last executing test programs: 15m0.331064416s ago: executing program 2 (id=46): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x29, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0) close(r6) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xffffffc6, 0x30}, &(0x7f0000000000)=0x46) 14m59.039856609s ago: executing program 2 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) 14m57.596478741s ago: executing program 2 (id=51): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 14m53.77385394s ago: executing program 2 (id=62): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000001300)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x10003, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x202, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0xfffd, 0x3, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x8000, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x80000000, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x5, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) (fail_nth: 2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x1}) 14m52.142965265s ago: executing program 2 (id=67): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}}, 0x20}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) 14m49.999592319s ago: executing program 2 (id=75): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (fail_nth: 2) 14m34.736610119s ago: executing program 32 (id=75): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (fail_nth: 2) 11m33.240783172s ago: executing program 3 (id=865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a0182, 0x0) memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000001540), 0x202000, 0x0) fcntl$getflags(r1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = dup(r0) preadv2(r3, 0x0, 0x0, 0x3700, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)={0x12}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 11m32.068179392s ago: executing program 3 (id=868): syz_emit_ethernet(0x42, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, 0x0, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1ff8d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002706870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83984e68a6d80a5f5222ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0007000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1f6428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000a034000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1ebbb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa5210b16eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r3, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x8, 0x3a, '', 0x3a, '[$(.[(', 0x3a, './file0'}, 0x2d) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11m31.66524407s ago: executing program 3 (id=870): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x200, 0x1}}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) accept$nfc_llcp(r2, &(0x7f0000000040)={0x27, 0x0}, &(0x7f00000000c0)=0x60) recvmsg$kcm(r1, 0x0, 0x40010103) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000440)={r8, 0x3, &(0x7f0000000340)=[0xefc, 0x1, 0x832a], &(0x7f0000000380)=[0x0, 0xfffffffe, 0x6, 0x7, 0x370e, 0xc, 0xc1], 0x72, 0x3, 0xfffffff6, &(0x7f00000003c0)=[0xf, 0x4, 0xff], &(0x7f0000000400)=[0x2, 0x0, 0xf940, 0x8, 0x9b, 0x439, 0x1373f236, 0x200, 0xa]}) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000ae00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2a}, 0x94) sendmsg$NFC_CMD_DEV_DOWN(r7, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYRES64=r3, @ANYRES32=r6, @ANYBLOB="0829c8a500", @ANYRES32=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x2004c886}, 0x40025) 11m29.208974285s ago: executing program 3 (id=878): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) listen(0xffffffffffffffff, 0xbe) accept(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 11m27.338778454s ago: executing program 3 (id=881): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0xc9, @rand_addr=0x64010101, 0x4e20, 0x4, 'dh\x00', 0x38, 0x100, 0x75}, 0x2c) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000100)=""/4096, &(0x7f0000001100)=0x1000) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000001140)={0xa0000000}) r4 = fcntl$getown(r0, 0x9) sched_setscheduler(r4, 0x5, &(0x7f0000001180)=0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000011c0)={0x1, 0xffffffffffffffff}, 0x4) mmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x3000004, 0x100010, r5, 0x6c60b000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c084}, 0x8000) fcntl$getownex(r2, 0x10, &(0x7f0000001340)={0x0, 0x0}) r8 = syz_open_procfs$pagemap(r7, &(0x7f0000001380)) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) write$char_usb(r9, &(0x7f00000013c0)="a8450aba18c99d6efe74a4936f26525dc0003dc2be510ad6c3dd2a6f995b7227222ed533016fd6cf956579169543a0b40227fa54720f515b3cfbb2da1917ca4dcb7a71eccbe074557d7ded5f3096b77c7183da9c1c6cfb9cae8593c31d3bc9f1bbe16761f855b11003036a32690db0e53e16f1b8aa453086db338a6bf0b3493fa7c74367", 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001480)={0x2710, 0xe, 0x1b000, 0x1000, &(0x7f0000ff5000/0x1000)=nil}) r10 = accept(r6, &(0x7f00000014c0)=@un=@abs, &(0x7f0000001540)=0x80) getsockopt$CAN_RAW_FD_FRAMES(r10, 0x65, 0x5, &(0x7f0000001580), &(0x7f00000015c0)=0x4) socketpair(0x1e, 0x80000, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SIGNAL_MSI(r8, 0x4020aea5, &(0x7f0000001640)={0x9000, 0x4000, 0x1, 0x1, 0x7}) r13 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) recvmsg(r13, &(0x7f0000002800)={&(0x7f0000001680)=@x25, 0x80, &(0x7f0000002740)=[{&(0x7f0000001700)=""/14, 0xe}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2, &(0x7f0000002780)=""/69, 0x45}, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r12, 0x0, 0x2a, &(0x7f0000002840)={0x3, {{0x2, 0x4e21, @loopback}}}, 0x88) sendmsg$kcm(r10, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002900)="8ca11afbd7b5e635a50599f494db9fbbc819bf702cac647316f9290c8e799c4dc28d9e1582649bd4626444781eb04bcfa8c256ea9f300630217fc95ce388053b80798759e0692095af2da51afd0938f879ab74c5c8126e985349e960cbcf3e", 0x5f}], 0x1, &(0x7f00000029c0)=[{0xd0, 0x107, 0x9, "fbf7f26250af14ed7afc21036846169eadcc06f5e4da217e876e24f34341dd8c4933aae265863b8e87a395a42f53162c084eed31a49ff502460ed128786d8308f072b3bb026c129a04fe5113f640306b3a8223966e53e307cc96d76bead1f2265fc9b477c88a0a6341976ddb25774464027ba3a7913d09d5eff382eeb4a2276816ffedff6ed75a3ede9d85a44a4b57be7b37189ff92a9563d16b7d407419a06d801ebdcf938e11f0cb6d1b5f4c3b483aa997039a0f3b2911cc69a817"}], 0xd0}, 0x40000) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r11, &(0x7f0000002d40)={&(0x7f0000002b00), 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11m26.797282405s ago: executing program 3 (id=884): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000380)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"ebf8341582e1b7ca855b22c8502ebd51", 0x0, r1, {0x9100, 0x7}, {0x100000000, 0x80}, 0x9, [0xffffffffc59fcb3a, 0x8001, 0x3, 0xe, 0x4, 0xff, 0x5, 0x4, 0x3, 0x7, 0x38d2, 0x8000000000000001, 0x7fff, 0x4ca, 0x7, 0xfffffffffffffc5c]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x48100) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f00000000c0)={0x3, @capture={0x0, 0x0, {0x5, 0x7}, 0x80000001, 0x3562}}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x5, 0xe, 0x0, &(0x7f0000000280)="6a370000000000001f71a76d2688", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) (async, rerun: 64) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1) (async, rerun: 64) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) (async) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x4}}}}}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x17, 0xa, 0x203, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4004) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (rerun: 32) 11m11.67343197s ago: executing program 33 (id=884): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000380)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"ebf8341582e1b7ca855b22c8502ebd51", 0x0, r1, {0x9100, 0x7}, {0x100000000, 0x80}, 0x9, [0xffffffffc59fcb3a, 0x8001, 0x3, 0xe, 0x4, 0xff, 0x5, 0x4, 0x3, 0x7, 0x38d2, 0x8000000000000001, 0x7fff, 0x4ca, 0x7, 0xfffffffffffffc5c]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x48100) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f00000000c0)={0x3, @capture={0x0, 0x0, {0x5, 0x7}, 0x80000001, 0x3562}}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x5, 0xe, 0x0, &(0x7f0000000280)="6a370000000000001f71a76d2688", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) (async, rerun: 64) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1) (async, rerun: 64) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) (async) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x4}}}}}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x17, 0xa, 0x203, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4004) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (rerun: 32) 9m12.403690113s ago: executing program 1 (id=1273): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000064000000100000041"], 0x50) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f01c, 0x2}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000440)=0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xff, r0, 0x0, 0x500}, 0x38) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x1, 0x700, 0x6, 0xa, {{0x46, 0x4, 0x0, 0x3f, 0x118, 0x66, 0x0, 0x1, 0x0, 0x0, @multicast2, @private=0xa010100, {[@end, @timestamp_addr={0x44, 0x3c, 0xe3, 0x1, 0x7, [{@loopback, 0x9}, {@private=0xa010101, 0xff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x96e}, {@empty, 0x7}, {@empty, 0xfffffffa}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @end, @timestamp_addr={0x44, 0x1c, 0xfe, 0x1, 0xc, [{@rand_addr=0x64010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x3d}, {@multicast1, 0xfffff375}]}, @rr={0x7, 0x7, 0xc, [@remote]}, @rr={0x7, 0x7, 0x54, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x6b, 0x3, [{0x2, 0xb, "9c0156470a54711d88"}, {0x2, 0x5, "65ad67"}, {0x6, 0xb, "e277194dc86f410601"}, {0x6, 0x12, "f14c308bb06540650dab70431f6fc18f"}, {0x6, 0x11, "fd13a1a90c02e19e564885cf8f7a1c"}, {0x7, 0x8, "3328d8a980e9"}, {0x5, 0xf, "36092047363ce7b472d9ad099e"}, {0x7, 0x10, "b89deb18e6d188a2f39565de013a"}]}, @timestamp_addr={0x44, 0x24, 0xb8, 0x1, 0x3, [{@empty}, {@loopback, 0xec08}, {@multicast1, 0x10000}, {@broadcast, 0x19e5}]}, @timestamp_prespec={0x44, 0xc, 0xf1, 0x3, 0x3, [{@multicast2, 0x7}]}]}}}}}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = mq_open(&(0x7f0000000040)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r6, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x005gM\xfb\xa3\xabt\xb8\x97\xa2`\xcc\xfb&\r.\x97TM&\x93\xd3\xd2\x17[\x89}\xd2j\xd6\xee\xf4\'@\xff\x00\x00\x00\x00\x00\x00\x00\x00\xcd.,\xfb\xab\xb9\x00r\voG\x9d\xaa\x86\xe9\xff\x1b\xa20\x16\t\x05\xa4\x97\xfah\xe9u\xbb\xad~\xb3\x83\xb9\xa3\xe7\xa4\xea\xe6x\xd8H\xa9\xa89\x1a\xfeZ0+\x18\xe9\xc7\x87\\\x05\xbf`!Q\xf2\xcc\xbc4\xbc|s\xbdZY1\x02r\xac\x805\x06\x18\xb5\x88gx\xac\xd6\xc7.\xa6Z\x84X:{II>~<\xa4x\'\xd0\xdc\xf5`\x1a\x1dI:\x8b\xc6v/;U\xac\x12\xed\xed\x86W\xf4\xcb\xf4\xdd\x89w<\xd2d\xc0\x17\xf3\x9f\xdf\xd2', 0x1, 0x0, 0x0) mq_open(&(0x7f0000000280)='!\x00', 0x2, 0x104, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000380)={r4, 0x1, 0x6, @multicast}, 0x10) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_usb_connect$cdc_ecm(0x3, 0xac, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000000010109029a000101000000090400000302020000052406000005240000000d240f01000000000000feffff042401f40f"], 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @win={{0xfffffffb, 0x2, 0x7, 0x98}, 0x6, 0x4, &(0x7f0000000040)={{0x6, 0x7, 0x3, 0x43}}, 0x6, &(0x7f0000000080)="1dda223d436905e2e3b3bd788ee7a6a2ea078cf2653a3093a2c2f74b2bcbf65ff8aae58a1a6d2f0f14f606d7c28ae9db", 0x1}}) 9m8.915748609s ago: executing program 1 (id=1282): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r2, &(0x7f0000000200)=""/229, 0xe5, 0x0, &(0x7f00000000c0)=@generic={0x1f, "c27b94d1f702650837c04408804bdfa10392d49e98f836ec2c175f91f7292033d6ee05ddaa2ff0f449f97387f8af47668ddd5461524a80d59f61df4d50b38a23b66e940d81e7d234766a448b1c0e5a21fee93f6007c0c77b4adb2e0ef344ad4b752a89de2838efd05a655c15c3a55678c07e7fab57aafcbe96c59b1e7499"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000400)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x0, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000080)=0x2000, 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x8, 0x12, 0xffffffffffffffff, 0x10000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8000, 0x1a0) 9m3.636843897s ago: executing program 1 (id=1288): r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/custom0\x00', 0x802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000540)) syz_clone3(&(0x7f0000000400)={0x100044000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x12}, &(0x7f00000014c0)=""/4096, 0x1000, &(0x7f0000000300)=""/243, &(0x7f0000000240)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) timerfd_create(0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x7c, r5, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x52, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @initial, {0x4, 0x3}, @value=@ver_80211n={0x0, 0x7ffe}}, 0x1c000000000000, @default, 0x10a, @void, @val, @void, @void, @void, @val={0x5, 0x3, {0x0, 0xbd}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x5, 0x9, 0xff}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x2, 0x8, 0x8}}, @val={0x76, 0x6, {0xd0, 0x3, 0x34, 0x2}}}}]]}, 0x7c}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x220080, 0x0, 0x8}, 0x18) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r7, 0x0, 0x1000, 0xec, &(0x7f00000024c0)="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", &(0x7f0000000740)=""/236, 0xf, 0x0, 0xa0, 0xd9, &(0x7f00000005c0)="3e46d3fcf209f2c86394798c060636930daddf5986db91674d7633e63f470346d62fb56f43124ea0741967a759e5800d33713ed79188ce20d5373f16d40ad39db61bf710748bb434b654759cdb7ee2e3c42d77ce03ad8ff54c88a56c3d9cd72512b5e7b2e574c3375f324640b95089867387f782724cb8702fcc0960f2f758d1ade07211ab0c9d32b14e57a6ab3b635a12f669c286d241e50227d5c5f9cee2f3", &(0x7f0000000900)="20a94cbdcf47876772ee4430c708b9f07b349766adfd08124743e1f8cc23afdbc4005d26129eafbfafa0cbdb132ebfc1b033a1362c6d799aa4ee8e478de9cdb3758289b6b181aff568e02d4f526017519cb9f9de39df6447a95bab36653c60e7a6107773cddf6e31bf5c26d612fb4ad565b04299374b6dc3d38bff246bb9ae2f192ac5b9fcd032977ae36cac572e7a07186596088b2fae1b56dcad2a83f0bbdd475f3f0b52a256f976966da7aefdf5244b862eff1719c862b73462572b7f1529c507b009937c0a200d572864ee0035879afee840411b2d5b52", 0x2, 0x0, 0x8}, 0x50) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000090000000000000000000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r8, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 9m2.484328072s ago: executing program 1 (id=1293): fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) timerfd_create(0x8, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x220080, 0x0, 0x8}, 0x18) semctl$SEM_STAT(0x0, 0x4, 0x12, 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000090000000000000000000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r6, 0x0, 0x11, 0x0, &(0x7f0000000040)="c1dfb080cd21d308098e000081007e2288", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0xb2, "2824b00c23e48a58538129ef44fa6f2398240c8ffe9695b9c9495296b691c03ea84c9f14c9fd1291e0d1e9d413231f0fa1aa843efe10aad842e02169c2b760c9395046527f8b1593fe98b0eba6f3ee0d83cda921e02a94cd5448893dd71dc059dc73b2bfa63276ca387066f3b280df46a33b3ab0bd87bf4aad80cc5adfcd76d543c5a313b8a058e9ee6a770e37072dccebb19165527786b2065ed6b1aa0cef1bda8d0c1e36fb1c9cc2b3820752d0f4f1207a"}, 0x0) 9m0.732366521s ago: executing program 1 (id=1295): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x300, 0x0, 0x2, 0x9, 0xfff, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x300, 0x0, 0x2, 0x0, 0x6, 0xf}, 0x20) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000000140)={&(0x7f00000014c0)=[0xfffffffc, 0x5, 0xfffffff7, 0x5, 0x3, 0x0, 0x7, 0xc763, 0x0, 0x7, 0xfffff6dc, 0x8b8, 0x5, 0x2, 0x7725, 0x0, 0xffffffff, 0x3, 0x7, 0x2, 0x5, 0x9a, 0x6, 0x7, 0xfffffffc, 0x4, 0x200, 0x7, 0x7fff, 0x5, 0x7, 0x2, 0x3ff, 0xffff5fb1, 0x2e56, 0xd9, 0x8, 0x7, 0x80, 0x1, 0x1, 0x48e57d87, 0x1ff, 0x80000000, 0x7, 0x9, 0x8, 0x8, 0x8, 0x8, 0x782cbda5, 0x1000, 0x8, 0x1, 0x40, 0x5, 0x9, 0x835, 0x2, 0x6, 0x10001, 0xd790, 0x0, 0x8, 0x2, 0x4, 0x7, 0x6525, 0xcb, 0x4, 0x1, 0x4, 0x8, 0x6, 0x7fff, 0x4, 0x615, 0x9, 0x6, 0xff, 0x9, 0xfcd1, 0x3, 0x9, 0x8, 0x4, 0x6, 0x76, 0x4, 0x4, 0x4, 0x400, 0x1ff, 0x0, 0x1e, 0x8, 0x9b, 0x7, 0x2, 0x6, 0x6, 0x5, 0xc, 0x1000, 0x0, 0x8, 0x6, 0x7, 0x10001, 0x4, 0x1, 0x3, 0x1, 0x9, 0xfffffffb, 0x4, 0x8, 0xfffffffa, 0x7fff, 0x7, 0xdd8, 0xffffffff, 0xfffffe01, 0x3, 0x4, 0x8, 0x4, 0x5, 0x1, 0x80000001, 0x8, 0x690, 0x3, 0xb, 0x2, 0x8, 0x3844, 0x3ff, 0xc, 0x5, 0x8, 0x2, 0x2, 0x0, 0x8, 0x9, 0x0, 0x2, 0x7, 0x1, 0xc6c, 0x7fffffff, 0x3, 0x8ecf, 0x1, 0x200, 0x10000, 0xc721, 0x74c, 0x5, 0x93d0, 0x4, 0xffffff9b, 0x353, 0x0, 0x8, 0x7, 0x4, 0x961a, 0x8, 0x3, 0x9, 0x4, 0x9, 0x1, 0xffffffff, 0xe, 0x6, 0x1, 0x2, 0x1, 0x2, 0x10000, 0x1, 0x1, 0xa, 0x80, 0x8e, 0x1, 0x2, 0xed7, 0xd, 0x7f, 0xbd84, 0x1, 0x1, 0x9, 0x9, 0x5, 0x0, 0xa62, 0x2, 0x4, 0x5, 0x8001, 0x1000, 0x7, 0x8001, 0x1, 0xfffffffe, 0x6, 0xa32, 0xffffffff, 0x8, 0x10000, 0x1c0c, 0xfffff801, 0x6ed1, 0x2, 0x2, 0x9, 0xa, 0x26f, 0x2, 0x9, 0x40, 0x91ba, 0x4, 0x9, 0x2, 0x8, 0x5, 0x4d5c, 0x80000000, 0x0, 0x4, 0xfffffffb, 0x800, 0x4, 0x1, 0x40, 0xb109, 0xfffffffd, 0x2, 0x1, 0x5, 0x1, 0x58, 0x8001, 0xc, 0xe, 0x2, 0x8, 0xffffff83, 0x5, 0x4, 0x7, 0x5b3, 0x5, 0x400, 0x4, 0x45a517b8, 0xfff, 0x400, 0x7, 0x297, 0x2, 0xdfd6, 0x5dd, 0xe0, 0x0, 0x5, 0x3, 0x0, 0x6472, 0x1, 0x74ef, 0x4, 0x800, 0x7, 0x2c4, 0x5, 0x6, 0x8, 0x4, 0x4, 0x4, 0x8, 0x9540, 0x10, 0x7, 0xf, 0x6, 0x3636, 0x3, 0x2, 0x4, 0x400, 0x3, 0x0, 0xfffffff9, 0xb9, 0x9, 0xfffffffa, 0x80, 0x2, 0x1, 0x2, 0x8, 0x7, 0x3, 0x1a01, 0x5, 0x10000, 0x40, 0x9, 0x7f, 0x200, 0x6, 0x7, 0x0, 0x2, 0x6, 0x7, 0x80, 0xffffffa7, 0x5, 0x7, 0x3, 0x6, 0x7, 0x200, 0x7, 0x1ff, 0x3, 0x83, 0x2e0, 0xff, 0x7, 0x0, 0x0, 0x401, 0x6, 0x1e7a4a75, 0x7, 0xfffffff7, 0x40, 0x9, 0xffff, 0x1, 0x5, 0x9, 0xb76f, 0x4, 0xfffffff7, 0x0, 0x0, 0x7ff, 0x4, 0x88c4, 0x1, 0x347, 0x9, 0x1, 0x9, 0x0, 0x8, 0x1, 0x9, 0x3, 0xd, 0x5, 0x9, 0x1, 0x15, 0x5, 0x0, 0x87, 0x3, 0x9, 0x4, 0x5, 0x200, 0x1b, 0xff, 0x37b, 0x2, 0xfffffffd, 0x3, 0x4, 0x6, 0x4, 0xf, 0x3, 0x3, 0x5, 0x5, 0xffffffff, 0x5, 0x2e, 0x6, 0x80000000, 0x9, 0xfa, 0x2, 0x3, 0x4, 0xfffffff9, 0x8, 0x841f, 0x2, 0x5, 0x5df, 0xa, 0x7fffffff, 0xf31d, 0x283, 0x9, 0x1b, 0x5, 0xff, 0xaf, 0x5, 0x7fff, 0x6, 0x7f, 0x2, 0x7, 0x7, 0x7, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x7f, 0x7, 0x0, 0x3, 0x255e9f34, 0x4, 0x9, 0x4, 0x9, 0x1, 0xc, 0x2, 0x0, 0x2, 0x8000, 0x7fff, 0x10, 0xfffffffd, 0xffff, 0x8, 0x2, 0x9, 0x3, 0x2, 0x4, 0x6, 0x3, 0x1, 0x6, 0x8, 0xf8000000, 0x4, 0x80000001, 0x6, 0xdb, 0x5, 0x3fc, 0x773, 0x8, 0x882d, 0x1, 0xd, 0x2, 0x8, 0x1, 0x8, 0x2, 0x3, 0x3, 0x1, 0xfd77, 0x2b9f, 0x6, 0x102, 0x5, 0x0, 0x10001, 0x9, 0x4, 0x0, 0xffff, 0x9, 0x4, 0x80000001, 0x6, 0x1, 0x4, 0x1a98, 0x6, 0x80000001, 0x7fff, 0x3, 0x6, 0xa8c9, 0x8, 0x55e, 0xa, 0x63c, 0x4, 0x742d, 0x5, 0x5, 0xfffffffa, 0x6, 0x3ff, 0x5, 0x1fb9, 0x0, 0x3, 0x4, 0x8000, 0x80000000, 0xffff, 0x0, 0x9, 0x80000000, 0x741f, 0x8, 0xfffffffd, 0x3ff, 0x1, 0x3, 0x2, 0x1f0, 0x3, 0x1, 0x5, 0x8, 0x200, 0x9, 0x0, 0x9, 0x4, 0x0, 0x4, 0x0, 0x4, 0x6, 0xdeb2, 0x8, 0x3, 0x2, 0xc7bc, 0x10, 0x73a3, 0x6, 0x538f, 0xfff, 0x4, 0x80, 0x100, 0xffffebdf, 0x40, 0x9, 0x3, 0x2, 0x3, 0x9, 0x2, 0x1173, 0xfffffffd, 0x8, 0x3, 0xb, 0x9, 0x3, 0x7, 0x1, 0x81, 0x3, 0xacc8, 0x5, 0xfffffffe, 0x5, 0x7, 0x800, 0x5, 0x5, 0xcd3, 0x8, 0x1000, 0xfffffff9, 0xfffffffe, 0x3, 0x40, 0x9, 0x9, 0x100, 0x9, 0x1, 0x4, 0x2b, 0x6, 0x7fff, 0x800, 0x9, 0x5d98000, 0x0, 0xbc5, 0xa, 0xcfd, 0xe419, 0x200, 0xbbcd, 0x8, 0x400, 0x4, 0x0, 0x1, 0x7, 0x6, 0xbe, 0x9, 0x4, 0x4, 0x205, 0x4, 0x10000, 0x3, 0x8, 0x4, 0x3, 0xe45, 0xd375, 0x77, 0x3, 0xb, 0x7, 0x4, 0x1, 0x2, 0xf5a5, 0x6, 0x5, 0x10000, 0x0, 0x0, 0x10000, 0x14a, 0xa, 0x5, 0x1, 0xbe, 0x1, 0x80, 0x8001, 0x5, 0x2, 0x101, 0x3, 0x3, 0x3, 0xcb6, 0x4, 0x5, 0x7, 0x69, 0xb, 0x1, 0x100, 0x7, 0x2, 0x8, 0x5, 0x835e, 0x2, 0x4, 0x1, 0x3, 0x80, 0xf, 0x7, 0xbb, 0x75, 0x1, 0x607, 0xb08, 0x3, 0x3, 0x401, 0x5, 0x4, 0x10000, 0x0, 0x9, 0x7fff, 0x2, 0x624188f3, 0x4, 0x6, 0x5f41, 0x34b022f7, 0x1, 0x9, 0x200, 0xe0eb, 0x8, 0x2, 0x0, 0x8, 0x0, 0x2, 0x1, 0x8, 0xc648, 0x200, 0x8, 0x100, 0x2, 0x2, 0x54, 0x1, 0xc7, 0x8, 0xfffffffd, 0x3, 0x8000, 0x7fffffff, 0x5, 0xd, 0xa7d, 0x6, 0xe, 0x401, 0x19, 0x6d, 0x8, 0x6, 0x7bf8, 0xa, 0xa58a, 0x2, 0xf4d, 0x2, 0x1, 0x7, 0x5, 0x8, 0x80000001, 0x6, 0x4, 0x10, 0x0, 0x100, 0x5, 0x800, 0x38, 0x4, 0x4, 0x8292, 0x9, 0x7ff, 0x4, 0x2, 0x152c, 0x4, 0x8, 0x5, 0xbe9e, 0xffff8000, 0x80000000, 0xffff, 0x9, 0x8, 0x9, 0x1000, 0xffffffff, 0x2, 0x8, 0x4, 0x2, 0xff, 0xb0, 0x8, 0xf92, 0x7fff, 0x40, 0x2, 0x5663, 0x1, 0xfffffa8f, 0x735, 0x1, 0x4, 0x9, 0x0, 0xfffffff8, 0xfffffffd, 0x2, 0xffff, 0xb3b2, 0x8, 0x1, 0x3, 0x3, 0x7, 0x2, 0xd59, 0x8, 0xfffffff9, 0x6, 0x401, 0x4, 0x4, 0xff, 0xff, 0x80, 0x7, 0xe4, 0x0, 0x4000, 0x5, 0x80000001, 0x2, 0x8, 0x9, 0xfffffff8, 0x0, 0x52de, 0xfff, 0x89, 0x2, 0x5, 0x200, 0x0, 0x0, 0xc, 0x4e1d, 0x46ca, 0x5db3, 0xce, 0x2, 0x4, 0x0, 0xd1b3, 0xc, 0x8, 0x46, 0x8001, 0x5, 0x6, 0x80000001, 0x7fffffff, 0xffffff7f, 0x400, 0x89e, 0xff, 0x4, 0xc0000, 0x7, 0x9, 0x1, 0x200, 0x1, 0xf1, 0xfffffffd, 0xfffffffc, 0xb822, 0x4, 0xfffffff1, 0x9, 0x2cd5, 0x2, 0x5, 0x7, 0x10, 0xa, 0x8, 0xe0a, 0x9, 0x9, 0x9, 0x0, 0x0, 0x855, 0x1ff, 0xfffffff8, 0x3, 0x9, 0x101, 0x9, 0x2, 0x9, 0x2, 0x2, 0x5bc, 0x4, 0x1, 0x6, 0x7, 0x3, 0x9, 0x10, 0x5, 0xa, 0x2, 0xffff2f5c, 0x8, 0x6, 0xf, 0x5, 0x1000, 0x6, 0x2, 0x4, 0x3, 0xc, 0x8, 0x7, 0x200, 0x3, 0x5, 0x8, 0x681e, 0xfffffffa, 0x10001, 0x8, 0x8, 0x0, 0x5, 0x6080, 0x2, 0x6, 0x9d0, 0x10, 0x10, 0x7, 0xfffffffe, 0x677ac869, 0xc, 0x0, 0x1ff, 0x6, 0x6, 0x2, 0x8, 0xc143, 0x725d, 0x3, 0x7, 0x2, 0x9, 0x2, 0x5, 0xb, 0x7, 0x5, 0x8, 0x40, 0x0, 0x10001, 0x3, 0x7, 0x9, 0x7b5e, 0x1e55, 0x9, 0x96cc, 0x5, 0x80000000, 0x3e3, 0x4, 0x1, 0x18, 0x7, 0x6, 0x8, 0x3, 0x4, 0x3ff, 0x5, 0x4, 0x400, 0xdd, 0x8, 0x3, 0x6, 0x3, 0xf741de1, 0x5, 0x3, 0x8, 0x0, 0xfd, 0x3, 0xb3, 0x5, 0x8, 0x400, 0xfffff2db, 0x7, 0x7fff, 0xf1b, 0x153c0a72, 0x84f, 0x6896, 0x9, 0x9, 0x5, 0x40, 0x4, 0x4dcf, 0x101, 0x6, 0x2ab, 0x8001, 0x7, 0xc, 0x6d08], 0x2, 0x400, 0x4}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x80000}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000140)={0x80000000, 0x0, 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) r8 = getpid() setpriority(0x0, r8, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x42f, &(0x7f00000014c0)=""/4101, 0x41000, 0xc}, 0x94) ioctl$CEC_ADAP_G_LOG_ADDRS(r4, 0x805c6103, &(0x7f00000011c0)) 8m59.55204073s ago: executing program 1 (id=1297): r0 = socket(0x2c, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11b, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063015300000000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x12) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs\x00', &(0x7f0000000380)=ANY=[], 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x40000000000b946) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001e000103020000150000000005"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r6 = socket$netlink(0x10, 0x3, 0x6) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), r5) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x6f54d96b286e6b01}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r7, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000340)=ANY=[], 0x4) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) r8 = io_uring_setup(0x513c, &(0x7f0000000280)={0x0, 0x8000006, 0x2000, 0x2, 0x1ef}) io_uring_enter(r8, 0x5d91, 0xffce, 0x20, &(0x7f0000000000)={[0xc5]}, 0x8) 8m44.061670127s ago: executing program 34 (id=1297): r0 = socket(0x2c, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11b, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063015300000000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x12) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs\x00', &(0x7f0000000380)=ANY=[], 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x40000000000b946) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001e000103020000150000000005"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r6 = socket$netlink(0x10, 0x3, 0x6) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), r5) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x6f54d96b286e6b01}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r7, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000340)=ANY=[], 0x4) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) r8 = io_uring_setup(0x513c, &(0x7f0000000280)={0x0, 0x8000006, 0x2000, 0x2, 0x1ef}) io_uring_enter(r8, 0x5d91, 0xffce, 0x20, &(0x7f0000000000)={[0xc5]}, 0x8) 7m45.671485969s ago: executing program 5 (id=1410): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x400000) ioctl$RTC_UIE_ON(r4, 0x7003) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0xffff) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r5, &(0x7f0000000580)=""/174, 0xae) socket$nl_generic(0x10, 0x3, 0x10) 7m44.327647851s ago: executing program 5 (id=1412): r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, 0x0, 0x4042, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, r5, &(0x7f0000000080), 0x1004) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x21, 0x801, 0xfffffffc, 0xfffffffc, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 7m41.22263354s ago: executing program 5 (id=1413): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e40)="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", 0x2e9}], 0x1}}], 0x1, 0x2810) setsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7m36.019732221s ago: executing program 4 (id=1422): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x25, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x2}, @mss={0x2, 0x1}], 0x4) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) (async) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 7m35.686056777s ago: executing program 5 (id=1423): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980901, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b8010000000f01d90f2259c4c1cdeedd66ba6100edc4e1f5fc932ebc0000f6282e0f71d1020f01c8892454c744240000000000c74424021200c0fec7442406000000000f011424", 0x47}], 0x1, 0x50, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a9, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfd0}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m33.740777873s ago: executing program 5 (id=1427): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x1, 0xaf3, 0x2) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x7fffffffffffffff) 7m33.009576678s ago: executing program 5 (id=1428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$phonet(0x23, 0x2, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x94, 0x2, [@TCA_CGROUP_ACT={0x8c, 0x1, [@m_vlan={0x88, 0x7, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x8, 0x20000004, 0x6, 0x9}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x42a}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x9, 0x10000000, 0x1, 0x7ff}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_CGROUP_ACT={0x4}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc854}, 0x0) 7m32.835350561s ago: executing program 4 (id=1429): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980901, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a9, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfd0}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m31.218511085s ago: executing program 4 (id=1430): io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) listen(0xffffffffffffffff, 0xbe) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) 7m30.735878474s ago: executing program 4 (id=1431): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x20000) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 7m28.566859661s ago: executing program 4 (id=1434): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x3c, 0x1}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) dup3(r2, r1, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x540f, 0x0, 0x2000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) syz_clone3(&(0x7f0000000740)={0xa4000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000500), {0x33}, &(0x7f0000000540)=""/75, 0x4b, &(0x7f0000000640)=""/97, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) 7m26.259757527s ago: executing program 4 (id=1438): r0 = socket$netlink(0x10, 0x3, 0x4) rt_tgsigqueueinfo(0x0, 0x0, 0x2b, &(0x7f0000000300)={0x8, 0x9, 0x100}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r1 = socket$isdn_base(0x22, 0x3, 0x0) write(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x24000040) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x9, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xd66df691bbc56db3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0xfa, 0xfd, 0xfffff00c}, {0x6, 0x5, 0xa, 0x7}]}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001900000225bd705d342afab05e9289d101dd451bc200fddbdf25800020bb0003ac090002000008000b00090000006fe44dce5a8d37d8abaa980e49f50fb2b34e9a403ba8f683054e0dfcec01838f9d3ce07432ab8f66eca094c5e136eedddc3f41b05df8af9577d9690a1d10b5327c26d8235d679500f6e13e64a16a7702192251a25028b692c36f6728849e322d3c48e1262e782d1a32c4fecc74ee54d0f625ef18925592c3b1c078365402b83edd0e6e663119919ebc8fdacdf9c1fb7ccc6b7554c0854165e791acc8e00b"], 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={0x0, @nl=@unspec, @phonet={0x23, 0x6, 0xab, 0xe}, @ax25={0x3, @bcast, 0x2}, 0x7, 0x0, 0x0, 0x0, 0xfffb, 0x0, 0x28, 0x7, 0x3}) 7m17.371548296s ago: executing program 35 (id=1428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$phonet(0x23, 0x2, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x94, 0x2, [@TCA_CGROUP_ACT={0x8c, 0x1, [@m_vlan={0x88, 0x7, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x8, 0x20000004, 0x6, 0x9}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x42a}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x9, 0x10000000, 0x1, 0x7ff}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_CGROUP_ACT={0x4}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc854}, 0x0) 7m11.061873986s ago: executing program 36 (id=1438): r0 = socket$netlink(0x10, 0x3, 0x4) rt_tgsigqueueinfo(0x0, 0x0, 0x2b, &(0x7f0000000300)={0x8, 0x9, 0x100}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r1 = socket$isdn_base(0x22, 0x3, 0x0) write(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x24000040) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x9, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xd66df691bbc56db3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0xfa, 0xfd, 0xfffff00c}, {0x6, 0x5, 0xa, 0x7}]}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001900000225bd705d342afab05e9289d101dd451bc200fddbdf25800020bb0003ac090002000008000b00090000006fe44dce5a8d37d8abaa980e49f50fb2b34e9a403ba8f683054e0dfcec01838f9d3ce07432ab8f66eca094c5e136eedddc3f41b05df8af9577d9690a1d10b5327c26d8235d679500f6e13e64a16a7702192251a25028b692c36f6728849e322d3c48e1262e782d1a32c4fecc74ee54d0f625ef18925592c3b1c078365402b83edd0e6e663119919ebc8fdacdf9c1fb7ccc6b7554c0854165e791acc8e00b"], 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={0x0, @nl=@unspec, @phonet={0x23, 0x6, 0xab, 0xe}, @ax25={0x3, @bcast, 0x2}, 0x7, 0x0, 0x0, 0x0, 0xfffb, 0x0, 0x28, 0x7, 0x3}) 32.984596699s ago: executing program 0 (id=2219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) close(r3) 24.465302739s ago: executing program 0 (id=2231): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000280)={0x13797501, 0xfff00000, 0x100, 0x4, 0xd, "52b768e08ee2df36108900000000000100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000700)=0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0xfffffffffffffd28, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="40010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000008056000000000000000000000000000000000000000000000000000000100000000900000000000000000000000000000002000100000000000000000048000100736861323536"], 0x140}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000280)={0x13797501, 0xfff00000, 0x100, 0x4, 0xd, "52b768e08ee2df36108900000000000100"}) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000700)=0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0xfffffffffffffd28, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="40010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000008056000000000000000000000000000000000000000000000000000000100000000900000000000000000000000000000002000100000000000000000048000100736861323536"], 0x140}}, 0x0) (async) 24.151257449s ago: executing program 0 (id=2232): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) pipe(&(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="53427c180ac6", @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x2f, 0x0, @private2={0xfc, 0x2, '\x00', 0x10}, @local, {[@routing={0x84, 0x0, 0x0, 0x0, 0x11}]}}}}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffdb8}]}, 0x4, 0x4000}, 0x1) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) 23.04293068s ago: executing program 0 (id=2233): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000600)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc8137", 0xe}], 0x1}, 0x0) (fail_nth: 3) 21.72730494s ago: executing program 0 (id=2235): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb012218"], 0x0, 0x28, 0x0, 0x1, 0x4}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) truncate(&(0x7f0000000180)='./file0\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2e842, 0x101245c1740395bb) inotify_init() keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) 20.403727879s ago: executing program 0 (id=2237): lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002900)={{0x3, r0, r1}, 0x0, 0x0, 0x2, 0x5, 0xe54, 0x931, 0x4e8, 0x1, 0x3, 0x46b}) syz_clone(0x2000000, &(0x7f0000003480)="49fa2fb8cc241069494cbe9ffae16dae1f6f63f8dcc74ee3fad033cb7f", 0x1d, &(0x7f00000034c0), &(0x7f0000003500), &(0x7f0000003540)="40b34b68344f11cde38b54a06902862acf19c6a6bef71b7a5b1c973581553f2429be68312c0e500a61a001214d265e6bbf77e4c67169a659") ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003580)) newfstatat(0xffffffffffffff9c, &(0x7f00000035c0)='./file0\x00', &(0x7f0000003600), 0x2000) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000003680), 0x8) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000000900020073797a32000000001c800480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a00"/112], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000180)={0x6, 0x6, 0x1, 0xb, 0x7, 0x13, 0x0, "d6edf17f8459b589f602cbea0601f6be562adaff", "2b1a50cbeaea6f75cd7b192eb245989da5c164ff"}) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000400)={r6}, &(0x7f0000000240)=0x8) syz_open_dev$swradio(&(0x7f00000036c0), 0x1, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000003f80)) stat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000)) newfstatat(0xffffffffffffff9c, &(0x7f0000004080)='./file0\x00', &(0x7f00000002c0), 0x2500) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000004140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000004180)={0x5, 0x9764, {}, {0xee00}, 0x10001, 0x7ff}) socket$inet_udplite(0x2, 0x2, 0x88) 11.417273923s ago: executing program 9 (id=2260): r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, 0x0, 0x4042, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, r5, &(0x7f0000000080), 0x1004) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 11.090719727s ago: executing program 8 (id=2261): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, 0x0, 0x4042, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 9.452770316s ago: executing program 8 (id=2264): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r0, 0x40045431, &(0x7f0000000080)) (fail_nth: 3) 9.336783325s ago: executing program 6 (id=2266): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000280), 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, &(0x7f0000000300)=0xb94116898811b881) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 9.014544111s ago: executing program 8 (id=2267): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_delroute={0x34, 0x19, 0x8, 0x70bd2c, 0x25dfdbfc, {0xa, 0x10, 0x0, 0x7f, 0xff, 0x1, 0xc8, 0x8, 0x1800}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0x14, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG_NAME={0xd, 0x2, '/dev/kvm\x00'}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc040}, 0x40) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000003b80)={0x0, 0x28, &(0x7f0000003b40)={&(0x7f0000000080)={0x14, r4, 0x315, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x20004804) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xffffffff, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0xf, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000240)={0x51c, r4, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x3c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0xfff7, 0x8, 0x3, 0x6, 0x7ff, 0x7fff, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x3, 0x7ff, 0x0, 0x7, 0x10, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0x240, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0xe69, 0x8001, 0xcb, 0x0, 0x100, 0x400]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0x3, 0x1, 0x18, 0x1, 0x5, 0x3, 0x1, 0x39, 0xb, 0xb, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ceb, 0x7, 0x2, 0x1, 0x8000, 0xb, 0x81, 0x855a]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x0, 0x2}, {0x5, 0x4}, {0x2, 0x5}, {0x2, 0x5}, {0x0, 0xa}, {0x0, 0x9}, {0x7, 0xa}, {0x4, 0x7}, {0x0, 0x1}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x0, 0xa}, {0x3}, {0x3, 0x8}, {0x3, 0x2}, {0x4, 0xa}, {0x0, 0x9}, {0x4, 0x6}, {0x6}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x8}, {0x3, 0x6}, {0x2, 0x9}, {0x7, 0x9}, {0x7, 0xa}, {0x5, 0x7}, {0x6, 0x5}, {0x7, 0x4}, {0x3, 0x5}, {0x3, 0xa}, {0x4, 0x1}, {0x4, 0x8}, {0x5, 0xa}, {0x0, 0xa}, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x6}, {0x0, 0xa}, {0x6, 0x8}, {0x0, 0x3}, {0x3, 0x2}, {0x2, 0x7}, {0x1, 0x4}, {0x0, 0xa}, {0x6, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x5, 0x6}, {0x6, 0x5}, {0x0, 0x9}, {0x4, 0xd}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x5, 0x7}, {0x5, 0x3}, {0x1, 0xa}, {0x6, 0x1}, {0x1, 0x2}, {0x1, 0xa}, {0x4, 0x3}, {0x2}, {0x3, 0x2}, {0x1, 0x4}, {0x3, 0x5}, {0x3, 0x9}, {0x4, 0x1}, {0x5}, {0x4, 0x3}, {0x0, 0x6}, {0x0, 0x1}, {0x0, 0x2}, {0x1, 0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x0, 0x8, 0xd, 0x7f, 0x3, 0x6]}}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x9, 0x41, 0x3, 0x1f, 0xb, 0x24, 0x6c, 0x6c, 0x24, 0x60, 0xc, 0x6c, 0x36, 0x16, 0x48, 0x23]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x0, 0x1b, 0x60, 0x0, 0x1b, 0x2, 0x5, 0x6c, 0x1, 0x6c, 0x4, 0x9, 0xb, 0xc, 0x6f, 0x3]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x4, 0x1, 0x1b, 0x9, 0x5, 0x16, 0x60, 0x18, 0x6c, 0x6c, 0x60, 0x4, 0x1b, 0x60, 0x24, 0x6, 0x30, 0x1, 0xb, 0x18, 0x6, 0x18, 0x1b, 0x48, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8000, 0x5566, 0x5, 0x5, 0x9, 0x9bf6, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x20f, 0x0, 0xfff9, 0xf, 0x9, 0xda2, 0x7]}}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x0, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x80, 0x2, 0x9, 0x8, 0xa, 0xd24]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x4, 0x1}, {0x6, 0x7}, {0x7, 0x7}, {0x0, 0x1}, {0x3, 0x2}, {0x3, 0x7}, {0x6, 0x4}, {0x2, 0x6}, {0x4, 0x3}, {0x2, 0x7}, {0x4, 0x4}, {0x0, 0x4}, {0x0, 0x3}, {0x1, 0x3}, {0x7, 0x5}, {0x3, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x6}, {0x1, 0x9}, {0x5, 0xa}, {0x1, 0x5}, {0x6, 0xa}, {0x6, 0x8}, {0x5, 0x8}, {0x7}, {0x6, 0xa}, {0x6, 0x6}, {0x5, 0x1}, {0x1, 0x3}, {0x1, 0x4}, {0x2, 0x6}, {0x2, 0x6}, {0x1, 0x2}, {0x0, 0xa}, {0x2, 0x2}, {0x1, 0x9}, {0x5, 0x7}, {0x6, 0x6}, {0x1, 0x9}, {0x6, 0xa}, {0x4, 0x7}, {0x4, 0x9}, {0x1, 0x5}, {0x1}, {0x7, 0x2}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x5}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x4}, {0x1, 0x7}, {0x4, 0x5}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x32, 0x24, 0x36, 0x60, 0x36, 0x16, 0xaf6ad0a2c7d4c997, 0x9, 0x3, 0x1f, 0xc, 0x0, 0x18, 0xb, 0x3, 0x1b, 0x0, 0x2, 0x0, 0x2, 0x3, 0x24]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x1}, {0x7, 0x4}, {0x4}, {0x2, 0x5}, {0x7, 0x9}, {0x1}, {0x0, 0x6}, {0x0, 0x8}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa622, 0x7, 0x3, 0x0, 0x7, 0x1, 0x13d]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0xc, 0x2, 0x3, 0x18, 0x16, 0x16, 0x60, 0x24, 0x6, 0x2, 0x5, 0x3, 0x4, 0x46, 0x3, 0x6c, 0x48, 0x48, 0x1]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x30, 0x6d, 0x18, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x4, 0xb, 0x60, 0x6, 0x4, 0x6c, 0x2, 0x6, 0x9, 0x12, 0x30, 0xb, 0x6c, 0x48, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x7, 0x5, 0x2, 0x7, 0x4, 0x1, 0x7]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x1, 0x3, 0x1000, 0x0, 0x5, 0x80, 0xd]}}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x80, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x18, 0x6, 0x3, 0x0, 0x44, 0x48, 0x48, 0x36, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x216, 0xc2, 0xd, 0x9, 0x0, 0x9, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x3, 0x3, 0xeb, 0x1, 0xba, 0xff]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x72, 0x4, 0x5, 0x7, 0x1, 0xc, 0x8]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x10c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x7, 0x7}, {0x4, 0xa}, {0x1, 0x9}, {0x5, 0x8}, {0x5, 0x6}, {0x3, 0x7}, {0x3, 0x5}, {0x3, 0xa}, {0x5, 0x3}, {0x5, 0x7}, {0x2, 0x9}, {0x7, 0x3}, {0x1, 0x5}, {0x6}, {0x4, 0x8}, {0x1, 0x9}, {0x4, 0x7}, {0x6, 0xa}, {0x0, 0x5}, {0x0, 0xa}, {0x2}, {0x5, 0x7}, {0x7, 0x5}, {0x6, 0xa}, {0x2, 0xa}, {0x5, 0x4}, {0x2, 0x1}, {0x4, 0x3}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x5}, {0x2, 0x8}, {0x7, 0x9}, {0x0, 0x8}, {0x1, 0x3}, {0x3, 0x3}, {0x4, 0x4}, {0x4, 0x8}, {0x7, 0xa}, {0x1, 0x7}, {0x0, 0x9}, {0x7, 0x7}, {0x4, 0x7}, {0x2}, {0x6, 0x19}, {0x0, 0x8}, {0x7, 0x8}, {0x6}, {0x2, 0x6}, {0x3, 0x7}, {0x3, 0x6}, {0x4, 0xa}, {0x6, 0x5}, {0x7, 0x4}, {0x7, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x175c, 0x5, 0x200, 0x4, 0x4, 0x5, 0x2, 0x1]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x36, 0x1, 0x48, 0x3f, 0x30, 0x1, 0x3, 0x30, 0x18, 0x1, 0x0, 0x18, 0xb, 0x2, 0x6c, 0x60, 0x12, 0x2, 0x48]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x4, 0x4}, {0x7, 0x8}, {0x0, 0xa}, {0x7, 0x6}, {}, {0x1, 0x2}, {0x2, 0x3}, {0x1, 0x9}, {0x1, 0x4}, {0x7, 0x5}, {0x2, 0x9}, {0x3, 0xa}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x5}, {0x6}, {0x4, 0x3}, {0x0, 0x8}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0x4}, {0x0, 0x4}, {0x3, 0x8}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x5}, {0x1, 0x2}, {0x1, 0x6}, {0x4, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x2, 0xa}, {0x2, 0x6}, {0x7, 0x8}, {0x1, 0xa}]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x1000, 0x8, 0xfc4, 0x25d, 0x0, 0x4, 0x1]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x2, 0x1}, {0x7, 0x6}, {0x4, 0x6}, {0x6, 0x3}, {0x7, 0x6}, {0x3, 0x8}, {0x0, 0x9}, {0x0, 0x6}, {0x5, 0x9}, {0x6, 0x5}, {0x6, 0x9}, {0x1, 0x7}, {0x6, 0xa}, {0x4, 0x2}, {0x5, 0x4}, {0x1, 0x2}, {0x1}, {0x2, 0x5}, {0x1, 0x1}, {0x4, 0xa}, {0x3, 0x5}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x98, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1b, 0x48, 0x16, 0x18, 0x30, 0x30, 0x36, 0x1, 0x48, 0x1b, 0x48, 0xb, 0x21, 0x3, 0x12, 0x30, 0x24]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x4}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x3}, {0x1, 0xa}, {0x0, 0xa}, {0x7}, {0x7, 0x5}, {0x7, 0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x0, 0x3}, {0x6, 0x5}, {0x6, 0x6}, {0x2, 0x8}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0x9}, {0x0, 0x5}, {0x5, 0x3}, {0x0, 0xa}, {0x7, 0x1}, {0x3, 0x2}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x57906637a59c6064, 0x6c, 0x1b, 0x18, 0x48, 0x1, 0xb, 0x24, 0x16, 0x18, 0x24, 0xb, 0x5, 0x6c, 0x36, 0x48, 0x48, 0x1, 0x1b, 0x1b, 0x3, 0x36, 0xb, 0x12, 0x60, 0x30, 0x48, 0x30, 0x4]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0xee, 0xfffa, 0x7f, 0x5, 0x4, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x51c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x20, 0x2003, 0x2, 0xf, 0x4, 0xcc7, 0xc9, 0x3b0, 0x5, 0x202, 0x802, 0xff, 0x1, 0x6, 0x9, 0x0, 0x81, 0x0, 0x7, 0x6, 0xfffffffc, 0xfffffffd, 0xfffffff9, 0xfffffff5, 0xffffeadb, 0x3, 0x7ff, 0x3ffffe, 0x0, 0x8000000, 0x4]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) 8.023474646s ago: executing program 9 (id=2268): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24000800) 7.964568127s ago: executing program 6 (id=2269): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) set_mempolicy(0x1, &(0x7f0000000080)=0xfffffffffffffffe, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000380)={{0x12, 0x1, 0x141, 0x1f, 0xac, 0xa9, 0x10, 0x421, 0x7b, 0xf0d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5c, 0x7, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xffffffc7, 0x7, 0xfffd, 0x9a}, {0x6, 0x24, 0x1a, 0xd, 0x10}, [@mdlm_detail={0x5, 0x24, 0x13, 0x6d, "8e"}]}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x46, &(0x7f0000000380)={{0x12, 0x1, 0x141, 0x1f, 0xac, 0xa9, 0x10, 0x421, 0x7b, 0xf0d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5c, 0x7, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xffffffc7, 0x7, 0xfffd, 0x9a}, {0x6, 0x24, 0x1a, 0xd, 0x10}, [@mdlm_detail={0x5, 0x24, 0x13, 0x6d, "8e"}]}]}}]}}]}}, 0x0) syz_usb_connect$uac1(0x3, 0xd3, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x0, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0xb}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x1ff, 0x2, 0x6, 0x8001, 0xe5, 0xb4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x2, 0x3, 0x1, 'P', "fe61"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xc, 0x2, 0x7f, 0xcc, "c022df", 'Eu'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x2, 0x40, 0x8, "a0f6a3"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3e7, 0x9, 0x8, 0x6, {0x7, 0x25, 0x1, 0x101, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x9, 0x1}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8, 0xec9a, 0x7, "f85f071ed4be77cc"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x2, 0x10, 0x0, "f0", "e984"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x8f, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x6, 0x2, {0x7, 0x25, 0x1, 0x2, 0x8, 0x5f52}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7, 0x0, 0xc, 0x20, 0x1}, 0x12, &(0x7f0000000140)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x149e13ccf6d65c35, 0x298b165542b75416, 0x26, 0xf5, 0x6}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x80a}}, {0x19, &(0x7f00000001c0)=@string={0x19, 0x3, "13b83338b68d8dd54d981ea163cc077ceac6be15201751"}}, {0xeb, &(0x7f0000000480)=@string={0xeb, 0x3, "89b3c1be359ebeee1226f63c3fa83386095f0489e5f217adb8b4644a9b947043027a06f2d9cf4ca1c9575ce6e88dc3a39ee8bf0b516be7e73461226c9ed38d9bb4e7aa70d71cde28fa42b01456fcc7219a394cd6b20972c6a8f431fb2ac59c35661e67766769a1e2b93aa44f5695f94439757e2d57a3b17d9e4b823956378b0df6214a7783c8195526cde50c69a6be3522bae299be39f2f27a71e1e7fc2c63b97e555e68ec3ae4ad5172ca0edcacfa6e46c97d054e4db9995267edbf142761c5fdec3aec7cd678e7e93b7b67d8266f84e12d92c364fa6b7aff2ea2ef8f1ca7585ea4c45d066eea7d0c"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41c}}, {0xf7, &(0x7f0000000240)=@string={0xf7, 0x3, "4110ea7b1039a51cd60699ac24cb5bcc72a5b935ffd6162208a67e96634d39761b284232e125ef7ef7c15760e62eed8e46a0ea615b41d22d182b09f89a512cf1b699bb02884cf150f6fba800963a4941363281238a43724286b0ba97dcef09e08b14b8ee48d3267cd09330e10baa911ba97570c1e22e82c2016d7cb0bf5444ac5f5d49f9377f81b4c632f7373ea0494ccf4189b859768d988bf6eff57782d7a056298b2365007a82c339412ba7f481d4483b7bddfc2e71b13f808e11dd9911cf50149619a659fd661768bbd85a998037416b29c6ef55ab732b43e83a0fd8058b754445daeb54ae849c02d69835b77ecd6c56559c32"}}]}) 7.84044349s ago: executing program 9 (id=2270): prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x100000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x501001, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000480)={0x3, r3, 0x80000}) write$dsp(r1, &(0x7f0000000400)="794ad161c32332873e702d0ad1650cc73912fb504ba668abb1b1ffdc67218430a6abe6a94a77583274bff6f1f8b36b", 0x2f) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') statx(r4, &(0x7f0000000140)='.