last executing test programs: 15m14.928984197s ago: executing program 32 (id=315): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r2 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) read(r2, &(0x7f00000000c0)=""/173, 0xad) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) setresuid(0x0, 0xee00, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001300)="5824ba610000", 0x0, 0x100004, 0x0, 0xfeffffff, 0x0}) close(r2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) r4 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000930000/0x3000)=nil, 0x3000, &(0x7f0000000440)=""/4096) 14m18.117822342s ago: executing program 33 (id=398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) 11m48.339846529s ago: executing program 34 (id=645): syz_open_dev$vcsa(&(0x7f0000000580), 0x8, 0x40200) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000340)={0x28, 0x4, 0x0, 0x0, &(0x7f00000002c0)="bf", 0x1, 0x8}) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x55430000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x4000080}, 0x850) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000007c0)) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000280)={0x0, 0x1, 0x7, 0x10}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 11m10.487499259s ago: executing program 0 (id=751): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) syz_emit_ethernet(0x32, 0x0, 0x0) 11m8.602919282s ago: executing program 0 (id=766): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x2}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 11m8.157600673s ago: executing program 0 (id=770): fanotify_init(0x200, 0x0) memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xe6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJ\x81\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x931\xb88\x91j\xf6g\x9a\xd8\xee\xeb\x96Hc\xa5\x95\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\xff\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) 11m7.866804074s ago: executing program 0 (id=774): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x10401, 0x0) dup(0xffffffffffffffff) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 11m7.558763612s ago: executing program 0 (id=777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x80000006, 0x0, 0x4, 0x5}]}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000001d40)={@void, @val={0x0, 0x0, 0x4, 0x100, 0x19, 0xc}, @ipv6=@gre_packet={0x3, 0x6, "1e21e4", 0xfb8, 0x2f, 0x0, @loopback, @empty, {[@srh={0x62, 0x0, 0x4, 0x0, 0xf}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "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"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "3c0b90eb14a5daabb329cc7ae0c840ae6df3344023de3b68744de01854d0178fa985b8be3f89980051d5db5fdf071f90a3cef8e806f2d67ca3643211b1777c1dca3cf181a77d2598bb22663af53b2aa40d530e285c9b56d3bed2d4f685c301e30c2cb02cddc85b50e2fec4e6a687ad6530b4199c3a6047ee9784bada4fcddddd76af9e7bb89cca03c3cf28798728bb767cbdd99139add9d0777109f041c37497d4af5c6c610a6895b54d9662f269c903fb2ae9639731301f12f588d6a6f3675b96601b6b0e67dcab65051f68d1062187c2704634c588ebe3ef6ab70ea4b7a2c1cf51ab04d32b4920cfe42790ea11a6"}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x80, 0x0, 0x1, 0x3, 0x1, 0x2}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x2, {{0x7, 0x2, 0x3, 0x3, 0x0, 0x0, 0x1, 0x40}, 0x2, {0x1000, 0x4, 0x0, 0x8, 0x1, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x1, "9b31834023417a2c88fd251cf1044630f3e6d8d98fb651484be9f1c07253cd5a9776642d0dec2d69f2ecd0d04668e94ba495e1e1dea3fd292094db1113d35eef03f67a0d3ecd24f03dcfd08f3eb9de64b3bbdf677752142c808013aac444a3f1841e5746a791bf1037c5cf3699ccf01cef31886bf585ada25b99a03ee2dcc6e344f02b0c621605293a68535127920b75f2dd871fad8c7cb7eae943dd78238634b17ab73410e811"}}}}}, 0xfea) 11m6.315023432s ago: executing program 0 (id=782): syz_emit_ethernet(0x82, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "078ffd", 0x4c, 0x2f, 0x1, @local, @mcast2, {[@dstopts={0x6c}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x4, {{0xe, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x4, 0x38}, 0x2, {0x101, 0x64, 0x0, 0x10, 0x1, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 11m5.908207296s ago: executing program 35 (id=782): syz_emit_ethernet(0x82, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "078ffd", 0x4c, 0x2f, 0x1, @local, @mcast2, {[@dstopts={0x6c}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x4, {{0xe, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x4, 0x38}, 0x2, {0x101, 0x64, 0x0, 0x10, 0x1, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 11m1.304102434s ago: executing program 5 (id=796): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) get_robust_list(0x0, 0x0, 0x0) 11m0.986795035s ago: executing program 5 (id=798): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 11m0.834612509s ago: executing program 5 (id=800): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r0, &(0x7f0000000c00)=[{&(0x7f0000000540)="84", 0x1}], 0x1) 11m0.740714906s ago: executing program 6 (id=801): io_setup(0x6, &(0x7f00000002c0)=0x0) io_destroy(r0) io_destroy(r0) 11m0.41220006s ago: executing program 5 (id=802): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r2, 0xe}, &(0x7f0000000340)=0xc) 11m0.226818882s ago: executing program 5 (id=803): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) write(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2032) 11m0.174587608s ago: executing program 6 (id=804): setregid(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 10m59.082902595s ago: executing program 5 (id=806): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x0, r3}) 10m58.569954076s ago: executing program 6 (id=808): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x14) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x28}}, 0x802) 10m57.929610773s ago: executing program 6 (id=811): process_vm_writev(0x0, &(0x7f0000000040)=[{&(0x7f00008f9f09)=""/231, 0xd8}], 0x1, &(0x7f0000000480)=[{&(0x7f0000217f28)=""/220, 0xe7}, {&(0x7f0000000240)=""/242, 0xf2}, {&(0x7f0000000080)=""/75, 0x3d}, {&(0x7f0000000380)=""/193, 0xffffffffffffffc5}], 0x1000000000000217, 0x0) 10m57.755536175s ago: executing program 6 (id=812): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) 10m57.634449815s ago: executing program 6 (id=813): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setuid(0xee01) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) 10m43.596271811s ago: executing program 36 (id=806): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x0, r3}) 10m42.048375293s ago: executing program 37 (id=813): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setuid(0xee01) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) 8m15.994032972s ago: executing program 7 (id=1005): r0 = landlock_create_ruleset(&(0x7f0000000280)={0x4109, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xf) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) 8m14.202665913s ago: executing program 7 (id=1009): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000200)={0x49db, 0x35c, 0x7, 0x201, 0x12, "0000000000e4ec00"}) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x6c4, 0x1, 0x1, 0x10, "1b090000401400000a94c9355ab28b8725fd00"}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0xe356, 0x6, 0xf0, 0x80093b, 0x2, "51c00f000000006acd97486269bd9200", 0x2, 0x3}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 8m13.818383175s ago: executing program 7 (id=1011): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000001d83000744d63c000100000008"], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502"], 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}], 0x1, &(0x7f0000000280)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x0, 0x3, 0x1}}], 0x18, 0x2001c001}], 0x1, 0x4044040) syz_io_uring_setup(0x1a1d, &(0x7f0000000180)={0x0, 0x755e, 0x13080, 0x3, 0x2b5, 0x0, 0x0}, &(0x7f0000000080), &(0x7f0000000040)) rt_sigqueueinfo(0x0, 0x6, &(0x7f0000000000)={0x35, 0x3a6b6cb5, 0x9}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8m11.3932594s ago: executing program 7 (id=1015): syz_emit_ethernet(0x56, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000200000fe80000000000000000000000000002cfe8000000000000000000000000000bb2f020000000000000001000502001807080000000000098900000000000000000db76fa41bd0a0f92aeb5500769afdb97d79430a7bde"], 0x0) 8m10.488226024s ago: executing program 7 (id=1018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000001) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) sched_setscheduler(r0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) socket$nl_generic(0x10, 0x3, 0x10) 8m8.810918998s ago: executing program 7 (id=1020): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f0000000240)={0x20, 0x2, 0xf8, {0xf8, 0x3, "23c4a9872f9dd800848a6e3fb5a3d3dc68151f59794bf1f05f2d080a506cba25c5b18ec084f18d37265f2f25266e3d736623353b8993ed4aa221f3025701426c716de8002f7df8eb134176250444948e23bdf355078075a471ab48e96a566ee1325da5b5f02a774138f56969dbca34e18a29c0100fbda914f1f83fd68cd99e66a5f908ac6d5653e9c30bd88c9fd7497ae3ecb7d8a18e8ccb43deef45d789188926d9649daca5e6847c08aac890f2134241e8df6b7f934343b56fb4c830ac7518a5c6383460f640d28180fdebcfae18eea149f72cfab6d0b47d3311cd0e51d7e1f6432dd54ff16177fe8edb71c168375bee3fe237fe67"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000400)={0x40, 0x0, 0x31, "62e3d8dda15a5ad16b3f413e04dc1408b5df68f1b343a0dbdca2a074186051f1600dfdadd9ae8b668e8215b328bcaf136d"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2}}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 7m53.625290709s ago: executing program 38 (id=1020): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f0000000240)={0x20, 0x2, 0xf8, {0xf8, 0x3, "23c4a9872f9dd800848a6e3fb5a3d3dc68151f59794bf1f05f2d080a506cba25c5b18ec084f18d37265f2f25266e3d736623353b8993ed4aa221f3025701426c716de8002f7df8eb134176250444948e23bdf355078075a471ab48e96a566ee1325da5b5f02a774138f56969dbca34e18a29c0100fbda914f1f83fd68cd99e66a5f908ac6d5653e9c30bd88c9fd7497ae3ecb7d8a18e8ccb43deef45d789188926d9649daca5e6847c08aac890f2134241e8df6b7f934343b56fb4c830ac7518a5c6383460f640d28180fdebcfae18eea149f72cfab6d0b47d3311cd0e51d7e1f6432dd54ff16177fe8edb71c168375bee3fe237fe67"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000400)={0x40, 0x0, 0x31, "62e3d8dda15a5ad16b3f413e04dc1408b5df68f1b343a0dbdca2a074186051f1600dfdadd9ae8b668e8215b328bcaf136d"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2}}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 7m27.473018126s ago: executing program 8 (id=1088): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0), 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 7m25.02865736s ago: executing program 8 (id=1092): mlockall(0x3) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x3, 0x2) 7m17.730079586s ago: executing program 8 (id=1100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m16.170053743s ago: executing program 8 (id=1103): syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905", @ANYRES16], 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_create_resource$binfmt(0x0) creat(&(0x7f0000000240)='./file0\x00', 0x160) r4 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) creat(&(0x7f0000000240)='./file0\x00', 0x160) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r5, &(0x7f00000001c0)=""/178, 0xb2) 7m10.932039818s ago: executing program 8 (id=1109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) 7m8.917749666s ago: executing program 8 (id=1112): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m51.435594375s ago: executing program 39 (id=1112): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.272519862s ago: executing program 2 (id=2001): ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x6a) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x30000005, 0x2}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x78}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r4 = socket(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r5, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2000cd05, 0x4d}}}}}, 0x20}}, 0x4008814) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="c60cf7", 0x3}, {&(0x7f0000000180)="adaa819840e3b8833b0250b7ecde9e4eb10b7e348a40a1640c3f5f80f9e9c27a4724ebf8061df743a28f26b68188ea37e49ad77074036f7fb04a8c362681d9e3fb3e52b0ae55be8a41a16b4b9bfedf7548e9b17a9b2050753970f7c31ff1f22b7da6b2201a97ef506820356bc9407dc40c", 0x71}], 0x2) 11.791434367s ago: executing program 2 (id=2006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x183c81) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r7, 0x24, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="66a864", @ANYRESHEX=r0, @ANYBLOB="d6b9ed7ed7c0468500381e494e933cb733c0ab6d6d4b7b71219f6efc57d4d24b7b5d1a2226c8576852", @ANYRESDEC=r4, @ANYBLOB="2c6731a175705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) read$FUSE(r4, &(0x7f0000004280)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) close(r4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'pimreg1\x00', @random="b9ca1e94b10a"}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r8) r9 = socket$unix(0x1, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56041, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r11, {0x8, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x3, 0x5, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x8, 0x3ff}}]}}}]}, 0xfffffffffffffe38}, 0x1, 0x0, 0x0, 0x240080d1}, 0x4000000) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) 7.804624017s ago: executing program 2 (id=2016): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x30, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x2a4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fsopen(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="120100045b2a7f2058046e7064350000000109021a000100000000"], 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0xe000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000005400e50129bd7000fdffffff07000000", @ANYRES8=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="000101000000000000000000000000000000000086dd000055c4091e1f3176e1a0050529c5ee8ac7223e31cf6b9256a21cd2b382f1700f0b0dd86190996ff4f4b74416864fcebae6c90cd6973c38ccdaf6f2e10db644dc03abe5e1e918176edc369177fa99b8cee879a63ba97b62299413b3773298871225246b75427cd3859bac288e00679c77379a7bef9de377db8b08c6281780c138671919263d15767547b7918861a788059360e2ca97483db5d38264576ae6c399bf367448ed3bcb83814b"], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3000000010000108000000000000200000000000", @ANYRES32=0x0, @ANYRESHEX=r8, @ANYRESOCT=r1, @ANYBLOB="08001b0000000000de7b7f520cae4ad960e91616c030d4fb03ccbae0c8e990b11b968bad9574c3c8527efc7560459840f4d491c01be81e430c686c336a4883794ffed273cf4ee196afcee2f29c33b92acb545426de0e05a499d9df6eef61cc730e9ae9f3d1fabd55b04d0fcc5e99f095750d5aedfa89fa11a85f415651e65c1c5fe05e1862790998431f75f26a4818c387383d6ce90ad49c6ee389aec32b07406b4a269d1635ec24b1642e00"/181, @ANYRESDEC=r5, @ANYRESHEX=r3], 0x30}}, 0x400088c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$IP_SET_OP_VERSION(r9, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) r11 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r11, 0x2270, 0x0) open(&(0x7f0000000080)='./file0\x00', 0xb0000, 0x110) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 6.99157487s ago: executing program 4 (id=2020): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x80, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004780)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000000200)=0x3) (fail_nth: 1) syz_open_dev$MSR(&(0x7f0000000100), 0x1, 0x0) 5.092068258s ago: executing program 1 (id=2021): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}], @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x1ff}]]}}}]}, 0x40}}, 0x0) 4.806325288s ago: executing program 4 (id=2023): syz_emit_ethernet(0x7a, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x84, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x14, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x11, 0x0, @local, @rand_addr, {[@generic={0x88, 0x8, "20e3629c5061"}, @rr={0x7, 0x17, 0xc6, [@local, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x1b, 0x60, [@multicast1, @remote, @private=0xa010100, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c000280080001000100000014000300676566256a"], 0x50}}, 0x2000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) 4.34037677s ago: executing program 4 (id=2025): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x2224c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000fcdbdf253500000008000300", @ANYRES32=r3, @ANYBLOB="1bb023a4137cc7dd7e839c32390000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8080) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r5, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/255, 0xff}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000140)=""/18, 0x12}], 0x3, &(0x7f0000000ac0)=""/34, 0x22}, 0x81}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f00000010c0)=""/133, 0x85}], 0x2}, 0x3}], 0x3, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f00000008c0)=0x1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4006}, 0x20000844) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 4.327037475s ago: executing program 3 (id=2026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef5, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r4}, &(0x7f0000000400), &(0x7f00000004c0)='%pi6 \x00'}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r13, &(0x7f0000000000), 0x3fffffffffffd86, 0x4000010) ioctl$sock_SIOCINQ(r12, 0x541b, &(0x7f0000000040)) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@newtclass={0xbc, 0x28, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x1, 0xfff3}, {0x3, 0xd}, {0xffff, 0x10}}, [@tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_qfq={{0x8}, {0x44, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3e}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xfffffff7}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xfffffffb}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0xf0, 0x4}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.23632871s ago: executing program 1 (id=2027): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 4.231115247s ago: executing program 9 (id=2028): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) shutdown(r0, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 3.379595876s ago: executing program 9 (id=2029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010025bd7000fedbdf2500000000", @ANYRESOCT=0x0, @ANYBLOB="10080400000000001c002b800800030011000000080001"], 0x3c}}, 0x24000040) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000080), 0x12) r11 = fsmount(r1, 0x0, 0x0) r12 = openat$cgroup_int(r11, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendfile(r6, r12, 0x0, 0xa0df) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000c80)=@nat={'nat\x00', 0x1b, 0x5, 0x560, 0x0, 0x3a0, 0xffffffff, 0x3a0, 0x100, 0x4c8, 0x4c8, 0xffffffff, 0x4c8, 0x4c8, 0x5, &(0x7f0000000300), {[{{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x200, 0x220, 0x1}}, @common=@unspec=@connlabel={{0x28}, {0xc, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2, @private=0xa010102, @remote, @port=0x4e21, @icmp_id=0x66}}}}, {{@ip={@private=0xa010102, @rand_addr=0x64010100, 0x0, 0xffffff00, 'veth1_to_bridge\x00', 'lo\x00', {}, {0xff}, 0x2, 0x1, 0x7}, 0x0, 0x180, 0x1b8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x2, 0x1}}, @common=@unspec=@string={{0xc0}, {0x2, 0x2, 'bm\x00', "242bdb4034fbec78fab1f2f7a681aa58625ce7ed2c4e29f0820c6e78360c6c6422a53ec8a6e03815eac0d268fd8ec8a400a7c33c1b1d509563908baeb970ad88cbb2d42f1ab7dfb3d2c144f5ea77e3d60b0da3915c2c1fa526d1e31becd3b0d271fdffc053362fad8737dc0f0948c7f4905c93822bc526b6ecfcf623d61d16c6", 0x33, 0x2, {0xf}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @loopback, @private=0xa010102, @gre_key=0x1, @icmp_id=0x67}}}}, {{@ip={@remote, @loopback, 0xff000000, 0x0, 'pim6reg\x00', 'hsr0\x00', {0xff}, {0xff}, 0x1, 0x0, 0x14}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x7, 0x0, 0x7, 0x5, 0x0, 0x2], 0x1, 0x1}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @loopback, @empty, @gre_key=0x2, @port=0x4e23}}}}, {{@ip={@private=0xa010102, @remote, 0xff000000, 0xff000000, 