ffffc9000d747bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2425.496783][ T38] #2: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 2425.537408][ T38] 1 lock held by klogd/5159: [ 2425.537428][ T38] 5 locks held by udevd/5170: [ 2425.537440][ T38] #0: ffffffff8d66d550 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x131/0x4b0 [ 2425.537500][ T38] #1: ffff8880107cb6b0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x125/0x1b40 [ 2425.538770][ T38] #2: ffff888053f2dcf0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x20d/0x1b40 [ 2425.540427][ T38] #3: ffffffff8d6d4830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2425.540484][ T38] #4: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2425.541091][ T38] 2 locks held by getty/5561: [ 2425.541105][ T38] #0: ffff88814046c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2425.541157][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 2425.541738][ T38] 4 locks held by kworker/1:10/6159: [ 2425.541750][ T38] #0: ffff88803d1f8538 ((wq_completion)wg-kex-wg1#19){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2425.541804][ T38] #1: ffffc900058dfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2425.542910][ T38] #2: ffff888034e555f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 2425.544001][ T38] #3: ffff888010cad8b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4bf/0x900 [ 2425.544061][ T38] 2 locks held by kworker/0:15/6525: [ 2425.544640][ T38] 6 locks held by kworker/u8:22/6755: [ 2425.544654][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2425.544710][ T38] #1: ffffc9000c7c7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2425.545303][ T38] #2: ffff888027960300 (&devlink->lock_key#40){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 2425.545364][ T38] #3: ffff8880290d9520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 2425.545742][ T38] #4: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 2425.545797][ T38] #5: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xda0/0x2960 [ 2425.584388][ T38] 6 locks held by kworker/u8:7/11287: [ 2425.584405][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2425.584467][ T38] #1: ffffc900050dfbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2425.606841][ T38] #2: ffff888092a13300 (&devlink->lock_key#26){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 2425.632701][ T38] #3: ffff88805e089120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 2425.632769][ T38] #4: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 2425.656360][ T38] #5: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xda0/0x2960 [ 2425.656413][ T38] 6 locks held by kworker/u8:14/11423: [ 2425.673458][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2425.673531][ T38] #1: ffffc900056ffbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2425.683398][ T38] #2: ffff88804bbe6300 (&devlink->lock_key#43){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 2425.709693][ T38] #3: ffff888048c35920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 2425.709762][ T38] #4: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 2425.733260][ T38] #5: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xda0/0x2960 [ 2425.749735][ T38] 5 locks held by kworker/u9:3/13157: [ 2425.749756][ T38] #0: ffff8880331d8938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2425.749824][ T38] #1: ffffc900057efbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2425.773305][ T38] #2: ffff888030be00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_event_packet+0x162/0x1260 [ 2425.819097][ T38] #3: ffffffff8d6d4830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2425.819165][ T38] #4: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2425.846637][ T38] 2 locks held by kworker/1:5/15802: [ 2425.846651][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2425.857868][ T38] #1: ffffc900051cfbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2425.857922][ T38] 4 locks held by kworker/u8:5/24757: [ 2425.883010][ T38] #0: ffff888023fcf138 ((wq_completion)wg-kex-wg1#20){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2425.883080][ T38] #1: ffffc9000c4f7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2425.896421][ T38] #2: ffff888034e555f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x105/0x750 [ 2425.915495][ T38] #3: ffff888010cad8b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x116/0x750 [ 2425.915569][ T38] 6 locks held by kworker/u8:24/26009: [ 2425.915582][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2425.941732][ T38] #1: ffffc9000c8d7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2425.966223][ T38] #2: ffff88807a0d0300 (&devlink->lock_key#39){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 2425.981275][ T38] #3: ffff8880336ed520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 2425.981342][ T38] #4: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 2426.007874][ T38] #5: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xda0/0x2960 [ 2426.007927][ T38] 1 lock held by syz-executor/26061: [ 2426.031522][ T38] #0: ffff88807c9800d0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 2426.031601][ T38] 3 locks held by kworker/u8:25/27206: [ 2426.057678][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2426.071248][ T38] #1: ffffc9000ec07bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2426.071321][ T38] #2: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 2426.088019][ T38] 4 locks held by kworker/u9:0/27745: [ 2426.088033][ T38] #0: ffff888057338138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2426.133130][ T38] #1: ffffc90003f37bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2426.133197][ T38] #2: ffff888010920f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 2426.162120][ T38] #3: ffff8880109200b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 2426.194791][ T38] 7 locks held by kworker/0:0/28484: [ 2426.194812][ T38] #0: ffff88801f2e6538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2426.194875][ T38] #1: ffffc90004fffbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2426.215068][ T38] #2: ffff888144b10188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4f30 [ 2426.226281][ T38] #3: ffffffff8d6d4830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2426.231133][ T38] #4: ffff8880b8842cd8 (&pcp->lock){+.+.}-{3:3}, at: __free_frozen_pages+0x7e2/0x1170 [ 2426.231192][ T38] #5: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10d/0x2b0 [ 2426.253173][ T38] #6: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_pcppages_bulk+0x61/0x4a0 [ 2426.282555][ T38] 5 locks held by kworker/u9:1/28823: [ 2426.282575][ T38] #0: ffff88803da45938 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2426.282635][ T38] #1: ffffc9000c477bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2426.303059][ T38] #2: ffff888066fa40b0 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xa6/0x1420 [ 2426.380631][ T38] #3: ffffffff8d6d4830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2426.380700][ T38] #4: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2426.383876][ T38] 1 lock held by syz-executor/28860: [ 2426.383889][ T38] #0: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2426.390962][ T38] 6 locks held by kworker/u8:27/29914: [ 2426.390982][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2426.391043][ T38] #1: ffffc9000c6e7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0[ 2426.391043][ T38] #1: ffffc9000c6e7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2426.460080][ T38] #2: ffff88802442d300 (&devlink->lock_key#38){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 2426.460248][ T38] #3: ffff88804a73ad20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 2426.460304][ T38] #4: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 2426.460475][ T38] #5: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xda0/0x2960 [ 2426.460536][ T38] 5 locks held by kworker/1:14/30976: [ 2426.460548][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2426.460704][ T38] #1: ffffc9000c547bc0 ((work_completion)(&ht->run_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2426.460753][ T38] #2: ffff8880511b5880 (&ht->mutex){+.+.}-{4:4}, at: rht_deferred_worker+0x43/0x22f0 [ 2426.460914][ T38] #3: ffffffff8d6d4830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2426.460967][ T38] #4: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2426.461128][ T38] 3 locks held by syz.7.7682/31817: [ 2426.461141][ T38] 2 locks held by syz.4.7701/31851: [ 2426.461154][ T38] #0: ffffffff8d6d4830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2426.461205][ T38] #1: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2426.461385][ T38] 3 locks held by syz.4.7701/31857: [ 2426.461397][ T38] #0: ffff888027ca80e8 (&kvm->slots_lock){+.+.