\x00', 0x5800, 0x400, &(0x7f0000000680)) r5 = syz_clone(0x100, &(0x7f0000000000)="f9880a7ba046cdefe4542295ee894f4cd6cd6e18acf0756093a2008f70ced40f435e04f4b117faf166e0e7243efc9d7df38f8f862b57a66ef8e295", 0x3b, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="58ee7ee8aeb5e765cd63af90a4ea1db42879ec4046908fe6d9956d63") ptrace$ARCH_GET_UNTAG_MASK(0x1e, r5, &(0x7f0000000100), 0x4001) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r8, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) r9 = fcntl$getown(r0, 0x9) sched_setaffinity(r9, 0x8, &(0x7f0000000140)=0x31a) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) fdatasync(r0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) 7.164039295s ago: executing program 6 (id=2273): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x4, 0x80100001, 0x1, 0xffffffff}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000180)=0x1, 0x4) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRESHEX=0x0], 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x300, 0x2) 7.09490042s ago: executing program 8 (id=2274): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000300f3508da040d391a99010203010902240001000000440904"], 0x0) r1 = syz_usb_connect$cdc_ecm(0x5, 0x83, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x1, 0x1, 0x1, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xc, {{0x8, 0x24, 0x6, 0x0, 0x0, "029044"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xde, 0x1000, 0x0, 0x4}, [@ncm={0x6, 0x24, 0x1a, 0x1000, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x82, 0x8, 0x4, 0x4, 0x7, 0x8}, @country_functional={0x8, 0x24, 0x7, 0x9, 0x6, [0x103]}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x6, 0x5252}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @mbim={0xc, 0x24, 0x1b, 0xf6eb, 0x8, 0xee, 0x49, 0x5, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x8, 0xbc}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x7f, 0x5}}}}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x7e, &(0x7f0000000180)={0x5, 0xf, 0x7e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x34, 0x6, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0xb0, 0x4, 0x7ff}, @generic={0x65, 0x10, 0x1, "b6b51b70b5e8e7b4f45aec7407264a8b35e19009b7dc202af64a6e9629dda9c99ab27a480db381ba82596f9675b7a0ff0e1f5f97d4e477a82a97a8492ece7ed49bdff1fb90127d79d7c418dfe8e71718814fccc647d10b566765c1620baee021a0ec"}]}, 0xa, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x418}}, {0x78, &(0x7f0000000240)=@string={0x78, 0x3, "3bf9dc29794fa66313e9b1ddbbf9dd95e6bb50bf865dfcc34808da268575d177eff7256c5b73d6437b3a4cc5b0086f5d32a1bb59ee57c4772eb1088c693c7a8f70c35ae85a13be1cedd22fcaa76268050946764f1bbd79f914190be51013a966f2af2ce6f63e896794a115b64888d574cda90cf5474e"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x280a}}, {0xef, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]}, {0xcc, &(0x7f0000000400)=@string={0xcc, 0x3, "f64e70af048404a32594cf5227c7517d1c4877db2089325a4945b402441ebef5501e5299355e213371c712ee4e22b57fa6c175c80c5b37b1e58543d9efcab828ec7e0f6a74bbbd8a97ceb4dff4798b7424c4cae43286a27d6d0b25509c95b79b4f87ad229ac605546b89528637b81f7ac4397a6479a0b7fff2650420233696b5bd23809ac4f3b360066ee0c71a8b6b26e5ad5a6b1aab458dbc3edcb159be623fc057c6a93cf793c58a8d243da355ebd4ff87f60541131bbeed89dce0645b2d857e9eec1d294b2c5f1b1b"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc07}}, {0x53, &(0x7f0000000540)=@string={0x53, 0x3, "5b49573298bcd81aa9260626d76d0061cd4f8544145ba66a7e2a5a41ec29d97a8fee2cb17bd6949284cc329737af5712e9ee4f804b44d32a20d286a3df0f1bbacc23dac780de71597f5b9624841ed7a265"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="32ecbdad2eb9aa06adadf47a0e06a0918686544ccaf06a54ed"]}, {0x9d, &(0x7f0000000640)=@string={0x9d, 0x3, "f1c2959d964fe4430976278359789a99d3b8fcb4742d2e8f8a1750e6f683ae6970b9e2791213698351434b0c647a9491d839c0cada8edee656c683958e215054c7b05c49d08e782d3c713edb7935621c69f0e816f3dac32e1e06b3892960991762a4e0f03ba73d7eb065897c9d188560dcbd2a58af29523fafa409022ef9cd429930c337f8feca7c5d676583fc54bfc185a78a1772b1caadcbc1e4"}}]}) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) io_setup(0x80000000, &(0x7f0000001300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB='\b\x00\x00']) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r5 = eventfd(0x800) io_submit(r3, 0x3, &(0x7f00000016c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x9, r2, &(0x7f0000001340)="d3c09f2e9142cdb750e904a73af853353cfd13a54bea0e3cde40f2e3c4a03db67af649af4149f933476a8b8f89dd28d2a9605a076b6332e0ce5879e3b6b7c3", 0x3f, 0x7ff, 0x0, 0x0, r4}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x9, 0x9, r0, &(0x7f00000014c0)="9ff6a4fda8be1eb10fdca9711d7545058c9cae946998ef8cda991eebea4b34ee4aac99db6d2be98134a33a4ca4a667b55b5254272078194fbc2594d8bd8918f48e72842203cfefefa051b29c68a6f5f63e845428881eb9d7ab164c124722afc1c5a002ef3bfb9075be406c5c361c812fdf9b4793558352a97d857c945b74487a0f8dcf796126", 0x86, 0x5, 0x0, 0x1, r5}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f00000015c0), 0x0, 0xff, 0x0, 0x1}]) syz_usb_connect(0x0, 0x2ff, &(0x7f0000000cc0)={{0x12, 0x1, 0x200, 0x72, 0x22, 0x38, 0x40, 0x19d2, 0xffd5, 0x6041, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2ed, 0x2, 0x9, 0x46, 0x80, 0x2, [{{0x9, 0x4, 0x9f, 0x1, 0x1, 0xff, 0xff, 0xff, 0x4, [@uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x3, 0xf, 0x8, "", 'r'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xd1, 0xff00, 0x8, "d27753e0b4a637"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x7, 0xdc, 0x4}}]}}, {{0x9, 0x4, 0x30, 0x3, 0xb, 0xb1, 0x63, 0x6, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0xf9}, [@mixer_unit={0x5, 0x24, 0x4, 0x6, 0x5}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x6, 0x4, [0x5, 0x14, 0x4, 0x4], 0x7}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x0, 0x7, "1a50"}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0xf, "d29b"}]}], [{{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x2, 0x8, 0x11, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x101}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x7, 0x4, 0x5, [@generic={0x2, 0x22}]}}, {{0x9, 0x5, 0x4, 0x4, 0x0, 0x2, 0x9, 0x44, [@generic={0x9d, 0x11, "75f5fb7b1b43ce1ea574f7c7944db92c2d68f1152ae016fe3046c56ea56e355ea7850258127843a7548b1ee633a566425b0035063b6b39dee77310430b8a07990c4b0713a5a01f518b6a18a872613d00110ea7affa3f97eb8345236dd82b60ea41321535cad44cf591370d828581b57f66f18c5640352e25a1eec9eab522ca3fb0549e479293a28ff4d192f78d2be14f4ef13984432ec17109c08d"}, @generic={0x70, 0xc, "ec2e6db399ac11a6c8dd094f4ecff38c3025b35dc7bc260035b10c5623b300a354f31a9af1b9a8e885ba69072bf478d4637806dd8d5bebed861d0eb271c4fffec58036684a0277f2fc350a9f05a1f988c0f83ea40e753933ae831b295bf4a165870aaca8dcb8d0825ceda589a62c"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3d7, 0x5, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xfd, 0x0, 0x3}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x9, 0xa1, 0xe3}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x4, 0x2, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x80}, @generic={0xb1, 0x22, "738522a26a6844238fa9ee98e190c43cee30fa3086ad0a5cfd20e896de8a5171c4beb542fea25213538a297becd5a8b9ca92b34c27e53f59b94102384c3f3889ad145bd8a5f976ab275105d6e356230314e9b43be53d143455c8fdcc58360a678a90389aaf4a1a7c8754948dcc10da7894f4dac64f8fcfab1581670f71a5e4a9cf38f8bcb9664531a3c16c459cdb5dfbfc224efa74dafade8d3a51c7b57df52c89d0a1df9bab05237dcd8b283db20a"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x1, 0x2, 0x9, [@generic={0x2, 0x9}]}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0xb5, 0x4, 0x9, [@generic={0x3b, 0x21, "cca37dab861e52f6e219f4ef46245e86f8d9fa693eb4cb8a97a8f1258008a7231fe8ab151cff2fce10b5652ab81baf5351edbbb09b687b2a81"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x5, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x0, 0xef, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x6}]}}]}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x4, 0xf, 0x7, 0x8, 0x5}, 0x62, &(0x7f0000001040)={0x5, 0xf, 0x62, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x3, 0xe}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x800, 0xf00f, 0x26, [0xff0000, 0xc0, 0x3f00, 0xf, 0x3fcf, 0xffff30]}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0xdc94, 0xff00, 0x4, [0x0, 0xff003f, 0x0, 0x3f, 0x3f00, 0x807f00]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x4, 0x13, 0xd, 0x1}]}, 0x6, [{0xac, &(0x7f00000010c0)=@string={0xac, 0x3, "1cb1df39c9d48a76bd8d02e1a2c534920909cf4fe2ff24ff22f8ba9f94f3d2fcbe0c0526f8b55b3f3fc279ad44459545bfca2d1a7ddab43808b94248cf413a136531af8204ba0b50e28204437f681117d86f92fd74e6106808e7f96d61f6e70863fb7154bedcc52b081eeb5f18886c6ad1702f8961caae7d3ad162b57612895728562caf393db40e47b08e5f3a57f97c80a70be312477df84d6133060d4bbd6fa7822818de123f8c7921"}}, {0x23, &(0x7f0000000600)=@string={0x23, 0x3, "022787aaee3adba10661469bfa2d2976754de51d1ad6e429bb63aa3a383758ebcc"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x184e}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x40e}}]}) socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r8, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4000, @multicast1}}}, 0x118) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000880)={0x14, &(0x7f00000007c0)={0x0, 0x24, 0x4b, {0x4b, 0xf, "e1aaefae6cd466a88b24203dba2b2fdd8157b29935481c1667bf7133a60c102ebbc8b9625840efeeaa80cf4a8cfb15e15dc4ce73e7bca1ab2e1129ac644e88c24d50654c207fdcb127"}}, &(0x7f0000000840)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x1c, &(0x7f00000008c0)={0x20, 0xd, 0xc7, "950cda9c65cb8962456b35e05493e66d37dd3ed549b7ca3fac8722dab1341aefa45897728898db09f14360839aa2fe9178edc6fe0897fc494871cdb34b3efe52a8ca884c2513fb2c75a5644513e41f15254fd7384330e5beb5a2a0a90891b8133e9297a66a881bc59d3885db77a5f8cbbe1975583ddca4876628f748967e95d6adaaca504e90ea37a9f4f2ee2576b95690269a5ef84887e1e4ff28fc75ec7238c0b20cd4ff2435b8dd30f7887ccc80f4ed4bbd9125c1a2fc4b4556edf05e8b407d7c86115ec899"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x3}}) 6.834729406s ago: executing program 7 (id=2275): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, 0x0, 0x4042, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 5.516375863s ago: executing program 7 (id=2276): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xd}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x4001400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_procfs$pagemap(r1, &(0x7f0000000200)) syz_open_procfs(r1, &(0x7f00000002c0)='net/vlan/config\x00') r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) wait4(r1, 0x0, 0x80000000, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002240)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 5.4319441s ago: executing program 9 (id=2277): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb012218"], 0x0, 0x28, 0x0, 0x1, 0x4}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) truncate(&(0x7f0000000180)='./file0\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2e842, 0x101245c1740395bb) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xc0000220) keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) 5.195289442s ago: executing program 6 (id=2278): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) (fail_nth: 3) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000001140)={&(0x7f0000000080)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x400, 0x400004, 0xf, 0x7, 0x7, 0x4, 0x0, 0x0, 0x40, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.950855462s ago: executing program 9 (id=2279): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x18}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 3.895632134s ago: executing program 6 (id=2280): socket(0x10, 0x803, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x44009975, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) r1 = memfd_create(&(0x7f00000003c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e/\x85c\xae\x9c\xe9\xc4\xd2\xf3\x9f\n-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\x12\x00\x00\x00\x00\x00\x00\x00[\xf9\r\t\xef{h\xb0\xc0\x00\x00\x00\x00\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8Fb\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5O\x8fI\x00\xf0\xc9%\n\xa7\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2N\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92\xaf(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\x9d\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f\x00\x01\x00\x00_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\xe38\xac>\xbbqJ\x8f\x8cmu\x12\x1d\x9a\xd7\x1c}\x8a]1\x8a\x84\xedo\t*77\xbb0\x8b\xe5R\xc8\t\x94\xbc\x95\xc0\x92\xfc^e\x15\x10\x96\x18\'\xfa\x8e\x81\x03)3\xbf\xa6|\x88\x1f\xfb\xf0\xa3\xd2\x99\x06\xb1\x15\xc4\xe9\x80\xfb\xcfD\xe3\xff\xc1V\x00\xc4\xd1\xa1\xa6\xba\x9a\x91\xdb\x0f\xb6\xb9&\xf5\x05\x9b_\xde\xc6\xc4P\xf9,\xab\x13\xd0+*\xa3\x002\x19Z\x0e\xa7\xb9\xf2\xed\xd7#\b0\xba\xaa\x93\xf6\xef-\x1fL\xc6\xdc\xa7?\xf9\xbcdI\xca_\xa3\xbd\xe6,\xe6\x87$\xe8W8\xa6Zb\x1a7\xd7\x86\xe5\v\xa5\xaf\x8b\xd8t\x9fk\xee#\"\xa4\x96\xd5m\xdb\xb0\xdf\xa8\xb9{\xca\xea\nD|+;\x14\xc4\xe5\x9c\xebDJ\xf4\x19PFi\xce\xd6E9\x18\x1d~\x17\x06\xe9iDu:ou\a<\xaf\x8f0v\x81\xb1HC\xf3\x96\x96]bp\a\xdf7\xcb\x10x\xff\x17L\xde\xff\b\fm\a\x1b\x13\xe2[\xea,\xfc\x8ep<\xa4gq\xf4\xb4\xd7\x1d\'\xd6\xb5\xa3\x90\xf9\xf2\x1a\xaa\xb0\b\x7f\x89\xf7\x9e\x89\x85O\xe6U\x9fO\xa5\x8dfO\x11S\x00\xb6\x809\r\x96\xf2\xb8,\xe1N\xa1\xfd\xaa\x99\xe9\xb4\t\xf1(>\xf8fLBQ\xcf\x9c\xd4\x88\x96\xbc\xf0\xa4\xeb\x92\xd7\xc1\xef\x13\xc7U\x9b\xa8r\xc1_\x11<\x19?)\xb3\xfdf\xc3\xba\x1e\xbaY\xea|~^\x00\x1e\xea/\x1e\xd2&1Z@\xa50\x06s\xf2PP\xf9\xdcv\xc6\xaf\x12M\x8b\x12\xdbf\xb2r\x1a\x84\b\xde\b5\xdb[ruJ\xa0\xa9Nj\xd5<\xcc\xdeA4|1Ye\xd7\xf3\x1b\xedq)\xab_\xc1\aR\xef%\xfb\x9c\x18<\xa3\x133T\x89\xff\x99S\xb7n\xe3%\x05g*X\xe5\xfc\x97\x01\xec\xeb\xd6\rf\xbdl\xee\xca\x1c\xa2{\x98v\xcc\x8a\xcc\xa1\xf1\xb4\xf6\xe1\xc0\x96\xc8\x1c\x05C\x93\x1c\x89e\xc1~\xf3\xc8\xe8\xe6]S\xbd\xbe\xb3M\xc1\x9b\x05\x12\xe9C\x11\xbb\x03U\x80KRd\x14c3I\xa0\xc7\x8a\xba9\xfeH\x94\xb2\xe7h\xb1\x02\xf6\x0f\x02\xb0\xc3\xd8\x02\r\v\xfa\xc7\xbdE\xf6b\xde\xbeJ\x9509\xe8\x18\x05\x15zi\xba\tf7\x9b,\xa3\xa5\xa1\xc1|\xd2:D3z\x8f\x19\xa8\xe1d\xedk\xe8\xa2/\x95`$\x81\xc2g\x04u\x16\xbc{\xb7\x90\xbe\xeb\x85 \f ^I\xd5\x0e\r\xdf4\xd0\x95d\xe4\xaf\x83\x88\xd8l\xae\"\xef\xe5\xfc\x01\x15\xb5\x99U\x1c\xb1\x9c \xe7\xa6\x8fv\xfe\xea\x9a\x11\xe2-', 0x4) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000080)={0x0, 0x2, 0x9, 0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0x400, 0x200, 0x0, 0x8, 0xbf9, 0x7, 0x4, 0x5, 0xffffff01, 0x84ec, 0x4, 0xffffffff, 0x0, 0x1, 0x8001, 0xd4f, 0x9, 0x130c, 0x0, 0xfffff801, 0x9ab4, 0x80000001, 0x965, 0x3, 0x3, 0x7fffffff, 0x2, 0x0, 0x400, 0x5, 0xeb, 0xc]}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 3.894807593s ago: executing program 8 (id=2281): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000300)={0x5, 0xc1c, 0xffffffff, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x24004080) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'veth1\x00', @remote}) 3.494374159s ago: executing program 7 (id=2282): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x40840}, 0x1800c85c) 3.392129793s ago: executing program 9 (id=2283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x4600}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31}]}}}]}, 0x3c}}, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='minix\x00', 0x1050000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f00000002c0)={0xf, {"a2e3ad214fc752f91b500e0f30f70e06d038e7ff7fc6e5539b3275078b089b3b08385d090890e0878f0e1ac6e7049b3d6d959bffe8d178708c523c921b1b5b31300d3b5d0736cd3b78130baa61d8e809fc889b0709b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b906000000783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51015f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ff33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f761f13a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a99cc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000029566e78000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebbd633500", 0x1000}}, 0x1006) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000180)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000140)={0x1, 0x1, 0xb, 0x4, 0x17c, &(0x7f0000001300)}) fsmount(r2, 0x1, 0x0) 3.275293266s ago: executing program 8 (id=2284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000012c0)={0x1, 0x0, [{0x0, 0x1, 0x2, 0x0, @sint={0x622, 0x4}}]}) 3.204030947s ago: executing program 7 (id=2285): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, 0x0, 0x4042, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.77344246s ago: executing program 7 (id=2286): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) msgget(0x3, 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x9, 0x0, {0x1, 0x10001, 0xfffffffffffffff7, 0x40d, 0x10000, 0x104, 0xed3, 0x2, 0x5, 0x2000, 0x5a, 0x0, 0x0, 0x7, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000002100)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x1, 0x7, 0x0, 0xe, {0x0, 0x0, 0x7, 0xd2e4, 0x4, 0xcca1, 0xfffffffd, 0x200, 0x8, 0xa000, 0x6, 0x0, 0x0, 0x0, 0x800}}, {0x0, 0x8}}}, 0x0, 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_INIT(r2, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000152200"/28], 0x48) 1.719006906s ago: executing program 6 (id=2287): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)={0x20, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1a, 0x4, 0x0, 0x1, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x82d9}, 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f00000002c0)) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040d1180094ba000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000880)='cgroup.max.depth\x00', 0x2, 0x0) r5 = syz_usb_connect(0x2, 0x3ef, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x57, 0xca, 0x83, 0xff, 0x846, 0x9053, 0x8f00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3dd, 0x1, 0x5, 0x4, 0xa0, 0x8, [{{0x9, 0x4, 0x4d, 0x3, 0xd, 0xef, 0x72, 0x59, 0x6, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x5, 0x0, 0x2}]}, @uac_as={[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xf, 0x2, 0x7, 0xb3, "08ccc9f616"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x40, 0x8, "68ea64a0f3"}]}], [{{0x9, 0x5, 0x0, 0x1, 0x10, 0x1, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x3732}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x8, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xfffc}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x6, 0x9, 0xd, [@generic={0xb6, 0xe, "f9370995787a21c35a0004f72bb6230e7d3ab733ad21b6a6fbe3836b86526152688c68c1b51a98a21b541443d6a4748c1fc0202a6e505869871ac63e0400a5d9e59d1fedda819e8a00a27e23b66215ffc85580cd8f3962fbdc1706c38f49593d4fb84b8176917ee27b29520afc9e09c88f7af2c706f742a3bbb23036d29003b5c869c376b464e86dd8110e76e6a1bdbb377ef7112e54f9efcca578866340ebbb798930bbb65f196d1b5af420260dafb97f9b0b9d"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x90, 0x6f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x16}, @generic={0x89, 0xd, "b5e468abf4ee5cf4e8b22621f942f945c17798352ba0e558a7a1c781c23b66a6824cd166f97fb47be8b41a93a67d6226e2f9f444a841a7711811e0d902625ce1becb14959631557d8ccf7536aa3a47bce4464446374d54a3fb0005b0f99739f91a81a5390141960652d9145456807b44e5c89d6d443a570c854d5a559cbdca7a8175d7139672dd"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x5, 0x8, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x1, 0x8, 0xfa, [@generic={0xd5, 0x24, "729f7f0e1d93f4771dff0afd125426b1dc4de90fb70e3f4a3a72a364a7f7f23b2ab3b82a3cef835a5fe5d0c570753e10add401dda96e79747ead372e3f9df15804c95b80bbf3209edfcddd5c6a5f97915c1402368b174ccb67bc4ded9970b5cbf1b39c0d56bc10238a2a47ccd6b44ec699a30115b0923803acc479737f4af265ad7d448c3146b15b76331a0e2a798a1b7cbacb32384a2c7eccfad8af5785726f9bebabea7ef18bbaa603005180413501d4d62a7b22da9f81651594227cc08b240738c3b0b4f96afc5e75bf4d496d5d01cc9e6a"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x3, 0x5, 0xb, [@generic={0xc, 0x3, "c4435a4b0686dc94d40c"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x8, 0x8f, 0x2, 0xce, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xa6}]}}, {{0x9, 0x5, 0xd, 0x9, 0x400, 0x80, 0x5, 0x7, [@generic={0x9, 0x2, "3e69332e4597f0"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x6c, 0x4e, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x8}]}}, {{0x9, 0x5, 0x1e, 0x10, 0x20, 0x1, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0xc0, 0xfe, 0x4, [@generic={0x78, 0x22, "d540a768e963ee009671a30da07a34b2eda9231b39bb3b7ed30da77986147c0774729fdf748235785ec42b95b5310506322b3555c71fd6762860540b5ffb4c876c6612df66b702fa697e7590e4116211e2ccebf7b7cabbeb3cd13b10762a16af00cfafc3a6b8e6fc83a8966bbc6a4f17073023415eeb"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x4, 0x4, [@generic={0x62, 0x10, "9b9ce74e3ac6c7485a1f00eceaa9a21394c7e14ddb17fc289aa4177e1dee09a31333700f3f195c9e524faddaa057b7b36c9e1d1d9ad0125e04987238d9f65c535162b393437e83f49f946acebe0b01a4be36186ede5f4b0874269c349ba8c38f"}]}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x21, 0xf4, 0x70, 0xff, 0x10}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4f, &(0x7f0000000100)=@string={0x4f, 0x3, "61ae21ead0b8e19c39c58fc4654b072a8a3e4580c9c8890fd5cdef23099558d0a43fd8fdc2ae8ac06f60de00d66184b0af1eb4acebee79a5d6395a1f9d404530f48092c56f00643052f2a075d7"}}]}) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000700)={0x14, &(0x7f0000000200)={0x0, 0xe, 0x7a, {0x7a, 0x21, "4e6e2b0414f52c27f0b6fd9c459e904011eaa145342b98a4b014fcad73066587154b155edea6b721764640eb65c328791a812f57df3c07f0c369f4cde0f12c7d0425c69c36f8924c29450ad5659473926bcce94be74cbe1e8c2a3cecb20309a5c1e7ef587f295760ae169e3e3f3b7b1c415f4b1edd93f804"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x44, &(0x7f00000007c0)={0x0, 0x16, 0x75, "17877b5fb1e1350f1ab36a7c8ea9647deb0a4b1fdf046182081869312a5a8deee73febc651901f9e536e3a39b11fda639edcefa37bfbf037171a3122238116ef39a56bd6ffd2cdff90e85961e31518a52a97eeae6ff650a4e301fee4620b5ecf062735e1550d68c717c759acfbf505654e75e666cb"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x88}, &(0x7f0000000900)={0x20, 0x80, 0x1c, {0x2, 0x1, 0x3, 0x5, 0x9, 0x7f, 0x5, 0x1, 0x6, 0x5, 0x3, 0x2}}, &(0x7f0000000940)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000980)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000009c0)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000a00)={0x20, 0x89, 0x2, 0x1}}) write$cgroup_int(r4, &(0x7f0000000040)=0xffffffff, 0x12) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x80503d0a, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "56939e4a"}]}}, 0x0}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)={0x20, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1a, 0x4, 0x0, 0x1, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x82d9}, 0x50) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f00000002c0)) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040d1180094ba000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r3, &(0x7f0000000880)='cgroup.max.depth\x00', 0x2, 0x0) (async) syz_usb_connect(0x2, 0x3ef, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x57, 0xca, 0x83, 0xff, 0x846, 0x9053, 0x8f00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3dd, 0x1, 0x5, 0x4, 0xa0, 0x8, [{{0x9, 0x4, 0x4d, 0x3, 0xd, 0xef, 0x72, 0x59, 0x6, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x5, 0x0, 0x2}]}, @uac_as={[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xf, 0x2, 0x7, 0xb3, "08ccc9f616"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x40, 0x8, "68ea64a0f3"}]}], [{{0x9, 0x5, 0x0, 0x1, 0x10, 0x1, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x3732}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x8, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xfffc}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x6, 0x9, 0xd, [@generic={0xb6, 0xe, "f9370995787a21c35a0004f72bb6230e7d3ab733ad21b6a6fbe3836b86526152688c68c1b51a98a21b541443d6a4748c1fc0202a6e505869871ac63e0400a5d9e59d1fedda819e8a00a27e23b66215ffc85580cd8f3962fbdc1706c38f49593d4fb84b8176917ee27b29520afc9e09c88f7af2c706f742a3bbb23036d29003b5c869c376b464e86dd8110e76e6a1bdbb377ef7112e54f9efcca578866340ebbb798930bbb65f196d1b5af420260dafb97f9b0b9d"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x90, 0x6f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x16}, @generic={0x89, 