last executing test programs: 13m30.22738518s ago: executing program 4 (id=1484): unshare(0x22020400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x3, 0x0, 0x0) 13m29.998430607s ago: executing program 4 (id=1485): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="0100002ed0fec484a743290000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x48800) 13m29.490742843s ago: executing program 4 (id=1486): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4028890) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) (fail_nth: 2) 13m29.01179383s ago: executing program 4 (id=1489): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @loopback}}, 0x1d) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4c1801, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xeeee8000, 0xf000, 0x7, 0x7, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x8, 0x1}, {0x1, 0xd000, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7, 0x1, 0x1, 0x1}, {0x118004, 0xdddd8000, 0xb, 0xe, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x4}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x25000, 0xa, 0x8, 0x70, 0x81, 0xfe, 0x0, 0xed, 0x1c, 0x7, 0xa8}, {0x6000, 0xd000, 0x8, 0x4, 0x0, 0x8, 0xfd, 0x0, 0x6, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x10000, 0xf, 0x6, 0x5, 0x0, 0x0, 0x81, 0x0, 0x4}, {0xd000, 0x1000, 0x3, 0x82, 0xfc, 0x10, 0x0, 0xe, 0x0, 0x2}, {0x30000, 0x800}, {0x1, 0xfffe}, 0x40000010, 0x0, 0x0, 0x10, 0x5, 0x100, 0x900, [0x0, 0x28000003, 0x2, 0x5]}) ioctl$KVM_SET_MSRS(r4, 0x4140aecd, &(0x7f0000000100)) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) lseek(r6, 0x1, 0x3) getsockopt$inet6_opts(r5, 0x84, 0x36, 0x0, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2b, 0x2, 0x9f, 0x3, 0x8, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x40, 0x8000, 0x6092}}) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8"], 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000000), 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r7, r0, 0x1, 0x1, 0x2}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) lsetxattr$security_smack_transmute(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380), &(0x7f00000003c0), 0x4, 0x3) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ppoll(&(0x7f0000000400)=[{r8, 0x401}, {r8, 0x2144}], 0x2, &(0x7f0000000480)={r10, r11+60000000}, &(0x7f00000004c0)={[0xb]}, 0x8) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) write$ppp(r1, &(0x7f0000000700)="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", 0x2a8) 13m25.459338136s ago: executing program 4 (id=1522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x14, r1, 0x701, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x48000) 13m22.34903598s ago: executing program 4 (id=1549): socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x86, 0x3, 0x2fc, 0x3d68e3c2, 0x40, "1ae33240794233a5bd0800", 0x7, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x62003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0xb3) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000440)=""/70, 0x46) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = socket$kcm(0x21, 0x2, 0xa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x54}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "7d14a0b0fe0e"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x48, 0x110, 0x1, "005866fb383b445f60416d712563501356b5f1df9d133d880dc8543c254a9c68299009089fd4268ea6bea9fa6f8cecb9a12031a19bcae6"}], 0x48}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) connect$bt_l2cap(r2, &(0x7f0000000300)={0x1f, 0xb9e3, @any, 0x100}, 0xe) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000019200)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xa}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 13m21.960801427s ago: executing program 32 (id=1549): socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x86, 0x3, 0x2fc, 0x3d68e3c2, 0x40, "1ae33240794233a5bd0800", 0x7, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x62003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0xb3) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000440)=""/70, 0x46) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = socket$kcm(0x21, 0x2, 0xa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x54}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "7d14a0b0fe0e"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x48, 0x110, 0x1, "005866fb383b445f60416d712563501356b5f1df9d133d880dc8543c254a9c68299009089fd4268ea6bea9fa6f8cecb9a12031a19bcae6"}], 0x48}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) connect$bt_l2cap(r2, &(0x7f0000000300)={0x1f, 0xb9e3, @any, 0x100}, 0xe) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000019200)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xa}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 7m35.469086849s ago: executing program 1 (id=3150): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404c004) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d00010000600009040080020300000009210804000122050009058103200009080709"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getpid() syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000000)="d1f5ff") 7m33.711092234s ago: executing program 1 (id=3160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbad362baa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c8d5ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073797a3200000000440005"], 0x2d4}}, 0x4048010) 7m33.537021817s ago: executing program 1 (id=3163): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x4810) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004c00)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0x0, 0x8}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0b80100", @ANYRES16=0x0, @ANYBLOB="e52f3b386c00fef7df25faffffda01000008", @ANYRES64=r1, @ANYRESOCT=r0], 0x60}, 0x1, 0x0, 0x0, 0x4040401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000090000000500000004000000c1000000", @ANYRES32, @ANYBLOB="0000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000680)=@ethtool_drvinfo={0x3, "75077531489963597400", "15432f302eedf85856b3e5ecfbd4f42f0dab59a0a4e881e17616dd29a300", "baaff641bbf284af51921c6a205a19589178a9fc79cfc982077a7a655fc926b8", "d30f9ff68396a46c7883324a2a02951a55679c6326f4e5cd447b1bfae3434c01", "ef6784f4808cfccd6fa6bbbd674137c593397fa8b5b8a1a147870cd03e82aa47", "fda4ac390abcf52b95f2a8ea", 0xff, 0x7, 0x1, 0x4, 0x8d9e}}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x4621, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc}}}, 0x32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x3d, r3}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0xfff2, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x20004015) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="bc0100001900010027bd7000fcdbdf251d010000080005000206f7ab150003000300000606000000e52e7cba5878882a01"], 0x1bc}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x6) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)='\b\b', 0x0}, 0x50) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e22, @private=0xa010100}}) 7m33.278304278s ago: executing program 1 (id=3167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000000)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[], [{@seclabel}]}}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4e0401, 0x6c) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r1, 0xc06b0fceefcff2f5, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0xc, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28000040}, 0x8000) 7m32.967126894s ago: executing program 1 (id=3168): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x12f20, 0x9000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x4}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c801}, 0x24008000) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r5 = syz_clone(0x27800411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x1, r5, 0x0, 0xffffffffffffffbe) 7m32.12551069s ago: executing program 1 (id=3171): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404c004) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d00010000600009040080020300000009210804000122050009058103200009080709"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getpid() syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000000)="d1f5ff") 7m31.461227751s ago: executing program 33 (id=3171): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404c004) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d00010000600009040080020300000009210804000122050009058103200009080709"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getpid() syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000000)="d1f5ff") 6m38.737195896s ago: executing program 3 (id=3410): socket$unix(0x1, 0x1, 0x0) socket(0x1e, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000010) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)="2e00000011008188040f080059acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x22) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xb}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x800) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r7, &(0x7f0000000040)=""/148, 0xffffff96) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x8001, '\x00', r6, r7, 0x4, 0x3}, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 6m37.860102434s ago: executing program 3 (id=3413): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x20, 0x0, 0x2}}, 0x14) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u8=&(0x7f0000000080)}}) 6m37.427966196s ago: executing program 3 (id=3415): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @rand_addr=0x64010100}, {0x2, 0x200, @remote}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x802a, 0x0, 0x0, 0x2000000}) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 6m37.36616513s ago: executing program 3 (id=3416): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90656}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x9}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_UMCAST={0x6}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x690}, 0x40) 6m37.279066022s ago: executing program 3 (id=3417): syz_clone3(&(0x7f0000000480)={0xa000080, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) 6m37.277437782s ago: executing program 0 (id=3418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f0000000400000006000000070000", @ANYRES32, @ANYRESOCT=0x0, @ANYRES32], 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x10000, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x4, 0x2, 0x89, 0x800000b, 0x44, "00ffff00000400", 0x40fff, 0xa8}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000600)={0x0, 0x48, [0x0, 0x2, 0x3, 0x2], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000700)={'#! ', './file0', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xba\xf2\xa7*\xb7b\xa8\xe6\xee\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x932[\xcb~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0'}]}, 0x87) r3 = socket(0x23, 0x5, 0x0) listen(r3, 0x0) connect$unix(r3, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e22}, 0x6e) execveat(r0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r4) r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000400)="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", 0x158, r4) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x5b) 6m37.0853047s ago: executing program 3 (id=3419): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r1], 0x18}, 0x2000c8d0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40041}, 0x800) 6m36.541636696s ago: executing program 0 (id=3423): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008140) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000800000/0x800000)=nil, 0x800000}) 6m36.272480543s ago: executing program 0 (id=3424): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 6m34.296810819s ago: executing program 0 (id=3434): r0 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000013c0)="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", 0x14c) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a2320c7ffc6b506e6e3c7f8bd478c56beb9520ea32612337688c4905af416fe75be77c3f12e55f3f657129e6daf6844369cf70c947ab82e778a4263f9b75692d4e5c905bb9119b28241e191e54e38a5357ad888c9cd225dae2276839bfcc7dc87c05ba539e435888d6677bd00"/169, 0xa9}, {&(0x7f0000000440)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63bc7650112b91fdccaceff93fd8cdab5a479b9614318eebc5a609b633b114fe330c840cc077cd6a6f6ca2bca0cc48c06177e0bc3b7fe6320e9f2e5a824d74aa3cccac383bacd0a126a58fa999675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43d583", 0xb8}, {&(0x7f0000000840)="1b1ebaaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d43454281bb50aef94483a5295efed01422c61d86ffd801e0cf0860bae8d982cd886c62a6289cb83e1f4b55960e9623598bd80c83fda204e9a519edba6bf4e2c8448341591a3ab65cc776bcd2e645813e8363676935e76d213e247bdd2b462ee48af1040850e94b349511c2e0e2c94493ae2d0e7d666fb51800cf3373e054767d41769e8d9c3454a", 0xdb}], 0x3, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r4, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000b80)=""/85, 0x55}, {&(0x7f0000000c80)=""/148, 0x94}, {&(0x7f0000000d40)=""/181, 0xb5}, {&(0x7f0000000e00)=""/105, 0x30}], 0x4}, 0xfffffff4}], 0x1, 0x1c1, 0x0) truncate(&(0x7f00000003c0)='./file0/../file0\x00', 0x20000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000240)=[0x0], 0x1}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x10) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x1f, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000006000000000000000800000018110000", @ANYRES32=r3, @ANYRES64, @ANYRESDEC, @ANYBLOB="0000000000000000b70300000000000085070000000000000000000000000000181b0000", @ANYRES32=r3, @ANYBLOB="000000000000000018380000010000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018120000", @ANYRES32=r5, @ANYBLOB="ef47e06200000000b703000000000000850000000c000000b700002200010000950000007b000000"], &(0x7f0000000680)='GPL\x00', 0x7f, 0x7f, &(0x7f00000006c0)=""/127, 0x0, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000740)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xd, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000980)=[{0x2, 0x2, 0x1, 0x7}, {0x2, 0x5, 0xc, 0xa}, {0x0, 0x43, 0x2, 0x1}, {0x3, 0x1, 0x9, 0x3}], 0x10, 0x5e}, 0x94) ioctl$DRM_IOCTL_MODE_GET_LEASE(r9, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0, 0x0, r10, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000340)={0x0, 0x1, &(0x7f00000000c0)=[r7], 0x0, 0x0, 0x0, 0x0, 0x1000000000000001}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x8000, r6, 'id0\x00'}) 6m34.009516426s ago: executing program 5 (id=3435): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000680)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000001c0)={0x1, 0x1ff, 0x7f, 0x0, 0x11}) 6m33.94358178s ago: executing program 0 (id=3438): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x5, 0x1, 0x1, 0x1, 0x6, 0x7, {0x1, 0xfffffffffffffffc, 0x100, 0x3, 0xfffffffffffffffe, 0x7, 0x2, 0x8, 0x80000001, 0x4000, 0x5, r2, r3, 0x8, 0xfffff79c}}, {0x5, 0x200009, 0x8, 0x6, 'rootmode'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 6m33.359577567s ago: executing program 5 (id=3442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) 6m33.135318654s ago: executing program 5 (id=3445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f0000000400000006000000070000008013", @ANYRES32, @ANYRESOCT=0x0, @ANYRES32], 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x10000, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x4, 0x2, 0x89, 0x800000b, 0x44, "00ffff00000400", 0x40fff, 0xa8}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000600)={0x0, 0x48, [0x0, 0x2, 0x3, 0x2], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000700)={'#! ', './file0', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xba\xf2\xa7*\xb7b\xa8\xe6\xee\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x932[\xcb~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0'}]}, 0x87) r3 = socket(0x23, 0x5, 0x0) listen(r3, 0x0) connect$unix(r3, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e22}, 0x6e) execveat(r0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r4) r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000400)="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", 0x158, r4) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x5b) 6m32.305068328s ago: executing program 5 (id=3448): r0 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000013c0)="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", 0x14c) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a2320c7ffc6b506e6e3c7f8bd478c56beb9520ea32612337688c4905af416fe75be77c3f12e55f3f657129e6daf6844369cf70c947ab82e778a4263f9b75692d4e5c905bb9119b28241e191e54e38a5357ad888c9cd225dae2276839bfcc7dc87c05ba539e435888d6677bd00"/169, 0xa9}, {&(0x7f0000000440)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63bc7650112b91fdccaceff93fd8cdab5a479b9614318eebc5a609b633b114fe330c840cc077cd6a6f6ca2bca0cc48c06177e0bc3b7fe6320e9f2e5a824d74aa3cccac383bacd0a126a58fa999675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43d583", 0xb8}, {&(0x7f0000000840)="1b1ebaaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d43454281bb50aef94483a5295efed01422c61d86ffd801e0cf0860bae8d982cd886c62a6289cb83e1f4b55960e9623598bd80c83fda204e9a519edba6bf4e2c8448341591a3ab65cc776bcd2e645813e8363676935e76d213e247bdd2b462ee48af1040850e94b349511c2e0e2c94493ae2d0e7d666fb51800cf3373e054767d41769e8d9c3454a", 0xdb}], 0x3, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r4, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000b80)=""/85, 0x55}, {&(0x7f0000000c80)=""/148, 0x94}, {&(0x7f0000000d40)=""/181, 0xb5}, {&(0x7f0000000e00)=""/105, 0x30}], 0x4}, 0xfffffff4}], 0x1, 0x1c1, 0x0) truncate(&(0x7f00000003c0)='./file0/../file0\x00', 0x20000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 6m31.743281917s ago: executing program 0 (id=3450): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m31.725759538s ago: executing program 5 (id=3451): io_cancel(0x0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, &(0x7f0000000540)="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", 0xfb, 0x7ff, 0x0, 0x2}, &(0x7f0000000100)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 6m30.925017673s ago: executing program 34 (id=3450): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m28.637798587s ago: executing program 5 (id=3461): r0 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000013c0)="b7f2288a911993f08d3aaea2bc0000de68fe709d14ebce888119f12b00d7f84911a5b522aea4cee9a8fc32ecf4af64f633b391e5fef0e6bd800f05ef66ec0129807d344f9e4416f6642d0e9b6292fcdbffd36ba1f22f4f320c5a8e9dcf3fcc1d5f40d6b7cd896a93b7ec50b129ed8c2f77a536d6bce6ed521bdcfe6d636b28e6e14c8be4ac6df5f3b1b645dfe65f77b02fad3735b87e471eba6753627c5d473732bf3fd5530d3a65b3681da3c443619e66948b8139963444c3a255e43b3327721835ede40859dc3fb5a10adcb615015eb7f247f754983c021b57ed6e79612827c0d7a92eb28180f63d42deaf90d3784a549915df0f4ec26783b1726688211227a8be8adc088dc1b3dec25cc269b922d0aa66be07f6d4a9b6f5ff29ceed1c6f05338a2ff11229903e1fabc21e579a180f100a1c9777d50fd690136a3cb779bb266c5a2047705f387d7b0a0e02", 0x14c) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a2320c7ffc6b506e6e3c7f8bd478c56beb9520ea32612337688c4905af416fe75be77c3f12e55f3f657129e6daf6844369cf70c947ab82e778a4263f9b75692d4e5c905bb9119b28241e191e54e38a5357ad888c9cd225dae2276839bfcc7dc87c05ba539e435888d6677bd00"/169, 0xa9}, {&(0x7f0000000440)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63bc7650112b91fdccaceff93fd8cdab5a479b9614318eebc5a609b633b114fe330c840cc077cd6a6f6ca2bca0cc48c06177e0bc3b7fe6320e9f2e5a824d74aa3cccac383bacd0a126a58fa999675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43d583", 0xb8}, {&(0x7f0000000840)="1b1ebaaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d43454281bb50aef94483a5295efed01422c61d86ffd801e0cf0860bae8d982cd886c62a6289cb83e1f4b55960e9623598bd80c83fda204e9a519edba6bf4e2c8448341591a3ab65cc776bcd2e645813e8363676935e76d213e247bdd2b462ee48af1040850e94b349511c2e0e2c94493ae2d0e7d666fb51800cf3373e054767d41769e8d9c3454a", 0xdb}], 0x3, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r4, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000b80)=""/85, 0x55}, {&(0x7f0000000c80)=""/148, 0x94}, {&(0x7f0000000d40)=""/181, 0xb5}, {&(0x7f0000000e00)=""/105, 0x30}], 0x4}, 0xfffffff4}], 0x1, 0x1c1, 0x0) truncate(&(0x7f00000003c0)='./file0/../file0\x00', 0x20000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 6m27.874318034s ago: executing program 35 (id=3461): r0 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000013c0)="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", 0x14c) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a2320c7ffc6b506e6e3c7f8bd478c56beb9520ea32612337688c4905af416fe75be77c3f12e55f3f657129e6daf6844369cf70c947ab82e778a4263f9b75692d4e5c905bb9119b28241e191e54e38a5357ad888c9cd225dae2276839bfcc7dc87c05ba539e435888d6677bd00"/169, 0xa9}, {&(0x7f0000000440)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63bc7650112b91fdccaceff93fd8cdab5a479b9614318eebc5a609b633b114fe330c840cc077cd6a6f6ca2bca0cc48c06177e0bc3b7fe6320e9f2e5a824d74aa3cccac383bacd0a126a58fa999675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43d583", 0xb8}, {&(0x7f0000000840)="1b1ebaaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d43454281bb50aef94483a5295efed01422c61d86ffd801e0cf0860bae8d982cd886c62a6289cb83e1f4b55960e9623598bd80c83fda204e9a519edba6bf4e2c8448341591a3ab65cc776bcd2e645813e8363676935e76d213e247bdd2b462ee48af1040850e94b349511c2e0e2c94493ae2d0e7d666fb51800cf3373e054767d41769e8d9c3454a", 0xdb}], 0x3, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r4, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000b80)=""/85, 0x55}, {&(0x7f0000000c80)=""/148, 0x94}, {&(0x7f0000000d40)=""/181, 0xb5}, {&(0x7f0000000e00)=""/105, 0x30}], 0x4}, 0xfffffff4}], 0x1, 0x1c1, 0x0) truncate(&(0x7f00000003c0)='./file0/../file0\x00', 0x20000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 6m21.840872081s ago: executing program 36 (id=3419): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r1], 0x18}, 0x2000c8d0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40041}, 0x800) 2m3.592407133s ago: executing program 6 (id=4193): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) 2m3.066574751s ago: executing program 6 (id=4196): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x12, r0, 0x0) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) 2m1.79067616s ago: executing program 6 (id=4204): syz_emit_ethernet(0x8e, &(0x7f0000000300)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x58, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "869388", 0x0, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [@srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00', @mcast1]}]}}}}}}}, 0x0) (fail_nth: 2) 2m1.070318177s ago: executing program 6 (id=4207): socket$nl_generic(0x10, 0x3, 0x10) 1m54.56933499s ago: executing program 6 (id=4209): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) (fail_nth: 2) 1m53.44076798s ago: executing program 6 (id=4212): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, &(0x7f0000001380)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xff7e, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000080)=0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@fallback, 0xffffffffffffffff, 0x6}, 0x20) io_submit(r2, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x5, 0x0, r1, &(0x7f0000000040)="0300ffff0000", 0x6, 0x200}]) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) eventfd2(0x4, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) iopl(0x3) r6 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r6, 0x6, &(0x7f0000000140)=0x81) read$FUSE(r3, &(0x7f0000001b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x205c) getpriority(0x2, r7) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f0000000040)="120c578dfa585b28b4e5a01813064af84f42e1f72e64bb1ab896b97178080d8382038fff5082368023aa920f3a418894423867a8732d89686fe048210e6d070dad0de9c01f3f3689f5e38318aedf34618c44c5b67af0c61fd223042359b25b", 0x5f, 0x4, 0x0, 0x2}, &(0x7f0000000100)) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000080)={0x40000003}) r9 = epoll_create(0xf) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1000003) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 1m50.399615878s ago: executing program 7 (id=4222): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000000)="82", 0x1}], 0x2, 0x3, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r0, 0x0, 0x0, 0x80800) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0xc}, 0x3c) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c0002"], 0x4c}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffffeff}) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) writev(r7, &(0x7f0000001cc0)=[{&(0x7f0000001d00)="4673c875ca4d9cb6f1d39f116100f2510db1e88217a55acb8319f17ef647c524516c0e45ec91a98a614276cb3218541b012ff7c4500085a8a73f16de7da7e09fd60d12af378f0d4e45a39c12499049a4c7da706ccb45e59f44eea3e029210fb44896e7390aa9fafaa5904e7102ca2c78281e6d502e74f2f47286ae53d3c2d60e849d4f7f06a1cda02c838026682b4c659d6880f41befc4932c538679b16fc17d5f9ff42cf0c40636a0e93b8df3d52cfcf405", 