last executing test programs: 11m40.730614088s ago: executing program 1 (id=93): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002300)={0x34, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)={[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='(&&^\\\x00', &(0x7f0000000180)='\\%\x00']}) unshare(0x28000600) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0xeb3) 11m40.363337566s ago: executing program 1 (id=94): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002300)={0x34, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)={[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='(&&^\\\x00', &(0x7f0000000180)='\\%\x00']}) unshare(0x28000600) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x8, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xffe0, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x3, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0x9, 0x10001, 0x3ff, 0x0, 0x8, 0x5, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x9, 0xe, 0xffffffff, 0x7, 0xfffffffa, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0xfe3, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x2, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x9, 0x24000002, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x20002, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) open(&(0x7f0000000180)='.\x00', 0x0, 0xd0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={0x0, 0x0, 0x2a}, 0x28) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0xeb3) close_range(r1, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r2 = fanotify_init(0x200, 0x0) write(r2, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x405}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) r4 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) flock(r4, 0x1) 11m38.740103001s ago: executing program 1 (id=96): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, 0x0) syz_open_procfs$pagemap(r1, 0x0) r2 = signalfd(r0, 0x0, 0x0) recvmsg$inet_nvme(r2, 0x0, 0x40010120) syz_emit_vhci(&(0x7f0000001540)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x139}, @l2cap_cid_signaling={{0x135}, [@l2cap_info_rsp={{0xb, 0x31, 0xed}, {0x6, 0x3, "1e6e191ec267a886dbe4c4773815d5b1405433035655318ca5e22744fb34d30b5d9e1030094fce8e71ed0b244078935115198b742326f40625c14c441a69ba985450c24e3ddb91803d20c8924851422f343db960930eb3f07a64106a3e792c6d117141d945dc4b2baba80bbb2e6612d8d9438f2f6c4464af83d67f885fac16a4c49d205c7f3673a4dbbf16984b31d060b28de936165089d14dac3e18d39d2bf06921c34ff2dd2c666ebb1334424ec9a3ffc5335b83d4d0507b2e73256d6285a598df97d064b4b8e2f9f86ea18fd18c0a27753609c03d2a7cae7e1060a2dc7effd990636e8e95400a90"}}, @l2cap_conf_rsp={{0x5, 0x9, 0x40}, {0x0, 0x7fff, 0x9, [@l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_efs={0x6, 0x10, {0xf, 0x1, 0x1, 0x0, 0x80000001, 0x6}}, @l2cap_conf_efs={0x6, 0x10, {0x1, 0x2, 0x9, 0x7, 0x0, 0x9}}, @l2cap_conf_efs={0x6, 0x10, {0x7, 0x1, 0xfffc, 0x4, 0x2, 0x1ff}}]}}]}}, 0x13e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001840)={'vxcan1\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000001880)={0x1d, r3, 0x1, {}, 0xff}, 0x18) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000018c0), &(0x7f0000001900)=0x4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x10, 0x140d, 0x400, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20040901) getsockopt$ax25_int(r2, 0x101, 0x5, 0x0, &(0x7f0000001a40)) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000001a80)="537cf3e325842122b14d738c4cef8fa3097d") connect$can_bcm(r0, &(0x7f0000001ac0)={0x1d, r3}, 0x10) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000001b40)={{0x9, 0x6}, {0x8, 0x5}, 0x47f8, 0x2, 0x9}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000001bc0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r4, &(0x7f0000001c40)=@name={0x1e, 0x2, 0x2, {{0x43}}}, 0x10) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) 11m38.463654709s ago: executing program 1 (id=99): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x40000, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x40000, @remote}}}, 0x108) r1 = socket(0xa, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff, 0xfc}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc6, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0xfd, 0x4, 0x0, 0x0, 0x0, 0x3f}, {0x100000, 0x0, 0x0, 0x78, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xdddd1000, 0xeeee0000, 0xa, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0xffffffffffffffff]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000000c0)={0x26000, 0x40000, 0x8, 0x10}) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0x1}, 0x1c, &(0x7f0000002580)=[{&(0x7f0000000180)="e6", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000000000008400000007"], 0x18, 0x4855}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="3f000000010000", 0x7) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@struct={0xe, 0x0, 0x0, 0x4, 0x0, 0x2}, @enum64={0xc, 0x8, 0x0, 0x13, 0x1, 0x8, [{0x10, 0x6}, {0x1, 0x7f, 0x2}, {0x1, 0x1, 0x3}, {0x4, 0x62, 0x1}, {0xe, 0x87e}, {0x9, 0x800, 0x7}, {0x10, 0x8d2, 0x5}, {0x7, 0xffff, 0x1}]}]}}, 0x0, 0x92, 0x0, 0x1, 0x8}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) sendmsg$unix(r5, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100"], 0x18, 0x48000}, 0x0) recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r8, &(0x7f00000000c0)=ANY=[], 0xffffff6a) tee(r7, 0xffffffffffffffff, 0x60000000000, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) socket(0x2a, 0x3, 0x7) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes']) 11m38.141358787s ago: executing program 1 (id=100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000001) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r8, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) socket$nl_generic(0x10, 0x3, 0x10) 11m36.164885647s ago: executing program 1 (id=101): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000200)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) mbind(&(0x7f00001cc000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @null}, [@null, @null, @default, @rose, @bcast, @rose, @bcast, @default]}, &(0x7f00000001c0)=0x80, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x806}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xf, 0x2, 0xf, 0x7, 0x739c}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x4800) socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000010000000011077f610000000000"], 0x0, 0x26, 0x0, 0x1, 0xff}, 0x28) semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab0400", @ANYRESHEX=0x0], 0x20}], 0x1}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="340100001700010027bd7000fcdbdf25ac1e0101000000000000000000000000000004d42b0000007f000001000000000000000000000000e0000002000000000000000000000000ffffffff0000000000000000000000004e2101004e2000030200e0203b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001ffffffff0000000000000000000000004e2100094e220083020000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000000000000002bec00000001000005000000000000000a00000000000000d500000000000000060000000000000006000000000000000b000000000000000700000000000000a00000000000000009000000002000000000000000000002ba00000000000000020000030000000003000000010000000002000029bd70000c0008000800080000ce2000"], 0x134}, 0x1, 0x0, 0x0, 0x40}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept4$nfc_llcp(r5, &(0x7f0000000640), &(0x7f00000000c0)=0x60, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x0, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x19, 0xf5, 0xffffffff, 0x3, 0x0, 0x4, 0x2], 0x0, 0x4}) 11m20.4741075s ago: executing program 32 (id=101): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000200)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) mbind(&(0x7f00001cc000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @null}, [@null, @null, @default, @rose, @bcast, @rose, @bcast, @default]}, &(0x7f00000001c0)=0x80, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x806}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xf, 0x2, 0xf, 0x7, 0x739c}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x4800) socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000010000000011077f610000000000"], 0x0, 0x26, 0x0, 0x1, 0xff}, 0x28) semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab0400", @ANYRESHEX=0x0], 0x20}], 0x1}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="340100001700010027bd7000fcdbdf25ac1e0101000000000000000000000000000004d42b0000007f000001000000000000000000000000e0000002000000000000000000000000ffffffff0000000000000000000000004e2101004e2000030200e0203b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001ffffffff0000000000000000000000004e2100094e220083020000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000000000000002bec00000001000005000000000000000a00000000000000d500000000000000060000000000000006000000000000000b000000000000000700000000000000a00000000000000009000000002000000000000000000002ba00000000000000020000030000000003000000010000000002000029bd70000c0008000800080000ce2000"], 0x134}, 0x1, 0x0, 0x0, 0x40}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept4$nfc_llcp(r5, &(0x7f0000000640), &(0x7f00000000c0)=0x60, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x0, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x19, 0xf5, 0xffffffff, 0x3, 0x0, 0x4, 0x2], 0x0, 0x4}) 10m25.230993781s ago: executing program 2 (id=250): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000002000)=[0x0]) setregid(0xffffffffffffffff, r1) socket$inet6_icmp(0xa, 0x2, 0x3a) 10m25.146812351s ago: executing program 2 (id=251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x2, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 10m24.185151028s ago: executing program 2 (id=254): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) shmctl$SHM_STAT(0x0, 0xd, 0x0) 10m23.940209653s ago: executing program 2 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) 10m23.829800076s ago: executing program 2 (id=260): syz_open_procfs(0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) wait4(0x0, 0x0, 0x1000000, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) r3 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x202120, 0x0) 10m23.069922967s ago: executing program 2 (id=266): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb012a18"], &(0x7f0000000200)=""/260, 0x36, 0x104, 0x9, 0x5}, 0x28) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xfffffff1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) 10m22.450033715s ago: executing program 33 (id=266): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb012a18"], &(0x7f0000000200)=""/260, 0x36, 0x104, 0x9, 0x5}, 0x28) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xfffffff1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) 10m15.160846104s ago: executing program 4 (id=279): r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{&(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0}}, {{&(0x7f00000003c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYBLOB="4344b3ca3fc6782879cc0fa9da27e38c6bad848e"], 0x28}}], 0x2, 0x810) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000dc0)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd7000eedbdf25120000000c00018008040300010000000800ce09000000070002000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x400c810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000100001042dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0602068545da1e9ce2564641eb399b13b90e0000000000140012800c0001006d", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x44}}, 0x0) 10m14.518484906s ago: executing program 4 (id=281): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0xac) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) socket$inet_udp(0x2, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sg(0x0, 0x5000000, 0x86000) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000100)=0x2c0000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x4, 0x1c7200) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) eventfd2(0x8, 0x1) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) r5 = syz_open_dev$video4linux(0x0, 0xe, 0x800) ioctl$VIDIOC_G_EDID(r5, 0xc0285628, &(0x7f0000000240)={0x0, 0x2, 0x6, '\x00', &(0x7f00000001c0)=0x1}) 10m11.304218075s ago: executing program 4 (id=287): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000000c0)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m8.402382938s ago: executing program 4 (id=294): r0 = syz_open_dev$sndctrl(0x0, 0xffffffffffffffff, 0x101983) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc1485544, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0xff, 0x2001) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x10020004, r3}) syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0x30}], 0x1, 0x40, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x11, r3, 0x12a1b000) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001400000890d080001400000001c080002"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) 10m4.18946927s ago: executing program 4 (id=305): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000000c0)={0x40, 0x16, 0x51, "f39a6283141e287f36baa4d2d0a6cbd76e5c000000000000f536af6b2f4c55563e690c6bf418e54346df4fb056a134b51189523bbc807c9a560e60b61bd123ce518e0d0c0f0874c8ba9955a7c04491c81d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m0.838884545s ago: executing program 4 (id=308): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 9m45.745869476s ago: executing program 34 (id=308): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4m12.515170954s ago: executing program 6 (id=1222): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000001) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r8, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 4m9.860448835s ago: executing program 6 (id=1230): futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffa) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0xa, 0x801, 0x0, 0x0, 0xfffffffc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m5.403409378s ago: executing program 6 (id=1237): r0 = landlock_create_ruleset(&(0x7f0000000280)={0x4109, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xf) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) 4m3.068705694s ago: executing program 6 (id=1244): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec", 0x11}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000001d83000744d63c0001"], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502"], 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}], 0x1, &(0x7f0000000280)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x0, 0x3, 0x1}}], 0x18, 0x2001c001}], 0x1, 0x4044040) syz_io_uring_setup(0x1a1d, &(0x7f0000000180)={0x0, 0x755e, 0x13080, 0x3, 0x2b5, 0x0, 0x0}, &(0x7f0000000080), &(0x7f0000000040)) rt_sigqueueinfo(0x0, 0x6, &(0x7f0000000000)={0x35, 0x3a6b6cb5, 0x9}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m59.711854688s ago: executing program 6 (id=1250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000001) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) sched_setscheduler(r0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) socket$nl_generic(0x10, 0x3, 0x10) 3m58.366575029s ago: executing program 6 (id=1252): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioprio_get$pid(0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) (fail_nth: 1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x6, 0x7f, 0x5, 0x101, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x2}, 0x50) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x88, 0x0, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x68}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4a9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m43.237536033s ago: executing program 35 (id=1252): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioprio_get$pid(0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) (fail_nth: 1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x6, 0x7f, 0x5, 0x101, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x2}, 0x50) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x88, 0x0, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x68}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4a9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m27.727361435s ago: executing program 7 (id=1323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000001) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r8, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) sched_setscheduler(r0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 3m25.770984127s ago: executing program 7 (id=1324): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff7ffc}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000007c0)=""/196, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000001600)={0x1, @capture={0x1000, 0x0, {0x6, 0x20000001}, 0x2, 0xfffffff4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000019ffff0f0000000080200000180100002020732500000000002020207b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b70300000000000185000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xfe4, &(0x7f0000001e00)=""/4068, 0x41000, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="61eab7e1cac5974f89a2f881563dd21f625a75df768c314bc3faffffffffffffff85827eb3735ccb150000000000000000000000003900", @ANYBLOB="87bcb82141fdb2cbce023f5d530502413d0663e53c2902498b97658637dee3d116", @ANYBLOB="487abf5bcdefeac78bd741ec72065bac229483148593dc0e6b53d528e58a4dc9137b7b46a2cd85db12d530796afbca21443ebcd611d328ae4d5cee27dcfcd9837b490c012ca2cc295cb97e5c32a852a45102c11f06b33401dad442f983c9f8331eed30729e8dc05dde9db35455359de7082c4dfc0d40ab5176735749cf889e063675863b3c376570ecdbc64510b1827a4ce4527bbb71f9c4a3925ee6b99e7f9f12eef10f9a062d611ce42e33a6f983da58acf2666277ec9c5ccea31abd59ba6135c82073c8860b17d3f074d1b8b8526a43e2"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000f00000000000000000a20000000000a05000000000000000000070000000900010073797a3000000000c8000000090a010400000000000000000700000108000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c0001"], 0x110}, 0x1, 0x0, 0x0, 0x8840}, 0x0) syz_clone(0x1001000, &(0x7f0000000640)="1d512dd0753c7f7e23ff34a3fc2585b0ff265a5a58d0a5a3d746ec5f785bf31fa91dec1cc8ecde872ad651fe61b8e70418120fed8f3f04bb69c451a587e10bc144f6f247501cac4e0527658da04fd9527f84a9d3d26a1ce7a6dc2bb2fb1cb923a7352c5309bbee384742ccf38c9699bb8fa62fd020a22fcb505d00485c6de3e3c4783f91b80af09bd1fea8138722c1fcb708d7769c6fcf", 0x97, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000380)="a6d9aef1afdaffcc05b4de50cd8ced0dfaf86427416e5c0368aa06dc95ca3badd4414c8f9fd1ce7243c8a8d66f521493ef264190efdf1108563b792bc3b3f95ba162dcad12c0eb356c74adfa13aa25fed43958dc9646c45fc73d248d80") ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000000)) connect$rose(0xffffffffffffffff, &(0x7f0000000180)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0x7, 0x8000000}]}]}, {0x0, [0x2e, 0x0]}}, 0x0, 0x30}, 0x28) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="1f00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002581eedb53cb7d82dc05e3bc65efd04aad3a79ebed5df116d628c7f2e233a9d84aab980dde14936168447e792aa9cb11466ca9ef8fd17a6aa9fb0bc7778605d7d78e4d62951fca600085b28d9bd7d71f9d2f64f1f115a5a0aea22c7ca15e8251d66c68e57e220a0a54300072fe20fe7a854ad5a97227cc2c44c9b8debf14e1b1eee91edca8c0af6e74f3f9ea028d38218830a7a828bbb87476f2ad65a1bfebd4e661a38ae6a21c63e2d44458c0e652c99196fa0a86e13dab7b99352490323c832ce8682b986eab"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630000dd000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0xfffffe09}, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ptrace$setregs(0xd, r0, 