last executing test programs: 24m2.435364034s ago: executing program 1 (id=268): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 24m1.068165687s ago: executing program 1 (id=271): r0 = socket(0xa, 0x802, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="f9fbff91f09a21", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000940), 0x8) r2 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) r3 = syz_open_dev$media(&(0x7f0000000180), 0x1, 0x408002) read(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setregid(0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r6 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) read(r6, 0x0, 0x3c) syz_open_dev$dri(0x0, 0x1, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) setsockopt$inet_int(r0, 0x29, 0x18, &(0x7f00000006c0)=0x7, 0x1) r7 = socket(0x2, 0x80805, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000fc0), 0x0, 0x5) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689ff", 0x24}], 0x2) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)=0x8) syz_usb_connect(0x4, 0x3b9, &(0x7f0000000040)=ANY=[@ANYRESDEC=r9], 0x0) 23m57.798905855s ago: executing program 1 (id=282): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e28, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840) sendmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)="a780f845c1", 0x5}], 0x1}, 0x8044) sendmsg$inet(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x20000840) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffefd}, 0x94) socket$kcm(0x29, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x2}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000900aaaaaaaaaa080180c200000eaaaaaaaaaa44aaaaaaaaaab3b460dcc1a1d73352abb49b66f509bb000000000000aaaaaaaaaaaa0180c2"]) socket$inet6(0xa, 0x803, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 23m55.501874916s ago: executing program 1 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lremovexattr(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)=@random={'security.', 'overlay\x00'}) 23m54.134321811s ago: executing program 1 (id=295): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000003f00)=[{0x0, 0x114}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) (fail_nth: 2) 23m53.623447277s ago: executing program 1 (id=298): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000829000/0x2000)=nil, 0x2000, 0x0) r1 = syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r1, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470"], 0x40}}, 0x8080) 23m38.530830964s ago: executing program 32 (id=298): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000829000/0x2000)=nil, 0x2000, 0x0) r1 = syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r1, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470"], 0x40}}, 0x8080) 14m56.175612246s ago: executing program 5 (id=1507): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=ANY=[], 0x428}, 0x1, 0x0, 0x0, 0x48000}, 0x8000041) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xed, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x52000775) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000880)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x7, 0x58, 0x67, 0x0, 0x84, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x36}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x4, 0x2, 0x0, 0x1, 0x0, 0x9}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x8, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x2, {0x1, 0x2, 0x2, 0x4, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000001f) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000140)=""/23, &(0x7f0000000300)=0x13) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r6, 0x84, 0x7, 0xfffffffffffffffe, &(0x7f0000000040)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='F', 0x1, 0x28004044, &(0x7f0000000140)={0xa, 0x4001, 0x5, @empty, 0xfffffffd}, 0x1c) 14m55.9908047s ago: executing program 5 (id=1508): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x4c, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffff343}]}]}, 0x4c}}, 0x4044080) (fail_nth: 2) 14m55.631647967s ago: executing program 5 (id=1509): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0x40002) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 14m53.629638341s ago: executing program 5 (id=1515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x1, 0x102, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000002100), 0x8040, &(0x7f0000000500)=ANY=[@ANYRES16=r4, @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r4]) read$FUSE(r4, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) r7 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010007000000000002000300", @ANYRES32=r5, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB="040005000000000008060400", @ANYRES32=r6, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="88000303", @ANYRES32, @ANYBLOB="10000100000000002000060000000000"], 0x54, 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) 14m52.588500059s ago: executing program 5 (id=1517): r0 = syz_usb_connect$hid(0x5, 0xb0, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) r2 = syz_usb_connect$cdc_ncm(0x1, 0xa6, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x2, 0x1, 0x0, 0x10, 0x69, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "0f9f31"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x4, 0xbb12, 0x9}, {0x6, 0x24, 0x1a, 0x1, 0x8}, [@obex={0x5, 0x24, 0x15, 0x1}, @country_functional={0xa, 0x24, 0x7, 0x6, 0x8000, [0x7, 0x3]}, @dmm={0x7, 0x24, 0x14, 0x2, 0x8}, @obex={0x5, 0x24, 0x15, 0x3}, @obex={0x5, 0x24, 0x15, 0xe}, @mdlm={0x15, 0x24, 0x12, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x5, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0x7, 0xa6}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x7, 0x9, 0x3, 0x40, 0x6}, 0x2d, &(0x7f0000000180)={0x5, 0xf, 0x2d, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "b5ed50cbbcee11fa84469f3dd641d356"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x7f, 0xe, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x0, 0x4, 0x3}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc07}}, {0xa3, &(0x7f0000000240)=@string={0xa3, 0x3, "5111aedd4be3961c03f74b04cb1e39cf0a421cdcc679f62a1239b6a747aba7bbaf8b3553698b8a594db651cbbb45b62a2f875da46672895ee5a463cabcb8b6e568bbaa6aec30cba0f8416a690e0e5436539db8a55b284ff01738fd9b8530d6da65c33f552f174e15bed066af0ac01a3465e3fb51f9d786ab118bc787bbe85a0d8081bf0381e511449cc79c2649989f45459c7244873d8e1950abd890a35e6fa113"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x413}}]}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@migrate={0xac, 0x21, 0x1, 0x70bd2a, 0x25dfdbfd, {{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x1000, 0x4e24, 0xa61f, 0x2, 0x0, 0x80, 0x29}, 0x6e6bb0, 0x2}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @migrate={0x50, 0x11, [{@in=@rand_addr=0x64010101, @in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, @in=@rand_addr=0x64010100, 0xff, 0x4, 0x0, 0x3506, 0x2, 0xa}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000400007012bbd700001000000047c000008004280040007000c0001800600060080"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004000) syz_usb_control_io(r2, &(0x7f0000000440)={0x2c, &(0x7f0000000480)={0x40, 0xa, 0x5, {0x2, 0x1f, "f624ad"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000140)) 14m49.084061586s ago: executing program 5 (id=1521): r0 = syz_clone(0xc00c0000, 0x0, 0x1, 0x0, 0x0, 0x0) ptrace(0x10, r0) 14m33.466097305s ago: executing program 33 (id=1521): r0 = syz_clone(0xc00c0000, 0x0, 0x1, 0x0, 0x0, 0x0) ptrace(0x10, r0) 8m59.222306289s ago: executing program 6 (id=2053): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) read(r0, &(0x7f0000002400)=""/4062, 0xffe9) 8m58.321104426s ago: executing program 6 (id=2056): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x40400) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000100)={0x0, 0x5, 0x7}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) prlimit64(r1, 0x5, &(0x7f0000000180)={0xfff, 0x8001}, &(0x7f00000001c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffffff, &(0x7f0000002380)='./file0\x00', 0x400, 0x80, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$usbmon(&(0x7f00000024c0), 0x7fffffff, 0x8000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002500)={0x0, 0x0, 0x0}, &(0x7f0000002540)=0xc) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002580)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000025c0)={0x0, 0x0}, &(0x7f0000002600)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002640)={0x0, 0x0, 0x0}, &(0x7f0000002680)=0xc) r10 = geteuid() read$FUSE(0xffffffffffffffff, &(0x7f00000026c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000005000)=0x0) r13 = geteuid() getgroups(0x4, &(0x7f0000005040)=[0xee00, 0xee00, 0xffffffffffffffff, 0x0]) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000005080)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000005100)={0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000005180)='./file0\x00', &(0x7f00000051c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r18 = getegid() r19 = accept4$inet(0xffffffffffffffff, &(0x7f0000005240)={0x2, 0x0, @multicast2}, &(0x7f0000005280)=0x10, 0x100000) r20 = gettid() statx(0xffffffffffffff9c, &(0x7f00000052c0)='./file0\x00', 0x0, 0x1, &(0x7f0000005300)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000005400)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) r23 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r24 = fcntl$getown(r0, 0x9) read$FUSE(0xffffffffffffffff, &(0x7f0000005440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009600)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x8937}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000280)="6e49665a243b4ab7f413cc5e8f5452f1d27d034d07aa33066745ba2586d91888ac0eb77481a2c80bf77414ab9695448e5a1abf6418a8bcad2e2c56ff2fc37b7cda4e83735c5b56b2d3bbb56a3712e5bf70be703f59e98bd4abb98040ea86", 0x5e}], 0x1, &(0x7f0000004700)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @rights={{0x34, 0x1, 0x1, [r4, r0, r0, r0, r0, r5, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, r6}}}, @rights={{0x30, 0x1, 0x1, [r0, r7, r0, 0xffffffffffffffff, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r1, r10, r11}}}], 0xe8, 0x20004041}}, {{&(0x7f0000004800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004bc0)=[{&(0x7f0000004880)="b85e3bc48179ccd622b78d14030470ee18dfba57e28ef4963e990292ae520f737c5cbd594bf6be53b58585c64b60843d48f0546611a6", 0x36}, {&(0x7f00000048c0)="ee20f9d51e62bc52d92d50e55fb3dec96478cbd8cd467e5f2a134d416670420fce1af4e73c545a3e3e0817fa75a6b79e7e3f55971df6b78907282268764bfc55cd6c3e1696e50cb5454e7b3ff544e3c84ea3a82e71ff04a0e4c809e3f402d6c03121593e1711859289805991d59415199523b876b08642fc00bb3562be8326f549a3e55c817fe219e27fd9165769a3e7e7caa8824c6b9415d616aff8ef46f8032af26c85b811ab55", 0xa8}, {&(0x7f0000004980)="54ee4126a85d103782cc4384c97bd91566489195e055a4", 0x17}, {&(0x7f00000049c0)="2409e5276c598fc66e38b74d306519aa591c8b0a500e4284c6d48156bdf45abe29f7c8316866669903753906a5fa07c2fd", 0x31}, {&(0x7f0000004a00)="ea18730b5ad6fb7133b3f3a15fb401c46d2eb5941a24fcfea1f4b48b8899ce38999d0e569e0dc854392384590d300491994e036930d73812810947980b3e4e409b49e597ea7c84984b82ac2adc6e98c7178a0830be1f290d0805902e32a9d70b1436a08d2ea6f272496ff6cd8a0bae12452db8f37b693d7eabc5c4c7ee074c3d4e8c667bfe49df25a192903f27d9b3868ae50ed32341f2ec9ae99aaf6f7d18461cb83897da44e3517e453ffdadd364d3d84c24ac34df71b11d5bef4e9113bab442", 0xc1}, {&(0x7f0000004b00)="91fe8243350a6e21bea2da9439d6cdd34326a868779ef0da", 0x18}, {&(0x7f0000004b40)="d8631f5d93628827e333adea68c4783f6ebc836b717b9c7e17f3c12f2232bfc0caf4105239be01f88bab3865d18a9c18aaf262981bb8b447ceda0c44323736c1ed0acd42c9101d9e6d0480ef41c240f80afc1a17db2cc1c455693c28f5482610bee87cddf8", 0x65}], 0x7, 0x0, 0x0, 0x44}}, {{&(0x7f0000004c40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004ec0)=[{&(0x7f0000004cc0)="2e2831d0d1660e4a06de23f3ea8583045bf996546cf70b6b3e223d3c4bea35c260879328368b385772930119212c45555448020d329cc81e7b38af86f7b0e0dca8f35b59cf790e5f2bb0807fbc25c267c15bad7c7aa39387f9acb63e024db82dddbc402682f511930b5c7200d4249c3b0dd4fc612eab93a6fcabbaf464bba396c99c9551f9386f4b4dd3206fbd8e97e4b27a76c6374970f18cb5fa56fdd94f551eb472b26a7ec67083797941cd88ecd7e148fe9360675f09c32d05a9565418f1bf58aa2ab09809ebbe693d683b1d5e2d479a93b102c86bcfd21d2a485d4d4b48183e9fdeb0ae17814ac3fa51ec", 0xed}, {&(0x7f0000004dc0)="254e15e16d39761635acf258fb144986250df19a7ae71036bc523842e569e9cc1be3bd4bf5ce65b03ebb69ac8db9bd1ca2694f3462344c448ec37b4b6d507bcf1064f0c3006e9db960b92b0c57706de19e39e0ec8ab63513a127628bf49078f866b1231a78f9861764bbdfb3299330d79e62e9dc226d16dc", 0x78}, {&(0x7f0000004e40)="414ab160fd5a95afbc90bf73bc58cf2361082161ebc7734ffbab0dd034388debe2ce17412d7bd76fb992ec250935e88290edd5d4b49cea11510b1b9aee36cbb3a72a61ad28a24260a791db30e4cc72c70b54883c2ffeaf619091e3ab9413314fc34c30e851c88d2cee505800818aaf43b21da0f6c14ca42df539", 0x7a}], 0x3, 0x0, 0x0, 0x8004}}, {{&(0x7f0000004f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000004f80)="11acdb4c897788d4e265c5224e9b7e7df513be3be8be28a94ec1b5eb4201847079a756f39a5eadce68933b6930", 0x2d}], 0x1, &(0x7f00000094c0)=[@cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r15, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x18, 0x1, 0x1, [r19, r0]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @rights={{0x18, 0x1, 0x1, [r23, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r24, r25}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}], 0x120, 0x4000800}}], 0x4, 0x5af5a39f73cf2f90) 8m58.238594172s ago: executing program 6 (id=2057): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x8000, 0xffffffffffffffff, 0x2}) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa2002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0xffffffffffffffff, &(0x7f0000000040), 0x4001) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x19040) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x4, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4000}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xffff, 0x1800}], 0x1f4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) syz_io_uring_setup(0x86c, 0x0, 0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 8m57.56988849s ago: executing program 6 (id=2058): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd01830000000008000100ac141400080005000a0101021800168014000300fc0000000000000000000000000000000600150002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x24af, 0x80, 0x0, 0x306}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r9, 0x2) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r6, &(0x7f0000000180)={0x11, 0x2, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r6, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r11, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r12, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) 8m56.933831575s ago: executing program 6 (id=2062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f0000000400)=""/179, 0xb3, 0x8) socket$nl_route(0x10, 0x3, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x82) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0xf, &(0x7f0000000080)={0x6b, 0x1}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) socket(0x2b, 0x80000, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000001c0)={0xf, 0x1, 0xffff, 0x7, 0x7b, "203c002007000000000780fffffffff200", 0x6, 0x5}) 7m53.326608778s ago: executing program 0 (id=2172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 7m53.175413163s ago: executing program 0 (id=2173): pipe2$9p(&(0x7f0000000240), 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) (fail_nth: 2) 7m52.785243179s ago: executing program 0 (id=2174): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 7m52.634888082s ago: executing program 0 (id=2175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x162900, 0x0) r1 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="240e857fe863733040cd4c6df4944148348ebf273355fd81a528f0da9ce5c4ad2215bf74c500"/52, 0x34}], 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r3, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000090, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000f9b000/0x1000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025747a31000000000900010073797a3000000000080005400000001c"], 0xe8}, 0x1, 0x0, 0x0, 0x40c0004}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x8, &(0x7f0000000380)=[@flags={0x3, 0x128bc4}], 0x1) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = epoll_create1(0x80000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000240)={0x5000, 0x101000}) r8 = fcntl$dupfd(r6, 0x0, r7) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140), &(0x7f00000002c0)=0x4) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r9, 0x89e7, &(0x7f0000000300)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x56}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000540)={'wlan1\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x2c}}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000080)={0x4, 0x2, 0x2, 0xffff}, &(0x7f00000000c0)=0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m46.335244276s ago: executing program 3 (id=2180): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) getpeername$tipc(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8970, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'macvlan0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) sendto$packet(r6, &(0x7f00000001c0)="3f03fe7f37e9140006001e0089e9aaa911d7c2290f00860300001d00000000059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3f7e4600000000000000000000000000cd9a9f006cbe5b5d11fbd5a77b730cb1b9bc01fc7bc8034bb7e8b477c854b10efbdcdb9de64c7f01390720de8e8c1fa25a", 0x79, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYRESOCT], 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x18, 0x110, 0xd, "f8"}], 0x18}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x1818408, &(0x7f0000000280)=ANY=[@ANYBLOB='trans']) 7m44.343625787s ago: executing program 3 (id=2181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c40)={0x30, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50) 7m43.31478374s ago: executing program 3 (id=2182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 7m43.032133327s ago: executing program 3 (id=2183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 7m42.847725742s ago: executing program 3 (id=2184): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 7m42.776409505s ago: executing program 3 (id=2185): mount$nfs(&(0x7f0000000000)=':@\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x30000, &(0x7f00000000c0)={[{'-'}, {'%&$'}, {'\xd1({]'}], [{@dont_appraise}]}) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80010, 0x0) r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000380)={{0xffffffffffffffff, &(0x7f00000001c0)='.*]\',+/\x00', 0x20000, &(0x7f0000000200)={@align=0x3, {0xfff, 0xae63, 0x1000, 0x2}}, 0x9, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)}, {[0x1, 0x719, 0x2, 0xe]}, 0x3, 0x9e, &(0x7f00000002c0)=""/158}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x2}], 0xf5, 0x0, &(0x7f0000000440)="8f34998c98417f4debd4719ffd4cd5a3d8e7880f6258c7821ae84a6d164369332a3d1dfcd08d64d1ab0838853d30b30b7881e428b8d3eaabf09d6ecf26d29bf5653c8cce4e98580a5a3cddc93607226b3c349aa4c2d08c84915fbd66586ac607371b3e3b1f8a7d425b549d703aa07d9f92e220053e6377e9d8ae55a45be1f2457dc2c8aba9fd3a569bdaa769169ca4081c672408474d7b46ab18d9684780cf78798667d76fb488aed4f3d8143c043d611de5d71110eff5dcf70a3b2cd9c391a8ee9225f8a75efddd88758a82155840007ff1890c794f2227294d007e4b460fcbc26d9294748c994169e559635888bfa4908d13e8c9"}) write$char_usb(r1, &(0x7f0000000580)="53bcc431953a3375d4669a64d21c7a667808a269dbf8362ee3b9c81f4983d39c6d32344e8896ac632d4e0199898bf754a5fa3d8ed94b77e235ce39d87e0c98e7c8706bad21e329fd8111b19c9da122eb6f8a4c33f99066017968fe10ab76a66685e2dc025917fc5b5bbdeb51273c0a453715d9e43b3f670ffd756c82c491c4b3582a27f7ecafba1b26461183b7f949d75a72aa72c3afb25fc2f8321faba54570b29f1e524fe0e84c9ad617e174e874a74d8a3d849179c15cdcf76c78be6c0132e232ffd6def89dc6c61584d0d02dd8234cc7ac55332bdbe58662c36e12d069640a675ad44604a1c1ad2e31f796274f", 0xef) r2 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) mbind(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000680)=0xffffffff, 0x8, 0x0) syz_usb_connect(0x6, 0x259, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x3d, 0x10, 0x57, 0x8, 0x12d1, 0xe52b, 0x4b78, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x247, 0x1, 0x9, 0x9, 0x40, 0x0, [{{0x9, 0x4, 0x78, 0xf, 0x5, 0xff, 0x5, 0x6f, 0x5, [@generic={0xe6, 0x6, "c8973ee1ffbee6bf92d1e64f643d70afa9c27b0a5dc96411bb6fc3de75a536be3d7f73786253f7e10ccdcce1a87da50702c278bfd0ab0c1fa482a5c616e37f53decce4cdc0ae374111480b6a1c350fe8e1ad67dcefd3b8f712b175d12c36d448cd533aae84a57bc0b0043f9f384b0ae9f90c7ed174151fdb1c5c14b09ec3da742b0eca69c9897500dd28153b223d6bd8296c0d6c27ce7fdd8d521d0759470a5fdea81f952de1c664e3242e0d2a4c6066be0741af5771f13322b3522144a7aa3484b7be87144a7cf5d9ee8b0ec91b3b0085a6dd3ee254801f6799513345ac16645c9cc909"}], [{{0x9, 0x5, 0x2, 0x8, 0x10, 0x1, 0x5, 0x7, [@generic={0x93, 0xd, "d42f104683689adef6c0b5a0188486f3834530ae3fab52fbbe1e9c12df0e2ec1b692246eb5f02c4258ee039a1a81fbb19fe98ae92a7ecdf049a203b678b3812175ca3c6e1af3a8c7a813c174692ce1868e483349b9f22dcff36e0c32bc7d5e1053138b508869e1bb27c001b40bba0f9baeac65a8f96c01cf9538825bc1217bd3bd03693c133c4c24b33cea0e6e41e9101d"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x9, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x50, 0x70f}]}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0xf6, 0xad, 0xff}}, {{0x9, 0x5, 0xa, 0xb, 0x40, 0x1, 0x0, 0x6}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x5, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x6}, @generic={0x81, 0x24, "b1d9dc8a480a5390131d04e83eb74c82d7f23c9c90c78beda47f4aed89f4a1aa31b0c2115e266c3554058ba6523aff993f4175599fa1d029eb4a7d5e6cbfa707447e2acabe84770f81437030103bab182af48489470f337a4f4f72234465de3971848d04d9e6c25f88ce086d46e698172a8088a3e5d711ce0ea96b5bd0e7fa"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x201, 0x5, 0x0, 0xf1, 0x40, 0x80}, 0x19, &(0x7f0000000980)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x30, "ff3449068580d21510238c98d58511b5"}]}, 0x5, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x81, &(0x7f0000000a00)=@string={0x81, 0x3, "22c1cc62f27977cb81cec0171ed4a996bb38ff63ca44ec5fac8d01dcd8a792814651af3a62a359e269639dd7fcefa42d74c32bdde17ac9fb2ea4c7dea9fb4e2f7bab38cd5fd078b8923c6519c207dbc92c9005b4f32eb43541ded0c1a3db8c8ebb2b2d6262fbe80f96b421f6d54856f1774cc062eb23db0fea1d941226712e"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x42d}}, {0x2d, &(0x7f0000000b40)=@string={0x2d, 0x3, "68968805d79cd25fbce4310b9ae3461aeaf4801f3bb13e8fbbcb8a9d9ea5c9415a39a55346a74f14250b5b"}}]}) clock_gettime(0x0, &(0x7f0000000c00)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000c40)={0x8, 0x3, 0x4, 0x2, 0x5, {r3, r4/1000+60000}, {0x2, 0x2, 0x7, 0xb7, 0x7, 0x51, "79e7ce98"}, 0x80000001, 0x4, {}, 0x6, 0x0, r1}) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000cc0)=""/37) syz_usb_connect(0x6, 0x799, &(0x7f0000000d00)={{0x12, 0x1, 0x300, 0x34, 0xee, 0xab, 0xff, 0x1410, 0x1420, 0x3d72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x787, 0x3, 0x4, 0xf8, 0x0, 0xff, [{{0x9, 0x4, 0x9, 0xfc, 0x7, 0xe8, 0xc8, 0x14, 0x5, [], [{{0x9, 0x5, 0xd, 0x11, 0x40, 0x8, 0x7, 0x81, [@generic={0x36, 0x10, "1b9fce173cebd1cfabb4d455e5e911b04dc26682e14e0597521aeb9e455bd224959f28c0033b2f1e948e84f04c9ab7927d611d74"}, @generic={0x29, 0x30, "809baefef3e87878007088b93ade3fc23be703df0db269a6a624c2608897addcfd43600caa7fdb"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x6, 0x2e, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0x3ff}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x6, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0xf001}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x9, 0x80, 0xe2}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x1, 0x3, 0x40, [@generic={0x32, 0x21, "c89e2ee4172f4b0fc6534ad5699ed4fdd3fa211d401c79fc1a8e6671b42906b72d7946ca1caf41fd9a21cff863969483"}, @generic={0x49, 0xc, "bbf3ff809aa7553825ffa5051672864838a87ddf973cff3d3e7efa186517a1fcf48a5b9aedc3bfa3b5d62c230b96edb8bc87177de01239b17bf205c5320abaf74bfe2cbd277340"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x9, 