0xb2}, {&(0x7f0000001c00)="e146badcd6aca239c46b952e5dd493", 0xf}], 0x2) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000140)={0x1, 0x1, {0x801b, 0x36, 0x12, 0xb, 0xa, 0xe69f, 0x1, 0xd8}}) write$UHID_INPUT(r7, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000140)) 1m49.105625019s ago: executing program 7 (id=4226): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x35f77000) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x80000131) syz_clone3(&(0x7f00000003c0)={0x46050480, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), {0x15}, &(0x7f0000000280)=""/80, 0x50, &(0x7f0000000300)=""/2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9, {r3}}, 0x58) timer_create(0x2, &(0x7f00000005c0)={0x0, 0x1a, 0x1, @thr={&(0x7f0000000440)="6fffb0eb529d7d8810d4afe86a0856b1280864198b0dea7de5392d1fb7625bf681ee2d63a6c8cd3c542e05ad1a9d68d1f51c4c31de20ce4efc23b00713d0aa9b63bfc58ef76350759171c01a13e3a4a3f80db8d4083effce5a371653de", &(0x7f00000004c0)="695a5d6acf386e5563caec0394e260aa007db7987956bcedca0f1abac453378deddc87b6b94bf9478ae5004b512a9064bc67059d1a5bfc20f1cd1c7a2f4e2c8a62ecde6428925e635593154c545c1927dd8225ed78a6bb7eec6a9e8bc66d8db0d0cb2b5b95bb2ec43a48aefd262f097891da532a4162dc42e19d0b826f735074949bda37ee57772f9187fa7de81aa6f81cf611654fb7d910a02fc92a7fca04148cbbe7e52fca043c437f02209ecc581803a4dcbc358159b097c9ce489339b7d3e799c473176a8d8d65e79eea37a6"}}, &(0x7f0000000080)=0x0) timer_settime(r5, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}}, 0x0) eventfd2(0x0, 0x800) close(0x3) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={0x0, 0x0, 0x1, 0x5, 0x9}, 0x1}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m48.619015934s ago: executing program 7 (id=4228): add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000"], 0x48, 0xfffffffffffffffd) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x114) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r3, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x0, [0x0, 0x800, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20f, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xa577, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x800, 0x0, 0x0, 0x0, 0x80000, 0x85, 0xfffffffd, 0x0, 0x8, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x4, 0x0, 0x7, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400925, 0x0, 0x0, 0x3, 0x0, 0x6, 0x10000, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x10, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) 1m38.612787035s ago: executing program 7 (id=4232): socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="120000000a000000080000000200000004000000a045717d0862d39f1b539045c4fbb9aafd9335fd2d0b507318905b53e73a4dbd005324d82bf4a136e159aa881df97e236d51c43e76693742a21d1e9ff8a1fa41ebf8e82dfd9b60ce03f8a0826a2fd2d5e064e9e44ba8ae01baa0b30e1fbb23988dad749f0ea1ffb0322a1b32680292ac0e668a1c9b04db79fb028924480835aa1777ab9ab335d10a65a12f16075ff86d3a1b9b17925b118e0084789e211096df095cdb4196c1a21c9bdd1e7b146c183e5ed7e30a76bbed5367d337537ab3", @ANYRES32, @ANYBLOB="000000000000000000001e000000000000000000", @ANYRES8=r0, @ANYRES32, @ANYBLOB='\x00'/26], 0x50) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_INPUT(r1, &(0x7f00000005c0)={0x8, {"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", 0x1000}}, 0x1006) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x9) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000300)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000001700)={0x28, 0x3, 0x0, r3, 0x0, 0x0, 0x0, 0xc1, &(0x7f0000001600)="6b180e1c24afd7fabf1169791674fc40cde3ada3ad50d666c0cfef035f35dc3e492f3cb5976f1844325121eaf62fd89ae4effb3b5c062d21619c40483766e0ab93d7d4ea73354a7b49336980525a127c583baee786beaeef8c35ac92900728a5837a02df18817b85a9ea48044bb90ec5a0380718127f15ec3dc95d8c9ad64f3171940af944d8065a0666a8c32617f85e09ca6a3fcbb8d46625506999cac92b6dbb1dd8ec32e555cb826fdffdf3493347e98825d72b5229cb9df069f1eb3646e208"}) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r4, 0x8) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x103802) 1m38.214274046s ago: executing program 37 (id=4212): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, &(0x7f0000001380)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xff7e, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000080)=0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@fallback, 0xffffffffffffffff, 0x6}, 0x20) io_submit(r2, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x5, 0x0, r1, &(0x7f0000000040)="0300ffff0000", 0x6, 0x200}]) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) eventfd2(0x4, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) iopl(0x3) r6 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r6, 0x6, &(0x7f0000000140)=0x81) read$FUSE(r3, &(0x7f0000001b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x205c) getpriority(0x2, r7) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f0000000040)="120c578dfa585b28b4e5a01813064af84f42e1f72e64bb1ab896b97178080d8382038fff5082368023aa920f3a418894423867a8732d89686fe048210e6d070dad0de9c01f3f3689f5e38318aedf34618c44c5b67af0c61fd223042359b25b", 0x5f, 0x4, 0x0, 0x2}, &(0x7f0000000100)) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000080)={0x40000003}) r9 = epoll_create(0xf) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1000003) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 1m37.996171803s ago: executing program 7 (id=4236): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x1a, 0xf, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3738ab2f8d43918f}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r3 = socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001a3c45210e1ea22c99b890102030109022200018b0980040704"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000400002000000400004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a3000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000020000000020a01080000000000000000000000090c000440000000000000000214000000020a010400000000000000000200000a14000000110001000000"], 0xc8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r8, 0x100000001, 0x2) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r6, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x34}}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x5, 0xffffffffffffff7e, &(0x7f0000000540)=""/172, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r10, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="b7493f196d3e3821e69c60a4ffffffffff86dd6012000800583a00fe1cab9f1ceccd6187000000000000bbff02000000000000000000000000000101009078000000006086938800002b0020010000000000000000000000000001fe8000000000000000000000000000aa000404020000000020010000000000000000000000000000ff01000ad1b2f94727f25840fe90a51787c24b28e6b4c147eb97190000000000000000"], 0x0) 1m28.986003797s ago: executing program 7 (id=4246): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000001040)=0x400c) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) r4 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x7, 0x2, 0x83}, {0x7, 0x5, 0xb187}], 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0xa, 0x5c}) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000140)={0x0, 0x8, 0x17, "e94a269f67b3843a8e83f3ada2dc2af4394751223911b4"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0xfd}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xc}, 0x0, &(0x7f0000000240)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000280)={0x20, 0x0, 0x1, 0x9}}) r5 = socket$nl_route(0x10, 0x3, 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0)="e094a858c8511b87dab1ffb4dfccfb1f8cfdc6612deb52770a86c344a9c763ae4001c623e03f14a09620831644307c9da1509d7922df9dfc92e1b6a06d238774f3b2259a14108b70208832482a6bc6585f8ac59ae81e721c761671a7aa38ee6e62", 0x61, 0xfffffffffffffffe) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x13f}}, 0x20) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r6, 0xfffffffffffffffe, &(0x7f0000000440)='\x03\x18\xf5]\xf5cP\xed\x1e\x19\xc0m\'\x19\xee\x80A\x03\xabb\x81\xb8\f\x10E\x17\x18\x0f\xf2\xfb\xa5j\xacO\xd8+:\n\xf3\xee\xf7e\x82=\xcd)\x83Q\xa7;\xcd\xe6\xcf\xcdg\xd8H\xc7\x9a5\x10iZp\x14X\xa7\xcb\xba#7\xc5\xc2wth:r%lm\x14\x02\x12?\xca&\xbc\xd7r\xc1K\xb2\x14\x16q\xc3\x93\x05v\xc4\x83`\\}\xb8\xc4\x02\x00\x80Yw@\x8c7$\xfe\xa5\xd3\xab\tJ\xde8\xa1\xfd\xb0\t\xae|^\xbe\xa3-[W\xb4\xd8=t\xbcI\x96\x95\a\xab\xad\x98\r\xdf!A\x1fT*\xa2$R\xd5t\xa2\x82}\xcaq\x17\xc1\x9b\x1d\x05e\xe5*\x92\x06\x0e*\xbct iZ\xbfF\xe8\xbe4\"nR\x18,\xa6\xe3\x8f\xf0%\xcd\x80\x83\x89e\xf8\xf0\xc3xx\x1cc\xdb\x1b<\xa5\xbf\xa5\xe7\xe6\x8e\xcd\x16\x19a\x1c[\x16\x9a\xb2\xea\xec\xf2\x8cv=\xf3ZRn\xcd\x9b\x98\xec\xa2\x83\x97\xee[\xd3') add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r6) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x64, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x0, 0xb, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa4, 0x4, 0x10000000}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x479ec9b46a3fae25}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x70, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xfff2, 0xa}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x10, 0x1000, 0x80, 0x7f}, {0x8, 0x0, 0x800, 0x3, 0x2, 0x6}, 0xe72d, 0x2, 0x178d}}, @TCA_TBF_RATE64={0xc, 0x4, 0x3454acd1e6f80a22}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcd2e77eb9cafbc50}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r10 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r10, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r6, r6, r10, 0x1) 1m18.750507927s ago: executing program 8 (id=4262): socket$inet_tcp(0x2, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) socket(0x5, 0x5, 0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1, 0x80) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000012c0), 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r2, @ANYRES32=r1], 0x1c}}, 0x0) 1m17.212244334s ago: executing program 8 (id=4264): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x1, 0x4, 0x8000, 0x80085}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000040)) 1m11.349403005s ago: executing program 38 (id=4246): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000001040)=0x400c) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) r4 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x7, 0x2, 0x83}, {0x7, 0x5, 0xb187}], 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0xa, 0x5c}) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000140)={0x0, 0x8, 0x17, "e94a269f67b3843a8e83f3ada2dc2af4394751223911b4"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0xfd}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xc}, 0x0, &(0x7f0000000240)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000280)={0x20, 0x0, 0x1, 0x9}}) r5 = socket$nl_route(0x10, 0x3, 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0)="e094a858c8511b87dab1ffb4dfccfb1f8cfdc6612deb52770a86c344a9c763ae4001c623e03f14a09620831644307c9da1509d7922df9dfc92e1b6a06d238774f3b2259a14108b70208832482a6bc6585f8ac59ae81e721c761671a7aa38ee6e62", 0x61, 0xfffffffffffffffe) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x13f}}, 0x20) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r6, 0xfffffffffffffffe, &(0x7f0000000440)='\x03\x18\xf5]\xf5cP\xed\x1e\x19\xc0m\'\x19\xee\x80A\x03\xabb\x81\xb8\f\x10E\x17\x18\x0f\xf2\xfb\xa5j\xacO\xd8+:\n\xf3\xee\xf7e\x82=\xcd)\x83Q\xa7;\xcd\xe6\xcf\xcdg\xd8H\xc7\x9a5\x10iZp\x14X\xa7\xcb\xba#7\xc5\xc2wth:r%lm\x14\x02\x12?\xca&\xbc\xd7r\xc1K\xb2\x14\x16q\xc3\x93\x05v\xc4\x83`\\}\xb8\xc4\x02\x00\x80Yw@\x8c7$\xfe\xa5\xd3\xab\tJ\xde8\xa1\xfd\xb0\t\xae|^\xbe\xa3-[W\xb4\xd8=t\xbcI\x96\x95\a\xab\xad\x98\r\xdf!A\x1fT*\xa2$R\xd5t\xa2\x82}\xcaq\x17\xc1\x9b\x1d\x05e\xe5*\x92\x06\x0e*\xbct iZ\xbfF\xe8\xbe4\"nR\x18,\xa6\xe3\x8f\xf0%\xcd\x80\x83\x89e\xf8\xf0\xc3xx\x1cc\xdb\x1b<\xa5\xbf\xa5\xe7\xe6\x8e\xcd\x16\x19a\x1c[\x16\x9a\xb2\xea\xec\xf2\x8cv=\xf3ZRn\xcd\x9b\x98\xec\xa2\x83\x97\xee[\xd3') add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r6) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x64, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x0, 0xb, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa4, 0x4, 0x10000000}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x479ec9b46a3fae25}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x70, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xfff2, 0xa}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x10, 0x1000, 0x80, 0x7f}, {0x8, 0x0, 0x800, 0x3, 0x2, 0x6}, 0xe72d, 0x2, 0x178d}}, @TCA_TBF_RATE64={0xc, 0x4, 0x3454acd1e6f80a22}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcd2e77eb9cafbc50}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r10 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r10, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r6, r6, r10, 0x1) 1m10.874017294s ago: executing program 8 (id=4266): r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xb1\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x0f\x00\x00\x10\x00\x00\x00\x06^\xb4', 0x0) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="b30d7d45c4b88bb4bf5ff521acba2edba66ac1e16826f977f23ac9423a02934a9dd78bc68e571442240f82e30767da37afc6898ceec0268f378f9031731052edbd8ed0dfdae8078f48d11a400bb9ff552ef116fa6f3f1e6e854a295c63a0bda4c6f562972847dd7bd323723c4d7c1b112ddbec707608ab351eb220228a89341dcfcb81a8ad356e13126391d0e2a82807469846ec31330d9cf51fac5c42675ba8120858c743b1b46d4bb3567d08be56761c932823588b06d2", 0xb8}, {&(0x7f0000000180)="f5ab50e7cfd5140f7f9778c98f0aae25ba544367233df15488877a12c9bf1cc88d4f8c6ce55ffc1fc7ca2e79b0424a0091091db07f67971cd2ff5c52885b5e9314", 0x41}, {&(0x7f0000000240)="cbae8465ef53d2b5d91eb1002038666074758539379bc70d4f", 0x19}], 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000c0000004200000040"], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, r4, 0x0, 0x16b8}, 0x38) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000003740)=ANY=[@ANYBLOB="89893b10e81b65dec90674c814cb2836f94f34d6614cd5dea6d268094ee7fe045c2fc51c0f8ce8a94ea93882623254538a162761a86b9fc103ad43c2dbcb278d444acb08542621342152c28b74d9bb48ee61a193a8d960"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x81, @loopback, 0xa}, 0x1c) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000640)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x1f, 0x8000}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) connect$x25(r1, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) clock_gettime(0x0, &(0x7f0000003600)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003480)=[{{&(0x7f00000002c0)=@x25, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/16, 0x10}, {&(0x7f0000000380)=""/84, 0x54}, {&(0x7f0000000400)=""/21, 0x15}, {&(0x7f0000000600)=""/151, 0x97}, {&(0x7f00000006c0)=""/17, 0x11}, {&(0x7f0000000700)=""/223, 0xdf}, {&(0x7f0000000800)=""/3, 0x3}, {&(0x7f0000000840)=""/41, 0x29}, {&(0x7f0000000880)=""/28, 0x1c}], 0x9}, 0xfffffffc}, {{&(0x7f0000000980)=@tipc=@name, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/249, 0xf9}], 0x1}, 0x1}, {{&(0x7f0000000b40)=@nfc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000bc0)=""/97, 0x61}, {&(0x7f0000000c40)=""/154, 0x9a}, {&(0x7f0000000d00)}], 0x3, &(0x7f0000000d80)=""/1, 0x1}, 0x10001}, {{&(0x7f0000000dc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000e40)=""/61, 0x3d}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/104, 0x68}], 0x3, &(0x7f0000001f40)=""/176, 0xb0}, 0x1}, {{&(0x7f0000002000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002080)}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x2, &(0x7f0000003100)=""/215, 0xd7}, 0x8}, {{&(0x7f0000003200)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003280)=""/123, 0x7b}, {&(0x7f0000003300)=""/2, 0x2}, {&(0x7f0000003340)=""/49, 0x31}], 0x3, &(0x7f00000033c0)=""/186, 0xba}, 0x341}], 0x6, 0x40, &(0x7f0000003640)={r7, r8+60000000}) 1m9.400375134s ago: executing program 8 (id=4269): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0xe2a, &(0x7f0000001700)={{0x12, 0x1, 0x201, 0x1a, 0x8d, 0x13, 0xff, 0xbda, 0x2102, 0xea79, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe18, 0x4, 0x4, 0x3, 0x0, 0xb2, "", [{{0x9, 0x4, 0x25, 0xf1, 0x9, 0xff, 0xff, 0xff, 0x8, [@generic={0xe2, 0x30, "1a7b8753e9354b11145ccb274ad553579c4ed117a9eb9c824c1c91ef3adf0b4af70348e1acecf79ae5e45d20e6c946e62ceb710259054eaf922fec84ddd36cada9ed1caed4d6ca5e4548076268edbdd8885e56a72d8257b07d7269d11b6e14c8e643c1097932d08d2b991430a0710925516d0908e3e11ea298a0f0cdd1c72bcb8451a28b874176594a815f76fec5b7999710224b697b3e8119a3e2b9f5e72126d06eed78b06f292eb32cf479a68df50ece8ab1e16769b6988feb40731ee4928dea725e0c61f3fbe22ef6512572e03a83d2d7099b6469bcfc672e1f5e24d203f0"}], [{{0x9, 0x5, 0x3, 0x10, 0x200, 0x8, 0x8, 0x7, [@generic={0x17, 0xe, "53df71b06f729b93cfcf6f28bb78e7cd60c23fa539"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x4, 0x8, 0xf4, [@generic={0x42, 0xb, "7ac1b3922942e3faac0b27c6d311d97b0293fe9dde02fb2ec5d84526be81b796204c9d89c094e20a6f826b4cab4ddbdb60ea9eecf535121a0e6b4baca6d66127"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x2, 0x7, 0xeb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xefe1}]}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0x4e, 0x4, 0xd0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5}, @generic={0x93, 0x7, "cc087bd27cc73a49bd58229e877faa7c41b9fdef0aaf0621a918d43fd210cc3084d745ded03e243aa092817010b1561153f47058bec7df1b2a62aac725136763467d8f757545b5505806cf47d48957db50bbda26e0e7b721d875a05e19be6510d5ea72a1f65869cf9720efa53d2b5503567d34e9ef1657faed221b7a161d066738f5882642e1fe9c5fbc4b58f544df2341"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x3, 0x1, 0x6}}, {{0x9, 0x5, 0x80, 0x3, 0x40, 0xd0, 0x0, 0x5}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x9, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x4}]}}, {{0x9, 0x5, 0x8f10a837bda07de9, 0x1, 0x7ff, 0x75, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8000}]}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0x5, 0x40, 0x5, [@generic={0xf3, 0x2, "3f65cbfa5da37cb9cf430d77a97813dabbcd47a449359f350c483ef6bfcd3669c0e0c5816709d94133b4bf75ac54107b3d4a94ab2fbc91a5a37f3494a559bccaba6f44e3f3573a5f9ac3e2a4e0736ecfc19dd7a123bd02eba2a51bc7387d0e4de3fa06a0f20f3198ddc46f3ddb73ee57b07f954edf4b06efb5641b7f4e1bb3b1479658b20ea3e5e1f485d1b2353d6dbb1ef23875a2d361c68cdb96f377f131eb407f648196b8527cf2d79418beb220431713691675e87599660ab08ef4a7954fa5d3c233d7e6d72335cc85be0ae67ac5cb76100167e0877d4b8f3864d0205c0fc919b0538ac7ed4c147dc669b1c0bc12f6"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7f, 0x8}]}}]}}, {{0x9, 0x4, 0x4, 0x0, 0xe, 0x75, 0x3a, 0x88, 0x38, [], [{{0x9, 0x5, 0xe, 0x1, 0x10, 0x95, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xdc, 0x9}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x0, 0x4}}, {{0x9, 0x5, 0x9, 0x0, 0x76f3908bb22da7aa, 0x9, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x60, 0x6, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x4e87}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x3, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x401}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x4, 0x9, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xfd}, @generic={0xd7, 0xe, "8562ef8d327191f2ffa6b47019d8d3ed2c38d8f05eb1391b00bcdd7f96a7f92b6b606318ec2f5289c43529fd233a96ff5bdf9f252a422c15fd7f843c5841e40f967ff7f18bc6f4f87aa2c1caf77fa762b314d885065867e203d90647f9afefa35a07b621449e68377edba840c31f9243800e197d51cd91eb0a9d650ff25b8900283fa11da4a6116f05a559f745a0174d5e26fdb59d6ad6d9a0ad084a941277616f75426ab8a3394a0f2b7e50ae10c7a9b9ac036b26e59a7c2f833679be5b9eaee2366900a4a1a957a84d97d3d057cd4fe7331209d5"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x6, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x100}, @generic={0x4d, 0x22, "b654f459eb41f38e4f7ba0e0bd397f3e13247bd9ca998fff229716e8ab969b082d6c4917756b971b1c62b7bb6c0e8e309b0c4a33e390b00b2af182b85fea8cead9ed4fc97a689edc6e29d0"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x94, 0xff, 0x2, [@generic={0x53, 0xc, "cd464e88be28327cda3ffd07ea11412c387ffd7cee164d29d2261eddfdeba7e891a618d172ea6a461dacee14a62c7d2b28300be627f141cdfb0eb1165e7d71731a5bf98a35c61b52f319dca5d7909d1f5c"}, @generic={0x9e, 0x1, "39ec5311bbab0b84ccff6d1068105296308ad07cca5d28d40d21b24ad48ca150cf559281c75abf07d8598637e309874e0bc8b4bcf2d74359946b1c57b6dd2043890c6a6b5db4cb1f9333d076e8338632a2a775723afd9258d223909701e70d3949c91017e5d92833e153479d615eb6170f2f1a76fa620766f2912a62991f478f9f05953fc45451a7ce09705ff9ed01ccfb5c417a29307a64f307b5ed"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x0, 0x9e, 0xb, [@generic={0xd8, 0xf, "33ff0fc0b074d83f61feaccc21c4b2e5d2f66549a95c9d9779d49d7f1fa3b2467c892f57316f29bad5ca4b49841c53507e96fb4d1c5a1f181c78462a6c716baa36c29a3b856cc20d1850dd5d5345de926481c150647b129f845ec636504ccef5a7566b0a301fa1342aab4302e3ba87f8cbccd6863e58866a4ee19db58ab932ae4e39225b7ad253c7bb0698148a432ead13c3050162f3648b9dc5d067993b786a035634b37b05a9e058767c4d9fdd8671f4bcb882bf0e232eebb89cf5a7d435d46308abea4c210721ef0b157a54241480884ea50aa59c"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0xb, 0x9, 0xe}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x0, 0xe9, 0x5, [@generic={0xd7, 0x9, "a8ffda1bf6f1ace917a5a6e938867656067344ff32a92c5e408dd6f5d5fc27ee296d7392e7449a223acdc2c9946ae3dd404ff52169697855bb77eed3ba83e8b124667ab0847223dc7e0c6953f77c4c848aefa4e4e23f6075212481933b3b05c8256b793f1095d1e5763d40f1e137e2bc31693491cf675f093fec587e2b2c62a47cd9b9c14d76974069bfce89cd616174f3ad186797230bf435617e09c09db7f3b4e417cc1cf47008394e7cc05a18955b12f440ea017089f1c63b4c057fb73e5fd7cd2b5804618e80dd3d1ac59ed96c9edce5dab9df"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x3, 0x0, 0x9}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0xa, 0xed, 0xbc, [@generic={0x96, 0x23, "0bdd403c63fca2a58d5144e5ef25395b013be96fd8df036480f17134697be7521794fef3029bc4611121d3aaac54cb389f4892c349afd1329c743658f5d2e45513af9414c558276ec4879586dcfe507cb30365f6db9371b5fe5c63e5507b718b5c4c0050ff347794a0023a1196ccd927deeaee3a7af459360c072b09fbc12b103205df01e5d3bae468b36619b24ba06caf2862d1"}]}}, {{0x9, 0x5, 0x11, 0x2, 0x400, 0x1, 0x4, 0x6a, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x6a}, @generic={0x1d, 0x22, "8f05640f5b2d46122bbda7b38832a6f73a5d41999c4ab10f4343b9"}]}}]}}, {{0x9, 0x4, 0xc1, 0x1, 0xb, 0x5, 0xb7, 0xef, 0x7, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "d4"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x34a, 0x9, 0xfff8, 0x80}, {0x6, 0x24, 0x1a, 0x3, 0x16}, [@acm={0x4, 0x24, 0x2, 0xa}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x80, 0x4e}, @dmm={0x7, 0x24, 0x14, 0x8, 0xfff6}, @obex={0x5, 0x24, 0x15, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff8, 0x1, 0x8}]}], [{{0x9, 0x5, 0x0, 0x3, 0x20, 0x7, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x5}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x8, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0x4}]}}, {{0x9, 0x5, 0x0, 0xf, 0x8, 0x3, 0x4, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x0, 0x1, 0x1, [@generic={0x17, 0x9, "a21b879755b6cc0ce467f960f928919a7e8807ca8d"}, @generic={0x51, 0x8, "a3805a10e6c16c8069025ddea562d6f9692333935e89200dff48219c59922df26c0581f43444e8bec26fe3d12b547fd16c9e102332014b30047bc14833b7ba84abcdd789e7bdde2b77e552a41800c5"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x0, 0xc, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x6}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x6, 0x4}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x2f, 0x9, 0x3, [@generic={0x9d, 0x31, "7760534e93eea3450c696c4e86463469e28ac37f46bf17673558570d14ac7a9ce947088c684df1eadbaf284b38ddb22bf6a4e235533e820a33dae64a54b601632222ec3645963ef808c1ed01901d0b95e0da47e6bbc6053aa56335f5ddde02b0493b6030f7533c25faa0175fde37ff4c4a311406d3c942f8e8706aae44796f56e0626a881f4d1803e70af30e615b4e1aae6c251f1d6ccb0177a927"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xb1, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x2, 0x60, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x8}, @generic={0x1f, 0xb, "c5df1abf4312a8c5e5cdc325508d96da5ec3aa6263be37602279f4c450"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x1, 0x2, 0x0, [@generic={0x1a, 0x1, "931bda75d7a0b512e41a26be977a245d54113ab844bbcca2"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x48, 0xf9, 0xc, 0xf, [@generic={0x64, 0x31, "505265c2f785ad1f48096199785807c899cad338df94866d3739aa9818eae7f9ca66c624d709885075e28c6dca07cb7e81ae0cf6452c1cb4ec9dd03b54f7a5598e579e0aeb9d8b86cd649ade13f4b9cc09a08d91b10821b85be745ff74d9e6b9b1de"}]}}, {{0x9, 0x5, 0x4, 0x11, 0x200, 0x8, 0x7, 0x4}}]}}, {{0x9, 0x4, 0x4d, 0x7f, 0xa, 0xe8, 0x58, 0xc0, 0x3, [@generic={0x5e, 0x21, "ff76dfe5d1699ff339d7b08219e6f3a4d646e8f39ef27a29d8c2b943057437b6afcb073cc888ce6a7d392452f6f3b05492f883802b309cccec63f64411828637ee5fd6dc9591d3e06ac863cdf62cc3d5fc95f9bf52815e3ee030befb"}], [{{0x9, 0x5, 0x80, 0x10, 0x8, 0xff, 0xfb, 0x7}}, {{0x9, 0x5, 0xd, 0x2, 0x200, 0xdc, 0x7, 0x37}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x1, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x48}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x25, 0xed0}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x68, 0x30, 0x1}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x81, 