'wg2\x00', 'ip6gretap0\x00', {}, {}, 0xff, 0x2, 0x66}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x6, 0x1, 0x2}}, @common=@addrtype={{0x30}, {0x100, 0x22, 0x0, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @multicast1, @port=0x4e24, @gre_key=0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x4048084}, 0x8008) 3.173815258s ago: executing program 3 (id=2030): socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) unshare(0x400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@fallback=r0, r0, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4) 2.946750721s ago: executing program 1 (id=2031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x3c, r2, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x40}, 0x8000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e657400"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 2.940036269s ago: executing program 3 (id=2032): setpgid(0x0, 0x0) setreuid(0x0, 0xee00) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b48, &(0x7f0000000040)) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0) statx(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x4000, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, r2, &(0x7f0000000700)={0x6, 0x8e14, 0x0, 0x2}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0xd864, 0x40001) syz_usb_control_io(r1, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000c40)={0x20, 0x9, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000200)={0x14, &(0x7f0000000180)={0x40, 0x1, 0xe, {0xe, 0x24, "bee81292ab3992c07bdc166b"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}}, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x40, 0x8, 0x4b, "ae1d031ffb6b7e31bb2202c6e2065b3284426d0b627dabba29cb9f20ccccb045d9636ab3eb1628acc863f444fb10611b22202cc993bbb1597f50cf5a349df9461d6b321a20b87da493bd48"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000380)={0x20, 0x81, 0x1, "e2"}, &(0x7f00000003c0)={0x20, 0x82, 0x3, "5403c6"}, &(0x7f0000000400)={0x20, 0x83, 0x2, "acce"}, &(0x7f00000004c0)=ANY=[@ANYBLOB="2000000080008a"], &(0x7f0000000500)={0x20, 0x85, 0x3, "6312fe"}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.865366749s ago: executing program 4 (id=2033): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x3, @vbi={0xfdc8fa0d, 0x1c, 0x90, 0x41416770, [0x2, 0x3], [0x7fffffff], 0x3}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x60}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x31, 0xde, 0xf8, 0x10, 0x3f0, 0x307, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x78, 0x2f, 0x90, 0x2, "", [{{0x9, 0x4, 0x7d, 0x8, 0x2, 0x4a, 0x6d, 0x55, 0x7, [], [{{0x9, 0x5, 0x3, 0x2, 0x8936cfdb1cf781b6, 0xb1, 0x3, 0x6}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0x6, 0x9, 0xab}}]}}]}}]}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r5 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r5}, &(0x7f00000000c0)=0x0) timer_settime(r6, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_gettime(r6, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000040), 0x4) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f00000002c0)={0x40000002}) 2.674921026s ago: executing program 2 (id=2034): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2.513846275s ago: executing program 2 (id=2035): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x88001, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0xf135, 0x4, 0x209, 0x10, 0x5, 0x5, 0x0, 0x8000, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={r3, 0xfffffffffffffd6a}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8001, 0x81}, 0x90) open_by_handle_at(r2, &(0x7f00000001c0)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1ff, 0x70000000, 0x6e, 0xf, 0x7}}, 0x200103) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dbdf2500006a25007bc15ce26a58790000001000"/30, @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r6, @ANYBLOB="0a000100aaaaaaaaaa160000"], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2.487135076s ago: executing program 1 (id=2036): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) 2.422071088s ago: executing program 9 (id=2037): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$802154_dgram(r0, &(0x7f00000010c0)={&(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000001080)={&(0x7f0000000080)="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", 0x1000}, 0x1, 0x0, 0x0, 0x4800}, 0xf29953b4cff23148) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001100)={0x0, r0}, 0x8) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001180)={0x8, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000011c0)=r5, 0x4) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000001200)) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x10, 0x25, &(0x7f0000001240)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @ldst={0x1, 0x1, 0x0, 0x3, 0x5, 0x20, 0xfffffffffffffffc}, @map_fd={0x18, 0xfef95023cc5952ec, 0x1, 0x0, r0}, @jmp={0x5, 0x1, 0xb, 0x5, 0x3, 0x80, 0x9c37f9daf76f286c}], &(0x7f0000001380)='syzkaller\x00', 0x8000, 0x21, &(0x7f00000013c0)=""/33, 0x41100, 0x10, '\x00', 0x0, @fallback=0x30, r0, 0x8, &(0x7f0000001400)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001440)={0x1, 0xf, 0x8b, 0x2}, 0x10, 0x0, r0, 0x0, &(0x7f0000001480)=[r0, r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x8}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001680)={@cgroup=r0, 0x2, 0x1, 0xffff, &(0x7f0000001580)=[0x0], 0x1, 0x0, &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0], 0x0}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000019c0)={r0, 0xe0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000001740)=[0x0], &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb8, &(0x7f00000017c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001800), &(0x7f0000001840), 0x8, 0x81, 0x8, 0x8, &(0x7f0000001880)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000016c0)={@fallback=r2, r0, 0x0, 0x70, r7, @void, @void, @void, @value=r10, r9}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001c80)={'syztnl2\x00', &(0x7f0000001bc0)={'syztnl1\x00', r11, 0x700, 0x8000, 0x90, 0xffff, {{0x1f, 0x4, 0x0, 0x2f, 0x7c, 0x68, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010101, @multicast1, {[@ssrr={0x89, 0x1b, 0xab, [@dev={0xac, 0x14, 0x14, 0x39}, @empty, @broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @rr={0x7, 0xb, 0x38, [@rand_addr=0x64010100, @remote]}, @timestamp_addr={0x44, 0x24, 0xc1, 0x1, 0x7, [{@multicast1, 0x2}, {@loopback, 0x5}, {@local, 0x4}, {@empty, 0xfffffffd}]}, @timestamp_prespec={0x44, 0xc, 0x20, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x537}]}, @timestamp={0x44, 0x10, 0xd5, 0x0, 0x8, [0xc, 0x1000, 0x45]}]}}}}}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e00)={0x6, 0x11, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001ac0)='syzkaller\x00', 0x2, 0x82, &(0x7f0000001b00)=""/130, 0x41100, 0xe, '\x00', r12, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001cc0)={0x3, 0x7, 0x10000}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001d40)=[r13], &(0x7f0000001d80)=[{0x0, 0x5, 0x10, 0x4}, {0x0, 0x4, 0xb, 0x7}, {0x2, 0x4, 0xe, 0xb}, {0x3, 0x1, 0x8, 0xc}, {0x0, 0x3, 0x2, 0x7}, {0x0, 0x1, 0x5, 0x5}], 0x10, 0x9}, 0x94) lstat(&(0x7f0000002000)='./file0\x00', &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000020c0)={{0x1, 0x1, 0x18, r6, {0xee00, 0xee01}}, './file0\x00'}) (async) r17 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002100), 0x202000, 0x0) r18 = syz_clone(0xa0000000, &(0x7f0000002140)="1b91680bfa6b23cdbe64351d41ef08c29550f16ff6150fab739f4216a4a4e3540f98bf5c286c94eced7c24da408bb85b0a12e5c04aab79a26295b701a948591c2fad4dda5fb3aef2b5ab5b0bfe7d5affd76a78cf56bcf3a14bb37467fcbdad1da9c8e8230b8aecc6e64113d270d362816cccd49f792e62b621b5fbbb6d13005765e9ed3e4062c5e5b4c1e7a44f5e209a738c12d5d100652ddeecf5fe7522277c20965552f08868c5e2c30944e988cdb3e95df6e5bcbf2f1832df3aee6e1b", 0xbe, &(0x7f0000002200), &(0x7f0000002240), &(0x7f0000002280)) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000022c0)={0x4, 0xb, {0xffffffffffffffff}, {0xee01}, 0x7, 0x1}) (async) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r21 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000004640), 0x414100, 0x0) r22 = getpgid(0xffffffffffffffff) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004680)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000004780)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000047c0)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f00000048c0)=0xe8) r25 = getpgrp(0x0) (async) getresuid(&(0x7f0000004900), &(0x7f0000004940)=0x0, &(0x7f0000004980)) (async) r27 = gettid() (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004fc0)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f00000050c0)=0xe8) sendmmsg$unix(r3, &(0x7f000000b580)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001ec0)="c4f42fbde6ee99156d0df00864a323bf519c09a5ddfdf3db4f61d9891077801bbefab1542f6a024269eff03d396ee7a9e071e7e1015659dfbe7dde8a83bf8a92677235f2b3a238fc08bbc2746091bcb8e353e6e44b0c277429d4acf0636ffba49ba2fce96ed2a6ea1510737750f2d65872986990f7af351f9efe508b40b8f4e4f44689292708f2eaac906a7661bef0e1448bc629c53277c268661afce4f21f93ea4cbd970a30d8ecf8ce7471de31f88a3aa506cba53927599c8c5f431d449dbe7d6d0ea90f994fdf5bbd1bd76d987106800b36522f0587cc75d28f48961142d1521233a234e09452e24791d4c1713e5ab6", 0xf1}], 0x1, &(0x7f0000004340)=[@cred={{0x1c, 0x1, 0x2, {0x0, r15, r16}}}, @rights={{0x18, 0x1, 0x1, [r17, r14]}}, @rights={{0x24, 0x1, 0x1, [r8, r3, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}], 0x80, 0x40000}}, {{&(0x7f00000043c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004600)=[{&(0x7f0000004440)="f2e12a58e71a0f48e76b429b9e9c96e8e6dd00cb8df02a0e3282d42a468faf49f35a5eb9f24db2b7e662b96a73c33d1ee7d21b62434a7398424c41d47296bf9f74cd231a5b3820d2bdffb6936bbcfbd532255a71c04f6208ca52261209f03b9fd3af580289ec1a6ffdc2f3dc537e9b3bf2ef41ad59d750a156bea4aebfb9d9da123f431966bfde91b04e7f5334c771e158b8aec92946c2a479685562b25b382dd02c2ccd2d97de5bcdd3805fd5be5b3865a5011d3a0cb30a03f7bd2e55bfacbab82ab41c73f6827a8d9e41fc9a3c12bf4724619d53b1cd265abe771b095fef98d504508fa25d4d", 0xe7}, {&(0x7f0000004540)="0870d30c45f1d6353651330e553738b2b6b3619d5b10146ad280834f9685499488d9421c7dc4e25e04f8164c4f2c8ad6740430ee8e05defbecab3e2c3241b3d666283ade4e0b7160ef4ba76f728df8711a147486a9fe69934cbec5d80175418ba65d031fe39aff277b16cf07932cd13a5ab66ad535ca2cef19fbbc73c4ca0488ff44bbd2d95eab5d9c1ee8cb00eddfd12575481f533bb52052f7ce0ed20b0e6abffb14a8a7171b750428", 0xaa}], 0x2, &(0x7f00000049c0)=[@rights={{0x24, 0x1, 0x1, [r2, r21, r2, r2, r8]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r13, r7, r1, r7, r1]}}, @rights={{0x1c, 0x1, 0x1, [r14, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r24}}}, @cred={{0x1c, 0x1, 0x2, {r25, r26, 0xee00}}}], 0xd0, 0x80}}, {{&(0x7f0000004ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004f40)=[{&(0x7f0000004b40)="5167231914dfffacf17f0e1e61adbaa23572eccac7c77ea39e7e9c2da435c71a27b2e3165f778cfd69b7e1de90be3fd9d2a5632cb4821229aa92a5d0b2e507353185ef48b69761717a8ec8817568a29b0a1689c81ca94111721094ab4208cb4f8eda6296a8e7b0ca3eaf15b41b92ce6515c4c4058f8eb038e94263eb2298464fcbcd46cf9aaf1b7435f54eef81e935812297af800bda520c1805e7e1079c1694d8f9d21e2835cdb301ed2522778c2da856bffede277b586aadb01fe284a7ce5a8f496d43b7e8a1feae4251756e474461555e68", 0xd3}, {&(0x7f0000004c40)="9edc4d0caf0b8cc3fc85088651f0d4238f1385686b9c1c93e2d59543e9e0b73f700aac7b14052023c8822da13dc4abc9071f19e1a21f89319425fb1f8fca9bf5ee6ec6b841e8651406d97ddd88288ce2620e7621c64eb8c28e5c0dd6a28439a3cd2d31b2e9961f84e314f322beaace2da14ce743cdb2b2421c08996c091ef8e335acb7260d1d8369d5ec401239d7dd6ae60d526886f94630624f9bc6de0c4e25f192edc1076e4df34739bc8e6e441ffb0aed1f0d3a90c8a3ad584991095092ca2d0f00a3ab6f6ebb57f7581d", 0xcc}, {&(0x7f0000004d40)="a53158", 0x3}, {&(0x7f0000004d80)="19a8059b4d9922964a24ea03a9bd7018e1bba550be5e061653dbaab2392f3ec2a3be01f31851c85dd3caa344543021ff594bea71c4c5853db86fb3e074d5a00e6d2633f0b72cf46ed4e721fc425959d38669d59dfa6401de6dc707d7aba3e50253402df44c176fe4e4d9041a4651abb6ea3b6f7023865c0e8a2e1d8d90489c7ad8f6d221d1b8a9e7a62fa02310a839dfaed3f239ea7aeda102231fdb0022e397573e4fbab643e4c279482f4a6f465e", 0xaf}, {&(0x7f0000004e40)="d4166d70bc861dfef790272cc6456ecb3d0b0a5e2cdd019e5b0d848bef962a2f0e4b89027edd3e83da225a49cea0972c8ccd1ade20ba22c63125b580c5deec75d0d9dfdd38d9bfe7f43ca79dc82520d81156620de1e5a8a945b6a368d680f12173542a28fcb83f32d5b54258d32433738a0a6683230ba6e18ce39b7c9229e53b0551bfe59898f783e61779497f108143816b945b75054992c1c0f979bc82150a3cc8c9b0ff13970ab4d5fe307e7b4a13977ef4b963df06e91f71855cc3c886fb0e88839584b29bcc7b02c988a32124317f", 0xd1}], 0x5, &(0x7f0000005300)=[@rights={{0x28, 0x1, 0x1, [r13, 0xffffffffffffffff, r6, r13, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {r27, r28}}}, @rights={{0x28, 0x1, 0x1, [r6, r3, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2]}}, @cred={{0x1c}}], 0x90, 0x11}}, {{&(0x7f00000053c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000005540)=[{&(0x7f0000005440)="a40fd6c6e4a5ff1613b99bd7c56bae31496445004a2ed20455c93344ceba1319b1e595b95cc35349581f2013def9a219ffd56d0dc56ecf458ce2867eb171a4f76efdf5d6a2e7af152f5dc8a2fac787a399c362c93bd22aaed01ffe5893df4215c79093fd86a697901d4fa56782d74e1bf79d70d0b25ea4867b0d3750b666927cd3c1facada010577984794", 0x8b}, {&(0x7f0000005500)="ed04a38cd9ad0d71e3eadc63568b18b2fb0a3fee7b37a00b510939809e30ba8bfec1700a03555a82315ee835b3c5328c7d98aed6", 0x34}], 0x2, &(0x7f0000005680)=[@rights={{0x18, 0x1, 0x1, [r0, r3]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r14, r6, r0, r3]}}, @rights={{0x10}}], 0x88, 0x8850}}, {{&(0x7f0000005740)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000006ac0)=[{&(0x7f00000057c0)="2ece3b4669c4560e7462bbf8be8c735f463fdbc7861643cca910a7409d3ba77d1595cd147ea419c308f7c50d68", 0x2d}, {&(0x7f0000005800)="58ecc2b74d6a1f45cbb1d8c2d253237737c3e31ca9bb03fa2fb44bec4a4077fecb145acad0e0b6f9aa0f2f81a39bcb39dec529d56a33b9bede7d7f820e3b4027cc", 0x41}, {&(0x7f0000005880)="9dc6336c9d613f3247332d67260c6e12991de42f15112f707b73ea45825b1255c5f2006fa141497a887c182ce603e82780c786328fab3a5876d0342ee9eec616b879c3c081a7178ba7ebaa8926cf91fef48e711d274cf80e1602996527a96ee1988ee228bb5d6731f0a2f055264628ab2b2eaae6ec4deb22680adad7ece67f199daa9d641c784cff58c64de746c3e5284876184649acc6f6c07683dd072fd4b3dfb0588de4a84fc09b4b66206db823c5a4ea6dcee55b0bb1808bb6de1e21e6d64dff43497e93f5867e729fc49bdb1e219f", 0xd1}, {&(0x7f0000005980)="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", 0x1000}, {&(0x7f0000006980)="c4b27eda8e5eef2afe5c173b8f9e1b9c8b652734ac870ed8e40d23b15a22f5bf32257995d3f29cb67adc9ea28ade2b8563570e489b0687c6fa1fc4de6cd9e7fdb8bc4843bd22ab", 0x47}, {&(0x7f0000006a00)}, {&(0x7f0000006a40)="8e15d3ebaa02507aa88bd56de3f13ba2112459a0272d4297472a4ef4cf87958101c18eb046d2290b843427508d47cdff8e13c7b84738f62f873cffa9392a226ac2b45caf80b29123473374ade7b851216425ded3668d69acde4386e89a2de6ce3e3a8713", 0x64}], 0x7, &(0x7f0000006c40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r14, 0xffffffffffffffff, r0, r2, r4, r7]}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0x78, 0x8040}}, {{&(0x7f0000006cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006e80)=[{&(0x7f0000006d40)="97e02b076574e3579fbd8ea6443d7c24a54ba428dd44ce19c4800c6431a9fc78deb726ad02c2a44fb1b16c463509c71d072f00c20d9bc0b82b34b0f3c1aecf0eb8d3e9", 0x43}, {&(0x7f0000006dc0)="4bf21945aeea0c26b910e743327898f0870d15cdd56bacfcf5d5ebd9421bded82c452ddf33c7c9aefeb967227de73f4f740f2c712fb884225f26f5ddd916fdd9f185a7f5e8719297ba22aaf2985a6657314abc7cba452239a66e869d079ad6c649282ee57008a197bee108ffc47d4a618711338337f6af2cc9a39554c379d16ccfcd806ec04c6150050e291aa4acb2133932a5ffbeb4eaa06967b0484038787114b9baa8589b4eff113472e1b6355165", 0xb0}], 0x2, &(0x7f00000070c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r14, r3, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r14, r2, r1, r2, r2]}}], 0x88, 0x40}}, {{&(0x7f0000007180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000073c0)=[{&(0x7f0000007200)="f3e1848a2db0ccf76e6d3e39159c80b8c9a831c8c8b4e33eff8a9b1073cd1351d5559b248a6191a63cb5bf0e0f63cc72fb0b5f28c13cf87b1753f15eaccf18ceb6dc35a8c4cfd009d4f117879c37d1320aba3b3b4ba70d75bb3c425483747461a73a5f642e9843f6c6e7473d120bd675ca07a95f058946181dd4d8abbb9f4aa507063feb060b87a7148530d24dd0b966bfdfcd6d57596c7739f206c3b329a1d2e88f09ab19", 0xa5}, {&(0x7f00000072c0)="75bd525f5acd8eb04bdb0b8d91bd8354d6be2fa8ba61c456d115ba23f7d669f95386cbb761366af5f8aa8f88d5c52a102da85a4d34263852130adba088993e1070ee301cb5aa1d949686434c72f873f36b7aed4cfbcce748cbfbc9dd09e22c1b8d6fc272d631c4f7c89dd31ce49408fe422aeaf97e38d627274f4638639e7a2d662e6f0b191564d133de555fa2d5c218b87038f704bf8f9516905f23a293a8c84897c2b1ab0d1f1ddde0f7da5577e30a3c7af0d53b87d83a99ba027b74c418212e75e59befd27485951a1b169a80fe1d9ec68e386ee995fac08008aa95afa9e88b5fc041", 0xe4}], 0x2, &(0x7f0000007640)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r2, r13]}}], 0x58, 0x400c4}}, {{0x0, 0x0, &(0x7f0000008a40)=[{&(0x7f00000076c0)="2b273bd35dd49e9c3b5b910520a9c9e68e2ac03c7dbd6c1064d418579156bafd2fb34c7468eee1eb1192f9981bd78c0862b21499bc823a8fb6dd929901b0465c673700cca5706400dcb8dec37b690ff216032f1e3b2e748a38d42b3af47b1b6cbc63a7d39c697a28edb29083442f30651df41f499da8aa", 0x77}, {&(0x7f0000007740)="7e79ad448ff70bab340703c25d962f4e24cd7cb1e6b0b65becc31e0bfbee26d95f5aea28323e00b0961f6e4f482321071133d2a6cec6817de243e50726896e2e8aff0524449bdd593929af6bd1fb9843880a364ddb07f7159b8a8123ae4ca43730904af78c27a3e827e15745d392a3e07bb1d27e50b9941fb17b6273323e49e366f22903e668aa856a471bd59e6dcdd457283090e07c3943dfac0c54d95d2bd1722265434b5c8f567357fe2e69793082b1f84e6bab32e139efc6653e2968c44c2bb39a974b512184e08a7e58710d043b73adb5184bc65a85d5c75ade", 0xdc}, {&(0x7f0000007840)="d6795ecb25ffbf9bfe8f8fde7d7b7aecb32fda3023dac4e43fb40e184fa9d918cb932cc4a5846dbe7a6e4d00b8ea2766467fca917168cf31f009675af9c8a1abeb202ed8e581d2c300be6f7d09f92a125a8ff06e4a5eedd14f1d2d4cc68294f4c57ed30cde564cacd814c63b384d311f57d222756d980c5a270a9c2c780c6fd48ab3ac5f2881e21dfd03ffcc0e8631dbe96635cab18e", 0x96}, {&(0x7f0000007900)="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", 0x1000}, {&(0x7f0000008900)="0d333b2177090952087f38205e60e37f3c6adb5f1bd77b8077c354bc815d18c4312cb391cc6b0d81035de5fd87e5a58d23ff0505d9252f98f9e893e09ccb8f892687fd2f34701fc49082deb66abc853101b872fab169d76acf74f8e5f21fbd633a6d9992f9949219970b31c401410a5ef3790a0cb19047b05545d84854ff6ad53ec15c81b3fbd52e4ce1ddf49400e89a1cd31c3d3773d2123fdea0662e3bc4df56ae82f17e791c6d82", 0xa9}, {&(0x7f00000089c0)="889bc9e3bad61f96db431c8d00180f396ed35f23b32c93212623281548d6cab248a4076e36703a55c521e45d74030785329bf61cf8fa4ad9bd0a3143dce6209587c7d4b76563c59f445b36aebb06a3e90b07c6eeb872c32e4505dc4a664ec12abb", 0x61}], 0x6, &(0x7f000000b480)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8, 0x4000c004}}], 0x8, 0x800) 1.871002107s ago: executing program 3 (id=2038): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (fail_nth: 1) 1.870733254s ago: executing program 9 (id=2039): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x28c000, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) 1.495011876s ago: executing program 1 (id=2040): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) getrlimit(0xc, &(0x7f0000000080)) open(&(0x7f00000001c0)='./file0\x00', 0x480ff, 0x88) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001d00010028bd7000fcdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="1000020214000100fe80c6000000000000000000000000bb"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4048080) socket$inet(0x2, 0x1, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x400}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x6, 0x1) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) 1.292386703s ago: executing program 9 (id=2041): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 1.171054855s ago: executing program 3 (id=2042): socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r0, 0x4) 933.102901ms ago: executing program 4 (id=2043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x2224c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000fcdbdf253500000008000300", @ANYRES32=r3, @ANYBLOB="1bb023a4137cc7dd7e839c32390000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8080) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r5, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/255, 