0x4000000000, &(0x7f0000000000)="18607651149d7b10b47c13bbdc0889108f589df2dbb5d7a8deb36cfb34ff76ee8100e287a8c7fa178cac130eb046eda9da36b54b6ca5e045000000028dd63def077d698be5e749450b350a789dcfc674566d1da0970d82ebe330ebf71c5e823f2753c5fd76724828ef31b352e71805205c3dceb4") ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) ptrace$cont(0x1f, r0, 0x9, 0x7) 3m21.167147196s ago: executing program 7 (id=1333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000001) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r8, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) sched_setscheduler(r0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 3m19.910680606s ago: executing program 7 (id=1336): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRKP(r4, 0x5425, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x7fff) getpid() mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x4, 0x1, 0x20000006}, {0xff}, 0x0, 0x1, 0x3}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffff1d8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000001, 0x3f, 0x4, 0x1, 0x3, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x7, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x40, 0x0, 0x0, 0x4, 0x1000002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xa97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffc, 0x400000, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x1000, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dfd, 0x0, 0x0, 0x0, 0x4, 0x7, 0x72, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffc, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xfffffffb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0xd79, 0x0, 0x2011, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x4, 0x1000, 0x4000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 3m19.378678538s ago: executing program 3 (id=1337): r0 = landlock_create_ruleset(&(0x7f0000000280)={0x4109, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xf) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) 3m18.875203736s ago: executing program 3 (id=1338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 3m16.842035983s ago: executing program 3 (id=1341): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', '.', [], 0xa, "b524be350e7611b133a163b4ab1b04000000000000"}, 0x1a) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) write$UHID_INPUT(r0, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="09e9f5943cb94b40f9498d01559dee76ea3f0b16a6bdeebf13334fa24524bd99e14213a20571f191adf1c6de0e3ec018cfffaa82f4eb9158ebeda47e3f1778cc6563bd1226c41e6f6ba62b90a97e48b35272b8f19ff508e1d92746cc3546871974104f059ccd213b", 0x68}, {&(0x7f00000003c0)="1b3d8349300103ef42c7bcac94a48ed2d45e256e624fd4a7f15bb1543b58de9526c28af3192220e859bd1a1e0978069efe025e16fb96270b49d247f52cbdec83a5a1195604ce4ae022ab20a3820e03bbe9e778268cfe517ec85b27a92ac8cee45b1bc7844148c3c05dbc5464036915d17f44556b10d74f3f6c84edcf1ecc87b1f2edeb9787ba233519de8d27fd73c6b73687e99a53b2f38e49adca49809ad7dfce1ffec76bddc61dc6af75", 0xab}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000000480)="9c1e820b882d1ff3acd1928e9d89fcfd66c2a9b4b36ee4a928ae2b92fc2c4c33181126ce981f65ffa04df8adb99bed5944f593ad2acc5f59e11d7629c5dcac7199a61eda17de7139d7282cdb6b01d43191f9aad75a125f6b624166ee30b153b78756be49dcd432327d801baec3fd836f7be77744787d0e81e23cf7cd2f540fbe0c057057322d139bca33af9c1d72ffed2d87d76a19b2b3e435871ed2603c5aa61fcc731bfa23e2796efccafcb4d59d92e6", 0xb1}], 0x1, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [r2, r0, r2]}}], 0x20, 0x88c0}}], 0x1, 0x81) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x20000081) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x40010142, 0x0) 3m13.92307446s ago: executing program 0 (id=1342): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRKP(r4, 0x5425, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x7fff) getpid() mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x4, 0x1, 0x20000006}, {0xff}, 0x0, 0x1, 0x3}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffff1d8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000001, 0x3f, 0x4, 0x1, 0x3, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x7, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x40, 0x0, 0x0, 0x4, 0x1000002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xa97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffc, 0x400000, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x1000, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dfd, 0x0, 0x0, 0x0, 0x4, 0x7, 0x72, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffc, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xfffffffb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0xd79, 0x0, 0x2011, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x4, 0x1000, 0x4000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 3m13.827535224s ago: executing program 3 (id=1343): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000001) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r8, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) socket$nl_generic(0x10, 0x3, 0x10) 3m11.929991923s ago: executing program 3 (id=1345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000001) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r8, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) sched_setscheduler(r0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 3m11.532896528s ago: executing program 0 (id=1346): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0480, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000000000000000000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009000eb33aa0000060a010400000000000000000100000208000b400000000068000480340001800b00010065787468647200002400026f0a7a71ce94f2ed3852d96251055fd680080001400000000c0800034000000002080004400000002205000207000000003000018008000100636d700024000280100003800c0001000900ba7fba623c83080001400000000208000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x104}}, 0x0) r2 = syz_io_uring_setup(0xd51, &(0x7f0000000000)={0x0, 0x7f36, 0x8, 0x1, 0x138}, &(0x7f00000000c0), &(0x7f0000000140)) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_uring_enter(r3, 0x151c, 0x1, 0x1, 0x0, 0x0) io_uring_enter(r2, 0x195a, 0x8cd8, 0x80, &(0x7f0000000100)={[0x81]}, 0x8) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x15) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000000)={0xc, @pix_mp={0xd39e, 0x80000001, 0x33363248, 0x3, 0xc, [{0xffffffff, 0xb54}, {0x3, 0x5}, {0x3, 0x12}, {0x10, 0x7}, {0x4, 0x3}, {0x1}, {0x7, 0x9}, {0x2, 0x4}], 0xb, 0x9, 0x0, 0x2, 0x4}}) ioctl(r4, 0x7, &(0x7f00000002c0)="005ed71cebb3df400df51b476ae8fa107f3a133802d6bc5f1a00db031f84d5a887aba1e60baa75325fc25bb6d1214343a4d4d950460afbaaf0fc28bafbb8e0e807fa336d8d18e56c0024bae7060c39b70a41605b0355ad4a87fe1d45db4b5fcfdccde63c0dca1ee254402f417a0ec071d2b293c3c1556ab8790af62ab80345e1ebe050aeb245d701b5ee4b464b9a184adfdba0f39aaa173f4113c6eaf6a10392450063a5a72c9a30e17696ed220158d9a0b21322c66eb40d73d5bc095ab6aa276d80e8b7f53e47128f30014b06bfbcc48ada93b32f68919b2951d8d5a9afc003fde10cae73908680a580d31319b1ee627a95886b1f") ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x10) 3m11.526477205s ago: executing program 7 (id=1347): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000001) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) sched_setscheduler(r0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) socket$nl_generic(0x10, 0x3, 0x10) 3m11.103548556s ago: executing program 0 (id=1348): syz_emit_ethernet(0xae, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0x1, "00ffffffffff"}, {0x22, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c45", 0xc}], 0x1}, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0xe) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m8.927029865s ago: executing program 3 (id=1349): ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="6fc2232a624fe3766f8838c104568dd7772ed989cd81c3560c1c15bb7a4eb30f6364ebec6136c168edeeb44215f1767e8a30b98984dc3248ad6f7668bc25217b9cb8957f314cd5753cf95cc6f89cd41b75d2cb12ec329e83", 0x58, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$get_persistent(0x16, r3, r0) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x120000) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f00000014c0)={0x5, &(0x7f0000000280)=""/57, &(0x7f0000001440)=[{0xebbc, 0x1000, 0x8, &(0x7f00000002c0)=""/4096}, {0x2414, 0x2f, 0x6, &(0x7f00000012c0)=""/47}, {0x8000, 0x83, 0x6, &(0x7f0000001300)=""/131}, {0x1, 0x2, 0x7, &(0x7f00000013c0)=""/2}, {0x4, 0x2f, 0x7, &(0x7f0000001400)=""/47}]}) keyctl$describe(0x6, r0, &(0x7f0000001500)=""/88, 0x58) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000001580)=0xfffa, 0x2) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f00000016c0)={r4, &(0x7f00000015c0)='keyring\x00', 0x800, &(0x7f0000001600)={@align, {0x1, 0x8, 0x1, 0x6}}, 0xbd89, &(0x7f0000001640), &(0x7f0000001680)=0x10000}) ioctl$SG_SET_KEEP_ORPHAN(r5, 0x2287, &(0x7f0000001700)=0xffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r5, 0x9) r6 = add_key$fscrypt_v1(&(0x7f0000001740), &(0x7f0000001780)={'fscrypt:', @desc3}, &(0x7f00000017c0)={0x0, "a7c4116a36ede56fa61ec246985829d8806212b8750d6535a70ad1a5bcc0acbf1f0fce22bcc5ab3a8c13b0331ad54036c93a24cd8d991ede695654734fc5a286", 0x3c}, 0x48, r0) keyctl$reject(0x13, r1, 0x401, 0x6, r6) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000001840)=@x86={0x2, 0x9, 0x81, 0x0, 0x2, 0xf1, 0x6, 0x4, 0x67, 0x2f, 0xc8, 0x6f, 0x0, 0x9993, 0xf, 0x0, 0xc, 0xc2, 0x6, '\x00', 0x7f, 0x4}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r5, 0xc0245720, &(0x7f0000001880)={0x1}) syz_open_dev$dri(&(0x7f00000018c0), 0x19f, 0x8800) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000001900)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3}) keyctl$get_persistent(0x16, r3, r6) r7 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000001940), 0x1, 0x0) quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000301, r3, 0x0) r8 = syz_open_procfs(r2, &(0x7f0000001980)='net/l2cap\x00') syz_clone(0x42100080, &(0x7f00000019c0)="e8f5564ab4d538e842dd2cd6847eedc79fb6fb7079e3dce92595cdbb14877cc959f3df2dbaa5af5480", 0x29, &(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80)="0b5776f5a4e39732f005081ff9a11beb5cb3d05d335fe3dbc34733321a50e4d817ce28b2d9d656b650199bf539f7be043331e9479f9f30415ebf72d7ec7b879e5f6752801b9ddbf5aaa8cc91c801af5b44d36fc27933f591a2886c53b6c5cdbe0bac88a0c28487b4071902b59892616c505698e8f772618d9ab9af3be2603c3b") keyctl$get_persistent(0x16, r3, r6) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000001b00)=0x0) r10 = syz_open_procfs(r9, &(0x7f0000001b40)='setgroups\x00') connect$qrtr(r5, &(0x7f0000001b80)={0x2a, 0xffffffffffffffff, 0x1}, 0xc) ioctl$UDMABUF_CREATE(r10, 0x40187542, &(0x7f0000001bc0)={r5, 0x0, 0x100000000, 0xffff6000}) r11 = add_key$fscrypt_v1(&(0x7f0000001c00), &(0x7f0000001c40)={'fscrypt:', @desc3}, &(0x7f0000001c80)={0x0, "44f6ab8cc6106c38bea6954730c6f8a3c4ffc83407617ecfc0f563f9f50924f7c0e861314431f7f448b7e09c688bb0feb2bbaac5cdf3408b050ba8210fcc09df", 0x10}, 0x48, r0) keyctl$revoke(0x3, r11) 3m3.723622367s ago: executing program 7 (id=1351): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r2, 0x541b, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="61f245cafab21e", 0x7, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000000000)={r7, 0x1000, &(0x7f0000002a80)=""/4096}) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r8, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) r10 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r10, 0xffffffffffffff7f, 0x0) ioctl$sock_netrom_SIOCADDRT(r10, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @null, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) 3m2.638021981s ago: executing program 0 (id=1352): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', '.', [], 0xa, "b524be350e7611b133a163b4ab1b04000000000000"}, 0x1a) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) write$UHID_INPUT(r0, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="09e9f5943cb94b40f9498d01559dee76ea3f0b16a6bdeebf13334fa24524bd99e14213a20571f191adf1c6de0e3ec018cfffaa82f4eb9158ebeda47e3f1778cc6563bd1226c41e6f6ba62b90a97e48b35272b8f19ff508e1d92746cc3546871974104f059ccd213b", 0x68}, {&(0x7f00000003c0)="1b3d8349300103ef42c7bcac94a48ed2d45e256e624fd4a7f15bb1543b58de9526c28af3192220e859bd1a1e0978069efe025e16fb96270b49d247f52cbdec83a5a1195604ce4ae022ab20a3820e03bbe9e778268cfe517ec85b27a92ac8cee45b1bc7844148c3c05dbc5464036915d17f44556b10d74f3f6c84edcf1ecc87b1f2edeb9787ba233519de8d27fd73c6b73687e99a53b2f38e49adca49809ad7dfce1ffec76bddc61dc6af75", 0xab}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000000480)="9c1e820b882d1ff3acd1928e9d89fcfd66c2a9b4b36ee4a928ae2b92fc2c4c33181126ce981f65ffa04df8adb99bed5944f593ad2acc5f59e11d7629c5dcac7199a61eda17de7139d7282cdb6b01d43191f9aad75a125f6b624166ee30b153b78756be49dcd432327d801baec3fd836f7be77744787d0e81e23cf7cd2f540fbe0c057057322d139bca33af9c1d72ffed2d87d76a19b2b3e435871ed2603c5aa61fcc731bfa23e2796efccafcb4d59d92e6", 0xb1}], 0x1, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [r2, r0, r2]}}], 0x20, 0x88c0}}], 0x1, 0x81) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x20000081) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x40010142, 0x0) 2m59.116116036s ago: executing program 0 (id=1354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000001) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r8, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) socket$nl_generic(0x10, 0x3, 0x10) 2m56.338875436s ago: executing program 0 (id=1356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="50010000", @ANYRES16=r6, @ANYBLOB="010000000000fcdbdf250100000008000100000000000400048008000c8004000b800800020001000000200108801c00078008"], 0x150}}, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2023) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0), 0x4) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000340)=[@ioring_restriction_register_op={0x0, 0x2}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000340), 0x200, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000440)={0x0, 0xe, 0x3, {0x2, @pix_mp={0x6e, 0xffffffff, 0x4f565559, 0x7, 0x2, [{0x6, 0x4}, {0x9, 0x8}, {0x5, 0xd00}, {0xffff8001, 0xd460}, {0x1, 0x401}, {0x4}, {0x0, 0x5690c427}, {0x0, 0x4}], 0x8, 0x6, 0x0, 0x3, 0x1}}, 0x800}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 2m52.065015805s ago: executing program 36 (id=1349): ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="6fc2232a624fe3766f8838c104568dd7772ed989cd81c3560c1c15bb7a4eb30f6364ebec6136c168edeeb44215f1767e8a30b98984dc3248ad6f7668bc25217b9cb8957f314cd5753cf95cc6f89cd41b75d2cb12ec329e83", 0x58, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$get_persistent(0x16, r3, r0) r4 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x120000) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f00000014c0)={0x5, &(0x7f0000000280)=""/57, &(0x7f0000001440)=[{0xebbc, 0x1000, 0x8, &(0x7f00000002c0)=""/4096}, {0x2414, 0x2f, 0x6, &(0x7f00000012c0)=""/47}, {0x8000, 0x83, 0x6, &(0x7f0000001300)=""/131}, {0x1, 0x2, 0x7, &(0x7f00000013c0)=""/2}, {0x4, 0x2f, 0x7, &(0x7f0000001400)=""/47}]}) keyctl$describe(0x6, r0, &(0x7f0000001500)=""/88, 0x58) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000001580)=0xfffa, 0x2) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f00000016c0)={r4, &(0x7f00000015c0)='keyring\x00', 0x800, &(0x7f0000001600)={@align, {0x1, 0x8, 0x1, 0x6}}, 0xbd89, &(0x7f0000001640), &(0x7f0000001680)=0x10000}) ioctl$SG_SET_KEEP_ORPHAN(r5, 0x2287, &(0x7f0000001700)=0xffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r5, 0x9) r6 = add_key$fscrypt_v1(&(0x7f0000001740), &(0x7f0000001780)={'fscrypt:', @desc3}, &(0x7f00000017c0)={0x0, "a7c4116a36ede56fa61ec246985829d8806212b8750d6535a70ad1a5bcc0acbf1f0fce22bcc5ab3a8c13b0331ad54036c93a24cd8d991ede695654734fc5a286", 0x3c}, 0x48, r0) keyctl$reject(0x13, r1, 0x401, 0x6, r6) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000001840)=@x86={0x2, 0x9, 0x81, 0x0, 0x2, 0xf1, 0x6, 0x4, 0x67, 0x2f, 0xc8, 0x6f, 0x0, 0x9993, 0xf, 0x0, 0xc, 0xc2, 0x6, '\x00', 0x7f, 0x4}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r5, 0xc0245720, &(0x7f0000001880)={0x1}) syz_open_dev$dri(&(0x7f00000018c0), 0x19f, 0x8800) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000001900)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3}) keyctl$get_persistent(0x16, r3, r6) r7 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000001940), 0x1, 0x0) quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000301, r3, 0x0) r8 = syz_open_procfs(r2, &(0x7f0000001980)='net/l2cap\x00') syz_clone(0x42100080, &(0x7f00000019c0)="e8f5564ab4d538e842dd2cd6847eedc79fb6fb7079e3dce92595cdbb14877cc959f3df2dbaa5af5480", 0x29, &(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80)="0b5776f5a4e39732f005081ff9a11beb5cb3d05d335fe3dbc34733321a50e4d817ce28b2d9d656b650199bf539f7be043331e9479f9f30415ebf72d7ec7b879e5f6752801b9ddbf5aaa8cc91c801af5b44d36fc27933f591a2886c53b6c5cdbe0bac88a0c28487b4071902b59892616c505698e8f772618d9ab9af3be2603c3b") keyctl$get_persistent(0x16, r3, r6) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000001b00)=0x0) r10 = syz_open_procfs(r9, &(0x7f0000001b40)='setgroups\x00') connect$qrtr(r5, &(0x7f0000001b80)={0x2a, 0xffffffffffffffff, 0x1}, 0xc) ioctl$UDMABUF_CREATE(r10, 0x40187542, &(0x7f0000001bc0)={r5, 0x0, 0x100000000, 0xffff6000}) r11 = add_key$fscrypt_v1(&(0x7f0000001c00), &(0x7f0000001c40)={'fscrypt:', @desc3}, &(0x7f0000001c80)={0x0, "44f6ab8cc6106c38bea6954730c6f8a3c4ffc83407617ecfc0f563f9f50924f7c0e861314431f7f448b7e09c688bb0feb2bbaac5cdf3408b050ba8210fcc09df", 0x10}, 0x48, r0) keyctl$revoke(0x3, r11) 2m46.608574314s ago: executing program 37 (id=1351): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r2, 0x541b, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="61f245cafab21e", 0x7, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000000000)={r7, 0x1000, &(0x7f0000002a80)=""/4096}) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r8, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) r10 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r10, 0xffffffffffffff7f, 0x0) ioctl$sock_netrom_SIOCADDRT(r10, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @null, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) 2m40.177490572s ago: executing program 38 (id=1356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="50010000", @ANYRES16=r6, @ANYBLOB="010000000000fcdbdf250100000008000100000000000400048008000c8004000b800800020001000000200108801c00078008"], 0x150}}, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2023) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0), 0x4) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000340)=[@ioring_restriction_register_op={0x0, 0x2}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000340), 0x200, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000440)={0x0, 0xe, 0x3, {0x2, @pix_mp={0x6e, 0xffffffff, 0x4f565559, 0x7, 0x2, [{0x6, 0x4}, {0x9, 0x8}, {0x5, 0xd00}, {0xffff8001, 0xd460}, {0x1, 0x401}, {0x4}, {0x0, 0x5690c427}, {0x0, 0x4}], 0x8, 0x6, 0x0, 0x3, 0x1}}, 0x800}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) 23.475968385s ago: executing program 5 (id=1407): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x1284, 0x80, 0x4, 0x304}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x10}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x10, 