0x2, 0x5, [@generic={0xf0, 0xd, "ff4450dca3c8896b1a560d2d1c864d72d487985ec5b8495e75b0d4ffedd85b005898e7fd59566f8bf31bfd74f08008a1ae1659d1eda871c253f9319a7e0c428ed64eef4bf2fc33b87ee635f88288f51613f17eed8dfda5fa984dcc68c75516b381afc2bf9cf54f096c651611d8d40f990c53c4f49be69a352ad02f2b6c6194bc32505024b3109fa949ab1663c77d0fd3304da1e9b8be2431ee5ebf7b4ba8078baf55af5e22b9e207f552c4138dd0eb749428eae983524b646bdf2ae712a35f37200045cc13373e743d7e22fa551c9bb3d2e25f220601f6b564e07be4349b4cc49d8b7d96ef77b9369040b1e923f7"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x2, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x9, 0x6a, 0x1, [@generic={0x72, 0x23, "132ecc8d27baacf1188db9a7e7a138ca9b3a72461a3f5968d63f97d279a172842773ab60b7cf57f6f22543ad7101d515543632d24fd7d3a6b570f088488cec9147ada5c172905065467ad2d5f90b0766c1fe4ccc5c20ff477de7880d34a208fd98c2055e3f912bbef9fb967cfc26b570"}, @generic={0xa4, 0x21, "47591aeb8fd94a5ef6d3cb7df401b3407a8a96733f523acb7402fff65da18e47c6254907cc7225928359b1118f65de15b67d56d4bccd97dad186fe531bc6dc652e175df4b3f3db34b7015facbf6dd7ca133ea8b6010c9fb488d23ecd00f3d88a9f7aabaaeefcc3070af423291909b5670a24269c93fd2c5a7bfdda7d83687b2d196884292bec6bade3b55edaeef290c0f0634a182600a00d12afc7f8f41fb854a827"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x7, 0x9, 0x81}}, {{0x9, 0x5, 0xd, 0x0, 0x50, 0xd, 0x76, 0x0, [@generic={0x42, 0x2, "41daa2ab0f4b3a791b418b1bd8017f20b81b713010194cf6a1911449f31d3858c39783a879b5683ca92457f5f05c36cbe2658948c5a7db6124cb9d10816637d6"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x9b566bf2f679cfcf, 0x5, 0x10, 0x5}}]}}]}}]}}, &(0x7f0000002640)={0xa, &(0x7f0000002540)={0xa, 0x6, 0x201, 0x6, 0x7, 0xb, 0x20, 0x2}, 0x75, &(0x7f0000002580)={0x5, 0xf, 0x75, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0x2, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x6, 0x1, 0x8, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x4, 0x7, 0x80, [0x7, 0x0, 0xc0, 0x30, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x6, 0x5}, @generic={0x37, 0x10, 0x3, "eac927023f8fa31292ea5f48546a2a136e574f2f2558c5f1b04486380adb8c55f6daae0c22ad371dd6a576436484a3f3dd28f570"}]}, 0x1, [{0x4, &(0x7f0000002600)=@lang_id={0x4, 0x3, 0xc1a}}]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a32000000"], 0x94}}, 0x0) r3 = memfd_create(&(0x7f0000000400)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3z\x1d]a\xabd\x86\xcb\b\x9f\x90\xd5\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>s\xe5\x15G>\xffh\t\x1f\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdcJ\xd7\xca\xbd\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa\xdb\x98\xe0\xf7$\xdc\xfeTdm-\x96\xf8\xff\xe0\x1c\x94\r\xf85\xc3\xb2[\xeb\xe6r\xcaH\xc0D\xb3\xed\xad\xe7\a\xd6\xc6\x18\xa71\xad\xd6\x16\'\xfa*\xfa5`\'Q\x81;\xb8\x1f\xc9\xa9\x17\x9de\xba\x96\"\xca\rGU\xd9\'#\xf43\xa0\x1c\x8d\x1dKB\xd0\xab\xdc\xact\xfb\"\xf4\xaf\xfb\x11\x16gx\xb9a\xa2\x855\a\xa6\xc0\xe3\x051\xfa]\x1e\x9fG\x8c\xc97-E\xa0\xd65\xac4e\xd1\x18N\x97\xe7\xe0z\xafX\v^\xc5N\x96T\xb2\x85\xf3o\x16\x06,\xca\x05\xbc5\xb4\xc5Xzi\xb7\x8df\xe3\xa0\x10\xad\xe6\b\xaa\xe6\x03\x8a\xd4\x11\x1f\x16', 0x3) r4 = dup(r3) ioctl$BLKCLOSEZONE(r4, 0x40101287, &(0x7f0000000180)={0xfff, 0x1}) r5 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xff\xff\x00F\x1e\xa9\"\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU\x02\x00\xc3\x96A\x8b\x9b\xec\xe3\x8ewP\xee\x00\x00\xcd\xfb\xcc\x82n?r=\xa1\xe0\xce\x8b\x19\xea\xef\xe3\n)v\x13gVI\v\xbe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x99\x00\x00\x00\x00', 0x4) copy_file_range(r5, 0x0, r4, 0x0, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) 1m8.659808829s ago: executing program 9 (id=4271): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0], &(0x7f00000006c0)='GPL\x00', 0x4, 0xc4, &(0x7f00000004c0)=""/196}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) listen(0xffffffffffffffff, 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r7, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r8}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x438, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff3, 0xa}, {0x2, 0xfff1}, {0x7, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) 1m7.244248595s ago: executing program 9 (id=4272): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000009d6e08407f967b111b051f8752c2fc700006114340000000000ddd87fb0110301c65e3ee779abe310a089e745f06c99d6f793d59fe4c969fb61b64d24df98c42eb8e782bce4dcad924eb4bc7c9d711bd3c48b4548301b3a46f2afe272e692940d66552b8ee50c05cdf8a107936c2c4adb01ad2c7983bc58a8cf83ba02dc6ea0763c843211b01bb9c13ba80957ad1886d8ebf07927d506c147fe6b6d6ba84ad703b7640dd4737b3e8a395f6d70b9978bfd5a39611bdb37defb7e25aecf"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000280)={0x0, 0x2710}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peek(0x3, r2, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/57, 0x39}], 0x1}, 0x7}], 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m5.876743103s ago: executing program 8 (id=4273): socket$inet_tcp(0x2, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) socket(0x5, 0x5, 0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1, 0x80) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000012c0), 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r2, @ANYRES32=r1], 0x1c}}, 0x0) 1m5.400114642s ago: executing program 9 (id=4274): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYBLOB='\b\x00\n'], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) writev(r2, &(0x7f0000000980)=[{&(0x7f0000000440)="3187c89dda4db192b80f726757b05cfeb3a9dcb6e310ac212f9c6ebab422eb8a1b07e8fa734c4b34d05a3dd733b1d3f5", 0x30}, {&(0x7f00000008c0)="058c9ce3e71ec8530af92a4ab48c8adbc1f054b4a5a0cb88fdbc3f070309bb65328378276a7bb43b954124a4186d7ebafccd320b809fd255b45ca04c5a24", 0x3e}], 0x2) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640), 0x0, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtaction={0xac, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ife={0x94, 0x1, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev}, @TCA_IFE_METALST={0x40, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x401}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xfffffffd}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x400}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xfffffff9}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1ff}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x500}, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f34}, {0x100000000, 0x7, 0xfffffffffffffffe, 0x20000, 0xffffffffffffffff, 0x6, 0x8, 0x7}, {0x9, 0xfffffffffffffffe, 0x4, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x210000, 0x6c}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6, 0x1}}, 0xe8) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0xffe0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 1m3.842108165s ago: executing program 8 (id=4275): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000200001002dbd7000fcdbdf250a008000090000051d80020014000200fc020000000000000000000000000000080018004e004e"], 0x38}}, 0x480d0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delnexthop={0x38, 0x69, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="0080000000000000004588000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x16}, 0x50) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0xa, 0x5, 0x0) write$FUSE_ENTRY(r4, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r8, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6) sendmsg$nl_route_sched(r7, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000080)=@deltfilter={0x30, 0x2d, 0x1, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r9, {}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="08a1152457b452baa5b64533faa7662ecc1beb0ba8341b8984eadd53e259fa0bc2e904080963351cca5757a8d45542c8a58a0f5e674d7a0587fa34c57181fdb4a0680482391b2e31532383b4d135054d236e007d48ea3e202157324b56a7c29bbbc48169d766b19b64f55c9ad5", 0x6d, 0x0, &(0x7f0000000600)={0x11, 0x5, r9, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r11, &(0x7f00000000c0)={0x1d, r12}, 0x18) bind$can_j1939(r11, &(0x7f0000000100)={0x1d, r12, 0x1, {0x0, 0xff, 0x1}, 0xfd}, 0x18) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@float={0xd, 0x0, 0x0, 0x10, 0xc}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000380)=""/244, 0x34, 0xf4, 0x1, 0x8000, 0x10000, @value=r2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x1, 0x8, 0x4, 0x18, 0x1, 0x7fff, '\x00', r12, r13, 0x0, 0x1, 0x5, 0xd}, 0x50) 1m1.475529986s ago: executing program 9 (id=4276): r0 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) 59.232547059s ago: executing program 9 (id=4277): r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xb1\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x0f\x00\x00\x10\x00\x00\x00\x06^\xb4', 0x0) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="b30d7d45c4b88bb4bf5ff521acba2edba66ac1e16826f977f23ac9423a02934a9dd78bc68e571442240f82e30767da37afc6898ceec0268f378f9031731052edbd8ed0dfdae8078f48d11a400bb9ff552ef116fa6f3f1e6e854a295c63a0bda4c6f562972847dd7bd323723c4d7c1b112ddbec707608ab351eb220228a89341dcfcb81a8ad356e13126391d0e2a82807469846ec31330d9cf51fac5c42675ba8120858c743b1b46d4bb3567d08be56761c932823588b06d2", 0xb8}, {&(0x7f0000000180)="f5ab50e7cfd5140f7f9778c98f0aae25ba544367233df15488877a12c9bf1cc88d4f8c6ce55ffc1fc7ca2e79b0424a0091091db07f67971cd2ff5c52885b5e9314", 0x41}, {&(0x7f0000000240)="cbae8465ef53d2b5d91eb1002038666074758539379bc70d4f", 0x19}], 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000c0000004200000040"], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, r4, 0x0, 0x16b8}, 0x38) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000003740)=ANY=[@ANYBLOB="89893b10e81b65dec90674c814cb2836f94f34d6614cd5dea6d268094ee7fe045c2fc51c0f8ce8a94ea93882623254538a162761a86b9fc103ad43c2dbcb278d444acb08542621342152c28b74d9bb48ee61a193a8d960"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x81, @loopback, 0xa}, 0x1c) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000640)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x1f, 0x8000}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) connect$x25(r1, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) clock_gettime(0x0, &(0x7f0000003600)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003480)=[{{&(0x7f00000002c0)=@x25, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/16, 0x10}, {&(0x7f0000000380)=""/84, 0x54}, {&(0x7f0000000400)=""/21, 0x15}, {&(0x7f0000000600)=""/151, 0x97}, {&(0x7f00000006c0)=""/17, 0x11}, {&(0x7f0000000700)=""/223, 0xdf}, {&(0x7f0000000800)=""/3, 0x3}, {&(0x7f0000000840)=""/41, 0x29}, {&(0x7f0000000880)=""/28, 0x1c}], 0x9}, 0xfffffffc}, {{&(0x7f0000000980)=@tipc=@name, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/249, 0xf9}], 0x1}, 0x1}, {{&(0x7f0000000b40)=@nfc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000bc0)=""/97, 0x61}, {&(0x7f0000000c40)=""/154, 0x9a}, {&(0x7f0000000d00)}], 0x3, &(0x7f0000000d80)=""/1, 0x1}, 0x10001}, {{&(0x7f0000000dc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000e40)=""/61, 0x3d}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/104, 0x68}], 0x3, &(0x7f0000001f40)=""/176, 0xb0}, 0x1}, {{&(0x7f0000002000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002080)}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x2, &(0x7f0000003100)=""/215, 0xd7}, 0x8}, {{&(0x7f0000003200)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003280)=""/123, 0x7b}, {&(0x7f0000003300)=""/2, 0x2}, {&(0x7f0000003340)=""/49, 0x31}], 0x3, &(0x7f00000033c0)=""/186, 0xba}, 0x341}], 0x6, 0x40, &(0x7f0000003640)={r7, r8+60000000}) 56.715023113s ago: executing program 9 (id=4280): socket$unix(0x1, 0x1, 0x0) socket(0x1e, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000010) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)="2e00000011008188040f080059acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x22) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xb}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x800) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r6, &(0x7f0000000040)=""/148, 0xffffff96) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x8001, '\x00', r5, r6, 0x4, 0x3}, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 48.416847861s ago: executing program 39 (id=4275): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000200001002dbd7000fcdbdf250a008000090000051d80020014000200fc020000000000000000000000000000080018004e004e"], 0x38}}, 0x480d0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delnexthop={0x38, 0x69, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="0080000000000000004588000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x16}, 0x50) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0xa, 0x5, 0x0) write$FUSE_ENTRY(r4, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r8, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6) sendmsg$nl_route_sched(r7, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000080)=@deltfilter={0x30, 0x2d, 0x1, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r9, {}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="08a1152457b452baa5b64533faa7662ecc1beb0ba8341b8984eadd53e259fa0bc2e904080963351cca5757a8d45542c8a58a0f5e674d7a0587fa34c57181fdb4a0680482391b2e31532383b4d135054d236e007d48ea3e202157324b56a7c29bbbc48169d766b19b64f55c9ad5", 0x6d, 0x0, &(0x7f0000000600)={0x11, 0x5, r9, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r11, &(0x7f00000000c0)={0x1d, r12}, 0x18) bind$can_j1939(r11, &(0x7f0000000100)={0x1d, r12, 0x1, {0x0, 0xff, 0x1}, 0xfd}, 0x18) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@float={0xd, 0x0, 0x0, 0x10, 0xc}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000380)=""/244, 0x34, 0xf4, 0x1, 0x8000, 0x10000, @value=r2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x1, 0x8, 0x4, 0x18, 0x1, 0x7fff, '\x00', r12, r13, 0x0, 0x1, 0x5, 0xd}, 0x50) 41.262491922s ago: executing program 40 (id=4280): socket$unix(0x1, 0x1, 0x0) socket(0x1e, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000010) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)="2e00000011008188040f080059acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x22) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xb}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x800) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r6, &(0x7f0000000040)=""/148, 0xffffff96) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x8001, '\x00', r5, r6, 0x4, 0x3}, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 40.613351572s ago: executing program 2 (id=4292): syz_emit_ethernet(0x7a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe800000000000000000000000ef00bb00000000000000000000ffffe00000012421880b00"], 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000001c0)=0x5) r1 = gettid() rt_sigtimedwait(&(0x7f0000000180)={[0xfffffffffffffffd]}, &(0x7f00000001c0), 0x0, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c0001800800014000000003240001"], 0x140}}, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) set_mempolicy(0x6005, &(0x7f0000000000)=0x80000000, 0x800) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x71) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x14, 0x37, 0x9, 0x70bd2b, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x75bf1e0e8f029110}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2000000037000701feffffff3edbdf2502"], 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x4000000) read$FUSE(0xffffffffffffffff, &(0x7f00000063c0)={0x2020}, 0x2020) 39.612559134s ago: executing program 2 (id=4293): add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000"], 0x48, 0xfffffffffffffffd) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x114) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r3, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x0, [0x0, 0x800, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20f, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xa577, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x800, 0x0, 0x0, 0x0, 0x80000, 0x85, 0xfffffffd, 0x0, 0x8, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x4, 0x0, 0x7, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400925, 0x0, 0x0, 0x3, 0x0, 0x6, 0x10000, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x10, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) 24.94206042s ago: executing program 2 (id=4294): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0xe, 0x21, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x34c0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x81, &(0x7f0000000d00)=""/129, 0x41000, 0x32, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0xe, 0x3, 0x9eb}, 0x10, 0x0, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000e40)=[{0x5, 0x5, 0x9, 0xb}, {0x1, 0x2, 0x10}, {0x5, 0x2, 0xc, 0x7}, {0x0, 0x3, 0x1}, {0x0, 0x1, 0xe, 0x2}, {0x4, 0x2, 0x2, 0x1}, {0x0, 0x2, 0xc, 0x6}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006c00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) userfaultfd(0x80801) socket$nl_crypto(0x10, 0x3, 0x15) userfaultfd(0x801) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r1], 0x20}}, 0x0) 24.025936813s ago: executing program 2 (id=4295): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x9, 0xd71, 0x1, {0x6, @vbi={0x8, 0x8000, 0x3, 0x20363059, [0x82, 0x7], [0xc153], 0x1}}, 0xd3}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x17, 0xe, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], &(0x7f0000000300)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x8001, 0x8, {{0x26, 0x4, 0x0, 0x7, 0x98, 0x64, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @empty, {[@timestamp_addr={0x44, 0xc, 0x12, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x15}, 0xfffffffb}]}, @rr={0x7, 0x7, 0x7, [@multicast2]}, @timestamp_prespec={0x44, 0x4c, 0x8e, 0x3, 0x2, [{@local, 0x6}, {@remote, 0x4}, {@private=0xa010100, 0xd07}, {@loopback, 0xfff}, {@multicast2, 0x1}, {@loopback, 0x6903}, {@local, 0x1003}, {@empty, 0x2}, {@remote, 0xe}]}, @noop, @ssrr={0x89, 0x23, 0x39, [@dev={0xac, 0x14, 0x14, 0x19}, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}, @broadcast, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1, @local, @multicast1]}]}}}}}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x341081, 0x612c3a5fb31a1869) getdents64(r4, 0x0, 0x0) r5 = epoll_create(0xff9) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000180)={0x6}) write$smack_current(r3, 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f0000000340)=0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1e, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @generic={0x3, 0xb, 0x8, 0x3, 0x6}, @generic={0x7f, 0x2, 0x5, 0x4, 0x6}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', r2, @sk_lookup=0x6208fdca8e43a2b9, r3, 0x8, &(0x7f00000009c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0xa, 0x2a7, 0x3}, 0x10, 0x0, r1, 0x3, 0x0, &(0x7f0000000a40)=[{0x0, 0x1, 0x10, 0x2}, {0x2, 0x4, 0x1, 0xb}, {0x1, 0x1, 0x8, 0x2}], 0x10, 0x8e}, 0x94) 22.872652568s ago: executing program 2 (id=4296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x13, 0x1fd, &(0x7f0000000d80)="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"}) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000001080)={0xfffffffd, 0xffffffff, 0xe5, 0xc35, 0x8, "83cac9078e647a70b447ec14affb5f1ba2858a", 0x80, 0x608b}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000001280)={0x1, {{0x2, 0x4e20, @multicast2}}}, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x4}, 0x94) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r8, r8, 0x0, 0xe3aa6ea) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c00007e5018023848d390f1ea8f"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x440c5) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="18020000d6000100000000000000000085000000c20000009500000000000000d0b35247f460c4886aebce3391f0cf2e53ab288c6c603ec2bda105c3d1d164fde126cb17fc6731f5295c"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) 18.399184254s ago: executing program 2 (id=4297): add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000"], 0x48, 0xfffffffffffffffd) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x114) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r3, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x0, [0x0, 0x800, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20f, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xa577, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x800, 0x0, 0x0, 0x0, 0x80000, 0x85, 0xfffffffd, 0x0, 0x8, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x4, 0x0, 0x7, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400925, 0x0, 0x0, 0x3, 0x0, 0x6, 0x10000, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x10, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) 0s ago: executing program 41 (id=4297): add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000"], 0x48, 0xfffffffffffffffd) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x114) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r3, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x0, [0x0, 0x800, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20f, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xa577, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x800, 0x0, 0x0, 0x0, 0x80000, 0x85, 0xfffffffd, 0x0, 0x8, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x4, 0x0, 0x7, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400925, 0x0, 0x0, 0x3, 0x0, 0x6, 0x10000, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x10, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) kernel console output (not intermixed with test programs): up 0 [ 932.767984][T17891] netlink: 'syz.6.3881': attribute type 1 has an invalid length. [ 932.768005][T17891] netlink: 'syz.6.3881': attribute type 4 has an invalid length. [ 932.768018][T17891] netlink: 9491 bytes leftover after parsing attributes in process `syz.6.3881'. [ 932.886034][T17894] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3882'. [ 933.846171][T17897] overlayfs: upper fs does not support file handles, falling back to index=off. [ 934.474874][T17917] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3890'. [ 934.917219][ T5970] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 935.060991][ T5970] usb 10-1: Using ep0 maxpacket: 8 [ 935.063282][ T5970] usb 10-1: config 0 has an invalid interface number: 33 but max is 1 [ 935.063307][ T5970] usb 10-1: config 0 has no interface number 1 [ 935.063341][ T5970] usb 10-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 935.063362][ T5970] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 935.065571][ T5970] usb 10-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 935.065593][ T5970] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.065602][ T5970] usb 10-1: Product: syz [ 935.065610][ T5970] usb 10-1: Manufacturer: syz [ 935.065617][ T5970] usb 10-1: SerialNumber: syz [ 935.069704][ T5970] usb 10-1: config 0 descriptor?? [ 935.085560][ T5970] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 935.348834][ T5970] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 935.375812][ T6413] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 935.532937][ T6413] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 935.532962][ T6413] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 935.534453][ T6413] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 935.534477][ T6413] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 935.534496][ T6413] usb 7-1: SerialNumber: syz [ 935.606785][T17915] netlink: 'syz.9.3888': attribute type 6 has an invalid length. [ 935.606805][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3888'. [ 935.663272][ T6413] usb 7-1: 0:2 : does not exist [ 935.918188][ T5970] usb 10-1: USB disconnect, device number 12 [ 935.929100][ T5970] pvrusb2: Device being rendered inoperable [ 935.978511][T17939] FAULT_INJECTION: forcing a failure. [ 935.978511][T17939] name failslab, interval 1, probability 0, space 0, times 0 [ 935.978546][T17939] CPU: 0 UID: 0 PID: 17939 Comm: syz.8.3894 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 935.978571][T17939] Tainted: [L]=SOFTLOCKUP [ 935.978578][T17939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 935.978588][T17939] Call Trace: [ 935.978596][T17939] [ 935.978604][T17939] dump_stack_lvl+0xe8/0x150 [ 935.978633][T17939] should_fail_ex+0x467/0x600 [ 935.978664][T17939] should_failslab+0xa8/0x100 [ 935.978690][T17939] __kmalloc_noprof+0xfe/0x780 [ 935.978713][T17939] ? tomoyo_encode+0x2ad/0x570 [ 935.978730][T17939] ? tomoyo_encode+0x2ad/0x570 [ 935.978754][T17939] tomoyo_encode+0x2ad/0x570 [ 935.978779][T17939] tomoyo_realpath_from_path+0x5fa/0x640 [ 935.978805][T17939] ? tomoyo_path_number_perm+0x219/0x5f0 [ 935.978827][T17939] tomoyo_path_number_perm+0x246/0x5f0 [ 935.978851][T17939] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 935.978871][T17939] ? __lock_acquire+0x683/0x2ce0 [ 935.978907][T17939] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 935.978926][T17939] ? hook_file_ioctl+0x1f3/0x600 [ 935.978947][T17939] ? lockdep_hardirqs_on+0x7a/0x110 [ 