0x81, 0x3d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x4}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x1, 0x0, 0xea}}]}}, {{0x9, 0x4, 0x7d, 0xb9, 0x3, 0xff, 0x5, 0xb, 0x7, [], [{{0x9, 0x5, 0x9, 0x0, 0x20, 0x2, 0xd3, 0x8, [@generic={0x9e, 0xf, "b9b0b527a35ec9ca423332925408a1eca67a06945e010ab300453af25991b8807c05d307d330d3d90aff3a5fd1ae7aae814b8e0a004e4330084c1939f0e7354e67632f6300bff7390811397e598262e8adec8a40eb444b7145aaded7d13de3d36b1dd1cc03eb6400cf347a56a8d07eaf1bf0938e7b8fa3a745ebaba4ff907d509bf3ec5932c801190e9a04fd68d3644c35a100b33bba25aca43818ed"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x31, 0xc4, 0xd, [@generic={0x9, 0x11, "bf8431fc54c796"}, @generic={0xba, 0x8, "bc59d2875750acdf1ba43083e200d77bc4f45d33587f1fee69bc6800233be127e2278884d1fbf2a818d8356bd5f16d0ff7011f24045c7821731529cd3b74dcff099e847ba676c2257ea81989f6ab814ef8da0c30b29b84527e0b669d7233dd3bbef39139ac5a28d1877e592081d5800a15fc19e82343d2fed4eca33918e22f2a4750c014f0799300f95241a950758ab825027396800bfe28ad3adbb8d13f18f3e94408defde9c2e1c85cf985664869da58983ee4a4df0d7b"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x7, 0x47, 0x7, [@generic={0xa2, 0x0, "37ce5c3382af268e71019629e09509a8350a892e81cfa11c46363314af940fb2f6b7615bd41b74c93f284753f454aa95c5a68b82366d259cfdf5c51e7949791f4a567b452b29ecdc229a48690b2ecb798ff0ee1f0a39fc2936547f708b863a6343f05c6afbee80e0695603987995a0c493092b18cd2a86f9ae379a151db49f8b73f574a1babc086611fb0dd99158ab61d79aa5e1f05256aabfcb458c66f6e8b5"}, @generic={0x2e, 0x21, "2aabcf736522a8ae5ceacd09d288111a0347220be7089b3ee823570ae9b930b574dcbafd58b966bb58bda446"}]}}]}}, {{0x9, 0x4, 0x8, 0x7, 0xe, 0xf1, 0x2a, 0x9b, 0x40, [], [{{0x9, 0x5, 0x8, 0x10, 0x1f7, 0x9, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x401}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x7f, 0xf2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x59, 0x3}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x7, 0xb, 0x9, [@generic={0x9e, 0x2, "1a9b19ce33886171d426fc0d51ffe47a30c1e5236e74ccf066ae193cbf901bfb424dc1ab85127bccc418dbdb7cbbbdeea43e2b538b91053ba7b2b548278624f1e67b4b75e9d1c6cd13710d8cc1790a478a9022243593a4a502c4c6606810610c7c6320032e8c9ae004dfb5f6ca6d0709d112e9628c5051ff68674285ec8b04bdedea060bc870a52df56fd677ac410740423ac78a3b9d30c7c18f5d9a"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x80, 0x12, 0xff, [@generic={0x65, 0x31, "24349708fa270f5d7e94a16831c2bd42717a26084cf7101f3ec61e16a47f07feb8d99a3260c12b316af314e9ffd98e98da3dd816c56a57addab1d3d99a29afde3af7ac0793cd2184b3db241112eec431de74bf0b98dff9c3f902161d5ec3aae02f7ae9"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0xfc, 0x0, 0x6, [@generic={0xf8, 0xe, "931e9f2a1e9d87863fde7f15e994f7996bbbc35b8f27fc291b9519aa355f610b2bd85c75eaf26527c5f79ed36d8a335b8975c210f96dffb9c88afab80001948d896c30bcfe6adf969863f5967a77b6068ad9bfcf4cee49dd78b0ae92a81a80f145d277fd7cacb5c8a80825895259b7d09889d15c90fbeef739246a145efaa20e0c9689ac5b3ebf4627f39a374527108acb25f2d5ea50b7a3a86b1788c29536fbd391949ad3c9782f1acb0d79c469ced5518f0f7001bab0ed475b00dcf0c1d6dda0100c93abedda3b102b259b679431e9b05c8e0869ccdaa6bafd451bfec98972cb052f10c8e4fc44b51e2f58fbbe9a134508fcf64c7e"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xe}]}}, {{0x9, 0x5, 0x7, 0x1, 0x10, 0x6, 0x8, 0x2, [@generic={0x80, 0x23, "8909e59a9b0e7b47ea6878712d4026d24b0a1aa031a30e3606307ffe9eac2b0d541bfff4a8b449d6b0f255aee5e52a0c8234bb638de9c3934b53c917d67e6b02ae445237aade4752aee2d80af810d6cbd695c06957386dc762f7d865610ed85ac575bb13c661e493f9228e694928c551f0633f653b97e6017766f9152c8a"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x1, 0x2, 0x8}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0xf5, 0x0, 0x1}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xa, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf8, 0x2}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x9, 0x3, 0xbb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x200}]}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x80, 0xe, 0x3}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x4, 0x4, 0x5d}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x1, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7a, 0xc0}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x2, 0x16, 0x2, [@generic={0xbf, 0xc, "6f11bcbf3bae8bb0678b33f97d0955a7196fb35a19e846f1cf338830bee6e39ef2ae3a452cf60f2d7805c609077ecb87913b5b8ca91ea0a612550ca95bdf107c56e1d5817f619d90f58b7e19b200b7c8507a9bdfbefebaab5ab868c4e6313b03d883841cb99bbc02dd1fe8401f6e8178c834a2b3153fe1b76a7c1eb14ecd26b8412dc7f78091273c2d9c3bb554d6c0bbbdacb84334a04a2cd6c196706d1edc0b4dcc1139fe7da2daf44c240a01f415c015fdf4882695fa0b96f121d884"}]}}]}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f00000014c0)={0xa, 0x6, 0x200, 0x24, 0x7, 0x81, 0x20, 0x7}, 0x41, &(0x7f0000001500)={0x5, 0xf, 0x41, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1f, 0x1, 0x10}, @ssp_cap={0x18, 0x10, 0xa, 0xfd, 0x3, 0x8, 0x770f, 0x6, [0xaba207d5441a2a3c, 0x3f00, 0x3f]}, @ssp_cap={0x10, 0x10, 0xa, 0xd, 0x1, 0x4, 0x0, 0x6, [0xc000]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xe, 0x8, 0x7ff}]}, 0x6, [{0xe6, &(0x7f0000001580)=@string={0xe6, 0x3, "eb3d8afb0e634d3105544797558bc9e2e683958a3b75e31104160ca4051397cddfa90459cc1ce8eac63135140e5fe01624f127d3cc4ec970d1e50d422b7a68955591f0ba58a076550c9971017d78da7b534491f55d2c13f67b718901cb280aede047114a37753d15b18ea37def33dec8c98f31ce15f952b7b79ee559f75e65696937e0d62ec8c0ff45edd8759eff0175effd870d4eda2dcc3b8e1ed3a1d78d42dadfde739996d9d7c50e292486cf8ec557d9ff2b9bf2849b773583aa7e8a3939c4a8b0265f4baad75920e98b044e4d4b9cefa8ca0a12d9821ce9f97851a3ac72f5ed19c4"}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x443}}, {0xf5, &(0x7f00000016c0)=@string={0xf5, 0x3, "206d60bba69fd217dd39b1784574bc56eb11719b47533698df43c7412e0d3a64d48fb38d0597ee214cebb1ae00ff1972fa1dea5c190f572f7fcd07f42c8d4533054f577139fb7f3128cb7d9bb132bfaeae3cdc32549ac3ce5b980e13a97de1cf3e55114e9d739cd516a0396f3398ede5f8585f925e06962b91985665d526d62afe03a05d0f3fbf9cd30fbd24959fc8b729fdb83b1a962a03c447aa2f0e8575b3d788db290b7173e223052361c5b9fc02eae090dc5d7a62648b55a2592a8515053b9d1bf7a58ce17df85b6c30f2594c4d8145630b6f096163bd65f9ca8d917136c8c6af85b4313d984fcf0d96a2079c86309088"}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x444}}, {0x94, &(0x7f0000001800)=@string={0x94, 0x3, "e21bbadbfe20a28a32fd05cb38f26db26068c9761c2d1458d3d690b3c1b11102e7f5072c271327b77c050861449795fe4f81ad63ea0946c531c51a76307b21ee8b2bc0213496e52fb7ba9e637404cfd92fe80b30ba9bb7a6bb183c8dbbe5aead3fc0a3f4a35ae86d186a05a73a9e345c52b9ba7ce00c5d00c1cddb6ae8d0c4bf61d0cc7ceeeacdd3eaa730a8a5fa6be9bda4"}}, {0x38, &(0x7f00000018c0)=@string={0x38, 0x3, "2b27aa620445d133f580dfdb1a248c0768609ad5aa54ec5a89ee0a0869789582abe8c9efbd7724df3d9378552e728539898e58e0fcde"}}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001c40)={0x4c, 0x0, &(0x7f0000001b40)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001a80)={@ptr={0x70742a85, 0x0, &(0x7f0000001980)=""/241, 0xf1, 0x0, 0x3c}, @fda={0x66646185, 0x1, 0x1, 0xa}, @flat=@weak_binder={0x77622a85, 0x10b}}, &(0x7f0000001b00)={0x0, 0x28, 0x48}}, 0x1000}], 0x72, 0x0, &(0x7f0000001bc0)="7262535e284bd09ce44c9a1d9d0cb513599eb3e20370a9ccc59afd20ae3bf97eb371572c3bbf21c8b38e4f566cec603b89be9951ee0500596a032bd2148feaad1e06f7adcde868ab6ec026486d09e5a34c220db98c19e8d0dd315beeb6d907f924036974379cd187b01cc3f3611941f6a95d"}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000001c80)=""/227) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001dc0)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000001d80), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0x0, 0x0, 0x0, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xff], 'veth1_to_batadv\x00', 'wlan1\x00', {}, {0xff}, 0x71, 0x1, 0x7, 0x4}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@srh={{0x30}, {0xcb, 0xb, 0xe, 0x6, 0x82, 0x208, 0x100}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xe5ed, 0xb4f4, 0xffffffff, 'snmp_trap\x00', 'syz1\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) syz_open_procfs$namespace(0x0, &(0x7f0000002100)='ns/user\x00') r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002180), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x54, r8, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xa9}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffc01}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xb}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffffc}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002440)={'vxcan1\x00', 0x0}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002540)=@o_path={&(0x7f0000002500)='./file0\x00', 0x0, 0xc018, r7}, 0x18) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002580)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002600), 0x181400, 0x0) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002640)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xf, '\x00', 0x0, r1, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x1a, 0x16, &(0x7f00000022c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe88}, @ldst={0x3, 0x0, 0x3, 0x1, 0x6, 0x1, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002380)='GPL\x00', 0xf1f, 0x47, &(0x7f00000023c0)=""/71, 0x41100, 0x0, '\x00', r9, @tracing=0x1a, r6, 0x8, &(0x7f0000002480)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000024c0)={0x0, 0x2, 0x7, 0x2}, 0x10, 0x0, r1, 0x1, &(0x7f00000026c0)=[r10, r11, r1, r1, r12, r13], &(0x7f0000002700)=[{0x0, 0x2, 0xe, 0x3}], 0x10, 0x204000}, 0x94) shmget(0x3, 0x3000, 0x286081f69e64804d, &(0x7f0000ffa000/0x3000)=nil) 7m37.082508732s ago: executing program 35 (id=2175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x162900, 0x0) r1 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="240e857fe863733040cd4c6df4944148348ebf273355fd81a528f0da9ce5c4ad2215bf74c500"/52, 0x34}], 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r3, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000090, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000f9b000/0x1000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025747a31000000000900010073797a3000000000080005400000001c"], 0xe8}, 0x1, 0x0, 0x0, 0x40c0004}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x8, &(0x7f0000000380)=[@flags={0x3, 0x128bc4}], 0x1) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = epoll_create1(0x80000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000240)={0x5000, 0x101000}) r8 = fcntl$dupfd(r6, 0x0, r7) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140), &(0x7f00000002c0)=0x4) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r9, 0x89e7, &(0x7f0000000300)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x56}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000540)={'wlan1\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x2c}}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000080)={0x4, 0x2, 0x2, 0xffff}, &(0x7f00000000c0)=0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m27.146381574s ago: executing program 36 (id=2185): mount$nfs(&(0x7f0000000000)=':@\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x30000, &(0x7f00000000c0)={[{'-'}, {'%&$'}, {'\xd1({]'}], [{@dont_appraise}]}) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80010, 0x0) r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000380)={{0xffffffffffffffff, &(0x7f00000001c0)='.*]\',+/\x00', 0x20000, &(0x7f0000000200)={@align=0x3, {0xfff, 0xae63, 0x1000, 0x2}}, 0x9, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)}, {[0x1, 0x719, 0x2, 0xe]}, 0x3, 0x9e, &(0x7f00000002c0)=""/158}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x2}], 0xf5, 0x0, &(0x7f0000000440)="8f34998c98417f4debd4719ffd4cd5a3d8e7880f6258c7821ae84a6d164369332a3d1dfcd08d64d1ab0838853d30b30b7881e428b8d3eaabf09d6ecf26d29bf5653c8cce4e98580a5a3cddc93607226b3c349aa4c2d08c84915fbd66586ac607371b3e3b1f8a7d425b549d703aa07d9f92e220053e6377e9d8ae55a45be1f2457dc2c8aba9fd3a569bdaa769169ca4081c672408474d7b46ab18d9684780cf78798667d76fb488aed4f3d8143c043d611de5d71110eff5dcf70a3b2cd9c391a8ee9225f8a75efddd88758a82155840007ff1890c794f2227294d007e4b460fcbc26d9294748c994169e559635888bfa4908d13e8c9"}) write$char_usb(r1, &(0x7f0000000580)="53bcc431953a3375d4669a64d21c7a667808a269dbf8362ee3b9c81f4983d39c6d32344e8896ac632d4e0199898bf754a5fa3d8ed94b77e235ce39d87e0c98e7c8706bad21e329fd8111b19c9da122eb6f8a4c33f99066017968fe10ab76a66685e2dc025917fc5b5bbdeb51273c0a453715d9e43b3f670ffd756c82c491c4b3582a27f7ecafba1b26461183b7f949d75a72aa72c3afb25fc2f8321faba54570b29f1e524fe0e84c9ad617e174e874a74d8a3d849179c15cdcf76c78be6c0132e232ffd6def89dc6c61584d0d02dd8234cc7ac55332bdbe58662c36e12d069640a675ad44604a1c1ad2e31f796274f", 0xef) r2 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) mbind(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000680)=0xffffffff, 0x8, 0x0) syz_usb_connect(0x6, 0x259, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x3d, 0x10, 0x57, 0x8, 0x12d1, 0xe52b, 0x4b78, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x247, 0x1, 0x9, 0x9, 0x40, 0x0, [{{0x9, 0x4, 0x78, 0xf, 0x5, 0xff, 0x5, 0x6f, 0x5, [@generic={0xe6, 0x6, "c8973ee1ffbee6bf92d1e64f643d70afa9c27b0a5dc96411bb6fc3de75a536be3d7f73786253f7e10ccdcce1a87da50702c278bfd0ab0c1fa482a5c616e37f53decce4cdc0ae374111480b6a1c350fe8e1ad67dcefd3b8f712b175d12c36d448cd533aae84a57bc0b0043f9f384b0ae9f90c7ed174151fdb1c5c14b09ec3da742b0eca69c9897500dd28153b223d6bd8296c0d6c27ce7fdd8d521d0759470a5fdea81f952de1c664e3242e0d2a4c6066be0741af5771f13322b3522144a7aa3484b7be87144a7cf5d9ee8b0ec91b3b0085a6dd3ee254801f6799513345ac16645c9cc909"}], [{{0x9, 0x5, 0x2, 0x8, 0x10, 0x1, 0x5, 0x7, [@generic={0x93, 0xd, "d42f104683689adef6c0b5a0188486f3834530ae3fab52fbbe1e9c12df0e2ec1b692246eb5f02c4258ee039a1a81fbb19fe98ae92a7ecdf049a203b678b3812175ca3c6e1af3a8c7a813c174692ce1868e483349b9f22dcff36e0c32bc7d5e1053138b508869e1bb27c001b40bba0f9baeac65a8f96c01cf9538825bc1217bd3bd03693c133c4c24b33cea0e6e41e9101d"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x9, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x50, 0x70f}]}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0xf6, 0xad, 0xff}}, {{0x9, 0x5, 0xa, 0xb, 0x40, 0x1, 0x0, 0x6}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x5, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x6}, @generic={0x81, 0x24, "b1d9dc8a480a5390131d04e83eb74c82d7f23c9c90c78beda47f4aed89f4a1aa31b0c2115e266c3554058ba6523aff993f4175599fa1d029eb4a7d5e6cbfa707447e2acabe84770f81437030103bab182af48489470f337a4f4f72234465de3971848d04d9e6c25f88ce086d46e698172a8088a3e5d711ce0ea96b5bd0e7fa"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x201, 0x5, 0x0, 0xf1, 0x40, 0x80}, 0x19, &(0x7f0000000980)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x30, "ff3449068580d21510238c98d58511b5"}]}, 0x5, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x81, &(0x7f0000000a00)=@string={0x81, 0x3, "22c1cc62f27977cb81cec0171ed4a996bb38ff63ca44ec5fac8d01dcd8a792814651af3a62a359e269639dd7fcefa42d74c32bdde17ac9fb2ea4c7dea9fb4e2f7bab38cd5fd078b8923c6519c207dbc92c9005b4f32eb43541ded0c1a3db8c8ebb2b2d6262fbe80f96b421f6d54856f1774cc062eb23db0fea1d941226712e"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x42d}}, {0x2d, &(0x7f0000000b40)=@string={0x2d, 0x3, "68968805d79cd25fbce4310b9ae3461aeaf4801f3bb13e8fbbcb8a9d9ea5c9415a39a55346a74f14250b5b"}}]}) clock_gettime(0x0, &(0x7f0000000c00)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000c40)={0x8, 0x3, 0x4, 0x2, 0x5, {r3, r4/1000+60000}, {0x2, 0x2, 0x7, 0xb7, 0x7, 0x51, "79e7ce98"}, 0x80000001, 0x4, {}, 0x6, 0x0, r1}) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000cc0)=""/37) syz_usb_connect(0x6, 0x799, &(0x7f0000000d00)={{0x12, 0x1, 0x300, 0x34, 0xee, 0xab, 0xff, 0x1410, 0x1420, 0x3d72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x787, 0x3, 0x4, 0xf8, 0x0, 0xff, [{{0x9, 0x4, 0x9, 0xfc, 0x7, 0xe8, 0xc8, 0x14, 0x5, [], [{{0x9, 0x5, 0xd, 0x11, 0x40, 0x8, 0x7, 0x81, [@generic={0x36, 0x10, "1b9fce173cebd1cfabb4d455e5e911b04dc26682e14e0597521aeb9e455bd224959f28c0033b2f1e948e84f04c9ab7927d611d74"}, @generic={0x29, 0x30, "809baefef3e87878007088b93ade3fc23be703df0db269a6a624c2608897addcfd43600caa7fdb"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x6, 0x2e, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0x3ff}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x6, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0xf001}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x9, 0x80, 0xe2}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x1, 0x3, 0x40, [@generic={0x32, 0x21, "c89e2ee4172f4b0fc6534ad5699ed4fdd3fa211d401c79fc1a8e6671b42906b72d7946ca1caf41fd9a21cff863969483"}, @generic={0x49, 0xc, "bbf3ff809aa7553825ffa5051672864838a87ddf973cff3d3e7efa186517a1fcf48a5b9aedc3bfa3b5d62c230b96edb8bc87177de01239b17bf205c5320abaf74bfe2cbd277340"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x9, 0x81, 0x3d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x4}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x1, 0x0, 0xea}}]}}, {{0x9, 0x4, 0x7d, 0xb9, 0x3, 0xff, 0x5, 0xb, 0x7, [], [{{0x9, 0x5, 0x9, 0x0, 0x20, 0x2, 0xd3, 0x8, [@generic={0x9e, 0xf, "b9b0b527a35ec9ca423332925408a1eca67a06945e010ab300453af25991b8807c05d307d330d3d90aff3a5fd1ae7aae814b8e0a004e4330084c1939f0e7354e67632f6300bff7390811397e598262e8adec8a40eb444b7145aaded7d13de3d36b1dd1cc03eb6400cf347a56a8d07eaf1bf0938e7b8fa3a745ebaba4ff907d509bf3ec5932c801190e9a04fd68d3644c35a100b33bba25aca43818ed"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x31, 0xc4, 0xd, [@generic={0x9, 0x11, "bf8431fc54c796"}, @generic={0xba, 0x8, "bc59d2875750acdf1ba43083e200d77bc4f45d33587f1fee69bc6800233be127e2278884d1fbf2a818d8356bd5f16d0ff7011f24045c7821731529cd3b74dcff099e847ba676c2257ea81989f6ab814ef8da0c30b29b84527e0b669d7233dd3bbef39139ac5a28d1877e592081d5800a15fc19e82343d2fed4eca33918e22f2a4750c014f0799300f95241a950758ab825027396800bfe28ad3adbb8d13f18f3e94408defde9c2e1c85cf985664869da58983ee4a4df0d7b"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x7, 0x47, 0x7, [@generic={0xa2, 0x0, "37ce5c3382af268e71019629e09509a8350a892e81cfa11c46363314af940fb2f6b7615bd41b74c93f284753f454aa95c5a68b82366d259cfdf5c51e7949791f4a567b452b29ecdc229a48690b2ecb798ff0ee1f0a39fc2936547f708b863a6343f05c6afbee80e0695603987995a0c493092b18cd2a86f9ae379a151db49f8b73f574a1babc086611fb0dd99158ab61d79aa5e1f05256aabfcb458c66f6e8b5"}, @generic={0x2e, 0x21, "2aabcf736522a8ae5ceacd09d288111a0347220be7089b3ee823570ae9b930b574dcbafd58b966bb58bda446"}]}}]}}, {{0x9, 0x4, 0x8, 0x7, 0xe, 0xf1, 0x2a, 0x9b, 0x40, [], [{{0x9, 0x5, 0x8, 0x10, 0x1f7, 0x9, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x401}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x7f, 0xf2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x59, 0x3}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x7, 0xb, 0x9, [@generic={0x9e, 0x2, "1a9b19ce33886171d426fc0d51ffe47a30c1e5236e74ccf066ae193cbf901bfb424dc1ab85127bccc418dbdb7cbbbdeea43e2b538b91053ba7b2b548278624f1e67b4b75e9d1c6cd13710d8cc1790a478a9022243593a4a502c4c6606810610c7c6320032e8c9ae004dfb5f6ca6d0709d112e9628c5051ff68674285ec8b04bdedea060bc870a52df56fd677ac410740423ac78a3b9d30c7c18f5d9a"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x80, 0x12, 0xff, [@generic={0x65, 0x31, "24349708fa270f5d7e94a16831c2bd42717a26084cf7101f3ec61e16a47f07feb8d99a3260c12b316af314e9ffd98e98da3dd816c56a57addab1d3d99a29afde3af7ac0793cd2184b3db241112eec431de74bf0b98dff9c3f902161d5ec3aae02f7ae9"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0xfc, 0x0, 0x6, [@generic={0xf8, 0xe, "931e9f2a1e9d87863fde7f15e994f7996bbbc35b8f27fc291b9519aa355f610b2bd85c75eaf26527c5f79ed36d8a335b8975c210f96dffb9c88afab80001948d896c30bcfe6adf969863f5967a77b6068ad9bfcf4cee49dd78b0ae92a81a80f145d277fd7cacb5c8a80825895259b7d09889d15c90fbeef739246a145efaa20e0c9689ac5b3ebf4627f39a374527108acb25f2d5ea50b7a3a86b1788c29536fbd391949ad3c9782f1acb0d79c469ced5518f0f7001bab0ed475b00dcf0c1d6dda0100c93abedda3b102b259b679431e9b05c8e0869ccdaa6bafd451bfec98972cb052f10c8e4fc44b51e2f58fbbe9a134508fcf64c7e"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xe}]}}, {{0x9, 0x5, 0x7, 0x1, 0x10, 0x6, 0x8, 0x2, [@generic={0x80, 0x23, "8909e59a9b0e7b47ea6878712d4026d24b0a1aa031a30e3606307ffe9eac2b0d541bfff4a8b449d6b0f255aee5e52a0c8234bb638de9c3934b53c917d67e6b02ae445237aade4752aee2d80af810d6cbd695c06957386dc762f7d865610ed85ac575bb13c661e493f9228e694928c551f0633f653b97e6017766f9152c8a"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x1, 0x2, 0x8}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0xf5, 0x0, 0x1}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xa, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf8, 0x2}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x9, 0x3, 0xbb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x200}]}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x80, 0xe, 0x3}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x4, 0x4, 0x5d}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x1, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7a, 0xc0}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x2, 0x16, 0x2, [@generic={0xbf, 0xc, "6f11bcbf3bae8bb0678b33f97d0955a7196fb35a19e846f1cf338830bee6e39ef2ae3a452cf60f2d7805c609077ecb87913b5b8ca91ea0a612550ca95bdf107c56e1d5817f619d90f58b7e19b200b7c8507a9bdfbefebaab5ab868c4e6313b03d883841cb99bbc02dd1fe8401f6e8178c834a2b3153fe1b76a7c1eb14ecd26b8412dc7f78091273c2d9c3bb554d6c0bbbdacb84334a04a2cd6c196706d1edc0b4dcc1139fe7da2daf44c240a01f415c015fdf4882695fa0b96f121d884"}]}}]}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f00000014c0)={0xa, 0x6, 0x200, 0x24, 0x7, 0x81, 0x20, 0x7}, 0x41, &(0x7f0000001500)={0x5, 0xf, 0x41, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1f, 0x1, 0x10}, @ssp_cap={0x18, 0x10, 0xa, 0xfd, 0x3, 0x8, 0x770f, 0x6, [0xaba207d5441a2a3c, 0x3f00, 0x3f]}, @ssp_cap={0x10, 0x10, 0xa, 0xd, 0x1, 0x4, 0x0, 0x6, [0xc000]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xe, 0x8, 0x7ff}]}, 0x6, [{0xe6, &(0x7f0000001580)=@string={0xe6, 0x3, "eb3d8afb0e634d3105544797558bc9e2e683958a3b75e31104160ca4051397cddfa90459cc1ce8eac63135140e5fe01624f127d3cc4ec970d1e50d422b7a68955591f0ba58a076550c9971017d78da7b534491f55d2c13f67b718901cb280aede047114a37753d15b18ea37def33dec8c98f31ce15f952b7b79ee559f75e65696937e0d62ec8c0ff45edd8759eff0175effd870d4eda2dcc3b8e1ed3a1d78d42dadfde739996d9d7c50e292486cf8ec557d9ff2b9bf2849b773583aa7e8a3939c4a8b0265f4baad75920e98b044e4d4b9cefa8ca0a12d9821ce9f97851a3ac72f5ed19c4"}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x443}}, {0xf5, &(0x7f00000016c0)=@string={0xf5, 0x3, "206d60bba69fd217dd39b1784574bc56eb11719b47533698df43c7412e0d3a64d48fb38d0597ee214cebb1ae00ff1972fa1dea5c190f572f7fcd07f42c8d4533054f577139fb7f3128cb7d9bb132bfaeae3cdc32549ac3ce5b980e13a97de1cf3e55114e9d739cd516a0396f3398ede5f8585f925e06962b91985665d526d62afe03a05d0f3fbf9cd30fbd24959fc8b729fdb83b1a962a03c447aa2f0e8575b3d788db290b7173e223052361c5b9fc02eae090dc5d7a62648b55a2592a8515053b9d1bf7a58ce17df85b6c30f2594c4d8145630b6f096163bd65f9ca8d917136c8c6af85b4313d984fcf0d96a2079c86309088"}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x444}}, {0x94, &(0x7f0000001800)=@string={0x94, 0x3, "e21bbadbfe20a28a32fd05cb38f26db26068c9761c2d1458d3d690b3c1b11102e7f5072c271327b77c050861449795fe4f81ad63ea0946c531c51a76307b21ee8b2bc0213496e52fb7ba9e637404cfd92fe80b30ba9bb7a6bb183c8dbbe5aead3fc0a3f4a35ae86d186a05a73a9e345c52b9ba7ce00c5d00c1cddb6ae8d0c4bf61d0cc7ceeeacdd3eaa730a8a5fa6be9bda4"}}, {0x38, &(0x7f00000018c0)=@string={0x38, 0x3, "2b27aa620445d133f580dfdb1a248c0768609ad5aa54ec5a89ee0a0869789582abe8c9efbd7724df3d9378552e728539898e58e0fcde"}}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001c40)={0x4c, 0x0, &(0x7f0000001b40)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001a80)={@ptr={0x70742a85, 0x0, &(0x7f0000001980)=""/241, 0xf1, 0x0, 0x3c}, @fda={0x66646185, 0x1, 0x1, 0xa}, @flat=@weak_binder={0x77622a85, 0x10b}}, &(0x7f0000001b00)={0x0, 0x28, 0x48}}, 0x1000}], 0x72, 0x0, &(0x7f0000001bc0)="7262535e284bd09ce44c9a1d9d0cb513599eb3e20370a9ccc59afd20ae3bf97eb371572c3bbf21c8b38e4f566cec603b89be9951ee0500596a032bd2148feaad1e06f7adcde868ab6ec026486d09e5a34c220db98c19e8d0dd315beeb6d907f924036974379cd187b01cc3f3611941f6a95d"}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000001c80)=""/227) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001dc0)=@raw={'raw\x00', 