}-{4:4}, at: kvm_vm_ioctl_set_memory_region+0x67/0xe0 [ 2426.461448][ T38] #1: ffffffff8d6d4830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2426.461621][ T38] #2: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2426.461779][ T38] 5 locks held by syz.1.7705/31864: [ 2426.461792][ T38] 6 locks held by syz-executor/31869: [ 2426.461804][ T38] #0: ffffffff8e02f288 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 2426.461859][ T38] #1: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 2426.462020][ T38] #2: ffffffff8d6d4830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2426.462070][ T38] #3: ffff8880b8942cd8 (&pcp->lock){+.+.}-{3:3}, at: free_frozen_page_commit+0x828/0x18d0 [ 2426.462231][ T38] #4: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10d/0x2b0 [ 2426.462283][ T38] #5: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_pcppages_bulk+0x61/0x4a0 [ 2426.462443][ T38] 1 lock held by syz-executor/31877: [ 2426.462455][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 2426.462504][ T38] 4 locks held by kworker/u9:4/31880: [ 2426.462628][ T38] #0: ffff88802c108138 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2426.462681][ T38] #1: ffffc90011c27bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2426.462835][ T38] #2: ffff8880537200b0 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xbb/0x1190 [ 2426.462882][ T38] #3: ffffffff8ec22b98 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 2426.463599][ T38] 3 locks held by syz-executor/31881: [ 2426.463613][ T38] #0: ffffffff8dc71898 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x1bc/0x5a0 [ 2426.463669][ T38] #1: ffffffff8d6d4830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2426.463860][ T38] #2: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2426.464034][ T38] 3 locks held by syz-executor/31885: [ 2426.464047][ T38] #0: ffffffff8d6fb800 (namespace_sem){++++}-{4:4}, at: copy_mnt_ns+0xc3/0x7c0 [ 2426.464093][ T38] #1: ffffffff8d6d4830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2426.464249][ T38] #2: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2426.464303][ T38] 4 locks held by syz-executor/31886: [ 2426.464316][ T38] #0: ffff88801087d988 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x660 [ 2426.464477][ T38] #1: ffffffff8ec22b98 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 2426.464535][ T38] #2: ffffffff8d6d4830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2426.464691][ T38] #3: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2426.464744][ T38] 4 locks held by syz-executor/31887: [ 2426.464756][ T38] #0: ffff88805cfa4d08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1a7/0x4a0 [ 2426.464916][ T38] #1: ffff88803a6b03b0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_trylock+0x1f/0x80 [ 2426.464964][ T38] #2: ffffffff8d6d4830 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2426.465120][ T38] #3: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2426.465176][ T38] [ 2426.465181][ T38] ============================================= [ 2426.465181][ T38] [ 2426.465200][ T38] NMI backtrace for cpu 1 [ 2426.465223][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2426.465250][ T38] Tainted: [L]=SOFTLOCKUP [ 2426.465258][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2426.465270][ T38] Call Trace: [ 2426.465279][ T38] [ 2426.465288][ T38] dump_stack_lvl+0xe8/0x150 [ 2426.465316][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 2426.465388][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2426.465412][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2426.465439][ T38] sys_info+0x135/0x170 [ 2426.465487][ T38] watchdog+0xf95/0xfe0 [ 2426.465520][ T38] ? watchdog+0x20a/0xfe0 [ 2426.465548][ T38] kthread+0x711/0x8a0 [ 2426.465577][ T38] ? __pfx_watchdog+0x10/0x10 [ 2426.465598][ T38] ? __pfx_kthread+0x10/0x10 [ 2426.465621][ T38] ? rt_spin_unlock+0x150/0x200 [ 2426.465651][ T38] ? rt_spin_unlock+0x161/0x200 [ 2426.465673][ T38] ? __pfx_kthread+0x10/0x10 [ 2426.465700][ T38] ret_from_fork+0x510/0xa50 [ 2426.465724][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2426.465743][ T38] ? __switch_to+0xc9e/0x1480 [ 2426.465775][ T38] ? __pfx_kthread+0x10/0x10 [ 2426.465802][ T38] ret_from_fork_asm+0x1a/0x30 [ 2426.465844][ T38] [ 2426.465866][ T38] Sending NMI from CPU 1 to CPUs 0: [ 2426.465896][ C0] NMI backtrace for cpu 0 [ 2426.465917][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2426.465970][ C0] Tainted: [L]=SOFTLOCKUP [ 2426.465985][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2426.466008][ C0] RIP: 