935.978989][T17939] ? __fget_files+0x2a/0x420 [ 935.979014][T17939] ? __fget_files+0x2a/0x420 [ 935.979039][T17939] ? __fget_files+0x3a8/0x420 [ 935.979056][T17939] ? __fget_files+0x2a/0x420 [ 935.979080][T17939] security_file_ioctl+0xc3/0x2a0 [ 935.979107][T17939] __se_sys_ioctl+0x47/0x170 [ 935.979131][T17939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.979145][T17939] do_syscall_64+0x174/0x580 [ 935.979161][T17939] ? trace_irq_disable+0x3b/0x140 [ 935.979178][T17939] ? clear_bhb_loop+0x40/0x90 [ 935.979194][T17939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.979207][T17939] RIP: 0033:0x7f3b024ace59 [ 935.979221][T17939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.979233][T17939] RSP: 002b:00007f3b006fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 935.979248][T17939] RAX: ffffffffffffffda RBX: 00007f3b02725fa0 RCX: 00007f3b024ace59 [ 935.979257][T17939] RDX: 0000200000000000 RSI: 00000000c008561c RDI: 0000000000000005 [ 935.979266][T17939] RBP: 00007f3b006fe090 R08: 0000000000000000 R09: 0000000000000000 [ 935.979274][T17939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.979283][T17939] R13: 00007f3b02726038 R14: 00007f3b02725fa0 R15: 00007ffc066d5558 [ 935.979305][T17939] [ 935.986975][ T5970] pvrusb2: Device being rendered inoperable [ 935.987424][T17939] ERROR: Out of memory at tomoyo_realpath_from_path. [ 936.343269][ T5260] 8021q: adding VLAN 0 to HW filter on device eth18 [ 936.802336][T17949] netlink: 380 bytes leftover after parsing attributes in process `syz.9.3896'. [ 937.104512][ T6413] usb 7-1: USB disconnect, device number 25 [ 937.159995][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 937.313487][ T9] usb 10-1: config 0 has an invalid interface number: 69 but max is 0 [ 937.313513][ T9] usb 10-1: config 0 has no interface number 0 [ 937.313555][ T9] usb 10-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 937.313577][ T9] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 937.318505][ T9] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 937.318531][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.318549][ T9] usb 10-1: Product: syz [ 937.318561][ T9] usb 10-1: Manufacturer: syz [ 937.318574][ T9] usb 10-1: SerialNumber: syz [ 937.921669][ T9] usb 10-1: config 0 descriptor?? [ 937.922672][T17949] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 937.950133][ T9] cyberjack 10-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 937.978305][ T9] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 938.159441][T17949] fuse: Bad value for 'fd' [ 938.307965][T17965] netlink: 744 bytes leftover after parsing attributes in process `syz.8.3898'. [ 938.308394][T17965] netlink: 744 bytes leftover after parsing attributes in process `syz.8.3898'. [ 938.434481][ T5710] usb 10-1: USB disconnect, device number 13 [ 939.148599][ T5710] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 939.149093][ T5710] cyberjack 10-1:0.69: device disconnected [ 939.406274][T17983] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3901'. [ 939.672954][T17988] FAULT_INJECTION: forcing a failure. [ 939.672954][T17988] name failslab, interval 1, probability 0, space 0, times 0 [ 939.672989][T17988] CPU: 1 UID: 0 PID: 17988 Comm: syz.8.3903 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 939.673013][T17988] Tainted: [L]=SOFTLOCKUP [ 939.673020][T17988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 939.673031][T17988] Call Trace: [ 939.673037][T17988] [ 939.673044][T17988] dump_stack_lvl+0xe8/0x150 [ 939.673073][T17988] should_fail_ex+0x467/0x600 [ 939.673101][T17988] should_failslab+0xa8/0x100 [ 939.673128][T17988] kmem_cache_alloc_noprof+0xa4/0x650 [ 939.673149][T17988] ? security_inode_alloc+0x39/0x310 [ 939.673169][T17988] ? security_inode_alloc+0x39/0x310 [ 939.673194][T17988] security_inode_alloc+0x39/0x310 [ 939.673215][T17988] inode_init_always_gfp+0x983/0xd40 [ 939.673241][T17988] ? __pfx_sock_alloc_inode+0x10/0x10 [ 939.673267][T17988] alloc_inode+0x82/0x1b0 [ 939.673286][T17988] do_accept+0x144/0x760 [ 939.673312][T17988] ? __pfx_do_accept+0x10/0x10 [ 939.673352][T17988] __sys_accept4+0x139/0x230 [ 939.673371][T17988] ? __pfx___sys_accept4+0x10/0x10 [ 939.673399][T17988] ? __pfx_ksys_write+0x10/0x10 [ 939.673428][T17988] __x64_sys_accept4+0x9a/0xb0 [ 939.673447][T17988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.673464][T17988] do_syscall_64+0x174/0x580 [ 939.673484][T17988] ? trace_irq_disable+0x3b/0x140 [ 939.673505][T17988] ? clear_bhb_loop+0x40/0x90 [ 939.673525][T17988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.673540][T17988] RIP: 0033:0x7f3b024ace59 [ 939.673555][T17988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.673569][T17988] RSP: 002b:00007f3b006fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 939.673587][T17988] RAX: ffffffffffffffda RBX: 00007f3b02725fa0 RCX: 00007f3b024ace59 [ 939.673598][T17988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 939.673607][T17988] RBP: 00007f3b006fe090 R08: 0000000000000000 R09: 0000000000000000 [ 939.673615][T17988] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 939.673624][T17988] R13: 00007f3b02726038 R14: 00007f3b02725fa0 R15: 00007ffc066d5558 [ 939.673650][T17988] [ 939.735210][T15127] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 939.735237][T15127] CPU: 1 UID: 0 PID: 15127 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 939.735262][T15127] Tainted: [L]=SOFTLOCKUP [ 939.735270][T15127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 939.735282][T15127] Workqueue: hci4 hci_rx_work [ 939.735413][T15127] Call Trace: [ 939.735422][T15127] [ 939.735430][T15127] dump_stack_lvl+0xe8/0x150 [ 939.735457][T15127] sysfs_create_dir_ns+0x271/0x2a0 [ 939.735543][T15127] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 939.735571][T15127] ? rt_spin_unlock+0x163/0x200 [ 939.735602][T15127] kobject_add_internal+0x62c/0xce0 [ 939.735636][T15127] kobject_add+0x163/0x240 [ 939.735659][T15127] ? rt_spin_unlock+0x157/0x200 [ 939.735689][T15127] ? __pfx_kobject_add+0x10/0x10 [ 939.735717][T15127] ? get_device_parent+0x370/0x3a0 [ 939.735787][T15127] device_add+0x3fa/0xb80 [ 939.735843][T15127] hci_conn_add_sysfs+0xd5/0x210 [ 939.735902][T15127] le_conn_complete_evt+0xfef/0x1580 [ 939.735986][T15127] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 939.736011][T15127] ? lockdep_hardirqs_on+0x7a/0x110 [ 939.736034][T15127] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 939.736056][T15127] ? rt_mutex_slowunlock+0x219/0x460 [ 939.736083][T15127] ? skb_pull_data+0xf0/0x200 [ 939.736149][T15127] hci_le_conn_complete_evt+0x187/0x470 [ 939.736183][T15127] hci_event_packet+0x67a/0xf10 [ 939.736238][T15127] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 939.736262][T15127] ? __pfx_hci_event_packet+0x10/0x10 [ 939.736283][T15127] ? rt_spin_unlock+0x157/0x200 [ 939.736321][T15127] ? hci_send_to_monitor+0xe2/0x590 [ 939.736378][T15127] hci_rx_work+0x3ee/0x1020 [ 939.736422][T15127] ? process_scheduled_works+0xa20/0x14e0 [ 939.736481][T15127] process_scheduled_works+0xa8e/0x14e0 [ 939.736535][T15127] ? __pfx_process_scheduled_works+0x10/0x10 [ 939.736569][T15127] ? assign_work+0x3cf/0x5d0 [ 939.736600][T15127] worker_thread+0xa47/0xfb0 [ 939.736639][T15127] ? __kthread_parkme+0x71/0x1f0 [ 939.736668][T15127] kthread+0x388/0x470 [ 939.736690][T15127] ? __pfx_worker_thread+0x10/0x10 [ 939.736715][T15127] ? __pfx_kthread+0x10/0x10 [ 939.736737][T15127] ret_from_fork+0x514/0xb70 [ 939.736789][T15127] ? __pfx_ret_from_fork+0x10/0x10 [ 939.736811][T15127] ? __switch_to+0xc89/0x1420 [ 939.736833][T15127] ? __pfx_kthread+0x10/0x10 [ 939.736854][T15127] ret_from_fork_asm+0x1a/0x30 [ 939.736892][T15127] [ 939.738443][T15127] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 939.738483][T15127] Bluetooth: hci4: failed to register connection device [ 939.867818][T17994] FAULT_INJECTION: forcing a failure. [ 939.867818][T17994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.867850][T17994] CPU: 0 UID: 0 PID: 17994 Comm: syz.6.3906 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 939.867881][T17994] Tainted: [L]=SOFTLOCKUP [ 939.867888][T17994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 939.867898][T17994] Call Trace: [ 939.867905][T17994] [ 939.867913][T17994] dump_stack_lvl+0xe8/0x150 [ 939.867940][T17994] should_fail_ex+0x467/0x600 [ 939.867967][T17994] _copy_from_user+0x2d/0xb0 [ 939.867993][T17994] ___sys_sendmsg+0x1c6/0x360 [ 939.868017][T17994] ? __lock_acquire+0x683/0x2ce0 [ 939.868043][T17994] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.868097][T17994] ? __fget_files+0x2a/0x420 [ 939.868118][T17994] ? __fget_files+0x3a8/0x420 [ 939.868147][T17994] __x64_sys_sendmsg+0x1b7/0x290 [ 939.868173][T17994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 939.868211][T17994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.868229][T17994] do_syscall_64+0x174/0x580 [ 939.868250][T17994] ? trace_irq_disable+0x3b/0x140 [ 939.868270][T17994] ? clear_bhb_loop+0x40/0x90 [ 939.868291][T17994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.868307][T17994] RIP: 0033:0x7faef572ce59 [ 939.868324][T17994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.868338][T17994] RSP: 002b:00007faef397e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.868357][T17994] RAX: ffffffffffffffda RBX: 00007faef59a5fa0 RCX: 00007faef572ce59 [ 939.868370][T17994] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 939.868380][T17994] RBP: 00007faef397e090 R08: 0000000000000000 R09: 0000000000000000 [ 939.868391][T17994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.868402][T17994] R13: 00007faef59a6038 R14: 00007faef59a5fa0 R15: 00007fff78a7a838 [ 939.868429][T17994] [ 942.731609][T18027] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3915'. [ 943.346055][ T5970] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 943.492493][ T5970] usb 10-1: unable to get BOS descriptor or descriptor too short [ 943.493060][ T5970] usb 10-1: not running at top speed; connect to a high speed hub [ 943.494343][ T5970] usb 10-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 943.526953][ T5970] usb 10-1: New USB device found, idVendor=2346, idProduct=2012, bcdDevice=7d.6e [ 943.526979][ T5970] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.526994][ T5970] usb 10-1: Product: syz [ 943.527007][ T5970] usb 10-1: Manufacturer: syz [ 943.527018][ T5970] usb 10-1: SerialNumber: syz [ 943.764566][T18035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.804958][T18035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.810646][T18035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.814421][T18035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.833695][T18035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.843735][T18035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.895596][T18035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.904958][T18035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.935298][T18035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.938641][T18035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.035312][ T5970] usb 10-1: USB disconnect, device number 14 [ 945.187545][T18063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.187861][T18063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.464907][T18068] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3924'. [ 945.514717][T18072] FAULT_INJECTION: forcing a failure. [ 945.514717][T18072] name failslab, interval 1, probability 0, space 0, times 0 [ 945.514754][T18072] CPU: 1 UID: 0 PID: 18072 Comm: syz.7.3923 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 945.514777][T18072] Tainted: [L]=SOFTLOCKUP [ 945.514784][T18072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 945.514794][T18072] Call Trace: [ 945.514802][T18072] [ 945.514809][T18072] dump_stack_lvl+0xe8/0x150 [ 945.514837][T18072] should_fail_ex+0x467/0x600 [ 945.514863][T18072] should_failslab+0xa8/0x100 [ 945.514890][T18072] kmem_cache_alloc_node_noprof+0xae/0x670 [ 945.514913][T18072] ? __alloc_skb+0x1d7/0x7a0 [ 945.514931][T18072] ? __alloc_skb+0x1d7/0x7a0 [ 945.514952][T18072] __alloc_skb+0x1d7/0x7a0 [ 945.514974][T18072] netlink_dump+0x1e7/0xee0 [ 945.515006][T18072] ? rt_spin_unlock+0x157/0x200 [ 945.515033][T18072] ? __pfx_netlink_dump+0x10/0x10 [ 945.515075][T18072] netlink_recvmsg+0x683/0xa50 [ 945.515111][T18072] ? __pfx_netlink_recvmsg+0x10/0x10 [ 945.515138][T18072] ? __lock_acquire+0x683/0x2ce0 [ 945.515164][T18072] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 945.515181][T18072] ? security_socket_recvmsg+0x7e/0x2c0 [ 945.515203][T18072] ? __pfx_netlink_recvmsg+0x10/0x10 [ 945.515228][T18072] sock_recvmsg+0x196/0x1e0 [ 945.515250][T18072] ____sys_recvmsg+0x1f2/0x4b0 [ 945.515283][T18072] ? __pfx_____sys_recvmsg+0x10/0x10 [ 945.515321][T18072] ? import_iovec+0x73/0xa0 [ 945.515350][T18072] ___sys_recvmsg+0x213/0x5a0 [ 945.515379][T18072] ? __pfx____sys_recvmsg+0x10/0x10 [ 945.515406][T18072] ? __fget_files+0x2a/0x420 [ 945.515444][T18072] ? __fget_files+0x3a8/0x420 [ 945.515485][T18072] do_recvmmsg+0x320/0x7f0 [ 945.515516][T18072] ? __pfx_do_recvmmsg+0x10/0x10 [ 945.515540][T18072] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 945.515570][T18072] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 945.515607][T18072] __x64_sys_recvmmsg+0x198/0x250 [ 945.515632][T18072] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 945.515663][T18072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.515683][T18072] do_syscall_64+0x174/0x580 [ 945.515703][T18072] ? trace_irq_disable+0x3b/0x140 [ 945.515724][T18072] ? clear_bhb_loop+0x40/0x90 [ 945.515745][T18072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.515762][T18072] RIP: 0033:0x7f929343ce59 [ 945.515780][T18072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.515796][T18072] RSP: 002b:00007f9291675028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 945.515815][T18072] RAX: ffffffffffffffda RBX: 00007f92936b6090 RCX: 00007f929343ce59 [ 945.515828][T18072] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000004 [ 945.515839][T18072] RBP: 00007f9291675090 R08: 0000000000000000 R09: 0000000000000000 [ 945.515849][T18072] R10: 0000000000014022 R11: 0000000000000246 R12: 0000000000000001 [ 945.515860][T18072] R13: 00007f92936b6128 R14: 00007f92936b6090 R15: 00007fff4aa22e88 [ 945.515889][T18072] [ 945.719993][ T6413] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 945.953390][ T6413] usb 10-1: device descriptor read/64, error -71 [ 946.200016][ T6413] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 946.370440][ T6413] usb 10-1: device descriptor read/64, error -71 [ 946.495109][ T6413] usb usb10-port1: attempt power cycle [ 946.749270][T17625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 946.795270][T17625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 946.799379][T17625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 946.841006][ T6413] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 947.090622][T18100] trusted_key: encrypted_key: insufficient parameters specified [ 947.151796][ T6413] usb 10-1: device descriptor read/8, error -71 [ 947.429698][T17625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 947.459391][T17625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 947.487474][T17625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 947.500123][ T6413] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 947.513887][T17625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 947.536024][ T6413] usb 10-1: device descriptor read/8, error -71 [ 947.629994][T18107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.630600][T18107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.652956][ T6413] usb usb10-port1: unable to enumerate USB device [ 947.669556][T18107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.681796][T17625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 947.699480][T18107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.980899][T17625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.079752][T17625] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.099433][T18136] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3935'. [ 949.194685][T13940] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.194894][T13940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.239380][T13940] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.239519][T13940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.353734][T17625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.459537][T17625] veth0_vlan: entered promiscuous mode [ 950.528581][T17625] veth1_vlan: entered promiscuous mode [ 950.617494][T17625] veth0_macvtap: entered promiscuous mode [ 950.635296][T17625] veth1_macvtap: entered promiscuous mode [ 950.679463][T17625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.699756][T17625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.723502][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.723550][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.723583][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.723616][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.156509][ T2387] pvrusb2: request_firmware fatal error with code=-110 [ 952.156528][ T2387] pvrusb2: Failure uploading firmware1 [ 952.156536][ T2387] pvrusb2: Device initialization was not successful. [ 952.156544][ T2387] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 952.156553][ T2387] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 952.156593][ T2387] pvrusb2: Failed to submit write-control URB status=-19 [ 952.157449][ T2387] usb 8-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 952.157476][ T2387] usb 8-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 952.218061][T16768] pvrusb2: Device being rendered inoperable [ 952.730108][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.730131][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.790811][T18183] FAULT_INJECTION: forcing a failure. [ 952.790811][T18183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.790844][T18183] CPU: 1 UID: 0 PID: 18183 Comm: syz.8.3944 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 952.790869][T18183] Tainted: [L]=SOFTLOCKUP [ 952.790875][T18183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 952.790886][T18183] Call Trace: [ 952.790894][T18183] [ 952.790902][T18183] dump_stack_lvl+0xe8/0x150 [ 952.790931][T18183] should_fail_ex+0x467/0x600 [ 952.790960][T18183] _copy_to_user+0x31/0xb0 [ 952.790988][T18183] simple_read_from_buffer+0xe1/0x170 [ 952.791017][T18183] proc_fail_nth_read+0x1be/0x230 [ 952.791043][T18183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 952.791068][T18183] ? rw_verify_area+0x250/0x4d0 [ 952.791094][T18183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 952.791115][T18183] vfs_read+0x219/0xa90 [ 952.791147][T18183] ? __pfx_vfs_read+0x10/0x10 [ 952.791173][T18183] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 952.791196][T18183] ? lockdep_hardirqs_on+0x7a/0x110 [ 952.791217][T18183] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 952.791237][T18183] ? mutex_lock_nested+0x152/0x1d0 [ 952.791261][T18183] ? fdget_pos+0x252/0x320 [ 952.791292][T18183] ksys_read+0x156/0x270 [ 952.791318][T18183] ? __pfx_ksys_read+0x10/0x10 [ 952.791358][T18183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.791378][T18183] do_syscall_64+0x174/0x580 [ 952.791399][T18183] ? trace_irq_disable+0x3b/0x140 [ 952.791421][T18183] ? clear_bhb_loop+0x40/0x90 [ 952.791443][T18183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.791460][T18183] RIP: 0033:0x7f3b0246d68e [ 952.791477][T18183] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 952.791490][T18183] RSP: 002b:00007f3b006fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 952.791510][T18183] RAX: ffffffffffffffda RBX: 00007f3b006fe6c0 RCX: 00007f3b0246d68e [ 952.791524][T18183] RDX: 000000000000000f RSI: 00007f3b006fe0a0 RDI: 0000000000000003 [ 952.791536][T18183] RBP: 00007f3b006fe090 R08: 0000000000000000 R09: 0000000000000000 [ 952.791548][T18183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.791559][T18183] R13: 00007f3b02726038 R14: 00007f3b02725fa0 R15: 00007ffc066d5558 [ 952.791591][T18183] [ 953.012742][T18189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.016766][T18189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.213389][T18191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.213906][T18191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.552207][T18197] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3949'. [ 954.476324][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.476345][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.908467][T18239] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3959'. [ 956.100016][ T6413] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 956.280039][ T6413] usb 7-1: Using ep0 maxpacket: 8 [ 956.286116][ T6413] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 956.286145][ T6413] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.286172][ T6413] usb 7-1: Product: syz [ 956.286185][ T6413] usb 7-1: Manufacturer: syz [ 956.286197][ T6413] usb 7-1: SerialNumber: syz [ 956.292409][ T6413] usb 7-1: config 0 descriptor?? [ 956.365899][T18243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.366686][T18243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.488348][T18244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.488916][T18244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.512929][ T6413] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 956.540108][ T5599] Bluetooth: hci3: command 0x0405 tx timeout [ 957.116233][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 957.116245][ T37] audit: type=1326 audit(1782595039.718:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18248 comm="syz.9.3964" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7293bce59 code=0x0 [ 957.164706][T18254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 957.348205][T18255] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.3965'. [ 958.533929][ T6413] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 958.545899][ T6413] usb 7-1: USB disconnect, device number 26 [ 959.570502][T18287] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3971'. [ 961.233493][T18303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.233853][T18303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.271129][ T36] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 961.448058][ T36] usb 7-1: Using ep0 maxpacket: 32 [ 961.455189][ T36] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.455219][ T36] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 961.455252][ T36] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 961.455272][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.497811][ T36] usb 7-1: config 0 descriptor?? [ 961.872106][T18313] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3981'. [ 962.197834][T18314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.200433][T18314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.372206][T18316] FAULT_INJECTION: forcing a failure. [ 962.372206][T18316] name failslab, interval 1, probability 0, space 0, times 0 [ 962.372240][T18316] CPU: 0 UID: 0 PID: 18316 Comm: syz.2.3982 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 962.372265][T18316] Tainted: [L]=SOFTLOCKUP [ 962.372272][T18316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 962.372283][T18316] Call Trace: [ 962.372290][T18316] [ 962.372298][T18316] dump_stack_lvl+0xe8/0x150 [ 962.372329][T18316] should_fail_ex+0x467/0x600 [ 962.372356][T18316] should_failslab+0xa8/0x100 [ 962.372383][T18316] __kmalloc_noprof+0xfe/0x780 [ 962.372406][T18316] ? tomoyo_encode+0x2ad/0x570 [ 962.372423][T18316] ? tomoyo_encode+0x2ad/0x570 [ 962.372447][T18316] tomoyo_encode+0x2ad/0x570 [ 962.372471][T18316] tomoyo_realpath_from_path+0x5fa/0x640 [ 962.372499][T18316] ? tomoyo_path_number_perm+0x219/0x5f0 [ 962.372525][T18316] tomoyo_path_number_perm+0x246/0x5f0 [ 962.372551][T18316] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 962.372574][T18316] ? __lock_acquire+0x683/0x2ce0 [ 962.372609][T18316] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 962.372629][T18316] ? hook_file_ioctl+0x1f3/0x600 [ 962.372648][T18316] ? lockdep_hardirqs_on+0x7a/0x110 [ 962.372684][T18316] ? __fget_files+0x2a/0x420 [ 962.372709][T18316] ? __fget_files+0x2a/0x420 [ 962.372728][T18316] ? __fget_files+0x3a8/0x420 [ 962.372748][T18316] ? __fget_files+0x2a/0x420 [ 962.372772][T18316] security_file_ioctl+0xc3/0x2a0 [ 962.372799][T18316] __se_sys_ioctl+0x47/0x170 [ 962.372824][T18316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.372844][T18316] do_syscall_64+0x174/0x580 [ 962.372864][T18316] ? trace_irq_disable+0x3b/0x140 [ 962.372886][T18316] ? clear_bhb_loop+0x40/0x90 [ 962.372908][T18316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.372926][T18316] RIP: 0033:0x7f3f36c0ce59 [ 962.372944][T18316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.372958][T18316] RSP: 002b:00007f3f34e5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 962.372977][T18316] RAX: ffffffffffffffda RBX: 00007f3f36e85fa0 RCX: 00007f3f36c0ce59 [ 962.372996][T18316] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 962.373008][T18316] RBP: 00007f3f34e5e090 R08: 0000000000000000 R09: 0000000000000000 [ 962.373019][T18316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.373030][T18316] R13: 00007f3f36e86038 R14: 00007f3f36e85fa0 R15: 00007ffd0e4fd938 [ 962.373060][T18316] [ 962.374405][T18316] ERROR: Out of memory at tomoyo_realpath_from_path. [ 962.784394][ T36] usb 7-1: string descriptor 0 read error: -71 [ 962.843381][ T36] usb 7-1: USB disconnect, device number 27 [ 962.847528][T18318] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3983'. [ 964.131761][T18338] FAULT_INJECTION: forcing a failure. [ 964.131761][T18338] name failslab, interval 1, probability 0, space 0, times 0 [ 964.131795][T18338] CPU: 0 UID: 0 PID: 18338 Comm: syz.6.3987 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 964.131820][T18338] Tainted: [L]=SOFTLOCKUP [ 964.131827][T18338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 964.131837][T18338] Call Trace: [ 964.131845][T18338] [ 964.131852][T18338] dump_stack_lvl+0xe8/0x150 [ 964.131882][T18338] should_fail_ex+0x467/0x600 [ 964.131910][T18338] should_failslab+0xa8/0x100 [ 964.131936][T18338] kmem_cache_alloc_noprof+0xa4/0x650 [ 964.131959][T18338] ? mas_alloc_nodes+0x291/0x350 [ 964.131990][T18338] ? mas_alloc_nodes+0x291/0x350 [ 964.132015][T18338] mas_alloc_nodes+0x291/0x350 [ 964.132038][T18338] mas_preallocate+0x2cf/0x630 [ 964.132063][T18338] ? __pfx_mas_preallocate+0x10/0x10 [ 964.132089][T18338] ? anon_vma_name+0x61/0x210 [ 964.132121][T18338] ? __mas_set_range+0x11a/0x3a0 [ 964.132142][T18338] __split_vma+0x33d/0xa40 [ 964.132165][T18338] ? mas_next_slot+0xc94/0xd70 [ 964.132188][T18338] ? __pfx___split_vma+0x10/0x10 [ 964.132217][T18338] ? mas_find+0xab1/0xcf0 [ 964.132237][T18338] ? userfaultfd_unmap_prep+0x99/0x3e0 [ 964.132266][T18338] vms_gather_munmap_vmas+0x4e3/0x1370 [ 964.132308][T18338] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 964.132344][T18338] ? mas_find+0xa23/0xcf0 [ 964.132371][T18338] mmap_region+0x914/0x2310 [ 964.132404][T18338] ? __lock_acquire+0x683/0x2ce0 [ 964.132428][T18338] ? __pfx_mmap_region+0x10/0x10 [ 964.132446][T18338] ? __lock_acquire+0x683/0x2ce0 [ 964.132475][T18338] ? __lock_acquire+0x683/0x2ce0 [ 964.132563][T18338] ? __lock_acquire+0x683/0x2ce0 [ 964.132607][T18338] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 964.132640][T18338] ? cap_mmap_addr+0xaf/0x100 [ 964.132667][T18338] ? bpf_lsm_mmap_addr+0x9/0x50 [ 964.132686][T18338] ? security_mmap_addr+0x71/0x240 [ 964.132714][T18338] ? shmem_mapping+0xd/0x50 [ 964.132732][T18338] ? memfd_check_seals_mmap+0x16e/0x210 [ 964.132758][T18338] do_mmap+0xc1e/0x10b0 [ 964.132787][T18338] ? __pfx_do_mmap+0x10/0x10 [ 964.132806][T18338] ? rwbase_write_lock+0x550/0x720 [ 964.132841][T18338] vm_mmap_pgoff+0x275/0x4e0 [ 964.132869][T18338] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 964.132894][T18338] ? __fget_files+0x2a/0x420 [ 964.132915][T18338] ? __fget_files+0x3a8/0x420 [ 964.132935][T18338] ? __fget_files+0x2a/0x420 [ 964.132960][T18338] ksys_mmap_pgoff+0x4a6/0x720 [ 964.132982][T18338] ? __x64_sys_mmap+0x7f/0x140 [ 964.133003][T18338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.133030][T18338] do_syscall_64+0x174/0x580 [ 964.133052][T18338] ? clear_bhb_loop+0x40/0x90 [ 964.133075][T18338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.133093][T18338] RIP: 0033:0x7faef572ce59 [ 964.133145][T18338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.133160][T18338] RSP: 002b:00007faef395d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 964.133187][T18338] RAX: ffffffffffffffda RBX: 00007faef59a6090 RCX: 00007faef572ce59 [ 964.133200][T18338] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 964.133212][T18338] RBP: 00007faef395d090 R08: 0000000000000003 R09: 0000000000000000 [ 964.133224][T18338] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 964.133236][T18338] R13: 00007faef59a6128 R14: 00007faef59a6090 R15: 00007fff78a7a838 [ 964.133267][T18338] [ 964.714490][T18346] FAULT_INJECTION: forcing a failure. [ 964.714490][T18346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 964.714514][T18346] CPU: 1 UID: 0 PID: 18346 Comm: syz.6.3991 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 964.714529][T18346] Tainted: [L]=SOFTLOCKUP [ 964.714532][T18346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 964.714539][T18346] Call Trace: [ 964.714544][T18346] [ 964.714549][T18346] dump_stack_lvl+0xe8/0x150 [ 964.714567][T18346] should_fail_ex+0x467/0x600 [ 964.714584][T18346] _copy_from_iter+0x1d3/0x1660 [ 964.714605][T18346] ? __pfx__copy_from_iter+0x10/0x10 [ 964.714617][T18346] ? trace_kmalloc+0x2a/0xf0 [ 964.714632][T18346] ? __kmalloc_noprof+0x43b/0x780 [ 964.714644][T18346] ? kernfs_fop_write_iter+0x158/0x540 [ 964.714760][T18346] kernfs_fop_write_iter+0x19b/0x540 [ 964.714788][T18346] vfs_write+0x61e/0xbb0 [ 964.714808][T18346] ? __pfx_vfs_write+0x10/0x10 [ 964.714823][T18346] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 964.714837][T18346] ? lockdep_hardirqs_on+0x7a/0x110 [ 964.714850][T18346] ? mutex_lock_nested+0x152/0x1d0 [ 964.714863][T18346] ? fdget_pos+0x252/0x320 [ 964.714881][T18346] ksys_write+0x156/0x270 [ 964.714896][T18346] ? __pfx_ksys_write+0x10/0x10 [ 964.714914][T18346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.714925][T18346] do_syscall_64+0x174/0x580 [ 964.714939][T18346] ? trace_irq_disable+0x3b/0x140 [ 964.714952][T18346] ? clear_bhb_loop+0x40/0x90 [ 964.714964][T18346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.714974][T18346] RIP: 0033:0x7faef572ce59 [ 964.714986][T18346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.714994][T18346] RSP: 002b:00007faef397e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 964.715006][T18346] RAX: ffffffffffffffda RBX: 00007faef59a5fa0 RCX: 00007faef572ce59 [ 964.715013][T18346] RDX: 0000000000000009 RSI: 0000200000000180 RDI: 0000000000000007 [ 964.715019][T18346] RBP: 00007faef397e090 R08: 0000000000000000 R09: 0000000000000000 [ 964.715025][T18346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.715031][T18346] R13: 00007faef59a6038 R14: 00007faef59a5fa0 R15: 00007fff78a7a838 [ 964.715047][T18346] [ 965.014373][T18352] FAULT_INJECTION: forcing a failure. [ 965.014373][T18352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 965.014407][T18352] CPU: 0 UID: 0 PID: 18352 Comm: syz.6.3993 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 965.014432][T18352] Tainted: [L]=SOFTLOCKUP [ 965.014439][T18352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 965.014450][T18352] Call Trace: [ 965.014458][T18352] [ 965.014466][T18352] dump_stack_lvl+0xe8/0x150 [ 965.014493][T18352] should_fail_ex+0x467/0x600 [ 965.014520][T18352] _copy_from_user+0x2d/0xb0 [ 965.014546][T18352] core_sys_select+0x673/0xb40 [ 965.014566][T18352] ? get_pid_task+0x20/0x1f0 [ 965.014598][T18352] ? __pfx_core_sys_select+0x10/0x10 [ 965.014640][T18352] ? __pfx_set_user_sigmask+0x10/0x10 [ 965.014665][T18352] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 965.014699][T18352] __se_sys_pselect6+0x267/0x320 [ 965.014725][T18352] ? __pfx___se_sys_pselect6+0x10/0x10 [ 965.014745][T18352] ? __pfx_ksys_write+0x10/0x10 [ 965.014777][T18352] ? __x64_sys_pselect6+0x21/0xf0 [ 965.014797][T18352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.014816][T18352] do_syscall_64+0x174/0x580 [ 965.014835][T18352] ? trace_irq_disable+0x3b/0x140 [ 965.014855][T18352] ? clear_bhb_loop+0x40/0x90 [ 965.014874][T18352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.014890][T18352] RIP: 0033:0x7faef572ce59 [ 965.014907][T18352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.014921][T18352] RSP: 002b:00007faef397e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 965.014940][T18352] RAX: ffffffffffffffda RBX: 00007faef59a5fa0 RCX: 00007faef572ce59 [ 965.014954][T18352] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 965.014965][T18352] RBP: 00007faef397e090 R08: 0000000000000000 R09: 0000000000000000 [ 965.014977][T18352] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 965.014988][T18352] R13: 00007faef59a6038 R14: 00007faef59a5fa0 R15: 00007fff78a7a838 [ 965.015018][T18352] [ 966.910355][T18363] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 966.910355][T18363] The task syz.9.3995 (18363) triggered the difference, watch for misbehavior. [ 967.075914][T18363] trusted_key: encrypted_key: insufficient parameters specified [ 968.058989][T18367] input: syz1 as /devices/virtual/input/input35 [ 969.634733][T18374] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3999'. [ 977.037110][T18450] trusted_key: encrypted_key: insufficient parameters specified [ 977.374161][T18460] netlink: 408 bytes leftover after parsing attributes in process `syz.2.4009'. [ 977.650026][ T5970] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 977.780051][ T5970] usb 3-1: device descriptor read/64, error -71 [ 978.020030][ T5970] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 978.077654][T18474] FAULT_INJECTION: forcing a failure. [ 978.077654][T18474] name failslab, interval 1, probability 0, space 0, times 0 [ 978.077677][T18474] CPU: 0 UID: 0 PID: 18474 Comm: syz.8.4012 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 978.077692][T18474] Tainted: [L]=SOFTLOCKUP [ 978.077695][T18474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 978.077702][T18474] Call Trace: [ 978.077706][T18474] [ 978.077711][T18474] dump_stack_lvl+0xe8/0x150 [ 978.077729][T18474] should_fail_ex+0x467/0x600 [ 978.077746][T18474] should_failslab+0xa8/0x100 [ 978.077761][T18474] __kmalloc_cache_node_noprof+0xa9/0x6a0 [ 978.077776][T18474] ? __get_vm_area_node+0x136/0x300 [ 978.077792][T18474] ? __get_vm_area_node+0x136/0x300 [ 978.077806][T18474] __get_vm_area_node+0x136/0x300 [ 978.077820][T18474] __vmalloc_node_range_noprof+0x358/0x1730 [ 978.077832][T18474] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 978.077850][T18474] ? is_bpf_text_address+0x26/0x2b0 [ 978.077872][T18474] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 978.077883][T18474] ? is_bpf_text_address+0x26/0x2b0 [ 978.077897][T18474] ? kernel_text_address+0xa5/0xe0 [ 978.077913][T18474] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 978.077924][T18474] __vmalloc_noprof+0xd2/0x120 [ 978.077936][T18474] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 978.077949][T18474] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 978.077961][T18474] ? bpf_prog_alloc+0x2a/0x1a0 [ 978.077974][T18474] bpf_prog_alloc+0x3c/0x1a0 [ 978.077987][T18474] bpf_prog_load+0x7f8/0x1c00 [ 978.078006][T18474] ? __pfx_bpf_prog_load+0x10/0x10 [ 978.078031][T18474] __sys_bpf+0xd0d/0xd90 [ 978.078047][T18474] ? __pfx___sys_bpf+0x10/0x10 [ 978.078064][T18474] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 978.078088][T18474] ? rt_mutex_slowunlock+0x219/0x460 [ 978.078129][T18474] ? ksys_write+0x248/0x270 [ 978.078155][T18474] ? __pfx_ksys_write+0x10/0x10 [ 978.078183][T18474] __x64_sys_bpf+0xba/0xd0 [ 978.078202][T18474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.078217][T18474] do_syscall_64+0x174/0x580 [ 978.078230][T18474] ? trace_irq_disable+0x3b/0x140 [ 978.078242][T18474] ? clear_bhb_loop+0x40/0x90 [ 978.078254][T18474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.078264][T18474] RIP: 0033:0x7f3b024ace59 [ 978.078275][T18474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.078283][T18474] RSP: 002b:00007f3b006fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 978.078295][T18474] RAX: ffffffffffffffda RBX: 00007f3b02725fa0 RCX: 00007f3b024ace59 [ 978.078302][T18474] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 978.078309][T18474] RBP: 00007f3b006fe090 R08: 0000000000000000 R09: 0000000000000000 [ 978.078315][T18474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.078320][T18474] R13: 00007f3b02726038 R14: 00007f3b02725fa0 R15: 00007ffc066d5558 [ 978.078336][T18474] [ 978.091776][T18474] syz.8.4012: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 978.091847][T18474] CPU: 0 UID: 0 PID: 18474 Comm: syz.8.4012 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 978.091871][T18474] Tainted: [L]=SOFTLOCKUP [ 978.091877][T18474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 978.091888][T18474] Call Trace: [ 978.091895][T18474] [ 978.091903][T18474] dump_stack_lvl+0xe8/0x150 [ 978.091930][T18474] warn_alloc+0x24c/0x270 [ 978.091959][T18474] ? __pfx_warn_alloc+0x10/0x10 [ 978.091988][T18474] ? __get_vm_area_node+0x2af/0x300 [ 978.092014][T18474] __vmalloc_node_range_noprof+0x37d/0x1730 [ 978.092041][T18474] ? is_bpf_text_address+0x26/0x2b0 [ 978.092083][T18474] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 978.092103][T18474] ? is_bpf_text_address+0x26/0x2b0 [ 978.092127][T18474] ? kernel_text_address+0xa5/0xe0 [ 978.092155][T18474] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 978.092174][T18474] __vmalloc_noprof+0xd2/0x120 [ 978.092194][T18474] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 978.092217][T18474] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 978.092238][T18474] ? bpf_prog_alloc+0x2a/0x1a0 [ 978.092261][T18474] bpf_prog_alloc+0x3c/0x1a0 [ 978.092284][T18474] bpf_prog_load+0x7f8/0x1c00 [ 978.092317][T18474] ? __pfx_bpf_prog_load+0x10/0x10 [ 978.092361][T18474] __sys_bpf+0xd0d/0xd90 [ 978.092389][T18474] ? __pfx___sys_bpf+0x10/0x10 [ 978.092413][T18474] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 978.092437][T18474] ? rt_mutex_slowunlock+0x219/0x460 [ 978.092479][T18474] ? ksys_write+0x248/0x270 [ 978.092505][T18474] ? __pfx_ksys_write+0x10/0x10 [ 978.092531][T18474] __x64_sys_bpf+0xba/0xd0 [ 978.092550][T18474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.092575][T18474] do_syscall_64+0x174/0x580 [ 978.092594][T18474] ? trace_irq_disable+0x3b/0x140 [ 978.092613][T18474] ? clear_bhb_loop+0x40/0x90 [ 978.092633][T18474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.092650][T18474] RIP: 0033:0x7f3b024ace59 [ 978.092668][T18474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.092681][T18474] RSP: 002b:00007f3b006fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 978.092700][T18474] RAX: ffffffffffffffda RBX: 00007f3b02725fa0 RCX: 00007f3b024ace59 [ 978.092713][T18474] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 978.092724][T18474] RBP: 00007f3b006fe090 R08: 0000000000000000 R09: 0000000000000000 [ 978.092735][T18474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.092743][T18474] R13: 00007f3b02726038 R14: 00007f3b02725fa0 R15: 00007ffc066d5558 [ 978.092769][T18474] [ 978.093426][T18474] Mem-Info: [ 978.093436][T18474] active_anon:1198 inactive_anon:11286 isolated_anon:0 [ 978.093436][T18474] active_file:19302 inactive_file:44815 isolated_file:0 [ 978.093436][T18474] unevictable:768 dirty:136 writeback:0 [ 978.093436][T18474] slab_reclaimable:12721 slab_unreclaimable:112461 [ 978.093436][T18474] mapped:33137 shmem:3629 pagetables:4156 [ 978.093436][T18474] sec_pagetables:0 bounce:0 [ 978.093436][T18474] kernel_misc_reclaimable:0 [ 978.093436][T18474] free:1280725 free_pcp:3780 free_cma:0 [ 978.093484][T18474] Node 0 active_anon:4792kB inactive_anon:45144kB active_file:77008kB inactive_file:179260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132548kB dirty:540kB writeback:0kB shmem:12980kB kernel_stack:14972kB pagetables:16524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 978.093529][T18474] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 978.093578][T18474] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 978.093627][T18474] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 978.093656][T18474] Node 0 DMA32 free:1174320kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4792kB inactive_anon:45144kB active_file:77008kB inactive_file:179260kB unevictable:1536kB writepending:540kB zspages:0kB present:3129332kB managed:2565388kB mlocked:0kB bounce:0kB free_pcp:14896kB local_pcp:5608kB free_cma:0kB [ 978.093708][T18474] lowmem_reserve[]: 0 0 0 0 0 [ 978.093735][T18474] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 978.093784][T18474] lowmem_reserve[]: 0 0 0 0 0 [ 978.093811][T18474] Node 1 Normal free:3933220kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:224kB local_pcp:0kB free_cma:0kB [ 978.093861][T18474] lowmem_reserve[]: 0 0 0 0 0 [ 978.093888][T18474] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 978.093984][T18474] Node 0 DMA32: 2*4kB (ME) 1433*8kB (UME) 1218*16kB (UM) 574*32kB (UME) 555*64kB (UME) 615*128kB (UME) 482*256kB (UME) 315*512kB (UM) 197*1024kB (UME) 8*2048kB (UM) 124*4096kB (UME) = 1174256kB [ 978.094112][T18474] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 978.094194][T18474] Node 1 Normal: 1*4kB (U) 4*8kB (UM) 2*16kB (UM) 1*32kB (M) 3*64kB (UM) 4*128kB (UM) 3*256kB (UM) 5*512kB (UM) 1*1024kB (M) 0*2048kB 959*4096kB (M) = 3933220kB [ 978.094329][T18474] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 978.094343][T18474] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 978.094358][T18474] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 978.094371][T18474] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 978.094386][T18474] 67742 total pagecache pages [ 978.094393][T18474] 0 pages in swap cache [ 978.094400][T18474] Free swap = 124996kB [ 978.094407][T18474] Total swap = 124996kB [ 978.094414][T18474] 2097051 pages RAM [ 978.094421][T18474] 0 pages HighMem/MovableOnly [ 978.094427][T18474] 424047 pages reserved [ 978.094434][T18474] 0 pages cma reserved [ 978.173858][ T5970] usb 3-1: device descriptor read/64, error -71 [ 978.291076][ T5970] usb usb3-port1: attempt power cycle [ 979.131380][ T5970] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 979.157292][ T5970] usb 3-1: device descriptor read/8, error -71 [ 979.455093][T18476] FAULT_INJECTION: forcing a failure. [ 979.455093][T18476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 979.455118][T18476] CPU: 0 UID: 0 PID: 18476 Comm: syz.8.4013 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 979.455133][T18476] Tainted: [L]=SOFTLOCKUP [ 979.455137][T18476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 979.455143][T18476] Call Trace: [ 979.455147][T18476] [ 979.455152][T18476] dump_stack_lvl+0xe8/0x150 [ 979.455170][T18476] should_fail_ex+0x467/0x600 [ 979.455187][T18476] _copy_to_user+0x31/0xb0 [ 979.455203][T18476] copy_siginfo_to_user+0x22/0xc0 [ 979.455219][T18476] x64_setup_rt_frame+0x765/0xc50 [ 979.455230][T18476] ? rt_spin_unlock+0x157/0x200 [ 979.455255][T18476] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 979.455270][T18476] arch_do_signal_or_restart+0x45b/0x860 [ 979.455287][T18476] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 979.455300][T18476] ? __x64_sys_preadv+0x28e/0x2c0 [ 979.455315][T18476] exit_to_user_mode_loop+0x104/0x730 [ 979.455328][T18476] ? rcu_is_watching+0x15/0xb0 [ 979.455344][T18476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.455355][T18476] do_syscall_64+0x353/0x580 [ 979.455368][T18476] ? clear_bhb_loop+0x40/0x90 [ 979.455380][T18476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.455390][T18476] RIP: 0033:0x7f3b024ace57 [ 979.455400][T18476] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 979.455411][T18476] RSP: 002b:00007f3b006fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 979.455422][T18476] RAX: 0000000000000127 RBX: 00007f3b02725fa0 RCX: 00007f3b024ace59 [ 979.455429][T18476] RDX: 0000000000000001 RSI: 0000200000001040 RDI: 0000000000000003 [ 979.455436][T18476] RBP: 00007f3b006fe090 R08: 0000000000000000 R09: 0000000000000000 [ 979.455442][T18476] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 979.455448][T18476] R13: 00007f3b02726038 R14: 00007f3b02725fa0 R15: 00007ffc066d5558 [ 979.455463][T18476] [ 979.489945][ T5970] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 979.525696][ T5970] usb 3-1: device descriptor read/8, error -71 [ 979.630451][ T5970] usb usb3-port1: unable to enumerate USB device [ 980.083151][T18482] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4015'. [ 980.104313][T18483] FAULT_INJECTION: forcing a failure. [ 980.104313][T18483] name failslab, interval 1, probability 0, space 0, times 0 [ 980.104347][T18483] CPU: 0 UID: 0 PID: 18483 Comm: syz.9.4016 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 980.104372][T18483] Tainted: [L]=SOFTLOCKUP [ 980.104379][T18483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 980.104390][T18483] Call Trace: [ 980.104397][T18483] [ 980.104406][T18483] dump_stack_lvl+0xe8/0x150 [ 980.104435][T18483] should_fail_ex+0x467/0x600 [ 980.104465][T18483] should_failslab+0xa8/0x100 [ 980.104492][T18483] __kmalloc_cache_noprof+0xa0/0x6b0 [ 980.104515][T18483] ? rcu_is_watching+0x15/0xb0 [ 980.104542][T18483] ? llc_sap_open+0xf5/0x3f0 [ 980.104669][T18483] ? llc_sap_open+0xf5/0x3f0 [ 980.104694][T18483] ? llc_sap_open+0x2e/0x3f0 [ 980.104721][T18483] llc_sap_open+0xf5/0x3f0 [ 980.104751][T18483] llc_ui_autobind+0x1ee/0x4f0 [ 980.104833][T18483] llc_ui_connect+0x1d7/0xd50 [ 980.104864][T18483] ? __might_fault+0xaf/0x130 [ 980.104890][T18483] ? __pfx_llc_ui_connect+0x10/0x10 [ 980.104915][T18483] ? tomoyo_socket_connect_permission+0x199/0x270 [ 980.104937][T18483] ? hook_socket_connect+0x1f1/0x470 [ 980.104967][T18483] ? bpf_lsm_socket_connect+0x9/0x20 [ 980.104990][T18483] __sys_connect+0x336/0x470 [ 980.105015][T18483] ? __pfx___sys_connect+0x10/0x10 [ 980.105051][T18483] ? __pfx_ksys_write+0x10/0x10 [ 980.105083][T18483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.105103][T18483] __x64_sys_connect+0x7a/0x90 [ 980.105126][T18483] do_syscall_64+0x174/0x580 [ 980.105147][T18483] ? trace_irq_disable+0x3b/0x140 [ 980.105170][T18483] ? clear_bhb_loop+0x40/0x90 [ 980.105193][T18483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.105211][T18483] RIP: 0033:0x7ff7293bce59 [ 980.105231][T18483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.105245][T18483] RSP: 002b:00007ff727616028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 980.105265][T18483] RAX: ffffffffffffffda RBX: 00007ff729635fa0 RCX: 00007ff7293bce59 [ 980.105279][T18483] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 980.105290][T18483] RBP: 00007ff727616090 R08: 0000000000000000 R09: 0000000000000000 [ 980.105301][T18483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.105312][T18483] R13: 00007ff729636038 R14: 00007ff729635fa0 R15: 00007ffe33acb488 [ 980.105345][T18483] [ 983.560331][ T4965] udevd[4965]: worker [5795] /devices/platform/dummy_hcd.7/usb8/8-1 is taking a long time [ 984.670600][T18500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 984.824438][T18501] netlink: 16215 bytes leftover after parsing attributes in process `syz.6.4020'. [ 985.341940][T18503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.345692][T18503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.250324][T18517] netlink: 6032 bytes leftover after parsing attributes in process `syz.6.4026'. [ 986.328834][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4026'. [ 986.479521][T18527] ieee802154 phy0 wpan0: encryption failed: -22 [ 988.875844][T18539] FAULT_INJECTION: forcing a failure. [ 988.875844][T18539] name failslab, interval 1, probability 0, space 0, times 0 [ 988.875867][T18539] CPU: 0 UID: 0 PID: 18539 Comm: syz.9.4030 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 988.875882][T18539] Tainted: [L]=SOFTLOCKUP [ 988.875886][T18539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 988.875892][T18539] Call Trace: [ 988.875896][T18539] [ 988.875901][T18539] dump_stack_lvl+0xe8/0x150 [ 988.875920][T18539] should_fail_ex+0x467/0x600 [ 988.875939][T18539] should_failslab+0xa8/0x100 [ 988.875965][T18539] kmem_cache_alloc_noprof+0xa4/0x650 [ 988.875988][T18539] ? anon_vma_clone+0x3e7/0x9e0 [ 988.876009][T18539] ? anon_vma_clone+0x3e7/0x9e0 [ 988.876030][T18539] anon_vma_clone+0x3e7/0x9e0 [ 988.876047][T18539] __split_vma+0x3a5/0xa40 [ 988.876064][T18539] ? __pfx___split_vma+0x10/0x10 [ 988.876091][T18539] vms_gather_munmap_vmas+0x322/0x1370 [ 988.876111][T18539] ? mtree_range_walk+0x70a/0x8c0 [ 988.876128][T18539] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 988.876147][T18539] ? mas_find+0xa23/0xcf0 [ 988.876162][T18539] mmap_region+0x914/0x2310 [ 988.876179][T18539] ? __lock_acquire+0x683/0x2ce0 [ 988.876192][T18539] ? __pfx_mmap_region+0x10/0x10 [ 988.876202][T18539] ? __lock_acquire+0x683/0x2ce0 [ 988.876217][T18539] ? __lock_acquire+0x683/0x2ce0 [ 988.876262][T18539] ? __lock_acquire+0x683/0x2ce0 [ 988.876274][T18539] ? __pfx_process_measurement+0x10/0x10 [ 988.876294][T18539] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 988.876311][T18539] ? __lock_acquire+0x683/0x2ce0 [ 988.876324][T18539] ? cap_mmap_addr+0xaf/0x100 [ 988.876339][T18539] ? bpf_lsm_mmap_addr+0x9/0x50 [ 988.876351][T18539] ? security_mmap_addr+0x71/0x240 [ 988.876366][T18539] ? shmem_mapping+0xd/0x50 [ 988.876377][T18539] ? memfd_check_seals_mmap+0xcb/0x210 [ 988.876391][T18539] do_mmap+0xc1e/0x10b0 [ 988.876407][T18539] ? __pfx_do_mmap+0x10/0x10 [ 988.876417][T18539] ? rwbase_write_lock+0x550/0x720 [ 988.876435][T18539] vm_mmap_pgoff+0x275/0x4e0 [ 988.876449][T18539] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 988.876463][T18539] ? __fget_files+0x2a/0x420 [ 988.876475][T18539] ? __fget_files+0x3a8/0x420 [ 988.876486][T18539] ? __fget_files+0x2a/0x420 [ 988.876499][T18539] ksys_mmap_pgoff+0x4a6/0x720 [ 988.876511][T18539] ? __x64_sys_mmap+0x7f/0x140 [ 988.876523][T18539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.876534][T18539] do_syscall_64+0x174/0x580 [ 988.876547][T18539] ? clear_bhb_loop+0x40/0x90 [ 988.876559][T18539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.876568][T18539] RIP: 0033:0x7ff7293bce59 [ 988.876579][T18539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.876591][T18539] RSP: 002b:00007ff7275d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 988.876602][T18539] RAX: ffffffffffffffda RBX: 00007ff729636180 RCX: 00007ff7293bce59 [ 988.876610][T18539] RDX: 000000000100000f RSI: 0000000000002000 RDI: 0000200000ff9000 [ 988.876617][T18539] RBP: 00007ff7275d4090 R08: 0000000000000007 R09: 0000000000000000 [ 988.876623][T18539] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 988.876629][T18539] R13: 00007ff729636218 R14: 00007ff729636180 R15: 00007ffe33acb488 [ 988.876645][T18539] [ 989.375138][T18545] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4032'. [ 989.630660][T18548] FAULT_INJECTION: forcing a failure. [ 989.630660][T18548] name failslab, interval 1, probability 0, space 0, times 0 [ 989.630693][T18548] CPU: 1 UID: 0 PID: 18548 Comm: syz.8.4033 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 989.630716][T18548] Tainted: [L]=SOFTLOCKUP [ 989.630722][T18548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 989.630731][T18548] Call Trace: [ 989.630739][T18548] [ 989.630747][T18548] dump_stack_lvl+0xe8/0x150 [ 989.630773][T18548] should_fail_ex+0x467/0x600 [ 989.630797][T18548] should_failslab+0xa8/0x100 [ 989.630820][T18548] __kmalloc_noprof+0xfe/0x780 [ 989.630840][T18548] ? tomoyo_encode+0x2ad/0x570 [ 989.630857][T18548] ? tomoyo_encode+0x2ad/0x570 [ 989.630877][T18548] tomoyo_encode+0x2ad/0x570 [ 989.630900][T18548] tomoyo_realpath_from_path+0x5fa/0x640 [ 989.630927][T18548] ? tomoyo_path_number_perm+0x219/0x5f0 [ 989.630951][T18548] tomoyo_path_number_perm+0x246/0x5f0 [ 989.630976][T18548] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 989.630996][T18548] ? __lock_acquire+0x683/0x2ce0 [ 989.631031][T18548] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 989.631051][T18548] ? hook_file_ioctl+0x1f3/0x600 [ 989.631071][T18548] ? lockdep_hardirqs_on+0x7a/0x110 [ 989.631107][T18548] ? __fget_files+0x2a/0x420 [ 989.631132][T18548] ? __fget_files+0x2a/0x420 [ 989.631151][T18548] ? __fget_files+0x3a8/0x420 [ 989.631168][T18548] ? __fget_files+0x2a/0x420 [ 989.631191][T18548] security_file_ioctl+0xc3/0x2a0 [ 989.631218][T18548] __se_sys_ioctl+0x47/0x170 [ 989.631242][T18548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.631262][T18548] do_syscall_64+0x174/0x580 [ 989.631281][T18548] ? trace_irq_disable+0x3b/0x140 [ 989.631302][T18548] ? clear_bhb_loop+0x40/0x90 [ 989.631324][T18548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.631339][T18548] RIP: 0033:0x7f3b024ace59 [ 989.631356][T18548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.631370][T18548] RSP: 002b:00007f3b006fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 989.631388][T18548] RAX: ffffffffffffffda RBX: 00007f3b02725fa0 RCX: 00007f3b024ace59 [ 989.631400][T18548] RDX: 0000200000000040 RSI: 000000008004e500 RDI: 0000000000000003 [ 989.631412][T18548] RBP: 00007f3b006fe090 R08: 0000000000000000 R09: 0000000000000000 [ 989.631423][T18548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.631432][T18548] R13: 00007f3b02726038 R14: 00007f3b02725fa0 R15: 00007ffc066d5558 [ 989.631462][T18548] [ 989.634484][T18548] ERROR: Out of memory at tomoyo_realpath_from_path. [ 989.822705][T18552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 989.982366][T18554] netlink: 16215 bytes leftover after parsing attributes in process `syz.7.4035'. [ 990.307335][T18559] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4038'. [ 993.290594][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.290656][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.451847][T18601] FAULT_INJECTION: forcing a failure. [ 995.451847][T18601] name failslab, interval 1, probability 0, space 0, times 0 [ 995.451879][T18601] CPU: 1 UID: 0 PID: 18601 Comm: syz.2.4043 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 995.451904][T18601] Tainted: [L]=SOFTLOCKUP [ 995.451910][T18601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 995.451920][T18601] Call Trace: [ 995.451928][T18601] [ 995.451935][T18601] dump_stack_lvl+0xe8/0x150 [ 995.451962][T18601] should_fail_ex+0x467/0x600 [ 995.451988][T18601] should_failslab+0xa8/0x100 [ 995.452013][T18601] kmem_cache_alloc_node_noprof+0xae/0x670 [ 995.452035][T18601] ? __alloc_skb+0x1d7/0x7a0 [ 995.452055][T18601] ? __alloc_skb+0x1d7/0x7a0 [ 995.452082][T18601] __alloc_skb+0x1d7/0x7a0 [ 995.452109][T18601] netlink_sendmsg+0x5d4/0xb40 [ 995.452143][T18601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 995.452169][T18601] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 995.452192][T18601] ? __kernel_text_address+0xd/0x30 [ 995.452214][T18601] ? unwind_get_return_address+0x4d/0x90 [ 995.452239][T18601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 995.452262][T18601] sock_sendmsg_nosec+0x13a/0x180 [ 995.452284][T18601] ____sys_sendmsg+0x565/0x870 [ 995.452308][T18601] ? __might_fault+0xaf/0x130 [ 995.452337][T18601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 995.452368][T18601] ? import_iovec+0x73/0xa0 [ 995.452397][T18601] ___sys_sendmsg+0x2a5/0x360 [ 995.452419][T18601] ? __lock_acquire+0x683/0x2ce0 [ 995.452446][T18601] ? __pfx____sys_sendmsg+0x10/0x10 [ 995.452501][T18601] ? __fget_files+0x2a/0x420 [ 995.452522][T18601] ? __fget_files+0x3a8/0x420 [ 995.452553][T18601] __x64_sys_sendmsg+0x1b7/0x290 [ 995.452580][T18601] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 995.452620][T18601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.452640][T18601] do_syscall_64+0x174/0x580 [ 995.452660][T18601] ? trace_irq_disable+0x3b/0x140 [ 995.452682][T18601] ? clear_bhb_loop+0x40/0x90 [ 995.452703][T18601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.452721][T18601] RIP: 0033:0x7f3f36c0ce59 [ 995.452739][T18601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.452753][T18601] RSP: 002b:00007f3f34e5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 995.452770][T18601] RAX: ffffffffffffffda RBX: 00007f3f36e85fa0 RCX: 00007f3f36c0ce59 [ 995.452783][T18601] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 995.452801][T18601] RBP: 00007f3f34e5e090 R08: 0000000000000000 R09: 0000000000000000 [ 995.452811][T18601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.452821][T18601] R13: 00007f3f36e86038 R14: 00007f3f36e85fa0 R15: 00007ffd0e4fd938 [ 995.452850][T18601] [ 995.666226][T18606] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4045'. [ 995.697611][T18604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.698169][T18604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.018425][T18609] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.522618][T18616] netlink: 'syz.2.4048': attribute type 39 has an invalid length. [ 998.209931][ T5598] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 998.421880][ T5598] usb 10-1: Using ep0 maxpacket: 8 [ 998.466156][ T5598] usb 10-1: config 0 has an invalid interface number: 33 but max is 1 [ 998.466182][ T5598] usb 10-1: config 0 has no interface number 1 [ 998.466236][ T5598] usb 10-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 998.466273][ T5598] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 998.468931][ T5598] usb 10-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 998.468956][ T5598] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.468974][ T5598] usb 10-1: Product: syz [ 998.468987][ T5598] usb 10-1: Manufacturer: syz [ 998.469000][ T5598] usb 10-1: SerialNumber: syz [ 998.489187][ T5598] usb 10-1: config 0 descriptor?? [ 998.500503][ T5598] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 998.767621][ T5598] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 998.983945][T18638] netlink: 'syz.9.4053': attribute type 6 has an invalid length. [ 998.983966][T18638] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4053'. [ 999.371234][ T5598] usb 10-1: USB disconnect, device number 19 [ 999.385896][ T5598] pvrusb2: Device being rendered inoperable [ 999.392794][ T5598] pvrusb2: Device being rendered inoperable [ 999.396436][T18641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 999.529197][T18642] netlink: 16215 bytes leftover after parsing attributes in process `syz.6.4054'. [ 999.580448][T15127] Bluetooth: hci3: command 0x0405 tx timeout [ 1001.238224][T18667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.248683][T18667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.977322][T18680] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4062'. [ 1002.411206][T18677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4061'. [ 1003.140127][ T5710] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1003.333391][T18688] netlink: 408 bytes leftover after parsing attributes in process `syz.6.4065'. [ 1003.349924][ T5710] usb 10-1: Using ep0 maxpacket: 8 [ 1003.352175][ T5710] usb 10-1: config 0 has an invalid interface number: 33 but max is 1 [ 1003.352200][ T5710] usb 10-1: config 0 has no interface number 1 [ 1003.352252][ T5710] usb 10-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1003.352289][ T5710] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 1003.397215][ T5710] usb 10-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1003.397244][ T5710] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.397262][ T5710] usb 10-1: Product: syz [ 1003.397275][ T5710] usb 10-1: Manufacturer: syz [ 1003.397288][ T5710] usb 10-1: SerialNumber: syz [ 1003.452972][ T5710] usb 10-1: config 0 descriptor?? [ 1003.500695][ T5710] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1003.681052][ T5710] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1003.681390][ T5970] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1003.830017][ T5970] usb 7-1: device descriptor read/64, error -71 [ 1004.020397][T18683] netlink: 'syz.9.4063': attribute type 6 has an invalid length. [ 1004.020420][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4063'. [ 1004.089963][ T5970] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1004.229998][ T5970] usb 7-1: device descriptor read/64, error -71 [ 1004.340505][ T5970] usb usb7-port1: attempt power cycle [ 1004.499298][T18696] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4067'. [ 1004.681382][ T5970] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1004.874601][ T5970] usb 7-1: device descriptor read/8, error -71 [ 1005.200706][ T5970] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1005.242797][ T5970] usb 7-1: device descriptor read/8, error -71 [ 1005.351958][ T5970] usb usb7-port1: unable to enumerate USB device [ 1005.520330][T18698] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4068'. [ 1005.835629][ T5710] usb 10-1: USB disconnect, device number 20 [ 1005.838257][ T5710] pvrusb2: Device being rendered inoperable [ 1005.841723][ T5710] pvrusb2: Device being rendered inoperable [ 1006.925778][T18719] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4075'. [ 1008.516437][T18726] FAULT_INJECTION: forcing a failure. [ 1008.516437][T18726] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1008.516469][T18726] CPU: 0 UID: 0 PID: 18726 Comm: syz.8.4078 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1008.516494][T18726] Tainted: [L]=SOFTLOCKUP [ 1008.516500][T18726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1008.516510][T18726] Call Trace: [ 1008.516518][T18726] [ 1008.516525][T18726] dump_stack_lvl+0xe8/0x150 [ 1008.516554][T18726] should_fail_ex+0x467/0x600 [ 1008.516582][T18726] prepare_alloc_pages+0x223/0x690 [ 1008.516613][T18726] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1008.516641][T18726] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1008.516695][T18726] __alloc_pages_noprof+0x10/0x100 [ 1008.516719][T18726] alloc_pages_bulk_noprof+0x67e/0x890 [ 1008.516748][T18726] ? copy_splice_read+0x16f/0xab0 [ 1008.516853][T18726] ? copy_splice_read+0x16f/0xab0 [ 1008.516881][T18726] copy_splice_read+0x19f/0xab0 [ 1008.516902][T18726] ? _parse_integer_limit+0x192/0x1e0 [ 1008.516931][T18726] ? __pfx_copy_splice_read+0x10/0x10 [ 1008.516960][T18726] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1008.516982][T18726] ? lockdep_hardirqs_on+0x7a/0x110 [ 1008.517003][T18726] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1008.517022][T18726] ? sock_splice_read+0xcd/0x100 [ 1008.517043][T18726] ? __pfx_sock_splice_read+0x10/0x10 [ 1008.517058][T18726] splice_file_to_pipe+0x450/0x6c0 [ 1008.517092][T18726] do_splice+0x11da/0x1990 [ 1008.517136][T18726] ? __pfx_do_splice+0x10/0x10 [ 1008.517167][T18726] __se_sys_splice+0x353/0x490 [ 1008.517196][T18726] ? __pfx___se_sys_splice+0x10/0x10 [ 1008.517224][T18726] ? __x64_sys_splice+0x21/0xf0 [ 1008.517246][T18726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.517264][T18726] do_syscall_64+0x174/0x580 [ 1008.517284][T18726] ? trace_irq_disable+0x3b/0x140 [ 1008.517304][T18726] ? clear_bhb_loop+0x40/0x90 [ 1008.517325][T18726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.517342][T18726] RIP: 0033:0x7f3b024ace59 [ 1008.517361][T18726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.517375][T18726] RSP: 002b:00007f3b006dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1008.517392][T18726] RAX: ffffffffffffffda RBX: 00007f3b02726090 RCX: 00007f3b024ace59 [ 1008.517404][T18726] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000007 [ 1008.517413][T18726] RBP: 00007f3b006dd090 R08: 0000000000000006 R09: 0000000000000000 [ 1008.517424][T18726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.517434][T18726] R13: 00007f3b02726128 R14: 00007f3b02726090 R15: 00007ffc066d5558 [ 1008.517460][T18726] [ 1008.969992][ T820] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1009.213039][T18736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.213616][T18736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.559906][ T820] usb 3-1: Using ep0 maxpacket: 8 [ 1009.583049][ T820] usb 3-1: config 0 has an invalid interface number: 33 but max is 1 [ 1009.583075][ T820] usb 3-1: config 0 has no interface number 1 [ 1009.583129][ T820] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1009.583167][ T820] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 1009.588801][ T820] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1009.588829][ T820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.588846][ T820] usb 3-1: Product: syz [ 1009.588859][ T820] usb 3-1: Manufacturer: syz [ 1009.588872][ T820] usb 3-1: SerialNumber: syz [ 1009.595125][ T820] usb 3-1: config 0 descriptor?? [ 1009.607157][ T820] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1009.863608][ T820] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1010.119245][T18731] netlink: 'syz.2.4079': attribute type 6 has an invalid length. [ 1010.119265][T18731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4079'. [ 1011.970337][T18763] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4089'. [ 1012.436585][T18771] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4091'. [ 1012.580832][T18773] netlink: 'syz.6.4090': attribute type 10 has an invalid length. [ 1013.911103][ T2387] pvrusb2: request_firmware fatal error with code=-110 [ 1013.911122][ T2387] pvrusb2: Failure uploading firmware1 [ 1013.911130][ T2387] pvrusb2: Device initialization was not successful. [ 1013.911137][ T2387] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1013.911146][ T2387] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1013.911922][ T2387] pvrusb2: Failed to submit write-control URB status=-2 [ 1013.914697][T16768] pvrusb2: Device being rendered inoperable [ 1014.018556][ T2387] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1014.018587][ T2387] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1014.055074][ T820] usb 3-1: USB disconnect, device number 105 [ 1016.032884][T18793] netlink: 'syz.7.4097': attribute type 39 has an invalid length. [ 1017.135241][T18821] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4101'. [ 1017.824880][T18836] netlink: 'syz.2.4102': attribute type 32 has an invalid length. [ 1017.824909][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4102'. [ 1019.563434][T18836] bond1: option coupled_control: invalid value (22) [ 1019.701063][T18836] bond1 (unregistering): Released all slaves [ 1019.805406][T18876] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4107'. [ 1020.053574][T18879] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4108'. [ 1020.730008][T16768] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 1020.887268][T16768] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1020.887322][T16768] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1020.887346][T16768] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1020.887368][T16768] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1020.887395][T16768] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1020.888868][T16768] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1020.888915][T16768] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1020.888945][T16768] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1020.888968][T16768] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1020.888991][T16768] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1020.891542][T16768] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1020.891587][T16768] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1020.891610][T16768] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1020.891632][T16768] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1020.891653][T16768] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1020.897774][T16768] usb 8-1: string descriptor 0 read error: -22 [ 1020.897904][T16768] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1020.897924][T16768] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.977280][T16768] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1023.200015][T16768] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1023.274561][ T5970] usb 8-1: USB disconnect, device number 7 [ 1023.353246][T16768] usb 10-1: Using ep0 maxpacket: 8 [ 1023.356158][T16768] usb 10-1: config 0 has an invalid interface number: 33 but max is 1 [ 1023.356182][T16768] usb 10-1: config 0 has no interface number 1 [ 1023.356252][T16768] usb 10-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1023.356289][T16768] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 1023.369178][T16768] usb 10-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1023.369205][T16768] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.369224][T16768] usb 10-1: Product: syz [ 1023.369236][T16768] usb 10-1: Manufacturer: syz [ 1023.369330][T16768] usb 10-1: SerialNumber: syz [ 1023.383994][T16768] usb 10-1: config 0 descriptor?? [ 1023.400418][T16768] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1023.639614][T16768] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1023.960232][T18890] netlink: 'syz.9.4112': attribute type 6 has an invalid length. [ 1023.960252][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4112'. [ 1024.277962][T18894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1024.500756][T18898] netlink: 16215 bytes leftover after parsing attributes in process `syz.8.4113'. [ 1024.705401][T18900] netlink: 'syz.6.4115': attribute type 39 has an invalid length. [ 1025.802569][T16768] usb 10-1: USB disconnect, device number 21 [ 1025.808166][T16768] pvrusb2: Device being rendered inoperable [ 1025.838882][T16768] pvrusb2: Device being rendered inoperable [ 1026.023817][T18910] FAULT_INJECTION: forcing a failure. [ 1026.023817][T18910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1026.023850][T18910] CPU: 0 UID: 0 PID: 18910 Comm: syz.7.4116 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1026.023872][T18910] Tainted: [L]=SOFTLOCKUP [ 1026.023877][T18910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1026.023885][T18910] Call Trace: [ 1026.023890][T18910] [ 1026.023897][T18910] dump_stack_lvl+0xe8/0x150 [ 1026.023927][T18910] should_fail_ex+0x467/0x600 [ 1026.023957][T18910] _copy_from_user+0x2d/0xb0 [ 1026.023983][T18910] __copy_msghdr+0x390/0x590 [ 1026.024014][T18910] ___sys_sendmsg+0x213/0x360 [ 1026.024036][T18910] ? __lock_acquire+0x683/0x2ce0 [ 1026.024076][T18910] ? __pfx____sys_sendmsg+0x10/0x10 [ 1026.024131][T18910] ? __fget_files+0x2a/0x420 [ 1026.024153][T18910] ? __fget_files+0x3a8/0x420 [ 1026.024184][T18910] __x64_sys_sendmsg+0x1b7/0x290 [ 1026.024210][T18910] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1026.024251][T18910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.024270][T18910] do_syscall_64+0x174/0x580 [ 1026.024293][T18910] ? trace_irq_disable+0x3b/0x140 [ 1026.024319][T18910] ? clear_bhb_loop+0x40/0x90 [ 1026.024342][T18910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.024359][T18910] RIP: 0033:0x7f929343ce59 [ 1026.024376][T18910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.024391][T18910] RSP: 002b:00007f9291675028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1026.024410][T18910] RAX: ffffffffffffffda RBX: 00007f92936b6090 RCX: 00007f929343ce59 [ 1026.024423][T18910] RDX: 0000000000008010 RSI: 0000200000000200 RDI: 0000000000000009 [ 1026.024435][T18910] RBP: 00007f9291675090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.024447][T18910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.024458][T18910] R13: 00007f92936b6128 R14: 00007f92936b6090 R15: 00007fff4aa22e88 [ 1026.024487][T18910] [ 1027.130779][T18920] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4120'. [ 1027.342038][T16768] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1027.552026][T16768] usb 10-1: device descriptor read/64, error -71 [ 1027.869959][T16768] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1028.002815][T16768] usb 10-1: device descriptor read/64, error -71 [ 1028.110496][T16768] usb usb10-port1: attempt power cycle [ 1028.459969][T16768] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1028.482562][T16768] usb 10-1: device descriptor read/8, error -71 [ 1028.917691][T16768] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1028.942579][T16768] usb 10-1: device descriptor read/8, error -71 [ 1029.050739][T16768] usb usb10-port1: unable to enumerate USB device [ 1029.434764][T18934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4124'. [ 1030.255231][T18946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.255889][T18946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.004386][T18958] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4133'. [ 1031.630516][T18968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.630968][T18968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.672727][T18967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.673406][T18967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.747274][ T37] audit: type=1326 audit(1782595114.348:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18966 comm="syz.8.4136" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b024ace59 code=0x7fc00000 [ 1033.861629][T16684] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1034.000057][T16684] usb 10-1: device descriptor read/64, error -71 [ 1034.240000][T16684] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1034.381734][T16684] usb 10-1: device descriptor read/64, error -71 [ 1034.497272][T16684] usb usb10-port1: attempt power cycle [ 1034.873921][T16684] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1034.900988][T16684] usb 10-1: device descriptor read/8, error -71 [ 1035.153332][T16684] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1035.170801][T16684] usb 10-1: device descriptor read/8, error -71 [ 1035.280467][T16684] usb usb10-port1: unable to enumerate USB device [ 1035.509997][ T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1035.675742][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1035.681304][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1035.682609][ T9] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1035.688219][ T9] usb 7-1: string descriptor 0 read error: -22 [ 1035.688309][ T9] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1035.688328][ T9] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1035.726602][ T9] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1035.926719][ T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1035.933030][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1035.933081][ T9] usb 7-1: media controller created [ 1035.978076][T19015] usb 7-1: dvb_usb_au6610: wlen=0, aborting [ 1036.144178][ T5599] Bluetooth: hci3: command 0x0405 tx timeout [ 