0xff}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000140)=""/18, 0x12}], 0x3, &(0x7f0000000ac0)=""/34, 0x22}, 0x81}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f00000010c0)=""/133, 0x85}], 0x2}, 0x3}], 0x3, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f00000008c0)=0x1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4006}, 0x20000844) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 930.011089ms ago: executing program 3 (id=2044): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0x4}, {0x6, 0xfe, 0x0, 0xfffffffd}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x2, @win={{0x7, 0xff, 0x31384142, 0x5}, 0x5, 0x3, 0x0, 0x7, 0x0, 0x6}}) userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0xd0, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x81}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x19}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xdea}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xcb9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x50000}, 0x24000055) 758.433105ms ago: executing program 9 (id=2045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000001) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r8, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 15.063587ms ago: executing program 2 (id=2046): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x20000080) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 11.48231ms ago: executing program 1 (id=2047): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x20000080) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) (fail_nth: 1) 0s ago: executing program 4 (id=2048): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4044080) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) syz_io_uring_setup(0x31c0, &(0x7f0000000180)={0x0, 0xc7ca, 0x40, 0x2, 0x1bc}, &(0x7f0000000040), &(0x7f0000000140)) kernel console output (not intermixed with test programs): [ 1028.922050][T13165] ? __pfx_ucma_write+0x10/0x10 [ 1028.922083][T13165] ? __pfx_vfs_writev+0x10/0x10 [ 1028.922125][T13165] ? __fget_files+0x2a/0x420 [ 1028.922159][T13165] ? __fget_files+0x3a6/0x420 [ 1028.922187][T13165] ? __fget_files+0x2a/0x420 [ 1028.922226][T13165] do_writev+0x15a/0x2e0 [ 1028.922256][T13165] ? __pfx_do_writev+0x10/0x10 [ 1028.922295][T13165] do_syscall_64+0x14d/0xf80 [ 1028.922329][T13165] ? trace_irq_disable+0x3b/0x150 [ 1028.922357][T13165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.922381][T13165] ? clear_bhb_loop+0x40/0x90 [ 1028.922410][T13165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.922432][T13165] RIP: 0033:0x7f999b7dc799 [ 1028.922453][T13165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.922473][T13165] RSP: 002b:00007f9999a2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1028.922496][T13165] RAX: ffffffffffffffda RBX: 00007f999ba55fa0 RCX: 00007f999b7dc799 [ 1028.922514][T13165] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000015 [ 1028.922530][T13165] RBP: 00007f9999a2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.922544][T13165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.922557][T13165] R13: 00007f999ba56038 R14: 00007f999ba55fa0 R15: 00007fff52e06778 [ 1028.922594][T13165] [ 1030.909488][ T9] kernel write not supported for file /media2 (pid: 9 comm: kworker/0:0) [ 1031.081006][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1031.233626][ T9] usb 2-1: config 11 has too many interfaces: 35, using maximum allowed: 32 [ 1031.233659][ T9] usb 2-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.233681][ T9] usb 2-1: config 11 has 1 interface, different from the descriptor's value: 35 [ 1031.233704][ T9] usb 2-1: config 11 has no interface number 0 [ 1031.233737][ T9] usb 2-1: too many endpoints for config 11 interface 6 altsetting 6: 201, using maximum allowed: 30 [ 1031.233777][ T9] usb 2-1: config 11 interface 6 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 201 [ 1031.233806][ T9] usb 2-1: config 11 interface 6 has no altsetting 0 [ 1031.235737][T13185] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1692'. [ 1031.235763][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'. [ 1031.235778][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'. [ 1031.235794][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'. [ 1031.236730][ T9] usb 2-1: New USB device found, idVendor=2184, idProduct=0036, bcdDevice=68.fd [ 1031.236759][ T9] usb 2-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 1031.236781][ T9] usb 2-1: Product: syz [ 1031.236797][ T9] usb 2-1: Manufacturer: syz [ 1031.236814][ T9] usb 2-1: SerialNumber: syz [ 1031.602555][ T9] usb 2-1: USB disconnect, device number 48 [ 1032.256161][T13198] sch_tbf: burst 34 is lower than device lo mtu (65550) ! [ 1035.372346][T13208] fuse: Bad value for 'fd' [ 1035.817126][T13215] sch_tbf: burst 34 is lower than device lo mtu (65550) ! [ 1037.583571][T13228] tmpfs: Unknown parameter 'nr_inodes' [ 1037.743996][ T48] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1038.668702][ T48] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1038.668735][ T48] usb 3-1: config 0 has an invalid interface number: 255 but max is 252 [ 1038.668759][ T48] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1038.668781][ T48] usb 3-1: config 0 has no interface number 0 [ 1038.668815][ T48] usb 3-1: config 0 interface 255 has no altsetting 0 [ 1038.737590][ T48] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1038.737626][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.737647][ T48] usb 3-1: Product: syz [ 1038.737663][ T48] usb 3-1: Manufacturer: syz [ 1038.737680][ T48] usb 3-1: SerialNumber: syz [ 1038.785970][ T48] usb 3-1: config 0 descriptor?? [ 1038.806666][ T48] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1039.039309][ T48] gspca_sunplus: reg_r err -71 [ 1039.039406][ T48] sunplus 3-1:0.255: probe with driver sunplus failed with error -71 [ 1039.201409][ T48] usb 3-1: USB disconnect, device number 38 [ 1039.606823][T13239] FAULT_INJECTION: forcing a failure. [ 1039.606823][T13239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1039.606866][T13239] CPU: 0 UID: 0 PID: 13239 Comm: syz.3.1702 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1039.606896][T13239] Tainted: [L]=SOFTLOCKUP [ 1039.606904][T13239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1039.606928][T13239] Call Trace: [ 1039.606937][T13239] [ 1039.606947][T13239] dump_stack_lvl+0xe8/0x150 [ 1039.606986][T13239] should_fail_ex+0x46b/0x600 [ 1039.607020][T13239] _copy_from_iter+0x1d3/0x1670 [ 1039.607173][T13239] ? __pfx__copy_from_iter+0x10/0x10 [ 1039.607211][T13239] ? page_copy_sane+0x4e/0x270 [ 1039.607246][T13239] copy_page_from_iter+0xdd/0x170 [ 1039.607271][T13239] tun_get_user+0x1d4b/0x3de0 [ 1039.607340][T13239] ? tun_get_user+0x6ff/0x3de0 [ 1039.607378][T13239] ? __pfx_tun_get_user+0x10/0x10 [ 1039.607417][T13239] ? ref_tracker_alloc+0x332/0x4a0 [ 1039.607442][T13239] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1039.607467][T13239] ? tun_get+0x1c/0x2f0 [ 1039.607493][T13239] ? tun_get+0x1c/0x2f0 [ 1039.607516][T13239] ? tun_get+0x1c/0x2f0 [ 1039.607542][T13239] tun_chr_write_iter+0x119/0x200 [ 1039.607567][T13239] vfs_write+0x629/0xba0 [ 1039.607614][T13239] ? __pfx_vfs_write+0x10/0x10 [ 1039.607645][T13239] ? __fget_files+0x2a/0x420 [ 1039.607674][T13239] ksys_write+0x156/0x270 [ 1039.607699][T13239] ? __pfx_ksys_write+0x10/0x10 [ 1039.607732][T13239] do_syscall_64+0x14d/0xf80 [ 1039.607757][T13239] ? trace_irq_disable+0x3b/0x150 [ 1039.607777][T13239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.607794][T13239] ? clear_bhb_loop+0x40/0x90 [ 1039.607813][T13239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.607830][T13239] RIP: 0033:0x7f999b79cfce [ 1039.607846][T13239] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1039.607860][T13239] RSP: 002b:00007f9999a2dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1039.607878][T13239] RAX: ffffffffffffffda RBX: 00007f9999a2e6c0 RCX: 00007f999b79cfce [ 1039.607890][T13239] RDX: 000000000000002a RSI: 0000200000000000 RDI: 00000000000000c8 [ 1039.607901][T13239] RBP: 00007f9999a2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.607911][T13239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.607927][T13239] R13: 00007f999ba56038 R14: 00007f999ba55fa0 R15: 00007fff52e06778 [ 1039.607952][T13239] [ 1040.133378][T13247] FAULT_INJECTION: forcing a failure. [ 1040.133378][T13247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.133420][T13247] CPU: 1 UID: 0 PID: 13247 Comm: syz.1.1704 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1040.133450][T13247] Tainted: [L]=SOFTLOCKUP [ 1040.133459][T13247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1040.133473][T13247] Call Trace: [ 1040.133482][T13247] [ 1040.133492][T13247] dump_stack_lvl+0xe8/0x150 [ 1040.133531][T13247] should_fail_ex+0x46b/0x600 [ 1040.133566][T13247] _copy_from_user+0x2d/0xb0 [ 1040.133601][T13247] __sys_bpf+0x229/0x950 [ 1040.133632][T13247] ? __pfx___sys_bpf+0x10/0x10 [ 1040.133658][T13247] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1040.133703][T13247] ? ksys_write+0x248/0x270 [ 1040.133739][T13247] ? __pfx_ksys_write+0x10/0x10 [ 1040.133778][T13247] __x64_sys_bpf+0x7c/0x90 [ 1040.133804][T13247] do_syscall_64+0x14d/0xf80 [ 1040.133836][T13247] ? trace_irq_disable+0x3b/0x150 [ 1040.133862][T13247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.133885][T13247] ? clear_bhb_loop+0x40/0x90 [ 1040.133914][T13247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.133938][T13247] RIP: 0033:0x7f2afdf1c799 [ 1040.133959][T13247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.133978][T13247] RSP: 002b:00007f2afc16e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1040.134003][T13247] RAX: ffffffffffffffda RBX: 00007f2afe195fa0 RCX: 00007f2afdf1c799 [ 1040.134019][T13247] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 1040.134033][T13247] RBP: 00007f2afc16e090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.134048][T13247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.134061][T13247] R13: 00007f2afe196038 R14: 00007f2afe195fa0 R15: 00007ffc26a11468 [ 1040.134095][T13247] [ 1040.587823][T13245] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1703'. [ 1040.587854][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1703'. [ 1040.587872][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1703'. [ 1040.587887][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1703'. [ 1043.461749][T13272] fuse: Bad value for 'fd' [ 1046.083588][T13287] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1713'. [ 1046.083992][T13287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1713'. [ 1047.500908][ T48] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1047.843558][ T48] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1047.843593][ T48] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1047.843620][ T48] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1047.846725][ T48] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1047.846760][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1047.846783][ T48] usb 5-1: Product: syz [ 1047.846799][ T48] usb 5-1: Manufacturer: syz [ 1047.846816][ T48] usb 5-1: SerialNumber: syz [ 1048.087032][T13308] sch_tbf: burst 34 is lower than device lo mtu (65550) ! [ 1048.514195][ T48] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 78 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1048.832494][ T48] usb 5-1: USB disconnect, device number 78 [ 1048.839367][ T48] usblp0: removed [ 1048.960879][ T9660] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1049.128718][ T9660] usb 2-1: config 11 has too many interfaces: 35, using maximum allowed: 32 [ 1049.128843][ T9660] usb 2-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.128926][ T9660] usb 2-1: config 11 has 1 interface, different from the descriptor's value: 35 [ 1049.128982][ T9660] usb 2-1: config 11 has no interface number 0 [ 1049.129323][ T9660] usb 2-1: too many endpoints for config 11 interface 6 altsetting 6: 201, using maximum allowed: 30 [ 1049.129717][ T9660] usb 2-1: config 11 interface 6 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 201 [ 1049.129812][ T9660] usb 2-1: config 11 interface 6 has no altsetting 0 [ 1049.696512][ T9660] usb 2-1: New USB device found, idVendor=2184, idProduct=0036, bcdDevice=68.fd [ 1049.696556][ T9660] usb 2-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 1049.696578][ T9660] usb 2-1: Product: syz [ 1049.696594][ T9660] usb 2-1: Manufacturer: syz [ 1049.696648][ T9660] usb 2-1: SerialNumber: syz [ 1050.014992][ T9660] usb 2-1: USB disconnect, device number 49 [ 1050.019584][T13311] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1720'. [ 1050.167263][T13320] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1721'. [ 1050.167283][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1721'. [ 1050.167294][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1721'. [ 1050.167305][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1721'. [ 1050.598679][T13331] sch_tbf: burst 34 is lower than device lo mtu (65550) ! [ 1053.138696][T13336] fuse: Bad value for 'fd' [ 1054.662432][T13352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1054.804470][T13355] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1731'. [ 1054.804537][T13355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1731'. [ 1057.241843][T13359] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1732'. [ 1057.381885][T13372] FAULT_INJECTION: forcing a failure. [ 1057.381885][T13372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.381930][T13372] CPU: 1 UID: 0 PID: 13372 Comm: syz.3.1734 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1057.381968][T13372] Tainted: [L]=SOFTLOCKUP [ 1057.381978][T13372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1057.381994][T13372] Call Trace: [ 1057.382004][T13372] [ 1057.382016][T13372] dump_stack_lvl+0xe8/0x150 [ 1057.382063][T13372] should_fail_ex+0x46b/0x600 [ 1057.382103][T13372] _copy_to_user+0x31/0xb0 [ 1057.382143][T13372] simple_read_from_buffer+0xe1/0x170 [ 1057.382182][T13372] proc_fail_nth_read+0x1be/0x230 [ 1057.382220][T13372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1057.382256][T13372] ? rw_verify_area+0x2ac/0x4e0 [ 1057.382293][T13372] ? tun_chr_write_iter+0xe6/0x200 [ 1057.382330][T13372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1057.382373][T13372] vfs_read+0x212/0xa80 [ 1057.382422][T13372] ? __pfx_vfs_read+0x10/0x10 [ 1057.382464][T13372] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1057.382505][T13372] ? lockdep_hardirqs_on+0x7a/0x110 [ 1057.382545][T13372] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1057.382584][T13372] ? mutex_lock_nested+0x152/0x1d0 [ 1057.382614][T13372] ? fdget_pos+0x252/0x320 [ 1057.382792][T13372] ksys_read+0x156/0x270 [ 1057.382832][T13372] ? __pfx_ksys_read+0x10/0x10 [ 1057.382885][T13372] do_syscall_64+0x14d/0xf80 [ 1057.382920][T13372] ? trace_irq_disable+0x3b/0x150 [ 1057.382949][T13372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.382975][T13372] ? clear_bhb_loop+0x40/0x90 [ 1057.383002][T13372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.383026][T13372] RIP: 0033:0x7f999b79cfce [ 1057.383049][T13372] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1057.383068][T13372] RSP: 002b:00007f99999ebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1057.383095][T13372] RAX: ffffffffffffffda RBX: 00007f99999ec6c0 RCX: 00007f999b79cfce [ 1057.383108][T13372] RDX: 000000000000000f RSI: 00007f99999ec0a0 RDI: 0000000000000005 [ 1057.383119][T13372] RBP: 00007f99999ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.383130][T13372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.383141][T13372] R13: 00007f999ba56218 R14: 00007f999ba56180 R15: 00007fff52e06778 [ 1057.383168][T13372] [ 1057.480965][T13364] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1733'. [ 1057.963759][T13377] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1735'. [ 1057.963789][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 1057.963806][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 1057.963821][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 1060.137158][ T5817] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1060.319700][ T5817] usb 5-1: Using ep0 maxpacket: 32 [ 1060.343506][ T5817] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1060.343542][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.343565][ T5817] usb 5-1: Product: syz [ 1060.343580][ T5817] usb 5-1: Manufacturer: syz [ 1060.343596][ T5817] usb 5-1: SerialNumber: syz [ 1060.391199][ T5817] usb 5-1: config 0 descriptor?? [ 1060.399843][ T5817] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1062.312037][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1062.330003][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1062.330082][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1062.373252][ T5817] gspca_ov534_9: reg_w failed -110 [ 1062.463954][T13406] fuse: Bad value for 'fd' [ 1062.552339][ T9] usb 3-1: config 11 has too many interfaces: 35, using maximum allowed: 32 [ 1062.552371][ T9] usb 3-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.552393][ T9] usb 3-1: config 11 has 1 interface, different from the descriptor's value: 35 [ 1062.552415][ T9] usb 3-1: config 11 has no interface number 0 [ 1062.552457][ T9] usb 3-1: too many endpoints for config 11 interface 6 altsetting 6: 201, using maximum allowed: 30 [ 1062.552499][ T9] usb 3-1: config 11 interface 6 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 201 [ 1062.552529][ T9] usb 3-1: config 11 interface 6 has no altsetting 0 [ 1062.559532][ T9] usb 3-1: New USB device found, idVendor=2184, idProduct=0036, bcdDevice=68.fd [ 1062.559568][ T9] usb 3-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 1062.559599][ T9] usb 3-1: Product: syz [ 1062.559616][ T9] usb 3-1: Manufacturer: syz [ 1062.559632][ T9] usb 3-1: SerialNumber: syz [ 1062.810896][ T5817] gspca_ov534_9: Unknown sensor 0000 [ 1062.811023][ T5817] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1062.931161][ T9] usb 3-1: USB disconnect, device number 39 [ 1064.756574][ T9660] usb 5-1: USB disconnect, device number 79 [ 1065.326076][T13432] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1747'. [ 1065.326104][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1747'. [ 1065.326121][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1747'. [ 1065.326136][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1747'. [ 1070.151460][ T5999] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1070.460376][ T5999] usb 2-1: device descriptor read/64, error -71 [ 1070.534363][T13477] sch_tbf: burst 34 is lower than device lo mtu (65550) ! [ 1070.691725][ T5999] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1070.948462][ T5999] usb 2-1: device descriptor read/64, error -71 [ 1071.612386][ T5999] usb usb2-port1: attempt power cycle [ 1071.691870][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'. [ 1071.991213][ T5999] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1072.013090][ T5999] usb 2-1: device descriptor read/8, error -71 [ 1072.140928][ T9660] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1072.254877][ T5999] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1072.272007][ T5999] usb 2-1: device descriptor read/8, error -71 [ 1072.293317][ T9660] usb 4-1: config 11 has too many interfaces: 35, using maximum allowed: 32 [ 1072.293351][ T9660] usb 4-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.293373][ T9660] usb 4-1: config 11 has 1 interface, different from the descriptor's value: 35 [ 1072.293394][ T9660] usb 4-1: config 11 has no interface number 0 [ 1072.293426][ T9660] usb 4-1: too many endpoints for config 11 interface 6 altsetting 6: 201, using maximum allowed: 30 [ 1072.293467][ T9660] usb 4-1: config 11 interface 6 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 201 [ 1072.293496][ T9660] usb 4-1: config 11 interface 6 has no altsetting 0 [ 1072.296495][ T9660] usb 4-1: New USB device found, idVendor=2184, idProduct=0036, bcdDevice=68.fd [ 1072.296529][ T9660] usb 4-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 1072.296550][ T9660] usb 4-1: Product: syz [ 1072.296566][ T9660] usb 4-1: Manufacturer: syz [ 1072.296583][ T9660] usb 4-1: SerialNumber: syz [ 1072.411086][ T5999] usb usb2-port1: unable to enumerate USB device [ 1072.658727][ T9660] usb 4-1: USB disconnect, device number 38 [ 1073.152272][T13505] netlink: 112 bytes leftover after parsing attributes in process `syz.9.1759'. [ 1073.152302][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1759'. [ 1073.152318][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1759'. [ 1073.152342][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1759'. [ 1073.414600][T13519] FAULT_INJECTION: forcing a failure. [ 1073.414600][T13519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1073.414645][T13519] CPU: 1 UID: 0 PID: 13519 Comm: syz.1.1762 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1073.414679][T13519] Tainted: [L]=SOFTLOCKUP [ 1073.414688][T13519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1073.414702][T13519] Call Trace: [ 1073.414711][T13519] [ 1073.414721][T13519] dump_stack_lvl+0xe8/0x150 [ 1073.414759][T13519] should_fail_ex+0x46b/0x600 [ 1073.414790][T13519] _copy_from_user+0x2d/0xb0 [ 1073.414823][T13519] core_sys_select+0x57a/0xc30 [ 1073.414867][T13519] ? __pfx_core_sys_select+0x10/0x10 [ 1073.414915][T13519] ? __pfx_set_user_sigmask+0x10/0x10 [ 1073.414944][T13519] ? kmem_cache_free+0x185/0x6b0 [ 1073.414964][T13519] ? do_sys_openat2+0x14c/0x200 [ 1073.415007][T13519] __se_sys_pselect6+0x267/0x320 [ 1073.415039][T13519] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1073.415067][T13519] ? __pfx_ksys_write+0x10/0x10 [ 1073.415110][T13519] ? __x64_sys_pselect6+0x21/0xf0 [ 1073.415142][T13519] do_syscall_64+0x14d/0xf80 [ 1073.415174][T13519] ? trace_irq_disable+0x3b/0x150 [ 1073.415199][T13519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.415224][T13519] ? clear_bhb_loop+0x40/0x90 [ 1073.415254][T13519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.415279][T13519] RIP: 0033:0x7f2afdf1c799 [ 1073.415304][T13519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1073.415326][T13519] RSP: 002b:00007f2afc16e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1073.415354][T13519] RAX: ffffffffffffffda RBX: 00007f2afe195fa0 RCX: 00007f2afdf1c799 [ 1073.415372][T13519] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1073.415388][T13519] RBP: 00007f2afc16e090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.415405][T13519] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1073.415422][T13519] R13: 00007f2afe196038 R14: 00007f2afe195fa0 R15: 00007ffc26a11468 [ 1073.415463][T13519] [ 1074.244709][T13539] loop7: detected capacity change from 0 to 7 [ 1074.298265][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1074.298308][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1074.331126][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1074.331171][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1074.332032][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1074.332071][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1074.332521][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1074.332553][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1074.332743][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1074.332775][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1074.371467][ T5989] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1074.455011][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1074.455055][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1074.455297][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1074.455327][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1074.455548][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1074.455579][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1074.458623][T13539] ldm_validate_partition_table(): Disk read failed. [ 1074.460885][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1074.460995][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1074.560855][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1074.560900][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1074.598253][ T5989] usb 10-1: Using ep0 maxpacket: 32 [ 1074.611076][ T5989] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.611108][ T5989] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1074.614546][ T5989] usb 10-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1074.614579][ T5989] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.614601][ T5989] usb 10-1: Product: syz [ 1074.614617][ T5989] usb 10-1: Manufacturer: syz [ 1074.614633][ T5989] usb 10-1: SerialNumber: syz [ 1074.698081][T13539] Dev loop7: unable to read RDB block 0 [ 1074.706461][ T5989] usb 10-1: config 0 descriptor?? [ 1074.772406][T13539] loop7: unable to read partition table [ 1074.772679][T13539] loop7: partition table beyond EOD, truncated [ 1074.772724][T13539] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1075.189111][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1766'. [ 1075.266796][T13555] sch_tbf: burst 34 is lower than device lo mtu (65550) ! [ 1076.383430][ T5989] usb 10-1: USB disconnect, device number 30 [ 1078.959057][T13580] FAULT_INJECTION: forcing a failure. [ 1078.959057][T13580] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.959101][T13580] CPU: 0 UID: 0 PID: 13580 Comm: syz.3.1777 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1078.959133][T13580] Tainted: [L]=SOFTLOCKUP [ 1078.959142][T13580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1078.959156][T13580] Call Trace: [ 1078.959166][T13580] [ 1078.959177][T13580] dump_stack_lvl+0xe8/0x150 [ 1078.959219][T13580] should_fail_ex+0x46b/0x600 [ 1078.959254][T13580] should_failslab+0xa8/0x100 [ 1078.959281][T13580] __kmalloc_noprof+0xdf/0x7b0 [ 1078.959316][T13580] ? kernfs_fop_write_iter+0x159/0x540 [ 1078.959524][T13580] kernfs_fop_write_iter+0x159/0x540 [ 1078.959567][T13580] vfs_write+0x629/0xba0 [ 1078.959612][T13580] ? __pfx_vfs_write+0x10/0x10 [ 1078.959658][T13580] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1078.959702][T13580] ? lockdep_hardirqs_on+0x7a/0x110 [ 1078.959737][T13580] ? mutex_lock_nested+0x152/0x1d0 [ 1078.959764][T13580] ? fdget_pos+0x252/0x320 [ 1078.959802][T13580] ksys_write+0x156/0x270 [ 1078.959839][T13580] ? __pfx_ksys_write+0x10/0x10 [ 1078.959886][T13580] do_syscall_64+0x14d/0xf80 [ 1078.959920][T13580] ? trace_irq_disable+0x3b/0x150 [ 1078.959948][T13580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.959972][T13580] ? clear_bhb_loop+0x40/0x90 [ 1078.960000][T13580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.960023][T13580] RIP: 0033:0x7f999b7dc799 [ 1078.960046][T13580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.960065][T13580] RSP: 002b:00007f9999a2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1078.960089][T13580] RAX: ffffffffffffffda RBX: 00007f999ba55fa0 RCX: 00007f999b7dc799 [ 1078.960106][T13580] RDX: 000000000000001f RSI: 0000200000000980 RDI: 0000000000000005 [ 1078.960121][T13580] RBP: 00007f9999a2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.960134][T13580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.960147][T13580] R13: 00007f999ba56038 R14: 00007f999ba55fa0 R15: 00007fff52e06778 [ 1078.960182][T13580] [ 1079.060893][ T5877] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1079.227604][ T5877] usb 2-1: config 11 has too many interfaces: 35, using maximum allowed: 32 [ 1079.227639][ T5877] usb 2-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.227661][ T5877] usb 2-1: config 11 has 1 interface, different from the descriptor's value: 35 [ 1079.227684][ T5877] usb 2-1: config 11 has no interface number 0 [ 1079.227718][ T5877] usb 2-1: too many endpoints for config 11 interface 6 altsetting 6: 201, using maximum allowed: 30 [ 1079.227758][ T5877] usb 2-1: config 11 interface 6 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 201 [ 1079.227788][ T5877] usb 2-1: config 11 interface 6 has no altsetting 0 [ 1079.255811][ T5877] usb 2-1: New USB device found, idVendor=2184, idProduct=0036, bcdDevice=68.fd [ 1079.255850][ T5877] usb 2-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 1079.255875][ T5877] usb 2-1: Product: syz [ 1079.255895][ T5877] usb 2-1: Manufacturer: syz [ 1079.255913][ T5877] usb 2-1: SerialNumber: syz [ 1079.481122][T13573] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1776'. [ 1079.481172][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1776'. [ 1079.481190][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1776'. [ 1079.481209][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1776'. [ 1079.592854][ T5877] usb 2-1: USB disconnect, device number 54 [ 1080.080816][ T5817] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1080.230986][ T5817] usb 10-1: Using ep0 maxpacket: 16 [ 1080.234203][ T5817] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1080.235958][ T5817] usb 10-1: config 4 has no interfaces? [ 1080.289852][ T5817] usb 10-1: New USB device found, idVendor=06a3, idProduct=0abb, bcdDevice=2a.78 [ 1080.289889][ T5817] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.289948][ T5817] usb 10-1: Product: 釢㻀㍳痉玿쾯쒀슏ଡ⭕ੱ쬤㤁흀溦뾩챢॰䭍뛯륛⼎餻쑤 [ 1080.289971][ T5817] usb 10-1: SerialNumber: 䡅闟欗堾ꩇ䐻⏗៮⫢枫︐鷆簣㬃ಔ쿿㚢硹噍쭩쌮聕認옼빴嗉뻇渚䠴㾞£ՠ൛亯⍌ [ 1080.396417][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.494346][T13613] sch_tbf: burst 34 is lower than device lo mtu (65550) ! [ 1081.206679][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.238468][ T5817] usb 10-1: USB disconnect, device number 31 [ 1081.411161][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.682725][ T5817] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1081.700851][ T9660] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1081.830970][ T5817] usb 4-1: Using ep0 maxpacket: 32 [ 1081.833662][ T5817] usb 4-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 1081.833721][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1081.837289][ T5817] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1081.837322][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.837342][ T5817] usb 4-1: Product: syz [ 1081.837755][ T5817] usb 4-1: Manufacturer: syz [ 1081.837768][ T5817] usb 4-1: SerialNumber: syz [ 1081.862166][ T9660] usb 3-1: Using ep0 maxpacket: 32 [ 1081.921306][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.925871][ T5817] usb 4-1: config 0 descriptor?? [ 1081.946823][ T9660] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.946850][ T9660] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.946882][ T9660] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1081.946900][ T9660] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.993517][ T9660] usb 3-1: config 0 descriptor?? [ 1082.217248][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1788'. [ 1082.503798][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.507506][ T8303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.508361][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.551768][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.652421][ T9660] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1082.708646][ T9660] usb 3-1: USB disconnect, device number 40 [ 1082.798157][ T5877] usb 4-1: USB disconnect, device number 39 [ 1083.937657][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.969589][T13645] fido_id[13645]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1084.566880][T13656] FAULT_INJECTION: forcing a failure. [ 1084.566880][T13656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.566923][T13656] CPU: 1 UID: 0 PID: 13656 Comm: syz.4.1796 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1084.566954][T13656] Tainted: [L]=SOFTLOCKUP [ 1084.566963][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1084.566976][T13656] Call Trace: [ 1084.566985][T13656] [ 1084.566995][T13656] dump_stack_lvl+0xe8/0x150 [ 1084.567035][T13656] should_fail_ex+0x46b/0x600 [ 1084.567071][T13656] _copy_from_user+0x2d/0xb0 [ 1084.567107][T13656] sk_setsockopt+0x2b3/0x2bb0 [ 1084.567164][T13656] ? __pfx_sk_setsockopt+0x10/0x10 [ 1084.567200][T13656] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1084.567236][T13656] ? lockdep_hardirqs_on+0x7a/0x110 [ 1084.567283][T13656] ? __fget_files+0x2a/0x420 [ 1084.567316][T13656] ? __fget_files+0x2a/0x420 [ 1084.567344][T13656] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1084.567383][T13656] do_sock_setsockopt+0x11b/0x1b0 [ 1084.567425][T13656] __x64_sys_setsockopt+0x143/0x1b0 [ 1084.567466][T13656] do_syscall_64+0x14d/0xf80 [ 1084.567501][T13656] ? trace_irq_disable+0x3b/0x150 [ 1084.567528][T13656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.567553][T13656] ? clear_bhb_loop+0x40/0x90 [ 1084.567582][T13656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.567606][T13656] RIP: 0033:0x7fb4ca67c799 [ 1084.567628][T13656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.567649][T13656] RSP: 002b:00007fb4c88ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1084.567675][T13656] RAX: ffffffffffffffda RBX: 00007fb4ca8f5fa0 RCX: 00007fb4ca67c799 [ 1084.567691][T13656] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000000000000003 [ 1084.567704][T13656] RBP: 00007fb4c88ce090 R08: 0000000000000004 R09: 0000000000000000 [ 1084.567718][T13656] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1084.567733][T13656] R13: 00007fb4ca8f6038 R14: 00007fb4ca8f5fa0 R15: 00007fff45cd3f88 [ 1084.567768][T13656] [ 1084.679813][T13650] netlink: 112 bytes leftover after parsing attributes in process `syz.9.1793'. [ 1084.679887][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1793'. [ 1084.679929][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1793'. [ 1084.679971][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1793'. [ 1084.931591][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.425711][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1085.583547][ T9] usb 5-1: config 11 has too many interfaces: 35, using maximum allowed: 32 [ 1085.583580][ T9] usb 5-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.583603][ T9] usb 5-1: config 11 has 1 interface, different from the descriptor's value: 35 [ 1085.583625][ T9] usb 5-1: config 11 has no interface number 0 [ 1085.583659][ T9] usb 5-1: too many endpoints for config 11 interface 6 altsetting 6: 201, using maximum allowed: 30 [ 1085.583701][ T9] usb 5-1: config 11 interface 6 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 201 [ 1085.583730][ T9] usb 5-1: config 11 interface 6 has no altsetting 0 [ 1085.588386][ T9] usb 5-1: New USB device found, idVendor=2184, idProduct=0036, bcdDevice=68.fd [ 1085.588420][ T9] usb 5-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 1085.588442][ T9] usb 5-1: Product: syz [ 1085.588457][ T9] usb 5-1: Manufacturer: syz [ 1085.588474][ T9] usb 5-1: SerialNumber: syz [ 1086.224299][ T9660] net_ratelimit: 4 callbacks suppressed [ 1086.224352][ T9660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.935825][ T9] usb 5-1: USB disconnect, device number 80 [ 1087.251493][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.211726][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.300846][ T48] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1088.310313][ T9660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.450922][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 1088.453413][ T48] usb 5-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 1088.453478][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1088.456796][ T48] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1088.456832][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.456857][ T48] usb 5-1: Product: syz [ 1088.456885][ T48] usb 5-1: Manufacturer: syz [ 1088.456902][ T48] usb 5-1: SerialNumber: syz [ 1088.552759][ T48] usb 5-1: config 0 descriptor?? [ 1090.519136][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.068847][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1806'. [ 1091.072753][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.151183][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.164881][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.167181][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.250941][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.350164][T13721] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1811'. [ 1091.350195][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1811'. [ 1091.350212][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1811'. [ 1091.350228][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1811'. [ 1091.571177][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.637576][ T9] usb 5-1: USB disconnect, device number 81 [ 1092.107010][T13751] netlink: 'syz.2.1814': attribute type 1 has an invalid length. [ 1092.390114][T13755] fuse: Bad value for 'rootmode' [ 1092.613047][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.980781][ T5988] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1093.181872][ T5988] usb 3-1: config 0 has no interfaces? [ 1093.181916][ T5988] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1093.181942][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.226174][ T5988] usb 3-1: config 0 descriptor?? [ 1093.462491][T13766] FAULT_INJECTION: forcing a failure. [ 1093.462491][T13766] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.462527][T13766] CPU: 0 UID: 0 PID: 13766 Comm: syz.2.1818 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1093.462552][T13766] Tainted: [L]=SOFTLOCKUP [ 1093.462559][T13766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1093.462570][T13766] Call Trace: [ 1093.462578][T13766] [ 1093.462585][T13766] dump_stack_lvl+0xe8/0x150 [ 1093.462618][T13766] should_fail_ex+0x46b/0x600 [ 1093.462644][T13766] should_failslab+0xa8/0x100 [ 1093.462666][T13766] __kmalloc_noprof+0xdf/0x7b0 [ 1093.462694][T13766] ? memcg_list_lru_alloc+0x286/0x870 [ 1093.462809][T13766] memcg_list_lru_alloc+0x286/0x870 [ 1093.462839][T13766] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 1093.462865][T13766] ? get_mem_cgroup_from_objcg+0x186/0x1c0 [ 1093.462940][T13766] zswap_store+0x8f5/0x1f80 [ 1093.462959][T13766] ? lockdep_hardirqs_on+0x7a/0x110 [ 1093.462987][T13766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1093.463008][T13766] ? zswap_store+0x6ec/0x1f80 [ 1093.463025][T13766] ? rt_spin_lock+0x1e0/0x400 [ 1093.463048][T13766] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1093.463073][T13766] ? __pfx_zswap_store+0x10/0x10 [ 1093.463093][T13766] ? rt_spin_unlock+0x160/0x200 [ 1093.463116][T13766] ? swap_entry_swapped+0x181/0x230 [ 1093.463143][T13766] ? folio_free_swap+0x230/0x360 [ 1093.463170][T13766] swap_writeout+0x6f3/0xcf0 [ 1093.463198][T13766] shrink_folio_list+0x3367/0x4f40 [ 1093.463273][T13766] ? __pfx_shrink_folio_list+0x10/0x10 [ 1093.463325][T13766] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1093.463354][T13766] ? __lock_acquire+0x6b5/0x2cf0 [ 1093.463384][T13766] reclaim_folio_list+0x100/0x460 [ 1093.463424][T13766] ? __pfx_reclaim_folio_list+0x10/0x10 [ 1093.463452][T13766] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1093.463484][T13766] reclaim_pages+0x45b/0x530 [ 1093.463503][T13766] ? reacquire_held_locks+0x104/0x190 [ 1093.463532][T13766] ? __pfx_reclaim_pages+0x10/0x10 [ 1093.463554][T13766] ? madvise_cold_or_pageout_pte_range+0x16b8/0x1920 [ 1093.463579][T13766] madvise_cold_or_pageout_pte_range+0x16dd/0x1920 [ 1093.463618][T13766] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1093.463644][T13766] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1093.463671][T13766] ? __lock_acquire+0x6b5/0x2cf0 [ 1093.463692][T13766] walk_pgd_range+0x1038/0x1cf0 [ 1093.463783][T13766] ? __pfx_walk_pgd_range+0x10/0x10 [ 1093.463811][T13766] ? __lock_acquire+0x6b5/0x2cf0 [ 1093.463831][T13766] __walk_page_range+0x14c/0x710 [ 1093.463864][T13766] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1093.463897][T13766] walk_page_range_vma_unsafe+0x309/0x410 [ 1093.463929][T13766] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 