0xd, "b5e468abf4ee5cf4e8b22621f942f945c17798352ba0e558a7a1c781c23b66a6824cd166f97fb47be8b41a93a67d6226e2f9f444a841a7711811e0d902625ce1becb14959631557d8ccf7536aa3a47bce4464446374d54a3fb0005b0f99739f91a81a5390141960652d9145456807b44e5c89d6d443a570c854d5a559cbdca7a8175d7139672dd"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x5, 0x8, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x1, 0x8, 0xfa, [@generic={0xd5, 0x24, "729f7f0e1d93f4771dff0afd125426b1dc4de90fb70e3f4a3a72a364a7f7f23b2ab3b82a3cef835a5fe5d0c570753e10add401dda96e79747ead372e3f9df15804c95b80bbf3209edfcddd5c6a5f97915c1402368b174ccb67bc4ded9970b5cbf1b39c0d56bc10238a2a47ccd6b44ec699a30115b0923803acc479737f4af265ad7d448c3146b15b76331a0e2a798a1b7cbacb32384a2c7eccfad8af5785726f9bebabea7ef18bbaa603005180413501d4d62a7b22da9f81651594227cc08b240738c3b0b4f96afc5e75bf4d496d5d01cc9e6a"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x3, 0x5, 0xb, [@generic={0xc, 0x3, "c4435a4b0686dc94d40c"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x8, 0x8f, 0x2, 0xce, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xa6}]}}, {{0x9, 0x5, 0xd, 0x9, 0x400, 0x80, 0x5, 0x7, [@generic={0x9, 0x2, "3e69332e4597f0"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x6c, 0x4e, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x8}]}}, {{0x9, 0x5, 0x1e, 0x10, 0x20, 0x1, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0xc0, 0xfe, 0x4, [@generic={0x78, 0x22, "d540a768e963ee009671a30da07a34b2eda9231b39bb3b7ed30da77986147c0774729fdf748235785ec42b95b5310506322b3555c71fd6762860540b5ffb4c876c6612df66b702fa697e7590e4116211e2ccebf7b7cabbeb3cd13b10762a16af00cfafc3a6b8e6fc83a8966bbc6a4f17073023415eeb"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x1, 0x4, 0x4, [@generic={0x62, 0x10, "9b9ce74e3ac6c7485a1f00eceaa9a21394c7e14ddb17fc289aa4177e1dee09a31333700f3f195c9e524faddaa057b7b36c9e1d1d9ad0125e04987238d9f65c535162b393437e83f49f946acebe0b01a4be36186ede5f4b0874269c349ba8c38f"}]}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x21, 0xf4, 0x70, 0xff, 0x10}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4f, &(0x7f0000000100)=@string={0x4f, 0x3, "61ae21ead0b8e19c39c58fc4654b072a8a3e4580c9c8890fd5cdef23099558d0a43fd8fdc2ae8ac06f60de00d66184b0af1eb4acebee79a5d6395a1f9d404530f48092c56f00643052f2a075d7"}}]}) (async) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000700)={0x14, &(0x7f0000000200)={0x0, 0xe, 0x7a, {0x7a, 0x21, "4e6e2b0414f52c27f0b6fd9c459e904011eaa145342b98a4b014fcad73066587154b155edea6b721764640eb65c328791a812f57df3c07f0c369f4cde0f12c7d0425c69c36f8924c29450ad5659473926bcce94be74cbe1e8c2a3cecb20309a5c1e7ef587f295760ae169e3e3f3b7b1c415f4b1edd93f804"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x44, &(0x7f00000007c0)={0x0, 0x16, 0x75, "17877b5fb1e1350f1ab36a7c8ea9647deb0a4b1fdf046182081869312a5a8deee73febc651901f9e536e3a39b11fda639edcefa37bfbf037171a3122238116ef39a56bd6ffd2cdff90e85961e31518a52a97eeae6ff650a4e301fee4620b5ecf062735e1550d68c717c759acfbf505654e75e666cb"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x88}, &(0x7f0000000900)={0x20, 0x80, 0x1c, {0x2, 0x1, 0x3, 0x5, 0x9, 0x7f, 0x5, 0x1, 0x6, 0x5, 0x3, 0x2}}, &(0x7f0000000940)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000980)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000009c0)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000a00)={0x20, 0x89, 0x2, 0x1}}) (async) write$cgroup_int(r4, &(0x7f0000000040)=0xffffffff, 0x12) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST2(r6, 0x80503d0a, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "56939e4a"}]}}, 0x0}, 0x0) (async) 0s ago: executing program 7 (id=2288): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r2, &(0x7f0000000200)=""/229, 0xe5, 0x0, &(0x7f00000000c0)=@generic={0x1f, "c27b94d1f702650837c04408804bdfa10392d49e98f836ec2c175f91f7292033d6ee05ddaa2ff0f449f97387f8af47668ddd5461524a80d59f61df4d50b38a23b66e940d81e7d234766a448b1c0e5a21fee93f6007c0c77b4adb2e0ef344ad4b752a89de2838efd05a655c15c3a55678c07e7fab57aafcbe96c59b1e7499"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000400)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x0, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000080)=0x2000, 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x2000000, 0xa43655bf43c28d53, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x8, 0x12, 0xffffffffffffffff, 0x10000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8000, 0x1a0) kernel console output (not intermixed with test programs): 0 [ 794.777907][T12433] ? __fget_files+0x2a/0x420 [ 794.777916][T12433] ? __fget_files+0x3a6/0x420 [ 794.777925][T12433] ? __fget_files+0x2a/0x420 [ 794.777936][T12433] ? bpf_lsm_file_ioctl+0x9/0x20 [ 794.777947][T12433] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 794.777959][T12433] __se_sys_ioctl+0xff/0x170 [ 794.777973][T12433] do_syscall_64+0xe2/0xf80 [ 794.777987][T12433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.777998][T12433] ? trace_irq_disable+0x37/0x100 [ 794.778011][T12433] ? clear_bhb_loop+0x60/0xb0 [ 794.778024][T12433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.778034][T12433] RIP: 0033:0x7f7e6054aeb9 [ 794.778044][T12433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.778054][T12433] RSP: 002b:00007f7e5e79e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.778066][T12433] RAX: ffffffffffffffda RBX: 00007f7e607c5fa0 RCX: 00007f7e6054aeb9 [ 794.778074][T12433] RDX: 0000200000000100 RSI: 00000000000007a6 RDI: 0000000000000003 [ 794.778081][T12433] RBP: 00007f7e5e79e090 R08: 0000000000000000 R09: 0000000000000000 [ 794.778087][T12433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.778093][T12433] R13: 00007f7e607c6038 R14: 00007f7e607c5fa0 R15: 00007ffc3f3ef338 [ 794.778110][T12433] [ 795.047965][T12424] batadv0: left promiscuous mode [ 795.895720][T12456] FAULT_INJECTION: forcing a failure. [ 795.895720][T12456] name failslab, interval 1, probability 0, space 0, times 0 [ 795.895756][T12456] CPU: 1 UID: 0 PID: 12456 Comm: syz.0.1819 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 795.895784][T12456] Tainted: [L]=SOFTLOCKUP [ 795.895792][T12456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 795.895803][T12456] Call Trace: [ 795.895811][T12456] [ 795.895820][T12456] dump_stack_lvl+0xe8/0x150 [ 795.895849][T12456] should_fail_ex+0x46b/0x600 [ 795.895874][T12456] ? can_rx_register+0x16d/0x760 [ 795.895895][T12456] should_failslab+0xa8/0x100 [ 795.895922][T12456] ? can_rx_register+0x16d/0x760 [ 795.895941][T12456] kmem_cache_alloc_noprof+0x83/0x6a0 [ 795.895973][T12456] can_rx_register+0x16d/0x760 [ 795.895992][T12456] ? __local_bh_enable+0x1e1/0x2f0 [ 795.896013][T12456] ? __pfx_raw_rcv+0x10/0x10 [ 795.896040][T12456] raw_enable_filters+0x98/0x200 [ 795.896069][T12456] raw_setsockopt+0xcee/0x12f0 [ 795.896098][T12456] ? __pfx_raw_setsockopt+0x10/0x10 [ 795.896121][T12456] ? __fget_files+0x2a/0x420 [ 795.896143][T12456] ? __fget_files+0x2a/0x420 [ 795.896159][T12456] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 795.896182][T12456] ? __pfx_raw_setsockopt+0x10/0x10 [ 795.896207][T12456] do_sock_setsockopt+0x17c/0x1b0 [ 795.896231][T12456] __x64_sys_setsockopt+0x143/0x1b0 [ 795.896265][T12456] do_syscall_64+0xe2/0xf80 [ 795.896287][T12456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.896306][T12456] ? trace_irq_disable+0x37/0x100 [ 795.896328][T12456] ? clear_bhb_loop+0x60/0xb0 [ 795.896351][T12456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.896369][T12456] RIP: 0033:0x7f7e6054aeb9 [ 795.896387][T12456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.896404][T12456] RSP: 002b:00007f7e5e75c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 795.896424][T12456] RAX: ffffffffffffffda RBX: 00007f7e607c6180 RCX: 00007f7e6054aeb9 [ 795.896438][T12456] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000003 [ 795.896451][T12456] RBP: 00007f7e5e75c090 R08: 0000000000000f00 R09: 0000000000000000 [ 795.896463][T12456] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 795.896476][T12456] R13: 00007f7e607c6218 R14: 00007f7e607c6180 R15: 00007ffc3f3ef338 [ 795.896508][T12456] [ 796.279196][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1820'. [ 796.279212][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1820'. [ 799.593425][T12332] chnl_net:caif_netlink_parms(): no params data found [ 800.039952][T12332] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.040096][T12332] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.040313][T12332] bridge_slave_0: entered allmulticast mode [ 800.042786][T12332] bridge_slave_0: entered promiscuous mode [ 800.074986][T12332] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.075183][T12332] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.075383][T12332] bridge_slave_1: entered allmulticast mode [ 800.077829][T12332] bridge_slave_1: entered promiscuous mode [ 801.346874][T12332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.374993][T12332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.442799][T12033] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 802.526215][T12332] team0: Port device team_slave_0 added [ 802.533798][T12033] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 802.760391][T12332] team0: Port device team_slave_1 added [ 802.760471][T12033] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 804.155795][T12033] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 804.309936][T12332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.309954][T12332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.309981][T12332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.398194][T12332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.398207][T12332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.398223][T12332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.955920][T12091] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 805.580179][T10796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 805.642037][T10796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 805.667932][T10796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 805.675359][T10796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 805.678328][T10796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 805.783169][T12332] hsr_slave_0: entered promiscuous mode [ 805.791389][T12332] hsr_slave_1: entered promiscuous mode [ 805.799808][T12091] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 806.188741][T12091] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 806.413814][ T888] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 806.794133][ T888] usb 1-1: Using ep0 maxpacket: 8 [ 807.503592][ T888] usb 1-1: config 129 has an invalid interface number: 121 but max is 1 [ 807.503620][ T888] usb 1-1: config 129 has an invalid interface number: 65 but max is 1 [ 807.503640][ T888] usb 1-1: config 129 has an invalid interface association descriptor of length 5, skipping [ 807.503658][ T888] usb 1-1: config 129 has no interface number 0 [ 807.503674][ T888] usb 1-1: config 129 has no interface number 1 [ 807.503730][ T888] usb 1-1: config 129 interface 121 altsetting 44 has an invalid endpoint descriptor of length 2, skipping [ 807.503752][ T888] usb 1-1: config 129 interface 121 altsetting 44 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 807.503777][ T888] usb 1-1: config 129 interface 121 altsetting 44 has an endpoint descriptor with address 0x12, changing to 0x2 [ 807.503793][ T888] usb 1-1: config 129 interface 121 altsetting 44 endpoint 0xE has an invalid bInterval 196, changing to 7 [ 807.503807][ T888] usb 1-1: config 129 interface 121 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 807.503819][ T888] usb 1-1: config 129 interface 121 altsetting 44 has an invalid descriptor for endpoint zero, skipping [ 807.503830][ T888] usb 1-1: config 129 interface 121 altsetting 44 bulk endpoint 0x5 has invalid maxpacket 1024 [ 807.503843][ T888] usb 1-1: config 129 interface 121 altsetting 44 has a duplicate endpoint with address 0x2, skipping [ 807.503855][ T888] usb 1-1: config 129 interface 121 altsetting 44 has a duplicate endpoint with address 0x5, skipping [ 807.503867][ T888] usb 1-1: config 129 interface 121 altsetting 44 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 807.503892][ T888] usb 1-1: config 129 interface 65 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 807.503903][ T888] usb 1-1: config 129 interface 65 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 807.503914][ T888] usb 1-1: config 129 interface 121 has no altsetting 0 [ 807.503923][ T888] usb 1-1: config 129 interface 65 has no altsetting 0 [ 807.505896][ T888] usb 1-1: New USB device found, idVendor=05dd, idProduct=ff31, bcdDevice=1f.b1 [ 807.505913][ T888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.505924][ T888] usb 1-1: Product: syz [ 807.505932][ T888] usb 1-1: Manufacturer: syz [ 807.505940][ T888] usb 1-1: SerialNumber: syz [ 807.725740][T10796] Bluetooth: hci0: command tx timeout [ 807.894551][ T888] usb 1-1: USB disconnect, device number 84 [ 808.087930][T12091] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 808.611895][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.611981][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.673783][ T888] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 808.823743][ T888] usb 1-1: Using ep0 maxpacket: 16 [ 808.829834][ T888] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 808.848938][ T888] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 808.848967][ T888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.848988][ T888] usb 1-1: Product: syz [ 808.849002][ T888] usb 1-1: Manufacturer: syz [ 808.849016][ T888] usb 1-1: SerialNumber: syz [ 808.939025][ T888] usb 1-1: config 0 descriptor?? [ 808.947735][ T888] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 808.949471][ T888] usb 1-1: Detected FT232R [ 809.205826][ T888] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 809.552633][ T888] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 809.556238][ T888] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 809.575559][ T888] usb 1-1: USB disconnect, device number 85 [ 809.598960][ T888] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 809.599730][ T888] ftdi_sio 1-1:0.0: device disconnected [ 809.803837][T10796] Bluetooth: hci0: command tx timeout [ 810.220475][ T9967] bridge_slave_1: left allmulticast mode [ 810.220505][ T9967] bridge_slave_1: left promiscuous mode [ 810.224499][ T9967] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.294664][ T9967] bridge_slave_0: left allmulticast mode [ 810.294683][ T9967] bridge_slave_0: left promiscuous mode [ 810.294838][ T9967] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.513801][ T9] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 810.643775][ T9] usb 1-1: device descriptor read/64, error -71 [ 810.826820][T10673] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 810.849625][T10673] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 810.851503][T10673] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 810.852565][T10673] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 810.853350][T10673] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 810.883692][ T9] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 811.218630][ T9] usb 1-1: device descriptor read/64, error -71 [ 811.331346][ T9] usb usb1-port1: attempt power cycle [ 811.843763][ T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 811.865266][ T9] usb 1-1: device descriptor read/8, error -71 [ 811.883957][T10673] Bluetooth: hci0: command tx timeout [ 812.103923][ T9] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 812.124410][ T9] usb 1-1: device descriptor read/8, error -71 [ 812.234075][ T9] usb usb1-port1: unable to enumerate USB device [ 813.606986][T10673] Bluetooth: hci5: command tx timeout [ 813.814504][ T9967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.894412][ T9967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.937359][ T9967] bond0 (unregistering): Released all slaves [ 813.963952][T10673] Bluetooth: hci0: command tx timeout [ 814.093702][ T9] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 814.264363][T12623] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1850'. [ 814.266117][ T9] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 814.266142][ T9] usb 1-1: config 0 has no interface number 0 [ 814.266187][ T9] usb 1-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 814.266213][ T9] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 814.266240][ T9] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8240, setting to 1024 [ 814.266289][ T9] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 814.266313][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.275362][ T9] usb 1-1: config 0 descriptor?? [ 814.406735][ T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input22 [ 814.471479][T12565] chnl_net:caif_netlink_parms(): no params data found [ 814.576990][T12621] netlink: 'syz.0.1851': attribute type 4 has an invalid length. [ 814.678846][ C1] usbtouchscreen 1-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 814.849659][ T9967] hsr_slave_0: left promiscuous mode [ 814.897673][ T9967] hsr_slave_1: left promiscuous mode [ 814.898634][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.988352][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.128516][ T5863] usb 1-1: USB disconnect, device number 90 [ 815.643928][T10673] Bluetooth: hci5: command tx timeout [ 817.027092][T12661] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1859'. [ 817.093745][ T49] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 817.243693][ T49] usb 1-1: device descriptor read/64, error -71 [ 817.493786][ T49] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 817.634333][ T49] usb 1-1: device descriptor read/64, error -71 [ 817.747168][ T49] usb usb1-port1: attempt power cycle [ 817.839649][T10796] Bluetooth: hci5: command tx timeout [ 818.453720][ T49] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 818.474666][ T49] usb 1-1: device descriptor read/8, error -71 [ 818.485657][ T9967] team0 (unregistering): Port device team_slave_1 removed [ 818.723751][ T49] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 818.741851][ T9967] team0 (unregistering): Port device team_slave_0 removed [ 818.744601][ T49] usb 1-1: device descriptor read/8, error -71 [ 818.874877][ T49] usb usb1-port1: unable to enumerate USB device [ 819.884320][T10796] Bluetooth: hci5: command tx timeout [ 820.485164][ T49] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 820.705678][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 820.711443][ T49] usb 1-1: config 1 has an invalid interface number: 4 but max is 2 [ 820.711471][ T49] usb 1-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 820.711493][ T49] usb 1-1: config 1 has no interface number 3 [ 820.711562][ T49] usb 1-1: too many endpoints for config 1 interface 4 altsetting 2: 168, using maximum allowed: 30 [ 820.711603][ T49] usb 1-1: config 1 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 168 [ 820.711660][ T49] usb 1-1: config 1 interface 4 has no altsetting 0 [ 820.711678][ T49] usb 1-1: config 1 interface 1 has no altsetting 0 [ 820.779648][ T49] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 820.779667][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.779678][ T49] usb 1-1: Product: 鿕Ǹ崴㯑霸퀤ꠉ↦혗쁍䋤瀧諍鸏馄鋘搳宎蚷⫗處㕑渓쐤肴ޜﻥᯎ녷溌噘߱⢍꼘瘝ﳞ䉛擞㳩雱ᘻ蕠燅蝱㴹ḍ䩒礆䖻6⤎搑輡뗎閗粹㍍負ᬡ䣮勈刿縉\鉨䝪떅౵涁栈ٜ쯏َ뵣孃ꌬ瞐䙓ῐᩄ汽ゞ蓞螛Ủ밌㟣⼽㧍硚ꟺ乸ꚟ [ 820.779695][ T49] usb 1-1: Manufacturer: Ⰱ [ 820.779703][ T49] usb 1-1: SerialNumber: ѧ쑨컓鎢揁됲絥㳳⚖鉜逅锤ꪪ橗理㰋锃劽蹤酃齷ﻘ忻￶曵穩൯뎭ཛྷꨴ뫞閇ӆ썪씷槉ェ螬얮晴ḍ窆ꥤ⾶⋪쫋㖕蛊抐麦섀嵜핪慃氶鼿ꃻ讝땍⢀숣ڼ률蕆面䜢衅ꥯ⯈涗搴퇭样껰⍥挆罩玲篑礨೽豮塄爏㰩䷅斬瓺샇ฦ魌ﶭ [ 821.164427][ T49] usb 1-1: 2:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 821.164457][ T49] usb 1-1: found format II with max.bitrate = 129, frame size=3 [ 821.164476][ T49] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 822.035026][ T49] usb 1-1: USB disconnect, device number 95 [ 822.210422][T12669] udevd[12669]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 822.556086][ T49] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 822.705562][T12565] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.705631][T12565] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.705802][T12565] bridge_slave_0: entered allmulticast mode [ 822.707200][T12565] bridge_slave_0: entered promiscuous mode [ 822.759964][ T49] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 822.759989][ T49] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 822.760049][T12565] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.760183][T12565] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.760655][T12565] bridge_slave_1: entered allmulticast mode [ 822.761134][ T49] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 822.761160][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 822.761180][ T49] usb 1-1: SerialNumber: syz [ 822.776335][T12565] bridge_slave_1: entered promiscuous mode [ 822.950192][T12565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.976256][T12565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.094011][ T49] usb 1-1: 0:2 : does not exist [ 823.094099][ T49] usb 1-1: unit 7 not found! [ 823.136042][ T49] usb 1-1: USB disconnect, device number 96 [ 823.257997][T12669] udevd[12669]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 823.288944][T12565] team0: Port device team_slave_0 added [ 823.296698][T12565] team0: Port device team_slave_1 added [ 823.474687][T12565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.474703][T12565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.474730][T12565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.482821][T12565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.482836][T12565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.482862][T12565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.762759][T12565] hsr_slave_0: entered promiscuous mode [ 823.769871][T12565] hsr_slave_1: entered promiscuous mode [ 823.770915][T12565] debugfs: 'hsr0' already exists in 'hsr' [ 823.770938][T12565] Cannot create hsr debugfs directory [ 823.800782][T12332] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 823.818341][T12714] FAULT_INJECTION: forcing a failure. [ 823.818341][T12714] name failslab, interval 1, probability 0, space 0, times 0 [ 823.818363][T12714] CPU: 1 UID: 0 PID: 12714 Comm: syz.0.1873 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 823.818378][T12714] Tainted: [L]=SOFTLOCKUP [ 823.818382][T12714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 823.818389][T12714] Call Trace: [ 823.818394][T12714] [ 823.818398][T12714] dump_stack_lvl+0xe8/0x150 [ 823.818418][T12714] should_fail_ex+0x46b/0x600 [ 823.818432][T12714] ? alloc_empty_file+0x55/0x1d0 [ 823.818443][T12714] should_failslab+0xa8/0x100 [ 823.818459][T12714] ? alloc_empty_file+0x55/0x1d0 [ 823.818468][T12714] kmem_cache_alloc_noprof+0x83/0x6a0 [ 823.818487][T12714] alloc_empty_file+0x55/0x1d0 [ 823.818505][T12714] dentry_open+0x44/0xa0 [ 823.818515][T12714] __se_sys_fsmount+0x7f8/0xb40 [ 823.818536][T12714] ? __pfx___se_sys_fsmount+0x10/0x10 [ 823.818553][T12714] ? __secure_computing+0xe1/0x2a0 [ 823.818569][T12714] do_syscall_64+0xe2/0xf80 [ 823.818584][T12714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.818594][T12714] ? trace_irq_disable+0x37/0x100 [ 823.818607][T12714] ? clear_bhb_loop+0x60/0xb0 [ 823.818620][T12714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.818630][T12714] RIP: 0033:0x7f7e6054aeb9 [ 823.818641][T12714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.818651][T12714] RSP: 002b:00007f7e5e79e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 823.818663][T12714] RAX: ffffffffffffffda RBX: 00007f7e607c5fa0 RCX: 00007f7e6054aeb9 [ 823.818671][T12714] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003 [ 823.818677][T12714] RBP: 00007f7e5e79e090 R08: 0000000000000000 R09: 0000000000000000 [ 823.818683][T12714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.818690][T12714] R13: 00007f7e607c6038 R14: 00007f7e607c5fa0 R15: 00007ffc3f3ef338 [ 823.818706][T12714] [ 823.851425][T12332] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 824.076717][T12332] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 