0x9, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000001d80), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0x0, 0x0, 0x0, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xff], 'veth1_to_batadv\x00', 'wlan1\x00', {}, {0xff}, 0x71, 0x1, 0x7, 0x4}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@srh={{0x30}, {0xcb, 0xb, 0xe, 0x6, 0x82, 0x208, 0x100}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xe5ed, 0xb4f4, 0xffffffff, 'snmp_trap\x00', 'syz1\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) syz_open_procfs$namespace(0x0, &(0x7f0000002100)='ns/user\x00') r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002180), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x54, r8, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xa9}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffc01}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xb}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffffffc}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002440)={'vxcan1\x00', 0x0}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002540)=@o_path={&(0x7f0000002500)='./file0\x00', 0x0, 0xc018, r7}, 0x18) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002580)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002600), 0x181400, 0x0) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002640)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xf, '\x00', 0x0, r1, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x1a, 0x16, &(0x7f00000022c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe88}, @ldst={0x3, 0x0, 0x3, 0x1, 0x6, 0x1, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002380)='GPL\x00', 0xf1f, 0x47, &(0x7f00000023c0)=""/71, 0x41100, 0x0, '\x00', r9, @tracing=0x1a, r6, 0x8, &(0x7f0000002480)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000024c0)={0x0, 0x2, 0x7, 0x2}, 0x10, 0x0, r1, 0x1, &(0x7f00000026c0)=[r10, r11, r1, r1, r12, r13], &(0x7f0000002700)=[{0x0, 0x2, 0xe, 0x3}], 0x10, 0x204000}, 0x94) shmget(0x3, 0x3000, 0x286081f69e64804d, &(0x7f0000ffa000/0x3000)=nil) 6m27.839189428s ago: executing program 9 (id=2241): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xa0, 0x85, 0x54, 0x20, 0x856, 0xac29, 0xa83c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0xba, 0x0, 0x0, 0x5f, 0x8e, 0xcd}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x6, {0x6, 0x1, "a7ea3163"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0xfe, 0x0, 0x7fff0000}]}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x20, 0x0, 0x32, {0x32, 0x8, "77bce22a4faee2a4b71cfe12d69e2f114ac569ee70919b74ae16efef21502bb48793393bc6d8e7fa68dcc6294f841b8b"}}, &(0x7f0000000140)={0x0, 0x3, 0x5f, @string={0x5f, 0x3, "609f526bdbd7d5347b96340214bb87a9e538c0962a31508e06c8847a7662b7a3336729e4e4551b77f6b0a625d70292db8f6b93b489def115c9a1d8ba25d4d1333747856590b6ed1d7220056a6d00ec3b5ee9226bc5cd280a174bdf8631"}}, &(0x7f00000001c0)={0x0, 0xf, 0x30, {0x5, 0xf, 0x30, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "780b0577bbe4ec114da43e2afe99c32e"}, @ss_container_id={0x14, 0x10, 0x4, 0x12, "e10308172d1bc86021bbf00b833bb3b9"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x2, 0x9, 0x2, "b8a13f62", "0aec250e"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x8, 0x8, 0x0, 0x7f, 0x6, 0x1ff}}}, &(0x7f0000000840)={0x84, &(0x7f0000000400)={0x0, 0x9, 0xf8, "5a6d57d468ff285477dc4959b46c0b36de315ee704ba585d2e1ef47fbf2c590862edf1149a82bf4259c447b270048ad30a26e45579d702ec377223db957431bb424768248d0abbe97c953a973826668f6d44fc31685a0fb00a67671d0d2c4da50eb07ca300acc89876ef7ffbbaae5e0a2bc04ffcfaa56a21fa6826df80f3016d611f310e9b14629e227c8cb2a0ced117a59136387d1dee9043c578376d8aa84b7e2fcd3748f3a66761b054cf8365ace08aeac5020839c878895f9332d2f3442b45a772e1d85715521e81aa4ebf1742944f11c8f6288b1eb3818b626c871a203014458b9cb177b69491989e6cd7cc12e2290dc78f86fe9ec7"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xe6}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x60, 0x10}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000600)={0x40, 0xb, 0x2, "d154"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000700)={0x40, 0x19, 0x2, "adfb"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0x1e, 0x1}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0xf3a, 0x0) write$binfmt_misc(r9, &(0x7f0000000980), 0xfdef) splice(r5, 0x0, r9, 0x0, 0x80, 0x4) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read$FUSE(r8, &(0x7f0000000980)={0x2020}, 0x2020) close_range(r2, 0xffffffffffffffff, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 4m51.737627179s ago: executing program 9 (id=2241): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xa0, 0x85, 0x54, 0x20, 0x856, 0xac29, 0xa83c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0xba, 0x0, 0x0, 0x5f, 0x8e, 0xcd}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x6, {0x6, 0x1, "a7ea3163"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x26, 0xfe, 0x0, 0x7fff0000}]}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x20, 0x0, 0x32, {0x32, 0x8, "77bce22a4faee2a4b71cfe12d69e2f114ac569ee70919b74ae16efef21502bb48793393bc6d8e7fa68dcc6294f841b8b"}}, &(0x7f0000000140)={0x0, 0x3, 0x5f, @string={0x5f, 0x3, "609f526bdbd7d5347b96340214bb87a9e538c0962a31508e06c8847a7662b7a3336729e4e4551b77f6b0a625d70292db8f6b93b489def115c9a1d8ba25d4d1333747856590b6ed1d7220056a6d00ec3b5ee9226bc5cd280a174bdf8631"}}, &(0x7f00000001c0)={0x0, 0xf, 0x30, {0x5, 0xf, 0x30, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "780b0577bbe4ec114da43e2afe99c32e"}, @ss_container_id={0x14, 0x10, 0x4, 0x12, "e10308172d1bc86021bbf00b833bb3b9"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x2, 0x9, 0x2, "b8a13f62", "0aec250e"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x8, 0x8, 0x0, 0x7f, 0x6, 0x1ff}}}, &(0x7f0000000840)={0x84, &(0x7f0000000400)={0x0, 0x9, 0xf8, "5a6d57d468ff285477dc4959b46c0b36de315ee704ba585d2e1ef47fbf2c590862edf1149a82bf4259c447b270048ad30a26e45579d702ec377223db957431bb424768248d0abbe97c953a973826668f6d44fc31685a0fb00a67671d0d2c4da50eb07ca300acc89876ef7ffbbaae5e0a2bc04ffcfaa56a21fa6826df80f3016d611f310e9b14629e227c8cb2a0ced117a59136387d1dee9043c578376d8aa84b7e2fcd3748f3a66761b054cf8365ace08aeac5020839c878895f9332d2f3442b45a772e1d85715521e81aa4ebf1742944f11c8f6288b1eb3818b626c871a203014458b9cb177b69491989e6cd7cc12e2290dc78f86fe9ec7"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xe6}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x60, 0x10}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000600)={0x40, 0xb, 0x2, "d154"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000700)={0x40, 0x19, 0x2, "adfb"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0x1e, 0x1}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0xf3a, 0x0) write$binfmt_misc(r9, &(0x7f0000000980), 0xfdef) splice(r5, 0x0, r9, 0x0, 0x80, 0x4) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read$FUSE(r8, &(0x7f0000000980)={0x2020}, 0x2020) close_range(r2, 0xffffffffffffffff, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 4m47.233727963s ago: executing program 8 (id=2270): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0x4) recvmmsg(r0, &(0x7f0000002e00)=[{{&(0x7f0000000300)=@x25, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000100)}, {&(0x7f0000000440)=""/73, 0x49}, {&(0x7f00000004c0)=""/163, 0xa3}, {&(0x7f0000002fc0)=""/4103, 0x1007}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000001840)=""/156, 0x9c}, {&(0x7f0000000280)=""/42, 0x2a}], 0x8, &(0x7f0000001900)=""/78, 0x4e}, 0xff}, {{&(0x7f0000001980), 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/94, 0x5e}, {&(0x7f0000000640)=""/53, 0x35}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000001a80)=""/18, 0x12}], 0x4, &(0x7f0000001b00)=""/245, 0xf5}, 0x47aa}, {{&(0x7f0000001c00)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001c80)=""/145, 0x91}, {&(0x7f0000001d40)=""/240, 0xf0}, {&(0x7f0000001e40)=""/74, 0x4a}, {&(0x7f0000001ec0)=""/225, 0xe1}, {0xfffffffffffffffd}, {&(0x7f0000001fc0)=""/55, 0x37}, {&(0x7f0000002000)=""/220, 0xdc}, {&(0x7f0000000840)=""/77, 0x4d}, {&(0x7f0000002180)=""/17, 0x11}], 0x9}, 0x8}, {{&(0x7f0000002280)=@ax25={{0x3, @null}, [@netrom, @default, @remote, @null, @remote, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002300)=""/23, 0x17}, {&(0x7f0000002340)=""/241, 0xf1}, {&(0x7f0000002440)=""/130, 0x82}], 0x3}}, {{&(0x7f0000002540)=@rc={0x1f, @none}, 0x80, &(0x7f00000026c0)=[{&(0x7f00000025c0)=""/51, 0x33}, {&(0x7f0000002600)=""/132, 0x84}], 0x2, &(0x7f0000002700)=""/156, 0x9c}, 0x9}, {{&(0x7f00000027c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000002980), 0x0, &(0x7f00000029c0)=""/246, 0xf6}, 0x24000}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002ac0)=""/223, 0xdf}, {&(0x7f0000002bc0)=""/234, 0xea}], 0x2, &(0x7f0000002d00)=""/227, 0xe3}, 0x4}], 0x7, 0xcb, 0x0) (async) recvmmsg(r0, &(0x7f0000002e00)=[{{&(0x7f0000000300)=@x25, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000100)}, {&(0x7f0000000440)=""/73, 0x49}, {&(0x7f00000004c0)=""/163, 0xa3}, {&(0x7f0000002fc0)=""/4103, 0x1007}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000001840)=""/156, 0x9c}, {&(0x7f0000000280)=""/42, 0x2a}], 0x8, &(0x7f0000001900)=""/78, 0x4e}, 0xff}, {{&(0x7f0000001980), 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/94, 0x5e}, {&(0x7f0000000640)=""/53, 0x35}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000001a80)=""/18, 0x12}], 0x4, &(0x7f0000001b00)=""/245, 0xf5}, 0x47aa}, {{&(0x7f0000001c00)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001c80)=""/145, 0x91}, {&(0x7f0000001d40)=""/240, 0xf0}, {&(0x7f0000001e40)=""/74, 0x4a}, {&(0x7f0000001ec0)=""/225, 0xe1}, {0xfffffffffffffffd}, {&(0x7f0000001fc0)=""/55, 0x37}, {&(0x7f0000002000)=""/220, 0xdc}, {&(0x7f0000000840)=""/77, 0x4d}, {&(0x7f0000002180)=""/17, 0x11}], 0x9}, 0x8}, {{&(0x7f0000002280)=@ax25={{0x3, @null}, [@netrom, @default, @remote, @null, @remote, @rose, @bcast, @bcast]}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002300)=""/23, 0x17}, {&(0x7f0000002340)=""/241, 0xf1}, {&(0x7f0000002440)=""/130, 0x82}], 0x3}}, {{&(0x7f0000002540)=@rc={0x1f, @none}, 0x80, &(0x7f00000026c0)=[{&(0x7f00000025c0)=""/51, 0x33}, {&(0x7f0000002600)=""/132, 0x84}], 0x2, &(0x7f0000002700)=""/156, 0x9c}, 0x9}, {{&(0x7f00000027c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000002980), 0x0, &(0x7f00000029c0)=""/246, 0xf6}, 0x24000}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002ac0)=""/223, 0xdf}, {&(0x7f0000002bc0)=""/234, 0xea}], 0x2, &(0x7f0000002d00)=""/227, 0xe3}, 0x4}], 0x7, 0xcb, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) listen(r2, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd61fb070100542f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d270100810000013f0c78f364e8000086dd810088a808"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0xb) (async) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0xb) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1}, 0x6e) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r6, 0x0, 0x0) (async) read$FUSE(r6, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 4m46.415052464s ago: executing program 9 (id=2271): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x640, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x4}]}, @NFT_MSG_NEWTABLE={0xac, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x11, 0x6, "caa827f5345c98c89c2610f761"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x63, 0x6, "f26c231d1754d4a72ae880a0032781e3bcb2c43ce686ee542f03e274b8f02991f78849a57acae29b44214ca81397ee05289b295f9ef36deecf525e6db3d029c8d282b856ed5cf322d26c9f80014b5eb076572e88c464fa5800d5030b70461f"}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x18c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000180)=[0x7, 0xfe00, 0xb49], &(0x7f0000000240)=[0x4, 0x2, 0xfff, 0x8000, 0x2, 0x6, 0xfff2], &(0x7f00000002c0)=[0x2, 0x8, 0x7fff, 0x3, 0x5, 0xc10c], &(0x7f0000000300)=[0x0, 0x1, 0x43, 0x4, 0x2, 0xed, 0x1ff, 0x7]}) socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100"], 0x18}, 0x0, 0x40000, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000070000000000000c02000000000000000300000d00000000050000000100000000000000000000001000000002000000000030300000615f00"], 0x0, 0x51, 0x0, 0x1, 0x9}, 0x28) io_uring_enter(r6, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m42.719505957s ago: executing program 8 (id=2277): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) capget(&(0x7f0000000340)={0x20071026, r4}, &(0x7f0000000400)={0x1ff, 0x8000, 0xc, 0x8, 0x2, 0x1}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r5 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000040)={0x40, 0xffffffffffffffff, 0x0, {0x0, 0x81b}, 0x7f}, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r8) r9 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) r12 = fcntl$getown(r2, 0x9) ptrace$getregs(0xc, r12, 0x2, &(0x7f0000000240)=""/93) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x34, 0x52, 0x1, 0x70bd2a, 0x0, {0xa}, [@typed={0x4, 0xc4}, @generic="98526f4f4e0ee9a7948d5f3c402040a0091039cfdc0a58b9f23e28"]}, 0x34}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x3516, 0x67f, 0x64, 0x0, 0x0) 4m42.619519622s ago: executing program 9 (id=2278): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 4m37.424361443s ago: executing program 9 (id=2294): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000002280)={r0, &(0x7f0000002180)='\x00', 0x0, &(0x7f00000021c0)={@_ha_fsid={[0x8, 0x6]}, {0x5, 0x1, 0xc, 0x3ff}}, 0x0, &(0x7f0000002200)={@_ha_fsid}, &(0x7f0000002240)=0x6}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x10000, 0xfffffffe}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000097000/0x1000)=nil, 0x1000, 0x4, 0x28011, r3, 0x0) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) pipe2$9p(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RSETATTR(r4, &(0x7f0000002140)={0x7, 0x1b, 0x1}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x13, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4e7c}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @jmp={0x5, 0x0, 0x2, 0x0, 0x6, 0xfffffffffffffff0, 0x8}], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0xa, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) ppoll(&(0x7f00000000c0)=[{r5}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) 4m37.073186682s ago: executing program 9 (id=2296): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000017", @ANYRES16=r2, @ANYBLOB="4d7efcffffff000000002a00000008002f00000000000a0001007770616e30000000"], 0x28}, 0x4, 0x700000000000000, 0x0, 0x20084090}, 0x4010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r6) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, r7, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_ID={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x408000}, 0x1d, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x44001}, 0x8010) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) syz_io_uring_complete(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x3fffffe, 0x0, 0x0, 0x41000, 0x2b, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r11 = getpid() ptrace$poke(0x5, 0x0, 0x0, 0xf5) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f00000005c0)={[0x8]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r11, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r13, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r12, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 4m34.339355258s ago: executing program 8 (id=2302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 4m32.409493663s ago: executing program 8 (id=2303): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000cc0)=@newsa={0x144, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@remote, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@local, {0xfffffffffffffffc, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x3}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) syz_usb_connect$uac1(0x4, 0xbc, &(0x7f0000000600)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa00030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002000a000a00040c240202030202508000090111240605020507002e130a004ef10200000924030102020505f50904010000010200000904"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 4m30.214143188s ago: executing program 8 (id=2307): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0001}]}) getegid() r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$nci(r1, 0x0, 0x0) 4m27.53110284s ago: executing program 8 (id=2310): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000340)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) (fail_nth: 1) 4m20.167515965s ago: executing program 37 (id=2296): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000017", @ANYRES16=r2, @ANYBLOB="4d7efcffffff000000002a00000008002f00000000000a0001007770616e30000000"], 0x28}, 0x4, 0x700000000000000, 0x0, 0x20084090}, 0x4010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r6) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, r7, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_ID={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x408000}, 0x1d, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x44001}, 0x8010) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) syz_io_uring_complete(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x3fffffe, 0x0, 0x0, 0x41000, 0x2b, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r11 = getpid() ptrace$poke(0x5, 0x0, 0x0, 0xf5) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f00000005c0)={[0x8]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r11, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r13, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r12, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 4m12.000601968s ago: executing program 38 (id=2310): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000340)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) (fail_nth: 1) 21.663019785s ago: executing program 2 (id=2717): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x132, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002c00)={0x2020}, 0x2020) 19.336911966s ago: executing program 7 (id=2720): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be4", 0x79, 0xfffffffffffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getgroups(0xfffe, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x208}}, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000200)='+\'\x00', 0x0, r6) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r5) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x80) getpid() 13.784216147s ago: executing program 7 (id=2724): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xa) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x1, 0x2, 0x0, 0x10, 0xffffffff, 0xa000009}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 11.927311651s ago: executing program 7 (id=2726): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="22000000040000001000000012e05a6308b6a68093c6ba5cd97e39c457ffca1a8954f27e4073d7270838396184b2f00543195e941510452ab3427f2d184abb07f4bd54d78b3e7eb77a5e68b9fbb6c9b0070a2e03dcda6dc703286eb47b9a4870e2a5f81af9d183c0022169c41dd1c2f7c12b7d00ef27a64331a3f4a57965428c97054a36d8b2aaa43881ae370ce12ae33b1086ab5d7e3415"], 0x48) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000002080)=""/102400, 0x19000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000004200)='adfs\x00', 0xa18410, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x4}]}, {0x0, [0x61, 0x5f, 0x0, 0x30, 0x61, 0x61, 0x2e]}}, 0x0, 0x2d, 0x0, 0x8, 0x1}, 0x28) r1 = landlock_create_ruleset(&(0x7f0000000280)={0x1, 0x4}, 0x18, 0x3) landlock_restrict_self(r1, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000500)={'pcmmio\x00', [0x4f28, 0x4, 0x10000, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cfef, 0xfd, 0xe3d, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x0, 0x1, 0x0, 0x20001e58, 0x3, 0xe64, 0x3, 0x8, 0x3, 0x0, 0xfffffff8]}) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 11.731709495s ago: executing program 2 (id=2727): semtimedop(0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020000}) 10.067227081s ago: executing program 2 (id=2730): semctl$IPC_RMID(0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020000}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x428000, 0x0) 9.317142053s ago: executing program 2 (id=2731): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$kcm(r6, &(0x7f0000001880)={0x0, 0xf5, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x8dff}, {&(0x7f0000000080)="bcc9b1557de1fed1f955144629ed4dcfda58d1b606fa77a7658dcf3c33679ea22502e3cff80000f5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x24040001) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_open_dev$dri(0x0, 0x1ff, 0x0) 9.315665071s ago: executing program 4 (id=2732): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') syz_emit_ethernet(0x6d, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c200000000000000000086dd6000000000373afffe880000000000000000000000000001ff020000000000000000000000000001010190780500000068000000000001012001000000000000000000000000000010438cdb"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r5 = getpid() tgkill(r5, r5, 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.459456964s ago: executing program 4 (id=2733): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000bc0)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80002000, 0x0, 0x8, 0x0, 0x6, 0x1, 0x5, 0x39, 0x747d5e13, 0xc, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x10003, 0x3, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623e, 0xd, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da6, 0x2, 0x202, 0x2, 0x4, 0xe, 0x7, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xfffffffd, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x8f08, 0x5, 0xfffd, 0x3, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0x5, 0x7, 0x1, 0x6, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0x5, 0x2, 0x0, 0x2, 0x401, 0xc, 0x7, 0x4, 0x9, 0xe, 0x5, 0x3, 0x6, 0x2, 0x11, 0x1, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x0, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x8000, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x80000000, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x5, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xed, 0x9, 0x20000005, 0x3, 0xdc, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x74a8b99a, 0x3, 0x88, 0x2, 0x3fffffe, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x105, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x83, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4, 0x7ffffffd, 0xa, 0xe, 0x101, 0x13, 0xf, 0x136, 0x6]}, 0x45c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) mkdir(0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) 5.941855154s ago: executing program 7 (id=2734): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000001705000008004ef02d3501000000000095000000000000006916180000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000000000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a511007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 4.624396906s ago: executing program 2 (id=2735): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x132, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002c00)={0x2020}, 0x2020) 3.203510758s ago: executing program 2 (id=2736): open$dir(0x0, 0x1, 0x20) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x7e, 0xe1, 0x7d, 0x8, 0x7ca, 0xa868, 0x1618, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x5, 0x0, 0x3, [{{0x9, 0x4, 0x5f, 0x7, 0x0, 0x5c, 0xb8, 0x6f, 0x9}}]}}]}}, &(0x7f00000036c0)={0x0, 0x0, 0xb9, &(0x7f0000000000)={0x5, 0xf, 0xb9, 0x1, [@generic={0xb4, 0x10, 0x2, "284542a5248d63bff54ffd48fa1d9e04f9b5161926ddcadd15bdff8b35494146af3c9db64d1e59f544a7b245570f706bd37c6446fce8d0e213605cb17b353a8a2e2df39684cf8b9913bcfee057ca07416d1008f6f48202a48ab76ed1d98cf1eb49780633f5e3e7ff3474d97c4fb5b0111c1ffe95fe718a8c8f35ac3e7c8b3d9caa6d7b717c5d78e00ed861ad76d6dbfedd456ca0199d481427d4078a131f3630d55ddc6793d8a7af84fc00000000000000"}]}}) 2.290894097s ago: executing program 7 (id=2737): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='-1\x00', 0x2) 2.137134745s ago: executing program 7 (id=2738): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$setperm(0x5, r1, 