1093.463953][T13766] ? rt_spin_unlock+0x14f/0x200 [ 1093.463978][T13766] ? rt_spin_unlock+0x160/0x200 [ 1093.464002][T13766] ? walk_page_range_vma+0x6b/0x90 [ 1093.464029][T13766] madvise_vma_behavior+0x27f9/0x42d0 [ 1093.464056][T13766] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1093.464079][T13766] ? __lock_acquire+0x6b5/0x2cf0 [ 1093.464108][T13766] ? __lock_acquire+0x6b5/0x2cf0 [ 1093.464127][T13766] ? do_raw_spin_lock+0x12b/0x2f0 [ 1093.464155][T13766] ? __lock_acquire+0x6b5/0x2cf0 [ 1093.464178][T13766] ? __lock_acquire+0x6b5/0x2cf0 [ 1093.464197][T13766] ? __lock_acquire+0x6b5/0x2cf0 [ 1093.464224][T13766] ? unwind_next_frame+0xa5/0x23c0 [ 1093.464265][T13766] ? mas_prev_slot+0xb34/0xbb0 [ 1093.464304][T13766] ? find_vma_prev+0x123/0x1b0 [ 1093.464333][T13766] ? __pfx_find_vma_prev+0x10/0x10 [ 1093.464371][T13766] ? __lock_acquire+0x6b5/0x2cf0 [ 1093.464392][T13766] madvise_walk_vmas+0x573/0xae0 [ 1093.464434][T13766] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1093.464460][T13766] ? blk_start_plug+0x6e/0x1b0 [ 1093.464559][T13766] madvise_do_behavior+0x386/0x540 [ 1093.464585][T13766] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1093.464602][T13766] ? down_read+0x156/0x200 [ 1093.464634][T13766] do_madvise+0x1b3/0x270 [ 1093.464658][T13766] ? __pfx_do_madvise+0x10/0x10 [ 1093.464685][T13766] ? __pfx_ksys_write+0x10/0x10 [ 1093.464717][T13766] __x64_sys_madvise+0xa6/0xc0 [ 1093.464737][T13766] do_syscall_64+0x14d/0xf80 [ 1093.464764][T13766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.464782][T13766] ? clear_bhb_loop+0x40/0x90 [ 1093.464804][T13766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.464822][T13766] RIP: 0033:0x7f07e536c799 [ 1093.464839][T13766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.464855][T13766] RSP: 002b:00007f07e35be028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1093.464875][T13766] RAX: ffffffffffffffda RBX: 00007f07e55e5fa0 RCX: 00007f07e536c799 [ 1093.464888][T13766] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000200000000000 [ 1093.464900][T13766] RBP: 00007f07e35be090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.464913][T13766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.464925][T13766] R13: 00007f07e55e6038 R14: 00007f07e55e5fa0 R15: 00007ffe52266bd8 [ 1093.464954][T13766] [ 1093.570470][T13787] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1820'. [ 1093.930759][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1093.998577][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.293882][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.362205][ T5999] usb 3-1: USB disconnect, device number 41 [ 1094.373389][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1094.385572][ T9] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1094.385658][ T9] usb 2-1: config 0 has no interface number 0 [ 1094.385777][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1094.385849][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1094.385925][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1094.385999][ T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1094.386072][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1094.386139][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1094.386201][ T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1094.386273][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 118, changing to 10 [ 1094.386352][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25956, setting to 1024 [ 1094.386418][ T9] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1094.398568][ T9] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1094.398593][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.398608][ T9] usb 2-1: Product: syz [ 1094.398619][ T9] usb 2-1: Manufacturer: syz [ 1094.398630][ T9] usb 2-1: SerialNumber: syz [ 1094.493274][ T9] usb 2-1: config 0 descriptor?? [ 1094.557529][T13782] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1094.562893][T13782] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1094.621130][ T9] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1094.621153][ T9] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 1096.586668][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.873405][ T48] usb 2-1: USB disconnect, device number 55 [ 1097.157753][T13806] FAULT_INJECTION: forcing a failure. [ 1097.157753][T13806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.157795][T13806] CPU: 1 UID: 0 PID: 13806 Comm: syz.1.1826 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1097.157827][T13806] Tainted: [L]=SOFTLOCKUP [ 1097.157835][T13806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1097.157850][T13806] Call Trace: [ 1097.157859][T13806] [ 1097.157870][T13806] dump_stack_lvl+0xe8/0x150 [ 1097.157911][T13806] should_fail_ex+0x46b/0x600 [ 1097.157945][T13806] _copy_from_user+0x2d/0xb0 [ 1097.157981][T13806] ___sys_sendmsg+0x1c6/0x360 [ 1097.158011][T13806] ? __pfx____sys_sendmsg+0x10/0x10 [ 1097.158072][T13806] ? __fget_files+0x2a/0x420 [ 1097.158101][T13806] ? __fget_files+0x3a6/0x420 [ 1097.158145][T13806] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1097.158170][T13806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1097.158204][T13806] ? __pfx_ksys_write+0x10/0x10 [ 1097.158257][T13806] do_syscall_64+0x14d/0xf80 [ 1097.158290][T13806] ? trace_irq_disable+0x3b/0x150 [ 1097.158317][T13806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.158341][T13806] ? clear_bhb_loop+0x40/0x90 [ 1097.158370][T13806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.158395][T13806] RIP: 0033:0x7f2afdf1c799 [ 1097.158417][T13806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1097.158437][T13806] RSP: 002b:00007f2afc16e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1097.158462][T13806] RAX: ffffffffffffffda RBX: 00007f2afe195fa0 RCX: 00007f2afdf1c799 [ 1097.158479][T13806] RDX: 0000000000004890 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1097.158492][T13806] RBP: 00007f2afc16e090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.158506][T13806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.158519][T13806] R13: 00007f2afe196038 R14: 00007f2afe195fa0 R15: 00007ffc26a11468 [ 1097.158553][T13806] [ 1097.280790][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1097.331494][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.430893][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1097.434696][ T9] usb 3-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 1097.434756][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1097.466245][ T9] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1097.466340][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.466403][ T9] usb 3-1: Product: syz [ 1097.466445][ T9] usb 3-1: Manufacturer: syz [ 1097.466488][ T9] usb 3-1: SerialNumber: syz [ 1097.525928][ T9] usb 3-1: config 0 descriptor?? [ 1097.583980][T13811] fuse: Unknown parameter 'use00000000000000000000' [ 1097.652734][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.721075][T13808] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1823'. [ 1097.721107][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1823'. [ 1097.721124][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1823'. [ 1097.721140][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1823'. [ 1097.841435][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1825'. [ 1098.107175][ T5999] usb 3-1: USB disconnect, device number 42 [ 1098.410840][ T48] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1098.490838][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1098.563496][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1098.563530][ T48] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1098.563558][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1098.563582][ T48] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1098.563623][ T48] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1098.563648][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.639379][ T48] usb 2-1: config 0 descriptor?? [ 1098.647586][ T9] usb 4-1: config 11 has too many interfaces: 35, using maximum allowed: 32 [ 1098.647617][ T9] usb 4-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.647638][ T9] usb 4-1: config 11 has 1 interface, different from the descriptor's value: 35 [ 1098.647661][ T9] usb 4-1: config 11 has no interface number 0 [ 1098.647694][ T9] usb 4-1: too many endpoints for config 11 interface 6 altsetting 6: 201, using maximum allowed: 30 [ 1098.647748][ T9] usb 4-1: config 11 interface 6 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 201 [ 1098.647778][ T9] usb 4-1: config 11 interface 6 has no altsetting 0 [ 1098.650956][ T9] usb 4-1: New USB device found, idVendor=2184, idProduct=0036, bcdDevice=68.fd [ 1098.651014][ T9] usb 4-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 1098.651110][ T9] usb 4-1: Product: syz [ 1098.651152][ T9] usb 4-1: Manufacturer: syz [ 1098.651208][ T9] usb 4-1: SerialNumber: syz [ 1098.754632][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.878821][ T48] hdpvr 2-1:0.0: firmware version 0xaf dated vM>@1chY9; [ 1098.878848][ T48] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 1099.038634][ T9] usb 4-1: USB disconnect, device number 40 [ 1099.087087][T13821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.087979][T13821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.472976][ T48] hdpvr 2-1:0.0: Could not setup controls [ 1099.473804][ T48] hdpvr 2-1:0.0: registering videodev failed [ 1099.500803][ T48] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 1099.507987][ T48] usb 2-1: USB disconnect, device number 56 [ 1099.651225][ T5988] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1099.811767][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.826687][T13846] FAULT_INJECTION: forcing a failure. [ 1099.826687][T13846] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.826738][T13846] CPU: 1 UID: 0 PID: 13846 Comm: syz.9.1833 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1099.826771][T13846] Tainted: [L]=SOFTLOCKUP [ 1099.826780][T13846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1099.826794][T13846] Call Trace: [ 1099.826804][T13846] [ 1099.826815][T13846] dump_stack_lvl+0xe8/0x150 [ 1099.826856][T13846] should_fail_ex+0x46b/0x600 [ 1099.826890][T13846] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1099.826920][T13846] should_failslab+0xa8/0x100 [ 1099.826947][T13846] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1099.826975][T13846] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 1099.827012][T13846] ? sock_alloc_inode+0x28/0xc0 [ 1099.827045][T13846] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1099.827075][T13846] sock_alloc_inode+0x28/0xc0 [ 1099.827103][T13846] alloc_inode+0x6a/0x1b0 [ 1099.827134][T13846] do_accept+0x144/0x760 [ 1099.827166][T13846] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1099.827202][T13846] ? __pfx_do_accept+0x10/0x10 [ 1099.827258][T13846] __sys_accept4+0x139/0x230 [ 1099.827296][T13846] ? __pfx___sys_accept4+0x10/0x10 [ 1099.827330][T13846] ? __pfx_ksys_write+0x10/0x10 [ 1099.827381][T13846] __x64_sys_accept4+0x9a/0xb0 [ 1099.827418][T13846] do_syscall_64+0x14d/0xf80 [ 1099.827454][T13846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.827480][T13846] ? clear_bhb_loop+0x40/0x90 [ 1099.827509][T13846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.827535][T13846] RIP: 0033:0x7f8e4859c799 [ 1099.827557][T13846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.827578][T13846] RSP: 002b:00007f8e467ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1099.827603][T13846] RAX: ffffffffffffffda RBX: 00007f8e48816180 RCX: 00007f8e4859c799 [ 1099.827622][T13846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1099.827635][T13846] RBP: 00007f8e467ac090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.827650][T13846] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 1099.827664][T13846] R13: 00007f8e48816218 R14: 00007f8e48816180 R15: 00007ffc420f44c8 [ 1099.827699][T13846] [ 1099.840949][ T5988] usb 3-1: Using ep0 maxpacket: 32 [ 1099.871666][ T5988] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1099.871754][ T5988] usb 3-1: config 0 has no interface number 0 [ 1099.895522][ T5988] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1099.895617][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.895677][ T5988] usb 3-1: Product: syz [ 1099.895719][ T5988] usb 3-1: Manufacturer: syz [ 1099.895754][ T5988] usb 3-1: SerialNumber: syz [ 1100.089398][ T5988] usb 3-1: config 0 descriptor?? [ 1100.209312][ T5988] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1100.209412][ T5988] usb 3-1: selecting invalid altsetting 1 [ 1100.209431][ T5988] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1102.025089][ T5988] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1102.025680][ T5988] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1102.025749][ T5988] usb 3-1: media controller created [ 1102.035604][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.568893][ T5988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1102.640972][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.991801][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.184693][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.485338][ T5988] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1103.485407][ T5988] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1103.485817][ T5988] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1103.766591][ T5988] usb 3-1: USB disconnect, device number 43 [ 1103.864453][T13862] fuse: Unknown parameter 'use00000000000000000000' [ 1103.977889][T13864] ipvlan2: entered promiscuous mode [ 1104.067891][T13867] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1840'. [ 1104.067920][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1840'. [ 1104.067949][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1840'. [ 1104.067970][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1840'. [ 1104.131146][ T6884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.190210][T13864] bridge0: port 3(ipvlan2) entered blocking state [ 1104.190359][T13864] bridge0: port 3(ipvlan2) entered disabled state [ 1104.190922][T13864] ipvlan2: entered allmulticast mode [ 1104.190973][T13864] bridge0: entered allmulticast mode [ 1104.330644][T13864] ipvlan2: left allmulticast mode [ 1104.330819][T13864] bridge0: left allmulticast mode [ 1104.895092][T13881] netlink: 'syz.4.1842': attribute type 8 has an invalid length. [ 1105.023211][ T5877] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1105.417491][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.510863][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 1105.517104][T13880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1842'. [ 1105.546804][ T5877] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.546897][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 183, changing to 11 [ 1105.546928][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1105.546953][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1105.598041][ T5877] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1105.598079][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.598102][ T5877] usb 3-1: Product: syz [ 1105.598118][ T5877] usb 3-1: Manufacturer: syz [ 1105.598134][ T5877] usb 3-1: SerialNumber: syz [ 1105.651411][ T5877] usb 3-1: config 0 descriptor?? [ 1105.718516][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.875663][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 1107.815067][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.601899][ T5884] usb 3-1: USB disconnect, device number 44 [ 1108.640053][ T5877] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1108.771177][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.791434][ T6884] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1108.818583][ T5877] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.818614][ T5877] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1108.819848][ T5877] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1108.819870][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1108.819885][ T5877] usb 4-1: SerialNumber: syz [ 1108.870814][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.955689][ T6884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1108.955716][ T6884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1108.955803][ T6884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1108.955821][ T6884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1108.955851][ T6884] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1108.955869][ T6884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.043367][ T6884] usb 5-1: config 0 descriptor?? [ 1109.294673][ T5877] usb 4-1: 0:2 : does not exist [ 1109.332900][ T6884] hdpvr 5-1:0.0: firmware version 0xaf dated vM>@1chY9; [ 1109.332929][ T6884] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 1109.433266][ T5877] usb 4-1: USB disconnect, device number 41 [ 1109.530286][ T6884] hdpvr 5-1:0.0: device init failed [ 1109.530381][ T6884] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 1109.560490][ T6884] usb 5-1: USB disconnect, device number 82 [ 1109.584755][T13914] fuse: Unknown parameter 'use00000000000000000000' [ 1111.441730][ T5999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.443687][ T9267] udevd[9267]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1112.128553][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.543149][ T6884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.729480][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.120948][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.836588][ T6884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.442309][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.790903][ T5988] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1117.015330][ T5988] usb 3-1: Using ep0 maxpacket: 32 [ 1117.017891][ T5988] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.017952][ T5988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 183, changing to 11 [ 1117.017984][ T5988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1117.018009][ T5988] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1117.063358][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.061775][ T5988] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1118.061812][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.061835][ T5988] usb 3-1: Product: syz [ 1118.061853][ T5988] usb 3-1: Manufacturer: syz [ 1118.061869][ T5988] usb 3-1: SerialNumber: syz [ 1118.445255][T13954] netlink: 256 bytes leftover after parsing attributes in process `syz.9.1863'. [ 1118.445318][T13954] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1863'. [ 1119.472720][ T6884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.478439][ T5988] usb 3-1: config 0 descriptor?? [ 1120.466165][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.788605][ T5988] usb 3-1: can't set config #0, error -71 [ 1120.861526][ T5988] usb 3-1: USB disconnect, device number 45 [ 1120.869988][ T6884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.211992][T13962] sch_tbf: burst 34 is lower than device lo mtu (65550) ! [ 1121.455786][T13965] fuse: Unknown parameter 'user_i00000000000000000000' [ 1122.750117][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.829802][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.829875][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.333185][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.058540][ T6884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.701428][ T6884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.720844][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.470165][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.840815][ T6884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.007765][T13990] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1873'. [ 1127.400171][T14008] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1875'. [ 1127.400232][T14008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1875'. [ 