824.260437][T12607] chnl_net:caif_netlink_parms(): no params data found [ 825.115091][T12332] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 827.218470][T12607] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.218652][T12607] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.218833][T12607] bridge_slave_0: entered allmulticast mode [ 827.222574][T12607] bridge_slave_0: entered promiscuous mode [ 827.272029][T12745] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1881'. [ 827.272054][T12745] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1881'. [ 827.524328][T12607] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.524473][T12607] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.524736][T12607] bridge_slave_1: entered allmulticast mode [ 827.528790][T12607] bridge_slave_1: entered promiscuous mode [ 827.647941][T12607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.867583][T12607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.375218][T12607] team0: Port device team_slave_0 added [ 829.556082][T12607] team0: Port device team_slave_1 added [ 829.717262][T12728] syz.0.1878 (12728): drop_caches: 3 [ 831.076210][T12607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.076226][T12607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.076249][T12607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.080056][T12607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.080070][T12607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.080093][T12607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.198591][T12607] hsr_slave_0: entered promiscuous mode [ 831.199702][T12607] hsr_slave_1: entered promiscuous mode [ 831.200522][T12607] debugfs: 'hsr0' already exists in 'hsr' [ 831.200544][T12607] Cannot create hsr debugfs directory [ 831.204802][ T9] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 831.353850][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 831.358656][ T9] usb 1-1: config 129 has an invalid interface number: 121 but max is 1 [ 831.358684][ T9] usb 1-1: config 129 has an invalid interface number: 65 but max is 1 [ 831.358705][ T9] usb 1-1: config 129 has an invalid interface association descriptor of length 5, skipping [ 831.358724][ T9] usb 1-1: config 129 has no interface number 0 [ 831.358741][ T9] usb 1-1: config 129 has no interface number 1 [ 831.358803][ T9] usb 1-1: config 129 interface 121 altsetting 44 has an invalid endpoint descriptor of length 2, skipping [ 831.358829][ T9] usb 1-1: config 129 interface 121 altsetting 44 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 831.358857][ T9] usb 1-1: config 129 interface 121 altsetting 44 has an endpoint descriptor with address 0x12, changing to 0x2 [ 831.358884][ T9] usb 1-1: config 129 interface 121 altsetting 44 endpoint 0xE has an invalid bInterval 196, changing to 7 [ 831.358911][ T9] usb 1-1: config 129 interface 121 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 831.358934][ T9] usb 1-1: config 129 interface 121 altsetting 44 has an invalid descriptor for endpoint zero, skipping [ 831.358956][ T9] usb 1-1: config 129 interface 121 altsetting 44 bulk endpoint 0x5 has invalid maxpacket 1024 [ 831.358978][ T9] usb 1-1: config 129 interface 121 altsetting 44 has a duplicate endpoint with address 0x2, skipping [ 831.358999][ T9] usb 1-1: config 129 interface 121 altsetting 44 has a duplicate endpoint with address 0x5, skipping [ 831.359021][ T9] usb 1-1: config 129 interface 121 altsetting 44 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 831.359062][ T9] usb 1-1: config 129 interface 65 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 831.359083][ T9] usb 1-1: config 129 interface 65 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 831.359104][ T9] usb 1-1: config 129 interface 121 has no altsetting 0 [ 831.359122][ T9] usb 1-1: config 129 interface 65 has no altsetting 0 [ 831.361893][ T9] usb 1-1: New USB device found, idVendor=05dd, idProduct=ff31, bcdDevice=1f.b1 [ 831.361919][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.361939][ T9] usb 1-1: Product: syz [ 831.361954][ T9] usb 1-1: Manufacturer: syz [ 831.361969][ T9] usb 1-1: SerialNumber: syz [ 831.673741][ T9] usb 1-1: USB disconnect, device number 97 [ 833.142074][ T9967] bridge_slave_1: left allmulticast mode [ 833.142103][ T9967] bridge_slave_1: left promiscuous mode [ 833.142349][ T9967] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.211661][T12799] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1893'. [ 833.328419][ T9967] bridge_slave_0: left allmulticast mode [ 833.328439][ T9967] bridge_slave_0: left promiscuous mode [ 833.328688][ T9967] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.397394][ T9967] bridge_slave_1: left allmulticast mode [ 833.397421][ T9967] bridge_slave_1: left promiscuous mode [ 833.397608][ T9967] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.484517][ T9967] bridge_slave_0: left allmulticast mode [ 833.484542][ T9967] bridge_slave_0: left promiscuous mode [ 833.484689][ T9967] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.984949][ T9967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.064269][ T9967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.145579][ T9967] bond0 (unregistering): Released all slaves [ 836.343709][ T9] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 836.394188][ T9967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.474334][ T9967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.495267][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 836.495292][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 836.496350][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 836.496376][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 836.496390][ T9] usb 1-1: SerialNumber: syz [ 836.596076][ T9967] bond0 (unregistering): Released all slaves [ 836.633244][T12799] vlan0: entered promiscuous mode [ 836.749050][ T9] usb 1-1: 0:2 : does not exist [ 836.749133][ T9] usb 1-1: unit 5 not found! [ 836.878510][ T9] usb 1-1: USB disconnect, device number 98 [ 836.985731][T12813] udevd[12813]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 837.007005][T12332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.264095][ T9967] hsr_slave_0: left promiscuous mode [ 837.316778][ T9967] hsr_slave_1: left promiscuous mode [ 837.318135][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.364670][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.540897][ T9967] hsr_slave_0: left promiscuous mode [ 838.573868][ T9967] hsr_slave_1: left promiscuous mode [ 838.574505][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.596712][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.072287][T12826] overlayfs: missing 'lowerdir' [ 839.339166][T10673] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 839.345384][T10673] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 839.347914][ T9967] team0 (unregistering): Port device team_slave_1 removed [ 839.350159][T10673] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 839.396870][T10673] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 839.397532][T12834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1902'. [ 839.397838][T10673] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 839.544193][ T9967] team0 (unregistering): Port device team_slave_0 removed [ 840.431862][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 840.431881][ T37] audit: type=1800 audit(1770558042.308:386): pid=12836 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.0.1903" name="/newroot/502/bus" dev="tmpfs" ino=2713 res=0 errno=0 [ 840.803703][ T6875] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 840.968817][ T6875] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 840.968844][ T6875] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 840.970523][ T6875] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 840.970550][ T6875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 840.970571][ T6875] usb 1-1: SerialNumber: syz [ 841.244004][ T9967] team0 (unregistering): Port device team_slave_1 removed [ 841.271386][ T6875] usb 1-1: 0:2 : does not exist [ 841.271469][ T6875] usb 1-1: unit 7 not found! [ 841.342391][ T6875] usb 1-1: USB disconnect, device number 99 [ 841.447704][T12813] udevd[12813]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 841.495504][T10796] Bluetooth: hci1: command tx timeout [ 841.524789][ T9967] team0 (unregistering): Port device team_slave_0 removed [ 842.203913][ T888] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 842.208210][T12565] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 842.356342][ T888] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 842.359361][ T888] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 842.359386][ T888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.359404][ T888] usb 1-1: Product: syz [ 842.359418][ T888] usb 1-1: Manufacturer: syz [ 842.359432][ T888] usb 1-1: SerialNumber: syz [ 842.419059][ T888] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 842.438731][T12565] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 842.558969][T12565] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 842.833911][T12565] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 843.564783][T10796] Bluetooth: hci1: command tx timeout [ 843.570895][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 843.759260][T12858] overlayfs: missing 'lowerdir' [ 843.791389][T12844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.793210][T12844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.812159][T12844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.812692][T12844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.820679][T12844] FAULT_INJECTION: forcing a failure. [ 843.820679][T12844] name failslab, interval 1, probability 0, space 0, times 0 [ 843.820713][T12844] CPU: 0 UID: 0 PID: 12844 Comm: syz.0.1905 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 843.820742][T12844] Tainted: [L]=SOFTLOCKUP [ 843.820749][T12844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 843.820760][T12844] Call Trace: [ 843.820768][T12844] [ 843.820776][T12844] dump_stack_lvl+0xe8/0x150 [ 843.820806][T12844] should_fail_ex+0x46b/0x600 [ 843.820831][T12844] should_failslab+0xa8/0x100 [ 843.820858][T12844] __kmalloc_noprof+0xdf/0x7c0 [ 843.820881][T12844] ? tomoyo_encode+0x28b/0x550 [ 843.820904][T12844] tomoyo_encode+0x28b/0x550 [ 843.820927][T12844] tomoyo_realpath_from_path+0x58d/0x5d0 [ 843.820956][T12844] ? tomoyo_path_number_perm+0x219/0x630 [ 843.820979][T12844] tomoyo_path_number_perm+0x246/0x630 [ 843.821005][T12844] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 843.821027][T12844] ? __lock_acquire+0x6b5/0x2cf0 [ 843.821049][T12844] ? do_raw_spin_lock+0x12b/0x2f0 [ 843.821105][T12844] ? __fget_files+0x2a/0x420 [ 843.821125][T12844] ? __fget_files+0x2a/0x420 [ 843.821140][T12844] ? __fget_files+0x3a6/0x420 [ 843.821155][T12844] ? __fget_files+0x2a/0x420 [ 843.821176][T12844] security_file_ioctl+0xc3/0x2a0 [ 843.821201][T12844] __se_sys_ioctl+0x47/0x170 [ 843.821226][T12844] do_syscall_64+0xe2/0xf80 [ 843.821248][T12844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.821265][T12844] ? trace_irq_disable+0x37/0x100 [ 843.821286][T12844] ? clear_bhb_loop+0x60/0xb0 [ 843.821309][T12844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.821327][T12844] RIP: 0033:0x7f7e6054aeb9 [ 843.821343][T12844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.821359][T12844] RSP: 002b:00007f7e5e79e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 843.821379][T12844] RAX: ffffffffffffffda RBX: 00007f7e607c5fa0 RCX: 00007f7e6054aeb9 [ 843.821398][T12844] RDX: 0000200000000380 RSI: 00000000c0585609 RDI: 0000000000000007 [ 843.821411][T12844] RBP: 00007f7e5e79e090 R08: 0000000000000000 R09: 0000000000000000 [ 843.821423][T12844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.821434][T12844] R13: 00007f7e607c6038 R14: 00007f7e607c5fa0 R15: 00007ffc3f3ef338 [ 843.821464][T12844] [ 843.821551][T12844] ERROR: Out of memory at tomoyo_realpath_from_path. [ 843.933512][T12844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.984556][T12844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.997247][T12844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.001788][T12844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.243158][T12862] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1910'. [ 844.364163][T12865] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1911'. [ 844.976373][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 844.976875][ T9] ath9k_htc: Failed to initialize the device [ 845.001197][ T5856] usb 1-1: USB disconnect, device number 100 [ 845.126123][ T5856] usb 1-1: ath9k_htc: USB layer deinitialized [ 846.028320][T10796] Bluetooth: hci1: command tx timeout [ 846.067796][T12869] evm: overlay not supported [ 846.984310][T12878] overlayfs: failed to clone upperpath [ 848.308691][T10796] Bluetooth: hci1: command tx timeout [ 848.630989][T12892] overlayfs: missing 'lowerdir' [ 849.484499][T12831] chnl_net:caif_netlink_parms(): no params data found [ 849.510514][T12565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.542302][T12607] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 849.743683][ T5990] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 849.874663][T12607] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 849.953739][ T5990] usb 1-1: Using ep0 maxpacket: 16 [ 849.956049][ T5990] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 849.956074][ T5990] usb 1-1: config 0 has no interface number 0 [ 849.956109][ T5990] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 849.956123][ T5990] usb 1-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 849.956137][ T5990] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 849.958306][ T5990] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 849.958328][ T5990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.958339][ T5990] usb 1-1: Product: syz [ 849.958347][ T5990] usb 1-1: Manufacturer: syz [ 849.958355][ T5990] usb 1-1: SerialNumber: syz [ 849.967709][ T5990] usb 1-1: config 0 descriptor?? [ 850.053784][T12913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 850.053904][T12913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 850.096809][T12607] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 850.245529][T12607] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 850.274798][T12913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 850.274974][T12913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 850.477928][ T5990] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 850.530990][T12831] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.531348][T12831] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.531550][T12831] bridge_slave_0: entered allmulticast mode [ 850.554785][T12831] bridge_slave_0: entered promiscuous mode [ 850.586497][T12565] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.590463][T12831] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.590605][T12831] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.590982][T12831] bridge_slave_1: entered allmulticast mode [ 850.620820][T12831] bridge_slave_1: entered promiscuous mode [ 850.680726][ T5990] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 850.680745][ T5990] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 850.680893][ T5990] asix 1-1:0.34: probe with driver asix failed with error -71 [ 850.732979][ T5990] usb 1-1: USB disconnect, device number 101 [ 850.851850][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.859794][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.890955][T12831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.924956][T12831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.003935][ T9967] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.013301][ T9967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.459183][T12831] team0: Port device team_slave_0 added [ 851.508169][T12831] team0: Port device team_slave_1 added [ 851.688812][T12942] tmpfs: Unsupported parameter 'huge' [ 852.808597][T12831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.808609][T12831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.808623][T12831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.840105][T12950] overlayfs: missing 'workdir' [ 852.870269][T12831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.870285][T12831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.870311][T12831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.964886][T12831] hsr_slave_0: entered promiscuous mode [ 854.966227][T12831] hsr_slave_1: entered promiscuous mode [ 854.967173][T12831] debugfs: 'hsr0' already exists in 'hsr' [ 854.967202][T12831] Cannot create hsr debugfs directory [ 855.044312][ T5990] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 855.193986][ T5990] usb 1-1: Using ep0 maxpacket: 16 [ 855.197773][ T5990] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 855.219332][ T5990] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 855.219360][ T5990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.219380][ T5990] usb 1-1: Product: syz [ 855.219394][ T5990] usb 1-1: Manufacturer: syz [ 855.219408][ T5990] usb 1-1: SerialNumber: syz [ 855.249505][ T5990] usb 1-1: config 0 descriptor?? [ 855.262237][ T5990] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 855.280499][ T5990] usb 1-1: Detected FT232R [ 855.442889][T12975] overlayfs: missing 'workdir' [ 855.461988][ T5990] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 855.741062][ T5990] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 855.755702][ T5990] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 855.773169][ T5990] usb 1-1: USB disconnect, device number 102 [ 855.809257][ T5990] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 855.809678][ T5990] ftdi_sio 1-1:0.0: device disconnected [ 855.846704][T12607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.912638][T12607] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.917756][ T1104] bridge_slave_1: left allmulticast mode [ 856.917780][ T1104] bridge_slave_1: left promiscuous mode [ 856.918007][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.065020][T12995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1940'. [ 857.092117][ T1104] bridge_slave_0: left allmulticast mode [ 857.092146][ T1104] bridge_slave_0: left promiscuous mode [ 857.093444][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.742309][T12997] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1941'. [ 857.784096][T12998] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1941'. [ 857.948758][T13003] overlayfs: missing 'workdir' [ 858.475590][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.574675][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.638756][ T1104] bond0 (unregistering): Released all slaves [ 859.732727][T12565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.862558][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.862688][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.054411][ T9971] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.054505][ T9971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.264785][ T1104] hsr_slave_0: left promiscuous mode [ 860.283864][ T1104] hsr_slave_1: left promiscuous mode [ 860.284789][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.307944][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.064121][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 861.215233][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 861.816439][T13028] FAULT_INJECTION: forcing a failure. [ 861.816439][T13028] name failslab, interval 1, probability 0, space 0, times 0 [ 861.816481][T13028] CPU: 0 UID: 0 PID: 13028 Comm: syz.0.1949 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 861.816508][T13028] Tainted: [L]=SOFTLOCKUP [ 861.816514][T13028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 861.816526][T13028] Call Trace: [ 861.816533][T13028] [ 861.816541][T13028] dump_stack_lvl+0xe8/0x150 [ 861.816571][T13028] should_fail_ex+0x46b/0x600 [ 861.816597][T13028] should_failslab+0xa8/0x100 [ 861.816623][T13028] __kmalloc_noprof+0xdf/0x7c0 [ 861.816647][T13028] ? tomoyo_encode+0x28b/0x550 [ 861.816670][T13028] tomoyo_encode+0x28b/0x550 [ 861.816693][T13028] tomoyo_realpath_from_path+0x58d/0x5d0 [ 861.816722][T13028] ? tomoyo_path_number_perm+0x219/0x630 [ 861.816746][T13028] tomoyo_path_number_perm+0x246/0x630 [ 861.816772][T13028] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 861.816795][T13028] ? __lock_acquire+0x6b5/0x2cf0 [ 861.816819][T13028] ? do_raw_spin_lock+0x12b/0x2f0 [ 861.816874][T13028] ? __fget_files+0x2a/0x420 [ 861.816895][T13028] ? __fget_files+0x2a/0x420 [ 861.816910][T13028] ? __fget_files+0x3a6/0x420 [ 861.816925][T13028] ? __fget_files+0x2a/0x420 [ 861.816946][T13028] security_file_ioctl+0xc3/0x2a0 [ 861.816971][T13028] __se_sys_ioctl+0x47/0x170 [ 861.816995][T13028] do_syscall_64+0xe2/0xf80 [ 861.817018][T13028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.817035][T13028] ? trace_irq_disable+0x37/0x100 [ 861.817057][T13028] ? clear_bhb_loop+0x60/0xb0 [ 861.817080][T13028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.817098][T13028] RIP: 0033:0x7f7e6054aeb9 [ 861.817115][T13028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.817131][T13028] RSP: 002b:00007f7e5e79e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 861.817152][T13028] RAX: ffffffffffffffda RBX: 00007f7e607c5fa0 RCX: 00007f7e6054aeb9 [ 861.817166][T13028] RDX: 0000200000000bc0 RSI: 00000000c0405519 RDI: 0000000000000003 [ 861.817179][T13028] RBP: 00007f7e5e79e090 R08: 0000000000000000 R09: 0000000000000000 [ 861.817191][T13028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.817202][T13028] R13: 00007f7e607c6038 R14: 00007f7e607c5fa0 R15: 00007ffc3f3ef338 [ 861.817234][T13028] [ 861.817253][T13028] ERROR: Out of memory at tomoyo_realpath_from_path. [ 862.120328][T13030] overlayfs: failed to clone upperpath [ 862.471744][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1955'. [ 862.743753][ T5990] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 862.893844][ T5990] usb 1-1: Using ep0 maxpacket: 32 [ 862.895617][ T5990] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 862.895641][ T5990] usb 1-1: config 0 has no interface number 0 [ 862.895680][ T5990] usb 1-1: config 0 interface 12 has no altsetting 0 [ 862.897882][ T5990] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 862.897904][ T5990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.897915][ T5990] usb 1-1: Product: syz [ 862.897922][ T5990] usb 1-1: Manufacturer: syz [ 862.897930][ T5990] usb 1-1: SerialNumber: syz [ 862.922670][ T5990] usb 1-1: config 0 descriptor?? [ 863.172530][T13046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.183937][T13046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.362698][T12565] veth0_vlan: entered promiscuous mode [ 863.428181][T12565] veth1_vlan: entered promiscuous mode [ 863.686614][T12565] veth0_macvtap: entered promiscuous mode [ 863.802937][ T5990] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 863.802989][ T5990] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 863.803006][ T5990] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 863.803102][ T5990] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 863.827895][T12565] veth1_macvtap: entered promiscuous mode [ 863.842248][ T5990] usb 1-1: USB disconnect, device number 103 [ 864.110480][T13062] overlayfs: failed to clone upperpath [ 864.130561][T12565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.247918][T12565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.314368][ T58] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.319355][T12831] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 864.382977][ T8440] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.387083][T12831] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 864.582060][ T8440] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.584538][T12607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.609687][T13074] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 864.613990][T12831] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 