0x110, 0xd}], 0x10}, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='name', &(0x7f00000000c0)='_\xd0A\x15\xecp\xcfOZ\xdf~', 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) 21.486238546s ago: executing program 5 (id=1408): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x7fff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x4, 0x1, 0x20000006}, {0xff}, 0x0, 0x1, 0x3}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffff1d8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000001, 0x3f, 0x4, 0x1, 0x3, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x7, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x40, 0x0, 0x0, 0x4, 0x1000002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xa97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffc, 0x400000, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x1000, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dfd, 0x0, 0x0, 0x0, 0x4, 0x7, 0x72, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffc, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xfffffffb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0xd79, 0x0, 0x2011, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x4, 0x1000, 0x4000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 16.591536112s ago: executing program 5 (id=1409): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x40) read$msr(0xffffffffffffffff, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="bdf25e6f0d10668122f289a6bf3cc1c9476de5625a0271b8d988a9f5d5e0081242133ed6d905168ffd12a79b9d0245efce333b69021258af0b7f8fcc7b0ce9b48ff73dc5ebaa2a607033a6220a60c4e1348d92f8d0e9c79504518133021220077e1e0b4e0c8d373c779e03dd36c1f9667c8ee6aa56c2b97e9cded8b1738fea65774c4c5dedf7be75405218742aa9f5348129b9893ca01e43a8f648e689adb9776f9008596ca8a749e94b7d7b906945390e6c68fefd7364e749c35484b0a7b4569e8d5bf6fdc06c3ed56c599d61a21ed03ec5b61f74d9a7400e9a0999404ac63d7849d3f1bc1e777d2c180220c4227c492bd3ee3f854e846baf93fa9759ed96fb69c9bc2fca51d1f24a68e735ba5deeb0afc2b017849a1786574a50b6818e3ee1029b2257fe2ede4b065637fcb05632587600d1090b004d4fc3dc8d3576762d06a964bcc7d31f94e09ecec7a999717dd639a3db03df310a0a4f26134d982e80f00d3f1f20693cf36115046f52734d0bafab657131682c6c415168b87cabb42a125fdd6cb8a545b717e1fc301c0798515f201f7ff7bfd35db7605f4ef97a91a6da5d5f88d1455edce0e86ea60901ea22aee508a567dfcf0f3f630d4e8be3a312a5d997bbb8fcc319f32c45fc62b09778bcf810b48a863c1a0ffeac68af383d3bfb60ad9f69f50bb11557bb2e966bd231c49fee49ec8c2174fd3cfd245c56a1c982a1f818a50713df546cf9d01b70e165d371ce0d2ba41c6758c46da7eb8078d2c7f2a2462a32e37129dded20ec3f6169a33d136765d9ae28addf3fbecb633aee9a7ded0ec160b5ce35c92b855ba8362205017afaf9e45758d5e256e35452f6d03ac89712e81445b32dfdd8cdd28a5af8c75df2a27922dbf5cceabff945327b5f4ec2e93c4b367ebc6a54f903567ff1a3f9469a466ecbfef5c39671c9ac29f14de1575de46ba2e933cdeb068259593e73da67f05858ba0cf3e0316aa1a91c21f1a1ccf157b2f4160b86dd67ea854ddd098f34c0421a7ab541b6d105f76ff19afdef08456da28244b25b61162093592e72bc251936db09134f590ca0a1b844244aa054a748b695346a5d49b979b4c69cdad7ef09f615196bfa2918c07e81c325370461cdc50aeb105b3cc51e0a098d9e49118da9c1bb04da247fc4e7876136059fe1ed10042383502b54c6e26082eddf83196d6b2c9410e4217dc8c4c2de483e328ccfbea9c54ab549a23ec98c9db241a67ffd79af97822bcc0a784e8f4e61c83cfb637f4aa1a80027fb2322bca99b65d4d64e93f3484c83ce7f46e12f7accacf74c5d0362198d60de93925e1a631ea6c786843261c49cadf482f3ff541b88d92f801a8610c195ad6e09e4a1bc15f727d09d063e23bfde60585def96e3963978f0686ca079e86032cd23b30222ff0843fa1d0e883d2d75dffc12bab0109b25ff08cf1caeeb7c39e5f438c7b2a9a2a366d32fa9fa0e2885a473ce6b97455d58d941b46faac1f2d8335f276f14232e193be1301416584c47062059e92ece4347c89aa9bf2c12b7c7b5ef7b3bf27ef23367ca3fd037fd9145f84e6852ea3eb624b7622411851134a7ef388e7799df33bfae12a35bdde94de1b10e0e0fe6b40d158409992244a4e27af355aaf7983aceb0ca6c790ecbe5234fd0ad063ae2ee1fe48aff51c35c5553fd1ab998abcb3dd7b0efb2f9c658fc4671e536c0ea75b36d59efe1901e971a750a4fdaf15bc0d1de7681a18c73bd00329d8a7a59c8dde6ee9156759386428a593d9bcbac57f2ec6387dc713703b30e44e655f663947caf4bf15624517bf3f4df16a8ade7193d0a69d998d970c07406a5892dc625a2695bc5c495079f2100ac033f912b5135551c923b61687574b1c43ca81ae9312d668415c8162aea7582b8db90f96181700ac22771b985c0c3f6081cca160efb1bdcabc2177d081ee618ed92c5af569721cc9f0453fe8e512d089a2aa0a219504ff51ba258f6b3737120e7d55e3ceed42c1aef42ac5e969642e3ffa8bc9e7319927ff971d450ac5a8a12ef68747b2574e89a64dcff67a36cbcf0f166371f98825c6eaa8516e27b81b8701d47fbbb87748a771265afff6fdf0acd2e9da1d759523feb0f33a6b27c050cbd5ea833c4859d7c84878253652dc4277a8ad6dd0b1b118e866cb90f7f29cf3a65cd9ba5c5e888c2afdfcef2b9dca883dcb7908c0a2ba0e76d5992430819f4f7d0369c53f737abc75e7f52ed95320dde44bf8b6397ef1ae719eb550a2bcad515ed99246f753d9d344f668c58c2343873b2af2dbb8d0c1c3280a5e8267a89a16eae734102bf4ed6aec57f4e29eaadb118f5407337387ec12f6629f8de94b2fefceffb735effca8865722334dd3a27c789c96c2fdc7f96d702fa5e360a460856c3559ac65dac1aae0c10712cd99e8f7c9188a43460c2e3775f27518893628cb5f2cd25985570ad101b3ba16a342885d65ea1befef80aca975a3f8428eab9999124aeafa991f68151eb7ab9bffe132c8ad1f2e0ad79e0cbc0806aa46c0c53b6f1217dcd88f197a3c6ddcb5e1ca9c278d02736ab3f81db85d3fd751c38bdd449fb3f9e52c2e067fb8761b94ccf13e4958cb1f703d327cd510089ae4d10a96328b950689efd262f43470dd47c73327c63cd882432807a65d9d21ae39b57e27c14af2b6792c6d6687526593ce97e8000eb49157553fc6fc9e4f040098b43e4308aceb1c5f87f046389b3174cf96459460927b0fff05764d398c7c5e987ec4b08259c4a41a4fd293e0106e2c522cff08f07cb4dcb7165dd6ba7358bb7d389aae1bd76957e1b69e4b65a0443fe2ca48722b3babd8df8c53b6fc1fc0537defa60e79bf6f746771d3be7def7b14a813087804fdb7523566c47041014d0e4eb8e0faa6db79dc05a54299e54b34be446a3d3b0c073e212e305a78a190034885174fe25443061447ea7fa094f104b10dacc382cb353c96e3cf4993aba3b7271ecf3828feaa2490fa03697ac6bcd841130a175d7275033da3e7c094141d2ce798e8cf25b4b9d3356c0d74563ee9b81f9b18d10bf25988ce3f81ed002095c94b2cf2c8799f4e2194b11a6f4a774ac4fbf5c78d8163e681271505c17f47e71cd03a20490241c1f144ae59b19cce564475575e0af7f41984ffa6f5f8b365a338687ad494a79317679c00d74242b4155fb0a06fc735793d66bd6f252a26278896b6df70a393a21b0a9b80056c505f7266f296bbc3587af24c06476539cd1bfe1f20f818c778fd712300feab31861b31c254211c42d9f27ff3f41f5bb170c15b3daad6dda056065b24107ab3976549a353bd6f2859d84fba3d21f4377b1c5a0aa4fd039c485d1bdd8017817cdea1b8ba5b52c30ea06ae1abb942abd1917626deb37297d3df42cc848cd01622f13ad081f9d2c96384f6b4c72d4df9541b2cb36ec119e326f625aba6436dfa5d986cc8a6a15e082e2111c26a6da1d1e387445a7fe5a9ccf05dc01d08fd1b16f768b5b3b8b464976d480f4f1a44346ca5f01f29eff48e2ad585cc32f6c00e2c045c7015cb46f70052e4935c246ebcdbc7c3d091c825f864eea2dfe25459b6456f7b52c168fd565d250514261d171d65c8e9ef6fde70ff716b7c45a24f9666462a0919ed7a1a614df711c7f5b24dda275c71fbf973ed4f8cbbba5ea15bd7e5aaad972711159b20751f5fdb91a223f39cde6a83751a06c1ad0536d387bf3ea4a3d7e5e90bc52f4d101c045d5ad32fb58e45fd2fa2f5c8aa0bb40957465b87bef7fe6b76c16c8d07ecd51edb49faa5bb0070aba2dad3ca7eea1955d939cadb75286904a02db81fceb6b6b9b16ad84d373d33e134007fcdc02d40472fbbf70b57a53b6e5df122c0f8b3d44dc045104690f2d78b8cd2d0905d5d66830cb9125fa041d0fc2f08e20f9fa70bd17815cbb50f8019048d05df1673e9c8cc83e17dc91fd74b024b2b56b41bbff26016c6638b6ecc16deb349ee392776962746d62751b5672755a845b443c85d7c53605f274f3d5c3edd6ecd15e28545d2aea4df5d5e4eb169af361159249daf53f1339c1819370ad4d3ceafa7dc6a9118a2f1e69c4db409093eca05ec1cad8d606db1c5d3b58609eda4f1e71ae62765d79501ce8de42e60cfdc08517559f9c65e8dfbd73a5f971aa96f2cd20f1763e59d3b15367e0b206e97d5f5462e81299743e1959376fcdfac93855ebac2b5235b0f03c58eeaffcea40be5a9fe6bd290deddbb28db6539a72936a1953cb4a558dc93271a54d1e05cc3f4025c0ecca369b0d25d47c3e66049045d0daf9dc9fbe2c69d217d2e6939bf6d1875cd23b73d2e921aea9eee4f1f9b036e8f5cbb0100710c1dc27d1fb37ea26634dc827bfe42d094ce9576611a6bce6b67467f983a327e9dd34896672f257b41b8bee33a041ce2e83a65fad93e1a2a06854a40fe3751997c5233d397e5ce5ea676379527ad0e298fa62cd91ef89e9876db8e0909b60ff16c4a0ba01307826bf18c242e77af8ac40c681b8ae2cbd58c4eb4e6a580bd3f57bf1ffa44a1d080426d3f8c733568ccc75a61980ec92b5b0f4cf03e3ece177954c21b90b7828c9113da0fc53f6f5c5ea8bea08e14a12b889fc705ee44d834f184532421a584bd7301c9bc822deb7e71050a8cf0cd7f96dd2fd93b9d7306bb9702af5b88b2090d2b67bd88a299704e8c556b9066e35e4c864cf1775a6ed94a9685e996c4c671cc807f7c09b45559ee079d56547179e1b1af630c4ba04717cb5e88c0caadaf57964f5197d9d98a7f5b5e622c3eb5844645c4c2408806bbb4be5778925df16518c06597b243019bdc690a4723548a658529717360d474cfb6fcf30060b320cac29b2e42ec4f390a6c7a15274099a64a8d71c4a84e86d206cd2c7ee8125b19752a18dd2eb0dc643aa6b4494760f62acf187080281ec7d0a526374f69051e6aa13d8321372bea8d9e9c7fed4d0a48257e5c7463bc0a0165acc4712aec8cdd014de0b98d0de9b0dc3cc2d40c3be3ea3edb04b18f72209da21f5900a4ef002aeb88a364ed0bb102c2e164ac4f0dff7f082c3757b7ee1cd0e3b1ad45dd77553a4462c8f84ae21f8246281a02160bcf90c00b7816f93524d4d6577c6432d97da328757c3dc06c06760c82946f9f44e909cefaad0734094d8a9076abfc79c79bdb9bcdfa13697bff6f1a219653ac96882d615fe4757b76a8235f2f5e5978cdb5c5bacf4217a56fc6416943552d6e1d6c3f2e8801322368855aed0c5302d1445cbbeb5ef970abd8b5316f0c7cb7f5bd023c619ecf6b1714705a48b67e7a5c2f15bf9c90f6ada82d36484776d20f464d22b88b5d99dc2ba812b9f38754ac71499705f83875eee065482e2fed4c5f3537449857f409c635dbb2c0565ce9f23bbb5bde3ee0bb94f3fca1b5a0d78825c80f50a839a4b3fe6439fbef4190f8ddf1012990268aa8c87b91fdd210530e0bee9c17e35ee59e519801f7fdc72e5d1b96793ff13654b8eb28c2f1a702b1c5ed694d567e70981c596d9997a3e9133e3b623ea071bbd807c86ee191f02400c53851e567f2ceea1a80506af359cdf36c3cd9963d5cf3d32c64f4f7706c78a90d55f6cf12373fac70e17aa1bb6688710eb3b62ee809de762e5093cb326ed56c57b164fd73023021a4be32ec50bbed23bac420880af3a17a5f3502c95781e6251f88b17f83a02511ca782118f1bb07fe73d50fb70043734df8c82f07e74bb4500179d3c1e33d4075aa4a873eec1a34fd09bb3747825e1d821ce6e4f6b8270b0d1123499ca176ad47613bcd02b4825ad70ec79ecd1dbb496737d5258024898dde00e62b0b594f0e830f0c8475a3638ed4c438e87b6919314f9f2b5f81b2c42a9a0269477a637edc4b06486d41e093c65bb26acc7968320713fcf9551e9c6a855dbf7d3961bda89df32fbfb67bc285a1c14692afb72fbc6587e255627fed4971e8058248a926fd586bfa25aa19dc46b3f51d402f74724abcbbea314d8127c7e92ce0adf8af38b7047b8d5269e145c2d58158d178f0d91ed03a451e3a324b7add7377675ab8a56c5395efdaabaafcb6b1348e984677353e6f77296fe7e75a5afe6d2bd1e26be62ecb84801c20a462c4481762d2be207dce9c49e656133c605b16a1b4ff683983e3ececed23fb6540f0dd89776d525f5c4e07a3f50968f35b0bf92cd65514b1759918e333637d383a1810e28a822fb20151878461ff61cca3c340cb23f9602d03c10d4b05d4f712521921148c3e249358925f87d00a351ef7917b4e817a7a1d2191e6bb026dfb8e2ba08e52f1e43346cbab51a45dd2d8bfdd252ec79a7e9203e97a576a7db467def3ac0b789a6d52015712e89bb0df0879d2868d85e2f2d2c90547dae52500db275842eca910e48f0c43fc33fbd179d39ac9aab6e0f397f8eaca95793d8c196e49b050fd9815994f700ad4d22c07756fce9a755768be74dad0589411935de2dbfd10d200da75b4a4f9e523e763034820afc8c7d02132bde03108293263f84d7ed165e587733d255e4c11fffd52f72725fd0238dcd5ff815fd22c26126aae530a7d01e60c14f4f8e701ab527b6483fe78125c5e4402ff51c721cee92e5dd6db40e28b21532a21facbaf396d163237c5cad61a05e9c0c39d1ce99152687a16104787d87b092e9037f147da8bbc0c6456bbe7a2006742534010f507dca79ce8b59097e0cbbe312f48fc0a3ea84e7a484b266ee766a85849b464d93f872acae4af0ff5c7ea06dfb26a66674fba6e8a9481b49a41bed7becbfa680681834b1a3d7961d69d592fdb403d1566770e0173cbf8fa14956e0539a5a4eeae62cb6a7d1ec9e9d9a36b30b511a615395b470fccab197139818a30224c4f053d35e8d9897141c8a94012f8254f325b8ddec5c0e638c09e2cef80cb4e16bd9aea09b86bb48548b012145ef88932040d7cc59cb0265ee451e243c08d672ddc06de38dc15daf50a8ec1c18b9bbd87e2158ea8fd7a7559fe94d4c6680e304e2d500ca016e68d9f8a25271421b9deca3c8067f59a8f3edf2ad1cd20f15e4c820d703b6ffb6e368e8418bd392994c931c50cb4c858a7db9658e2a468fe06b416265b5e236fbcdaa86cee8ef146fe78628ed35c6aaad5bc455ecc2197ae951940e5bb64454b488a3b12e4b67e84f5a35a1daec5d95a33184f6c30fc553f5d0955a797831aeeed051fc7619471e77f5c5c8e40af7d6b354d039c4fcccc8624360cfc8b4a4a266e581f87b2822e1096741e804ad6a70973a3343822bc4138fdb2cac87fe7a74d0f71473668b3c62f00c622f8d9a25f6970700000000000000f412d53976b5fa199c0f85fcec7a6e8ba629b053f1a26597bdea2c53bc17fb1bca3d6ba561ddc17cee05ad161c20a24b420304b805733d613f8c67c6014a873f3d5f4ec973ebaf0078114db4fc6b607f2f9aefd61f439d80dca94c297081f005b63b26012d39d88b32e36d73b6dd5cc1838aed1d594bb3991f4a073330884eb07c2157f6864bec324ebcc8ce6a49c90cd2541323d95fff147ace0e70a86c6e5d758e37b12b6a280f72bdde00411c803607c4241a1d62b595925503636590b2a4fb910b1577026a83629fc039207b6d355e6a06353daf4a8b0f2e9c412044105df627e8686cc69e223b11c961eb00561144defd02ee6f5b8c0db6a314afe11cb68a66b01974c6dc9e685b013b654d9c7a450f7429cf2a26f6e34ea79895051d71b06b1903274f30fe2fd107b7e7bd477d70bd6324824d39d0e07b0f90e5152c562daddcb258a0faf8a9941868e7463910d35da02696ccb6b16567576bd8397337f20c5a5db9ac04fb302c513845883babdd345d7eebbd107fe0d2cdbbc01d5e40c56660eee85bba1c7317ec59a572a4eb9d1fea5d76dfb3e01f416ae4a0795eadd5f32b17dad816e37d630f9a433a05bbf091de03fdb0f4a5c8d74c0846d0fdec786a2adafd535d82401923eb5279009a2a247f41db21afc647b88c82529b65bec96dc5bd799264d32fc15de8a909946a939701d5c60269d0a631d4d9263ef527a69e5875339d5d2bdd0a2cbd5ccd58127b524bbb114b7a306ea220fe082db0e0db14d828cd72900c77dbcad0bb760e85b2986fc76d98e76a327253327bfb4d23aa1d45629ef71e30e453e19acc470538b95c3b77d84f376a5b485f2f5156392e22a99716dc90e653c1eb6343e647c41a60a2604b001f44c2e65c7f0d5040a405e948d9be5cad3aff848de9e9db6268a043c91e666226bcf9a8dadeeda32db2e14bece95d4925e06bf26cf6665000f98e47c4ca4b5a7859f28cca8c7f1b3340bcf616920c3cd53c2789364b03e6a291817766888425b0ec7ccc484d5474a02a7cbb821b058cc853fe830f86f6cb1ca73812dd919f1c79a7dfa13d310654176609f8ca482c3fee11dc8d843116f5a775fdeccbb975d7e833f081e16d914e0f7154a48668c2be7ccedccf2edb407975630e4ae24a16d818fea03b141dea14cbd404ac9b01dc8d0cba227cfbd33f33d20c9101a71f33d1fa832ce68868907be9fd8f9f6a76b03eb4eda0c55d83c57cedd17e3e96d267410287caa26984f84903b8748579a6879a301e7393ed1467cb98be15c34d6d5c0c957e1a7b941ecefe07b9954e207c76065c1f668ec143c533dd3d863fec137f2a00d746d349d8cf9fc438eb9aa22284f75f73891ede03d20757df1df054957ec94d551cfa56f10b2044e257e7d75470dfe0cc6094b8a1f2c6198cc89ba6df91e57fa87340edf426702aca7d2b3ef46b78335c2442b0d775405ad2569ad7ce46dd3494dab4d98d78e7f393ed6816a5b6c9356b7409a5cdc00b4ea99b7823c744e46e4215945cb02edbdf332d7c109fc4a83ceb2d6198fcc6f3a835679cad70c7dff7dc605450d5fa7e29f9b32f5a1d53d12e2561361346c55dd3fc79e2ea2588fbb8e55c42e55c8cf22ccdac9216be9fdad10efea56c393f6f58896a0df541141f829b50e5e7208f6218bb683208af0c542ac5636e5c2eeb15044072f28a9755c63ec67baeedf0941c6d0c5f2fd702ef1011539932368dbe1664de988efbed22a43b215ae69eeb5312ac5cc966ca12f12c034ddaaae340cd6e89e42621053db7969cd9753a72a6451f78fbd8b4840329b6c6eb9bdf365444276ab81251f6894fe3d125e8eecf30f3a98116c96d2de30a1b195c1d10ffdc731b78740a53f09bcb66b6b237bc56f9426135ca651d9329540c386dc5251b537c4b8317460b0dafbc3d4f1b8d6a939e51de59b22d32e5daafb5f0d469e58567cba1f327e67ee8d0f53b041fa643a4a594d4cf28a0004aace404ca95b58a1e26d601563b188fdd2c97b8d8714913c3564d0a445d35060ed2ce20daa4174cb92653626fa9bd10513c8006d757acecd7eda9d41393dfdd683ad50ab4de8cd832b26c82edeb4af5013f43f297dbf502b62fd6c2ced9641235838853c2aeb447fa06b6ecd1c11f17d3261e87aa1ec86ec8b23fd4281f33469d7c4414b60268367d38d9235dfe3ac4c7032e298d0cbee4b705f4085f5653b4637a80ae575b44c6f1a2374b899e061d03abad5770355673020afdb8fecf5be2a8617aab331646f05d49bf5beefd650bfd240ed3b5abadb21941c4a615004284ff7927ef9a745e3d4208dfabb0b04d04002bb7e449ca884373fe4ebe35e18ffd249e992ba779284b1064b1e27e6aa0c4c88e915246e029113b4d01b53583b8282ea1d5d4a305d3e20f894af640abf9e376d6b1c6fd3bf86821b4a57c5c22d8172ea40daf2b398dc0329d4b7dd08c75c902f0368def10217234bea599509a7e61b4a11915009680613bf69f2f4b38e7595449a20aee13949c688a69cfa73af328c7df7a494d0e8d249cb3c843149b11bdddf34282db31b156261254472fbc2e12c7b7133f7d273ef472761b58e7f8e54ea2861ebccfb141e3b245b5e4a75204d12ff5d7b0a44ae039b3cf79869d24f1602060f81785a851b996a3693856c6b2e90f27dbd4be518ae3065e692e5f2842380e4f5cf91582632e6d36b260c27a1e7ae80b47d14067db8720e619c7323f358098ef054fddde357f4453c6e7ace38833ed1c9bc9bf0c054564b79885cc7c8fc5d7ebde25f0307067816067a4a96ddedfbd268ca19a67207ecfec5598a442a1c0e823e012ced27c3266c6721aa5718dc076e7f50023a49a40980bc0fcd568295c8d4c59f1874aa944b88901e38c803ef52c226a7daf055f4ec3bbecd878654a456448e552a0fafa64124688dbd7f3787af8b3fdf661680ae309939542337ab22f510ba9ab1a7229f5244938e9324b0b1ad22ad9e16b84f93cea693186a5c76ad7f74e7c82ce6cb9a9ecf3a4a1a6d06a8fdd6474ae1aeddfcef270c6c637918b7aed3d5068e17d3642e9fa66c985b2dca5b38ffdb3545a4954d0a5813bfec99721259562b80696dadd921e9f18978d21dee1129a386623cf93c804aeb4e511ee8658fcef51746dbe1f87285eae850f008f3effdb78994e6eb370600c1855f672de0b750ad56c22aa937c1eaa8a7a333fc55f814e878bf71e8d9717a8f0854635554f07393ce04cb6d58e9ac0f5808d9158fd6320fdf75b2db9cd0380418e8664b5ccdde967b8a76e8002683849fa507d78e971f7118b2eba2c025dc359684cbd7b6b2e41ed0783da3fa2ae2de5dcb2db67d06a21aa419bd465ecc378842219a55f647535c7f4002061c65338d9c098ef31b77297c9905b91555cb436b83cb88e48821fe750dfcb4305e146b7f68265a35331017dcd902071a8b904534dc26a017f2bd14bcc65963efc9a8689298e039ac717fd460703e7d08ead0ca43c3c88ee423ed92a20e0b7dd6636313d057b97fbfead33d0aea2ff50c57df057bdd6c7470fde9bf9f1fbfc7ddcea22c1ce9273705be952464b3d48aacb7a96e5ddcab0b4d7b564d12b66c07663e05dff55d40d7a2371ead0f948e6921b8d271f8c710f526844db88102e68c3ae1a35a729af6d6521dc587f83ced8263d6d5801dc8b9c11659cca84c6e4076021f2747769cbf50d3362602f6491a1c3734a62aa024e060e69b32a5ca8f5ebdf8deeeda60405610fd182cef2e4cd534ee31db32bb13f0bdd53799dc438c38ac0a49be58f0dacb53286fb7f1648b8eaaf4c997689eb703594f55fdbac9840b91696f1f2ee8599cd84d3a904b3b7515fd22866cc0c2ef1f8db911593801474bc90bc8151ad4b0da717cba6b388440dbf85cfd6fdf874960712e93bfe9cb22bd84139c0e3badc70b36dfb9edb4f4d4b45514e826c5dc0972a9596f14c0b4de118253de91aaf7c6bec8f95ea509c374f35543f678f12e467c394d21f613b446607051943ebd5a49b729e91681f54215f9d1c330e264efd1f214b7196e72eeca6796ca35b17e27c10cb6171e7eb520fbe0394f7399b65fcb0014a5c3b9c9c10b14877520d0a572b8fdf5e0bccd328540422a4ad906e2e358a6916dbae6b36aa8c3bd4514c56fc2602bc84c7c571af4f667eb7c3015f3ff85a6a309db43c6c1dcc922951fbc65c659d4b9c65608086ee33151e02596976109e3e2de848dfcca7b771c1997b9fa6ccc7e0299303ad5d11700611ed70b809ea039b00", 0x2000, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000040)={0x6, 0x3, 0x844}) 16.346245226s ago: executing program 5 (id=1410): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000240)=0x9, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) (fail_nth: 1) 15.896041182s ago: executing program 5 (id=1411): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, 0x0, &(0x7f0000000040)=""/128}, 0x20) (async) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000a0000d70000000000000000850000004100000085000000a000000095", @ANYBLOB="5af0e904e967b712016af2b9b14f484eca08b47d9c56620971601cc47d54a8be9a364fc518237bfcb6b80816240c1a186b3ab209d29da0f1dba217b4a391fa3c58acc0cf1341d84ca4040c5d56c227e444bda924065ecb5f86daf653f6580871f95c8c5d8f101cc00135c063d039ece566712b771d6e48f4e52ce0ef86495247496f8b9878b606e4d866ebf792e3775753e94df9ab8b5691148ffc040bd8aeb7778e3474653bcf4ccb13a7e5697bf3860ad1b95fe4e85334f62cc20a497417b6832f", @ANYRES64=0x0, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="78f0245d2950215800040000d255", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 15.541989757s ago: executing program 5 (id=1412): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000280)={0x8, 0x7}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x800400, &(0x7f0000000100)={[{@usrquota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]}) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, 0xffffffffffffffff, r3) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000002, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x5, 0x0, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140)=0xff, 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3ff}}}, 