0x4221030) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x91) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r3, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r3}}, 0x1c) syz_usb_connect(0x1, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x6b, 0xd7, 0x41, 0x8, 0x694, 0x1, 0x7b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xc8, 0x90, 0x3, [{{0x9, 0x4, 0xad, 0x8, 0x0, 0x57, 0x4f, 0xb9, 0xff}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="0203aa6f49cfac58b6eb1d55e2371887e57449a54dde21cf6fedd724ef2a78b51edb673af8bb601ed33bfa44"]}, {0x59, &(0x7f00000000c0)=ANY=[@ANYBLOB="5903bb638b3a38a0e993916742c92629e032453ec2f7104f10c4eb385459d5634f456c58f50a88eb1cdd"]}, {0x0, 0x0}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc13}}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001040)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f36006c090890e0878f0e1ac6e7f89b334d959b639a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000400000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617679314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec230911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918c91243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac5a4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4b333bd5bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3be3b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ce0700c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d486046b2c0e2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29c60acebdbe8ddbd75c2f998d8a57f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95ff80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513007000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d946a2daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810300000000000000a12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf000000800000000007b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0e797e8bd1f4108b7807fb36207685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ad50dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b9048017848416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1db44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de9c0587c2cb5fe36d7d3e5db21b013b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cf4b23329072e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06810002000000000000957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f3e90d5943dbc10360a1a49700d1dfbf66d69f6fbafe1e83cdde8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000100", 0x35e}}, 0x1006) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) open_by_handle_at(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='\f\x00\x00\x00'], 0x8001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000300000000000000003000000340001000100000095"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x8181) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x90, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x3, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x1, 0x7, 0x4, 0x6}, {0x4d, 0x12, 0x8, 0x4}, {0xc, 0x90, 0x2, 0x5}, {0xe54, 0x6a, 0x1, 0xfffffff6}, {0xff01, 0x3, 0x81, 0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 2.103978846s ago: executing program 4 (id=2739): semctl$IPC_RMID(0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020000}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x428000, 0x0) 1.732923817s ago: executing program 4 (id=2740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c801}, 0x20000800) syz_open_dev$vim2m(&(0x7f0000000080), 0x1fb, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c801}, 0x20000800) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x1fb, 0x2) (async) 1.587415843s ago: executing program 4 (id=2741): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 2) socket$nl_xfrm(0x10, 0x3, 0x6) 0s ago: executing program 4 (id=2742): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be4", 0x79, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getgroups(0xfffe, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) kernel console output (not intermixed with test programs): 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1504.003705][T16993] RSP: 002b:00007f8a279fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1504.003730][T16993] RAX: ffffffffffffffda RBX: 00007f8a29a25fa0 RCX: 00007f8a297ac629 [ 1504.003746][T16993] RDX: 00002000000000c0 RSI: 000000004008af30 RDI: 0000000000000004 [ 1504.003760][T16993] RBP: 00007f8a279fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1504.003772][T16993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1504.003785][T16993] R13: 00007f8a29a26038 R14: 00007f8a29a25fa0 R15: 00007ffc3b94b8f8 [ 1504.003821][T16993] [ 1504.003843][T16993] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1504.159637][T16998] fuse: Bad value for 'fd' [ 1504.803595][T17009] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1507.028616][ T174] team0 (unregistering): Port device team_slave_1 removed [ 1507.336542][ T174] team0 (unregistering): Port device team_slave_0 removed [ 1509.810547][T17009] veth2: entered allmulticast mode [ 1510.528630][T17043] FAULT_INJECTION: forcing a failure. [ 1510.528630][T17043] name failslab, interval 1, probability 0, space 0, times 0 [ 1510.528689][T17043] CPU: 0 UID: 0 PID: 17043 Comm: syz.4.2498 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1510.528715][T17043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1510.528727][T17043] Call Trace: [ 1510.528736][T17043] [ 1510.528744][T17043] dump_stack_lvl+0xe8/0x150 [ 1510.528767][T17043] should_fail_ex+0x46b/0x600 [ 1510.528784][T17043] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1510.528799][T17043] should_failslab+0xa8/0x100 [ 1510.528814][T17043] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1510.528827][T17043] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 1510.528841][T17043] ? sock_alloc_inode+0x28/0xc0 [ 1510.528857][T17043] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1510.528870][T17043] sock_alloc_inode+0x28/0xc0 [ 1510.528884][T17043] alloc_inode+0x6a/0x1b0 [ 1510.528899][T17043] __sock_create+0x12d/0x9d0 [ 1510.528915][T17043] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1510.528936][T17043] rfcomm_dlc_open+0x364/0x1210 [ 1510.528948][T17043] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1510.528970][T17043] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 1510.528987][T17043] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1510.529002][T17043] ? lockdep_hardirqs_on+0x7a/0x110 [ 1510.529021][T17043] rfcomm_sock_connect+0x2f7/0x640 [ 1510.529040][T17043] __sys_connect+0x315/0x450 [ 1510.529058][T17043] ? __pfx___sys_connect+0x10/0x10 [ 1510.529081][T17043] ? __pfx_ksys_write+0x10/0x10 [ 1510.529098][T17043] __x64_sys_connect+0x7a/0x90 [ 1510.529115][T17043] do_syscall_64+0x14d/0xf80 [ 1510.529130][T17043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.529142][T17043] ? clear_bhb_loop+0x40/0x90 [ 1510.529156][T17043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.529168][T17043] RIP: 0033:0x7efcd3aec629 [ 1510.529181][T17043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1510.529192][T17043] RSP: 002b:00007efcd1d04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1510.529207][T17043] RAX: ffffffffffffffda RBX: 00007efcd3d66180 RCX: 00007efcd3aec629 [ 1510.529217][T17043] RDX: 0000000000000014 RSI: 0000200000000200 RDI: 0000000000000006 [ 1510.529225][T17043] RBP: 00007efcd1d04090 R08: 0000000000000000 R09: 0000000000000000 [ 1510.529233][T17043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1510.529241][T17043] R13: 00007efcd3d66218 R14: 00007efcd3d66180 R15: 00007ffd047f3ec8 [ 1510.529261][T17043] [ 1510.529285][T17043] socket: no more sockets [ 1512.247891][T16775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1512.248083][T16775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.248337][T16775] bridge_slave_0: entered allmulticast mode [ 1512.251519][T16775] bridge_slave_0: entered promiscuous mode [ 1512.257642][T15832] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1512.324573][T16775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.324717][T16775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.324992][T16775] bridge_slave_1: entered allmulticast mode [ 1512.347042][T16775] bridge_slave_1: entered promiscuous mode [ 1512.421208][T15832] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 1512.421242][T15832] usb 3-1: config 0 has no interface number 0 [ 1512.421291][T15832] usb 3-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1512.421320][T15832] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1512.421349][T15832] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1512.476605][T15832] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1512.476639][T15832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.476661][T15832] usb 3-1: Product: syz [ 1512.476676][T15832] usb 3-1: Manufacturer: syz [ 1512.476690][T15832] usb 3-1: SerialNumber: syz [ 1512.519507][T15832] usb 3-1: config 0 descriptor?? [ 1512.551850][T15832] iguanair 3-1:0.255: probe with driver iguanair failed with error -12 [ 1512.708170][T16775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.725981][T16891] chnl_net:caif_netlink_parms(): no params data found [ 1512.748677][T15009] usb 3-1: USB disconnect, device number 75 [ 1512.770813][T16775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1512.838423][T17057] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2502'. [ 1513.655723][T17072] fuse: Bad value for 'group_id' [ 1513.655746][T17072] fuse: Bad value for 'group_id' [ 1513.698791][T16775] team0: Port device team_slave_0 added [ 1513.707790][T16775] team0: Port device team_slave_1 added [ 1513.923229][ T36] audit: type=1107 audit(1771990013.698:1931): pid=17071 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1514.346367][T13637] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1514.351349][T13637] Bluetooth: hci5: Injecting HCI hardware error event [ 1514.357140][T13637] Bluetooth: hci5: hardware error 0x00 [ 1514.738346][T16775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1514.738365][T16775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1514.738393][T16775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1514.917226][T16775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1514.917247][T16775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1514.917278][T16775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1515.006229][T16891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.006377][T16891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.006621][T16891] bridge_slave_0: entered allmulticast mode [ 1515.010037][T16891] bridge_slave_0: entered promiscuous mode [ 1515.079516][T16891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.079678][T16891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.080091][T16891] bridge_slave_1: entered allmulticast mode [ 1515.083137][T16891] bridge_slave_1: entered promiscuous mode [ 1515.086030][T15832] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1515.176030][T15107] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1515.215998][T15832] usb 8-1: device descriptor read/64, error -71 [ 1515.363325][T15107] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 1515.363346][T15107] usb 3-1: config 0 has no interface number 0 [ 1515.363373][T15107] usb 3-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1515.363388][T15107] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1515.363405][T15107] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1515.376989][T15107] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1515.377019][T15107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.377039][T15107] usb 3-1: Product: syz [ 1515.377052][T15107] usb 3-1: Manufacturer: syz [ 1515.377066][T15107] usb 3-1: SerialNumber: syz [ 1515.390373][T15107] usb 3-1: config 0 descriptor?? [ 1515.401785][T15107] iguanair 3-1:0.255: probe with driver iguanair failed with error -12 [ 1515.455961][T15832] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1515.586193][T15832] usb 8-1: device descriptor read/64, error -71 [ 1515.613436][T15732] usb 3-1: USB disconnect, device number 76 [ 1515.700690][T16775] hsr_slave_0: entered promiscuous mode [ 1515.702351][T16775] hsr_slave_1: entered promiscuous mode [ 1515.709532][T16891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.723058][T15832] usb usb8-port1: attempt power cycle [ 1516.076986][T15832] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1516.099047][T15832] usb 8-1: device descriptor read/8, error -71 [ 1516.231032][T16891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.339504][T15832] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1516.364044][T15832] usb 8-1: device descriptor read/8, error -71 [ 1516.466548][T15832] usb usb8-port1: unable to enumerate USB device [ 1516.535958][T15732] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1516.726019][T15732] usb 3-1: Using ep0 maxpacket: 8 [ 1516.728639][T15732] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1516.728675][T15732] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1516.728692][T15732] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1516.728708][T15732] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1516.728722][T15732] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1516.730355][T15732] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1516.730394][T15732] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1516.730410][T15732] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1516.730425][T15732] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1516.730439][T15732] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1516.732118][T15732] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1516.732149][T15732] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1516.732166][T15732] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1516.732181][T15732] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1516.732196][T15732] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1516.739493][T15732] usb 3-1: string descriptor 0 read error: -22 [ 1516.739630][T15732] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1516.739653][T15732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.788521][T15732] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1516.795912][T13637] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1517.073743][T17108] FAULT_INJECTION: forcing a failure. [ 1517.073743][T17108] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.073807][T17108] CPU: 0 UID: 0 PID: 17108 Comm: syz.4.2515 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1517.073832][T17108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1517.073845][T17108] Call Trace: [ 1517.073853][T17108] [ 1517.073862][T17108] dump_stack_lvl+0xe8/0x150 [ 1517.073898][T17108] should_fail_ex+0x46b/0x600 [ 1517.073930][T17108] should_failslab+0xa8/0x100 [ 1517.073955][T17108] __kmalloc_cache_noprof+0x84/0x690 [ 1517.073978][T17108] ? tipc_group_create+0xa1/0x500 [ 1517.074005][T17108] tipc_group_create+0xa1/0x500 [ 1517.074025][T17108] tipc_sk_join+0x256/0x6a0 [ 1517.074044][T17108] ? __pfx_tipc_sk_join+0x10/0x10 [ 1517.074060][T17108] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 1517.074078][T17108] tipc_setsockopt+0x73e/0x990 [ 1517.074096][T17108] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1517.074135][T17108] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1517.074150][T17108] do_sock_setsockopt+0x17c/0x1b0 [ 1517.074171][T17108] __x64_sys_setsockopt+0x143/0x1b0 [ 1517.074192][T17108] do_syscall_64+0x14d/0xf80 [ 1517.074208][T17108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.074220][T17108] ? clear_bhb_loop+0x40/0x90 [ 1517.074234][T17108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.074246][T17108] RIP: 0033:0x7efcd3aec629 [ 1517.074259][T17108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1517.074269][T17108] RSP: 002b:00007efcd1d25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1517.074284][T17108] RAX: ffffffffffffffda RBX: 00007efcd3d66090 RCX: 00007efcd3aec629 [ 1517.074293][T17108] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 1517.074301][T17108] RBP: 00007efcd1d25090 R08: 0000000000000010 R09: 0000000000000000 [ 1517.074309][T17108] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1517.074320][T17108] R13: 00007efcd3d66128 R14: 00007efcd3d66090 R15: 00007ffd047f3ec8 [ 1517.074340][T17108] [ 1517.349525][T13637] Bluetooth: hci0: command 0x0405 tx timeout [ 1517.549913][T15832] usb 3-1: USB disconnect, device number 77 [ 1519.166048][T17119] FAULT_INJECTION: forcing a failure. [ 1519.166048][T17119] name failslab, interval 1, probability 0, space 0, times 0 [ 1519.166110][T17119] CPU: 0 UID: 0 PID: 17119 Comm: syz.4.2518 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1519.166135][T17119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1519.166148][T17119] Call Trace: [ 1519.166156][T17119] [ 1519.166166][T17119] dump_stack_lvl+0xe8/0x150 [ 1519.166198][T17119] should_fail_ex+0x46b/0x600 [ 1519.166218][T17119] should_failslab+0xa8/0x100 [ 1519.166233][T17119] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 1519.166248][T17119] ? __get_vm_area_node+0x171/0x350 [ 1519.166263][T17119] __get_vm_area_node+0x171/0x350 [ 1519.166278][T17119] __vmalloc_node_range_noprof+0x372/0x1730 [ 1519.166292][T17119] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1519.166312][T17119] ? irqentry_exit+0x59e/0x620 [ 1519.166336][T17119] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1519.166352][T17119] ? irqentry_exit+0x59e/0x620 [ 1519.166366][T17119] ? lockdep_hardirqs_on+0x7a/0x110 [ 1519.166380][T17119] ? irqentry_exit+0x59e/0x620 [ 1519.166396][T17119] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1519.166407][T17119] __vmalloc_noprof+0xd2/0x120 [ 1519.166419][T17119] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1519.166433][T17119] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1519.166447][T17119] bpf_prog_alloc+0x3c/0x1a0 [ 1519.166460][T17119] bpf_prog_load+0x7ba/0x1ae0 [ 1519.166481][T17119] ? __pfx_bpf_prog_load+0x10/0x10 [ 1519.166512][T17119] ? rep_movs_alternative+0x4c/0x90 [ 1519.166523][T17119] ? bpf_lsm_bpf+0x9/0x20 [ 1519.166538][T17119] ? security_bpf+0x7e/0x2d0 [ 1519.166552][T17119] __sys_bpf+0x618/0x950 [ 1519.166571][T17119] ? __pfx___sys_bpf+0x10/0x10 [ 1519.166606][T17119] __x64_sys_bpf+0x7c/0x90 [ 1519.166622][T17119] do_syscall_64+0x14d/0xf80 [ 1519.166637][T17119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.166648][T17119] ? clear_bhb_loop+0x40/0x90 [ 1519.166663][T17119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.166674][T17119] RIP: 0033:0x7efcd3aec629 [ 1519.166686][T17119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1519.166697][T17119] RSP: 002b:00007efcd1d25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1519.166712][T17119] RAX: ffffffffffffffda RBX: 00007efcd3d66090 RCX: 00007efcd3aec629 [ 1519.166721][T17119] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1519.166729][T17119] RBP: 00007efcd1d25090 R08: 0000000000000000 R09: 0000000000000000 [ 1519.166737][T17119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1519.166745][T17119] R13: 00007efcd3d66128 R14: 00007efcd3d66090 R15: 00007ffd047f3ec8 [ 1519.166764][T17119] [ 1519.166793][T17119] syz.4.2518: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1519.167144][T17119] CPU: 0 UID: 0 PID: 17119 Comm: syz.4.2518 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1519.167168][T17119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1519.167178][T17119] Call Trace: [ 1519.167183][T17119] [ 1519.167189][T17119] dump_stack_lvl+0xe8/0x150 [ 1519.167206][T17119] warn_alloc+0x263/0x3e0 [ 1519.167220][T17119] ? should_fail_ex+0x343/0x600 [ 1519.167245][T17119] ? __pfx_warn_alloc+0x10/0x10 [ 1519.167258][T17119] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 1519.167272][T17119] ? __get_vm_area_node+0x171/0x350 [ 1519.167286][T17119] ? __get_vm_area_node+0x2e1/0x350 [ 1519.167302][T17119] __vmalloc_node_range_noprof+0x397/0x1730 [ 1519.167323][T17119] ? irqentry_exit+0x59e/0x620 [ 1519.167346][T17119] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1519.167361][T17119] ? irqentry_exit+0x59e/0x620 [ 1519.167375][T17119] ? lockdep_hardirqs_on+0x7a/0x110 [ 1519.167389][T17119] ? irqentry_exit+0x59e/0x620 [ 1519.167405][T17119] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1519.167416][T17119] __vmalloc_noprof+0xd2/0x120 [ 1519.167428][T17119] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1519.167441][T17119] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1519.167455][T17119] bpf_prog_alloc+0x3c/0x1a0 [ 1519.167468][T17119] bpf_prog_load+0x7ba/0x1ae0 [ 1519.167488][T17119] ? __pfx_bpf_prog_load+0x10/0x10 [ 1519.167518][T17119] ? rep_movs_alternative+0x4c/0x90 [ 1519.167528][T17119] ? bpf_lsm_bpf+0x9/0x20 [ 1519.167542][T17119] ? security_bpf+0x7e/0x2d0 [ 1519.167555][T17119] __sys_bpf+0x618/0x950 [ 1519.167573][T17119] ? __pfx___sys_bpf+0x10/0x10 [ 1519.167608][T17119] __x64_sys_bpf+0x7c/0x90 [ 1519.167625][T17119] do_syscall_64+0x14d/0xf80 [ 1519.167639][T17119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.167650][T17119] ? clear_bhb_loop+0x40/0x90 [ 1519.167665][T17119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.167676][T17119] RIP: 0033:0x7efcd3aec629 [ 1519.167686][T17119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1519.167695][T17119] RSP: 002b:00007efcd1d25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1519.167707][T17119] RAX: ffffffffffffffda RBX: 00007efcd3d66090 RCX: 00007efcd3aec629 [ 1519.167716][T17119] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1519.167723][T17119] RBP: 00007efcd1d25090 R08: 0000000000000000 R09: 0000000000000000 [ 1519.167730][T17119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1519.167737][T17119] R13: 00007efcd3d66128 R14: 00007efcd3d66090 R15: 00007ffd047f3ec8 [ 1519.167756][T17119] [ 1519.167782][T17119] Mem-Info: [ 1519.167792][T17119] active_anon:3146 inactive_anon:31754 isolated_anon:0 [ 1519.167792][T17119] active_file:31854 inactive_file:38160 isolated_file:0 [ 1519.167792][T17119] unevictable:768 dirty:133 writeback:0 [ 1519.167792][T17119] slab_reclaimable:13670 slab_unreclaimable:113057 [ 1519.167792][T17119] mapped:48239 shmem:29141 pagetables:1664 [ 1519.167792][T17119] sec_pagetables:0 bounce:0 [ 1519.167792][T17119] kernel_misc_reclaimable:0 [ 1519.167792][T17119] free:1255901 free_pcp:3828 free_cma:0 [ 1519.167867][T17119] Node 0 active_anon:12584kB inactive_anon:127016kB active_file:127212kB inactive_file:152640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:164284kB dirty:528kB writeback:0kB shmem:115028kB kernel_stack:14644kB pagetables:6512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1519.167940][T17119] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28672kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1519.168009][T17119] Node 0 DMA free:11232kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 1519.168124][T17119] lowmem_reserve[]: 0 2507 2508 2508 2508 [ 1519.168265][T17119] Node 0 DMA32 free:1158756kB boost:0kB min:3936kB low:6476kB high:9016kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12584kB inactive_anon:127016kB active_file:127212kB inactive_file:152640kB unevictable:1536kB writepending:528kB zspages:0kB present:3129332kB managed:2567896kB mlocked:0kB bounce:0kB free_pcp:14980kB local_pcp:7012kB free_cma:0kB [ 1519.168382][T17119] lowmem_reserve[]: 0 0 0 0 0 [ 1519.168543][T17119] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:720kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1519.168653][T17119] lowmem_reserve[]: 0 0 0 0 0 [ 1519.168867][T17119] Node 1 Normal free:3853616kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:296kB local_pcp:0kB free_cma:0kB [ 1519.168978][T17119] lowmem_reserve[]: 0 0 0 0 0 [ 1519.169192][T17119] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11232kB [ 1519.170105][T17119] Node 0 DMA32: 2197*4kB (UME) 3079*8kB (UME) 1917*16kB (UE) 501*32kB (UE) 230*64kB (UME) 443*128kB (U) 682*256kB (UM) 452*512kB (UM) 285*1024kB (UM) 133*2048kB (UME) 9*4096kB (U) = 1158652kB [ 1519.171172][T17119] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1519.171780][T17119] Node 1 Normal: 1*4kB (M) 8*8kB (UM) 12*16kB (UME) 7*32kB (UME) 14*64kB (UME) 8*128kB (UME) 8*256kB (UME) 6*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 937*4096kB (UM) = 3853668kB [ 1519.172734][T17119] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1519.172776][T17119] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1519.172818][T17119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1519.172859][T17119] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1519.172900][T17119] 99151 total pagecache pages [ 1519.172941][T17119] 0 pages in swap cache [ 1519.172977][T17119] Free swap = 124996kB [ 1519.173012][T17119] Total swap = 124996kB [ 1519.173048][T17119] 2097051 pages RAM [ 1519.173083][T17119] 0 pages HighMem/MovableOnly [ 1519.173119][T17119] 423282 pages reserved [ 1519.173154][T17119] 0 pages cma reserved [ 1520.190274][T16891] team0: Port device team_slave_0 added [ 1520.685126][T17126] ADFS-fs (nbd7): error: unable to read block 3, try 0 [ 1521.284806][T16891] team0: Port device team_slave_1 added [ 1521.998873][T17134] binder: 17133:17134 ioctl c0306201 200000000640 returned -22 [ 1522.177540][T16891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1522.177561][T16891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1522.177590][T16891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1522.483775][T17144] FAULT_INJECTION: forcing a failure. [ 1522.483775][T17144] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.483812][T17144] CPU: 1 UID: 0 PID: 17144 Comm: syz.2.2527 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1522.483838][T17144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1522.483850][T17144] Call Trace: [ 1522.483859][T17144] [ 1522.483868][T17144] dump_stack_lvl+0xe8/0x150 [ 1522.483904][T17144] should_fail_ex+0x46b/0x600 [ 1522.483936][T17144] should_failslab+0xa8/0x100 [ 1522.483962][T17144] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1522.483992][T17144] ? __alloc_skb+0x1d7/0x390 [ 1522.484021][T17144] ? lockdep_hardirqs_on+0x7a/0x110 [ 1522.484049][T17144] ? __alloc_skb+0x193/0x390 [ 1522.484079][T17144] __alloc_skb+0x1d7/0x390 [ 1522.484114][T17144] netlink_sendmsg+0x5d4/0xb40 [ 1522.484153][T17144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1522.484189][T17144] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1522.484225][T17144] ____sys_sendmsg+0xa4e/0xac0 [ 1522.484247][T17144] ? __might_fault+0xaf/0x130 [ 1522.484277][T17144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1522.484309][T17144] ? import_iovec+0x73/0xa0 [ 1522.484342][T17144] ___sys_sendmsg+0x2a5/0x360 [ 1522.484361][T17144] ? __lock_acquire+0x6b5/0x2cf0 [ 1522.484394][T17144] ? __pfx____sys_sendmsg+0x10/0x10 [ 1522.484453][T17144] ? __fget_files+0x2a/0x420 [ 1522.484481][T17144] ? __fget_files+0x3a6/0x420 [ 1522.484520][T17144] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1522.484545][T17144] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1522.484576][T17144] ? __pfx_ksys_write+0x10/0x10 [ 1522.484610][T17144] do_syscall_64+0x14d/0xf80 [ 1522.484638][T17144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.484658][T17144] ? trace_irq_disable+0x37/0x100 [ 1522.484676][T17144] ? clear_bhb_loop+0x40/0x90 [ 1522.484701][T17144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.484722][T17144] RIP: 0033:0x7f8a297ac629 [ 1522.484743][T17144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.484762][T17144] RSP: 002b:00007f8a279fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1522.484787][T17144] RAX: ffffffffffffffda RBX: 00007f8a29a25fa0 RCX: 00007f8a297ac629 [ 1522.484803][T17144] RDX: 0000000004040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1522.484817][T17144] RBP: 00007f8a279fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1522.484831][T17144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1522.484845][T17144] R13: 00007f8a29a26038 R14: 00007f8a29a25fa0 R15: 00007ffc3b94b8f8 [ 1522.484880][T17144] [ 1522.934232][T16891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1522.934247][T16891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1522.934264][T16891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1523.136034][T15832] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1523.156786][T15732] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1523.288448][T15832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1523.288471][T15832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1523.288485][T15832] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1523.288509][T15832] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1523.288523][T15832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.294527][T15832] usb 3-1: config 0 descriptor?? [ 1523.308007][T15732] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1523.308033][T15732] usb 5-1: config 0 has no interface number 0 [ 1523.308076][T15732] usb 5-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1523.308100][T15732] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1523.308125][T15732] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1523.310758][T15732] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1523.310783][T15732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.310801][T15732] usb 5-1: Product: syz [ 1523.310814][T15732] usb 5-1: Manufacturer: syz [ 1523.310828][T15732] usb 5-1: SerialNumber: syz [ 1523.398732][T15732] usb 5-1: config 0 descriptor?? [ 1523.462405][T15732] iguanair 5-1:0.255: probe with driver iguanair failed with error -12 [ 1523.621363][ T9365] usb 5-1: USB disconnect, device number 101 [ 1523.787983][T17148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1523.793262][T17148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1523.868829][T16891] hsr_slave_0: entered promiscuous mode [ 1523.873038][T16891] hsr_slave_1: entered promiscuous mode [ 1523.884950][T16891] debugfs: 'hsr0' already exists in 'hsr' [ 1523.902742][T16891] Cannot create hsr debugfs directory [ 1523.982784][T17154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1523.983312][T17154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1524.040064][T15832] plantronics 0003:047F:FFFF.003C: reserved main item tag 0xd [ 1524.086963][T15832] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1524.410186][ T36] audit: type=1400 audit(1771990024.278:1932): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="*]" requested=w pid=17156 comm="syz.4.2530" daddr=::ffff:172.20.20.0 [ 1524.410822][T17158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2530'. [ 1524.410841][T17158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2530'. [ 1524.411032][T17157] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2530'. [ 1524.411049][T17157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2530'. [ 1525.328296][T17163] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2531'. [ 1525.567823][T15732] usb 3-1: reset high-speed USB device number 78 using dummy_hcd [ 1526.026457][T17162] netlink: 'syz.4.2531': attribute type 4 has an invalid length. [ 1526.636291][T17168] ADFS-fs (nbd7): error: unable to read block 3, try 0 [ 1527.264435][T17169] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 1527.765068][T17169] genirq: Flags mismatch irq 4. 00202000 (pcmmio) vs. 00202080 (ttyS0) [ 1528.181810][T17168] genirq: Flags mismatch irq 4. 00202000 (pcmmio) vs. 00202080 (ttyS0) [ 1528.831825][ T36] audit: type=1400 audit(1771990028.698:1933): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="*]" requested=w pid=17181 comm="syz.7.2536" daddr=::e0:0:0:7fff:fffe dest=20003 [ 1531.574667][T15107] usb 3-1: USB disconnect, device number 78 [ 1532.822613][ T174] bridge_slave_1: left allmulticast mode [ 1532.822646][ T174] bridge_slave_1: left promiscuous mode [ 1532.822931][ T174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.928386][ T174] bridge_slave_0: left allmulticast mode [ 1532.928418][ T174] bridge_slave_0: left promiscuous mode [ 1532.928716][ T174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.114349][ T174] bridge_slave_1: left allmulticast mode [ 1533.114383][ T174] bridge_slave_1: left promiscuous mode [ 1533.114642][ T174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.228684][ T174] bridge_slave_0: left allmulticast mode [ 1533.228721][ T174] bridge_slave_0: left promiscuous mode [ 1533.229002][ T174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.996137][ T5898] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1533.997451][ T174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1535.687052][ T174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1535.688527][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1535.688558][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1535.688598][ T5898] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1535.688613][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.697538][ T5898] usb 3-1: config 0 descriptor?? [ 1535.744774][ T5898] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1535.828634][ T174] bond0 (unregistering): Released all slaves [ 1536.298146][ T174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1536.400526][ T174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1536.477675][T17217] netlink: 212 bytes leftover after parsing attributes in process `syz.7.2544'. [ 1536.477713][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2544'. [ 1536.481392][ T174] bond0 (unregistering): Released all slaves [ 1538.134454][T13637] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1538.137519][T13637] Bluetooth: hci2: Injecting HCI hardware error event [ 1538.141877][T13637] Bluetooth: hci2: hardware error 0x00 [ 1538.526049][ T5898] usb 3-1: USB disconnect, device number 79 [ 1539.616045][ T174] hsr_slave_0: left promiscuous mode [ 1539.656027][ T174] hsr_slave_1: left promiscuous mode [ 1539.656725][ T174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1539.690540][ T174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1540.737652][T13637] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1541.100856][ T174] hsr_slave_0: left promiscuous mode [ 1541.138061][ T174] hsr_slave_1: left promiscuous mode [ 1541.156123][ T174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1541.219515][ T174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1541.350638][T17259] FAULT_INJECTION: forcing a failure. [ 1541.350638][T17259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1541.350704][T17259] CPU: 1 UID: 0 PID: 17259 Comm: syz.7.2554 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1541.350728][T17259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1541.350740][T17259] Call Trace: [ 1541.350748][T17259] [ 1541.350754][T17259] dump_stack_lvl+0xe8/0x150 [ 1541.350777][T17259] should_fail_ex+0x46b/0x600 [ 1541.350795][T17259] _copy_from_user+0x2d/0xb0 [ 1541.350812][T17259] ___sys_sendmsg+0x1c6/0x360 [ 1541.350824][T17259] ? __lock_acquire+0x6b5/0x2cf0 [ 1541.350843][T17259] ? __pfx____sys_sendmsg+0x10/0x10 [ 1541.350857][T17259] ? __schedule+0x14f4/0x5210 [ 1541.350887][T17259] ? __fget_files+0x2a/0x420 [ 1541.350903][T17259] ? __fget_files+0x3a6/0x420 [ 1541.350927][T17259] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1541.350941][T17259] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1541.350967][T17259] do_syscall_64+0x14d/0xf80 [ 1541.350981][T17259] ? rcu_is_watching+0x15/0xb0 [ 1541.350997][T17259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.351009][T17259] ? clear_bhb_loop+0x40/0x90 [ 1541.351024][T17259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.351035][T17259] RIP: 0033:0x7f9c998fc629 [ 1541.351047][T17259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1541.351058][T17259] RSP: 002b:00007f9c97b56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1541.351073][T17259] RAX: ffffffffffffffda RBX: 00007f9c99b75fa0 RCX: 00007f9c998fc629 [ 1541.351083][T17259] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000003 [ 1541.351091][T17259] RBP: 00007f9c97b56090 R08: 0000000000000000 R09: 0000000000000000 [ 1541.351098][T17259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1541.351106][T17259] R13: 00007f9c99b76038 R14: 00007f9c99b75fa0 R15: 00007fff3ea62ef8 [ 1541.351125][T17259] [ 1541.599575][T17260] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 1541.930121][T17260] netlink: 'syz.4.2553': attribute type 1 has an invalid length. [ 1542.089498][T17261] genirq: Flags mismatch irq 4. 00202000 (pcmmio) vs. 00202080 (ttyS0) [ 1542.576649][ T174] team0 (unregistering): Port device team_slave_1 removed [ 1542.736822][ T174] team0 (unregistering): Port device team_slave_0 removed [ 1543.485959][ T5898] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1543.615967][ T5898] usb 8-1: device descriptor read/64, error -71 [ 1543.855959][ T5898] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1543.986975][ T174] team0 (unregistering): Port device team_slave_1 removed [ 1544.035379][ T5898] usb 8-1: device descriptor read/64, error -71 [ 1544.136310][ T5898] usb usb8-port1: attempt power cycle [ 1544.140522][ T174] team0 (unregistering): Port device team_slave_0 removed [ 1544.475997][ T5898] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1544.596866][ T5898] usb 8-1: device descriptor read/8, error -71 [ 1544.872138][ T5898] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1544.886641][ T5898] usb 8-1: device descriptor read/8, error -71 [ 1544.996854][ T5898] usb usb8-port1: unable to enumerate USB device [ 1544.998162][T17260] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1545.157880][T17274] FAULT_INJECTION: forcing a failure. [ 1545.157880][T17274] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.157920][T17274] CPU: 1 UID: 0 PID: 17274 Comm: syz.4.2558 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1545.157945][T17274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1545.157958][T17274] Call Trace: [ 1545.157968][T17274] [ 1545.157977][T17274] dump_stack_lvl+0xe8/0x150 [ 1545.158013][T17274] should_fail_ex+0x46b/0x600 [ 1545.158045][T17274] should_failslab+0xa8/0x100 [ 1545.158072][T17274] __kmalloc_noprof+0xdf/0x7b0 [ 1545.158095][T17274] ? tomoyo_encode+0x28b/0x550 [ 1545.158135][T17274] tomoyo_encode+0x28b/0x550 [ 1545.158165][T17274] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1545.158202][T17274] ? tomoyo_path_number_perm+0x219/0x630 [ 1545.158233][T17274] tomoyo_path_number_perm+0x246/0x630 [ 1545.158268][T17274] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1545.158297][T17274] ? __lock_acquire+0x6b5/0x2cf0 [ 1545.158328][T17274] ? do_raw_spin_lock+0x12b/0x2f0 [ 1545.158390][T17274] ? __fget_files+0x2a/0x420 [ 1545.158420][T17274] ? __fget_files+0x2a/0x420 [ 1545.158445][T17274] ? __fget_files+0x3a6/0x420 [ 1545.158471][T17274] ? __fget_files+0x2a/0x420 [ 1545.158503][T17274] security_file_ioctl+0xc3/0x2a0 [ 1545.158537][T17274] __se_sys_ioctl+0x47/0x170 [ 1545.158564][T17274] do_syscall_64+0x14d/0xf80 [ 1545.158592][T17274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.158612][T17274] ? trace_irq_disable+0x37/0x100 [ 1545.158631][T17274] ? clear_bhb_loop+0x40/0x90 [ 1545.158657][T17274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.158677][T17274] RIP: 0033:0x7efcd3aec629 [ 1545.158697][T17274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.158715][T17274] RSP: 002b:00007efcd1d46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1545.158739][T17274] RAX: ffffffffffffffda RBX: 00007efcd3d65fa0 RCX: 00007efcd3aec629 [ 1545.158756][T17274] RDX: 00002000000000c0 RSI: 00000000c0189376 RDI: 0000000000000004 [ 1545.158772][T17274] RBP: 00007efcd1d46090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.158786][T17274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.158800][T17274] R13: 00007efcd3d66038 R14: 00007efcd3d65fa0 R15: 00007ffd047f3ec8 [ 1545.158837][T17274] [ 1545.158857][T17274] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1547.270618][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.270725][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.848678][T15441] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1547.873456][T15441] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1547.874270][T15441] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1547.898325][T15441] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1547.939575][T15441] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1548.411272][T17298] FAULT_INJECTION: forcing a failure. [ 1548.411272][T17298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1548.411311][T17298] CPU: 1 UID: 0 PID: 17298 Comm: syz.2.2566 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1548.411337][T17298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1548.411351][T17298] Call Trace: [ 1548.411360][T17298] [ 1548.411370][T17298] dump_stack_lvl+0xe8/0x150 [ 1548.411406][T17298] should_fail_ex+0x46b/0x600 [ 1548.411439][T17298] _copy_from_user+0x2d/0xb0 [ 1548.411470][T17298] memdup_user+0x5e/0xd0 [ 1548.411503][T17298] strndup_user+0x68/0xd0 [ 1548.411535][T17298] __se_sys_mount+0x9d/0x420 [ 1548.411565][T17298] ? ksys_write+0x248/0x270 [ 1548.411590][T17298] ? __pfx___se_sys_mount+0x10/0x10 [ 1548.411625][T17298] ? __x64_sys_mount+0x20/0xc0 [ 1548.411655][T17298] do_syscall_64+0x14d/0xf80 [ 1548.411683][T17298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.411704][T17298] ? trace_irq_disable+0x37/0x100 [ 1548.411723][T17298] ? clear_bhb_loop+0x40/0x90 [ 1548.411750][T17298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.411770][T17298] RIP: 0033:0x7f8a297ac629 [ 1548.411791][T17298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1548.411811][T17298] RSP: 002b:00007f8a279fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1548.411835][T17298] RAX: ffffffffffffffda RBX: 00007f8a29a25fa0 RCX: 00007f8a297ac629 [ 1548.411858][T17298] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000000000000000 [ 1548.411873][T17298] RBP: 00007f8a279fe090 R08: 0000200000000300 R09: 0000000000000000 [ 1548.411887][T17298] R10: 0000000001000084 R11: 0000000000000246 R12: 0000000000000001 [ 1548.411902][T17298] R13: 00007f8a29a26038 R14: 00007f8a29a25fa0 R15: 00007ffc3b94b8f8 [ 1548.411939][T17298] [ 1549.073981][T17302] FAULT_INJECTION: forcing a failure. [ 1549.073981][T17302] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.074020][T17302] CPU: 0 UID: 0 PID: 17302 Comm: syz.2.2568 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1549.074045][T17302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1549.074058][T17302] Call Trace: [ 1549.074068][T17302] [ 1549.074077][T17302] dump_stack_lvl+0xe8/0x150 [ 1549.074112][T17302] should_fail_ex+0x46b/0x600 [ 1549.074144][T17302] should_failslab+0xa8/0x100 [ 1549.074171][T17302] kmem_cache_alloc_noprof+0x87/0x680 [ 1549.074194][T17302] ? do_getname+0x2e/0x250 [ 1549.074224][T17302] do_getname+0x2e/0x250 [ 1549.074247][T17302] ? getname_uflags+0x11/0x30 [ 1549.074275][T17302] __se_sys_mount_setattr+0x187/0x280 [ 1549.074314][T17302] ? __pfx___se_sys_mount_setattr+0x10/0x10 [ 1549.074351][T17302] ? __x64_sys_mount_setattr+0x20/0xc0 [ 1549.074384][T17302] do_syscall_64+0x14d/0xf80 [ 1549.074413][T17302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.074434][T17302] ? trace_irq_disable+0x37/0x100 [ 1549.074452][T17302] ? clear_bhb_loop+0x40/0x90 [ 1549.074478][T17302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.074499][T17302] RIP: 0033:0x7f8a297ac629 [ 1549.074519][T17302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.074537][T17302] RSP: 002b:00007f8a279fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 1549.074561][T17302] RAX: ffffffffffffffda RBX: 00007f8a29a25fa0 RCX: 00007f8a297ac629 [ 1549.074577][T17302] RDX: 0000000000009000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1549.074591][T17302] RBP: 00007f8a279fe090 R08: 0000000000000020 R09: 0000000000000000 [ 1549.074605][T17302] R10: 0000200000001dc0 R11: 0000000000000246 R12: 0000000000000001 [ 1549.074619][T17302] R13: 00007f8a29a26038 R14: 00007f8a29a25fa0 R15: 00007ffc3b94b8f8 [ 1549.074653][T17302] [ 1549.121244][T16891] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1549.414611][T16891] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1549.498056][T16891] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1549.716069][T17314] FAULT_INJECTION: forcing a failure. [ 1549.716069][T17314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1549.716108][T17314] CPU: 0 UID: 0 PID: 17314 Comm: syz.7.2571 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1549.716132][T17314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1549.716145][T17314] Call Trace: [ 1549.716154][T17314] [ 1549.716163][T17314] dump_stack_lvl+0xe8/0x150 [ 1549.716200][T17314] should_fail_ex+0x46b/0x600 [ 1549.716231][T17314] _copy_from_iter+0x3b0/0x1670 [ 1549.716270][T17314] ? __pfx__copy_from_iter+0x10/0x10 [ 1549.716296][T17314] ? smack_socket_sendmsg+0x1a9/0x590 [ 1549.716316][T17314] ? __lock_acquire+0x6b5/0x2cf0 [ 1549.716344][T17314] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1549.716383][T17314] bcm_sendmsg+0x172/0x6c0 [ 1549.716415][T17314] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1549.716454][T17314] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1549.716479][T17314] ____sys_sendmsg+0xa4e/0xac0 [ 1549.716500][T17314] ? __might_fault+0xaf/0x130 [ 1549.716530][T17314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1549.716561][T17314] ? import_iovec+0x73/0xa0 [ 1549.716593][T17314] ___sys_sendmsg+0x2a5/0x360 [ 1549.716613][T17314] ? __lock_acquire+0x6b5/0x2cf0 [ 1549.716643][T17314] ? __pfx____sys_sendmsg+0x10/0x10 [ 1549.716669][T17314] ? kstrtouint+0x6e/0xe0 [ 1549.716720][T17314] ? __fget_files+0x2a/0x420 [ 1549.716748][T17314] ? __fget_files+0x3a6/0x420 [ 1549.716787][T17314] __sys_sendmmsg+0x282/0x4e0 [ 1549.716824][T17314] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1549.716852][T17314] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1549.716890][T17314] ? ksys_write+0x248/0x270 [ 1549.716913][T17314] ? __pfx_ksys_write+0x10/0x10 [ 1549.716941][T17314] __x64_sys_sendmmsg+0xa0/0xc0 [ 1549.716964][T17314] do_syscall_64+0x14d/0xf80 [ 1549.716990][T17314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.717010][T17314] ? trace_irq_disable+0x37/0x100 [ 1549.717028][T17314] ? clear_bhb_loop+0x40/0x90 [ 1549.717053][T17314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.717071][T17314] RIP: 0033:0x7f9c998fc629 [ 1549.717091][T17314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.717107][T17314] RSP: 002b:00007f9c97b56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1549.717129][T17314] RAX: ffffffffffffffda RBX: 00007f9c99b75fa0 RCX: 00007f9c998fc629 [ 1549.717145][T17314] RDX: 0000000000000002 RSI: 0000200000001b00 RDI: 0000000000000003 [ 1549.717158][T17314] RBP: 00007f9c97b56090 R08: 0000000000000000 R09: 0000000000000000 [ 1549.717171][T17314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1549.717184][T17314] R13: 00007f9c99b76038 R14: 00007f9c99b75fa0 R15: 00007fff3ea62ef8 [ 1549.717218][T17314] [ 1549.906019][ T9365] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1550.075945][T13637] Bluetooth: hci4: command tx timeout [ 1550.150029][ T9365] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.153224][ T9365] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1550.153257][ T9365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.153279][ T9365] usb 5-1: Product: syz [ 1550.153295][ T9365] usb 5-1: Manufacturer: syz [ 1550.153310][ T9365] usb 5-1: SerialNumber: syz [ 1550.178948][ T9365] hub 5-1:1.0: bad descriptor, ignoring hub [ 1550.178996][ T9365] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1551.286851][T16891] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1551.336313][ T5805] usb 5-1: reset high-speed USB device number 102 using dummy_hcd [ 1551.947760][ T9365] usb 5-1: USB disconnect, device number 102 [ 1553.039727][T13637] Bluetooth: hci4: command tx timeout [ 1553.309792][T17337] FAULT_INJECTION: forcing a failure. [ 1553.309792][T17337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1553.309829][T17337] CPU: 1 UID: 0 PID: 17337 Comm: syz.7.2575 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1553.309854][T17337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1553.309867][T17337] Call Trace: [ 1553.309877][T17337] [ 1553.309887][T17337] dump_stack_lvl+0xe8/0x150 [ 1553.309923][T17337] should_fail_ex+0x46b/0x600 [ 1553.309955][T17337] _copy_from_user+0x2d/0xb0 [ 1553.309985][T17337] sctp_setsockopt+0x1c4/0x12c0 [ 1553.310013][T17337] ? sock_common_setsockopt+0x36/0xc0 [ 1553.310042][T17337] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1553.310080][T17337] do_sock_setsockopt+0x17c/0x1b0 [ 1553.310119][T17337] __x64_sys_setsockopt+0x143/0x1b0 [ 1553.310158][T17337] do_syscall_64+0x14d/0xf80 [ 1553.310185][T17337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.310207][T17337] ? trace_irq_disable+0x37/0x100 [ 1553.310226][T17337] ? clear_bhb_loop+0x40/0x90 [ 1553.310253][T17337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.310275][T17337] RIP: 0033:0x7f9c998fc629 [ 1553.310296][T17337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1553.310315][T17337] RSP: 002b:00007f9c97b56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1553.310340][T17337] RAX: ffffffffffffffda RBX: 00007f9c99b75fa0 RCX: 00007f9c998fc629 [ 1553.310357][T17337] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000003 [ 1553.310370][T17337] RBP: 00007f9c97b56090 R08: 0000000000000008 R09: 0000000000000000 [ 1553.310384][T17337] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1553.310399][T17337] R13: 00007f9c99b76038 R14: 00007f9c99b75fa0 R15: 00007fff3ea62ef8 [ 1553.310434][T17337] [ 1554.994875][ T36] audit: type=1326 audit(1771990054.078:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17341 comm="syz.7.