1036.184899][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1036.348496][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 1036.443676][ T9] usb 7-1: USB disconnect, device number 32 [ 1036.657081][T19018] FAULT_INJECTION: forcing a failure. [ 1036.657081][T19018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1036.657115][T19018] CPU: 0 UID: 0 PID: 19018 Comm: syz.6.4145 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1036.657139][T19018] Tainted: [L]=SOFTLOCKUP [ 1036.657146][T19018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1036.657156][T19018] Call Trace: [ 1036.657164][T19018] [ 1036.657172][T19018] dump_stack_lvl+0xe8/0x150 [ 1036.657200][T19018] should_fail_ex+0x467/0x600 [ 1036.657235][T19018] _copy_to_iter+0x404/0x1810 [ 1036.657258][T19018] ? bpf_map_show_fdinfo+0x236/0x390 [ 1036.657300][T19018] ? __pfx__copy_to_iter+0x10/0x10 [ 1036.657323][T19018] ? single_next+0xd/0x40 [ 1036.657341][T19018] ? single_stop+0x9/0x10 [ 1036.657356][T19018] ? traverse+0x5f1/0x620 [ 1036.657385][T19018] seq_read_iter+0x2b1/0xcb0 [ 1036.657418][T19018] seq_read+0x36a/0x490 [ 1036.657443][T19018] ? __pfx_seq_read+0x10/0x10 [ 1036.657473][T19018] ? rw_verify_area+0x250/0x4d0 [ 1036.657500][T19018] ? __pfx_seq_read+0x10/0x10 [ 1036.657517][T19018] vfs_read+0x219/0xa90 [ 1036.657549][T19018] ? __pfx_vfs_read+0x10/0x10 [ 1036.657574][T19018] ? __fget_files+0x2a/0x420 [ 1036.657598][T19018] ? __fget_files+0x2a/0x420 [ 1036.657618][T19018] ? __fget_files+0x3a8/0x420 [ 1036.657638][T19018] ? __fget_files+0x2a/0x420 [ 1036.657667][T19018] __x64_sys_pread64+0x199/0x230 [ 1036.657698][T19018] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1036.657731][T19018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.657751][T19018] do_syscall_64+0x174/0x580 [ 1036.657775][T19018] ? clear_bhb_loop+0x40/0x90 [ 1036.657796][T19018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.657814][T19018] RIP: 0033:0x7faef572ce59 [ 1036.657831][T19018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.657845][T19018] RSP: 002b:00007faef397e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1036.657864][T19018] RAX: ffffffffffffffda RBX: 00007faef59a5fa0 RCX: 00007faef572ce59 [ 1036.657878][T19018] RDX: 0000000000000074 RSI: 0000200000000140 RDI: 0000000000000004 [ 1036.657890][T19018] RBP: 00007faef397e090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.657901][T19018] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1036.657913][T19018] R13: 00007faef59a6038 R14: 00007faef59a5fa0 R15: 00007fff78a7a838 [ 1036.657944][T19018] [ 1037.233706][T19020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1037.261040][T19023] netlink: 'syz.6.4147': attribute type 39 has an invalid length. [ 1037.306535][T19028] cifs: Unknown parameter 'f#%#Ha~a;M) ZʧugΦR3INc4qG[SvNLh/ѢQ.' [ 1037.943737][T19033] FAULT_INJECTION: forcing a failure. [ 1037.943737][T19033] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.943793][T19033] CPU: 0 UID: 0 PID: 19033 Comm: syz.7.4150 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1037.943819][T19033] Tainted: [L]=SOFTLOCKUP [ 1037.943826][T19033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1037.943837][T19033] Call Trace: [ 1037.943845][T19033] [ 1037.943853][T19033] dump_stack_lvl+0xe8/0x150 [ 1037.943882][T19033] should_fail_ex+0x467/0x600 [ 1037.943911][T19033] should_failslab+0xa8/0x100 [ 1037.943939][T19033] __kmalloc_noprof+0xfe/0x780 [ 1037.943963][T19033] ? tomoyo_encode+0x2ad/0x570 [ 1037.943983][T19033] ? tomoyo_encode+0x2ad/0x570 [ 1037.944008][T19033] tomoyo_encode+0x2ad/0x570 [ 1037.944032][T19033] tomoyo_realpath_from_path+0x5fa/0x640 [ 1037.944062][T19033] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1037.944087][T19033] tomoyo_path_number_perm+0x246/0x5f0 [ 1037.944114][T19033] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1037.944137][T19033] ? __lock_acquire+0x683/0x2ce0 [ 1037.944175][T19033] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1037.944197][T19033] ? hook_file_ioctl+0x1f3/0x600 [ 1037.944239][T19033] ? __fget_files+0x2a/0x420 [ 1037.944264][T19033] ? __fget_files+0x2a/0x420 [ 1037.944284][T19033] ? __fget_files+0x3a8/0x420 [ 1037.944305][T19033] ? __fget_files+0x2a/0x420 [ 1037.944330][T19033] security_file_ioctl+0xc3/0x2a0 [ 1037.944358][T19033] __se_sys_ioctl+0x47/0x170 [ 1037.944385][T19033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.944405][T19033] do_syscall_64+0x174/0x580 [ 1037.944428][T19033] ? clear_bhb_loop+0x40/0x90 [ 1037.944451][T19033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.944469][T19033] RIP: 0033:0x7f929343ce59 [ 1037.944487][T19033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.944502][T19033] RSP: 002b:00007f9291654028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1037.944528][T19033] RAX: ffffffffffffffda RBX: 00007f92936b6180 RCX: 00007f929343ce59 [ 1037.944542][T19033] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000006 [ 1037.944553][T19033] RBP: 00007f9291654090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.944566][T19033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.944577][T19033] R13: 00007f92936b6218 R14: 00007f92936b6180 R15: 00007fff4aa22e88 [ 1037.944608][T19033] [ 1037.944737][T19033] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1039.289100][T19043] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4152'. [ 1040.443540][ T9] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1040.738320][ T5743] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1040.899889][ T5743] usb 10-1: device descriptor read/64, error -71 [ 1041.367947][T19062] input: syz1 as /devices/virtual/input/input39 [ 1041.786149][ T5743] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1042.113691][ T5743] usb 10-1: device descriptor read/64, error -71 [ 1042.305869][ T5743] usb usb10-port1: attempt power cycle [ 1042.421832][ T9] usb 7-1: device descriptor read/64, error -71 [ 1042.669621][ T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1042.762934][ T5743] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1044.186555][T19097] netlink: 'syz.7.4161': attribute type 39 has an invalid length. [ 1046.003757][ T5743] usb 10-1: device descriptor read/8, error -71 [ 1048.240676][ T5743] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1048.435465][ T5743] usb 10-1: device descriptor read/64, error -71 [ 1048.774983][ T5743] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1054.566426][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.566492][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.766861][T19151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4172'. [ 1057.486142][T19185] netlink: 'syz.7.4181': attribute type 39 has an invalid length. [ 1058.533261][T19204] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4186'. [ 1058.999069][T19210] FAULT_INJECTION: forcing a failure. [ 1058.999069][T19210] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.999105][T19210] CPU: 0 UID: 0 PID: 19210 Comm: syz.9.4188 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1058.999130][T19210] Tainted: [L]=SOFTLOCKUP [ 1058.999135][T19210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1058.999146][T19210] Call Trace: [ 1058.999154][T19210] [ 1058.999162][T19210] dump_stack_lvl+0xe8/0x150 [ 1058.999191][T19210] should_fail_ex+0x467/0x600 [ 1058.999218][T19210] should_failslab+0xa8/0x100 [ 1058.999242][T19210] kmem_cache_alloc_node_noprof+0xae/0x670 [ 1058.999265][T19210] ? __alloc_skb+0x1d7/0x7a0 [ 1058.999285][T19210] ? __alloc_skb+0x1d7/0x7a0 [ 1058.999310][T19210] __alloc_skb+0x1d7/0x7a0 [ 1058.999333][T19210] netlink_sendmsg+0x5d4/0xb40 [ 1058.999368][T19210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1058.999393][T19210] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1058.999415][T19210] ? __kernel_text_address+0xd/0x30 [ 1058.999437][T19210] ? unwind_get_return_address+0x4d/0x90 [ 1058.999462][T19210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1058.999482][T19210] sock_sendmsg_nosec+0x13a/0x180 [ 1058.999503][T19210] ____sys_sendmsg+0x565/0x870 [ 1058.999525][T19210] ? __might_fault+0xaf/0x130 [ 1058.999551][T19210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1058.999582][T19210] ? import_iovec+0x73/0xa0 [ 1058.999609][T19210] ___sys_sendmsg+0x2a5/0x360 [ 1058.999630][T19210] ? __lock_acquire+0x683/0x2ce0 [ 1058.999656][T19210] ? __pfx____sys_sendmsg+0x10/0x10 [ 1058.999708][T19210] ? __fget_files+0x2a/0x420 [ 1058.999729][T19210] ? __fget_files+0x3a8/0x420 [ 1058.999760][T19210] __x64_sys_sendmsg+0x1b7/0x290 [ 1058.999782][T19210] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1058.999816][T19210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.999834][T19210] do_syscall_64+0x174/0x580 [ 1058.999855][T19210] ? trace_irq_disable+0x3b/0x140 [ 1058.999876][T19210] ? clear_bhb_loop+0x40/0x90 [ 1058.999899][T19210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.999938][T19210] RIP: 0033:0x7ff7293bce59 [ 1058.999962][T19210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.999977][T19210] RSP: 002b:00007ff727616028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1058.999996][T19210] RAX: ffffffffffffffda RBX: 00007ff729635fa0 RCX: 00007ff7293bce59 [ 1059.000010][T19210] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1059.000022][T19210] RBP: 00007ff727616090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.000033][T19210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.000044][T19210] R13: 00007ff729636038 R14: 00007ff729635fa0 R15: 00007ffe33acb488 [ 1059.000073][T19210] [ 1059.521110][T19219] FAULT_INJECTION: forcing a failure. [ 1059.521110][T19219] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.521146][T19219] CPU: 1 UID: 0 PID: 19219 Comm: syz.7.4191 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1059.521171][T19219] Tainted: [L]=SOFTLOCKUP [ 1059.521178][T19219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1059.521188][T19219] Call Trace: [ 1059.521196][T19219] [ 1059.521204][T19219] dump_stack_lvl+0xe8/0x150 [ 1059.521233][T19219] should_fail_ex+0x467/0x600 [ 1059.521260][T19219] should_failslab+0xa8/0x100 [ 1059.521286][T19219] __kmalloc_noprof+0xfe/0x780 [ 1059.521307][T19219] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 1059.521329][T19219] ? alloc_pipe_info+0x1f9/0x4c0 [ 1059.521345][T19219] ? alloc_pipe_info+0x1f9/0x4c0 [ 1059.521369][T19219] alloc_pipe_info+0x1f9/0x4c0 [ 1059.521388][T19219] splice_direct_to_actor+0xa52/0xcc0 [ 1059.521414][T19219] ? __lock_acquire+0x683/0x2ce0 [ 1059.521440][T19219] ? kstrtouint+0x6e/0xe0 [ 1059.521467][T19219] ? __lock_acquire+0x683/0x2ce0 [ 1059.521486][T19219] ? __pfx_direct_splice_actor+0x10/0x10 [ 1059.521506][T19219] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1059.521542][T19219] do_splice_direct+0x19b/0x2a0 [ 1059.521567][T19219] ? __pfx_do_splice_direct+0x10/0x10 [ 1059.521590][T19219] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1059.521620][T19219] ? rw_verify_area+0x209/0x4d0 [ 1059.521646][T19219] do_sendfile+0x540/0x7e0 [ 1059.521664][T19219] ? lockdep_hardirqs_on+0x7a/0x110 [ 1059.521692][T19219] ? __pfx_do_sendfile+0x10/0x10 [ 1059.521721][T19219] __se_sys_sendfile64+0x144/0x1a0 [ 1059.521741][T19219] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1059.521768][T19219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.521788][T19219] do_syscall_64+0x174/0x580 [ 1059.521807][T19219] ? trace_irq_disable+0x3b/0x140 [ 1059.521829][T19219] ? clear_bhb_loop+0x40/0x90 [ 1059.521851][T19219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.521869][T19219] RIP: 0033:0x7f929343ce59 [ 1059.521886][T19219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.521900][T19219] RSP: 002b:00007f9291696028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1059.521919][T19219] RAX: ffffffffffffffda RBX: 00007f92936b5fa0 RCX: 00007f929343ce59 [ 1059.521932][T19219] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1059.521941][T19219] RBP: 00007f9291696090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.521952][T19219] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1059.521962][T19219] R13: 00007f92936b6038 R14: 00007f92936b5fa0 R15: 00007fff4aa22e88 [ 1059.521991][T19219] [ 1061.119711][T19248] netlink: 'syz.9.4202': attribute type 3 has an invalid length. [ 1061.119742][T19248] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4202'. [ 1061.554806][T19255] FAULT_INJECTION: forcing a failure. [ 1061.554806][T19255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1061.554842][T19255] CPU: 0 UID: 0 PID: 19255 Comm: syz.6.4204 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1061.554867][T19255] Tainted: [L]=SOFTLOCKUP [ 1061.554873][T19255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1061.554884][T19255] Call Trace: [ 1061.554892][T19255] [ 1061.554900][T19255] dump_stack_lvl+0xe8/0x150 [ 1061.554929][T19255] should_fail_ex+0x467/0x600 [ 1061.554956][T19255] _copy_from_user+0x2d/0xb0 [ 1061.554983][T19255] kstrtouint_from_user+0xd6/0x180 [ 1061.555007][T19255] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1061.555028][T19255] ? __lock_acquire+0x683/0x2ce0 [ 1061.555066][T19255] proc_fail_nth_write+0x8e/0x210 [ 1061.555091][T19255] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1061.555121][T19255] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1061.555143][T19255] vfs_write+0x29f/0xbb0 [ 1061.555177][T19255] ? __pfx_vfs_write+0x10/0x10 [ 1061.555204][T19255] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1061.555225][T19255] ? lockdep_hardirqs_on+0x7a/0x110 [ 1061.555245][T19255] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1061.555263][T19255] ? mutex_lock_nested+0x152/0x1d0 [ 1061.555284][T19255] ? fdget_pos+0x252/0x320 [ 1061.555312][T19255] ksys_write+0x156/0x270 [ 1061.555338][T19255] ? __pfx_ksys_write+0x10/0x10 [ 1061.555365][T19255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.555383][T19255] do_syscall_64+0x174/0x580 [ 1061.555401][T19255] ? trace_irq_disable+0x3b/0x140 [ 1061.555421][T19255] ? clear_bhb_loop+0x40/0x90 [ 1061.555449][T19255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.555466][T19255] RIP: 0033:0x7faef56ed68e [ 1061.555484][T19255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1061.555499][T19255] RSP: 002b:00007faef397dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1061.555518][T19255] RAX: ffffffffffffffda RBX: 00007faef397e6c0 RCX: 00007faef56ed68e [ 1061.555531][T19255] RDX: 0000000000000001 RSI: 00007faef397e0a0 RDI: 0000000000000003 [ 1061.555542][T19255] RBP: 00007faef397e090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.555551][T19255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.555563][T19255] R13: 00007faef59a6038 R14: 00007faef59a5fa0 R15: 00007fff78a7a838 [ 1061.555592][T19255] [ 1063.188930][T19260] input: syz1 as /devices/virtual/input/input41 [ 1064.161543][T19266] fuse: Bad value for 'fd' [ 1068.878645][T19287] FAULT_INJECTION: forcing a failure. [ 1068.878645][T19287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.878717][T19287] CPU: 0 UID: 0 PID: 19287 Comm: syz.6.4209 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1068.878743][T19287] Tainted: [L]=SOFTLOCKUP [ 1068.878750][T19287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1068.878762][T19287] Call Trace: [ 1068.878769][T19287] [ 1068.878777][T19287] dump_stack_lvl+0xe8/0x150 [ 1068.878808][T19287] should_fail_ex+0x467/0x600 [ 1068.878835][T19287] _copy_from_user+0x2d/0xb0 [ 1068.878861][T19287] core_sys_select+0x673/0xb40 [ 1068.878895][T19287] ? __pfx_core_sys_select+0x10/0x10 [ 1068.878936][T19287] ? __pfx_set_user_sigmask+0x10/0x10 [ 1068.878962][T19287] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1068.878997][T19287] __se_sys_pselect6+0x267/0x320 [ 1068.879022][T19287] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1068.879045][T19287] ? rcu_is_watching+0x15/0xb0 [ 1068.879082][T19287] ? __x64_sys_pselect6+0x21/0xf0 [ 1068.879102][T19287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.879122][T19287] do_syscall_64+0x174/0x580 [ 1068.879142][T19287] ? trace_irq_disable+0x3b/0x140 [ 1068.879164][T19287] ? clear_bhb_loop+0x40/0x90 [ 1068.879182][T19287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.879198][T19287] RIP: 0033:0x7faef572ce59 [ 1068.879216][T19287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.879230][T19287] RSP: 002b:00007faef395d028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1068.879250][T19287] RAX: ffffffffffffffda RBX: 00007faef59a6090 RCX: 00007faef572ce59 [ 1068.879263][T19287] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 1068.879274][T19287] RBP: 00007faef395d090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.879285][T19287] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1068.879297][T19287] R13: 00007faef59a6128 R14: 00007faef59a6090 R15: 00007fff78a7a838 [ 1068.879326][T19287] [ 1069.741891][T19293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1069.913266][T19296] netlink: 16215 bytes leftover after parsing attributes in process `syz.9.4211'. [ 1070.053272][T19298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.054048][T19298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.349933][T16684] usb 10-1: new full-speed USB device number 36 using dummy_hcd [ 1072.401391][T19320] netlink: 380 bytes leftover after parsing attributes in process `syz.2.4221'. [ 1072.432642][T19320] fuse: Bad value for 'fd' [ 1072.524836][T16684] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1072.525594][T16684] usb 10-1: not running at top speed; connect to a high speed hub [ 1072.528651][T16684] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 1072.528675][T16684] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 1072.528693][T16684] usb 10-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.528710][T16684] usb 10-1: config 14 has no interface number 0 [ 1072.528725][T16684] usb 10-1: config 14 has no interface number 1 [ 1072.528806][T16684] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1072.528828][T16684] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1072.528851][T16684] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1072.528875][T16684] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1072.528899][T16684] usb 10-1: config 14 interface 57 has no altsetting 0 [ 1072.528915][T16684] usb 10-1: config 14 interface 228 has no altsetting 0 [ 1072.632008][T16684] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1072.632036][T16684] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.632054][T16684] usb 10-1: Product: syz [ 1072.632068][T16684] usb 10-1: Manufacturer: syz [ 1072.632080][T16684] usb 10-1: SerialNumber: syz [ 1072.929449][ T37] audit: type=1326 audit(1782595155.528:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19322 comm="syz.7.4222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929343ce59 code=0x7ffc0000 [ 1072.929538][ T37] audit: type=1326 audit(1782595155.528:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19322 comm="syz.7.4222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929343ce59 code=0x7ffc0000 [ 1072.947680][ T37] audit: type=1326 audit(1782595155.548:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19322 comm="syz.7.4222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929343ce59 code=0x7ffc0000 [ 1072.947729][ T37] audit: type=1326 audit(1782595155.548:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19322 comm="syz.7.4222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929343ce59 code=0x7ffc0000 [ 1072.947767][ T37] audit: type=1326 audit(1782595155.548:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19322 comm="syz.7.4222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f929343ce59 code=0x7ffc0000 [ 1072.947806][ T37] audit: type=1326 audit(1782595155.548:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19322 comm="syz.7.4222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929343ce59 code=0x7ffc0000 [ 1072.952298][ T37] audit: type=1326 audit(1782595155.548:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19322 comm="syz.7.4222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929343ce59 code=0x7ffc0000 [ 1072.957224][ T37] audit: type=1326 audit(1782595155.558:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19322 comm="syz.7.4222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929343ce59 code=0x7ffc0000 [ 1072.957272][ T37] audit: type=1326 audit(1782595155.558:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19322 comm="syz.7.4222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929343ce59 code=0x7ffc0000 [ 1072.957311][ T37] audit: type=1326 audit(1782595155.558:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19322 comm="syz.7.4222" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929343ce59 code=0x7ffc0000 [ 1073.663348][T19323] loop8: detected capacity change from 0 to 8 [ 1073.702814][T19323] Dev loop8: unable to read RDB block 8 [ 1073.702864][T19323] loop8: unable to read partition table [ 1073.703095][T19323] loop8: partition table beyond EOD, truncated [ 1073.703127][T19323] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1073.705438][T16684] legousbtower 10-1:14.57: interrupt endpoints not found [ 1074.121310][T16684] legousbtower 10-1:14.228: get version request failed: -121 [ 1074.121553][T16684] legousbtower 10-1:14.228: probe with driver legousbtower failed with error -121 [ 1076.336234][ T2387] pvrusb2: request_firmware fatal error with code=-110 [ 1076.336289][ T2387] pvrusb2: Failure uploading firmware1 [ 1076.336297][ T2387] pvrusb2: Device initialization was not successful. [ 1076.336349][ T2387] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1076.336359][ T2387] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1076.336606][ T820] pvrusb2: Device being rendered inoperable [ 1076.476945][T19355] input: syz1 as /devices/virtual/input/input42 [ 1076.595924][ T2387] pvrusb2: Failed to submit write-control URB status=-19 [ 1076.694633][T19356] input: syz1 as /devices/virtual/input/input43 [ 1078.384747][ T2387] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1078.384826][ T2387] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1082.857941][T16684] usb 10-1: USB disconnect, device number 36 [ 1084.495068][T19380] bond0: entered promiscuous mode [ 1084.495083][T19380] bond_slave_0: entered promiscuous mode [ 1084.495340][T19380] bond_slave_1: entered promiscuous mode [ 1085.245153][T19397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.245755][T19397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.709939][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1086.621484][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1086.624858][ T9] usb 8-1: config 139 has an invalid interface descriptor of length 7, skipping [ 1086.624883][ T9] usb 8-1: config 139 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.624900][ T9] usb 8-1: config 139 has 0 interfaces, different from the descriptor's value: 1 [ 1086.668507][ T9] usb 8-1: New USB device found, idVendor=eae1, idProduct=c922, bcdDevice=89.9b [ 1086.668536][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.668554][ T9] usb 8-1: Product: syz [ 1086.668568][ T9] usb 8-1: Manufacturer: syz [ 1086.668581][ T9] usb 8-1: SerialNumber: syz [ 1088.083969][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1088.191703][ T5599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1088.202264][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1088.248704][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1088.251609][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1090.625991][T15127] Bluetooth: hci2: command tx timeout [ 1092.699890][T15127] Bluetooth: hci2: command tx timeout [ 1093.783643][ T6043] usb 8-1: USB disconnect, device number 8 [ 1094.779897][T15127] Bluetooth: hci2: command tx timeout [ 1094.870039][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1095.245866][ T10] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.245905][ T10] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1095.245917][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.450330][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1096.379907][ T5723] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1096.469516][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1096.469537][ T10] stv0680 8-1:4.0: STV(e): camera ping failed!! [ 1096.485578][ T10] stv0680 8-1:4.0: last error: 233, command = 0x4a [ 1096.530091][ T5723] usb 10-1: Using ep0 maxpacket: 8 [ 1096.536219][ T5723] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1096.536245][ T5723] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.536264][ T5723] usb 10-1: Product: syz [ 1096.536276][ T5723] usb 10-1: Manufacturer: syz [ 1096.536290][ T5723] usb 10-1: SerialNumber: syz [ 1096.543581][T19473] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1096.591725][ T5723] usb 10-1: config 0 descriptor?? [ 1096.795378][ T5723] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1096.860228][T15127] Bluetooth: hci2: command tx timeout [ 1096.979958][T16684] usb 8-1: USB disconnect, device number 9 [ 1097.384315][T19506] netlink: 'syz.8.4253': attribute