1127.611333][ T5989] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1127.784557][ T5989] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1127.784604][ T5989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.815552][ T5989] usb 3-1: config 0 descriptor?? [ 1128.024370][ T6884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.047671][T14018] fuse: Unknown parameter 'user_i00000000000000000000' [ 1128.287277][ T5989] hackrf 3-1:0.0: Board ID: 00 [ 1128.287302][ T5989] hackrf 3-1:0.0: Firmware version: [ 1128.388865][ T5989] hackrf 3-1:0.0: Registered as swradio24 [ 1128.388896][ T5989] videodev: could not get a free minor [ 1128.388910][ T5989] hackrf 3-1:0.0: Failed to register as video device (-23) [ 1128.419756][ T5989] hackrf 3-1:0.0: probe with driver hackrf failed with error -23 [ 1128.577759][ T5989] usb 3-1: USB disconnect, device number 46 [ 1129.094812][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.371893][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.377661][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.496303][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.511480][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.611166][T14035] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1884'. [ 1130.761356][T14046] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1887'. [ 1131.133309][T14061] netlink: 256 bytes leftover after parsing attributes in process `syz.9.1891'. [ 1131.133372][T14061] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1891'. [ 1131.360984][ T5989] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1133.074931][ T5988] net_ratelimit: 2 callbacks suppressed [ 1133.074955][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.081327][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.540809][ T5989] usb 4-1: Using ep0 maxpacket: 16 [ 1133.543882][ T5989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.543920][ T5989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.543962][ T5989] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1133.543988][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.609787][ T5989] usb 4-1: config 0 descriptor?? [ 1133.783520][T14071] fuse: Unknown parameter 'user_i00000000000000000000' [ 1134.005236][ T5989] usbhid 4-1:0.0: can't add hid device: -71 [ 1134.005372][ T5989] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1134.043159][ T5989] usb 4-1: USB disconnect, device number 42 [ 1134.131113][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.356576][T14084] tmpfs: Unknown parameter 'nr_inodes' [ 1134.793313][T14077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.793640][T14077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.857034][T12500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.895128][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.895892][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.181109][T14092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.998589][T14077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1136.091333][T14077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1136.243772][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.299943][ T9421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.609046][ T1900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.866257][T14134] fuse: Unknown parameter 'user_id00000000000000000000' [ 1138.230833][ T143] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.273316][ T143] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.273496][ T143] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.273538][ T143] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.456282][T14149] tmpfs: Unknown parameter 'nr_inodes' [ 1138.490804][ T9117] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1138.891492][T14150] netlink: 256 bytes leftover after parsing attributes in process `syz.9.1909'. [ 1138.891556][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1909'. [ 1139.351113][T14083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.445178][ T9117] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 1139.445245][ T9117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.445275][ T9117] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 1139.445320][ T9117] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 1139.445345][ T9117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.509411][ T9117] usb 5-1: config 0 descriptor?? [ 1139.520403][ T8683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.174978][ T9117] usbhid 5-1:0.0: can't add hid device: -71 [ 1140.175113][ T9117] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1140.217175][ T9117] usb 5-1: USB disconnect, device number 83 [ 1140.391098][T14083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.391301][T14104] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1140.561250][T14104] usb 3-1: Using ep0 maxpacket: 8 [ 1140.563790][T14104] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1140.565682][T14104] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 1140.565713][T14104] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1140.565736][T14104] usb 3-1: config 17 has no interface number 0 [ 1140.565782][T14104] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 97, changing to 7 [ 1140.565811][T14104] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 1140.565841][T14104] usb 3-1: config 17 interface 8 has no altsetting 0 [ 1140.652108][T14104] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1140.652143][T14104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.652166][T14104] usb 3-1: Product: syz [ 1140.652182][T14104] usb 3-1: Manufacturer: syz [ 1140.652199][T14104] usb 3-1: SerialNumber: syz [ 1140.705216][T14172] fuse: Unknown parameter 'user_id00000000000000000000' [ 1141.220456][T14104] usb 3-1: selecting invalid altsetting 0 [ 1141.220533][T14104] usb 3-1: 8:6 : no UAC_FORMAT_TYPE desc [ 1141.220553][T14104] usb 3-1: selecting invalid altsetting 0 [ 1141.368557][T14191] FAULT_INJECTION: forcing a failure. [ 1141.368557][T14191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1141.368587][T14191] CPU: 0 UID: 0 PID: 14191 Comm: syz.1.1919 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1141.368610][T14191] Tainted: [L]=SOFTLOCKUP [ 1141.368616][T14191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1141.368629][T14191] Call Trace: [ 1141.368635][T14191] [ 1141.368642][T14191] dump_stack_lvl+0xe8/0x150 [ 1141.368673][T14191] should_fail_ex+0x46b/0x600 [ 1141.368698][T14191] _copy_to_user+0x31/0xb0 [ 1141.368725][T14191] simple_read_from_buffer+0xe1/0x170 [ 1141.368749][T14191] proc_fail_nth_read+0x1be/0x230 [ 1141.368772][T14191] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1141.368795][T14191] ? rw_verify_area+0x2ac/0x4e0 [ 1141.368818][T14191] ? tun_chr_write_iter+0xe6/0x200 [ 1141.368860][T14191] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1141.368881][T14191] vfs_read+0x212/0xa80 [ 1141.368911][T14191] ? __pfx_vfs_read+0x10/0x10 [ 1141.368937][T14191] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1141.368965][T14191] ? lockdep_hardirqs_on+0x7a/0x110 [ 1141.368989][T14191] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1141.369014][T14191] ? mutex_lock_nested+0x152/0x1d0 [ 1141.369033][T14191] ? fdget_pos+0x252/0x320 [ 1141.369061][T14191] ksys_read+0x156/0x270 [ 1141.369086][T14191] ? __pfx_ksys_read+0x10/0x10 [ 1141.369119][T14191] do_syscall_64+0x14d/0xf80 [ 1141.369143][T14191] ? trace_irq_disable+0x3b/0x150 [ 1141.369162][T14191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.369180][T14191] ? clear_bhb_loop+0x40/0x90 [ 1141.369200][T14191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.369216][T14191] RIP: 0033:0x7f2afdedcfce [ 1141.369232][T14191] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1141.369246][T14191] RSP: 002b:00007f2afc12bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1141.369264][T14191] RAX: ffffffffffffffda RBX: 00007f2afc12c6c0 RCX: 00007f2afdedcfce [ 1141.369276][T14191] RDX: 000000000000000f RSI: 00007f2afc12c0a0 RDI: 0000000000000006 [ 1141.369287][T14191] RBP: 00007f2afc12c090 R08: 0000000000000000 R09: 0000000000000000 [ 1141.369298][T14191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1141.369308][T14191] R13: 00007f2afe196218 R14: 00007f2afe196180 R15: 00007ffc26a11468 [ 1141.369333][T14191] [ 1141.608864][T14196] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1918'. [ 1141.608942][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1918'. [ 1141.608984][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1918'. [ 1141.609025][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1918'. [ 1141.715483][T14083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.099605][T14104] usb 3-1: USB disconnect, device number 47 [ 1142.531082][T12222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.641819][ T9267] udevd[9267]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1142.771555][T14104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.540148][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.546635][T14104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.419062][T14226] FAULT_INJECTION: forcing a failure. [ 1145.419062][T14226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.419112][T14226] CPU: 0 UID: 0 PID: 14226 Comm: syz.2.1928 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1145.419144][T14226] Tainted: [L]=SOFTLOCKUP [ 1145.419152][T14226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1145.419165][T14226] Call Trace: [ 1145.419175][T14226] [ 1145.419185][T14226] dump_stack_lvl+0xe8/0x150 [ 1145.419226][T14226] should_fail_ex+0x46b/0x600 [ 1145.419261][T14226] _copy_from_user+0x2d/0xb0 [ 1145.419296][T14226] __sys_bpf+0x229/0x950 [ 1145.419328][T14226] ? __pfx___sys_bpf+0x10/0x10 [ 1145.419358][T14226] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1145.419405][T14226] ? ksys_write+0x248/0x270 [ 1145.419443][T14226] ? __pfx_ksys_write+0x10/0x10 [ 1145.419486][T14226] __x64_sys_bpf+0x7c/0x90 [ 1145.419513][T14226] do_syscall_64+0x14d/0xf80 [ 1145.419547][T14226] ? trace_irq_disable+0x3b/0x150 [ 1145.419574][T14226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.419599][T14226] ? clear_bhb_loop+0x40/0x90 [ 1145.419634][T14226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.419658][T14226] RIP: 0033:0x7f07e536c799 [ 1145.419679][T14226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.419700][T14226] RSP: 002b:00007f07e35be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1145.419725][T14226] RAX: ffffffffffffffda RBX: 00007f07e55e5fa0 RCX: 00007f07e536c799 [ 1145.419742][T14226] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 1145.419757][T14226] RBP: 00007f07e35be090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.419770][T14226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.419783][T14226] R13: 00007f07e55e6038 R14: 00007f07e55e5fa0 R15: 00007ffe52266bd8 [ 1145.419818][T14226] [ 1145.526835][T14228] fuse: Unknown parameter 'user_id00000000000000000000' [ 1145.573930][ T9117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.663668][T14090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.792870][T14235] FAULT_INJECTION: forcing a failure. [ 1145.792870][T14235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.792912][T14235] CPU: 1 UID: 0 PID: 14235 Comm: syz.2.1930 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1145.792945][T14235] Tainted: [L]=SOFTLOCKUP [ 1145.792953][T14235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1145.792967][T14235] Call Trace: [ 1145.792977][T14235] [ 1145.792987][T14235] dump_stack_lvl+0xe8/0x150 [ 1145.793028][T14235] should_fail_ex+0x46b/0x600 [ 1145.793064][T14235] _copy_to_user+0x31/0xb0 [ 1145.793111][T14235] simple_read_from_buffer+0xe1/0x170 [ 1145.793146][T14235] proc_fail_nth_read+0x1be/0x230 [ 1145.793178][T14235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1145.793211][T14235] ? rw_verify_area+0x2ac/0x4e0 [ 1145.793245][T14235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1145.793276][T14235] vfs_read+0x212/0xa80 [ 1145.793320][T14235] ? __pfx_vfs_read+0x10/0x10 [ 1145.793358][T14235] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1145.793395][T14235] ? lockdep_hardirqs_on+0x7a/0x110 [ 1145.793429][T14235] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1145.793465][T14235] ? mutex_lock_nested+0x152/0x1d0 [ 1145.793491][T14235] ? fdget_pos+0x252/0x320 [ 1145.793530][T14235] ksys_read+0x156/0x270 [ 1145.793567][T14235] ? __pfx_ksys_read+0x10/0x10 [ 1145.793612][T14235] do_syscall_64+0x14d/0xf80 [ 1145.793645][T14235] ? trace_irq_disable+0x3b/0x150 [ 1145.793673][T14235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.793698][T14235] ? clear_bhb_loop+0x40/0x90 [ 1145.793727][T14235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.793751][T14235] RIP: 0033:0x7f07e532cfce [ 1145.793773][T14235] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1145.793792][T14235] RSP: 002b:00007f07e35bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1145.793816][T14235] RAX: ffffffffffffffda RBX: 00007f07e35be6c0 RCX: 00007f07e532cfce [ 1145.793834][T14235] RDX: 000000000000000f RSI: 00007f07e35be0a0 RDI: 0000000000000003 [ 1145.793848][T14235] RBP: 00007f07e35be090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.793862][T14235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.793875][T14235] R13: 00007f07e55e6038 R14: 00007f07e55e5fa0 R15: 00007ffe52266bd8 [ 1145.793911][T14235] [ 1146.272698][T14243] FAULT_INJECTION: forcing a failure. [ 1146.272698][T14243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1146.272739][T14243] CPU: 1 UID: 0 PID: 14243 Comm: syz.9.1934 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1146.272772][T14243] Tainted: [L]=SOFTLOCKUP [ 1146.272781][T14243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1146.272796][T14243] Call Trace: [ 1146.272806][T14243] [ 1146.272816][T14243] dump_stack_lvl+0xe8/0x150 [ 1146.272856][T14243] should_fail_ex+0x46b/0x600 [ 1146.272890][T14243] _copy_from_user+0x2d/0xb0 [ 1146.272926][T14243] ___sys_sendmsg+0x1c6/0x360 [ 1146.272957][T14243] ? __pfx____sys_sendmsg+0x10/0x10 [ 1146.273018][T14243] ? __fget_files+0x2a/0x420 [ 1146.273045][T14243] ? __fget_files+0x3a6/0x420 [ 1146.273083][T14243] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1146.273112][T14243] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1146.273146][T14243] ? __pfx_ksys_write+0x10/0x10 [ 1146.273192][T14243] do_syscall_64+0x14d/0xf80 [ 1146.273225][T14243] ? trace_irq_disable+0x3b/0x150 [ 1146.273251][T14243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.273275][T14243] ? clear_bhb_loop+0x40/0x90 [ 1146.273302][T14243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.273325][T14243] RIP: 0033:0x7f8e4859c799 [ 1146.273346][T14243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.273365][T14243] RSP: 002b:00007f8e467ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1146.273389][T14243] RAX: ffffffffffffffda RBX: 00007f8e48815fa0 RCX: 00007f8e4859c799 [ 1146.273405][T14243] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1146.273419][T14243] RBP: 00007f8e467ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1146.273433][T14243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1146.273446][T14243] R13: 00007f8e48816038 R14: 00007f8e48815fa0 R15: 00007ffc420f44c8 [ 1146.273481][T14243] [ 1146.690954][T14090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.773310][T14256] netlink: 'syz.9.1936': attribute type 8 has an invalid length. [ 1146.798884][T14241] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1932'. [ 1146.798912][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1932'. [ 1146.798929][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1932'. [ 1146.798944][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1932'. [ 1147.600935][T12222] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1147.635232][T14262] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1939'. [ 1147.741631][T14104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.750812][T12222] usb 2-1: Using ep0 maxpacket: 32 [ 1147.775076][T12222] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1147.775113][T12222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.775137][T12222] usb 2-1: Product: syz [ 1147.775152][T12222] usb 2-1: Manufacturer: syz [ 1147.775168][T12222] usb 2-1: SerialNumber: syz [ 1147.876208][T12222] usb 2-1: config 0 descriptor?? [ 1147.887880][T14275] fuse: Bad value for 'fd' [ 1147.920926][ T8683] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1148.076309][ T8683] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.076378][ T8683] usb 10-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1148.076405][ T8683] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.125959][T12222] snd-usb-6fire 2-1:0.0: unable to receive device firmware state. [ 1148.126008][T12222] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 1148.204672][T12222] usb 2-1: USB disconnect, device number 57 [ 1148.234643][ T8683] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1148.291034][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1148.452200][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1148.455123][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.455185][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 183, changing to 11 [ 1148.455215][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1148.455239][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1148.458340][ T10] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1148.458385][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.458409][ T10] usb 5-1: Product: syz [ 1148.458426][ T10] usb 5-1: Manufacturer: syz [ 1148.458442][ T10] usb 5-1: SerialNumber: syz [ 1148.545404][T14292] FAULT_INJECTION: forcing a failure. [ 1148.545404][T14292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1148.545444][T14292] CPU: 0 UID: 0 PID: 14292 Comm: syz.3.1946 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1148.545475][T14292] Tainted: [L]=SOFTLOCKUP [ 1148.545485][T14292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1148.545499][T14292] Call Trace: [ 1148.545508][T14292] [ 1148.545519][T14292] dump_stack_lvl+0xe8/0x150 [ 1148.545559][T14292] should_fail_ex+0x46b/0x600 [ 1148.545594][T14292] _copy_from_user+0x2d/0xb0 [ 1148.545631][T14292] ___sys_sendmsg+0x1c6/0x360 [ 1148.545662][T14292] ? __pfx____sys_sendmsg+0x10/0x10 [ 1148.545723][T14292] ? __fget_files+0x2a/0x420 [ 1148.545753][T14292] ? __fget_files+0x3a6/0x420 [ 1148.545793][T14292] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1148.545830][T14292] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1148.545864][T14292] ? __pfx_ksys_write+0x10/0x10 [ 1148.545913][T14292] do_syscall_64+0x14d/0xf80 [ 1148.545948][T14292] ? trace_irq_disable+0x3b/0x150 [ 1148.545974][T14292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.545998][T14292] ? clear_bhb_loop+0x40/0x90 [ 1148.546027][T14292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.546051][T14292] RIP: 0033:0x7f999b7dc799 [ 1148.546073][T14292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.546093][T14292] RSP: 002b:00007f9999a0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1148.546118][T14292] RAX: ffffffffffffffda RBX: 00007f999ba56090 RCX: 00007f999b7dc799 [ 1148.546135][T14292] RDX: 0000000000000810 RSI: 00002000000001c0 RDI: 0000000000000006 [ 1148.546149][T14292] RBP: 00007f9999a0d090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.546163][T14292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.546176][T14292] R13: 00007f999ba56128 R14: 00007f999ba56090 R15: 00007fff52e06778 [ 1148.546211][T14292] [ 1148.651020][ T10] usb 5-1: config 0 descriptor?? [ 1148.771029][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.797264][T14090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.976491][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1944'. [ 1149.121074][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1149.276841][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.276960][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1149.276987][ T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1149.277027][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1149.277112][ T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1149.358248][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1149.358351][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.358378][ T10] usb 3-1: Product: syz [ 1149.358540][ T10] usb 3-1: Manufacturer: syz [ 1149.358558][ T10] usb 3-1: SerialNumber: syz [ 1149.411007][T14301] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1948'. [ 1149.411069][T14301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1948'. [ 1149.620379][T14104] usb 5-1: USB disconnect, device number 84 [ 1149.761352][ T8683] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 1149.761379][ T8683] stv0680 10-1:4.0: STV(e): camera ping failed!! [ 1149.761900][ T8683] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1149.761920][ T8683] stv0680 10-1:4.0: last error: 0, command = 0x0 [ 1149.811063][T14090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.985898][T14312] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1952'. [ 1149.985929][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'. [ 1150.353697][T14323] fuse: Bad value for 'fd' [ 1150.386311][T14295] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 1150.736528][T14330] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 1150.827189][ T10] cdc_ncm 3-1:1.0: bind() failure [ 1150.854570][T14336] netlink: 'syz.1.1956': attribute type 4 has an invalid length. [ 1150.854623][T14336] netlink: 'syz.1.1956': attribute type 1 has an invalid length. [ 1150.891597][ T10] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1150.895960][ T10] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1150.923818][T14083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.927165][ T10] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1151.044167][ T10] usb 3-1: USB disconnect, device number 48 [ 1151.089418][T14104] usb 10-1: USB disconnect, device number 32 [ 1151.634436][T14090] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1152.400168][ T8683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.418441][T14091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.448299][T14090] usb 5-1: Using ep0 maxpacket: 32 [ 1152.541825][T14090] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1152.541991][T14090] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1152.542101][T14090] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1153.092342][T14090] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1153.092475][T14090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.092623][T14090] usb 5-1: Product: syz [ 1153.092705][T14090] usb 5-1: Manufacturer: syz [ 1153.092791][T14090] usb 5-1: SerialNumber: syz [ 1153.163573][T14090] usb 5-1: config 0 descriptor?? [ 1153.600478][T14104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.789290][T14354] __nla_validate_parse: 3 callbacks suppressed [ 1153.789313][T14354] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1962'. [ 1153.789371][T14354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1962'. [ 1154.051181][ T8683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.223855][T14090] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1154.611433][T14091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.676501][T14360] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 1155.261652][T14090] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT) [ 1155.262186][T14090] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 1155.832069][T14090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.850810][ T8683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.139892][T14374] fuse: Bad value for 'fd' [ 1156.254345][T14372] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1966'. [ 1156.254375][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'. [ 1156.254391][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'. [ 1156.254407][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'. [ 1157.021194][T14091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.053399][T14090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.307218][T14396] 9p: Bad value for 'wfdno' [ 1158.800780][T14091] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1158.827008][T14412] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1978'. [ 1158.827052][T14412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1978'. [ 1158.932084][T12222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.932084][T14091] usb 4-1: device descriptor read/64, error -71 [ 1158.938616][T14090] usb 5-1: USB disconnect, device number 85 [ 1159.091929][T14104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.130151][T14417] netlink: 'syz.9.1979': attribute type 6 has an invalid length. [ 1159.170802][T14091] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1159.305721][T14091] usb 4-1: device descriptor read/64, error -71 [ 1159.423040][T14091] usb usb4-port1: attempt power cycle [ 1159.803983][ T8683] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1159.813334][T14091] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1159.832279][T14091] usb 4-1: device descriptor read/8, error -71 [ 1159.966737][ T8683] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1159.966788][ T8683] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1159.966831][ T8683] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1159.970038][ T8683] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1159.970075][ T8683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1159.970097][ T8683] usb 3-1: SerialNumber: syz [ 1159.990859][T14090] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1160.063565][T14441] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1984'. [ 1160.063585][T14441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 1160.063596][T14441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 1160.063606][T14441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 1160.071184][T14091] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1160.121287][T14091] usb 4-1: device descriptor read/8, error -71 [ 1160.131004][T14104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.141253][T14090] usb 5-1: Using ep0 maxpacket: 32 [ 1160.155066][T14090] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.155104][T14090] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.158642][T14090] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1160.158676][T14090] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1160.158700][T14090] usb 5-1: Product: syz [ 1160.158715][T14090] usb 5-1: Manufacturer: syz [ 1160.191123][T12222] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1160.233696][T14091] usb usb4-port1: unable to enumerate USB device [ 1160.248057][T14090] hub 5-1:4.0: USB hub found [ 1160.343660][T12222] usb 10-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1160.343696][T12222] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1160.347046][T12222] usb 10-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1160.347136][T12222] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.347160][T12222] usb 10-1: Product: syz [ 1160.347176][T12222] usb 10-1: Manufacturer: syz [ 1160.347191][T12222] usb 10-1: SerialNumber: syz [ 1160.456528][T12222] usb 10-1: config 0 descriptor?? [ 1160.503264][T14090] hub 5-1:4.0: 2 ports detected [ 1160.510029][T12222] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1160.641979][ T8683] usb 3-1: USB disconnect, device number 49 [ 1160.716463][T12222] gspca_sunplus: reg_r err -71 [ 1160.716565][T12222] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1160.800099][T12222] usb 10-1: USB disconnect, device number 33 [ 1161.054733][ T37] audit: type=1326 audit(1773600384.224:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14455 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afdf1c799 code=0x7ffc0000 [ 1161.058030][ T37] audit: type=1326 audit(1773600384.224:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14455 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afdf1c799 code=0x7ffc0000 [ 1161.066053][ T37] audit: type=1326 audit(1773600384.234:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14455 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afdf1c799 code=0x7ffc0000 [ 1161.066952][ T37] audit: type=1326 audit(1773600384.234:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14455 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afdf1c799 code=0x7ffc0000 [ 1161.067033][ T37] audit: type=1326 audit(1773600384.234:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14455 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f2afdf1c799 code=0x7ffc0000 [ 1161.074114][ T37] audit: type=1326 audit(1773600384.244:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14455 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afdf1c799 code=0x7ffc0000 [ 1161.084988][ T37] audit: type=1326 audit(1773600384.254:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14455 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2afdf1c799 code=0x7ffc0000 [ 1161.085076][ T37] audit: type=1326 audit(1773600384.254:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14455 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afdf1c799 code=0x7ffc0000 [ 1161.085502][ T37] audit: type=1326 audit(1773600384.254:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14455 comm="syz.1.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2afdf1c799 code=0x7ffc0000 [ 1161.177198][T14091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.345865][T14438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.346436][T14438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.392687][T14438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.411254][T14438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.482460][T14090] usb 5-1: USB disconnect, device number 86 [ 1163.020780][T12222] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1163.090809][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.123336][T14090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.292633][T12222] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.292697][T12222] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1163.292727][T12222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.380974][T12222] usb 3-1: config 0 descriptor?? [ 1163.388182][T12222] pwc: Askey VC010 type 2 USB webcam detected. [ 1163.593943][T14485] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1992'. [ 1163.594003][T14485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1992'. [ 1163.678749][ T8683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.804870][T12222] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1163.813316][T12222] pwc: recv_control_msg error -32 req 02 val 2700 [ 1163.815840][T12222] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1163.817056][T12222] pwc: recv_control_msg error -32 req 04 val 1000 [ 1164.029437][T12222] pwc: recv_control_msg error -32 req 04 val 1400 [ 1164.038750][T12222] pwc: recv_control_msg error -32 req 02 val 2000 [ 1164.040120][T12222] pwc: recv_control_msg error -32 req 02 val 2100 [ 1164.131340][T14090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.281077][ T8683] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1164.379804][T14498] FAULT_INJECTION: forcing a failure. [ 1164.379804][T14498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1164.380154][T14498] CPU: 0 UID: 0 PID: 14498 Comm: syz.9.1996 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1164.380188][T14498] Tainted: [L]=SOFTLOCKUP [ 1164.380198][T14498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1164.380212][T14498] Call Trace: [ 1164.380225][T14498] [ 1164.380237][T14498] dump_stack_lvl+0xe8/0x150 [ 1164.380271][T14498] should_fail_ex+0x46b/0x600 [ 1164.380299][T14498] _copy_from_user+0x2d/0xb0 [ 1164.380327][T14498] __sys_bpf+0x229/0x950 [ 1164.380352][T14498] ? __pfx___sys_bpf+0x10/0x10 [ 1164.380400][T14498] __x64_sys_bpf+0x7c/0x90 [ 1164.380421][T14498] do_syscall_64+0x14d/0xf80 [ 1164.380466][T14498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.380486][T14498] ? clear_bhb_loop+0x40/0x90 [ 1164.380510][T14498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.380530][T14498] RIP: 0033:0x7f8e4859c799 [ 1164.380551][T14498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.380580][T14498] RSP: 002b:00007f8e467cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1164.380600][T14498] RAX: ffffffffffffffda RBX: 00007f8e48816090 RCX: 00007f8e4859c799 [ 1164.380619][T14498] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1164.380632][T14498] RBP: 00007f8e467cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.380646][T14498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.380659][T14498] R13: 00007f8e48816128 R14: 00007f8e48816090 R15: 00007ffc420f44c8 [ 1164.380687][T14498] [ 1164.485318][T12222] pwc: recv_control_msg error -71 req 02 val 2500 [ 1164.768549][T12222] pwc: recv_control_msg error -71 req 02 val 2400 [ 1164.777241][T12222] pwc: recv_control_msg error -71 req 02 val 2600 [ 1164.792872][T12222] pwc: recv_control_msg error -71 req 02 val 2900 [ 1164.796764][T12222] pwc: recv_control_msg error -71 req 02 val 2800 [ 1164.797865][T12222] pwc: recv_control_msg error -71 req 04 val 1100 [ 1164.798601][T12222] pwc: recv_control_msg error -71 req 04 val 1200 [ 1164.881216][T12222] pwc: Registered as video103. [ 1164.904767][T12222] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input78 [ 1164.946603][ T8683] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1164.946637][ T8683] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1164.980993][ T8683] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1164.981029][ T8683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.981052][ T8683] usb 5-1: Product: syz [ 1164.981068][ T8683] usb 5-1: Manufacturer: syz [ 1164.981085][ T8683] usb 5-1: SerialNumber: syz [ 1165.071951][T12222] usb 3-1: USB disconnect, device number 50 [ 1165.081387][ T8683] usb 5-1: config 0 descriptor?? [ 1165.116949][ T8683] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1165.174667][T14090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.834994][ T8683] gspca_sunplus: reg_r err -110 [ 1165.840745][ T8683] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 1166.135205][ T8683] usb 5-1: USB disconnect, device number 87 [ 1166.155159][ T9117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.215024][T14092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.368868][T14092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.521121][T14523] random: crng reseeded on system resumption [ 1167.892055][T12222] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1168.042101][T12222] usb 10-1: Using ep0 maxpacket: 16 [ 1168.050933][T12222] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1168.050987][T12222] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 1168.051014][T12222] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1168.063821][T12222] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1168.063919][T12222] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.063974][T12222] usb 10-1: Product: ⑪⿉켵⦯䳌╨竀ន쳇࿝䚪턳㈇⫝㿦౛㽴楒즒쎍㓘袻냁∂袏빑ᕡನ粆峗Քퟺꋃ嗡泯㟁⌏௄綥晿䪐쿌둀팭沇曎쩏䎱ﱯ跺뼄鱘蓗픂⼭ꥤ墋剼ઔ㣐ኝ嬱鷳ꯥ㔁クꄅ᜛濰ˊ舀ൟ钴㐊襚닔徊鷵窇怱於旴Ʒ榓䑔⃃ [ 1168.064066][T12222] usb 10-1: Manufacturer: 舗ꏩ摝殅ਞ뫭颏䨕蒑둈圆ퟡ苮诏젓䚅㟓辶堎袔ʝᑎꮙ팕ᖚ際ব凪跲쀙꒘헚௙᥽喜᮶繩韻녩꾦找锪亠鲚俙뿽䞻쒷뮆✬凂鏌蒕漩廬⩔쟽௵ꧯ翑ٓ狠㞔ඟ楑옜វ⟄믧㚎팬㍕ [ 1168.064149][T12222] usb 10-1: SerialNumber: syz [ 1168.166987][T14529] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1168.167120][T14529] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1168.300896][T14537] tipc: Started in network mode [ 1168.300964][T14537] tipc: Node identity 8ac42c4163a9, cluster identity 4711 [ 1168.434986][T14537] tipc: Enabled bearer , priority 0 [ 1168.584763][T14537] fuse: Unknown parameter 'fd0x0000000000000003ֹ~F' [ 1168.637499][T14090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.661650][T12222] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 1168.690452][T12222] usb 10-1: USB disconnect, device number 34 [ 1169.789749][T14090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.939137][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035f50c00: rx timeout, send abort [ 1169.957750][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888035f50c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1170.773849][T14536] tipc: Disabling bearer [ 1170.831254][ T8683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.851325][T14092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.554918][ T9117] tipc: Node number set to 3916246081 [ 1171.823631][T14576] FAULT_INJECTION: forcing a failure. [ 1171.823631][T14576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1171.823674][T14576] CPU: 1 UID: 0 PID: 14576 Comm: syz.4.2015 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1171.823704][T14576] Tainted: [L]=SOFTLOCKUP [ 1171.823713][T14576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1171.823727][T14576] Call Trace: [ 1171.823737][T14576] [ 1171.823747][T14576] dump_stack_lvl+0xe8/0x150 [ 1171.823786][T14576] should_fail_ex+0x46b/0x600 [ 1171.823820][T14576] _copy_from_user+0x2d/0xb0 [ 1171.823855][T14576] ___sys_sendmsg+0x1c6/0x360 [ 1171.823885][T14576] ? __pfx____sys_sendmsg+0x10/0x10 [ 1171.823941][T14576] ? __fget_files+0x2a/0x420 [ 1171.823971][T14576] ? __fget_files+0x3a6/0x420 [ 1171.824034][T14576] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1171.824061][T14576] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1171.824095][T14576] ? __pfx_ksys_write+0x10/0x10 [ 1171.824142][T14576] do_syscall_64+0x14d/0xf80 [ 1171.824175][T14576] ? trace_irq_disable+0x3b/0x150 [ 1171.824202][T14576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.824226][T14576] ? clear_bhb_loop+0x40/0x90 [ 1171.824255][T14576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.824279][T14576] RIP: 0033:0x7fb4ca67c799 [ 1171.824300][T14576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1171.824320][T14576] RSP: 002b:00007fb4c88ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1171.824344][T14576] RAX: ffffffffffffffda RBX: 00007fb4ca8f5fa0 RCX: 00007fb4ca67c799 [ 1171.824360][T14576] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 1171.824374][T14576] RBP: 00007fb4c88ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.824389][T14576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.824402][T14576] R13: 00007fb4ca8f6038 R14: 00007fb4ca8f5fa0 R15: 00007fff45cd3f88 [ 1171.824436][T14576] [ 1171.898850][T14102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.011215][T14092] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1172.182974][T14092] usb 10-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1172.183007][T14092] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1172.185272][T14092] usb 10-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1172.185296][T14092] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.185312][T14092] usb 10-1: Product: syz [ 1172.185323][T14092] usb 10-1: Manufacturer: syz [ 1172.185342][T14092] usb 10-1: SerialNumber: syz [ 1172.189099][T14092] usb 10-1: config 0 descriptor?? [ 1172.265362][T14092] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1172.402531][T14092] gspca_sunplus: reg_r err -71 [ 1172.402633][T14092] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1172.426614][T14092] usb 10-1: USB disconnect, device number 35 [ 1172.440033][ T9117] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1172.931400][T14092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.040036][ T9117] usb 3-1: Using ep0 maxpacket: 32 [ 1173.125224][T14596] FAULT_INJECTION: forcing a failure. [ 1173.125224][T14596] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.125294][T14596] CPU: 1 UID: 0 PID: 14596 Comm: syz.4.2020 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1173.125326][T14596] Tainted: [L]=SOFTLOCKUP [ 1173.125335][T14596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1173.125349][T14596] Call Trace: [ 1173.125360][T14596] [ 1173.125371][T14596] dump_stack_lvl+0xe8/0x150 [ 1173.125414][T14596] should_fail_ex+0x46b/0x600 [ 