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c998fc629 code=0x7ffc0000 [ 1554.994936][ T36] audit: type=1326 audit(1771990054.088:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17341 comm="syz.7.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c998fc629 code=0x7ffc0000 [ 1554.994982][ T36] audit: type=1326 audit(1771990054.088:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17341 comm="syz.7.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c998fc629 code=0x7ffc0000 [ 1554.995026][ T36] audit: type=1326 audit(1771990054.088:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17341 comm="syz.7.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c998fc629 code=0x7ffc0000 [ 1554.995070][ T36] audit: type=1326 audit(1771990054.088:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17341 comm="syz.7.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c998fc629 code=0x7ffc0000 [ 1554.995113][ T36] audit: type=1326 audit(1771990054.088:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17341 comm="syz.7.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f9c998fc629 code=0x7ffc0000 [ 1554.995156][ T36] audit: type=1326 audit(1771990054.098:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17341 comm="syz.7.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c998fc629 code=0x7ffc0000 [ 1554.995199][ T36] audit: type=1326 audit(1771990054.108:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17341 comm="syz.7.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c998fc629 code=0x7ffc0000 [ 1555.106053][T15441] Bluetooth: hci4: command tx timeout [ 1555.551029][T17293] chnl_net:caif_netlink_parms(): no params data found [ 1555.840093][T15441] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1555.870873][T15441] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1555.887455][T15441] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1555.911006][T15441] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1555.911885][T15441] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1556.132766][ T36] audit: type=1400 audit(1771990055.998:1942): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="*]" requested=w pid=17351 comm="syz.4.2582" dest=20002 [ 1556.143242][T17353] [U]  [ 1556.657615][T17362] FAULT_INJECTION: forcing a failure. [ 1556.657615][T17362] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.657653][T17362] CPU: 1 UID: 0 PID: 17362 Comm: syz.2.2576 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1556.657679][T17362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1556.657691][T17362] Call Trace: [ 1556.657701][T17362] [ 1556.657711][T17362] dump_stack_lvl+0xe8/0x150 [ 1556.657746][T17362] should_fail_ex+0x46b/0x600 [ 1556.657780][T17362] should_failslab+0xa8/0x100 [ 1556.657808][T17362] __kmalloc_noprof+0xdf/0x7b0 [ 1556.657832][T17362] ? tomoyo_encode+0x28b/0x550 [ 1556.657863][T17362] tomoyo_encode+0x28b/0x550 [ 1556.657894][T17362] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1556.657931][T17362] ? tomoyo_path_number_perm+0x219/0x630 [ 1556.657963][T17362] tomoyo_path_number_perm+0x246/0x630 [ 1556.658007][T17362] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1556.658038][T17362] ? __lock_acquire+0x6b5/0x2cf0 [ 1556.658070][T17362] ? do_raw_spin_lock+0x12b/0x2f0 [ 1556.658134][T17362] ? __fget_files+0x2a/0x420 [ 1556.658168][T17362] ? __fget_files+0x2a/0x420 [ 1556.658195][T17362] ? __fget_files+0x3a6/0x420 [ 1556.658222][T17362] ? __fget_files+0x2a/0x420 [ 1556.658256][T17362] security_file_ioctl+0xc3/0x2a0 [ 1556.658290][T17362] __se_sys_ioctl+0x47/0x170 [ 1556.658316][T17362] do_syscall_64+0x14d/0xf80 [ 1556.658342][T17362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.658363][T17362] ? trace_irq_disable+0x37/0x100 [ 1556.658382][T17362] ? clear_bhb_loop+0x40/0x90 [ 1556.658409][T17362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.658429][T17362] RIP: 0033:0x7f8a297ac629 [ 1556.658450][T17362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1556.658470][T17362] RSP: 002b:00007f8a279fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1556.658494][T17362] RAX: ffffffffffffffda RBX: 00007f8a29a25fa0 RCX: 00007f8a297ac629 [ 1556.658511][T17362] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1556.658526][T17362] RBP: 00007f8a279fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1556.658541][T17362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1556.658554][T17362] R13: 00007f8a29a26038 R14: 00007f8a29a25fa0 R15: 00007ffc3b94b8f8 [ 1556.658592][T17362] [ 1556.658613][T17362] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1557.186952][T13637] Bluetooth: hci4: command tx timeout [ 1557.516021][T15107] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1557.692461][T15107] usb 3-1: Using ep0 maxpacket: 16 [ 1557.709514][T15107] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1557.709551][T15107] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1557.709574][T15107] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1557.709607][T15107] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1557.709622][T15107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.281913][ T36] audit: type=1326 audit(1771990058.188:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17373 comm="syz.7.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c998fc629 code=0x7ffc0000 [ 1559.283909][T13637] Bluetooth: hci1: command tx timeout [ 1559.328079][T15107] usb 3-1: config 0 descriptor?? [ 1559.367661][T15732] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1559.457106][T17293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.457339][T17293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.457576][T17293] bridge_slave_0: entered allmulticast mode [ 1559.461734][T17293] bridge_slave_0: entered promiscuous mode [ 1559.534404][T15732] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1559.534427][T15732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.534481][T15732] usb 5-1: Product: syz [ 1559.534490][T15732] usb 5-1: Manufacturer: syz [ 1559.534499][T15732] usb 5-1: SerialNumber: syz [ 1559.568388][T17293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.568539][T17293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.569000][T17293] bridge_slave_1: entered allmulticast mode [ 1559.572842][T17293] bridge_slave_1: entered promiscuous mode [ 1559.816093][T15107] koneplus 0003:1E7D:2E22.003D: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 1559.893633][T17293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1559.934666][T17293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1559.963357][T17366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1559.966699][T17366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1560.006120][T15732] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1560.006163][T15732] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1560.192737][T17380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1560.194364][T17380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1560.366356][T17293] team0: Port device team_slave_0 added [ 1560.417570][T17293] team0: Port device team_slave_1 added [ 1561.209012][T17293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1561.209033][T17293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1561.209061][T17293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1561.242587][T17293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1561.242606][T17293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1561.242631][T17293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1561.268862][T15732] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1561.356291][T13637] Bluetooth: hci1: command tx timeout [ 1561.532517][T15832] usb 3-1: USB disconnect, device number 80 [ 1561.951159][ T174] bridge_slave_1: left allmulticast mode [ 1561.951193][ T174] bridge_slave_1: left promiscuous mode [ 1561.952906][ T174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.009071][ T174] bridge_slave_0: left allmulticast mode [ 1562.009104][ T174] bridge_slave_0: left promiscuous mode [ 1562.009384][ T174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.198252][T17387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1562.497140][T17391] ADFS-fs (nbd7): error: unable to read block 3, try 0 [ 1562.749105][T17392] netlink: 'syz.7.2591': attribute type 1 has an invalid length. [ 1563.016110][T15732] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -EPROTO [ 1563.016653][T15732] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1563.016712][T15732] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1563.018648][T15732] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1563.138913][T15732] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1563.183393][T17390] genirq: Flags mismatch irq 4. 00202000 (pcmmio) vs. 00202080 (ttyS0) [ 1563.224182][T15732] usb 5-1: USB disconnect, device number 103 [ 1563.431311][T13637] Bluetooth: hci1: command tx timeout [ 1563.718455][ T174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1565.371366][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 1565.371391][ T36] audit: type=1326 audit(1771990064.258:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17406 comm="syz.2.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1565.371442][ T36] audit: type=1326 audit(1771990064.268:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17406 comm="syz.2.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1565.371488][ T36] audit: type=1326 audit(1771990064.268:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17406 comm="syz.2.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1565.371532][ T36] audit: type=1326 audit(1771990064.268:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17406 comm="syz.2.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1565.371577][ T36] audit: type=1326 audit(1771990064.268:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17406 comm="syz.2.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1565.371617][ T36] audit: type=1326 audit(1771990064.268:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17406 comm="syz.2.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1565.371653][ T36] audit: type=1326 audit(1771990064.278:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17406 comm="syz.2.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1565.371696][ T36] audit: type=1326 audit(1771990064.278:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17406 comm="syz.2.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1565.468364][ T174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1565.505983][T13637] Bluetooth: hci1: command tx timeout [ 1565.659233][ T174] bond0 (unregistering): Released all slaves [ 1565.878008][T17392] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1566.174790][T17293] hsr_slave_0: entered promiscuous mode [ 1566.177362][T17293] hsr_slave_1: entered promiscuous mode [ 1566.178472][T17293] debugfs: 'hsr0' already exists in 'hsr' [ 1566.178498][T17293] Cannot create hsr debugfs directory [ 1566.243021][T17421] FAULT_INJECTION: forcing a failure. [ 1566.243021][T17421] name failslab, interval 1, probability 0, space 0, times 0 [ 1566.243058][T17421] CPU: 1 UID: 0 PID: 17421 Comm: syz.2.2597 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1566.243083][T17421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1566.243096][T17421] Call Trace: [ 1566.243104][T17421] [ 1566.243113][T17421] dump_stack_lvl+0xe8/0x150 [ 1566.243149][T17421] should_fail_ex+0x46b/0x600 [ 1566.243180][T17421] should_failslab+0xa8/0x100 [ 1566.243206][T17421] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1566.243229][T17421] ? __alloc_skb+0x1d7/0x390 [ 1566.243255][T17421] ? lockdep_hardirqs_on+0x7a/0x110 [ 1566.243283][T17421] ? __alloc_skb+0x193/0x390 [ 1566.243313][T17421] __alloc_skb+0x1d7/0x390 [ 1566.243347][T17421] netlink_sendmsg+0x5d4/0xb40 [ 1566.243383][T17421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1566.243420][T17421] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1566.243448][T17421] ____sys_sendmsg+0xa4e/0xac0 [ 1566.243468][T17421] ? __might_fault+0xaf/0x130 [ 1566.243497][T17421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1566.243529][T17421] ? import_iovec+0x73/0xa0 [ 1566.243558][T17421] ___sys_sendmsg+0x2a5/0x360 [ 1566.243578][T17421] ? __lock_acquire+0x6b5/0x2cf0 [ 1566.243608][T17421] ? __pfx____sys_sendmsg+0x10/0x10 [ 1566.243663][T17421] ? __fget_files+0x2a/0x420 [ 1566.243688][T17421] ? __fget_files+0x3a6/0x420 [ 1566.243723][T17421] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1566.243747][T17421] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1566.243777][T17421] ? __pfx_ksys_write+0x10/0x10 [ 1566.243811][T17421] do_syscall_64+0x14d/0xf80 [ 1566.243846][T17421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.243866][T17421] ? trace_irq_disable+0x37/0x100 [ 1566.243881][T17421] ? clear_bhb_loop+0x40/0x90 [ 1566.243905][T17421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.243925][T17421] RIP: 0033:0x7f8a297ac629 [ 1566.243944][T17421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1566.243962][T17421] RSP: 002b:00007f8a279fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1566.243985][T17421] RAX: ffffffffffffffda RBX: 00007f8a29a25fa0 RCX: 00007f8a297ac629 [ 1566.244000][T17421] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 1566.244014][T17421] RBP: 00007f8a279fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1566.244027][T17421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1566.244040][T17421] R13: 00007f8a29a26038 R14: 00007f8a29a25fa0 R15: 00007ffc3b94b8f8 [ 1566.244073][T17421] [ 1566.631125][T17425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1568.486744][ T174] hsr_slave_0: left promiscuous mode [ 1568.539680][T17436] FAULT_INJECTION: forcing a failure. [ 1568.539680][T17436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1568.539713][T17436] CPU: 1 UID: 0 PID: 17436 Comm: syz.7.2601 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1568.539736][T17436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1568.539747][T17436] Call Trace: [ 1568.539756][T17436] [ 1568.539765][T17436] dump_stack_lvl+0xe8/0x150 [ 1568.539798][T17436] should_fail_ex+0x46b/0x600 [ 1568.539828][T17436] _copy_to_iter+0x404/0x17d0 [ 1568.539863][T17436] ? fib_trie_seq_show+0x7f2/0xa30 [ 1568.539898][T17436] ? __pfx__copy_to_iter+0x10/0x10 [ 1568.539938][T17436] seq_read_iter+0xbf6/0xe20 [ 1568.539980][T17436] seq_read+0x36a/0x490 [ 1568.539998][T17436] ? get_pid_task+0x20/0x1f0 [ 1568.540035][T17436] ? __pfx_seq_read+0x10/0x10 [ 1568.540074][T17436] ? __pfx_seq_read+0x10/0x10 [ 1568.540092][T17436] proc_reg_read+0x1f6/0x2f0 [ 1568.540115][T17436] ? __pfx_proc_reg_read+0x10/0x10 [ 1568.540139][T17436] vfs_read+0x212/0xa70 [ 1568.540168][T17436] ? __pfx_vfs_read+0x10/0x10 [ 1568.540189][T17436] ? __fget_files+0x2a/0x420 [ 1568.540218][T17436] ? __fget_files+0x2a/0x420 [ 1568.540241][T17436] ? __fget_files+0x3a6/0x420 [ 1568.540265][T17436] ? __fget_files+0x2a/0x420 [ 1568.540298][T17436] __x64_sys_pread64+0x19c/0x230 [ 1568.540322][T17436] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1568.540354][T17436] do_syscall_64+0x14d/0xf80 [ 1568.540379][T17436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.540398][T17436] ? trace_irq_disable+0x37/0x100 [ 1568.540415][T17436] ? clear_bhb_loop+0x40/0x90 [ 1568.540438][T17436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.540457][T17436] RIP: 0033:0x7f9c998fc629 [ 1568.540476][T17436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1568.540493][T17436] RSP: 002b:00007f9c97b35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1568.540516][T17436] RAX: ffffffffffffffda RBX: 00007f9c99b76090 RCX: 00007f9c998fc629 [ 1568.540531][T17436] RDX: 0000000000018fd4 RSI: 0000200000000080 RDI: 0000000000000009 [ 1568.540545][T17436] RBP: 00007f9c97b35090 R08: 0000000000000000 R09: 0000000000000000 [ 1568.540558][T17436] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 1568.540570][T17436] R13: 00007f9c99b76128 R14: 00007f9c99b76090 R15: 00007fff3ea62ef8 [ 1568.540604][T17436] [ 1568.811702][ T174] hsr_slave_1: left promiscuous mode [ 1568.856500][ T174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1569.343023][ T174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1570.236233][ T5805] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1570.436537][ T5805] usb 3-1: Using ep0 maxpacket: 8 [ 1570.439143][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1570.439181][ T5805] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1570.439226][ T5805] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1570.439252][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.448730][ T5805] usb 3-1: config 0 descriptor?? [ 1570.647498][ T174] team0 (unregistering): Port device team_slave_1 removed [ 1570.950927][ T5805] holtek_mouse 0003:04D9:A067.003E: unknown main item tag 0x0 [ 1570.950966][ T5805] holtek_mouse 0003:04D9:A067.003E: unknown main item tag 0x0 [ 1570.950992][ T5805] holtek_mouse 0003:04D9:A067.003E: unknown main item tag 0x0 [ 1570.951019][ T5805] holtek_mouse 0003:04D9:A067.003E: unknown main item tag 0x0 [ 1570.951045][ T5805] holtek_mouse 0003:04D9:A067.003E: unknown main item tag 0x0 [ 1570.951071][ T5805] holtek_mouse 0003:04D9:A067.003E: unknown main item tag 0x0 [ 1570.951097][ T5805] holtek_mouse 0003:04D9:A067.003E: unknown main item tag 0x0 [ 1570.951123][ T5805] holtek_mouse 0003:04D9:A067.003E: unknown main item tag 0x0 [ 1570.951149][ T5805] holtek_mouse 0003:04D9:A067.003E: unknown main item tag 0x0 [ 1570.951175][ T5805] holtek_mouse 0003:04D9:A067.003E: unknown main item tag 0x0 [ 1571.041236][ T5805] holtek_mouse 0003:04D9:A067.003E: hidraw0: USB HID v0.09 Device [HID 04d9:a067] on usb-dummy_hcd.2-1/input0 [ 1571.072213][ T174] team0 (unregistering): Port device team_slave_0 removed [ 1571.153517][ T5805] usb 3-1: USB disconnect, device number 81 [ 1572.006192][T17350] chnl_net:caif_netlink_parms(): no params data found [ 1572.236297][ T5898] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1572.370425][T17350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.370620][T17350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.370880][T17350] bridge_slave_0: entered allmulticast mode [ 1572.404344][T17350] bridge_slave_0: entered promiscuous mode [ 1572.407839][ T5898] usb 8-1: Using ep0 maxpacket: 16 [ 1572.415379][ T5898] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1572.416700][T17350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.416833][T17350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.417088][T17350] bridge_slave_1: entered allmulticast mode [ 1572.419866][T17350] bridge_slave_1: entered promiscuous mode [ 1572.436668][ T5898] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1572.436702][ T5898] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.436721][ T5898] usb 8-1: Product: syz [ 1572.436730][ T5898] usb 8-1: Manufacturer: syz [ 1572.436738][ T5898] usb 8-1: SerialNumber: syz [ 1572.492035][ T5898] usb 8-1: config 0 descriptor?? [ 1572.536650][ T5898] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1572.538628][ T5898] usb 8-1: Detected FT232R [ 1572.711919][ T5898] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1572.726042][ T5898] ftdi_sio 8-1:0.0: GPIO initialisation failed: -5 [ 1572.742986][ T5898] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1572.914728][T17350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1572.933119][T15009] usb 8-1: USB disconnect, device number 23 [ 1572.965731][T17350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1572.989594][T15009] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1572.990432][T15009] ftdi_sio 8-1:0.0: device disconnected [ 1573.097292][T17465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1574.994275][T17473] FAULT_INJECTION: forcing a failure. [ 1574.994275][T17473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1574.994339][T17473] CPU: 0 UID: 0 PID: 17473 Comm: syz.4.2616 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1574.994370][T17473] Tainted: [L]=SOFTLOCKUP [ 1574.994377][T17473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1574.994389][T17473] Call Trace: [ 1574.994398][T17473] [ 1574.994407][T17473] dump_stack_lvl+0xe8/0x150 [ 1574.994436][T17473] should_fail_ex+0x46b/0x600 [ 1574.994461][T17473] strncpy_from_user+0x36/0x2b0 [ 1574.994477][T17473] do_getname+0x77/0x250 [ 1574.994494][T17473] __se_sys_symlink+0x2b/0x2b0 [ 1574.994509][T17473] do_syscall_64+0x14d/0xf80 [ 1574.994525][T17473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.994538][T17473] ? clear_bhb_loop+0x40/0x90 [ 1574.994552][T17473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.994563][T17473] RIP: 0033:0x7efcd3aec629 [ 1574.994576][T17473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.994587][T17473] RSP: 002b:00007efcd1d25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1574.994601][T17473] RAX: ffffffffffffffda RBX: 00007efcd3d66090 RCX: 00007efcd3aec629 [ 1574.994611][T17473] RDX: 0000000000000000 RSI: 0000200000000e40 RDI: 0000200000001640 [ 1574.994626][T17473] RBP: 00007efcd1d25090 R08: 0000000000000000 R09: 0000000000000000 [ 1574.994634][T17473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1574.994641][T17473] R13: 00007efcd3d66128 R14: 00007efcd3d66090 R15: 00007ffd047f3ec8 [ 1574.994660][T17473] [ 1575.959191][T17350] team0: Port device team_slave_0 added [ 1578.817560][T17350] team0: Port device team_slave_1 added [ 1579.601442][T17350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.601462][T17350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.601492][T17350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1579.626446][T17350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1579.626465][T17350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.626491][T17350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1579.745974][T15441] Bluetooth: hci1: command 0x0405 tx timeout [ 1579.818949][T17491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1580.039926][T17350] hsr_slave_0: entered promiscuous mode [ 1580.041465][T17350] hsr_slave_1: entered promiscuous mode [ 1580.067896][T13637] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1580.068131][T13637] Bluetooth: hci3: Injecting HCI hardware error event [ 1580.074036][T15441] Bluetooth: hci3: hardware error 0x00 [ 1580.734803][T17498] program