865.389391][ T8440] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.425726][T12831] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 865.871308][T12831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.946648][T12831] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.968749][ T9969] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.968955][ T9969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.332741][ T9969] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.332884][ T9969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.384703][T13098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 867.402612][T13098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 867.409600][T13098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 867.415464][T13098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 867.416170][T13098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 867.490183][T13100] overlayfs: failed to clone upperpath [ 867.664985][T13103] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 867.923398][T12607] veth0_vlan: entered promiscuous mode [ 868.014020][T12607] veth1_vlan: entered promiscuous mode [ 868.548589][ T1104] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.573697][ T49] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 868.733829][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 868.741514][ T49] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 868.741541][ T49] usb 1-1: config 0 has no interface number 0 [ 868.741589][ T49] usb 1-1: config 0 interface 12 has no altsetting 0 [ 868.748123][ T49] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 868.748149][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.748169][ T49] usb 1-1: Product: syz [ 868.748183][ T49] usb 1-1: Manufacturer: syz [ 868.748198][ T49] usb 1-1: SerialNumber: syz [ 868.787436][ T49] usb 1-1: config 0 descriptor?? [ 868.970097][ T1104] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.023775][T13109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.024888][T13109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.484075][T10796] Bluetooth: hci3: command tx timeout [ 869.569942][ T1104] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.681910][ T49] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 869.681965][ T49] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 869.681982][ T49] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 869.682074][ T49] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 869.691456][T12607] veth0_macvtap: entered promiscuous mode [ 869.711072][ T49] usb 1-1: USB disconnect, device number 104 [ 869.772603][T12607] veth1_macvtap: entered promiscuous mode [ 869.979344][ T1104] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.048515][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.048607][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.064748][T12831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.087353][T12607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.103769][T12607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.138674][ T3823] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.139421][ T3823] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.140875][ T3823] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.141729][ T3823] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.331329][T13096] chnl_net:caif_netlink_parms(): no params data found [ 870.894344][T13145] overlayfs: failed to clone upperpath [ 871.267662][T13096] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.267789][T13096] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.267985][T13096] bridge_slave_0: entered allmulticast mode [ 871.269647][T13096] bridge_slave_0: entered promiscuous mode [ 871.288708][T13096] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.288898][T13096] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.289398][T13096] bridge_slave_1: entered allmulticast mode [ 871.291790][T13096] bridge_slave_1: entered promiscuous mode [ 871.340305][T13096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.359532][T13096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.360767][ T1104] bridge_slave_1: left allmulticast mode [ 871.360782][ T1104] bridge_slave_1: left promiscuous mode [ 871.360923][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.563656][T10796] Bluetooth: hci3: command tx timeout [ 871.637537][T13098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 871.659684][T13098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 871.663027][T13098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 872.093278][T13098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 872.128633][T13098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 872.395189][ T1104] bridge_slave_0: left allmulticast mode [ 872.395218][ T1104] bridge_slave_0: left promiscuous mode [ 872.395463][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.643916][T13098] Bluetooth: hci3: command tx timeout [ 874.154709][T13184] overlayfs: failed to clone upperpath [ 874.257415][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.315982][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.364394][T13098] Bluetooth: hci0: command tx timeout [ 874.371275][ T1104] bond0 (unregistering): Released all slaves [ 874.854505][T13096] team0: Port device team_slave_0 added [ 874.874705][T13096] team0: Port device team_slave_1 added [ 875.044490][ T1104] hsr_slave_0: left promiscuous mode [ 875.085202][ T1104] hsr_slave_1: left promiscuous mode [ 875.087034][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.087051][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.111087][T13199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1989'. [ 875.135020][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.135046][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.230694][ T1104] veth1_macvtap: left promiscuous mode [ 875.230762][ T1104] veth0_macvtap: left promiscuous mode [ 875.230944][ T1104] veth1_vlan: left promiscuous mode [ 875.231039][ T1104] veth0_vlan: left promiscuous mode [ 875.734124][T13098] Bluetooth: hci3: command tx timeout [ 876.033721][ T37] audit: type=1326 audit(1770558083.896:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13205 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6054aeb9 code=0x7ffc0000 [ 876.034020][ T37] audit: type=1326 audit(1770558083.916:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13205 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6054aeb9 code=0x7ffc0000 [ 876.041894][ T37] audit: type=1326 audit(1770558083.916:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13205 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6054aeb9 code=0x7ffc0000 [ 876.042031][ T37] audit: type=1326 audit(1770558083.916:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13205 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6054aeb9 code=0x7ffc0000 [ 876.042192][ T37] audit: type=1326 audit(1770558083.916:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13205 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e6050b78e code=0x7ffc0000 [ 876.044516][ T37] audit: type=1326 audit(1770558083.916:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13205 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7e6050b78e code=0x7ffc0000 [ 876.044615][T13206] FAULT_INJECTION: forcing a failure. [ 876.044615][T13206] name failslab, interval 1, probability 0, space 0, times 0 [ 876.044655][T13206] CPU: 0 UID: 0 PID: 13206 Comm: syz.0.1991 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 876.044678][T13206] Tainted: [L]=SOFTLOCKUP [ 876.044685][T13206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 876.044695][T13206] Call Trace: [ 876.044702][T13206] [ 876.044711][T13206] dump_stack_lvl+0xe8/0x150 [ 876.044741][T13206] should_fail_ex+0x46b/0x600 [ 876.044765][T13206] ? __alloc_skb+0x1d7/0x390 [ 876.044789][T13206] should_failslab+0xa8/0x100 [ 876.044814][T13206] ? __alloc_skb+0x1d7/0x390 [ 876.044835][T13206] kmem_cache_alloc_node_noprof+0x8a/0x6d0 [ 876.044858][T13206] ? lockdep_hardirqs_on+0x7a/0x110 [ 876.044881][T13206] ? __alloc_skb+0x193/0x390 [ 876.044904][T13206] __alloc_skb+0x1d7/0x390 [ 876.044930][T13206] audit_log_start+0x419/0xa40 [ 876.044956][T13206] ? __pfx_audit_log_start+0x10/0x10 [ 876.044976][T13206] ? __lock_acquire+0x6b5/0x2cf0 [ 876.045000][T13206] ? get_pid_task+0x20/0x1f0 [ 876.045025][T13206] audit_seccomp+0x63/0x190 [ 876.045048][T13206] __seccomp_filter+0xd48/0x1ef0 [ 876.045078][T13206] ? __pfx___seccomp_filter+0x10/0x10 [ 876.045096][T13206] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 876.045120][T13206] ? lockdep_hardirqs_on+0x7a/0x110 [ 876.045141][T13206] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 876.045163][T13206] ? rt_mutex_slowunlock+0x1cb/0x300 [ 876.045181][T13206] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 876.045211][T13206] ? __secure_computing+0xe1/0x2a0 [ 876.045230][T13206] syscall_trace_enter+0xa9/0x160 [ 876.045253][T13206] do_syscall_64+0xbb/0xf80 [ 876.045275][T13206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.045292][T13206] ? trace_irq_disable+0x37/0x100 [ 876.045314][T13206] ? clear_bhb_loop+0x60/0xb0 [ 876.045334][T13206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.045352][T13206] RIP: 0033:0x7f7e6054aeb9 [ 876.045369][T13206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.045385][T13206] RSP: 002b:00007f7e5e79e028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 876.045405][T13206] RAX: ffffffffffffffda RBX: 00007f7e607c5fa0 RCX: 00007f7e6054aeb9 [ 876.045418][T13206] RDX: 0000000000000004 RSI: 0000000000003000 RDI: 000020000042e000 [ 876.045430][T13206] RBP: 00007f7e5e79e090 R08: 0000000000000000 R09: 0000000000000000 [ 876.045442][T13206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.045454][T13206] R13: 00007f7e607c6038 R14: 00007f7e607c5fa0 R15: 00007ffc3f3ef338 [ 876.045483][T13206] [ 876.045508][T13206] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 876.045522][T13206] audit: out of memory in audit_log_start [ 876.045748][ T37] audit: type=1326 audit(1770558083.926:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13205 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7e6050b78e code=0x7ffc0000 [ 876.045990][ T37] audit: type=1326 audit(1770558083.926:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13205 comm="syz.0.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7e6050b78e code=0x7ffc0000 [ 876.155323][T13208] overlayfs: failed to clone upperpath [ 876.443976][T13098] Bluetooth: hci0: command tx timeout [ 876.754937][ T5863] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 876.962394][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 876.962421][ T5863] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 876.962434][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 876.962445][ T5863] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 876.962469][ T5863] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 876.962481][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.970939][ T5863] usb 1-1: config 0 descriptor?? [ 877.235302][ T5863] hdpvr 1-1:0.0: firmware version 0x15 dated &S3;x&X^ wΖ g/ n# [ 877.430464][ T5863] hdpvr 1-1:0.0: device init failed [ 877.430525][ T5863] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 877.450994][ T5863] usb 1-1: USB disconnect, device number 105 [ 878.372349][T13226] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1998'. [ 878.534774][T13098] Bluetooth: hci0: command tx timeout [ 879.518130][T13240] overlayfs: failed to clone upperpath [ 879.693966][ T5863] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 879.854650][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 879.857583][ T5863] usb 1-1: unable to get BOS descriptor or descriptor too short [ 879.858668][ T5863] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid wMaxPacketSize 0 [ 879.858695][ T5863] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 0 [ 879.858720][ T5863] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 1023 [ 879.858739][ T5863] usb 1-1: config 1 interface 0 has no altsetting 0 [ 879.860864][ T5863] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 879.860891][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.860907][ T5863] usb 1-1: Product: syz [ 879.860915][ T5863] usb 1-1: Manufacturer: syz [ 879.860923][ T5863] usb 1-1: SerialNumber: syz [ 879.870984][T13238] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 880.119465][ T5863] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 880.141699][ T5863] usb 1-1: USB disconnect, device number 106 [ 880.371381][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 880.605084][T13098] Bluetooth: hci0: command tx timeout [ 880.793958][T13254] netlink: 'syz.0.2006': attribute type 10 has an invalid length. [ 880.964416][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 881.624078][T13252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 883.394951][T13254] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 883.397939][T13254] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 883.455174][T12831] veth0_vlan: entered promiscuous mode [ 883.483718][T13096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.483735][T13096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.483759][T13096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 883.662812][T13096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 883.662828][T13096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.662864][T13096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.472726][T12831] veth1_vlan: entered promiscuous mode [ 884.694217][T13096] hsr_slave_0: entered promiscuous mode [ 884.695567][T13096] hsr_slave_1: entered promiscuous mode [ 885.283236][T12831] veth0_macvtap: entered promiscuous mode [ 885.661452][T12831] veth1_macvtap: entered promiscuous mode [ 886.010966][T13304] FAULT_INJECTION: forcing a failure. [ 886.010966][T13304] name failslab, interval 1, probability 0, space 0, times 0 [ 886.011002][T13304] CPU: 0 UID: 0 PID: 13304 Comm: syz.0.2016 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 886.011023][T13304] Tainted: [L]=SOFTLOCKUP [ 886.011028][T13304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 886.011037][T13304] Call Trace: [ 886.011043][T13304] [ 886.011050][T13304] dump_stack_lvl+0xe8/0x150 [ 886.011077][T13304] should_fail_ex+0x46b/0x600 [ 886.011097][T13304] ? alloc_empty_file+0x55/0x1d0 [ 886.011112][T13304] should_failslab+0xa8/0x100 [ 886.011133][T13304] ? alloc_empty_file+0x55/0x1d0 [ 886.011146][T13304] kmem_cache_alloc_noprof+0x83/0x6a0 [ 886.011171][T13304] alloc_empty_file+0x55/0x1d0 [ 886.011186][T13304] path_openat+0x12a/0x3e70 [ 886.011209][T13304] ? try_to_take_rt_mutex+0x840/0xb00 [ 886.011236][T13304] ? __lock_acquire+0x6b5/0x2cf0 [ 886.011256][T13304] ? __lock_acquire+0x6b5/0x2cf0 [ 886.011270][T13304] ? __pfx_path_openat+0x10/0x10 [ 886.011284][T13304] ? kasan_save_track+0x4f/0x80 [ 886.011300][T13304] ? kasan_save_track+0x3e/0x80 [ 886.011314][T13304] ? __kasan_slab_alloc+0x6c/0x80 [ 886.011330][T13304] ? kmem_cache_alloc_noprof+0x188/0x6a0 [ 886.011346][T13304] ? getname_flags+0xb7/0x540 [ 886.011364][T13304] ? do_sys_openat2+0xca/0x220 [ 886.011382][T13304] ? do_raw_spin_lock+0x12b/0x2f0 [ 886.011410][T13304] do_filp_open+0x22d/0x490 [ 886.011427][T13304] ? __pfx_do_filp_open+0x10/0x10 [ 886.011441][T13304] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 886.011472][T13304] ? alloc_fd+0x64e/0x6c0 [ 886.011499][T13304] do_sys_openat2+0x12f/0x220 [ 886.011514][T13304] ? __pfx_do_sys_openat2+0x10/0x10 [ 886.011528][T13304] ? ksys_write+0x248/0x270 [ 886.011546][T13304] ? __pfx_ksys_write+0x10/0x10 [ 886.011567][T13304] __x64_sys_openat+0x138/0x170 [ 886.011585][T13304] do_syscall_64+0xe2/0xf80 [ 886.011603][T13304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.011616][T13304] ? trace_irq_disable+0x37/0x100 [ 886.011634][T13304] ? clear_bhb_loop+0x60/0xb0 [ 886.011651][T13304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.011666][T13304] RIP: 0033:0x7f7e6050b78e [ 886.011680][T13304] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 886.011693][T13304] RSP: 002b:00007f7e5e77cec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 886.011710][T13304] RAX: ffffffffffffffda RBX: 00007f7e5e77d6c0 RCX: 00007f7e6050b78e [ 886.011720][T13304] RDX: 0000000000000002 RSI: 00007f7e5e77cf90 RDI: ffffffffffffff9c [ 886.011729][T13304] RBP: 00007f7e5e77d090 R08: 0000000000000000 R09: 0000000000000000 [ 886.011738][T13304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.011746][T13304] R13: 00007f7e607c6128 R14: 00007f7e607c6090 R15: 00007ffc3f3ef338 [ 886.011768][T13304] [ 886.474049][T13158] chnl_net:caif_netlink_parms(): no params data found [ 886.927079][T12831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.042581][T12831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.103713][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.105674][T13158] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.105790][T13158] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.105912][T13158] bridge_slave_0: entered allmulticast mode [ 887.107838][T13158] bridge_slave_0: entered promiscuous mode [ 887.194084][ T58] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.339786][T13158] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.339895][T13158] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.340117][T13158] bridge_slave_1: entered allmulticast mode [ 887.342321][T13158] bridge_slave_1: entered promiscuous mode [ 887.347246][ T58] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.369400][ T58] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.691098][T13158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.931344][ T1104] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.999208][T13158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.356804][ T1104] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.397442][T13158] team0: Port device team_slave_0 added [ 888.601497][T13158] team0: Port device team_slave_1 added [ 889.362615][ T1104] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.500314][T12987] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 889.568125][T13158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.568141][T13158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.568168][T13158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.698683][T12987] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.698709][T12987] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 889.699791][T12987] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 889.699817][T12987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 889.699829][T12987] usb 1-1: SerialNumber: syz [ 890.742196][T12987] usb 1-1: 0:2 : does not exist [ 890.896287][T12987] usb 1-1: USB disconnect, device number 107 [ 890.928684][T13313] udevd[13313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 890.982554][ T1104] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.072698][T13158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.072709][T13158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.072725][T13158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.254640][T13158] hsr_slave_0: entered promiscuous mode [ 891.255894][T13158] hsr_slave_1: entered promiscuous mode [ 891.256402][T13158] debugfs: 'hsr0' already exists in 'hsr' [ 891.256417][T13158] Cannot create hsr debugfs directory [ 891.310468][ T9976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.310483][ T9976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.648499][T13096] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 891.703780][ T49] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 891.718642][T13096] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 891.762715][ T6007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.762737][ T6007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.817998][T13096] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 891.864909][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 891.885068][ T49] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 891.885098][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.885118][ T49] usb 1-1: Product: syz [ 891.885132][ T49] usb 1-1: Manufacturer: syz [ 891.885145][ T49] usb 1-1: SerialNumber: syz [ 891.909720][ T49] usb 1-1: config 0 descriptor?? [ 891.920791][ T49] gspca_main: se401-2.14.0 probing 047d:5003 [ 891.966823][T13096] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 892.291800][ T1104] bridge_slave_1: left allmulticast mode [ 892.291875][ T1104] bridge_slave_1: left promiscuous mode [ 892.292208][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.378281][ T49] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 892.378385][ T49] se401 1-1:0.0: probe with driver se401 failed with error -71 [ 892.389153][ T49] usb 1-1: USB disconnect, device number 108 [ 892.411556][ T1104] bridge_slave_0: left allmulticast mode [ 892.411583][ T1104] bridge_slave_0: left promiscuous mode [ 892.411805][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.773873][ T49] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 892.955292][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 892.961372][ T49] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 892.961401][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.961412][ T49] usb 1-1: Product: Щ [ 892.961420][ T49] usb 1-1: Manufacturer: 데ﵘ擛㼙畧薥䒳㳀㙺霱嗯懴蠽ࢮ㗘ꀶ쇈츠膚睧둏챀鰭嚉ᛅ妿㏩ᇙ㨈穥駦냆 [ 892.961431][ T49] usb 1-1: SerialNumber: [ 892.965984][ T49] usb 1-1: config 0 descriptor?? [ 892.986464][ T49] gspca_main: se401-2.14.0 probing 047d:5003 [ 894.147318][ T49] gspca_se401: read req failed req 0x06 error -19 [ 894.149390][ T49] usb 1-1: USB disconnect, device number 109 [ 894.534200][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.624251][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.645862][ T1104] bond0 (unregistering): Released all slaves [ 894.707148][T13397] bond0: option all_slaves_active: invalid value (99) [ 895.183715][ T1104] hsr_slave_0: left promiscuous mode [ 895.223832][ T1104] hsr_slave_1: left promiscuous mode [ 895.224892][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.224917][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.227328][T13414] Bluetooth: MGMT ver 1.23 [ 895.275755][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.275780][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.400730][ T1104] veth1_macvtap: left promiscuous mode [ 895.400789][ T1104] veth0_macvtap: left promiscuous mode [ 895.400975][ T1104] veth1_vlan: left promiscuous mode [ 895.401068][ T1104] veth0_vlan: left promiscuous mode [ 895.504302][T13420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2052'. [ 897.696595][T13437] netlink: 'syz.6.2059': attribute type 1 has an invalid length. [ 897.696623][T13437] netlink: 'syz.6.2059': attribute type 2 has an invalid length. [ 898.015860][T13442] trusted_key: encrypted_key: insufficient parameters specified [ 899.169668][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 899.434997][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 900.955105][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2063'. [ 901.859704][T13441] team0: Device gtp0 is of different type [ 902.015062][T13454] syz_tun: entered allmulticast mode [ 902.021259][T13455] dvmrp8: entered allmulticast mode [ 902.021425][T13456] dvmrp8: left allmulticast mode [ 902.629300][T13452] syz_tun: left allmulticast mode [ 902.848798][T13471] FAULT_INJECTION: forcing a failure. [ 902.848798][T13471] name failslab, interval 1, probability 0, space 0, times 0 [ 902.848926][T13471] CPU: 0 UID: 0 PID: 13471 Comm: syz.7.2069 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 902.848954][T13471] Tainted: [L]=SOFTLOCKUP [ 902.848961][T13471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 902.848968][T13471] Call Trace: [ 902.848973][T13471] [ 902.848978][T13471] dump_stack_lvl+0xe8/0x150 [ 902.848998][T13471] should_fail_ex+0x46b/0x600 [ 902.849013][T13471] should_failslab+0xa8/0x100 [ 902.849030][T13471] __kmalloc_cache_noprof+0x83/0x6b0 [ 902.849046][T13471] ? file_f_owner_allocate+0x83/0x170 [ 902.849066][T13471] file_f_owner_allocate+0x83/0x170 [ 902.849078][T13471] generic_setlease+0x4d0/0xee0 [ 902.849099][T13471] ? __pfx_generic_setlease+0x10/0x10 [ 902.849115][T13471] ? vfs_setlease+0x284/0x2e0 [ 902.849132][T13471] do_fcntl_add_lease+0x360/0x480 [ 902.849148][T13471] ? __pfx_do_fcntl_add_lease+0x10/0x10 [ 902.849164][T13471] ? fcntl_setlease+0xe9/0x180 [ 902.849180][T13471] fcntl_setlease+0x126/0x180 [ 902.849193][T13471] ? rcu_is_watching+0x15/0xb0 [ 902.849209][T13471] ? __pfx_fcntl_setlease+0x10/0x10 [ 902.849227][T13471] do_fcntl+0x8d6/0x19e0 [ 902.849240][T13471] ? irqentry_exit+0x59c/0x620 [ 902.849254][T13471] ? lockdep_hardirqs_on+0x7a/0x110 [ 902.849268][T13471] ? __pfx_do_fcntl+0x10/0x10 [ 902.849289][T13471] ? __sanitizer_cov_trace_pc+0x28/0x80 [ 902.849306][T13471] __se_sys_fcntl+0xcb/0x160 [ 902.849319][T13471] do_syscall_64+0xe2/0xf80 [ 902.849334][T13471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.849344][T13471] ? clear_bhb_loop+0x60/0xb0 [ 902.849357][T13471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.849367][T13471] RIP: 0033:0x7f36dfd3aeb9 [ 902.849378][T13471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.849387][T13471] RSP: 002b:00007f36ddf6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 902.849400][T13471] RAX: ffffffffffffffda RBX: 00007f36dffb6090 RCX: 00007f36dfd3aeb9 [ 902.849407][T13471] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000004 [ 902.849414][T13471] RBP: 00007f36ddf6d090 R08: 0000000000000000 R09: 0000000000000000 [ 902.849420][T13471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.849426][T13471] R13: 00007f36dffb6128 R14: 00007f36dffb6090 R15: 00007ffeddd65c68 [ 902.849442][T13471] [ 905.437109][T13096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 905.583050][T13096] 8021q: adding VLAN 0 to HW filter on device team0 [ 905.646625][ T9965] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.646723][ T9965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 905.648250][ T9965] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.648318][ T9965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.504324][T13521] FAULT_INJECTION: forcing a failure. [ 906.504324][T13521] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 906.504360][T13521] CPU: 0 UID: 0 PID: 13521 Comm: syz.0.2080 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 906.504384][T13521] Tainted: [L]=SOFTLOCKUP [ 906.504399][T13521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 906.504410][T13521] Call Trace: [ 906.504418][T13521] [ 906.504427][T13521] dump_stack_lvl+0xe8/0x150 [ 906.504456][T13521] should_fail_ex+0x46b/0x600 [ 906.504481][T13521] prepare_alloc_pages+0x22a/0x6b0 [ 906.504514][T13521] __alloc_frozen_pages_noprof+0x12f/0x380 [ 906.504537][T13521] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 906.504560][T13521] ? __pfx_policy_nodemask+0x10/0x10 [ 906.504588][T13521] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 906.504611][T13521] ? lockdep_hardirqs_on+0x7a/0x110 [ 906.504637][T13521] alloc_pages_mpol+0xd1/0x380 [ 906.504665][T13521] alloc_pages_noprof+0xce/0x1e0 [ 906.504692][T13521] get_free_pages_noprof+0xf/0x80 [ 906.504710][T13521] __kasan_populate_vmalloc+0x38/0x1d0 [ 906.504733][T13521] ? rt_spin_unlock+0x160/0x200 [ 906.504755][T13521] alloc_vmap_area+0xdbc/0x14a0 [ 906.504794][T13521] ? __pfx_alloc_vmap_area+0x10/0x10 [ 906.504819][T13521] ? __kmalloc_cache_node_noprof+0x296/0x6e0 [ 906.504844][T13521] ? __get_vm_area_node+0x171/0x350 [ 906.504865][T13521] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 906.504891][T13521] __get_vm_area_node+0x226/0x350 [ 906.504919][T13521] __vmalloc_node_range_noprof+0x372/0x1730 [ 906.504943][T13521] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 906.504989][T13521] ? do_sys_openat2+0x168/0x220 [ 906.505012][T13521] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 906.505042][T13521] ? __lock_acquire+0x6b5/0x2cf0 [ 906.505067][T13521] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 906.505089][T13521] __vmalloc_noprof+0xd2/0x120 [ 906.505111][T13521] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 906.505138][T13521] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 906.505166][T13521] bpf_prog_alloc+0x3c/0x1a0 [ 906.505190][T13521] bpf_prog_load+0x7ba/0x1ae0 [ 906.505226][T13521] ? __pfx_bpf_prog_load+0x10/0x10 [ 906.505247][T13521] ? __might_fault+0xaf/0x130 [ 906.505284][T13521] ? bpf_lsm_bpf+0x9/0x20 [ 906.505301][T13521] ? security_bpf+0x7e/0x2d0 [ 906.505327][T13521] __sys_bpf+0x570/0x920 [ 906.505350][T13521] ? __pfx___sys_bpf+0x10/0x10 [ 906.505370][T13521] ? rt_mutex_slowunlock+0x1cb/0x300 [ 906.505408][T13521] ? ksys_write+0x248/0x270 [ 906.505432][T13521] ? __pfx_ksys_write+0x10/0x10 [ 906.505459][T13521] __x64_sys_bpf+0x7c/0x90 [ 906.505480][T13521] do_syscall_64+0xe2/0xf80 [ 906.505502][T13521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.505521][T13521] ? trace_irq_disable+0x37/0x100 [ 906.505541][T13521] ? clear_bhb_loop+0x60/0xb0 [ 906.505564][T13521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.505582][T13521] RIP: 0033:0x7f7e6054aeb9 [ 906.505598][T13521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.505615][T13521] RSP: 002b:00007f7e5e79e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 906.505635][T13521] RAX: ffffffffffffffda RBX: 00007f7e607c5fa0 RCX: 00007f7e6054aeb9 [ 906.505649][T13521] RDX: 0000000000000090 RSI: 0000200000000880 RDI: 0000000000000005 [ 906.505661][T13521] RBP: 00007f7e5e79e090 R08: 0000000000000000 R09: 0000000000000000 [ 906.505674][T13521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.505685][T13521] R13: 00007f7e607c6038 R14: 00007f7e607c5fa0 R15: 00007ffc3f3ef338 [ 906.505713][T13521] [ 906.505809][T13521] syz.0.2080: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 906.505884][T13521] CPU: 0 UID: 0 PID: 13521 Comm: syz.0.2080 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 906.505909][T13521] Tainted: [L]=SOFTLOCKUP [ 906.505916][T13521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 906.505927][T13521] Call Trace: [ 906.505934][T13521] [ 906.505942][T13521] dump_stack_lvl+0xe8/0x150 [ 906.505967][T13521] warn_alloc+0x263/0x3e0 [ 906.505994][T13521] ? kasan_quarantine_put+0xbb/0x1f0 [ 906.506019][T13521] ? __pfx_warn_alloc+0x10/0x10 [ 906.506044][T13521] ? __get_vm_area_node+0x23f/0x350 [ 906.506065][T13521] ? __get_vm_area_node+0x171/0x350 [ 906.506088][T13521] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 906.506114][T13521] ? __get_vm_area_node+0x23f/0x350 [ 906.506142][T13521] __vmalloc_node_range_noprof+0x397/0x1730 [ 906.506189][T13521] ? do_sys_openat2+0x168/0x220 [ 906.506212][T13521] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 906.506241][T13521] ? __lock_acquire+0x6b5/0x2cf0 [ 906.506266][T13521] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 906.506289][T13521] __vmalloc_noprof+0xd2/0x120 [ 906.506312][T13521] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 906.506338][T13521] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 906.506366][T13521] bpf_prog_alloc+0x3c/0x1a0 [ 906.506398][T13521] bpf_prog_load+0x7ba/0x1ae0 [ 906.506437][T13521] ? __pfx_bpf_prog_load+0x10/0x10 [ 906.506459][T13521] ? __might_fault+0xaf/0x130 [ 906.506500][T13521] ? bpf_lsm_bpf+0x9/0x20 [ 906.506517][T13521] ? security_bpf+0x7e/0x2d0 [ 906.506542][T13521] __sys_bpf+0x570/0x920 [ 906.506567][T13521] ? __pfx___sys_bpf+0x10/0x10 [ 906.506586][T13521] ? rt_mutex_slowunlock+0x1cb/0x300 [ 906.506621][T13521] ? ksys_write+0x248/0x270 [ 906.506645][T13521] ? __pfx_ksys_write+0x10/0x10 [ 906.506674][T13521] __x64_sys_bpf+0x7c/0x90 [ 906.506696][T13521] do_syscall_64+0xe2/0xf80 [ 906.506718][T13521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.506736][T13521] ? trace_irq_disable+0x37/0x100 [ 906.506756][T13521] ? clear_bhb_loop+0x60/0xb0 [ 906.506777][T13521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.506794][T13521] RIP: 0033:0x7f7e6054aeb9 [ 906.506810][T13521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.506827][T13521] RSP: 002b:00007f7e5e79e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 906.506846][T13521] RAX: ffffffffffffffda RBX: 00007f7e607c5fa0 RCX: 00007f7e6054aeb9 [ 906.506860][T13521] RDX: 0000000000000090 RSI: 0000200000000880 RDI: 0000000000000005 [ 906.506873][T13521] RBP: 00007f7e5e79e090 R08: 0000000000000000 R09: 0000000000000000 [ 906.506886][T13521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.506898][T13521] R13: 00007f7e607c6038 R14: 00007f7e607c5fa0 R15: 00007ffc3f3ef338 [ 906.506929][T13521] [ 906.506943][T13521] Mem-Info: [ 906.506952][T13521] active_anon:19 inactive_anon:6950 isolated_anon:0 [ 906.506952][T13521] active_file:18230 inactive_file:1570 isolated_file:0 [ 906.506952][T13521] unevictable:768 dirty:314 writeback:0 [ 906.506952][T13521] slab_reclaimable:13024 slab_unreclaimable:114898 [ 906.506952][T13521] mapped:31319 shmem:1400 pagetables:1539 [ 906.506952][T13521] sec_pagetables:0 bounce:0 [ 906.506952][T13521] kernel_misc_reclaimable:0 [ 906.506952][T13521] free:1333081 free_pcp:3489 free_cma:0 [ 906.507005][T13521] Node 0 active_anon:76kB inactive_anon:27800kB active_file:72908kB inactive_file:6148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125264kB dirty:1256kB writeback:0kB shmem:4064kB kernel_stack:14304kB pagetables:6016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 906.507048][T13521] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 906.507088][T13521] Node 0 DMA free:15332kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 906.507142][T13521] lowmem_reserve[]: 0 2507 2507 2507 2507 [ 906.507173][T13521] Node 0 DMA32 free:1417004kB boost:0kB min:3932kB low:6472kB high:9012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:76kB inactive_anon:27800kB active_file:72908kB inactive_file:6148kB unevictable:1536kB writepending:1256kB zspages:0kB present:3129332kB managed:2567388kB mlocked:0kB bounce:0kB free_pcp:13944kB local_pcp:3768kB free_cma:0kB [ 906.507228][T13521] lowmem_reserve[]: 0 0 0 0 0 [ 906.507259][T13521] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 906.507311][T13521] lowmem_reserve[]: 0 0 0 0 0 [ 906.507339][T13521] Node 1 Normal free:3899988kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 906.507401][T13521] lowmem_reserve[]: 0 0 0 0 0 [ 906.507542][T13521] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15332kB [ 906.507677][T13521] Node 0 DMA32: 4522*4kB (UME) 4058*8kB (UME) 2604*16kB (UME) 724*32kB (UME) 968*64kB (UME) 883*128kB (UME) 659*256kB (UM) 421*512kB (UM) 239*1024kB (UME) 99*2048kB (UME) 72*4096kB (UM) = 1417016kB [ 906.507822][T13521] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 906.507913][T13521] Node 1 Normal: 187*4kB (UME) 61*8kB (UME) 40*16kB (UME) 184*32kB (UE) 98*64kB (UME) 23*128kB (UME) 18*256kB (UME) 7*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3899988kB [ 906.508058][T13521] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 906.508075][T13521] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 906.508092][T13521] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 906.508109][T13521] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 906.508125][T13521] 21197 total pagecache pages [ 906.508138][T13521] 0 pages in swap cache [ 906.508146][T13521] Free swap = 124996kB [ 906.508153][T13521] Total swap = 124996kB [ 906.508161][T13521] 2097051 pages RAM [ 906.508169][T13521] 0 pages HighMem/MovableOnly [ 906.508176][T13521] 423434 pages reserved [ 906.508183][T13521] 0 pages cma reserved [ 906.641160][T13158] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 907.245108][T13158] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 907.340857][T13158] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 907.393294][T13158] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 907.608890][T13096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.961487][T13158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.039205][T13158] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.104228][ T9965] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.104353][ T9965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.192253][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.192340][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.744731][T13096] veth0_vlan: entered promiscuous mode [ 909.810829][T13096] veth1_vlan: entered promiscuous mode [ 909.941058][T13096] veth0_macvtap: entered promiscuous mode [ 909.957224][T13158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.957862][T13096] veth1_macvtap: entered promiscuous mode [ 910.000176][T13096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.031153][T13096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.048076][ T9971] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.050579][ T9971] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.050732][ T9971] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.051004][ T9971] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.423861][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.423880][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.616759][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.616781][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.813761][T13158] veth0_vlan: entered promiscuous mode [ 912.852649][T13158] veth1_vlan: entered promiscuous mode [ 913.579055][T13158] veth0_macvtap: entered promiscuous mode [ 913.658121][T13158] veth1_macvtap: entered promiscuous mode [ 913.786124][T13158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 913.832185][T13158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 913.883453][ T43] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.899484][ T43] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.915970][ T43] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.916264][ T43] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.606489][ T9976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.606509][ T9976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.690681][ T9976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.690702][ T9976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.024325][T13614] netlink: 'syz.6.2103': attribute type 8 has an invalid length. [ 917.911032][T13642] FAULT_INJECTION: forcing a failure. [ 917.911032][T13642] name failslab, interval 1, probability 0, space 0, times 0 [ 917.911066][T13642] CPU: 1 UID: 0 PID: 13642 Comm: syz.9.2109 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 917.911092][T13642] Tainted: [L]=SOFTLOCKUP [ 917.911099][T13642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 917.911110][T13642] Call Trace: [ 917.911118][T13642] [ 917.911136][T13642] dump_stack_lvl+0xe8/0x150 [ 917.911165][T13642] should_fail_ex+0x46b/0x600 [ 917.911191][T13642] should_failslab+0xa8/0x100 [ 917.911219][T13642] __kmalloc_noprof+0xdf/0x7c0 [ 917.911242][T13642] ? tomoyo_encode+0x28b/0x550 [ 917.911265][T13642] tomoyo_encode+0x28b/0x550 [ 917.911287][T13642] tomoyo_realpath_from_path+0x58d/0x5d0 [ 917.911306][T13642] ? tomoyo_domain+0xd8/0x130 [ 917.911329][T13642] ? tomoyo_path_number_perm+0x219/0x630 [ 917.911353][T13642] tomoyo_path_number_perm+0x246/0x630 [ 917.911378][T13642] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 917.911398][T13642] ? __lock_acquire+0x6b5/0x2cf0 [ 917.911421][T13642] ? do_raw_spin_lock+0x12b/0x2f0 [ 917.911477][T13642] ? __fget_files+0x2a/0x420 [ 917.911498][T13642] ? __fget_files+0x2a/0x420 [ 917.911513][T13642] ? __fget_files+0x3a6/0x420 [ 917.911528][T13642] ? __fget_files+0x2a/0x420 [ 917.911547][T13642] security_file_ioctl+0xc3/0x2a0 [ 917.911574][T13642] __se_sys_ioctl+0x47/0x170 [ 917.911597][T13642] do_syscall_64+0xe2/0xf80 [ 917.911619][T13642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.911635][T13642] ? trace_irq_disable+0x37/0x100 [ 917.911656][T13642] ? clear_bhb_loop+0x60/0xb0 [ 917.911678][T13642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.911696][T13642] RIP: 0033:0x7f7482e2aeb9 [ 917.911712][T13642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.911728][T13642] RSP: 002b:00007f7481086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.911749][T13642] RAX: ffffffffffffffda RBX: 00007f74830a5fa0 RCX: 00007f7482e2aeb9 [ 917.911762][T13642] RDX: 0000200000001b00 RSI: 000000004188aec6 RDI: 0000000000000005 [ 917.911775][T13642] RBP: 00007f7481086090 R08: 0000000000000000 R09: 0000000000000000 [ 917.911784][T13642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.911794][T13642] R13: 00007f74830a6038 R14: 00007f74830a5fa0 R15: 00007ffee58fdab8 [ 917.911811][T13642] [ 917.911863][T13642] ERROR: Out of memory at tomoyo_realpath_from_path. [ 918.428006][T13650] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2111'. [ 918.431833][T13650] cgroup: No subsys list or none specified [ 921.941652][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 921.941669][ T37] audit: type=1800 audit(1770558129.816:400): pid=13681 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.8.2124" name="/newroot/5/bus" dev="tmpfs" ino=46 res=0 errno=0 [ 922.127954][T13697] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2127'. [ 922.179488][T13698] FAULT_INJECTION: forcing a failure. [ 922.179488][T13698] name failslab, interval 1, probability 0, space 0, times 0 [ 922.179512][T13698] CPU: 1 UID: 0 PID: 13698 Comm: syz.8.2128 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 922.179527][T13698] Tainted: [L]=SOFTLOCKUP [ 922.179531][T13698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 922.179538][T13698] Call Trace: [ 922.179542][T13698] [ 922.179547][T13698] dump_stack_lvl+0xe8/0x150 [ 922.179567][T13698] should_fail_ex+0x46b/0x600 [ 922.179581][T13698] ? alloc_empty_file+0x55/0x1d0 [ 922.179592][T13698] should_failslab+0xa8/0x100 [ 922.179609][T13698] ? alloc_empty_file+0x55/0x1d0 [ 922.179618][T13698] kmem_cache_alloc_noprof+0x83/0x6a0 [ 922.179636][T13698] alloc_empty_file+0x55/0x1d0 [ 922.179647][T13698] path_openat+0x12a/0x3e70 [ 922.179663][T13698] ? try_to_take_rt_mutex+0x840/0xb00 [ 922.179691][T13698] ? __lock_acquire+0x6b5/0x2cf0 [ 922.179706][T13698] ? __lock_acquire+0x6b5/0x2cf0 [ 922.179717][T13698] ? __pfx_path_openat+0x10/0x10 [ 922.179729][T13698] ? kasan_save_track+0x4f/0x80 [ 922.179742][T13698] ? kasan_save_track+0x3e/0x80 [ 922.179754][T13698] ? __kasan_slab_alloc+0x6c/0x80 [ 922.179767][T13698] ? kmem_cache_alloc_noprof+0x188/0x6a0 [ 922.179780][T13698] ? getname_flags+0xb7/0x540 [ 922.179794][T13698] ? do_sys_openat2+0xca/0x220 [ 922.179809][T13698] ? do_raw_spin_lock+0x12b/0x2f0 [ 922.179830][T13698] do_filp_open+0x22d/0x490 [ 922.179844][T13698] ? __pfx_do_filp_open+0x10/0x10 [ 922.179855][T13698] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 922.179878][T13698] ? alloc_fd+0x64e/0x6c0 [ 922.179899][T13698] do_sys_openat2+0x12f/0x220 [ 922.179911][T13698] ? __pfx_do_sys_openat2+0x10/0x10 [ 922.179921][T13698] ? ksys_write+0x248/0x270 [ 922.179937][T13698] ? __pfx_ksys_write+0x10/0x10 [ 922.179953][T13698] __x64_sys_creat+0x8f/0xc0 [ 922.179965][T13698] do_syscall_64+0xe2/0xf80 [ 922.179979][T13698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.179989][T13698] ? trace_irq_disable+0x37/0x100 [ 922.180002][T13698] ? clear_bhb_loop+0x60/0xb0 [ 922.180015][T13698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.180025][T13698] RIP: 0033:0x7fb579e8aeb9 [ 922.180035][T13698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.180044][T13698] RSP: 002b:00007fb5780c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 922.180055][T13698] RAX: ffffffffffffffda RBX: 00007fb57a106090 RCX: 00007fb579e8aeb9 [ 922.180063][T13698] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000080 [ 922.180070][T13698] RBP: 00007fb5780c5090 R08: 0000000000000000 R09: 0000000000000000 [ 922.180076][T13698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.180082][T13698] R13: 00007fb57a106128 R14: 00007fb57a106090 R15: 00007ffd57381d28 [ 922.180098][T13698] [ 922.860066][T13703] binder: 13702:13703 ioctl c0306201 200000000640 returned -22 [ 926.542554][T13718] fuse: Bad value for 'fd' [ 926.584244][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2134'. [ 927.086596][T13736] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2140'. [ 927.170464][T13739] FAULT_INJECTION: forcing a failure. [ 927.170464][T13739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.170499][T13739] CPU: 0 UID: 0 PID: 13739 Comm: syz.0.2142 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 927.170525][T13739] Tainted: [L]=SOFTLOCKUP [ 927.170532][T13739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 927.170544][T13739] Call Trace: [ 927.170551][T13739] [ 927.170560][T13739] dump_stack_lvl+0xe8/0x150 [ 927.170589][T13739] should_fail_ex+0x46b/0x600 [ 927.170615][T13739] _copy_to_user+0x31/0xb0 [ 927.170641][T13739] vfs_readlink+0x2b8/0x540 [ 927.170668][T13739] ? __pfx_vfs_readlink+0x10/0x10 [ 927.170689][T13739] ? __pfx_page_put_link+0x10/0x10 [ 927.170713][T13739] ? getname_flags+0x1e4/0x540 [ 927.170740][T13739] do_readlinkat+0x222/0x510 [ 927.170761][T13739] ? __pfx_do_readlinkat+0x10/0x10 [ 927.170781][T13739] ? __pfx_ksys_write+0x10/0x10 [ 927.170810][T13739] __x64_sys_readlinkat+0x9a/0xb0 [ 927.170830][T13739] do_syscall_64+0xe2/0xf80 [ 927.170854][T13739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.170871][T13739] ? trace_irq_disable+0x37/0x100 [ 927.170893][T13739] ? clear_bhb_loop+0x60/0xb0 [ 927.170916][T13739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.170934][T13739] RIP: 0033:0x7f7e6054aeb9 [ 927.170951][T13739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.170968][T13739] RSP: 002b:00007f7e5e79e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 927.170988][T13739] RAX: ffffffffffffffda RBX: 00007f7e607c5fa0 RCX: 00007f7e6054aeb9 [ 927.171003][T13739] RDX: 00002000000002c0 RSI: 00002000000001c0 RDI: 0000000000000004 [ 927.171016][T13739] RBP: 00007f7e5e79e090 R08: 0000000000000000 R09: 0000000000000000 [ 927.171029][T13739] R10: 00000000000000cc R11: 0000000000000246 R12: 0000000000000001 [ 927.171042][T13739] R13: 00007f7e607c6038 R14: 00007f7e607c5fa0 R15: 00007ffc3f3ef338 [ 927.171072][T13739] [ 928.341999][T13751] fuse: Unknown parameter 'grou00000000000000000000' [ 931.950043][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.950113][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.258406][T13783] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2154'. [ 932.496812][T13787] tipc: Started in network mode [ 932.496844][T13787] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 932.502424][T13787] tipc: Enabled bearer , priority 10 [ 933.191828][T13799] fuse: Unknown parameter 'grou00000000000000000000' [ 933.283742][T13388] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 934.783315][ T5948] tipc: Node number set to 10070698 [ 934.873637][T13388] usb 10-1: Using ep0 maxpacket: 16 [ 934.880008][T13388] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 934.892650][T13388] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 934.892677][T13388] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.892696][T13388] usb 10-1: Product: syz [ 934.892711][T13388] usb 10-1: Manufacturer: syz [ 934.892724][T13388] usb 10-1: SerialNumber: syz [ 934.965401][T13388] usb 10-1: config 0 descriptor?? [ 935.204789][T13388] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 935.206632][T13388] usb 10-1: Detected FT232R [ 935.218983][T13388] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 936.553293][T13388] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 936.572466][T13388] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 936.594147][T13388] usb 10-1: USB disconnect, device number 2 [ 936.600295][T13388] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 936.600892][T13388] ftdi_sio 10-1:0.0: device disconnected [ 938.143718][ T5948] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 943.586128][ T5948] usb 9-1: unable to get BOS descriptor or descriptor too short [ 943.589359][ T5948] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 943.589482][ T5948] usb 9-1: can't read configurations, error -71 [ 945.096471][T13855] IPv6: NLM_F_REPLACE set, but no existing node found! [ 945.106590][T13854] fuse: Unknown parameter 'group_i00000000000000000000' [ 955.848146][T13921] fuse: Unknown parameter 