type 25 has an invalid length. [ 1097.384334][T19506] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4253'. [ 1097.384414][T19506] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1097.897249][ T5723] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1098.682511][ T5710] usb 10-1: USB disconnect, device number 37 [ 1100.819970][T16684] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1101.779903][T16684] usb 10-1: Using ep0 maxpacket: 32 [ 1101.798970][T16684] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 1101.799003][T16684] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1152, setting to 1024 [ 1101.799044][T16684] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1101.799065][T16684] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.135155][T16684] usb 10-1: config 0 descriptor?? [ 1102.194261][T19530] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1102.335676][T16684] hub 10-1:0.0: USB hub found [ 1103.066525][T16684] hub 10-1:0.0: 1 port detected [ 1104.130932][T16684] usb 10-1: USB disconnect, device number 38 [ 1106.903732][T19576] input: syz1 as /devices/virtual/input/input45 [ 1112.935522][T19596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.936105][T19596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.224846][T19411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.224968][T19411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.225215][T19411] bridge_slave_0: entered allmulticast mode [ 1113.281607][T19411] bridge_slave_0: entered promiscuous mode [ 1113.294405][T19411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.294473][T19411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.294611][T19411] bridge_slave_1: entered allmulticast mode [ 1113.307465][T19411] bridge_slave_1: entered promiscuous mode [ 1113.870789][T19604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.948787][T19604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.050680][T19411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.112142][T19411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.742066][ T5599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1115.955239][ T5599] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1115.956989][ T5599] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1115.977714][ T5599] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1115.999496][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.999563][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.021083][ T5599] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1116.622251][T19411] team0: Port device team_slave_0 added [ 1116.667661][T19411] team0: Port device team_slave_1 added [ 1117.051563][T19411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1117.051578][T19411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.051601][T19411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1117.112856][T19411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1117.112873][T19411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.112898][T19411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.222448][ T5599] Bluetooth: hci6: command tx timeout [ 1118.432838][T19647] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4274'. [ 1120.299907][ T5599] Bluetooth: hci6: command tx timeout [ 1120.884239][T19411] hsr_slave_0: entered promiscuous mode [ 1120.890070][T19411] hsr_slave_1: entered promiscuous mode [ 1120.903110][T19411] debugfs: 'hsr0' already exists in 'hsr' [ 1120.903136][T19411] Cannot create hsr debugfs directory [ 1122.379930][T15127] Bluetooth: hci6: command tx timeout [ 1124.461097][T15127] Bluetooth: hci6: command tx timeout [ 1124.479116][T16684] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1124.656985][T16684] usb 10-1: Using ep0 maxpacket: 8 [ 1124.670759][T16684] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1124.670786][T16684] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.670816][T16684] usb 10-1: Product: syz [ 1124.670828][T16684] usb 10-1: Manufacturer: syz [ 1124.670841][T16684] usb 10-1: SerialNumber: syz [ 1124.767227][T16684] usb 10-1: config 0 descriptor?? [ 1125.070245][T16684] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1126.633875][T16684] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1126.638610][T16684] usb 10-1: USB disconnect, device number 39 [ 1126.964426][T19672] netlink: 'syz.9.4280': attribute type 39 has an invalid length. [ 1130.404458][ T1169] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.384354][T19654] syz_tun: entered promiscuous mode [ 1132.458911][T19654] vlan0: entered promiscuous mode [ 1133.744982][ T4965] udevd[4965]: worker [7350] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time [ 1134.766277][ T5598] usb 9-1: USB disconnect, device number 6 [ 1135.889144][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1135.946993][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1136.000213][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1136.007711][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1136.034275][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1138.426075][T15127] Bluetooth: hci0: command tx timeout [ 1140.459905][ T5599] Bluetooth: hci0: command tx timeout [ 1141.582860][ T2387] pvrusb2: request_firmware fatal error with code=-110 [ 1141.582876][ T2387] pvrusb2: Failure uploading firmware1 [ 1141.582883][ T2387] pvrusb2: Device initialization was not successful. [ 1141.582891][ T2387] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1141.582900][ T2387] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1141.587734][ T820] pvrusb2: Device being rendered inoperable [ 1142.549891][ T5599] Bluetooth: hci0: command tx timeout [ 1142.755171][T19715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4292'. [ 1142.755197][T19715] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4292'. [ 1142.755211][T19715] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4292'. [ 1142.987536][T15127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1143.056002][T15127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1143.068219][T15127] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1143.114341][T15127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1143.115094][T15127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1144.620003][ T5599] Bluetooth: hci0: command tx timeout [ 1145.589998][ T5599] Bluetooth: hci1: command tx timeout [ 1147.713642][ T5599] Bluetooth: hci1: command tx timeout [ 1149.739872][ T5599] Bluetooth: hci1: command tx timeout [ 1150.414856][T19411] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.820001][ T5599] Bluetooth: hci1: command tx timeout [ 1156.471169][T15127] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1156.868461][T15127] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1156.925611][T15127] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1157.042204][T15127] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1157.077476][T15127] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1159.510235][T15127] Bluetooth: hci7: command tx timeout [ 1161.579864][T15127] Bluetooth: hci7: command tx timeout [ 1162.911854][ T1169] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.659841][T15127] Bluetooth: hci7: command tx timeout [ 1164.848638][T19614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.848765][T19614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.848990][T19614] bridge_slave_0: entered allmulticast mode [ 1164.873812][T19614] bridge_slave_0: entered promiscuous mode [ 1165.289325][T19614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.289533][T19614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.290583][T19614] bridge_slave_1: entered allmulticast mode [ 1165.297458][T19614] bridge_slave_1: entered promiscuous mode [ 1165.810030][T15127] Bluetooth: hci7: command tx timeout [ 1171.428772][T19614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.433056][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.433126][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.557515][T19614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.856192][ T5599] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1184.950559][ T5599] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1184.978567][ T5599] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1185.321838][ T5599] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1185.329595][ T5599] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1185.736537][T15127] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1185.886527][T15127] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1185.909834][T15127] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1186.076697][T15127] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1186.173359][T15127] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1187.699915][ T5599] Bluetooth: hci8: command tx timeout [ 1188.389855][ T5599] Bluetooth: hci9: command tx timeout [ 1189.749939][ T5599] Bluetooth: hci8: command tx timeout [ 1190.492575][ T5599] Bluetooth: hci9: command tx timeout [ 1192.078427][ T5599] Bluetooth: hci8: command tx timeout [ 1192.569994][ T5599] Bluetooth: hci9: command tx timeout [ 1194.219859][ T5599] Bluetooth: hci8: command tx timeout [ 1194.619847][ T5599] Bluetooth: hci9: command tx timeout [ 1197.505804][T15127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1198.063664][T15127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1198.094433][T15127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1198.113669][T15127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1198.137064][T15127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1200.395739][ T5599] Bluetooth: hci3: command tx timeout [ 1200.612739][T19654] ================================================================== [ 1200.612757][T19654] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 1200.612794][T19654] Read of size 1 at addr ffff8880622de7e8 by task syz.8.4275/19654 [ 1200.612809][T19654] [ 1200.612824][T19654] CPU: 1 UID: 0 PID: 19654 Comm: syz.8.4275 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1200.612848][T19654] Tainted: [L]=SOFTLOCKUP [ 1200.612855][T19654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1200.612867][T19654] Call Trace: [ 1200.612875][T19654] [ 1200.612883][T19654] dump_stack_lvl+0xe8/0x150 [ 1200.612908][T19654] print_address_description+0x55/0x1e0 [ 1200.612960][T19654] ? rt_spin_lock+0x83/0x400 [ 1200.612981][T19654] print_report+0x58/0x70 [ 1200.612999][T19654] kasan_report+0x117/0x150 [ 1200.613025][T19654] ? rt_spin_lock+0x83/0x400 [ 1200.613051][T19654] ? bt_accept_unlink+0x7d/0x2f0 [ 1200.613132][T19654] __kasan_check_byte+0x2a/0x40 [ 1200.613155][T19654] lock_acquire+0x84/0x350 [ 1200.613180][T19654] ? __local_bh_disable_ip+0x3c/0x420 [ 1200.613219][T19654] rt_spin_lock+0x83/0x400 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1200.613241][T19654] ? bt_accept_unlink+0x7d/0x2f0 [ 1200.613263][T19654] ? __pfx_rt_spin_lock+0x10/0x10 [ 1200.613285][T19654] ? rcu_is_watching+0x15/0xb0 [ 1200.613309][T19654] ? __local_bh_disable_ip+0x3c/0x420 [ 1200.613333][T19654] ? bt_accept_unlink+0x61/0x2f0 [ 1200.613354][T19654] bt_accept_unlink+0x7d/0x2f0 [ 1200.613375][T19654] ? bt_accept_unlink+0x61/0x2f0 [ 1200.613397][T19654] l2cap_sock_teardown_cb+0x17e/0x490 [ 1200.613448][T19654] l2cap_chan_del+0x98/0x600 [ 1200.613466][T19654] l2cap_conn_del+0x343/0x570 [ 1200.613482][T19654] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 1200.613506][T19654] hci_conn_hash_flush+0x105/0x260 [ 1200.613523][T19654] hci_dev_close_sync+0x7fc/0x10a0 [ 1200.613573][T19654] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1200.613594][T19654] ? lockdep_hardirqs_on+0x7a/0x110 [ 1200.613613][T19654] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1200.613631][T19654] ? mutex_lock_nested+0x152/0x1d0 [ 1200.613652][T19654] ? hci_unregister_dev+0x22a/0x5b0 [ 1200.613671][T19654] hci_unregister_dev+0x232/0x5b0 [ 1200.613691][T19654] vhci_release+0x170/0x1c0 [ 1200.613754][T19654] ? __pfx_vhci_release+0x10/0x10 [ 1200.613772][T19654] __fput+0x42a/0xa80 [ 1200.613796][T19654] task_work_run+0x1d9/0x270 [ 1200.613819][T19654] ? __pfx_task_work_run+0x10/0x10 [ 1200.613838][T19654] ? do_exit+0x735/0x2360 [ 1200.613853][T19654] ? kmem_cache_free+0x187/0x6c0 [ 1200.613874][T19654] ? put_net+0x191/0x260 [ 1200.613925][T19654] ? do_exit+0x735/0x2360 [ 1200.613944][T19654] do_exit+0x73a/0x2360 [ 1200.613961][T19654] ? lockdep_hardirqs_on+0x7a/0x110 [ 1200.613978][T19654] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1200.614000][T19654] ? __pfx_do_exit+0x10/0x10 [ 1200.614015][T19654] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1200.614037][T19654] ? rt_spin_lock+0x1e0/0x400 [ 1200.614061][T19654] ? rt_spin_unlock+0x157/0x200 [ 1200.614085][T19654] do_group_exit+0x22d/0x2f0 [ 1200.614103][T19654] ? rt_spin_unlock+0x163/0x200 [ 1200.614126][T19654] get_signal+0x121b/0x12c0 [ 1200.614156][T19654] arch_do_signal_or_restart+0xbb/0x860 [ 1200.614175][T19654] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1200.614191][T19654] ? __x64_sys_sendmsg+0x263/0x290 [ 1200.614232][T19654] exit_to_user_mode_loop+0x104/0x730 [ 1200.614252][T19654] ? rcu_is_watching+0x15/0xb0 [ 1200.614274][T19654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.614291][T19654] do_syscall_64+0x353/0x580 [ 1200.614309][T19654] ? trace_irq_disable+0x3b/0x140 [ 1200.614330][T19654] ? clear_bhb_loop+0x40/0x90 [ 1200.614348][T19654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.614365][T19654] RIP: 0033:0x7f3b024ace59 [ 1200.614381][T19654] Code: Unable to access opcode bytes at 0x7f3b024ace2f. [ 1200.614391][T19654] RSP: 002b:00007f3b006bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1200.614411][T19654] RAX: 0000000000000064 RBX: 00007f3b02726180 RCX: 00007f3b024ace59 [ 1200.614424][T19654] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c [ 1200.614435][T19654] RBP: 00007f3b02542e6f R08: 0000000000000000 R09: 0000000000000000 [ 1200.614447][T19654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1200.614457][T19654] R13: 00007f3b02726218 R14: 00007f3b02726180 R15: 00007ffc066d5558 [ 1200.614478][T19654] [ 1200.614486][T19654] [ 1200.614498][T19654] Allocated by task 28: [ 1200.614508][T19654] kasan_save_track+0x3e/0x80 [ 1200.614527][T19654] __kasan_slab_alloc+0x6c/0x80 [ 1200.614545][T19654] kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 1200.614565][T19654] __alloc_skb+0x276/0x7a0 [ 1200.614583][T19654] synproxy_send_client_synack+0x175/0xde0 [ 1200.614640][T19654] nft_synproxy_eval_v4+0x362/0x4e0 [ 1200.614692][T19654] nft_synproxy_do_eval+0x335/0x550 [ 1200.614707][T19654] nft_do_chain+0x48d/0x1b10 [ 1200.614828][T19654] nft_do_chain_inet+0x360/0x4b0 [ 1200.614870][T19654] nf_hook_slow+0xc5/0x220 [ 1200.614907][T19654] NF_HOOK+0x21f/0x3c0 [ 1200.614928][T19654] NF_HOOK+0x336/0x3c0 [ 1200.614946][T19654] process_backlog+0x564/0xc50 [ 1200.614963][T19654] __napi_poll+0xae/0x550 [ 1200.614978][T19654] net_rx_action+0x621/0xd70 [ 1200.614994][T19654] handle_softirqs+0x1d9/0x6c0 [ 1200.615015][T19654] __local_bh_enable_ip+0x170/0x2b0 [ 1200.615036][T19654] rcu_cpu_kthread+0x99f/0x1480 [ 1200.615083][T19654] smpboot_thread_fn+0x57c/0xa80 [ 1200.615122][T19654] kthread+0x388/0x470 [ 1200.615136][T19654] ret_from_fork+0x514/0xb70 [ 1200.615154][T19654] ret_from_fork_asm+0x1a/0x30 [ 1200.615174][T19654] [ 1200.615178][T19654] Freed by task 28: [ 1200.615186][T19654] kasan_save_track+0x3e/0x80 [ 1200.615210][T19654] kasan_save_free_info+0x40/0x50 [ 1200.615223][T19654] __kasan_slab_free+0x5c/0x80 [ 1200.615238][T19654] kfree+0x1c5/0x6c0 [ 1200.615253][T19654] skb_release_data+0x85e/0xab0 [ 1200.615270][T19654] __kfree_skb+0x5d/0x210 [ 1200.615286][T19654] nft_synproxy_eval_v4+0x36a/0x4e0 [ 1200.615299][T19654] nft_synproxy_do_eval+0x335/0x550 [ 1200.615314][T19654] nft_do_chain+0x48d/0x1b10 [ 1200.615330][T19654] nft_do_chain_inet+0x360/0x4b0 [ 1200.615345][T19654] nf_hook_slow+0xc5/0x220 [ 1200.615358][T19654] NF_HOOK+0x21f/0x3c0 [ 1200.615376][T19654] NF_HOOK+0x336/0x3c0 [ 1200.615391][T19654] process_backlog+0x564/0xc50 [ 1200.615408][T19654] __napi_poll+0xae/0x550 [ 1200.615422][T19654] net_rx_action+0x621/0xd70 [ 1200.615438][T19654] handle_softirqs+0x1d9/0x6c0 [ 1200.615458][T19654] __local_bh_enable_ip+0x170/0x2b0 [ 1200.615484][T19654] rcu_cpu_kthread+0x99f/0x1480 [ 1200.615503][T19654] smpboot_thread_fn+0x57c/0xa80 [ 1200.615517][T19654] kthread+0x388/0x470 [ 1200.615533][T19654] ret_from_fork+0x514/0xb70 [ 1200.615549][T19654] ret_from_fork_asm+0x1a/0x30 [ 1200.615567][T19654] [ 1200.615572][T19654] The buggy address belongs to the object at ffff8880622de700 [ 1200.615572][T19654] which belongs to the cache skbuff_small_head of size 704 [ 1200.615587][T19654] The buggy address is located 232 bytes inside of [ 1200.615587][T19654] freed 704-byte region [ffff8880622de700, ffff8880622de9c0) [ 1200.615606][T19654] [ 1200.615610][T19654] The buggy address belongs to the physical page: [ 1200.615621][T19654] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x622dc [ 1200.615638][T19654] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1200.615652][T19654] flags: 0x80000000000040(head|node=0|zone=1) [ 1200.615667][T19654] page_type: f5(slab) [ 1200.615684][T19654] raw: 0080000000000040 ffff88801e6f2c80 dead000000000122 0000000000000000 [ 1200.615699][T19654] raw: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000 [ 1200.615714][T19654] head: 0080000000000040 ffff88801e6f2c80 dead000000000122 0000000000000000 [ 1200.615728][T19654] head: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000 [ 1200.615744][T19654] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 1200.615758][T19654] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 1200.615767][T19654] page dumped because: kasan: bad access detected [ 1200.615782][T19654] page_owner tracks the page as allocated [ 1200.615789][T19654] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 28, tgid 28 (rcuc/1), ts 1191253988845, free_ts 1190204839335 [ 1200.615818][T19654] post_alloc_hook+0x1f9/0x250 [ 1200.615837][T19654] get_page_from_freelist+0x262a/0x26a0 [ 1200.615858][T19654] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1200.615876][T19654] allocate_slab+0x79/0x5e0 [ 1200.615889][T19654] refill_objects+0x2d8/0x350 [ 1200.615901][T19654] __pcs_replace_empty_main+0x330/0x690 [ 1200.615922][T19654] kmem_cache_alloc_node_noprof+0x4dc/0x670 [ 1200.615937][T19654] __alloc_skb+0x276/0x7a0 [ 1200.615953][T19654] synproxy_send_client_synack+0x175/0xde0 [ 1200.615967][T19654] nft_synproxy_eval_v4+0x362/0x4e0 [ 1200.615982][T19654] nft_synproxy_do_eval+0x335/0x550 [ 1200.615998][T19654] nft_do_chain+0x48d/0x1b10 [ 1200.616014][T19654] nft_do_chain_inet+0x360/0x4b0 [ 1200.616031][T19654] nf_hook_slow+0xc5/0x220 [ 1200.616044][T19654] NF_HOOK+0x21f/0x3c0 [ 1200.616063][T19654] NF_HOOK+0x336/0x3c0 [ 1200.616081][T19654] page last free pid 5259 tgid 5259 stack trace: [ 1200.616091][T19654] __free_frozen_pages+0x10e7/0x11c0 [ 1200.616110][T19654] __slab_free+0x252/0x2a0 [ 1200.616128][T19654] qlist_free_all+0x99/0x100 [ 1200.616145][T[ 1200.616145][T19654] kasan_quarantine_reduce+0x148/0x160 [ 1200.616162][T19654] __kasan_slab_alloc+0x22/0x80 [ 1200.616180][T19654] __kmalloc_node_track_caller_noprof+0x519/0x7c0 [ 1200.616200][T19654] __alloc_skb+0x2bd/0x7a0 [ 1200.616223][T19654] alloc_skb_with_frags+0xc6/0x760 [ 1200.616244][T19654] sock_alloc_send_pskb+0x884/0x9a0 [ 1200.616266][T19654] unix_dgram_sendmsg+0x4da/0x17b0 [ 1200.616319][T19654] sock_sendmsg_nosec+0x13a/0x180 [ 1200.616335][T19654] sock_write_iter+0x2e4/0x3f0 [ 1200.616349][T19654] vfs_write+0x61e/0xbb0 [ 1200.616371][T19654] ksys_write+0x156/0x270 [ 1200.616388][T19654] do_syscall_64+0x174/0x580 [ 1200.616406][T19654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.616422][T19654] [ 1200.616426][T19654] Memory state around the buggy address: [ 1200.616436][T19654] ffff8880622de680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1200.616447][T19654] ffff8880622de700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1200.616458][T19654] >ffff8880622de780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1200.616465][T19654] ^ [ 1200.616475][T19654] ffff8880622de800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1200.616486][T19654] ffff8880622de880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1200.616494][T19654] ================================================================== [ 1201.714264][T19654] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1201.714287][T19654] CPU: 1 UID: 0 PID: 19654 Comm: syz.8.4275 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1201.714313][T19654] Tainted: [L]=SOFTLOCKUP [ 1201.714320][T19654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1201.714331][T19654] Call Trace: [ 1201.714338][T19654] [ 1201.714347][T19654] vpanic+0x56c/0xa60 [ 1201.714376][T19654] ? __pfx_vpanic+0x10/0x10 [ 1201.714397][T19654] ? __pfx___schedule+0x10/0x10 [ 1201.714420][T19654] panic+0xc5/0xd0 [ 1201.714439][T19654] ? __pfx_panic+0x10/0x10 [ 1201.714461][T19654] ? preempt_schedule_common+0x82/0xd0 [ 1201.714483][T19654] ? rt_spin_lock+0x83/0x400 [ 1201.714515][T19654] check_panic_on_warn+0x89/0xb0 [ 1201.714537][T19654] ? rt_spin_lock+0x83/0x400 [ 1201.714559][T19654] end_report+0x73/0x170 [ 1201.714580][T19654] ? rt_spin_lock+0x83/0x400 [ 1201.714602][T19654] kasan_report+0x128/0x150 [ 1201.714623][T19654] ? rt_spin_lock+0x83/0x400 [ 1201.714649][T19654] ? bt_accept_unlink+0x7d/0x2f0 [ 1201.714671][T19654] __kasan_check_byte+0x2a/0x40 [ 1201.714693][T19654] lock_acquire+0x84/0x350 [ 1201.714717][T19654] ? __local_bh_disable_ip+0x3c/0x420 [ 1201.714743][T19654] rt_spin_lock+0x83/0x400 [ 1201.714767][T19654] ? bt_accept_unlink+0x7d/0x2f0 [ 1201.714789][T19654] ? __pfx_rt_spin_lock+0x10/0x10 [ 1201.714812][T19654] ? rcu_is_watching+0x15/0xb0 [ 1201.714835][T19654] ? __local_bh_disable_ip+0x3c/0x420 [ 1201.714859][T19654] ? bt_accept_unlink+0x61/0x2f0 [ 1201.714881][T19654] bt_accept_unlink+0x7d/0x2f0 [ 1201.714903][T19654] ? bt_accept_unlink+0x61/0x2f0 [ 1201.714924][T19654] l2cap_sock_teardown_cb+0x17e/0x490 [ 1201.714946][T19654] l2cap_chan_del+0x98/0x600 [ 1201.714966][T19654] l2cap_conn_del+0x343/0x570 [ 1201.714984][T19654] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 1201.715009][T19654] hci_conn_hash_flush+0x105/0x260 [ 1201.715029][T19654] hci_dev_close_sync+0x7fc/0x10a0 [ 1201.715056][T19654] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1201.715079][T19654] ? lockdep_hardirqs_on+0x7a/0x110 [ 1201.715098][T19654] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1201.715119][T19654] ? mutex_lock_nested+0x152/0x1d0 [ 1201.715141][T19654] ? hci_unregister_dev+0x22a/0x5b0 [ 1201.715162][T19654] hci_unregister_dev+0x232/0x5b0 [ 1201.715184][T19654] vhci_release+0x170/0x1c0 [ 1201.715204][T19654] ? __pfx_vhci_release+0x10/0x10 [ 1201.715224][T19654] __fput+0x42a/0xa80 [ 1201.715248][T19654] task_work_run+0x1d9/0x270 [ 1201.715269][T19654] ? __pfx_task_work_run+0x10/0x10 [ 1201.715289][T19654] ? do_exit+0x735/0x2360 [ 1201.715306][T19654] ? kmem_cache_free+0x187/0x6c0 [ 1201.715328][T19654] ? put_net+0x191/0x260 [ 1201.715350][T19654] ? do_exit+0x735/0x2360 [ 1201.715370][T19654] do_exit+0x73a/0x2360 [ 1201.715393][T19654] ? lockdep_hardirqs_on+0x7a/0x110 [ 1201.715412][T19654] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1201.715434][T19654] ? __pfx_do_exit+0x10/0x10 [ 1201.715452][T19654] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1201.715475][T19654] ? rt_spin_lock+0x1e0/0x400 [ 1201.715501][T19654] ? rt_spin_unlock+0x157/0x200 [ 1201.715534][T19654] do_group_exit+0x22d/0x2f0 [ 1201.715553][T19654] ? rt_spin_unlock+0x163/0x200 [ 1201.715578][T19654] get_signal+0x121b/0x12c0 [ 1201.715611][T19654] arch_do_signal_or_restart+0xbb/0x860 [ 1201.715631][T19654] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1201.715648][T19654] ? __x64_sys_sendmsg+0x263/0x290 [ 1201.715680][T19654] exit_to_user_mode_loop+0x104/0x730 [ 1201.715707][T19654] ? rcu_is_watching+0x15/0xb0 [ 1201.715730][T19654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.715748][T19654] do_syscall_64+0x353/0x580 [ 1201.715768][T19654] ? trace_irq_disable+0x3b/0x140 [ 1201.715789][T19654] ? clear_bhb_loop+0x40/0x90 [ 1201.715808][T19654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.715826][T19654] RIP: 0033:0x7f3b024ace59 [ 1201.715842][T19654] Code: Unable to access opcode bytes at 0x7f3b024ace2f. [ 1201.715852][T19654] RSP: 002b:00007f3b006bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1201.715871][T19654] RAX: 0000000000000064 RBX: 00007f3b02726180 RCX: 00007f3b024ace59 [ 1201.715884][T19654] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c [ 1201.715897][T19654] RBP: 00007f3b02542e6f R08: 0000000000000000 R09: 0000000000000000 [ 1201.715908][T19654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1201.715919][T19654] R13: 00007f3b02726218 R14: 00007f3b02726180 R15: 00007ffc066d5558 [ 1201.715941][T19654] [ 1201.716356][T19654] Kernel Offset: disabled