syz.2.2619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1580.882873][T17502] netlink: 'syz.2.2623': attribute type 3 has an invalid length. [ 1580.882891][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2623'. [ 1582.555223][T15441] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1582.662952][ T5898] kernel read not supported for file /admmidi2 (pid: 5898 comm: kworker/1:6) [ 1582.787152][T15107] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1582.816206][T17502] netlink: 'syz.2.2623': attribute type 3 has an invalid length. [ 1582.816227][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2623'. [ 1582.851496][T17512] bridge0: port 3(syz_tun) entered blocking state [ 1582.852769][T17512] bridge0: port 3(syz_tun) entered disabled state [ 1582.853342][T17512] syz_tun: entered allmulticast mode [ 1582.883307][T17512] syz_tun: entered promiscuous mode [ 1582.884788][T17512] bridge0: port 3(syz_tun) entered blocking state [ 1582.884867][T17512] bridge0: port 3(syz_tun) entered forwarding state [ 1582.936087][T15107] usb 3-1: Using ep0 maxpacket: 16 [ 1582.938810][T15107] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1582.938839][T15107] usb 3-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 1582.938860][T15107] usb 3-1: config 0 has no interface number 0 [ 1582.942552][T15107] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1582.942583][T15107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.942604][T15107] usb 3-1: Product: syz [ 1582.942619][T15107] usb 3-1: Manufacturer: syz [ 1582.942634][T15107] usb 3-1: SerialNumber: syz [ 1582.954603][T15107] usb 3-1: config 0 descriptor?? [ 1582.976071][ T977] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 1583.063686][T15107] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1583.063732][T15107] uvcvideo 3-1:0.105: No valid video chain found. [ 1583.131440][ T977] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x41, changing to 0x1 [ 1583.131480][ T977] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1583.131506][ T977] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1583.134190][ T977] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1583.134220][ T977] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1583.134241][ T977] usb 8-1: Product: syz [ 1583.134256][ T977] usb 8-1: Manufacturer: syz [ 1583.134270][ T977] usb 8-1: SerialNumber: syz [ 1583.199634][T15107] usb 3-1: USB disconnect, device number 82 [ 1583.217075][ T977] usb 8-1: config 0 descriptor?? [ 1583.242171][ T977] usb 8-1: selecting invalid altsetting 0 [ 1583.256186][T17519] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2627'. [ 1583.471404][T15832] usb 8-1: USB disconnect, device number 24 [ 1583.539683][T17519] bridge0: port 3(syz_tun) entered disabled state [ 1583.539833][T17519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.540322][T17519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.596421][ T5898] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1583.766007][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 1583.772635][ T5898] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1583.772670][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.772690][ T5898] usb 5-1: Product: syz [ 1583.772704][ T5898] usb 5-1: Manufacturer: syz [ 1583.772720][ T5898] usb 5-1: SerialNumber: syz [ 1585.671167][ T5898] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 1585.671286][ T5898] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 1585.674199][T17293] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1585.871563][ T977] usb 5-1: USB disconnect, device number 104 [ 1585.952216][T17293] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1586.152695][T17293] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1586.844041][T17293] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1589.231274][ T174] bridge_slave_1: left allmulticast mode [ 1589.231309][ T174] bridge_slave_1: left promiscuous mode [ 1589.231618][ T174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.859210][ T174] bridge_slave_0: left allmulticast mode [ 1590.859244][ T174] bridge_slave_0: left promiscuous mode [ 1590.859553][ T174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.877118][ T174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1596.715090][ T174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1596.807760][ T174] bond0 (unregistering): Released all slaves [ 1597.274618][T17590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2647'. [ 1597.336835][T17588] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2647'. [ 1597.336866][T17588] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2647'. [ 1597.409576][T17589] syz_tun: left allmulticast mode [ 1597.409604][T17589] syz_tun: left promiscuous mode [ 1597.409801][T17589] bridge0: port 3(syz_tun) entered disabled state [ 1597.529651][T17589] team0: Port device syz_tun added [ 1599.300827][ T174] hsr_slave_0: left promiscuous mode [ 1599.346230][ T174] hsr_slave_1: left promiscuous mode [ 1599.346985][ T174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1600.630445][ T174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1604.376827][ T174] team0 (unregistering): Port device team_slave_1 removed [ 1604.697027][ T174] team0 (unregistering): Port device team_slave_0 removed [ 1608.172750][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.172832][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.348691][T13637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1608.407352][T13637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1608.426025][T13637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1608.436553][T13637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1608.456379][T13637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1611.737658][ T36] audit: type=1400 audit(1771990111.598:1959): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="*]" requested=w pid=17653 comm="syz.2.2662" daddr=::ffff:172.20.20.0 [ 1611.788818][T15441] Bluetooth: hci0: command tx timeout [ 1613.898362][T17669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1613.946201][T15441] Bluetooth: hci0: command tx timeout [ 1615.586612][ T36] audit: type=1326 audit(1771990115.358:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17681 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1615.586906][ T36] audit: type=1326 audit(1771990115.368:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17681 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1615.587104][ T36] audit: type=1326 audit(1771990115.378:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17681 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1615.587346][ T36] audit: type=1326 audit(1771990115.388:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17681 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1615.587813][ T36] audit: type=1326 audit(1771990115.388:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17681 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1615.588042][ T36] audit: type=1326 audit(1771990115.388:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17681 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1615.588280][ T36] audit: type=1326 audit(1771990115.398:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17681 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1615.588509][ T36] audit: type=1326 audit(1771990115.398:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17681 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1615.844590][T13637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1615.867518][T13637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1615.867951][T13637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1615.869408][T13637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1615.870160][T13637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1615.987554][T13637] Bluetooth: hci0: command tx timeout [ 1616.097392][ T36] audit: type=1326 audit(1771990115.948:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17681 comm="syz.2.2670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1618.691703][T15441] Bluetooth: hci0: command tx timeout [ 1618.691829][T13637] Bluetooth: hci4: command tx timeout [ 1620.033659][ T36] audit: type=1400 audit(1771990119.848:1969): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="*]" requested=w pid=17696 comm="syz.7.2667" daddr=::ffff:172.20.20.0 [ 1620.900993][T12409] Bluetooth: hci4: command tx timeout [ 1622.936149][ T9365] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1622.945935][T12409] Bluetooth: hci4: command tx timeout [ 1623.208324][ T9365] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1623.208359][ T9365] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.215122][ T9365] usb 8-1: config 0 descriptor?? [ 1623.256731][ T9365] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1623.415955][ T5805] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1623.576841][ T5805] usb 3-1: Using ep0 maxpacket: 16 [ 1623.591534][ T5805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1623.591594][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1623.591663][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1623.591677][ T5805] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1623.591691][ T5805] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1623.658037][ T5805] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1623.658106][ T5805] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1623.658120][ T5805] usb 3-1: Manufacturer: syz [ 1623.662919][ T5805] usb 3-1: config 0 descriptor?? [ 1624.152952][ T5805] rc_core: IR keymap rc-hauppauge not found [ 1624.152975][ T5805] Registered IR keymap rc-empty [ 1624.189107][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1624.208780][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1624.266340][ T5805] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1624.322258][ T5805] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input37 [ 1624.430376][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1624.459802][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1624.477129][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1624.496081][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1624.527983][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1624.546151][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1624.568102][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1624.606454][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1624.639629][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1624.668394][ T5805] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1624.714398][ T5805] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1624.714429][ T5805] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1624.965399][ T9365] usb 8-1: USB disconnect, device number 25 [ 1625.026031][T12409] Bluetooth: hci4: command tx timeout [ 1625.302171][T17646] chnl_net:caif_netlink_parms(): no params data found [ 1625.391493][T15638] usb 3-1: USB disconnect, device number 83 [ 1625.584987][T17727] netlink: zone id is out of range [ 1625.585017][T17727] netlink: get zone limit has 8 unknown bytes [ 1632.813187][T17686] chnl_net:caif_netlink_parms(): no params data found [ 1632.849128][T17646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.849277][T17646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.849557][T17646] bridge_slave_0: entered allmulticast mode [ 1632.891784][T17646] bridge_slave_0: entered promiscuous mode [ 1632.967770][T17646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.967939][T17646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.968240][T17646] bridge_slave_1: entered allmulticast mode [ 1632.977546][T17646] bridge_slave_1: entered promiscuous mode [ 1634.105335][T17646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1634.659187][T17646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1634.685201][T17769] ADFS-fs (nbd7): error: unable to read block 3, try 0 [ 1634.850948][T17768] netlink: 'syz.7.2688': attribute type 1 has an invalid length. [ 1634.895488][T17768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1634.992953][T17769] genirq: Flags mismatch irq 4. 00202000 (pcmmio) vs. 00202080 (ttyS0) [ 1635.020987][T17768] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1635.122566][T17646] team0: Port device team_slave_0 added [ 1635.381985][T17686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1635.382216][T17686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.382396][T17686] bridge_slave_0: entered allmulticast mode [ 1635.414953][T17686] bridge_slave_0: entered promiscuous mode [ 1635.427428][T17646] team0: Port device team_slave_1 added [ 1635.446162][T17686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1635.447427][T17686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.448837][T17686] bridge_slave_1: entered allmulticast mode [ 1635.495065][T17686] bridge_slave_1: entered promiscuous mode [ 1635.567738][ T174] bridge_slave_1: left allmulticast mode [ 1635.567760][ T174] bridge_slave_1: left promiscuous mode [ 1635.567929][ T174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.675410][ T174] bridge_slave_0: left allmulticast mode [ 1635.675434][ T174] bridge_slave_0: left promiscuous mode [ 1635.675700][ T174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.062109][T17781] FAULT_INJECTION: forcing a failure. [ 1636.062109][T17781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1636.062137][T17781] CPU: 1 UID: 0 PID: 17781 Comm: syz.2.2687 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1636.062156][T17781] Tainted: [L]=SOFTLOCKUP [ 1636.062161][T17781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1636.062169][T17781] Call Trace: [ 1636.062175][T17781] [ 1636.062180][T17781] dump_stack_lvl+0xe8/0x150 [ 1636.062202][T17781] should_fail_ex+0x46b/0x600 [ 1636.062221][T17781] _copy_to_user+0x31/0xb0 [ 1636.062238][T17781] simple_read_from_buffer+0xe1/0x170 [ 1636.062257][T17781] proc_fail_nth_read+0x1be/0x230 [ 1636.062272][T17781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1636.062287][T17781] ? rw_verify_area+0x2ac/0x4e0 [ 1636.062304][T17781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1636.062317][T17781] vfs_read+0x212/0xa70 [ 1636.062334][T17781] ? __pfx_vfs_read+0x10/0x10 [ 1636.062347][T17781] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1636.062363][T17781] ? lockdep_hardirqs_on+0x7a/0x110 [ 1636.062378][T17781] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1636.062392][T17781] ? mutex_lock_nested+0x152/0x1d0 [ 1636.062403][T17781] ? fdget_pos+0x252/0x320 [ 1636.062424][T17781] ksys_read+0x156/0x270 [ 1636.062437][T17781] ? __pfx_ksys_read+0x10/0x10 [ 1636.062455][T17781] do_syscall_64+0x14d/0xf80 [ 1636.062470][T17781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.062491][T17781] ? trace_irq_disable+0x37/0x100 [ 1636.062502][T17781] ? clear_bhb_loop+0x40/0x90 [ 1636.062516][T17781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.062527][T17781] RIP: 0033:0x7f8a2976cece [ 1636.062540][T17781] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1636.062551][T17781] RSP: 002b:00007f8a279dcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1636.062567][T17781] RAX: ffffffffffffffda RBX: 00007f8a279dd6c0 RCX: 00007f8a2976cece [ 1636.062576][T17781] RDX: 000000000000000f RSI: 00007f8a279dd0a0 RDI: 0000000000000007 [ 1636.062584][T17781] RBP: 00007f8a279dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1636.062592][T17781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1636.062600][T17781] R13: 00007f8a29a26128 R14: 00007f8a29a26090 R15: 00007ffc3b94b8f8 [ 1636.062628][T17781] [ 1637.986887][ T36] audit: type=1326 audit(1771990136.918:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.2.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1637.986959][ T36] audit: type=1326 audit(1771990136.928:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.2.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1637.987004][ T36] audit: type=1326 audit(1771990136.938:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.2.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1637.987048][ T36] audit: type=1326 audit(1771990136.938:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.2.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1637.987093][ T36] audit: type=1326 audit(1771990136.938:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.2.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1637.987139][ T36] audit: type=1326 audit(1771990136.948:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.2.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1637.987183][ T36] audit: type=1326 audit(1771990136.948:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.2.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1637.987228][ T36] audit: type=1326 audit(1771990136.948:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.2.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1637.987273][ T36] audit: type=1326 audit(1771990136.958:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.2.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1637.987317][ T36] audit: type=1326 audit(1771990136.968:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17782 comm="syz.2.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a297ac629 code=0x7ffc0000 [ 1639.222064][T17791] sctp: [Deprecated]: syz.4.2693 (pid 17791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1639.222064][T17791] Use struct sctp_sack_info instead [ 1639.520349][ T174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1639.636961][ T174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1639.851299][ T174] bond0 (unregistering): Released all slaves [ 1640.006113][T17802] 9p: Bad value for 'rfdno' [ 1641.220591][T17646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1641.220605][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.220622][T17646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1642.518055][T17686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.506100][T17646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1643.506121][T17646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1643.506150][T17646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1643.514889][T17686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.669464][T15009] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1643.736581][T17814] FAULT_INJECTION: forcing a failure. [ 1643.736581][T17814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1643.736624][T17814] CPU: 1 UID: 0 PID: 17814 Comm: syz.7.2696 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1643.736654][T17814] Tainted: [L]=SOFTLOCKUP [ 1643.736662][T17814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1643.736674][T17814] Call Trace: [ 1643.736684][T17814] [ 1643.736693][T17814] dump_stack_lvl+0xe8/0x150 [ 1643.736730][T17814] should_fail_ex+0x46b/0x600 [ 1643.736763][T17814] _copy_to_user+0x31/0xb0 [ 1643.736796][T17814] simple_read_from_buffer+0xe1/0x170 [ 1643.736830][T17814] proc_fail_nth_read+0x1be/0x230 [ 1643.736857][T17814] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1643.736884][T17814] ? rw_verify_area+0x2ac/0x4e0 [ 1643.736915][T17814] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1643.736939][T17814] vfs_read+0x212/0xa70 [ 1643.736968][T17814] ? __pfx_vfs_read+0x10/0x10 [ 1643.736992][T17814] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1643.737021][T17814] ? lockdep_hardirqs_on+0x7a/0x110 [ 1643.737048][T17814] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1643.737077][T17814] ? mutex_lock_nested+0x152/0x1d0 [ 1643.737097][T17814] ? fdget_pos+0x252/0x320 [ 1643.737136][T17814] ksys_read+0x156/0x270 [ 1643.737160][T17814] ? __pfx_ksys_read+0x10/0x10 [ 1643.737194][T17814] do_syscall_64+0x14d/0xf80 [ 1643.737221][T17814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.737242][T17814] ? trace_irq_disable+0x37/0x100 [ 1643.737262][T17814] ? clear_bhb_loop+0x40/0x90 [ 1643.737288][T17814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.737309][T17814] RIP: 0033:0x7f9c998bcece [ 1643.737329][T17814] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1643.737348][T17814] RSP: 002b:00007f9c97b55fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1643.737373][T17814] RAX: ffffffffffffffda RBX: 00007f9c97b566c0 RCX: 00007f9c998bcece [ 1643.737389][T17814] RDX: 000000000000000f RSI: 00007f9c97b560a0 RDI: 0000000000000003 [ 1643.737403][T17814] RBP: 00007f9c97b56090 R08: 0000000000000000 R09: 0000000000000000 [ 1643.737417][T17814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1643.737429][T17814] R13: 00007f9c99b76038 R14: 00007f9c99b75fa0 R15: 00007fff3ea62ef8 [ 1643.737466][T17814] [ 1643.865941][T15009] usb 3-1: Using ep0 maxpacket: 16 [ 1643.868024][T15009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1643.868069][T15009] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1643.868091][T15009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.085695][T15009] usb 3-1: config 0 descriptor?? [ 1644.094299][T15009] usb 3-1: can't set config #0, error -71 [ 1644.176083][T15009] usb 3-1: USB disconnect, device number 84 [ 1644.256241][T17817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1644.856023][T17824] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 1644.909169][ T9365] Process accounting resumed [ 1644.988145][ T174] hsr_slave_0: left promiscuous mode [ 1645.038555][ T174] hsr_slave_1: left promiscuous mode [ 1645.039656][ T174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1645.090845][ T174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1645.232551][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 1645.232575][ T36] audit: type=1400 audit(1771990145.098:1982): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="*]" requested=w pid=17832 comm="syz.2.2701" daddr=::ffff:224.0.0.1 dest=20000 [ 1645.239947][T17830] Process accounting resumed [ 1646.003617][T17835] ADFS-fs (nbd7): error: unable to read block 3, try 0 [ 1646.045355][T17835] netlink: 'syz.7.2702': attribute type 1 has an invalid length. [ 1646.217167][T17847] genirq: Flags mismatch irq 4. 