'group_i00000000000000000000' [ 956.033817][ T5863] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 956.124115][T13927] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2198'. [ 956.195331][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 956.199524][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.224936][ T5863] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 956.224964][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.224984][ T5863] usb 1-1: Product: syz [ 956.224998][ T5863] usb 1-1: Manufacturer: syz [ 956.225013][ T5863] usb 1-1: SerialNumber: syz [ 956.247749][ T5863] usb 1-1: config 0 descriptor?? [ 956.461321][T13919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.461853][T13919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.495872][T13919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.496406][T13919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.688607][ T5863] ath6kl: Failed to submit usb control message: -71 [ 956.688655][ T5863] ath6kl: unable to send the bmi data to the device: -71 [ 956.688670][ T5863] ath6kl: Unable to send get target info: -71 [ 956.689709][ T5863] ath6kl: Failed to init ath6kl core: -71 [ 956.690250][ T5863] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 956.758756][ T5863] usb 1-1: USB disconnect, device number 110 [ 961.083659][ T6875] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 961.211951][T13965] fuse: Unknown parameter 'group_i00000000000000000000' [ 961.235939][ T6875] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 961.235966][ T6875] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 961.237267][ T6875] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 961.237287][ T6875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 961.237299][ T6875] usb 1-1: SerialNumber: syz [ 961.589909][ T6875] usb 1-1: 0:2 : does not exist [ 961.634233][ T6875] usb 1-1: USB disconnect, device number 111 [ 961.898794][T13464] udevd[13464]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 962.054598][T13977] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2210'. [ 962.256815][T13983] FAULT_INJECTION: forcing a failure. [ 962.256815][T13983] name failslab, interval 1, probability 0, space 0, times 0 [ 962.256850][T13983] CPU: 0 UID: 0 PID: 13983 Comm: syz.9.2212 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 962.256877][T13983] Tainted: [L]=SOFTLOCKUP [ 962.256884][T13983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 962.256896][T13983] Call Trace: [ 962.256904][T13983] [ 962.256912][T13983] dump_stack_lvl+0xe8/0x150 [ 962.256943][T13983] should_fail_ex+0x46b/0x600 [ 962.256970][T13983] should_failslab+0xa8/0x100 [ 962.256998][T13983] __kmalloc_noprof+0xdf/0x7c0 [ 962.257022][T13983] ? tomoyo_encode+0x28b/0x550 [ 962.257046][T13983] tomoyo_encode+0x28b/0x550 [ 962.257071][T13983] tomoyo_realpath_from_path+0x58d/0x5d0 [ 962.257101][T13983] ? tomoyo_path_number_perm+0x219/0x630 [ 962.257126][T13983] tomoyo_path_number_perm+0x246/0x630 [ 962.257152][T13983] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 962.257175][T13983] ? __lock_acquire+0x6b5/0x2cf0 [ 962.257199][T13983] ? do_raw_spin_lock+0x12b/0x2f0 [ 962.257256][T13983] ? __fget_files+0x2a/0x420 [ 962.257278][T13983] ? __fget_files+0x2a/0x420 [ 962.257294][T13983] ? __fget_files+0x3a6/0x420 [ 962.257311][T13983] ? __fget_files+0x2a/0x420 [ 962.257332][T13983] security_file_ioctl+0xc3/0x2a0 [ 962.257390][T13983] __se_sys_ioctl+0x47/0x170 [ 962.257415][T13983] do_syscall_64+0xe2/0xf80 [ 962.257439][T13983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.257457][T13983] ? trace_irq_disable+0x37/0x100 [ 962.257479][T13983] ? clear_bhb_loop+0x60/0xb0 [ 962.257502][T13983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.257520][T13983] RIP: 0033:0x7f7482e2aeb9 [ 962.257537][T13983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.257554][T13983] RSP: 002b:00007f7481044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 962.257575][T13983] RAX: ffffffffffffffda RBX: 00007f74830a6180 RCX: 00007f7482e2aeb9 [ 962.257588][T13983] RDX: 00002000000000c0 RSI: 00000000c010640b RDI: 0000000000000007 [ 962.257601][T13983] RBP: 00007f7481044090 R08: 0000000000000000 R09: 0000000000000000 [ 962.257614][T13983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.257625][T13983] R13: 00007f74830a6218 R14: 00007f74830a6180 R15: 00007ffee58fdab8 [ 962.257663][T13983] [ 962.257682][T13983] ERROR: Out of memory at tomoyo_realpath_from_path. [ 964.803715][T10796] Bluetooth: hci1: command 0x0406 tx timeout [ 972.806446][ T49] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 972.956297][ T49] usb 10-1: Using ep0 maxpacket: 8 [ 972.959954][ T49] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.016150][ T49] usb 10-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 973.016183][ T49] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.016218][ T49] usb 10-1: Product: syz [ 973.016233][ T49] usb 10-1: Manufacturer: syz [ 973.016248][ T49] usb 10-1: SerialNumber: syz [ 973.080858][ T49] usb 10-1: config 0 descriptor?? [ 973.463982][T14026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.465651][T14026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.514278][T14026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.529426][T14026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.588159][ T49] ath6kl: Failed to submit usb control message: -71 [ 973.588211][ T49] ath6kl: unable to send the bmi data to the device: -71 [ 973.588227][ T49] ath6kl: Unable to send get target info: -71 [ 973.591507][ T49] ath6kl: Failed to init ath6kl core: -71 [ 973.592036][ T49] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 973.650771][ T49] usb 10-1: USB disconnect, device number 3 [ 975.255598][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2231'. [ 977.246740][T14055] FAULT_INJECTION: forcing a failure. [ 977.246740][T14055] name failslab, interval 1, probability 0, space 0, times 0 [ 977.246763][T14055] CPU: 0 UID: 0 PID: 14055 Comm: syz.0.2233 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 977.246778][T14055] Tainted: [L]=SOFTLOCKUP [ 977.246782][T14055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 977.246788][T14055] Call Trace: [ 977.246793][T14055] [ 977.246798][T14055] dump_stack_lvl+0xe8/0x150 [ 977.246818][T14055] should_fail_ex+0x46b/0x600 [ 977.246833][T14055] ? __alloc_skb+0x1d7/0x390 [ 977.246849][T14055] should_failslab+0xa8/0x100 [ 977.246866][T14055] ? __alloc_skb+0x1d7/0x390 [ 977.246880][T14055] kmem_cache_alloc_node_noprof+0x8a/0x6d0 [ 977.246895][T14055] ? lockdep_hardirqs_on+0x7a/0x110 [ 977.246910][T14055] ? __alloc_skb+0x193/0x390 [ 977.246926][T14055] __alloc_skb+0x1d7/0x390 [ 977.246943][T14055] alloc_skb_with_frags+0xca/0x890 [ 977.246956][T14055] ? __lock_acquire+0x6b5/0x2cf0 [ 977.246973][T14055] sock_alloc_send_pskb+0x884/0x9a0 [ 977.246988][T14055] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 977.247005][T14055] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 977.247019][T14055] ? dev_get_by_index+0x22/0x2e0 [ 977.247042][T14055] ? dev_get_by_index+0x22/0x2e0 [ 977.247057][T14055] packet_sendmsg+0x33e5/0x50f0 [ 977.247068][T14055] ? __lock_acquire+0x6b5/0x2cf0 [ 977.247083][T14055] ? sched_debug_show+0x10/0x30 [ 977.247097][T14055] ? __lock_acquire+0x6b5/0x2cf0 [ 977.247113][T14055] ? unwind_next_frame+0xa5/0x23c0 [ 977.247129][T14055] ? smack_socket_sendmsg+0x1f8/0x590 [ 977.247145][T14055] ? unwind_next_frame+0xa5/0x23c0 [ 977.247158][T14055] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 977.247172][T14055] ? is_bpf_text_address+0x26/0x2b0 [ 977.247190][T14055] ? __lock_acquire+0x6b5/0x2cf0 [ 977.247201][T14055] ? __pfx_packet_sendmsg+0x10/0x10 [ 977.247215][T14055] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 977.247228][T14055] ? do_sys_openat2+0x168/0x220 [ 977.247242][T14055] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 977.247259][T14055] ____sys_sendmsg+0xa4e/0xac0 [ 977.247275][T14055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 977.247291][T14055] ? import_iovec+0x73/0xa0 [ 977.247307][T14055] ___sys_sendmsg+0x2a5/0x360 [ 977.247318][T14055] ? __lock_acquire+0x6b5/0x2cf0 [ 977.247331][T14055] ? __pfx____sys_sendmsg+0x10/0x10 [ 977.247359][T14055] ? __fget_files+0x2a/0x420 [ 977.247369][T14055] ? __fget_files+0x3a6/0x420 [ 977.247383][T14055] __x64_sys_sendmsg+0x1c3/0x2a0 [ 977.247396][T14055] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 977.247412][T14055] ? __pfx_ksys_write+0x10/0x10 [ 977.247431][T14055] do_syscall_64+0xe2/0xf80 [ 977.247448][T14055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.247458][T14055] ? trace_irq_disable+0x37/0x100 [ 977.247473][T14055] ? clear_bhb_loop+0x60/0xb0 [ 977.247486][T14055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.247496][T14055] RIP: 0033:0x7f7e6054aeb9 [ 977.247507][T14055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.247516][T14055] RSP: 002b:00007f7e5e79e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.247528][T14055] RAX: ffffffffffffffda RBX: 00007f7e607c5fa0 RCX: 00007f7e6054aeb9 [ 977.247536][T14055] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 977.247542][T14055] RBP: 00007f7e5e79e090 R08: 0000000000000000 R09: 0000000000000000 [ 977.247549][T14055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.247555][T14055] R13: 00007f7e607c6038 R14: 00007f7e607c5fa0 R15: 00007ffc3f3ef338 [ 977.247571][T14055] [ 979.354179][T14070] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2237'. [ 980.345155][T10673] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 980.371037][T10673] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 980.380947][T10673] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 980.415506][T10673] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 980.423862][T10673] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 982.525538][T10673] Bluetooth: hci5: command tx timeout [ 982.664407][T14090] FAULT_INJECTION: forcing a failure. [ 982.664407][T14090] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 982.664430][T14090] CPU: 1 UID: 0 PID: 14090 Comm: syz.7.2242 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 982.664446][T14090] Tainted: [L]=SOFTLOCKUP [ 982.664450][T14090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 982.664457][T14090] Call Trace: [ 982.664461][T14090] [ 982.664466][T14090] dump_stack_lvl+0xe8/0x150 [ 982.664486][T14090] should_fail_ex+0x46b/0x600 [ 982.664502][T14090] prepare_alloc_pages+0x22a/0x6b0 [ 982.664523][T14090] __alloc_frozen_pages_noprof+0x12f/0x380 [ 982.664536][T14090] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 982.664549][T14090] ? __pfx_policy_nodemask+0x10/0x10 [ 982.664567][T14090] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 982.664584][T14090] alloc_pages_mpol+0xd1/0x380 [ 982.664602][T14090] vma_alloc_folio_noprof+0xea/0x290 [ 982.664620][T14090] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 982.664641][T14090] do_wp_page+0x1228/0x49e0 [ 982.664656][T14090] ? rt_spin_lock+0x1e0/0x400 [ 982.664674][T14090] ? preempt_count_add+0x91/0x190 [ 982.664691][T14090] ? __pfx_do_wp_page+0x10/0x10 [ 982.664703][T14090] ? rt_spin_lock+0x2ce/0x400 [ 982.664715][T14090] ? __pfx_rt_spin_lock+0x10/0x10 [ 982.664729][T14090] ? pte_offset_map_rw_nolock+0xea/0x160 [ 982.664745][T14090] handle_mm_fault+0x9f5/0x13c0 [ 982.664763][T14090] ? handle_mm_fault+0xe7/0x13c0 [ 982.664779][T14090] ? __pfx_handle_mm_fault+0x10/0x10 [ 982.664794][T14090] ? follow_page_pte+0xb13/0x13c0 [ 982.664813][T14090] ? __pfx_follow_page_pte+0x10/0x10 [ 982.664834][T14090] __get_user_pages+0x1679/0x2800 [ 982.664865][T14090] __gup_longterm_locked+0xdcf/0x1630 [ 982.664885][T14090] ? sanity_check_pinned_pages+0x1212/0x12d0 [ 982.664904][T14090] gup_fast_fallback+0x1cf1/0x2240 [ 982.664934][T14090] ? __pfx_gup_fast_fallback+0x10/0x10 [ 982.664952][T14090] ? pin_user_pages_fast+0x4d/0xb0 [ 982.664967][T14090] iov_iter_extract_pages+0x37b/0x5f0 [ 982.664986][T14090] extract_iter_to_sg+0xe62/0x2520 [ 982.665005][T14090] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 982.665026][T14090] ? __asan_memset+0x22/0x50 [ 982.665041][T14090] af_alg_get_rsgl+0x436/0x810 [ 982.665065][T14090] skcipher_recvmsg+0x3a3/0x1140 [ 982.665078][T14090] ? __lock_acquire+0x6b5/0x2cf0 [ 982.665097][T14090] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 982.665109][T14090] ? __lock_acquire+0x6b5/0x2cf0 [ 982.665121][T14090] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 982.665136][T14090] ? security_socket_recvmsg+0x7e/0x2c0 [ 982.665150][T14090] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 982.665160][T14090] sock_recvmsg+0x22c/0x270 [ 982.665183][T14090] ____sys_recvmsg+0x1f2/0x4b0 [ 982.665200][T14090] ? __pfx_____sys_recvmsg+0x10/0x10 [ 982.665220][T14090] ? import_iovec+0x73/0xa0 [ 982.665235][T14090] ___sys_recvmsg+0x215/0x590 [ 982.665245][T14090] ? get_pid_task+0x20/0x1f0 [ 982.665261][T14090] ? __pfx____sys_recvmsg+0x10/0x10 [ 982.665275][T14090] ? __fget_files+0x2a/0x420 [ 982.665294][T14090] ? __fget_files+0x3a6/0x420 [ 982.665310][T14090] __x64_sys_recvmsg+0x1c0/0x2a0 [ 982.665323][T14090] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 982.665339][T14090] ? __pfx_ksys_write+0x10/0x10 [ 982.665359][T14090] do_syscall_64+0xe2/0xf80 [ 982.665373][T14090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.665384][T14090] ? trace_irq_disable+0x37/0x100 [ 982.665398][T14090] ? clear_bhb_loop+0x60/0xb0 [ 982.665411][T14090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.665421][T14090] RIP: 0033:0x7f36dfd3aeb9 [ 982.665431][T14090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.665440][T14090] RSP: 002b:00007f36ddf8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 982.665452][T14090] RAX: ffffffffffffffda RBX: 00007f36dffb5fa0 RCX: 00007f36dfd3aeb9 [ 982.665460][T14090] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 982.665467][T14090] RBP: 00007f36ddf8e090 R08: 0000000000000000 R09: 0000000000000000 [ 982.665473][T14090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 982.665479][T14090] R13: 00007f36dffb6038 R14: 00007f36dffb5fa0 R15: 00007ffeddd65c68 [ 982.665496][T14090] [ 984.603766][T10673] Bluetooth: hci5: command tx timeout [ 984.994483][T14106] ptrace attach of "./syz-executor exec"[14107] was attempted by "./syz-executor exec"[14106] [ 985.510775][T14076] chnl_net:caif_netlink_parms(): no params data found [ 986.472028][T14120] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2251'. [ 986.727702][T10673] Bluetooth: hci5: command tx timeout [ 986.850034][T14076] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.850254][T14076] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.850745][T14076] bridge_slave_0: entered allmulticast mode [ 986.853217][T14076] bridge_slave_0: entered promiscuous mode [ 986.869478][T14076] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.869616][T14076] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.870118][T14076] bridge_slave_1: entered allmulticast mode [ 986.872614][T14076] bridge_slave_1: entered promiscuous mode [ 987.063559][T14076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.845270][T14076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.235497][T14076] team0: Port device team_slave_0 added [ 988.238866][T14076] team0: Port device team_slave_1 added [ 988.362216][T14076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.362232][T14076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.362258][T14076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.371473][T14076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.371488][T14076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.371512][T14076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.690550][T14076] hsr_slave_0: entered promiscuous mode [ 988.706338][T14076] hsr_slave_1: entered promiscuous mode [ 988.707263][T14076] debugfs: 'hsr0' already exists in 'hsr' [ 988.707286][T14076] Cannot create hsr debugfs directory [ 988.763642][T10673] Bluetooth: hci5: command tx timeout [ 990.098867][T10673] Bluetooth: hci3: command 0x0406 tx timeout [ 991.708722][T14161] ipip0: entered allmulticast mode [ 992.763788][ T49] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 994.095206][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.100523][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.213628][ T49] usb 9-1: Using ep0 maxpacket: 8 [ 994.216192][ T49] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.219048][ T49] usb 9-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 994.219063][ T49] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.219074][ T49] usb 9-1: Product: syz [ 994.219082][ T49] usb 9-1: Manufacturer: syz [ 994.219090][ T49] usb 9-1: SerialNumber: syz [ 994.223413][ T49] usb 9-1: config 0 descriptor?? [ 994.521907][T14187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.522810][T14187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.549407][T14187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.550210][T14187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.563703][T14076] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.592353][ T49] ath6kl: Failed to submit usb control message: -71 [ 994.592392][ T49] ath6kl: unable to send the bmi data to the device: -71 [ 994.592407][ T49] ath6kl: Unable to send get target info: -71 [ 994.647963][ T49] ath6kl: Failed to init ath6kl core: -71 [ 994.648517][ T49] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 994.659830][ T49] usb 9-1: USB disconnect, device number 4 [ 996.203671][T13098] Bluetooth: hci0: command 0x0406 tx timeout [ 999.564019][ T5856] ------------[ cut here ]------------ [ 999.564034][ T5856] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 999.564055][ T5856] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x3b5/0x5d0, CPU#0: kworker/0:4/5856 [ 999.564099][ T5856] Modules linked in: [ 999.564124][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 999.564149][ T5856] Tainted: [L]=SOFTLOCKUP [ 999.564157][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 999.564168][ T5856] Workqueue: events drm_fb_helper_damage_work [ 999.564194][ T5856] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 999.564217][ T5856] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 0f b0 df fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 999.564234][ T5856] RSP: 0018:ffffc90004fc7860 EFLAGS: 00010246 [ 999.564249][ T5856] RAX: 1ffff11028261200 RBX: ffffffff8f52a070 RCX: 0000000000000000 [ 999.564263][ T5856] RDX: ffffffff8b9eb1e0 RSI: ffffffff8ba06f40 RDI: ffffffff8f52a070 [ 999.564276][ T5856] RBP: ffffc90004fc7948 R08: 0000000000000000 R09: 0000000000000000 [ 999.564288][ T5856] R10: dffffc0000000000 R11: fffffbfff1e8fcaf R12: ffffffff8ba06f40 [ 999.564301][ T5856] R13: ffff888141309000 R14: 1ffff920009f8f10 R15: ffffffff8b9eb1e0 [ 999.564314][ T5856] FS: 0000000000000000(0000) GS:ffff8881265c9000(0000) knlGS:0000000000000000 [ 999.564328][ T5856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 999.564373][ T5856] CR2: 0000200000001000 CR3: 0000000055d26000 CR4: 00000000003526f0 [ 999.564390][ T5856] Call Trace: [ 999.564398][ T5856] [ 999.564411][ T5856] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 999.564433][ T5856] ? rt_spin_unlock+0x14f/0x200 [ 999.564454][ T5856] ? __pfx_autoremove_wake_function+0x10/0x10 [ 999.564476][ T5856] ? rt_spin_unlock+0x160/0x200 [ 999.564498][ T5856] ? drm_vblank_get+0x147/0x260 [ 999.564523][ T5856] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 999.564547][ T5856] drm_fb_helper_damage_work+0x131/0x6f0 [ 999.564575][ T5856] ? process_scheduled_works+0xa0f/0x17a0 [ 999.564597][ T5856] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 999.564624][ T5856] ? process_scheduled_works+0xa0f/0x17a0 [ 999.564640][ T5856] ? process_scheduled_works+0xa0f/0x17a0 [ 999.564658][ T5856] process_scheduled_works+0xaec/0x17a0 [ 999.564704][ T5856] ? __pfx_process_scheduled_works+0x10/0x10 [ 999.564720][ T5856] ? do_raw_spin_lock+0x12b/0x2f0 [ 999.564748][ T5856] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 999.564771][ T5856] ? schedule+0x90/0x360 [ 999.564802][ T5856] worker_thread+0xda6/0x1360 [ 999.564847][ T5856] kthread+0x726/0x8b0 [ 999.564874][ T5856] ? __pfx_worker_thread+0x10/0x10 [ 999.564892][ T5856] ? __pfx_kthread+0x10/0x10 [ 999.564911][ T5856] ? rt_spin_unlock+0x14f/0x200 [ 999.564936][ T5856] ? rt_spin_unlock+0x160/0x200 [ 999.564953][ T5856] ? __pfx_kthread+0x10/0x10 [ 999.564976][ T5856] ret_from_fork+0x51b/0xa40 [ 999.565000][ T5856] ? __pfx_ret_from_fork+0x10/0x10 [ 999.565018][ T5856] ? __switch_to+0xc82/0x1410 [ 999.565047][ T5856] ? __pfx_kthread+0x10/0x10 [ 999.565069][ T5856] ret_from_fork_asm+0x1a/0x30 [ 999.565110][ T5856] [ 999.565128][ T5856] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 999.565144][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 999.565169][ T5856] Tainted: [L]=SOFTLOCKUP [ 999.565177][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 999.565189][ T5856] Workqueue: events drm_fb_helper_damage_work [ 999.565212][ T5856] Call Trace: [ 999.565220][ T5856] [ 999.565229][ T5856] vpanic+0x1e0/0x670 [ 999.565256][ T5856] panic+0xc5/0xd0 [ 999.565278][ T5856] ? __pfx_panic+0x10/0x10 [ 999.565309][ T5856] ? ret_from_fork_asm+0x1a/0x30 [ 999.565339][ T5856] __warn+0x315/0x4a0 [ 999.565367][ T5856] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 999.565393][ T5856] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 999.565417][ T5856] __report_bug+0x29a/0x540 [ 999.565446][ T5856] ? drm_wait_one_vblank+0x3b5/0x5d0 [ 999.565470][ T5856] ? __pfx___report_bug+0x10/0x10 [ 999.565514][ T5856] report_bug_entry+0x19a/0x290 [ 999.565537][ T5856] ? drm_wait_one_vblank+0x5a2/0x5d0 [ 999.565559][ T5856] ? drm_wait_one_vblank+0x5a7/0x5d0 [ 999.565580][ T5856] handle_bug+0xca/0x200 [ 999.565607][ T5856] exc_invalid_op+0x1a/0x50 [ 999.565631][ T5856] asm_exc_invalid_op+0x1a/0x20 [ 999.565649][ T5856] RIP: 0010:drm_wait_one_vblank+0x5a2/0x5d0 [ 999.565672][ T5856] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 0f b0 df fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 e3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 999.565690][ T5856] RSP: 0018:ffffc90004fc7860 EFLAGS: 00010246 [ 999.565706][ T5856] RAX: 1ffff11028261200 RBX: ffffffff8f52a070 RCX: 0000000000000000 [ 999.565721][ T5856] RDX: ffffffff8b9eb1e0 RSI: ffffffff8ba06f40 RDI: ffffffff8f52a070 [ 999.565736][ T5856] RBP: ffffc90004fc7948 R08: 0000000000000000 R09: 0000000000000000 [ 999.565749][ T5856] R10: dffffc0000000000 R11: fffffbfff1e8fcaf R12: ffffffff8ba06f40 [ 999.565763][ T5856] R13: ffff888141309000 R14: 1ffff920009f8f10 R15: ffffffff8b9eb1e0 [ 999.565800][ T5856] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 999.565822][ T5856] ? rt_spin_unlock+0x14f/0x200 [ 999.565841][ T5856] ? __pfx_autoremove_wake_function+0x10/0x10 [ 999.565863][ T5856] ? rt_spin_unlock+0x160/0x200 [ 999.565886][ T5856] ? drm_vblank_get+0x147/0x260 [ 999.565911][ T5856] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 999.565935][ T5856] drm_fb_helper_damage_work+0x131/0x6f0 [ 999.565962][ T5856] ? process_scheduled_works+0xa0f/0x17a0 [ 999.565985][ T5856] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 999.566014][ T5856] ? process_scheduled_works+0xa0f/0x17a0 [ 999.566033][ T5856] ? process_scheduled_works+0xa0f/0x17a0 [ 999.566053][ T5856] process_scheduled_works+0xaec/0x17a0 [ 999.566102][ T5856] ? __pfx_process_scheduled_works+0x10/0x10 [ 999.566119][ T5856] ? do_raw_spin_lock+0x12b/0x2f0 [ 999.566147][ T5856] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 999.566170][ T5856] ? schedule+0x90/0x360 [ 999.566200][ T5856] worker_thread+0xda6/0x1360 [ 999.566246][ T5856] kthread+0x726/0x8b0 [ 999.566270][ T5856] ? __pfx_worker_thread+0x10/0x10 [ 999.566288][ T5856] ? __pfx_kthread+0x10/0x10 [ 999.566306][ T5856] ? rt_spin_unlock+0x14f/0x200 [ 999.566330][ T5856] ? rt_spin_unlock+0x160/0x200 [ 999.566353][ T5856] ? __pfx_kthread+0x10/0x10 [ 999.566375][ T5856] ret_from_fork+0x51b/0xa40 [ 999.566399][ T5856] ? __pfx_ret_from_fork+0x10/0x10 [ 999.566416][ T5856] ? __switch_to+0xc82/0x1410 [ 999.566445][ T5856] ? __pfx_kthread+0x10/0x10 [ 999.566468][ T5856] ret_from_fork_asm+0x1a/0x30 [ 999.566509][ T5856] [ 999.566837][ T5856] Kernel Offset: disabled