0010:__lock_acquire+0xc4d/0x2cf0 [ 2426.466043][ C0] Code: 48 ff cb f7 c1 00 60 00 00 74 c3 e9 90 00 00 00 48 c7 c7 70 e3 47 8d 4c 89 fe e8 ee f3 19 03 48 8b 54 24 18 eb c3 48 8b 48 18 <48> 39 e9 0f 84 b9 00 00 00 48 8b 40 08 48 85 c0 0f 84 ca fe ff ff [ 2426.466059][ C0] RSP: 0018:ffffc900001574a0 EFLAGS: 00000097 [ 2426.466075][ C0] RAX: ffffffff9305b9f0 RBX: 000000000006d162 RCX: bf4e01c51708890f [ 2426.466090][ C0] RDX: 0000000039914400 RSI: 0000000005d6ab72 RDI: ffff88801b6e5ac0 [ 2426.466104][ C0] RBP: bf4e01c51708890f R08: ffffffff8ad3df8a R09: ffffffff8d604178 [ 2426.466122][ C0] R10: dffffc0000000000 R11: fffffbfff1db668f R12: ffff88801b6e6768 [ 2426.466135][ C0] R13: ffff88801b6e6768 R14: ffff88801b6e5ac0 R15: 0000000000000007 [ 2426.466148][ C0] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 2426.466164][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2426.466177][ C0] CR2: 0000001b33d09ff8 CR3: 0000000010802000 CR4: 00000000003526f0 [ 2426.466194][ C0] Call Trace: [ 2426.466202][ C0] [ 2426.466215][ C0] ? kasan_save_free_info+0x46/0x50 [ 2426.466236][ C0] ? __kasan_slab_free+0x5c/0x80 [ 2426.466261][ C0] ? kfree+0x1bd/0x900 [ 2426.466287][ C0] ? rt_spin_lock+0x14a/0x3e0 [ 2426.466309][ C0] lock_acquire+0x107/0x340 [ 2426.466332][ C0] ? rt_spin_lock+0x14a/0x3e0 [ 2426.466360][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 2426.466377][ C0] ? rt_spin_lock+0x14a/0x3e0 [ 2426.466399][ C0] rt_spin_lock+0x14a/0x3e0 [ 2426.466421][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 2426.466444][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 2426.466468][ C0] ? rt_spin_unlock+0x150/0x200 [ 2426.466493][ C0] kcov_remote_start+0x12d/0x710 [ 2426.466513][ C0] __usb_hcd_giveback_urb+0x38a/0x5e0 [ 2426.466543][ C0] dummy_timer+0x8a0/0x46f0 [ 2426.466565][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 2426.466589][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 2426.466619][ C0] ? do_raw_spin_lock+0x121/0x290 [ 2426.466647][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 2426.466665][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2426.466684][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 2426.466699][ C0] __hrtimer_run_queues+0x542/0xd00 [ 2426.466726][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2426.466743][ C0] ? read_tsc+0x9/0x20 [ 2426.466768][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 2426.466789][ C0] handle_softirqs+0x1df/0x650 [ 2426.466813][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 2426.466834][ C0] run_ktimerd+0x69/0x100 [ 2426.466856][ C0] smpboot_thread_fn+0x542/0xa60 [ 2426.466877][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 2426.466902][ C0] kthread+0x711/0x8a0 [ 2426.466926][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2426.466948][ C0] ? __pfx_kthread+0x10/0x10 [ 2426.466970][ C0] ? rt_spin_unlock+0x150/0x200 [ 2426.466995][ C0] ? rt_spin_unlock+0x161/0x200 [ 2426.467017][ C0] ? __pfx_kthread+0x10/0x10 [ 2426.467040][ C0] ret_from_fork+0x510/0xa50 [ 2426.467060][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2426.467078][ C0] ? __switch_to+0xc9e/0x1480 [ 2426.467105][ C0] ? __pfx_kthread+0x10/0x10 [ 2426.467128][ C0] ret_from_fork_asm+0x1a/0x30 [ 2426.467160][ C0] [ 2426.482071][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 2426.482101][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2426.482129][ T38] Tainted: [L]=SOFTLOCKUP [ 2426.482138][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2426.482155][ T38] Call Trace: [ 2426.482164][ T38] [ 2426.482173][ T38] vpanic+0x1e0/0x670 [ 2426.482206][ T38] panic+0xb9/0xc0 [ 2426.482232][ T38] ? __pfx_panic+0x10/0x10 [ 2426.482259][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 2426.482286][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2426.482317][ T38] watchdog+0xfdf/0xfe0 [ 2426.482344][ T38] ? watchdog+0x20a/0xfe0 [ 2426.482372][ T38] kthread+0x711/0x8a0 [ 2426.482402][ T38] ? __pfx_watchdog+0x10/0x10 [ 2426.482423][ T38] ? __pfx_kthread+0x10/0x10 [ 2426.482446][ T38] ? rt_spin_unlock+0x150/0x200 [ 2426.482476][ T38] ? rt_spin_unlock+0x161/0x200 [ 2426.482499][ T38] ? __pfx_kthread+0x10/0x10 [ 2426.482533][ T38] ret_from_fork+0x510/0xa50 [ 2426.482557][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2426.482577][ T38] ? __switch_to+0xc9e/0x1480 [ 2426.482610][ T38] ? __pfx_kthread+0x10/0x10 [ 2426.482637][ T38] ret_from_fork_asm+0x1a/0x30 [ 2426.482679][ T38] [ 2426.483071][ T38] Kernel Offset: disabled