00202000 (pcmmio) vs. 00202080 (ttyS0) [ 1646.616682][ T174] team0 (unregistering): Port device team_slave_1 removed [ 1646.816019][ T9365] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 1646.816950][ T174] team0 (unregistering): Port device team_slave_0 removed [ 1647.017243][ T9365] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1647.017280][ T9365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.017302][ T9365] usb 5-1: Product: syz [ 1647.017318][ T9365] usb 5-1: Manufacturer: syz [ 1647.017334][ T9365] usb 5-1: SerialNumber: syz [ 1647.038052][ T9365] usb 5-1: config 0 descriptor?? [ 1647.393152][ T9365] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1647.767376][T17835] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1647.854925][T17686] team0: Port device team_slave_0 added [ 1647.893141][T17841] syz_tun: entered allmulticast mode [ 1648.384405][T17686] team0: Port device team_slave_1 added [ 1648.422548][T17841] syz_tun: left allmulticast mode [ 1649.728800][T17646] hsr_slave_0: entered promiscuous mode [ 1649.730334][T17646] hsr_slave_1: entered promiscuous mode [ 1649.731417][T17646] debugfs: 'hsr0' already exists in 'hsr' [ 1649.731454][T17646] Cannot create hsr debugfs directory [ 1650.160692][ T9365] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1652.423613][T17686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1652.423632][T17686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1652.423660][T17686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1652.445446][T15638] usb 5-1: USB disconnect, device number 105 [ 1652.562699][T17686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1652.562714][T17686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1652.562730][T17686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1652.861686][T17899] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1652.935224][T17686] hsr_slave_0: entered promiscuous mode [ 1652.948179][T17686] hsr_slave_1: entered promiscuous mode [ 1652.949340][T17686] debugfs: 'hsr0' already exists in 'hsr' [ 1652.949367][T17686] Cannot create hsr debugfs directory [ 1654.067066][ T36] audit: type=1400 audit(1771990153.578:1983): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="*]" requested=w pid=17904 comm="syz.4.2710" daddr=::ffff:172.20.20.0 [ 1654.067368][ T36] audit: type=1400 audit(1771990153.598:1984): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="*]" requested=w pid=17904 comm="syz.4.2710" daddr=::1c9a:e7ff:fe9a:6f34 [ 1658.549112][T17943] FAULT_INJECTION: forcing a failure. [ 1658.549112][T17943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1658.549154][T17943] CPU: 1 UID: 0 PID: 17943 Comm: syz.7.2714 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1658.549186][T17943] Tainted: [L]=SOFTLOCKUP [ 1658.549194][T17943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1658.549206][T17943] Call Trace: [ 1658.549216][T17943] [ 1658.549225][T17943] dump_stack_lvl+0xe8/0x150 [ 1658.549262][T17943] should_fail_ex+0x46b/0x600 [ 1658.549294][T17943] copy_fpstate_to_sigframe+0xa8c/0xd40 [ 1658.549333][T17943] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1658.549361][T17943] ? __kasan_slab_free+0x5c/0x80 [ 1658.549382][T17943] ? kmem_cache_free+0x185/0x690 [ 1658.549404][T17943] ? get_signal+0xa29/0x1310 [ 1658.549425][T17943] ? arch_do_signal_or_restart+0xbc/0x830 [ 1658.549448][T17943] ? irqentry_exit+0x176/0x620 [ 1658.549473][T17943] ? asm_exc_page_fault+0x26/0x30 [ 1658.549509][T17943] ? fpu__alloc_mathframe+0xac/0x130 [ 1658.549537][T17943] get_sigframe+0x5f7/0x820 [ 1658.549577][T17943] ? __pfx_get_sigframe+0x10/0x10 [ 1658.549600][T17943] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1658.549622][T17943] ? reacquire_held_locks+0x104/0x190 [ 1658.549653][T17943] ? rt_spin_lock+0x1e0/0x400 [ 1658.549682][T17943] x64_setup_rt_frame+0x161/0xcb0 [ 1658.549703][T17943] ? rt_spin_unlock+0x14f/0x200 [ 1658.549730][T17943] ? rt_spin_unlock+0x160/0x200 [ 1658.549754][T17943] ? get_signal+0x1120/0x1310 [ 1658.549787][T17943] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1658.549821][T17943] arch_do_signal_or_restart+0x429/0x830 [ 1658.549848][T17943] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1658.549894][T17943] irqentry_exit+0x176/0x620 [ 1658.549922][T17943] ? trace_irq_disable+0x37/0x100 [ 1658.549947][T17943] asm_exc_page_fault+0x26/0x30 [ 1658.549966][T17943] RIP: 0033:0x7f9c998e581f [ 1658.549986][T17943] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c 22 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 21 04 00 00 fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 79 [ 1658.550005][T17943] RSP: 002b:00007f9c97b55bd8 EFLAGS: 00010283 [ 1658.550025][T17943] RAX: 0000000000000000 RBX: 00000000000001ff RCX: 0000000000000000 [ 1658.550040][T17943] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007f9c97b55c00 [ 1658.550054][T17943] RBP: 00007f9c97b55c00 R08: 0000000000000000 R09: 0000000000000000 [ 1658.550068][T17943] R10: 0000000000000000 R11: 0000000000000000 R12: cccccccccccccccd [ 1658.550083][T17943] R13: 00007f9c99b76038 R14: 00007f9c99b75fa0 R15: 00007fff3ea62ef8 [ 1658.550118][T17943] [ 1662.843226][T17957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1665.178597][ T174] bridge_slave_1: left allmulticast mode [ 1665.178640][ T174] bridge_slave_1: left promiscuous mode [ 1665.178908][ T174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.287718][ T174] bridge_slave_0: left allmulticast mode [ 1665.287752][ T174] bridge_slave_0: left promiscuous mode [ 1665.288065][ T174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1665.581468][T17975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1667.831940][T17986] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 1670.206790][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1670.206837][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1672.490064][ T174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1672.510187][T13637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1672.525540][T13637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1672.527702][T13637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1672.540220][T13637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1672.549536][T13637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1672.717213][ T174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1672.844391][ T174] bond0 (unregistering): Released all slaves [ 1673.465975][ T174] hsr_slave_0: left promiscuous mode [ 1673.547127][ T174] hsr_slave_1: left promiscuous mode [ 1673.548230][ T174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1673.826049][ T174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1674.048845][T18015] ADFS-fs (nbd7): error: unable to read block 3, try 0 [ 1674.162584][T18013] netlink: 'syz.7.2726': attribute type 1 has an invalid length. [ 1674.209479][T18021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1674.438381][T18024] genirq: Flags mismatch irq 4. 00202000 (pcmmio) vs. 00202080 (ttyS0) [ 1674.665903][T13637] Bluetooth: hci1: command tx timeout [ 1676.607388][ T36] audit: type=1326 audit(1771990175.558:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18028 comm="syz.4.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd3aec629 code=0x7ffc0000 [ 1676.607448][ T36] audit: type=1326 audit(1771990175.568:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18028 comm="syz.4.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd3aec629 code=0x7ffc0000 [ 1676.607493][ T36] audit: type=1326 audit(1771990175.568:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18028 comm="syz.4.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efcd3aec629 code=0x7ffc0000 [ 1676.607538][ T36] audit: type=1326 audit(1771990175.578:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18028 comm="syz.4.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd3aec629 code=0x7ffc0000 [ 1676.607582][ T36] audit: type=1326 audit(1771990175.578:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18028 comm="syz.4.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd3aec629 code=0x7ffc0000 [ 1676.607627][ T36] audit: type=1326 audit(1771990175.598:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18028 comm="syz.4.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7efcd3aec629 code=0x7ffc0000 [ 1676.607672][ T36] audit: type=1326 audit(1771990175.598:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18028 comm="syz.4.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd3aec629 code=0x7ffc0000 [ 1676.607718][ T36] audit: type=1326 audit(1771990175.608:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18028 comm="syz.4.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd3aec629 code=0x7ffc0000 [ 1676.607762][ T36] audit: type=1326 audit(1771990175.628:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18028 comm="syz.4.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efcd3aec629 code=0x7ffc0000 [ 1676.607807][ T36] audit: type=1326 audit(1771990175.628:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18028 comm="syz.4.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd3aec629 code=0x7ffc0000 [ 1676.636640][ T174] team0 (unregistering): Port device team_slave_1 removed [ 1676.752393][T13637] Bluetooth: hci1: command tx timeout [ 1677.096724][ T174] team0 (unregistering): Port device team_slave_0 removed [ 1677.770083][T12409] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1677.835253][T12409] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1677.839320][T12409] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1677.854638][T12409] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1677.855500][T12409] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1677.892815][T18013] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1678.786080][T12409] Bluetooth: hci1: command tx timeout [ 1679.048260][T18049] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1679.792505][T18005] chnl_net:caif_netlink_parms(): no params data found [ 1681.027998][T12409] Bluetooth: hci6: command tx timeout [ 1681.028023][T13637] Bluetooth: hci1: command tx timeout [ 1682.331453][T18076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1682.576009][T15832] usb 8-1: new low-speed USB device number 26 using dummy_hcd [ 1683.162696][T18086] FAULT_INJECTION: forcing a failure. [ 1683.162696][T18086] name failslab, interval 1, probability 0, space 0, times 0 [ 1683.162762][T18086] CPU: 0 UID: 0 PID: 18086 Comm: syz.4.2741 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1683.162793][T18086] Tainted: [L]=SOFTLOCKUP [ 1683.162800][T18086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1683.162812][T18086] Call Trace: [ 1683.162821][T18086] [ 1683.162830][T18086] dump_stack_lvl+0xe8/0x150 [ 1683.162865][T18086] should_fail_ex+0x46b/0x600 [ 1683.162885][T18086] should_failslab+0xa8/0x100 [ 1683.162901][T18086] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 1683.162917][T18086] ? rcu_is_watching+0x15/0xb0 [ 1683.162933][T18086] ? __get_vm_area_node+0x171/0x350 [ 1683.162948][T18086] __get_vm_area_node+0x171/0x350 [ 1683.162963][T18086] __vmalloc_node_range_noprof+0x372/0x1730 [ 1683.162977][T18086] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1683.162996][T18086] ? rcu_is_watching+0x15/0xb0 [ 1683.163030][T18086] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1683.163043][T18086] ? irqentry_exit+0x59e/0x620 [ 1683.163059][T18086] ? lockdep_hardirqs_on+0x7a/0x110 [ 1683.163074][T18086] ? irqentry_exit+0x59e/0x620 [ 1683.163093][T18086] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1683.163103][T18086] __vmalloc_noprof+0xd2/0x120 [ 1683.163115][T18086] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1683.163129][T18086] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1683.163144][T18086] bpf_prog_alloc+0x3c/0x1a0 [ 1683.163157][T18086] bpf_prog_load+0x7ba/0x1ae0 [ 1683.163179][T18086] ? __pfx_bpf_prog_load+0x10/0x10 [ 1683.163190][T18086] ? __might_fault+0xaf/0x130 [ 1683.163215][T18086] ? bpf_lsm_bpf+0x9/0x20 [ 1683.163229][T18086] ? security_bpf+0x7e/0x2d0 [ 1683.163243][T18086] __sys_bpf+0x618/0x950 [ 1683.163267][T18086] ? __pfx___sys_bpf+0x10/0x10 [ 1683.163308][T18086] __x64_sys_bpf+0x7c/0x90 [ 1683.163324][T18086] do_syscall_64+0x14d/0xf80 [ 1683.163339][T18086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.163351][T18086] ? clear_bhb_loop+0x40/0x90 [ 1683.163366][T18086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.163377][T18086] RIP: 0033:0x7efcd3aec629 [ 1683.163390][T18086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1683.163400][T18086] RSP: 002b:00007efcd1d25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1683.163416][T18086] RAX: ffffffffffffffda RBX: 00007efcd3d66090 RCX: 00007efcd3aec629 [ 1683.163425][T18086] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 1683.163433][T18086] RBP: 00007efcd1d25090 R08: 0000000000000000 R09: 0000000000000000 [ 1683.163441][T18086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1683.163448][T18086] R13: 00007efcd3d66128 R14: 00007efcd3d66090 R15: 00007ffd047f3ec8 [ 1683.163467][T18086] [ 1683.163506][T18086] syz.4.2741: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1683.163916][T18086] CPU: 0 UID: 0 PID: 18086 Comm: syz.4.2741 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1683.163944][T18086] Tainted: [L]=SOFTLOCKUP [ 1683.163952][T18086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1683.163960][T18086] Call Trace: [ 1683.163965][T18086] [ 1683.163971][T18086] dump_stack_lvl+0xe8/0x150 [ 1683.163989][T18086] warn_alloc+0x263/0x3e0 [ 1683.164003][T18086] ? should_fail_ex+0x343/0x600 [ 1683.164027][T18086] ? __pfx_warn_alloc+0x10/0x10 [ 1683.164040][T18086] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 1683.164054][T18086] ? rcu_is_watching+0x15/0xb0 [ 1683.164069][T18086] ? __get_vm_area_node+0x171/0x350 [ 1683.164083][T18086] ? __get_vm_area_node+0x2e1/0x350 [ 1683.164099][T18086] __vmalloc_node_range_noprof+0x397/0x1730 [ 1683.164119][T18086] ? rcu_is_watching+0x15/0xb0 [ 1683.164145][T18086] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1683.164158][T18086] ? irqentry_exit+0x59e/0x620 [ 1683.164173][T18086] ? lockdep_hardirqs_on+0x7a/0x110 [ 1683.164187][T18086] ? irqentry_exit+0x59e/0x620 [ 1683.164206][T18086] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1683.164216][T18086] __vmalloc_noprof+0xd2/0x120 [ 1683.164229][T18086] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1683.164242][T18086] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1683.164258][T18086] bpf_prog_alloc+0x3c/0x1a0 [ 1683.164272][T18086] bpf_prog_load+0x7ba/0x1ae0 [ 1683.164293][T18086] ? __pfx_bpf_prog_load+0x10/0x10 [ 1683.164304][T18086] ? __might_fault+0xaf/0x130 [ 1683.164328][T18086] ? bpf_lsm_bpf+0x9/0x20 [ 1683.164342][T18086] ? security_bpf+0x7e/0x2d0 [ 1683.164355][T18086] __sys_bpf+0x618/0x950 [ 1683.164373][T18086] ? __pfx___sys_bpf+0x10/0x10 [ 1683.164409][T18086] __x64_sys_bpf+0x7c/0x90 [ 1683.164425][T18086] do_syscall_64+0x14d/0xf80 [ 1683.164440][T18086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.164451][T18086] ? clear_bhb_loop+0x40/0x90 [ 1683.164465][T18086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.164477][T18086] RIP: 0033:0x7efcd3aec629 [ 1683.164487][T18086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1683.164497][T18086] RSP: 002b:00007efcd1d25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1683.164509][T18086] RAX: ffffffffffffffda RBX: 00007efcd3d66090 RCX: 00007efcd3aec629 [ 1683.164518][T18086] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 1683.164526][T18086] RBP: 00007efcd1d25090 R08: 0000000000000000 R09: 0000000000000000 [ 1683.164543][T18086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1683.164551][T18086] R13: 00007efcd3d66128 R14: 00007efcd3d66090 R15: 00007ffd047f3ec8 [ 1683.164570][T18086] [ 1683.164600][T18086] Mem-Info: [ 1683.164610][T18086] active_anon:285 inactive_anon:23080 isolated_anon:0 [ 1683.164610][T18086] active_file:33716 inactive_file:36369 isolated_file:0 [ 1683.164610][T18086] unevictable:768 dirty:267 writeback:0 [ 1683.164610][T18086] slab_reclaimable:14105 slab_unreclaimable:110571 [ 1683.164610][T18086] mapped:40213 shmem:17693 pagetables:1554 [ 1683.164610][T18086] sec_pagetables:0 bounce:0 [ 1683.164610][T18086] kernel_misc_reclaimable:0 [ 1683.164610][T18086] free:1264620 free_pcp:7465 free_cma:0 [ 1683.164692][T18086] Node 0 active_anon:1140kB inactive_anon:92320kB active_file:134660kB inactive_file:145476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132180kB dirty:1068kB writeback:0kB shmem:69236kB kernel_stack:14196kB pagetables:6072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1683.164764][T18086] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28672kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1683.164832][T18086] Node 0 DMA free:11204kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:28kB free_cma:0kB [ 1683.164959][T18086] lowmem_reserve[]: 0 2507 2508 2508 2508 [ 1683.165122][T18086] Node 0 DMA32 free:1200512kB boost:0kB min:3936kB low:6476kB high:9016kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1140kB inactive_anon:92320kB active_file:134660kB inactive_file:145476kB unevictable:1536kB writepending:1068kB zspages:0kB present:3129332kB managed:2567896kB mlocked:0kB bounce:0kB free_pcp:22596kB local_pcp:6504kB free_cma:0kB [ 1683.165237][T18086] lowmem_reserve[]: 0 0 0 0 0 [ 1683.165367][T18086] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:720kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 1683.165472][T18086] lowmem_reserve[]: 0 0 0 0 0 [ 1683.165655][T18086] Node 1 Normal free:3846764kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7200kB local_pcp:2480kB free_cma:0kB [ 1683.165840][T18086] lowmem_reserve[]: 0 0 0 0 0 [ 1683.166067][T18086] Node 0 DMA: 3*4kB (U) 1*8kB (U) 1*16kB (U) 3*32kB (U) 3*64kB (U) 3*128kB (U) 3*256kB (U) 3*512kB (U) 2*1024kB (U) 3*2048kB (UM) 0*4096kB = 11204kB [ 1683.167227][T18086] Node 0 DMA32: 1928*4kB (U) 2178*8kB (UE) 1991*16kB (UE) 787*32kB (UME) 603*64kB (UME) 685*128kB (UME) 635*256kB (UM) 456*512kB (UME) 304*1024kB (UM) 137*2048kB (UM) 1*4096kB (U) = 1200448kB [ 1683.168053][T18086] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1683.168686][T18086] Node 1 Normal: 1*4kB (M) 7*8kB (UM) 13*16kB (UME) 7*32kB (UME) 16*64kB (UME) 9*128kB (UME) 8*256kB (UME) 6*512kB (UME) 5*1024kB (UM) 2*2048kB (UE) 935*4096kB (UM) = 3846764kB [ 1683.169721][T18086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1683.169764][T18086] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1683.169807][T18086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1683.169848][T18086] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1683.169892][T18086] 87774 total pagecache pages [ 1683.169928][T18086] 0 pages in swap cache [ 1683.169964][T18086] Free swap = 124996kB [ 1683.170000][T18086] Total swap = 124996kB [ 1683.170038][T18086] 2097051 pages RAM [ 1683.170068][T18086] 0 pages HighMem/MovableOnly [ 1683.170077][T18086] 423282 pages reserved [ 1683.170116][T18086] 0 pages cma reserved [ 1684.150202][T12409] Bluetooth: hci6: command tx timeout [ 1684.265527][T15832] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1684.276254][T15832] usb 8-1: config 5 has an invalid interface number: 173 but max is 0 [ 1684.276283][T15832] usb 8-1: config 5 has no interface number 0 [ 1684.276314][T15832] usb 8-1: config 5 interface 173 has no altsetting 0 [ 1684.279133][T15832] usb 8-1: language id specifier not provided by device, defaulting to English [ 1684.320624][T15832] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice= 7.b9 [ 1684.320655][T15832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.320675][T15832] usb 8-1: Manufacturer: 掻㪋ꀸ鏩枑쥂⤦㋠㹅伐쐐㣫奔揕䕏塬૵ [ 1684.320692][T15832] usb 8-1: SerialNumber: ఓ [ 1685.992831][T15009] ------------[ cut here ]------------ [ 1685.992848][T15009] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1685.992865][T15009] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#0: kworker/0:0/15009 [ 1685.992906][T15009] Modules linked in: [ 1685.992930][T15009] CPU: 0 UID: 0 PID: 15009 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1685.992958][T15009] Tainted: [L]=SOFTLOCKUP [ 1685.992967][T15009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1685.992981][T15009] Workqueue: events drm_fb_helper_damage_work [ 1685.993004][T15009] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1685.993026][T15009] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 da ee db fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1685.993045][T15009] RSP: 0018:ffffc900040ef8e0 EFLAGS: 00010246 [ 1685.993065][T15009] RAX: 1ffff11004981a00 RBX: ffffffff8f53f3f0 RCX: 0000000000000000 [ 1685.993082][T15009] RDX: ffffffff8b9eec00 RSI: ffffffff8ba0aa40 RDI: ffffffff8f53f3f0 [ 1685.993098][T15009] RBP: ffffc900040ef9c8 R08: 0000000000000000 R09: 0000000000000000 [ 1685.993114][T15009] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: ffffffff8ba0aa40 [ 1685.993131][T15009] R13: ffff888024c0d000 R14: 0000000000000000 R15: ffffffff8b9eec00 [ 1685.993147][T15009] FS: 0000000000000000(0000) GS:ffff888126595000(0000) knlGS:0000000000000000 [ 1685.993166][T15009] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1685.993183][T15009] CR2: 0000001b32006ff8 CR3: 000000009eec4000 CR4: 00000000003526f0 [ 1685.993204][T15009] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1685.993237][T15009] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1685.993253][T15009] Call Trace: [ 1685.993263][T15009] [ 1685.993279][T15009] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1685.993300][T15009] ? rt_spin_unlock+0x14f/0x200 [ 1685.993323][T15009] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1685.993355][T15009] ? rt_spin_unlock+0x160/0x200 [ 1685.993407][T15009] ? drm_vblank_get+0x147/0x260 [ 1685.993443][T15009] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1685.993477][T15009] drm_fb_helper_damage_work+0x131/0x6f0 [ 1685.993503][T15009] ? process_scheduled_works+0xa0f/0x17a0 [ 1685.993535][T15009] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1685.993564][T15009] ? process_scheduled_works+0xa0f/0x17a0 [ 1685.993588][T15009] ? process_scheduled_works+0xa0f/0x17a0 [ 1685.993616][T15009] process_scheduled_works+0xaec/0x17a0 [ 1685.993676][T15009] ? __pfx_process_scheduled_works+0x10/0x10 [ 1685.993710][T15009] ? assign_work+0x3d5/0x5e0 [ 1685.993743][T15009] worker_thread+0xa50/0xfc0 [ 1685.993803][T15009] kthread+0x388/0x470 [ 1685.993835][T15009] ? __pfx_worker_thread+0x10/0x10 [ 1685.993858][T15009] ? __pfx_kthread+0x10/0x10 [ 1685.993890][T15009] ret_from_fork+0x51e/0xb90 [ 1685.993921][T15009] ? __pfx_ret_from_fork+0x10/0x10 [ 1685.993946][T15009] ? __switch_to+0xc7d/0x1400 [ 1685.993974][T15009] ? __pfx_kthread+0x10/0x10 [ 1685.994007][T15009] ret_from_fork_asm+0x1a/0x30 [ 1685.994062][T15009] [ 1685.994074][T15009] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1685.994091][T15009] CPU: 0 UID: 0 PID: 15009 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1685.994120][T15009] Tainted: [L]=SOFTLOCKUP [ 1685.994129][T15009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1685.994142][T15009] Workqueue: events drm_fb_helper_damage_work [ 1685.994163][T15009] Call Trace: [ 1685.994172][T15009] [ 1685.994181][T15009] vpanic+0x1e0/0x670 [ 1685.994225][T15009] panic+0xc5/0xd0 [ 1685.994254][T15009] ? __pfx_panic+0x10/0x10 [ 1685.994296][T15009] ? ret_from_fork_asm+0x1a/0x30 [ 1685.994334][T15009] __warn+0x315/0x4a0 [ 1685.994363][T15009] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1685.994387][T15009] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1685.994410][T15009] __report_bug+0x29a/0x540 [ 1685.994445][T15009] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1685.994469][T15009] ? __pfx___report_bug+0x10/0x10 [ 1685.994521][T15009] report_bug_entry+0x19a/0x290 [ 1685.994548][T15009] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1685.994567][T15009] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 1685.994588][T15009] handle_bug+0xca/0x200 [ 1685.994621][T15009] exc_invalid_op+0x1a/0x50 [ 1685.994652][T15009] asm_exc_invalid_op+0x1a/0x20 [ 1685.994672][T15009] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1685.994695][T15009] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 da ee db fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1685.994714][T15009] RSP: 0018:ffffc900040ef8e0 EFLAGS: 00010246 [ 1685.994732][T15009] RAX: 1ffff11004981a00 RBX: ffffffff8f53f3f0 RCX: 0000000000000000 [ 1685.994747][T15009] RDX: ffffffff8b9eec00 RSI: ffffffff8ba0aa40 RDI: ffffffff8f53f3f0 [ 1685.994764][T15009] RBP: ffffc900040ef9c8 R08: 0000000000000000 R09: 0000000000000000 [ 1685.994779][T15009] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: ffffffff8ba0aa40 [ 1685.994795][T15009] R13: ffff888024c0d000 R14: 0000000000000000 R15: ffffffff8b9eec00 [ 1685.994838][T15009] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1685.994858][T15009] ? rt_spin_unlock+0x14f/0x200 [ 1685.994880][T15009] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1685.994911][T15009] ? rt_spin_unlock+0x160/0x200 [ 1685.994937][T15009] ? drm_vblank_get+0x147/0x260 [ 1685.994971][T15009] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1685.995005][T15009] drm_fb_helper_damage_work+0x131/0x6f0 [ 1685.995032][T15009] ? process_scheduled_works+0xa0f/0x17a0 [ 1685.995063][T15009] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1685.995093][T15009] ? process_scheduled_works+0xa0f/0x17a0 [ 1685.995117][T15009] ? process_scheduled_works+0xa0f/0x17a0 [ 1685.995144][T15009] process_scheduled_works+0xaec/0x17a0 [ 1685.995202][T15009] ? __pfx_process_scheduled_works+0x10/0x10 [ 1685.995244][T15009] ? assign_work+0x3d5/0x5e0 [ 1685.995275][T15009] worker_thread+0xa50/0xfc0 [ 1685.995335][T15009] kthread+0x388/0x470 [ 1685.995367][T15009] ? __pfx_worker_thread+0x10/0x10 [ 1685.995391][T15009] ? __pfx_kthread+0x10/0x10 [ 1685.995423][T15009] ret_from_fork+0x51e/0xb90 [ 1685.995454][T15009] ? __pfx_ret_from_fork+0x10/0x10 [ 1685.995479][T15009] ? __switch_to+0xc7d/0x1400 [ 1685.995507][T15009] ? __pfx_kthread+0x10/0x10 [ 1685.995540][T15009] ret_from_fork_asm+0x1a/0x30 [ 1685.995592][T15009] [ 1685.996076][T15009] Kernel Offset: disabled