1173.125450][T14596] should_failslab+0xa8/0x100 [ 1173.125479][T14596] __kmalloc_noprof+0xdf/0x7b0 [ 1173.125515][T14596] ? kfree+0x4d/0x6c0 [ 1173.125547][T14596] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1173.125583][T14596] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1173.125611][T14596] ? tomoyo_path_number_perm+0x219/0x630 [ 1173.125657][T14596] ? tomoyo_path_number_perm+0x219/0x630 [ 1173.125691][T14596] tomoyo_path_number_perm+0x246/0x630 [ 1173.125729][T14596] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1173.125822][T14596] security_file_ioctl+0xc3/0x2a0 [ 1173.125873][T14596] __se_sys_ioctl+0x47/0x170 [ 1173.125915][T14596] do_syscall_64+0x14d/0xf80 [ 1173.125951][T14596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.125977][T14596] ? clear_bhb_loop+0x40/0x90 [ 1173.126006][T14596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.126031][T14596] RIP: 0033:0x7fb4ca67c799 [ 1173.126054][T14596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.126076][T14596] RSP: 002b:00007fb4c88ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1173.126102][T14596] RAX: ffffffffffffffda RBX: 00007fb4ca8f6090 RCX: 00007fb4ca67c799 [ 1173.126118][T14596] RDX: 0000200000000200 RSI: 0000000040045613 RDI: 0000000000000009 [ 1173.126134][T14596] RBP: 00007fb4c88ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.126149][T14596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.126163][T14596] R13: 00007fb4ca8f6128 R14: 00007fb4ca8f6090 R15: 00007fff45cd3f88 [ 1173.126199][T14596] [ 1173.126262][T14596] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1173.227845][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 1173.229285][T14597] netlink: 'syz.3.2017': attribute type 8 has an invalid length. [ 1174.135294][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802945fc00: rx timeout, send abort [ 1174.169936][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802945fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1174.531988][T14090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.786589][T14600] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2016'. [ 1174.787092][T14600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2016'. [ 1174.793173][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.802030][T12222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.073201][T14608] FAULT_INJECTION: forcing a failure. [ 1175.073201][T14608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1175.073244][T14608] CPU: 1 UID: 0 PID: 14608 Comm: syz.3.2022 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1175.073276][T14608] Tainted: [L]=SOFTLOCKUP [ 1175.073285][T14608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1175.073299][T14608] Call Trace: [ 1175.073308][T14608] [ 1175.073319][T14608] dump_stack_lvl+0xe8/0x150 [ 1175.073359][T14608] should_fail_ex+0x46b/0x600 [ 1175.073393][T14608] _copy_from_user+0x2d/0xb0 [ 1175.073427][T14608] ___sys_sendmsg+0x1c6/0x360 [ 1175.073457][T14608] ? __pfx____sys_sendmsg+0x10/0x10 [ 1175.073522][T14608] ? __fget_files+0x2a/0x420 [ 1175.073552][T14608] ? __fget_files+0x3a6/0x420 [ 1175.073592][T14608] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1175.073620][T14608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1175.073655][T14608] ? __pfx_ksys_write+0x10/0x10 [ 1175.073702][T14608] do_syscall_64+0x14d/0xf80 [ 1175.073736][T14608] ? trace_irq_disable+0x3b/0x150 [ 1175.073764][T14608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.073789][T14608] ? clear_bhb_loop+0x40/0x90 [ 1175.073818][T14608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.073842][T14608] RIP: 0033:0x7f999b7dc799 [ 1175.073864][T14608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.073883][T14608] RSP: 002b:00007f9999a2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1175.073908][T14608] RAX: ffffffffffffffda RBX: 00007f999ba55fa0 RCX: 00007f999b7dc799 [ 1175.073926][T14608] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1175.073943][T14608] RBP: 00007f9999a2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1175.073958][T14608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1175.073973][T14608] R13: 00007f999ba56038 R14: 00007f999ba55fa0 R15: 00007fff52e06778 [ 1175.074007][T14608] [ 1175.343977][T14609] netlink: 'syz.9.2024': attribute type 33 has an invalid length. [ 1175.671589][T14092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.184773][T14619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.185033][T14619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.185549][T14619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.189097][T14619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.255739][T14618] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2026'. [ 1176.294831][T14618] tipc: Started in network mode [ 1176.294870][T14618] tipc: Node identity 080211000001, cluster identity 4711 [ 1176.324553][T14618] tipc: Enabled bearer , priority 0 [ 1176.327415][T14618] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode [ 1176.327449][T14618] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode [ 1176.843146][ T9117] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1176.844296][ T9117] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1176.844338][ T9117] usb 3-1: can't read configurations, error -71 [ 1177.311181][T14092] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 1177.466351][ T9] tipc: Node number set to 134418688 [ 1177.473232][T14644] sp0: Synchronizing with TNC [ 1177.499337][T14092] usb 5-1: config 120 has an invalid interface number: 125 but max is 0 [ 1177.499369][T14092] usb 5-1: config 120 has no interface number 0 [ 1177.499425][T14092] usb 5-1: config 120 interface 125 altsetting 8 endpoint 0x3 has invalid maxpacket 33206, setting to 64 [ 1177.499457][T14092] usb 5-1: config 120 interface 125 has no altsetting 0 [ 1177.542380][T14092] usb 5-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 1177.542415][T14092] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.542436][T14092] usb 5-1: Product: syz [ 1177.542452][T14092] usb 5-1: Manufacturer: syz [ 1177.542467][T14092] usb 5-1: SerialNumber: syz [ 1177.614882][T14635] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1177.734278][T14104] net_ratelimit: 2 callbacks suppressed [ 1177.734302][T14104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.815470][ T9117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.974878][T14092] ums-usbat 5-1:120.125: USB Mass Storage device detected [ 1178.066794][T14663] FAULT_INJECTION: forcing a failure. [ 1178.066794][T14663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1178.066835][T14663] CPU: 1 UID: 0 PID: 14663 Comm: syz.3.2038 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1178.066865][T14663] Tainted: [L]=SOFTLOCKUP [ 1178.066873][T14663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1178.066887][T14663] Call Trace: [ 1178.066896][T14663] [ 1178.066905][T14663] dump_stack_lvl+0xe8/0x150 [ 1178.066958][T14663] should_fail_ex+0x46b/0x600 [ 1178.066993][T14663] _copy_to_user+0x31/0xb0 [ 1178.067029][T14663] simple_read_from_buffer+0xe1/0x170 [ 1178.067065][T14663] proc_fail_nth_read+0x1be/0x230 [ 1178.067098][T14663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1178.067130][T14663] ? rw_verify_area+0x2ac/0x4e0 [ 1178.067164][T14663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1178.067193][T14663] vfs_read+0x212/0xa80 [ 1178.067237][T14663] ? __pfx_vfs_read+0x10/0x10 [ 1178.067273][T14663] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1178.067306][T14663] ? lockdep_hardirqs_on+0x7a/0x110 [ 1178.067342][T14663] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1178.067377][T14663] ? mutex_lock_nested+0x152/0x1d0 [ 1178.067404][T14663] ? fdget_pos+0x252/0x320 [ 1178.067443][T14663] ksys_read+0x156/0x270 [ 1178.067481][T14663] ? __pfx_ksys_read+0x10/0x10 [ 1178.067527][T14663] do_syscall_64+0x14d/0xf80 [ 1178.067561][T14663] ? trace_irq_disable+0x3b/0x150 [ 1178.067587][T14663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.067612][T14663] ? clear_bhb_loop+0x40/0x90 [ 1178.067639][T14663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.067667][T14663] RIP: 0033:0x7f999b79cfce [ 1178.067689][T14663] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1178.067709][T14663] RSP: 002b:00007f9999a0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1178.067733][T14663] RAX: ffffffffffffffda RBX: 00007f9999a0d6c0 RCX: 00007f999b79cfce [ 1178.067750][T14663] RDX: 000000000000000f RSI: 00007f9999a0d0a0 RDI: 0000000000000004 [ 1178.067765][T14663] RBP: 00007f9999a0d090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.067792][T14663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.067806][T14663] R13: 00007f999ba56128 R14: 00007f999ba56090 R15: 00007fff52e06778 [ 1178.067842][T14663] [ 1178.343799][T14092] usb 5-1: USB disconnect, device number 88 [ 1178.776282][T14104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.719312][T14692] FAULT_INJECTION: forcing a failure. [ 1179.719312][T14692] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.719354][T14692] CPU: 0 UID: 0 PID: 14692 Comm: syz.1.2047 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1179.719386][T14692] Tainted: [L]=SOFTLOCKUP [ 1179.719395][T14692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1179.719409][T14692] Call Trace: [ 1179.719418][T14692] [ 1179.719429][T14692] dump_stack_lvl+0xe8/0x150 [ 1179.719470][T14692] should_fail_ex+0x46b/0x600 [ 1179.719506][T14692] should_failslab+0xa8/0x100 [ 1179.719532][T14692] kmem_cache_alloc_noprof+0x87/0x680 [ 1179.719567][T14692] ? anon_vma_clone+0x412/0xa00 [ 1179.719609][T14692] anon_vma_clone+0x412/0xa00 [ 1179.719657][T14692] vma_expand+0xbf1/0xfa0 [ 1179.719834][T14692] vma_merge_new_range+0x61e/0x7b0 [ 1179.719875][T14692] vma_merge_extend+0x28f/0x310 [ 1179.719907][T14692] ? __pfx_vma_merge_extend+0x10/0x10 [ 1179.719950][T14692] ? rcu_is_watching+0x15/0xb0 [ 1179.719977][T14692] ? percpu_counter_add_batch+0xea/0x1d0 [ 1179.720021][T14692] ? __vm_enough_memory+0x11b/0x380 [ 1179.720093][T14692] mremap_at+0x965/0xc50 [ 1179.720129][T14692] ? __pfx_mremap_at+0x10/0x10 [ 1179.720167][T14692] ? __pfx_mtree_load+0x10/0x10 [ 1179.720201][T14692] ? may_expand_vm+0x1b4/0x2f0 [ 1179.720240][T14692] ? check_prep_vma+0x8d5/0xb20 [ 1179.720279][T14692] __se_sys_mremap+0xd73/0xfc0 [ 1179.720331][T14692] ? __pfx___se_sys_mremap+0x10/0x10 [ 1179.720366][T14692] ? fput+0xa0/0xd0 [ 1179.720395][T14692] ? ksys_write+0x248/0x270 [ 1179.720429][T14692] ? __pfx_ksys_write+0x10/0x10 [ 1179.720469][T14692] ? __x64_sys_mremap+0x20/0xc0 [ 1179.720500][T14692] do_syscall_64+0x14d/0xf80 [ 1179.720532][T14692] ? trace_irq_disable+0x3b/0x150 [ 1179.720560][T14692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.720584][T14692] ? clear_bhb_loop+0x40/0x90 [ 1179.720617][T14692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.720640][T14692] RIP: 0033:0x7f2afdf1c799 [ 1179.720662][T14692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.720681][T14692] RSP: 002b:00007f2afc16e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1179.720707][T14692] RAX: ffffffffffffffda RBX: 00007f2afe195fa0 RCX: 00007f2afdf1c799 [ 1179.720725][T14692] RDX: 0000000000004000 RSI: 0000000000001000 RDI: 0000200000000000 [ 1179.720741][T14692] RBP: 00007f2afc16e090 R08: 0000200000001000 R09: 0000000000000000 [ 1179.720757][T14692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.720771][T14692] R13: 00007f2afe196038 R14: 00007f2afe195fa0 R15: 00007ffc26a11468 [ 1179.720816][T14692] [ 1179.811186][T14092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.018935][T14692] ------------[ cut here ]------------ [ 1180.018977][T14692] anon_vma->num_active_vmas [ 1180.019017][T14692] WARNING: mm/rmap.c:528 at unlink_anon_vmas+0x6c5/0x730, CPU#0: syz.1.2047/14692 [ 1180.019164][T14692] Modules linked in: [ 1180.019228][T14692] CPU: 0 UID: 0 PID: 14692 Comm: syz.1.2047 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1180.019297][T14692] Tainted: [L]=SOFTLOCKUP [ 1180.019319][T14692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1180.019359][T14692] RIP: 0010:unlink_anon_vmas+0x6c5/0x730 [ 1180.019449][T14692] Code: 08 00 48 3b 6c 24 18 74 29 e8 07 a5 ad ff 49 89 ee e9 cf fd ff ff e8 fa a4 ad ff 90 0f 0b 90 e9 4d fe ff ff e8 ec a4 ad ff 90 <0f> 0b 90 e9 81 fe ff ff e8 de a4 ad ff eb 05 e8 d7 a4 ad ff 48 83 [ 1180.019509][T14692] RSP: 0018:ffffc90004127648 EFLAGS: 00010293 [ 1180.019554][T14692] RAX: ffffffff8216c124 RBX: ffff888060c80300 RCX: ffff88801df50000 [ 1180.019604][T14692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1180.019638][T14692] RBP: ffff88803e5dc7b0 R08: 0000000000000000 R09: 0000000000000000 [ 1180.019708][T14692] R10: dffffc0000000000 R11: fffffbfff1ed4757 R12: ffffffffffffffff [ 1180.019790][T14692] R13: 1ffff110068dc448 R14: ffff8880346e2240 R15: ffff888060c80300 [ 1180.019854][T14692] FS: 0000000000000000(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 [ 1180.019906][T14692] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1180.019944][T14692] CR2: 00007f07e55e7dac CR3: 000000002a6d0000 CR4: 00000000003526f0 [ 1180.019990][T14692] Call Trace: [ 1180.020019][T14692] [ 1180.020072][T14692] free_pgtables+0x836/0xb70 [ 1180.020178][T14692] ? __pfx_free_pgtables+0x10/0x10 [ 1180.020267][T14692] ? rwbase_write_lock+0x568/0x730 [ 1180.020364][T14692] exit_mmap+0x490/0xa10 [ 1180.020459][T14692] ? __pfx_exit_mmap+0x10/0x10 [ 1180.020535][T14692] ? do_raw_spin_lock+0x12b/0x2f0 [ 1180.020710][T14692] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1180.020846][T14692] ? __pfx_exit_aio+0x10/0x10 [ 1180.021100][T14692] ? uprobe_clear_state+0x288/0x2a0 [ 1180.021251][T14692] __mmput+0xcb/0x3d0 [ 1180.021338][T14692] exit_mm+0x168/0x220 [ 1180.021413][T14692] do_exit+0x6a2/0x23c0 [ 1180.021478][T14692] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1180.021580][T14692] ? __pfx_do_exit+0x10/0x10 [ 1180.021634][T14692] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1180.021709][T14692] ? reacquire_held_locks+0x104/0x190 [ 1180.021975][T14692] ? rt_spin_lock+0x1e0/0x400 [ 1180.022128][T14692] do_group_exit+0x21b/0x2d0 [ 1180.022195][T14692] ? rt_spin_unlock+0x160/0x200 [ 1180.022257][T14692] get_signal+0x125c/0x1310 [ 1180.022302][T14692] arch_do_signal_or_restart+0xbc/0x830 [ 1180.022330][T14692] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1180.022572][T14692] ? fput_close_sync+0x11f/0x240 [ 1180.022733][T14692] exit_to_user_mode_loop+0x86/0x480 [ 1180.022830][T14692] ? rcu_is_watching+0x15/0xb0 [ 1180.022865][T14692] do_syscall_64+0x32d/0xf80 [ 1180.022897][T14692] ? trace_irq_disable+0x3b/0x150 [ 1180.022919][T14692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.022941][T14692] ? clear_bhb_loop+0x40/0x90 [ 1180.023018][T14692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.023084][T14692] RIP: 0033:0x7f2afdf1c799 [ 1180.023146][T14692] Code: Unable to access opcode bytes at 0x7f2afdf1c76f. [ 1180.023179][T14692] RSP: 002b:00007f2afc16e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1180.023250][T14692] RAX: 0000000000000001 RBX: 00007f2afe195fa8 RCX: 00007f2afdf1c799 [ 1180.023293][T14692] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2afe195fac [ 1180.023392][T14692] RBP: 00007f2afe195fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1180.023437][T14692] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1180.023479][T14692] R13: 00007f2afe196038 R14: 00007ffc26a11380 R15: 00007ffc26a11468 [ 1180.023588][T14692] [ 1180.023650][T14692] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1180.023715][T14692] CPU: 0 UID: 0 PID: 14692 Comm: syz.1.2047 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1180.023801][T14692] Tainted: [L]=SOFTLOCKUP [ 1180.023823][T14692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1180.023850][T14692] Call Trace: [ 1180.023890][T14692] [ 1180.023914][T14692] vpanic+0x56c/0xa60 [ 1180.024037][T14692] ? __pfx__printk+0x10/0x10 [ 1180.024108][T14692] ? __pfx_vpanic+0x10/0x10 [ 1180.024192][T14692] ? is_bpf_text_address+0x292/0x2b0 [ 1180.024275][T14692] ? is_bpf_text_address+0x26/0x2b0 [ 1180.024389][T14692] panic+0xc5/0xd0 [ 1180.024483][T14692] ? __pfx_panic+0x10/0x10 [ 1180.024620][T14692] __warn+0x315/0x4f0 [ 1180.024807][T14692] ? unlink_anon_vmas+0x6c5/0x730 [ 1180.024919][T14692] ? unlink_anon_vmas+0x6c5/0x730 [ 1180.025024][T14692] __report_bug+0x29a/0x540 [ 1180.025110][T14692] ? unlink_anon_vmas+0x6c5/0x730 [ 1180.025144][T14692] ? __pfx___report_bug+0x10/0x10 [ 1180.025182][T14692] ? do_raw_spin_lock+0x12b/0x2f0 [ 1180.025231][T14692] ? unlink_anon_vmas+0x6c5/0x730 [ 1180.025389][T14692] report_bug+0x16a/0x220 [ 1180.025429][T14692] ? unlink_anon_vmas+0x6c5/0x730 [ 1180.025463][T14692] ? unlink_anon_vmas+0x6c7/0x730 [ 1180.025499][T14692] handle_bug+0x9c/0x200 [ 1180.025531][T14692] exc_invalid_op+0x1a/0x50 [ 1180.025556][T14692] asm_exc_invalid_op+0x1a/0x20 [ 1180.025580][T14692] RIP: 0010:unlink_anon_vmas+0x6c5/0x730 [ 1180.025628][T14692] Code: 08 00 48 3b 6c 24 18 74 29 e8 07 a5 ad ff 49 89 ee e9 cf fd ff ff e8 fa a4 ad ff 90 0f 0b 90 e9 4d fe ff ff e8 ec a4 ad ff 90 <0f> 0b 90 e9 81 fe ff ff e8 de a4 ad ff eb 05 e8 d7 a4 ad ff 48 83 [ 1180.025846][T14692] RSP: 0018:ffffc90004127648 EFLAGS: 00010293 [ 1180.025870][T14692] RAX: ffffffff8216c124 RBX: ffff888060c80300 RCX: ffff88801df50000 [ 1180.025888][T14692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1180.025903][T14692] RBP: ffff88803e5dc7b0 R08: 0000000000000000 R09: 0000000000000000 [ 1180.025918][T14692] R10: dffffc0000000000 R11: fffffbfff1ed4757 R12: ffffffffffffffff [ 1180.025934][T14692] R13: 1ffff110068dc448 R14: ffff8880346e2240 R15: ffff888060c80300 [ 1180.025961][T14692] ? unlink_anon_vmas+0x6c4/0x730 [ 1180.026007][T14692] ? unlink_anon_vmas+0x6c4/0x730 [ 1180.026046][T14692] free_pgtables+0x836/0xb70 [ 1180.026085][T14692] ? __pfx_free_pgtables+0x10/0x10 [ 1180.026119][T14692] ? rwbase_write_lock+0x568/0x730 [ 1180.026155][T14692] exit_mmap+0x490/0xa10 [ 1180.026194][T14692] ? __pfx_exit_mmap+0x10/0x10 [ 1180.026227][T14692] ? do_raw_spin_lock+0x12b/0x2f0 [ 1180.026386][T14692] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1180.026443][T14692] ? __pfx_exit_aio+0x10/0x10 [ 1180.026494][T14692] ? uprobe_clear_state+0x288/0x2a0 [ 1180.026538][T14692] __mmput+0xcb/0x3d0 [ 1180.026574][T14692] exit_mm+0x168/0x220 [ 1180.026603][T14692] do_exit+0x6a2/0x23c0 [ 1180.026632][T14692] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1180.026671][T14692] ? __pfx_do_exit+0x10/0x10 [ 1180.026813][T14692] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1180.026842][T14692] ? reacquire_held_locks+0x104/0x190 [ 1180.026867][T14692] ? rt_spin_lock+0x1e0/0x400 [ 1180.026904][T14692] do_group_exit+0x21b/0x2d0 [ 1180.026930][T14692] ? rt_spin_unlock+0x160/0x200 [ 1180.026969][T14692] get_signal+0x125c/0x1310 [ 1180.027022][T14692] arch_do_signal_or_restart+0xbc/0x830 [ 1180.027067][T14692] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1180.027107][T14692] ? fput_close_sync+0x11f/0x240 [ 1180.027158][T14692] exit_to_user_mode_loop+0x86/0x480 [ 1180.027197][T14692] ? rcu_is_watching+0x15/0xb0 [ 1180.027223][T14692] do_syscall_64+0x32d/0xf80 [ 1180.027253][T14692] ? trace_irq_disable+0x3b/0x150 [ 1180.027280][T14692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.027303][T14692] ? clear_bhb_loop+0x40/0x90 [ 1180.027333][T14692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.027357][T14692] RIP: 0033:0x7f2afdf1c799 [ 1180.027380][T14692] Code: Unable to access opcode bytes at 0x7f2afdf1c76f. [ 1180.027392][T14692] RSP: 002b:00007f2afc16e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1180.027415][T14692] RAX: 0000000000000001 RBX: 00007f2afe195fa8 RCX: 00007f2afdf1c799 [ 1180.027432][T14692] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2afe195fac [ 1180.027447][T14692] RBP: 00007f2afe195fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1180.027462][T14692] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1180.027477][T14692] R13: 00007f2afe196038 R14: 00007ffc26a11380 R15: 00007ffc26a11468 [ 1180.027512][T14692] [ 1180.028152][T14692] Kernel Offset: disabled