0x30) readv(r6, &(0x7f00000001c0)=[{0x0}], 0x1) landlock_restrict_self(r4, 0xe) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x40000) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) 0s ago: executing program 39 (id=1412): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000280)={0x8, 0x7}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x800400, &(0x7f0000000100)={[{@usrquota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]}) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, 0xffffffffffffffff, r3) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000002, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x5, 0x0, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140)=0xff, 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3ff}}}, 0x30) readv(r6, &(0x7f00000001c0)=[{0x0}], 0x1) landlock_restrict_self(r4, 0xe) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x40000) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) kernel console output (not intermixed with test programs): ity 0, space 0, times 0 [ 518.665511][ T9840] CPU: 1 UID: 0 PID: 9840 Comm: syz.5.1088 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 518.665537][ T9840] Tainted: [L]=SOFTLOCKUP [ 518.665542][ T9840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.665553][ T9840] Call Trace: [ 518.665560][ T9840] [ 518.665568][ T9840] dump_stack_lvl+0xe8/0x150 [ 518.665598][ T9840] should_fail_ex+0x46b/0x600 [ 518.665625][ T9840] _copy_from_user+0x2d/0xb0 [ 518.665650][ T9840] ___sys_sendmsg+0x1c6/0x360 [ 518.665673][ T9840] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.665724][ T9840] ? __fget_files+0x2a/0x420 [ 518.665745][ T9840] ? __fget_files+0x3a6/0x420 [ 518.665775][ T9840] __x64_sys_sendmsg+0x1c3/0x2a0 [ 518.665796][ T9840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.665835][ T9840] do_syscall_64+0x14d/0xf80 [ 518.665861][ T9840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.665879][ T9840] ? clear_bhb_loop+0x40/0x90 [ 518.665899][ T9840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.665917][ T9840] RIP: 0033:0x7f4455e3c799 [ 518.665934][ T9840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.665949][ T9840] RSP: 002b:00007f4454054028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.665968][ T9840] RAX: ffffffffffffffda RBX: 00007f44560b6180 RCX: 00007f4455e3c799 [ 518.665981][ T9840] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 518.665992][ T9840] RBP: 00007f4454054090 R08: 0000000000000000 R09: 0000000000000000 [ 518.666003][ T9840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.666018][ T9840] R13: 00007f44560b6218 R14: 00007f44560b6180 R15: 00007fff1d33d568 [ 518.666048][ T9840] [ 519.104364][ T9843] netlink: 'syz.7.1089': attribute type 11 has an invalid length. [ 519.104387][ T9843] netlink: 'syz.7.1089': attribute type 66 has an invalid length. [ 521.069778][ T809] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 522.104758][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 522.110320][ T809] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 522.110351][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 522.113680][ T809] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 522.113708][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.113725][ T809] usb 1-1: Product: syz [ 522.113738][ T809] usb 1-1: Manufacturer: syz [ 522.113750][ T809] usb 1-1: SerialNumber: syz [ 522.144886][ T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 522.243664][ T809] usb 1-1: config 0 descriptor?? [ 522.267647][ T809] usb 1-1: can't set config #0, error -71 [ 522.274936][ T809] usb 1-1: USB disconnect, device number 35 [ 522.324932][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 522.327963][ T9] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 522.327987][ T9] usb 8-1: config 0 has no interface number 0 [ 522.335343][ T9] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 522.335371][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.335389][ T9] usb 8-1: Product: syz [ 522.335401][ T9] usb 8-1: Manufacturer: syz [ 522.335414][ T9] usb 8-1: SerialNumber: syz [ 522.360996][ T9] usb 8-1: config 0 descriptor?? [ 522.416631][ T9] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 522.629988][ T9] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 522.720881][ T9] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 522.772791][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 522.876516][ T9877] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1100'. [ 523.185597][ T9880] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 524.376024][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 524.377947][ T31] usb 8-1: USB disconnect, device number 17 [ 524.408819][ T31] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 524.430450][ T31] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 524.432337][ T31] quatech2 8-1:0.51: device disconnected [ 525.038236][ T9896] 9p: Bad value for 'rfdno' [ 525.344865][ T5880] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 525.500852][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 525.500885][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.500920][ T5880] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 525.500940][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.551286][ T5880] usb 4-1: config 0 descriptor?? [ 526.164094][ T809] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 526.313270][ T5880] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 526.313315][ T5880] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 526.313342][ T5880] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 526.313368][ T5880] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 526.313394][ T5880] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 526.313419][ T5880] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 526.313444][ T5880] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 526.313469][ T5880] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 526.313495][ T5880] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 526.313520][ T5880] petalynx 0003:18B1:0037.0007: unknown main item tag 0x0 [ 526.450361][ T5880] petalynx 0003:18B1:0037.0007: hidraw0: USB HID v7f.fd Device [HID 18b1:0037] on usb-dummy_hcd.3-1/input0 [ 526.485533][ T9897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.486081][ T9897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.494201][ T5880] usb 4-1: USB disconnect, device number 39 [ 526.584754][ T809] usb 7-1: Using ep0 maxpacket: 16 [ 526.586590][ T809] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 526.586619][ T809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 526.588929][ T809] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 526.588954][ T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.588972][ T809] usb 7-1: Product: syz [ 526.588984][ T809] usb 7-1: Manufacturer: syz [ 526.588997][ T809] usb 7-1: SerialNumber: syz [ 526.638750][ T809] usb 7-1: config 0 descriptor?? [ 526.676575][ T809] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 526.676608][ T809] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 526.872821][ T9901] fido_id[9901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 528.288218][ T809] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 528.289549][ T809] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 528.297026][ T809] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 528.297047][ T809] em28xx 7-1:0.0: No AC97 audio processor [ 528.510168][ T5880] usb 7-1: USB disconnect, device number 17 [ 528.512486][ T5880] em28xx 7-1:0.0: Disconnecting em28xx [ 528.687189][ T9921] FAULT_INJECTION: forcing a failure. [ 528.687189][ T9921] name failslab, interval 1, probability 0, space 0, times 0 [ 528.687224][ T9921] CPU: 1 UID: 0 PID: 9921 Comm: syz.0.1114 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 528.687248][ T9921] Tainted: [L]=SOFTLOCKUP [ 528.687255][ T9921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 528.687269][ T9921] Call Trace: [ 528.687276][ T9921] [ 528.687285][ T9921] dump_stack_lvl+0xe8/0x150 [ 528.687316][ T9921] should_fail_ex+0x46b/0x600 [ 528.687343][ T9921] should_failslab+0xa8/0x100 [ 528.687363][ T9921] __kmalloc_noprof+0xdf/0x7b0 [ 528.687386][ T9921] ? kfree+0x4d/0x6c0 [ 528.687405][ T9921] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 528.687432][ T9921] tomoyo_realpath_from_path+0xe3/0x5d0 [ 528.687462][ T9921] ? tomoyo_path_number_perm+0x219/0x630 [ 528.687487][ T9921] tomoyo_path_number_perm+0x246/0x630 [ 528.687514][ T9921] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 528.687541][ T9921] ? __lock_acquire+0x6b5/0x2cf0 [ 528.687592][ T9921] ? __fget_files+0x2a/0x420 [ 528.687616][ T9921] ? __fget_files+0x2a/0x420 [ 528.687635][ T9921] ? __fget_files+0x3a6/0x420 [ 528.687654][ T9921] ? __fget_files+0x2a/0x420 [ 528.687678][ T9921] security_file_ioctl+0xc3/0x2a0 [ 528.687706][ T9921] __se_sys_ioctl+0x47/0x170 [ 528.687733][ T9921] do_syscall_64+0x14d/0xf80 [ 528.687756][ T9921] ? trace_irq_disable+0x3b/0x150 [ 528.687775][ T9921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.687793][ T9921] ? clear_bhb_loop+0x40/0x90 [ 528.687814][ T9921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.687832][ T9921] RIP: 0033:0x7fa1486cc799 [ 528.687849][ T9921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.687865][ T9921] RSP: 002b:00007fa146926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.687885][ T9921] RAX: ffffffffffffffda RBX: 00007fa148945fa0 RCX: 00007fa1486cc799 [ 528.687898][ T9921] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 528.687909][ T9921] RBP: 00007fa146926090 R08: 0000000000000000 R09: 0000000000000000 [ 528.687926][ T9921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.687937][ T9921] R13: 00007fa148946038 R14: 00007fa148945fa0 R15: 00007ffc48731b48 [ 528.687967][ T9921] [ 528.698989][ T9921] ERROR: Out of memory at tomoyo_realpath_from_path. [ 528.800566][ T5880] em28xx 7-1:0.0: Freeing device [ 529.597637][ T9942] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1118'. [ 531.120513][ T9956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1124'. [ 531.339547][ T9960] FAULT_INJECTION: forcing a failure. [ 531.339547][ T9960] name failslab, interval 1, probability 0, space 0, times 0 [ 531.339603][ T9960] CPU: 0 UID: 0 PID: 9960 Comm: syz.3.1122 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 531.339628][ T9960] Tainted: [L]=SOFTLOCKUP [ 531.339635][ T9960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.339646][ T9960] Call Trace: [ 531.339654][ T9960] [ 531.339662][ T9960] dump_stack_lvl+0xe8/0x150 [ 531.339693][ T9960] should_fail_ex+0x46b/0x600 [ 531.339720][ T9960] should_failslab+0xa8/0x100 [ 531.339740][ T9960] __kmalloc_noprof+0xdf/0x7b0 [ 531.339765][ T9960] ? kfree+0x4d/0x6c0 [ 531.339785][ T9960] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 531.339804][ T9960] ? rcu_is_watching+0x15/0xb0 [ 531.339829][ T9960] tomoyo_realpath_from_path+0xe3/0x5d0 [ 531.339859][ T9960] ? tomoyo_path_number_perm+0x219/0x630 [ 531.339885][ T9960] tomoyo_path_number_perm+0x246/0x630 [ 531.339909][ T9960] ? rcu_is_watching+0x15/0xb0 [ 531.339929][ T9960] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 531.339956][ T9960] ? __lock_acquire+0x6b5/0x2cf0 [ 531.340008][ T9960] ? __fget_files+0x2a/0x420 [ 531.340033][ T9960] ? __fget_files+0x2a/0x420 [ 531.340052][ T9960] ? __fget_files+0x3a6/0x420 [ 531.340072][ T9960] ? __fget_files+0x2a/0x420 [ 531.340097][ T9960] security_file_ioctl+0xc3/0x2a0 [ 531.340126][ T9960] __se_sys_ioctl+0x47/0x170 [ 531.340153][ T9960] do_syscall_64+0x14d/0xf80 [ 531.340178][ T9960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.340197][ T9960] ? clear_bhb_loop+0x40/0x90 [ 531.340219][ T9960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.340243][ T9960] RIP: 0033:0x7fa29a47c799 [ 531.340261][ T9960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.340276][ T9960] RSP: 002b:00007fa29868c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.340296][ T9960] RAX: ffffffffffffffda RBX: 00007fa29a6f6180 RCX: 00007fa29a47c799 [ 531.340309][ T9960] RDX: 0000200000000540 RSI: 00000000c0d05605 RDI: 0000000000000009 [ 531.340321][ T9960] RBP: 00007fa29868c090 R08: 0000000000000000 R09: 0000000000000000 [ 531.340332][ T9960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.340343][ T9960] R13: 00007fa29a6f6218 R14: 00007fa29a6f6180 R15: 00007ffd472f1d98 [ 531.340374][ T9960] [ 531.340405][ T9960] ERROR: Out of memory at tomoyo_realpath_from_path. [ 532.796361][ T9968] FAULT_INJECTION: forcing a failure. [ 532.796361][ T9968] name failslab, interval 1, probability 0, space 0, times 0 [ 532.796384][ T9968] CPU: 1 UID: 0 PID: 9968 Comm: syz.0.1127 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 532.796398][ T9968] Tainted: [L]=SOFTLOCKUP [ 532.796401][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 532.796407][ T9968] Call Trace: [ 532.796412][ T9968] [ 532.796416][ T9968] dump_stack_lvl+0xe8/0x150 [ 532.796436][ T9968] should_fail_ex+0x46b/0x600 [ 532.796451][ T9968] should_failslab+0xa8/0x100 [ 532.796464][ T9968] __kmalloc_noprof+0xdf/0x7b0 [ 532.796478][ T9968] ? kfree+0x4d/0x6c0 [ 532.796490][ T9968] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 532.796506][ T9968] tomoyo_realpath_from_path+0xe3/0x5d0 [ 532.796522][ T9968] ? tomoyo_path_number_perm+0x219/0x630 [ 532.796537][ T9968] tomoyo_path_number_perm+0x246/0x630 [ 532.796553][ T9968] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 532.796569][ T9968] ? __lock_acquire+0x6b5/0x2cf0 [ 532.796596][ T9968] ? __fget_files+0x2a/0x420 [ 532.796610][ T9968] ? __fget_files+0x2a/0x420 [ 532.796621][ T9968] ? __fget_files+0x3a6/0x420 [ 532.796632][ T9968] ? __fget_files+0x2a/0x420 [ 532.796655][ T9968] security_file_ioctl+0xc3/0x2a0 [ 532.796672][ T9968] __se_sys_ioctl+0x47/0x170 [ 532.796689][ T9968] do_syscall_64+0x14d/0xf80 [ 532.796703][ T9968] ? trace_irq_disable+0x3b/0x150 [ 532.796715][ T9968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.796725][ T9968] ? clear_bhb_loop+0x40/0x90 [ 532.796737][ T9968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.796746][ T9968] RIP: 0033:0x7fa1486cc799 [ 532.796757][ T9968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.796765][ T9968] RSP: 002b:00007fa1468e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.796776][ T9968] RAX: ffffffffffffffda RBX: 00007fa148946180 RCX: 00007fa1486cc799 [ 532.796783][ T9968] RDX: 00002000000013c0 RSI: 00000000c100565c RDI: 0000000000000007 [ 532.796789][ T9968] RBP: 00007fa1468e4090 R08: 0000000000000000 R09: 0000000000000000 [ 532.796795][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.796801][ T9968] R13: 00007fa148946218 R14: 00007fa148946180 R15: 00007ffc48731b48 [ 532.796817][ T9968] [ 532.796821][ T9968] ERROR: Out of memory at tomoyo_realpath_from_path. [ 533.584236][ T9990] netlink: 'syz.0.1134': attribute type 10 has an invalid length. [ 533.602173][ T9990] bond0: (slave wlan1): Opening slave failed [ 533.752113][ T9995] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1136'. [ 533.752242][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 533.752256][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 533.752269][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 533.794804][ T43] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 533.944863][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 533.947649][ T43] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 533.947672][ T43] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 533.950263][ T43] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 533.950285][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.950295][ T43] usb 6-1: Product: syz [ 533.950302][ T43] usb 6-1: Manufacturer: ю [ 533.950308][ T43] usb 6-1: SerialNumber: syz [ 534.369066][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.369571][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.409801][ T43] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 534.409893][ T43] usb 6-1: MIDIStreaming interface descriptor not found [ 534.467258][ T31] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 534.600615][ T43] usb 6-1: USB disconnect, device number 24 [ 534.622184][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 534.634478][ T31] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 534.634497][ T31] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 534.661438][ T31] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 534.661467][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.661485][ T31] usb 1-1: Product: syz [ 534.661497][ T31] usb 1-1: Manufacturer: ю [ 534.661509][ T31] usb 1-1: SerialNumber: syz [ 535.071896][ T6795] udevd[6795]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.159453][T10006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.159880][T10006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.196832][ T31] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 535.196895][ T31] usb 1-1: MIDIStreaming interface descriptor not found [ 535.272150][T10020] FAULT_INJECTION: forcing a failure. [ 535.272150][T10020] name failslab, interval 1, probability 0, space 0, times 0 [ 535.272179][T10020] CPU: 0 UID: 0 PID: 10020 Comm: syz.5.1144 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 535.272198][T10020] Tainted: [L]=SOFTLOCKUP [ 535.272203][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 535.272210][T10020] Call Trace: [ 535.272216][T10020] [ 535.272222][T10020] dump_stack_lvl+0xe8/0x150 [ 535.272247][T10020] should_fail_ex+0x46b/0x600 [ 535.272268][T10020] should_failslab+0xa8/0x100 [ 535.272283][T10020] __kmalloc_noprof+0xdf/0x7b0 [ 535.272301][T10020] ? kfree+0x4d/0x6c0 [ 535.272317][T10020] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 535.272338][T10020] tomoyo_realpath_from_path+0xe3/0x5d0 [ 535.272361][T10020] ? tomoyo_path_number_perm+0x219/0x630 [ 535.272381][T10020] tomoyo_path_number_perm+0x246/0x630 [ 535.272401][T10020] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 535.272422][T10020] ? __lock_acquire+0x6b5/0x2cf0 [ 535.272461][T10020] ? __fget_files+0x2a/0x420 [ 535.272479][T10020] ? __fget_files+0x2a/0x420 [ 535.272494][T10020] ? __fget_files+0x3a6/0x420 [ 535.272508][T10020] ? __fget_files+0x2a/0x420 [ 535.272527][T10020] security_file_ioctl+0xc3/0x2a0 [ 535.272550][T10020] __se_sys_ioctl+0x47/0x170 [ 535.272584][T10020] do_syscall_64+0x14d/0xf80 [ 535.272603][T10020] ? trace_irq_disable+0x3b/0x150 [ 535.272617][T10020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.272630][T10020] ? clear_bhb_loop+0x40/0x90 [ 535.272647][T10020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.272659][T10020] RIP: 0033:0x7f4455e3c799 [ 535.272673][T10020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.272685][T10020] RSP: 002b:00007f4454075028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.272701][T10020] RAX: ffffffffffffffda RBX: 00007f44560b6090 RCX: 00007f4455e3c799 [ 535.272710][T10020] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003 [ 535.272719][T10020] RBP: 00007f4454075090 R08: 0000000000000000 R09: 0000000000000000 [ 535.272727][T10020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.272734][T10020] R13: 00007f44560b6128 R14: 00007f44560b6090 R15: 00007fff1d33d568 [ 535.272757][T10020] [ 535.272763][T10020] ERROR: Out of memory at tomoyo_realpath_from_path. [ 536.397826][ T31] usb 1-1: USB disconnect, device number 36 [ 536.622975][ T6921] udevd[6921]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.679275][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1145'. [ 536.874148][T10028] : entered promiscuous mode [ 536.988096][T10035] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1149'. [ 536.988119][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1149'. [ 536.988131][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1149'. [ 536.988143][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1149'. [ 537.532978][T10047] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1153'. [ 538.684840][ T43] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 538.834782][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 538.839103][ T43] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 538.839131][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.839148][ T43] usb 6-1: config 0 has no interface number 0 [ 538.839189][ T43] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 538.839210][ T43] usb 6-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 538.839233][ T43] usb 6-1: config 0 interface 196 has no altsetting 0 [ 538.906460][ T5881] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 538.907216][ T43] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 538.907243][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.907261][ T43] usb 6-1: Product: syz [ 538.907274][ T43] usb 6-1: Manufacturer: syz [ 538.907287][ T43] usb 6-1: SerialNumber: syz [ 538.953361][ T43] usb 6-1: config 0 descriptor?? [ 539.054766][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 539.058129][ T5881] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.058147][ T5881] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.061796][ T5881] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 539.061814][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.061824][ T5881] usb 4-1: Product: syz [ 539.061831][ T5881] usb 4-1: Manufacturer: syz [ 539.061837][ T5881] usb 4-1: SerialNumber: syz [ 539.281143][T10067] tmpfs: Unknown parameter 'nr_inodes' [ 539.358069][ T5881] usb 4-1: cannot find UAC_HEADER [ 539.398732][ T43] ipheth 6-1:0.196: Unable to find endpoints [ 539.448156][ T43] usb 6-1: USB disconnect, device number 25 [ 539.589486][ T5881] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 539.606175][ T5881] usb 4-1: USB disconnect, device number 40 [ 539.663703][ T7480] udevd[7480]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.111925][T10078] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1162'. [ 541.111950][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1162'. [ 541.111962][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1162'. [ 541.111973][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1162'. [ 541.182571][T10083] FAULT_INJECTION: forcing a failure. [ 541.182571][T10083] name failslab, interval 1, probability 0, space 0, times 0 [ 541.182608][T10083] CPU: 0 UID: 0 PID: 10083 Comm: syz.7.1163 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 541.182632][T10083] Tainted: [L]=SOFTLOCKUP [ 541.182638][T10083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 541.182648][T10083] Call Trace: [ 541.182656][T10083] [ 541.182664][T10083] dump_stack_lvl+0xe8/0x150 [ 541.182694][T10083] should_fail_ex+0x46b/0x600 [ 541.182723][T10083] should_failslab+0xa8/0x100 [ 541.182743][T10083] __kmalloc_noprof+0xdf/0x7b0 [ 541.182766][T10083] ? kfree+0x4d/0x6c0 [ 541.182785][T10083] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 541.182812][T10083] tomoyo_realpath_from_path+0xe3/0x5d0 [ 541.182842][T10083] ? tomoyo_path_number_perm+0x219/0x630 [ 541.182868][T10083] tomoyo_path_number_perm+0x246/0x630 [ 541.182895][T10083] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 541.182921][T10083] ? __lock_acquire+0x6b5/0x2cf0 [ 541.182973][T10083] ? __fget_files+0x2a/0x420 [ 541.182997][T10083] ? __fget_files+0x2a/0x420 [ 541.183015][T10083] ? __fget_files+0x3a6/0x420 [ 541.183035][T10083] ? __fget_files+0x2a/0x420 [ 541.183059][T10083] security_file_ioctl+0xc3/0x2a0 [ 541.183088][T10083] __se_sys_ioctl+0x47/0x170 [ 541.183117][T10083] do_syscall_64+0x14d/0xf80 [ 541.183140][T10083] ? trace_irq_disable+0x3b/0x150 [ 541.183160][T10083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.183178][T10083] ? clear_bhb_loop+0x40/0x90 [ 541.183206][T10083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.183224][T10083] RIP: 0033:0x7f7a7e4cc799 [ 541.183247][T10083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.183262][T10083] RSP: 002b:00007f7a7c705028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 541.183289][T10083] RAX: ffffffffffffffda RBX: 00007f7a7e746090 RCX: 00007f7a7e4cc799 [ 541.183302][T10083] RDX: 0000200000000100 RSI: 0000000000005402 RDI: 0000000000000004 [ 541.183314][T10083] RBP: 00007f7a7c705090 R08: 0000000000000000 R09: 0000000000000000 [ 541.183325][T10083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.183336][T10083] R13: 00007f7a7e746128 R14: 00007f7a7e746090 R15: 00007ffca0ddafa8 [ 541.183366][T10083] [ 541.183373][T10083] ERROR: Out of memory at tomoyo_realpath_from_path. [ 546.088472][T10120] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1175'. [ 546.088498][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 546.088510][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 546.088522][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 546.670629][T10132] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1178'. [ 546.671077][T10132] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1178'. [ 547.710356][T10136] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1179'. [ 547.710764][T10136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1179'. [ 548.798686][T10142] FAULT_INJECTION: forcing a failure. [ 548.798686][T10142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.798723][T10142] CPU: 1 UID: 0 PID: 10142 Comm: syz.5.1180 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 548.798748][T10142] Tainted: [L]=SOFTLOCKUP [ 548.798754][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 548.798764][T10142] Call Trace: [ 548.798773][T10142] [ 548.798781][T10142] dump_stack_lvl+0xe8/0x150 [ 548.798810][T10142] should_fail_ex+0x46b/0x600 [ 548.798836][T10142] _copy_from_user+0x2d/0xb0 [ 548.798861][T10142] ___sys_recvmsg+0x175/0x590 [ 548.798886][T10142] ? __pfx____sys_recvmsg+0x10/0x10 [ 548.798927][T10142] ? __fget_files+0x3a6/0x420 [ 548.798958][T10142] do_recvmmsg+0x33a/0x800 [ 548.798981][T10142] ? __pfx_do_recvmmsg+0x10/0x10 [ 548.799009][T10142] ? rt_mutex_slowunlock+0x1cb/0x300 [ 548.799040][T10142] __x64_sys_recvmmsg+0x198/0x250 [ 548.799062][T10142] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 548.799101][T10142] do_syscall_64+0x14d/0xf80 [ 548.799128][T10142] ? trace_irq_disable+0x3b/0x150 [ 548.799148][T10142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.799167][T10142] ? clear_bhb_loop+0x40/0x90 [ 548.799187][T10142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.799205][T10142] RIP: 0033:0x7f4455e3c799 [ 548.799223][T10142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.799238][T10142] RSP: 002b:00007f4454096028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 548.799258][T10142] RAX: ffffffffffffffda RBX: 00007f44560b5fa0 RCX: 00007f4455e3c799 [ 548.799271][T10142] RDX: 0000000000000001 RSI: 0000200000005c40 RDI: 0000000000000003 [ 548.799283][T10142] RBP: 00007f4454096090 R08: 0000000000000000 R09: 0000000000000000 [ 548.799294][T10142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.799304][T10142] R13: 00007f44560b6038 R14: 00007f44560b5fa0 R15: 00007fff1d33d568 [ 548.799334][T10142] [ 548.904805][T10143] sch_tbf: burst 34 is lower than device lo mtu (65550) ! [ 551.737827][T10151] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1182'. [ 551.738327][T10151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1182'. [ 552.699558][T10155] FAULT_INJECTION: forcing a failure. [ 552.699558][T10155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.699594][T10155] CPU: 1 UID: 0 PID: 10155 Comm: syz.3.1186 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 552.699619][T10155] Tainted: [L]=SOFTLOCKUP [ 552.699626][T10155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.699636][T10155] Call Trace: [ 552.699644][T10155] [ 552.699652][T10155] dump_stack_lvl+0xe8/0x150 [ 552.699681][T10155] should_fail_ex+0x46b/0x600 [ 552.699709][T10155] _copy_to_user+0x31/0xb0 [ 552.699735][T10155] simple_read_from_buffer+0xe1/0x170 [ 552.699761][T10155] proc_fail_nth_read+0x1be/0x230 [ 552.699784][T10155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.699808][T10155] ? rw_verify_area+0x2ac/0x4e0 [ 552.699831][T10155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.699853][T10155] vfs_read+0x212/0xa80 [ 552.699885][T10155] ? __pfx_vfs_read+0x10/0x10 [ 552.699910][T10155] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 552.699935][T10155] ? lockdep_hardirqs_on+0x7a/0x110 [ 552.699968][T10155] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 552.699991][T10155] ? mutex_lock_nested+0x152/0x1d0 [ 552.700010][T10155] ? fdget_pos+0x252/0x320 [ 552.700039][T10155] ksys_read+0x156/0x270 [ 552.700065][T10155] ? __pfx_ksys_read+0x10/0x10 [ 552.700099][T10155] do_syscall_64+0x14d/0xf80 [ 552.700121][T10155] ? trace_irq_disable+0x3b/0x150 [ 552.700141][T10155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.700160][T10155] ? clear_bhb_loop+0x40/0x90 [ 552.700182][T10155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.700200][T10155] RIP: 0033:0x7fa29a43cfce [ 552.700217][T10155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 552.700233][T10155] RSP: 002b:00007fa2986cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 552.700254][T10155] RAX: ffffffffffffffda RBX: 00007fa2986ce6c0 RCX: 00007fa29a43cfce [ 552.700267][T10155] RDX: 000000000000000f RSI: 00007fa2986ce0a0 RDI: 0000000000000004 [ 552.700279][T10155] RBP: 00007fa2986ce090 R08: 0000000000000000 R09: 0000000000000000 [ 552.700290][T10155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.700302][T10155] R13: 00007fa29a6f6038 R14: 00007fa29a6f5fa0 R15: 00007ffd472f1d98 [ 552.700332][T10155] [ 552.874459][T10157] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1172'. [ 552.908117][ T809] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 553.067898][ T809] usb 7-1: Using ep0 maxpacket: 16 [ 553.070031][ T809] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 553.070063][ T809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 553.072805][ T809] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 553.072834][ T809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.072853][ T809] usb 7-1: Product: syz [ 553.072866][ T809] usb 7-1: Manufacturer: syz [ 553.072878][ T809] usb 7-1: SerialNumber: syz [ 553.101980][ T809] usb 7-1: config 0 descriptor?? [ 553.129194][ T809] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 553.129244][ T809] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 554.592740][ T809] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 554.600024][ T809] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 554.713904][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 554.713923][ T36] audit: type=1326 audit(1773600105.391:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10174 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa1486cc799 code=0x7ffc0000 [ 554.716529][ T36] audit: type=1326 audit(1773600105.391:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10174 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa1486cc799 code=0x7ffc0000 [ 554.736907][ T36] audit: type=1326 audit(1773600105.421:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10174 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1486cc799 code=0x7ffc0000 [ 554.754021][ T36] audit: type=1326 audit(1773600105.421:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10174 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa1486cc502 code=0x7ffc0000 [ 554.754727][ T36] audit: type=1326 audit(1773600105.421:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10174 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa1486cc799 code=0x7ffc0000 [ 554.757014][ T36] audit: type=1326 audit(1773600105.441:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10174 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa1486cc597 code=0x7ffc0000 [ 554.787378][ T36] audit: type=1326 audit(1773600105.471:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10174 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa1486cc799 code=0x7ffc0000 [ 554.794473][ T36] audit: type=1326 audit(1773600105.471:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10174 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa148689491 code=0x7ffc0000 [ 554.806295][ T36] audit: type=1326 audit(1773600105.481:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10174 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa1486cd589 code=0x7ffc0000 [ 554.820690][ T809] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 554.820713][ T809] em28xx 7-1:0.0: No AC97 audio processor [ 554.880198][ T36] audit: type=1326 audit(1773600105.561:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10174 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa1486cc799 code=0x7ffc0000 [ 556.645690][ T43] usb 7-1: USB disconnect, device number 18 [ 556.647986][ T43] em28xx 7-1:0.0: Disconnecting em28xx [ 556.677126][ T43] em28xx 7-1:0.0: Freeing device [ 557.076743][T10192] loop7: detected capacity change from 0 to 16384 [ 557.194765][ T809] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 557.345010][ T809] usb 1-1: Using ep0 maxpacket: 8 [ 557.346927][ T809] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 557.346961][ T809] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 557.346983][ T809] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 557.347004][ T809] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 557.347054][ T809] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 557.347074][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.593074][T10187] bpf: Bad value for 'gid' [ 557.600429][ T809] usb 1-1: GET_CAPABILITIES returned 0 [ 557.600534][ T809] usbtmc 1-1:16.0: can't read capabilities [ 557.855492][T10187] usbtmc 1-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 557.889624][T10187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.890166][T10187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.093768][ T5873] usb 1-1: USB disconnect, device number 37 [ 558.463422][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'. [ 559.121907][ T5873] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 561.389823][ T5873] usb 6-1: Using ep0 maxpacket: 32 [ 561.416475][ T5873] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 561.416503][ T5873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.416520][ T5873] usb 6-1: config 0 has no interface number 0 [ 561.416548][ T5873] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 561.416559][ T5873] usb 6-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 561.416572][ T5873] usb 6-1: config 0 interface 196 has no altsetting 0 [ 561.419033][ T5873] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 561.419060][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.419070][ T5873] usb 6-1: Product: syz [ 561.419077][ T5873] usb 6-1: Manufacturer: syz [ 561.419084][ T5873] usb 6-1: SerialNumber: syz [ 561.524477][ T5873] usb 6-1: config 0 descriptor?? [ 561.664990][ T5881] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 561.814888][ T5881] usb 8-1: Using ep0 maxpacket: 8 [ 561.819781][ T5881] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 561.819831][ T5881] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 561.819918][ T5881] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 561.819948][ T5881] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 561.819979][ T5881] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 561.820002][ T5881] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 561.820025][ T5881] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 561.820047][ T5881] usb 8-1: config 168 interface 0 has no altsetting 0 [ 561.930496][ T5873] ipheth 6-1:0.196: Unable to find endpoints [ 561.950036][ T5881] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 561.950078][ T5881] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 561.950134][ T5881] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 561.950160][ T5881] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 561.950183][ T5881] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 561.950209][ T5881] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 561.950233][ T5881] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 561.950254][ T5881] usb 8-1: config 168 interface 0 has no altsetting 0 [ 562.084830][ T5881] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 562.084877][ T5881] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 562.084914][ T5881] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 562.084939][ T5881] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 562.084962][ T5881] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 562.084985][ T5881] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 562.085006][ T5881] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 562.085029][ T5881] usb 8-1: config 168 interface 0 has no altsetting 0 [ 562.091983][ T5873] usb 6-1: USB disconnect, device number 26 [ 562.114972][ T5881] usb 8-1: string descriptor 0 read error: -22 [ 562.115101][ T5881] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 562.115121][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.091348][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.091428][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.168052][ T5881] usb 8-1: can't set config #168, error -71 [ 563.191164][ T5881] usb 8-1: USB disconnect, device number 18 [ 563.847729][T10241] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1210'. [ 563.848138][T10241] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1210'. [ 564.651025][T10242] fuse: Unknown parameter 'euid<00000000000000000000' [ 565.768773][T10251] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 565.820102][T10251] bond1 (unregistering): Released all slaves [ 568.044810][ T5873] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 568.195060][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 568.289371][T10268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.289823][T10268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.616621][ T5873] usb 1-1: unable to get BOS descriptor or descriptor too short [ 569.617602][ T5873] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 569.617624][ T5873] usb 1-1: can't read configurations, error -71 [ 572.244798][ T5881] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 572.342671][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 572.464764][ T5881] usb 8-1: Using ep0 maxpacket: 32 [ 572.477231][ T5881] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 572.477258][ T5881] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.477275][ T5881] usb 8-1: config 0 has no interface number 0 [ 572.477327][ T5881] usb 8-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 572.477349][ T5881] usb 8-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 572.477373][ T5881] usb 8-1: config 0 interface 196 has no altsetting 0 [ 572.489581][ T5881] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 572.489610][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.489625][ T5881] usb 8-1: Product: syz [ 572.489632][ T5881] usb 8-1: Manufacturer: syz [ 572.489639][ T5881] usb 8-1: SerialNumber: syz [ 572.513990][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 572.514019][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 572.514039][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 572.519587][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 572.519623][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 572.519642][ T9] usb 1-1: Product: syz [ 572.519655][ T9] usb 1-1: Manufacturer: syz [ 572.519667][ T9] usb 1-1: SerialNumber: syz [ 572.653089][ T5881] usb 8-1: config 0 descriptor?? [ 572.880146][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 573.066040][ T5880] usb 1-1: USB disconnect, device number 40 [ 573.857130][ T5880] usblp0: removed [ 573.926772][ T5881] ipheth 8-1:0.196: Unable to find endpoints [ 573.965004][ T5881] usb 8-1: USB disconnect, device number 19 [ 575.075806][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 575.378835][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 575.577817][ T9] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.577848][ T9] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.680537][T10330] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1232'. [ 575.680948][T10330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1232'. [ 576.762954][T10332] FAULT_INJECTION: forcing a failure. [ 576.762954][T10332] name failslab, interval 1, probability 0, space 0, times 0 [ 576.762979][T10332] CPU: 0 UID: 0 PID: 10332 Comm: syz.0.1235 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 576.762997][T10332] Tainted: [L]=SOFTLOCKUP [ 576.763000][T10332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 576.763007][T10332] Call Trace: [ 576.763011][T10332] [ 576.763017][T10332] dump_stack_lvl+0xe8/0x150 [ 576.763037][T10332] should_fail_ex+0x46b/0x600 [ 576.763053][T10332] should_failslab+0xa8/0x100 [ 576.763065][T10332] __kmalloc_noprof+0xdf/0x7b0 [ 576.763081][T10332] ? kfree+0x4d/0x6c0 [ 576.763093][T10332] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 576.763110][T10332] tomoyo_realpath_from_path+0xe3/0x5d0 [ 576.763126][T10332] ? tomoyo_path_number_perm+0x219/0x630 [ 576.763149][T10332] tomoyo_path_number_perm+0x246/0x630 [ 576.763165][T10332] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 576.763181][T10332] ? __lock_acquire+0x6b5/0x2cf0 [ 576.763208][T10332] ? __fget_files+0x2a/0x420 [ 576.763222][T10332] ? __fget_files+0x2a/0x420 [ 576.763233][T10332] ? __fget_files+0x3a6/0x420 [ 576.763250][T10332] ? __fget_files+0x2a/0x420 [ 576.763263][T10332] security_file_ioctl+0xc3/0x2a0 [ 576.763281][T10332] __se_sys_ioctl+0x47/0x170 [ 576.763298][T10332] do_syscall_64+0x14d/0xf80 [ 576.763319][T10332] ? trace_irq_disable+0x3b/0x150 [ 576.763331][T10332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.763342][T10332] ? clear_bhb_loop+0x40/0x90 [ 576.763354][T10332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.763364][T10332] RIP: 0033:0x7fa1486cc799 [ 576.763375][T10332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.763383][T10332] RSP: 002b:00007fa146926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.763395][T10332] RAX: ffffffffffffffda RBX: 00007fa148945fa0 RCX: 00007fa1486cc799 [ 576.763402][T10332] RDX: 0000200000002f80 RSI: 0000000000004b4a RDI: 0000000000000003 [ 576.763409][T10332] RBP: 00007fa146926090 R08: 0000000000000000 R09: 0000000000000000 [ 576.763414][T10332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.763420][T10332] R13: 00007fa148946038 R14: 00007fa148945fa0 R15: 00007ffc48731b48 [ 576.763436][T10332] [ 576.764875][T10332] ERROR: Out of memory at tomoyo_realpath_from_path. [ 577.097217][ T9] usb 7-1: string descriptor 0 read error: -71 [ 577.097285][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 577.097297][ T9] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 577.128397][ T9] usb 7-1: can't set config #4, error -71 [ 577.135348][ T9] usb 7-1: USB disconnect, device number 19 [ 577.307500][T10337] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 577.357362][T10336] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 577.357362][T10336] program syz.3.1224 not setting count and/or reply_len properly [ 578.192579][T10336] input: syz0 as /devices/virtual/input/input40 [ 579.365411][T10347] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1238'. [ 581.217747][T10370] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1245'. [ 581.218135][T10370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1245'. [ 581.313263][ T5865] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 581.987169][T10371] FAULT_INJECTION: forcing a failure. [ 581.987169][T10371] name failslab, interval 1, probability 0, space 0, times 0 [ 581.987204][T10371] CPU: 0 UID: 0 PID: 10371 Comm: syz.3.1246 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 581.987256][T10371] Tainted: [L]=SOFTLOCKUP [ 581.987262][T10371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 581.987272][T10371] Call Trace: [ 581.987280][T10371] [ 581.987288][T10371] dump_stack_lvl+0xe8/0x150 [ 581.987317][T10371] should_fail_ex+0x46b/0x600 [ 581.987417][T10371] should_failslab+0xa8/0x100 [ 581.987432][T10371] __kmalloc_noprof+0xdf/0x7b0 [ 581.987453][T10371] ? kfree+0x4d/0x6c0 [ 581.987472][T10371] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 581.987500][T10371] tomoyo_realpath_from_path+0xe3/0x5d0 [ 581.987537][T10371] ? tomoyo_path_number_perm+0x219/0x630 [ 581.987562][T10371] tomoyo_path_number_perm+0x246/0x630 [ 581.987589][T10371] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 581.987616][T10371] ? __lock_acquire+0x6b5/0x2cf0 [ 581.987669][T10371] ? __fget_files+0x2a/0x420 [ 581.987695][T10371] ? __fget_files+0x2a/0x420 [ 581.987714][T10371] ? __fget_files+0x3a6/0x420 [ 581.987733][T10371] ? __fget_files+0x2a/0x420 [ 581.987758][T10371] security_file_ioctl+0xc3/0x2a0 [ 581.987869][T10371] __se_sys_ioctl+0x47/0x170 [ 581.987899][T10371] do_syscall_64+0x14d/0xf80 [ 581.987924][T10371] ? trace_irq_disable+0x3b/0x150 [ 581.987944][T10371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.987963][T10371] ? clear_bhb_loop+0x40/0x90 [ 581.987985][T10371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.988004][T10371] RIP: 0033:0x7fa29a47c799 [ 581.988028][T10371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.988044][T10371] RSP: 002b:00007fa2986ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 581.988074][T10371] RAX: ffffffffffffffda RBX: 00007fa29a6f5fa0 RCX: 00007fa29a47c799 [ 581.988087][T10371] RDX: 0000000000000000 RSI: 000000004008af04 RDI: 0000000000000003 [ 581.988098][T10371] RBP: 00007fa2986ce090 R08: 0000000000000000 R09: 0000000000000000 [ 581.988109][T10371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.988120][T10371] R13: 00007fa29a6f6038 R14: 00007fa29a6f5fa0 R15: 00007ffd472f1d98 [ 581.988152][T10371] [ 581.988160][T10371] ERROR: Out of memory at tomoyo_realpath_from_path. [ 582.234761][ T5865] usb 7-1: Using ep0 maxpacket: 32 [ 582.431765][ T5865] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 582.431792][ T5865] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.431814][ T5865] usb 7-1: config 0 has no interface number 0 [ 582.431855][ T5865] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 582.431875][ T5865] usb 7-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 582.431899][ T5865] usb 7-1: config 0 interface 196 has no altsetting 0 [ 582.613234][ T5865] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 582.613264][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.613282][ T5865] usb 7-1: Product: syz [ 582.613295][ T5865] usb 7-1: Manufacturer: syz [ 582.613308][ T5865] usb 7-1: SerialNumber: syz [ 582.687146][ T5865] usb 7-1: config 0 descriptor?? [ 582.940145][ T5865] ipheth 7-1:0.196: Unable to find endpoints [ 582.997562][ T5865] usb 7-1: USB disconnect, device number 20 [ 584.424783][ T5880] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 584.586780][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 584.589769][ T5880] usb 4-1: unable to get BOS descriptor or descriptor too short [ 584.591389][ T5880] usb 4-1: config 0 has an invalid interface number: 53 but max is 0 [ 584.591413][ T5880] usb 4-1: config 0 has no interface number 0 [ 584.591443][ T5880] usb 4-1: config 0 interface 53 has no altsetting 0 [ 584.601125][ T5880] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 584.601153][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.601171][ T5880] usb 4-1: Product: syz [ 584.601183][ T5880] usb 4-1: Manufacturer: syz [ 584.601193][ T5880] usb 4-1: SerialNumber: syz [ 584.614426][ T5880] usb 4-1: config 0 descriptor?? [ 584.839719][ T5880] ums-alauda 4-1:0.53: USB Mass Storage device detected [ 585.088565][ T5880] usb 4-1: USB disconnect, device number 41 [ 586.463741][T10405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 587.950678][T10413] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1257'. [ 587.951135][T10413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1257'. [ 590.724796][ T5881] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 590.875347][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 590.879328][ T5881] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 590.879354][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.879371][ T5881] usb 1-1: config 0 has no interface number 0 [ 590.879414][ T5881] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 590.879434][ T5881] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 590.879458][ T5881] usb 1-1: config 0 interface 196 has no altsetting 0 [ 590.882331][ T5881] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 590.882359][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.882377][ T5881] usb 1-1: Product: syz [ 590.882389][ T5881] usb 1-1: Manufacturer: syz [ 590.882402][ T5881] usb 1-1: SerialNumber: syz [ 591.965170][ T5881] usb 1-1: config 0 descriptor?? [ 592.197966][T10443] FAULT_INJECTION: forcing a failure. [ 592.197966][T10443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.198009][T10443] CPU: 0 UID: 0 PID: 10443 Comm: syz.6.1252 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 592.198035][T10443] Tainted: [L]=SOFTLOCKUP [ 592.198041][T10443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 592.198051][T10443] Call Trace: [ 592.198059][T10443] [ 592.198067][T10443] dump_stack_lvl+0xe8/0x150 [ 592.198099][T10443] should_fail_ex+0x46b/0x600 [ 592.198127][T10443] _copy_from_user+0x2d/0xb0 [ 592.198151][T10443] __se_sys_set_mempolicy+0x3fd/0x500 [ 592.198265][T10443] ? fput+0xa0/0xd0 [ 592.198287][T10443] ? ksys_write+0x248/0x270 [ 592.198310][T10443] ? __pfx___se_sys_set_mempolicy+0x10/0x10 [ 592.198335][T10443] ? __pfx_ksys_write+0x10/0x10 [ 592.198368][T10443] do_syscall_64+0x14d/0xf80 [ 592.198393][T10443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.198411][T10443] ? clear_bhb_loop+0x40/0x90 [ 592.198432][T10443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.198450][T10443] RIP: 0033:0x7f642031c799 [ 592.198467][T10443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.198482][T10443] RSP: 002b:00007f641e52c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 592.198501][T10443] RAX: ffffffffffffffda RBX: 00007f6420596180 RCX: 00007f642031c799 [ 592.198514][T10443] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000006005 [ 592.198526][T10443] RBP: 00007f641e52c090 R08: 0000000000000000 R09: 0000000000000000 [ 592.198537][T10443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.198547][T10443] R13: 00007f6420596218 R14: 00007f6420596180 R15: 00007ffe97f295a8 [ 592.198576][T10443] [ 592.463303][ T5881] ipheth 1-1:0.196: Unable to find endpoints [ 592.518264][ T5881] usb 1-1: USB disconnect, device number 41 [ 592.876606][T10447] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1268'. [ 592.876818][T10447] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1268'. [ 593.996186][T10451] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1269'. [ 595.958234][T10467] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 595.958351][T10467] netlink: 'syz.3.1263': attribute type 2 has an invalid length. [ 595.958363][T10467] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 595.958373][T10467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1263'. [ 595.969346][T10469] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 595.969392][T10469] netlink: 'syz.3.1263': attribute type 2 has an invalid length. [ 595.969403][T10469] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 595.969414][T10469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1263'. [ 597.785388][T10489] FAULT_INJECTION: forcing a failure. [ 597.785388][T10489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.785422][T10489] CPU: 1 UID: 0 PID: 10489 Comm: syz.7.1270 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 597.785445][T10489] Tainted: [L]=SOFTLOCKUP [ 597.785451][T10489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.785462][T10489] Call Trace: [ 597.785469][T10489] [ 597.785477][T10489] dump_stack_lvl+0xe8/0x150 [ 597.785508][T10489] should_fail_ex+0x46b/0x600 [ 597.785536][T10489] _copy_from_user+0x2d/0xb0 [ 597.785561][T10489] __sys_bind+0x1cc/0x410 [ 597.785586][T10489] ? __pfx___sys_bind+0x10/0x10 [ 597.785618][T10489] ? __pfx_ksys_write+0x10/0x10 [ 597.785651][T10489] __x64_sys_bind+0x7a/0x90 [ 597.785673][T10489] do_syscall_64+0x14d/0xf80 [ 597.785697][T10489] ? trace_irq_disable+0x3b/0x150 [ 597.785717][T10489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.785735][T10489] ? clear_bhb_loop+0x40/0x90 [ 597.785755][T10489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.785773][T10489] RIP: 0033:0x7f7a7e4cc799 [ 597.785790][T10489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.785806][T10489] RSP: 002b:00007f7a7c726028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 597.785826][T10489] RAX: ffffffffffffffda RBX: 00007f7a7e745fa0 RCX: 00007f7a7e4cc799 [ 597.785839][T10489] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 597.785850][T10489] RBP: 00007f7a7c726090 R08: 0000000000000000 R09: 0000000000000000 [ 597.785861][T10489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.785871][T10489] R13: 00007f7a7e746038 R14: 00007f7a7e745fa0 R15: 00007ffca0ddafa8 [ 597.785899][T10489] [ 598.409074][T10495] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1279'. [ 598.409487][T10495] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1279'. [ 599.904867][ T5782] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 599.964464][ T36] kauditd_printk_skb: 91 callbacks suppressed [ 599.964481][ T36] audit: type=1326 audit(1773600150.641:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10506 comm="syz.7.1285" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a7e4cc799 code=0x0 [ 600.025017][T10508] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 600.075512][T10514] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 600.081376][T10514] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 600.099605][T10514] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 600.099722][ T5782] usb 6-1: Using ep0 maxpacket: 32 [ 600.106403][ T5782] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 600.106428][ T5782] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.106445][ T5782] usb 6-1: config 0 has no interface number 0 [ 600.106488][ T5782] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 600.106509][ T5782] usb 6-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 600.106533][ T5782] usb 6-1: config 0 interface 196 has no altsetting 0 [ 600.164306][ T5782] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 600.164326][ T5782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.164336][ T5782] usb 6-1: Product: syz [ 600.164343][ T5782] usb 6-1: Manufacturer: syz [ 600.164350][ T5782] usb 6-1: SerialNumber: syz [ 600.227627][ T5782] usb 6-1: config 0 descriptor?? [ 600.237483][T10514] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 600.253347][T10514] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 600.329071][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 600.332796][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 600.333184][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 600.334176][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 600.372427][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 600.866893][ T5782] ipheth 6-1:0.196: Unable to find endpoints [ 600.905833][ T5782] usb 6-1: USB disconnect, device number 27 [ 601.743343][T10530] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1289'. [ 601.743371][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1289'. [ 601.743387][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1289'. [ 601.743398][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1289'. [ 602.337438][T10547] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1291'. [ 602.337491][T10547] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1291'. [ 603.284697][T10514] Bluetooth: hci1: command tx timeout [ 603.649958][T10512] chnl_net:caif_netlink_parms(): no params data found [ 603.815743][T10554] sch_tbf: burst 34 is lower than device lo mtu (65550) ! [ 604.481298][T10559] FAULT_INJECTION: forcing a failure. [ 604.481298][T10559] name failslab, interval 1, probability 0, space 0, times 0 [ 604.481324][T10559] CPU: 1 UID: 0 PID: 10559 Comm: syz.3.1296 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 604.481339][T10559] Tainted: [L]=SOFTLOCKUP [ 604.481342][T10559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 604.481349][T10559] Call Trace: [ 604.481353][T10559] [ 604.481358][T10559] dump_stack_lvl+0xe8/0x150 [ 604.481378][T10559] should_fail_ex+0x46b/0x600 [ 604.481394][T10559] should_failslab+0xa8/0x100 [ 604.481406][T10559] __kmalloc_noprof+0xdf/0x7b0 [ 604.481421][T10559] ? kfree+0x4d/0x6c0 [ 604.481433][T10559] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 604.481448][T10559] tomoyo_realpath_from_path+0xe3/0x5d0 [ 604.481465][T10559] ? tomoyo_path_number_perm+0x219/0x630 [ 604.481480][T10559] tomoyo_path_number_perm+0x246/0x630 [ 604.481495][T10559] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 604.481511][T10559] ? __lock_acquire+0x6b5/0x2cf0 [ 604.481538][T10559] ? __fget_files+0x2a/0x420 [ 604.481552][T10559] ? __fget_files+0x2a/0x420 [ 604.481563][T10559] ? __fget_files+0x3a6/0x420 [ 604.481574][T10559] ? __fget_files+0x2a/0x420 [ 604.481587][T10559] security_file_ioctl+0xc3/0x2a0 [ 604.481604][T10559] __se_sys_ioctl+0x47/0x170 [ 604.481621][T10559] do_syscall_64+0x14d/0xf80 [ 604.481636][T10559] ? trace_irq_disable+0x3b/0x150 [ 604.481648][T10559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.481658][T10559] ? clear_bhb_loop+0x40/0x90 [ 604.481688][T10559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.481698][T10559] RIP: 0033:0x7fa29a47c799 [ 604.481708][T10559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.481717][T10559] RSP: 002b:00007fa2986ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 604.481728][T10559] RAX: ffffffffffffffda RBX: 00007fa29a6f5fa0 RCX: 00007fa29a47c799 [ 604.481735][T10559] RDX: 0000200000000340 RSI: 00000000c1105517 RDI: 0000000000000004 [ 604.481742][T10559] RBP: 00007fa2986ce090 R08: 0000000000000000 R09: 0000000000000000 [ 604.481748][T10559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.481753][T10559] R13: 00007fa29a6f6038 R14: 00007fa29a6f5fa0 R15: 00007ffd472f1d98 [ 604.481769][T10559] [ 604.481773][T10559] ERROR: Out of memory at tomoyo_realpath_from_path. [ 604.495023][ T5881] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 604.627595][ T809] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 604.651608][ T5881] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 604.651638][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.651655][ T5881] usb 1-1: Product: syz [ 604.651668][ T5881] usb 1-1: Manufacturer: syz [ 604.651688][ T5881] usb 1-1: SerialNumber: syz [ 604.654819][ T5865] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 604.674203][ T5881] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 604.702472][ T5782] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 604.841816][ T5865] usb 8-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 604.841835][ T5865] usb 8-1: config 0 has an invalid interface number: 255 but max is 252 [ 604.841935][ T5865] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 604.841947][ T5865] usb 8-1: config 0 has no interface number 0 [ 604.841965][ T5865] usb 8-1: config 0 interface 255 has no altsetting 0 [ 604.848835][ T5865] usb 8-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 604.849003][ T5865] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.849034][ T5865] usb 8-1: Product: syz [ 604.849117][ T5865] usb 8-1: Manufacturer: syz [ 604.849130][ T5865] usb 8-1: SerialNumber: syz [ 604.863780][ T5865] usb 8-1: config 0 descriptor?? [ 604.897308][ T5865] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 604.958985][ T10] usb 1-1: USB disconnect, device number 42 [ 604.969141][ T5880] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 604.981588][ T809] usb 6-1: not running at top speed; connect to a high speed hub [ 604.983421][ T809] usb 6-1: config 64 has an invalid descriptor of length 1, skipping remainder of the config [ 604.983447][ T809] usb 6-1: config 64 has 0 interfaces, different from the descriptor's value: 2 [ 605.017662][ T809] usb 6-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=72.27 [ 605.017694][ T809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.017714][ T809] usb 6-1: Product: syz [ 605.017728][ T809] usb 6-1: Manufacturer: syz [ 605.017743][ T809] usb 6-1: SerialNumber: syz [ 605.126007][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 605.128513][ T5880] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 605.128545][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.128906][ T5880] usb 4-1: config 0 has no interface number 0 [ 605.129147][ T5880] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 605.129172][ T5880] usb 4-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 605.129198][ T5880] usb 4-1: config 0 interface 196 has no altsetting 0 [ 605.159549][ T5880] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 605.159580][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.159598][ T5880] usb 4-1: Product: syz [ 605.159609][ T5880] usb 4-1: Manufacturer: syz [ 605.159623][ T5880] usb 4-1: SerialNumber: syz [ 605.171046][ T5880] usb 4-1: config 0 descriptor?? [ 605.294846][T10514] Bluetooth: hci1: command tx timeout [ 605.321724][ T809] usb 6-1: USB disconnect, device number 28 [ 605.502794][ T5880] ipheth 4-1:0.196: Unable to find endpoints [ 605.524256][ T5880] usb 4-1: USB disconnect, device number 42 [ 605.751215][ T147] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.774854][ T5782] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 605.775009][ T5782] ath9k_htc: Failed to initialize the device [ 605.775816][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 606.191199][T10580] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1301'. [ 606.191224][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1301'. [ 606.191236][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1301'. [ 606.191249][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1301'. [ 606.246359][ T147] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.015520][ T5880] usb 8-1: USB disconnect, device number 20 [ 607.374803][T10514] Bluetooth: hci1: command tx timeout [ 609.078356][ T147] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.908436][T10514] Bluetooth: hci1: command tx timeout [ 609.952045][T10512] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.952154][T10512] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.952381][T10512] bridge_slave_0: entered allmulticast mode [ 609.955586][T10512] bridge_slave_0: entered promiscuous mode [ 610.089676][T10612] FAULT_INJECTION: forcing a failure. [ 610.089676][T10612] name failslab, interval 1, probability 0, space 0, times 0 [ 610.089711][T10612] CPU: 0 UID: 0 PID: 10612 Comm: syz.3.1308 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 610.089737][T10612] Tainted: [L]=SOFTLOCKUP [ 610.089743][T10612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 610.089754][T10612] Call Trace: [ 610.089762][T10612] [ 610.089769][T10612] dump_stack_lvl+0xe8/0x150 [ 610.089797][T10612] should_fail_ex+0x46b/0x600 [ 610.089825][T10612] should_failslab+0xa8/0x100 [ 610.089845][T10612] __kmalloc_noprof+0xdf/0x7b0 [ 610.089869][T10612] ? kfree+0x4d/0x6c0 [ 610.089889][T10612] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 610.089915][T10612] tomoyo_realpath_from_path+0xe3/0x5d0 [ 610.089945][T10612] ? tomoyo_path_number_perm+0x219/0x630 [ 610.089968][T10612] tomoyo_path_number_perm+0x246/0x630 [ 610.089993][T10612] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 610.090029][T10612] ? __lock_acquire+0x6b5/0x2cf0 [ 610.090075][T10612] ? __fget_files+0x2a/0x420 [ 610.090098][T10612] ? __fget_files+0x2a/0x420 [ 610.090116][T10612] ? __fget_files+0x3a6/0x420 [ 610.090133][T10612] ? __fget_files+0x2a/0x420 [ 610.090158][T10612] security_file_ioctl+0xc3/0x2a0 [ 610.090184][T10612] __se_sys_ioctl+0x47/0x170 [ 610.090212][T10612] do_syscall_64+0x14d/0xf80 [ 610.090236][T10612] ? trace_irq_disable+0x3b/0x150 [ 610.090253][T10612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.090271][T10612] ? clear_bhb_loop+0x40/0x90 [ 610.090293][T10612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.090309][T10612] RIP: 0033:0x7fa29a47c799 [ 610.090325][T10612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.090340][T10612] RSP: 002b:00007fa2986ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.090360][T10612] RAX: ffffffffffffffda RBX: 00007fa29a6f6090 RCX: 00007fa29a47c799 [ 610.090372][T10612] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 610.090382][T10612] RBP: 00007fa2986ad090 R08: 0000000000000000 R09: 0000000000000000 [ 610.090392][T10612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.090402][T10612] R13: 00007fa29a6f6128 R14: 00007fa29a6f6090 R15: 00007ffd472f1d98 [ 610.090432][T10612] [ 610.090440][T10612] ERROR: Out of memory at tomoyo_realpath_from_path. [ 610.294867][ T5782] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 610.361649][T10512] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.361836][T10512] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.362080][T10512] bridge_slave_1: entered allmulticast mode [ 610.364552][T10512] bridge_slave_1: entered promiscuous mode [ 611.388288][ T5782] usb 1-1: Using ep0 maxpacket: 32 [ 611.392275][ T5782] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 611.392301][ T5782] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.392319][ T5782] usb 1-1: config 0 has no interface number 0 [ 611.392361][ T5782] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 611.392381][ T5782] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 611.392404][ T5782] usb 1-1: config 0 interface 196 has no altsetting 0 [ 611.406120][ T5782] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 611.406149][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.406167][ T5782] usb 1-1: Product: syz [ 611.406180][ T5782] usb 1-1: Manufacturer: syz [ 611.406193][ T5782] usb 1-1: SerialNumber: syz [ 611.426419][ T5782] usb 1-1: config 0 descriptor?? [ 611.842202][T10621] __nla_validate_parse: 2 callbacks suppressed [ 611.842221][T10621] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1312'. [ 611.842237][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'. [ 611.842249][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'. [ 611.842260][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'. [ 611.842668][ T147] team0: Port device netdevsim0 removed [ 611.909910][ T147] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.887351][T10512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.891569][T10512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.363438][ T5782] ipheth 1-1:0.196: Unable to find endpoints [ 613.402193][ T5782] usb 1-1: USB disconnect, device number 43 [ 614.123942][T10512] team0: Port device team_slave_0 added [ 614.140422][T10512] team0: Port device team_slave_1 added [ 614.254945][T10514] Bluetooth: hci1: command 0x0405 tx timeout [ 614.321116][T10512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.321134][T10512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.321158][T10512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.323336][T10512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.323350][T10512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.323374][T10512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.510061][T10512] hsr_slave_0: entered promiscuous mode [ 614.511483][T10512] hsr_slave_1: entered promiscuous mode [ 614.512364][T10512] debugfs: 'hsr0' already exists in 'hsr' [ 614.512387][T10512] Cannot create hsr debugfs directory [ 614.526312][ T5992] kernel write not supported for file /media2 (pid: 5992 comm: kworker/0:6) [ 615.115900][ T809] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 615.325415][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 615.327554][ T809] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 615.327695][ T809] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 615.329093][ T809] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 615.329109][ T809] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 615.329119][ T809] usb 4-1: Product: syz [ 615.329126][ T809] usb 4-1: Manufacturer: syz [ 615.540824][ T809] hub 4-1:4.0: bad descriptor, ignoring hub [ 615.540883][ T809] hub 4-1:4.0: probe with driver hub failed with error -5 [ 615.601797][ T809] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 618.119316][ T147] bridge_slave_1: left allmulticast mode [ 618.119402][ T147] bridge_slave_1: left promiscuous mode [ 618.119651][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.178160][ T5880] usb 4-1: USB disconnect, device number 43 [ 618.225649][ T147] bridge_slave_0: left allmulticast mode [ 618.225677][ T147] bridge_slave_0: left promiscuous mode [ 618.225911][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.454764][ T5880] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 620.624867][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 620.627989][ T5880] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 620.628015][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.628032][ T5880] usb 4-1: config 0 has no interface number 0 [ 620.628074][ T5880] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 620.628095][ T5880] usb 4-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.628120][ T5880] usb 4-1: config 0 interface 196 has no altsetting 0 [ 620.630904][ T5880] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 620.630922][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.630932][ T5880] usb 4-1: Product: syz [ 620.630939][ T5880] usb 4-1: Manufacturer: syz [ 620.630946][ T5880] usb 4-1: SerialNumber: syz [ 620.638431][ T5880] usb 4-1: config 0 descriptor?? [ 620.747175][ T147] team0: Port device bridge1 removed [ 620.847789][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.902212][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.916784][ T147] bond0 (unregistering): Released all slaves [ 621.184891][ T5880] ipheth 4-1:0.196: Unable to find endpoints [ 621.301197][T10702] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1324'. [ 621.301221][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1324'. [ 621.301233][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1324'. [ 621.301243][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1324'. [ 621.319028][ T5880] usb 4-1: USB disconnect, device number 44 [ 624.373836][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.373902][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.561599][T10734] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1339'. [ 624.561845][T10734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1339'. [ 625.512204][T10512] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 625.884767][ T5865] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 626.304851][T10747] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1340'. [ 626.304917][T10747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1340'. [ 626.873687][T10512] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 628.036805][ T5865] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 628.036835][ T5865] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 628.036856][ T5865] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 628.040384][ T5865] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 628.040413][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 628.040430][ T5865] usb 6-1: Product: syz [ 628.040443][ T5865] usb 6-1: Manufacturer: syz [ 628.040456][ T5865] usb 6-1: SerialNumber: syz [ 628.856611][ T5865] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 628.885282][ T5865] usb 6-1: USB disconnect, device number 29 [ 628.893435][ T5865] usblp0: removed [ 629.094412][ T147] hsr_slave_0: left promiscuous mode [ 629.120424][ T147] hsr_slave_1: left promiscuous mode [ 629.122164][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.122183][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.879964][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.879993][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.957049][ T147] veth1_macvtap: left promiscuous mode [ 629.957112][ T147] veth0_macvtap: left promiscuous mode [ 629.957281][ T147] veth1_vlan: left promiscuous mode [ 629.957405][ T147] veth0_vlan: left promiscuous mode [ 630.207877][ T5865] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 630.364732][ T5865] usb 6-1: Using ep0 maxpacket: 32 [ 630.367033][ T5865] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 630.367059][ T5865] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.367076][ T5865] usb 6-1: config 0 has no interface number 0 [ 630.367115][ T5865] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 630.367127][ T5865] usb 6-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 630.367139][ T5865] usb 6-1: config 0 interface 196 has no altsetting 0 [ 630.369429][ T5865] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 630.369453][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.369472][ T5865] usb 6-1: Product: syz [ 630.369483][ T5865] usb 6-1: Manufacturer: syz [ 630.369499][ T5865] usb 6-1: SerialNumber: syz [ 630.481979][ T5865] usb 6-1: config 0 descriptor?? [ 630.745567][ T147] team0 (unregistering): Port device team_slave_1 removed [ 630.825367][ T147] team0 (unregistering): Port device team_slave_0 removed [ 631.024288][T10752] sch_tbf: burst 34 is lower than device lo mtu (65550) ! [ 631.163566][T10512] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 631.378699][T10512] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 631.419298][ T5865] ipheth 6-1:0.196: Unable to find endpoints [ 631.465022][ T5865] usb 6-1: USB disconnect, device number 30 [ 648.297261][T10808] sctp: [Deprecated]: syz.5.1355 (pid 10808) Use of struct sctp_assoc_value in delayed_ack socket option. [ 648.297261][T10808] Use struct sctp_sack_info instead [ 650.430104][T10512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.445481][T10512] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.511481][ T1304] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.511629][ T1304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.685402][ T1304] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.685539][ T1304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.729774][T10512] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 652.729790][T10512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 659.267022][T10514] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 659.282549][T10514] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 659.283931][T10514] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 659.292923][T10514] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 659.293888][T10514] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 661.391562][T10514] Bluetooth: hci0: command tx timeout [ 662.378355][ T5809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 662.427294][ T5809] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 662.428725][ T5809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 662.429822][ T5809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 662.445317][ T5809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 663.464957][T10514] Bluetooth: hci0: command tx timeout [ 664.663831][T10514] Bluetooth: hci6: command tx timeout [ 665.534938][T10514] Bluetooth: hci0: command tx timeout [ 665.840299][ T5809] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 666.734710][ T5809] Bluetooth: hci6: command tx timeout [ 667.174883][ T5809] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 667.224819][ T5809] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 667.226696][ T5809] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 667.227485][ T5809] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 667.624705][ T5809] Bluetooth: hci0: command tx timeout [ 668.924714][ T5809] Bluetooth: hci6: command tx timeout [ 670.343775][T10514] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 670.355606][T10514] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 670.356949][T10514] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 670.974756][T10514] Bluetooth: hci7: command tx timeout [ 670.975164][T10514] Bluetooth: hci6: command tx timeout [ 671.055800][ T5805] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 671.056549][ T5805] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 673.065059][ T5805] Bluetooth: hci7: command tx timeout [ 673.134834][ T5805] Bluetooth: hci8: command tx timeout [ 673.209051][T10823] chnl_net:caif_netlink_parms(): no params data found [ 675.145660][ T5805] Bluetooth: hci7: command tx timeout [ 675.215420][ T5805] Bluetooth: hci8: command tx timeout [ 677.217260][ T5805] Bluetooth: hci7: command tx timeout [ 678.152782][ T5809] Bluetooth: hci8: command tx timeout [ 680.204689][ T5809] Bluetooth: hci8: command 0x0419 tx timeout [ 682.255014][ T5805] Bluetooth: hci8: command 0x0419 tx timeout [ 685.788248][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.788317][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 703.006962][T10886] sch_tbf: burst 34 is lower than device lo mtu (65550) ! [ 704.964720][ T5992] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 705.568090][T10823] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.568217][T10823] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.568462][T10823] bridge_slave_0: entered allmulticast mode [ 705.570903][T10823] bridge_slave_0: entered promiscuous mode [ 705.576805][ T5992] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 705.576831][ T5992] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 705.576853][ T5992] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 705.645464][ T5992] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 705.645498][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 705.645516][ T5992] usb 6-1: Product: syz [ 705.645528][ T5992] usb 6-1: Manufacturer: syz [ 705.645541][ T5992] usb 6-1: SerialNumber: syz [ 713.815809][ T5992] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 714.154401][ T5992] usb 6-1: USB disconnect, device number 32 [ 714.167609][ T5992] usblp0: removed [ 716.057596][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 716.085743][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 716.087456][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 716.094319][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 716.105472][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 717.129281][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 717.150636][T10916] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 717.174820][T10916] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 717.176118][T10916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 717.176941][T10916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 718.174687][T10916] Bluetooth: hci1: command tx timeout [ 719.334487][T10916] Bluetooth: hci2: command tx timeout [ 719.850661][T10919] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1375'. [ 719.882428][T10919] Bluetooth: hci3: Frame reassembly failed (-84) [ 719.887892][ T155] Bluetooth: hci3: Frame reassembly failed (-84) [ 720.254880][ T5809] Bluetooth: hci1: command tx timeout [ 720.971972][T10823] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.972094][T10823] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.972275][T10823] bridge_slave_1: entered allmulticast mode [ 721.021934][T10823] bridge_slave_1: entered promiscuous mode [ 721.107675][T10514] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 721.112679][T10514] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 721.113977][T10514] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 721.163400][T10514] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 721.164431][T10514] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 721.374749][T10514] Bluetooth: hci2: command tx timeout [ 721.934801][ T5809] Bluetooth: hci3: command 0x1003 tx timeout [ 721.935115][T10916] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 722.334804][T10916] Bluetooth: hci1: command tx timeout [ 724.044759][ T5809] Bluetooth: hci4: command tx timeout [ 724.045182][ T5809] Bluetooth: hci2: command tx timeout [ 724.414636][ T5805] Bluetooth: hci1: command tx timeout [ 725.063191][ T147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.858440][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 725.889470][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 725.894040][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 725.912118][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 725.912883][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 726.101896][ T5805] Bluetooth: hci2: command tx timeout [ 726.101930][ T5805] Bluetooth: hci4: command tx timeout [ 728.175358][T10514] Bluetooth: hci4: command 0x040f tx timeout [ 729.534800][T10916] Bluetooth: hci3: command tx timeout [ 730.255267][T10916] Bluetooth: hci4: command 0x040f tx timeout [ 731.371257][T10946] sch_tbf: burst 34 is lower than device lo mtu (65550) ! [ 731.854423][T10916] Bluetooth: hci3: command tx timeout [ 732.351845][T10916] Bluetooth: hci4: command 0x040f tx timeout [ 733.934735][T10916] Bluetooth: hci3: command tx timeout [ 736.014641][T10916] Bluetooth: hci3: command tx timeout [ 740.526816][T10957] sch_tbf: burst 34 is lower than device lo mtu (65550) ! [ 747.275353][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.275423][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.663148][ T147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.433777][T10975] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1382'. [ 748.433830][T10975] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1382'. [ 751.234368][ T147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.440456][T10902] chnl_net:caif_netlink_parms(): no params data found [ 751.458623][T10921] chnl_net:caif_netlink_parms(): no params data found [ 754.315862][T10994] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1383'. [ 759.372519][ T147] team0: Port device netdevsim0 removed [ 759.386279][ T147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.556175][T10914] chnl_net:caif_netlink_parms(): no params data found [ 761.678350][T11017] netlink: 'syz.5.1385': attribute type 10 has an invalid length. [ 761.736397][T11017] team0: Port device netdevsim0 added [ 761.976698][T10935] chnl_net:caif_netlink_parms(): no params data found [ 762.712718][T10902] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.712849][T10902] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.713166][T10902] bridge_slave_0: entered allmulticast mode [ 762.742436][T10902] bridge_slave_0: entered promiscuous mode [ 762.781365][T10921] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.781484][T10921] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.781667][T10921] bridge_slave_0: entered allmulticast mode [ 762.784505][T10921] bridge_slave_0: entered promiscuous mode [ 762.823435][T10914] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.823554][T10914] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.823769][T10914] bridge_slave_0: entered allmulticast mode [ 762.847114][T10914] bridge_slave_0: entered promiscuous mode [ 762.925318][T10902] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.925436][T10902] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.926002][T10902] bridge_slave_1: entered allmulticast mode [ 762.929100][T10902] bridge_slave_1: entered promiscuous mode [ 763.241294][T10921] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.241419][T10921] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.241666][T10921] bridge_slave_1: entered allmulticast mode [ 763.276319][T10921] bridge_slave_1: entered promiscuous mode [ 763.277619][T10914] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.277692][T10914] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.277809][T10914] bridge_slave_1: entered allmulticast mode [ 763.279238][T10914] bridge_slave_1: entered promiscuous mode [ 768.209411][T10902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.238366][T10921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.288302][T10914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.395741][T10902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.417965][T10921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.530760][T10914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.551773][T10935] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.551894][T10935] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.552065][T10935] bridge_slave_0: entered allmulticast mode [ 772.582272][T10935] bridge_slave_0: entered promiscuous mode [ 772.598330][T10902] team0: Port device team_slave_0 added [ 772.600573][T10921] team0: Port device team_slave_0 added [ 772.624090][T10914] team0: Port device team_slave_0 added [ 772.647226][T10921] team0: Port device team_slave_1 added [ 772.653157][T10902] team0: Port device team_slave_1 added [ 772.668874][T10935] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.668991][T10935] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.669248][T10935] bridge_slave_1: entered allmulticast mode [ 772.699200][T11054] loop7: detected capacity change from 0 to 7 [ 772.699535][T10935] bridge_slave_1: entered promiscuous mode [ 772.727519][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.727656][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 772.757130][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.757167][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 772.759089][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.759122][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 772.760594][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.760622][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 772.763094][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.763122][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 772.845316][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.845352][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 772.845946][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.845973][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 772.848336][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.848366][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 772.848470][T11054] ldm_validate_partition_table(): Disk read failed. [ 772.848685][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.848710][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 772.848875][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.848901][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 772.849338][T11054] Dev loop7: unable to read RDB block 0 [ 773.006437][T11054] loop7: unable to read partition table [ 773.006655][T11054] loop7: partition table beyond EOD, truncated [ 773.006693][T11054] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 773.214709][T10514] Bluetooth: hci3: command 0x0405 tx timeout [ 774.647123][T11077] netlink: 'syz.5.1392': attribute type 10 has an invalid length. [ 774.836847][T10916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 774.863286][T10916] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 774.872256][T10916] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 774.891927][T10916] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 774.893732][T10916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 775.658946][T10914] team0: Port device team_slave_1 added [ 777.026942][T10514] Bluetooth: hci0: command tx timeout [ 779.054699][T10514] Bluetooth: hci0: command tx timeout [ 780.033323][T10916] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 780.054947][T10916] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 780.056616][T10916] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 780.057905][T10916] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 780.058857][T10916] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 780.355197][T11104] Bluetooth: MGMT ver 1.23 [ 781.213801][T10916] Bluetooth: hci0: command tx timeout [ 781.596321][T11115] netlink: 'syz.5.1399': attribute type 10 has an invalid length. [ 781.808344][T10514] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 781.832881][T10514] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 781.846748][T10514] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 781.849033][T10514] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 781.851034][T10514] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 782.456261][T10921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.456278][T10921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.456303][T10921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.497248][T10514] Bluetooth: hci6: command tx timeout [ 782.528495][T10935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.214772][T10514] Bluetooth: hci0: command tx timeout [ 784.228450][T11130] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1402'. [ 784.334777][T10514] Bluetooth: hci7: command tx timeout [ 784.574737][T10514] Bluetooth: hci6: command tx timeout [ 785.207689][T10916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 785.212936][T10916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 785.223858][T10916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 785.247740][T10916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 785.248797][T10916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 786.414865][T10514] Bluetooth: hci7: command tx timeout [ 786.659984][T10514] Bluetooth: hci6: command tx timeout [ 786.750780][T10935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.331063][T10514] Bluetooth: hci1: command tx timeout [ 788.494945][T10514] Bluetooth: hci7: command tx timeout [ 788.734835][T10514] Bluetooth: hci6: command tx timeout [ 789.374771][T10514] Bluetooth: hci1: command tx timeout [ 790.574760][T10514] Bluetooth: hci7: command tx timeout [ 791.454808][T10514] Bluetooth: hci1: command tx timeout [ 793.534760][T10514] Bluetooth: hci1: command tx timeout [ 796.458077][T11155] binder: 11154:11155 ioctl 4018620d 0 returned -22 [ 805.940763][T11175] sch_tbf: burst 34 is lower than device lo mtu (65550) ! [ 806.252883][T11178] netlink: 'syz.5.1409': attribute type 10 has an invalid length. [ 806.465481][T11181] FAULT_INJECTION: forcing a failure. [ 806.465481][T11181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.465518][T11181] CPU: 0 UID: 0 PID: 11181 Comm: syz.5.1410 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 806.465543][T11181] Tainted: [L]=SOFTLOCKUP [ 806.465550][T11181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 806.465561][T11181] Call Trace: [ 806.465569][T11181] [ 806.465577][T11181] dump_stack_lvl+0xe8/0x150 [ 806.465609][T11181] should_fail_ex+0x46b/0x600 [ 806.465636][T11181] _copy_from_user+0x2d/0xb0 [ 806.465662][T11181] ___sys_sendmsg+0x1c6/0x360 [ 806.465687][T11181] ? __pfx____sys_sendmsg+0x10/0x10 [ 806.465710][T11181] ? kstrtouint+0x6e/0xe0 [ 806.465762][T11181] ? __fget_files+0x2a/0x420 [ 806.465783][T11181] ? __fget_files+0x3a6/0x420 [ 806.465813][T11181] __sys_sendmmsg+0x282/0x4e0 [ 806.465837][T11181] ? __pfx___sys_sendmmsg+0x10/0x10 [ 806.465863][T11181] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 806.465898][T11181] ? ksys_write+0x248/0x270 [ 806.465925][T11181] ? __pfx_ksys_write+0x10/0x10 [ 806.465954][T11181] __x64_sys_sendmmsg+0xa0/0xc0 [ 806.465974][T11181] do_syscall_64+0x14d/0xf80 [ 806.465999][T11181] ? trace_irq_disable+0x3b/0x150 [ 806.466017][T11181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.466037][T11181] ? clear_bhb_loop+0x40/0x90 [ 806.466057][T11181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.466085][T11181] RIP: 0033:0x7f4455e3c799 [ 806.466103][T11181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.466119][T11181] RSP: 002b:00007f4454096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 806.466139][T11181] RAX: ffffffffffffffda RBX: 00007f44560b5fa0 RCX: 00007f4455e3c799 [ 806.466153][T11181] RDX: 0000000000000001 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 806.466164][T11181] RBP: 00007f4454096090 R08: 0000000000000000 R09: 0000000000000000 [ 806.466176][T11181] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 806.466188][T11181] R13: 00007f44560b6038 R14: 00007f44560b5fa0 R15: 00007fff1d33d568 [ 806.466222][T11181] [ 808.148001][T11079] chnl_net:caif_netlink_parms(): no params data found [ 808.320097][T11097] chnl_net:caif_netlink_parms(): no params data found [ 808.464921][T11117] chnl_net:caif_netlink_parms(): no params data found [ 808.662429][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.662497][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.966124][T11079] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.966313][T11079] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.966877][T11079] bridge_slave_0: entered allmulticast mode [ 808.971818][T11079] bridge_slave_0: entered promiscuous mode [ 809.092290][T11079] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.092410][T11079] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.092624][T11079] bridge_slave_1: entered allmulticast mode [ 809.125746][T11079] bridge_slave_1: entered promiscuous mode [ 809.242827][T11097] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.243018][T11097] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.243222][T11097] bridge_slave_0: entered allmulticast mode [ 809.268590][T11097] bridge_slave_0: entered promiscuous mode [ 809.323823][T11097] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.323961][T11097] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.332765][T11097] bridge_slave_1: entered allmulticast mode [ 809.352246][T11097] bridge_slave_1: entered promiscuous mode [ 809.370249][T11079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.370616][T11117] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.370749][T11117] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.371177][T11117] bridge_slave_0: entered allmulticast mode [ 809.410518][T11117] bridge_slave_0: entered promiscuous mode [ 809.443974][T11079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.444376][T11117] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.467658][T11117] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.467956][T11117] bridge_slave_1: entered allmulticast mode [ 809.470511][T11117] bridge_slave_1: entered promiscuous mode [ 809.566978][T11097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.621900][T11097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.639806][T11079] team0: Port device team_slave_0 added [ 809.656192][T11117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.659849][T11079] team0: Port device team_slave_1 added [ 809.710559][T11117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.833147][T11097] team0: Port device team_slave_0 added [ 809.874365][T11079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.874381][T11079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.874405][T11079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.926632][T11097] team0: Port device team_slave_1 added [ 809.929667][T11117] team0: Port device team_slave_0 added [ 809.971313][T11079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.971330][T11079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.971355][T11079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.019439][T11117] team0: Port device team_slave_1 added [ 811.740039][T11189] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 811.740196][T11189] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 811.842431][T11189] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 811.902711][T11189] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 811.902850][T11189] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 812.727025][T11189] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 813.775400][T10514] Bluetooth: hci0: command 0x0c1a tx timeout [ 813.879171][T11189] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 813.879316][T11189] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 813.934813][T10514] Bluetooth: hci6: command 0x0c1a tx timeout [ 815.832339][T11097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.832356][T11097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.832381][T11097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.854842][T10514] Bluetooth: hci0: command 0x0c1a tx timeout [ 815.901563][T11097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.901580][T11097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.901605][T11097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.934810][T10514] Bluetooth: hci7: command 0x0c1a tx timeout [ 816.014768][T10514] Bluetooth: hci6: command 0x0c1a tx timeout [ 816.043221][T11117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.043239][T11117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.043264][T11117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.113792][T11079] hsr_slave_0: entered promiscuous mode [ 816.124395][T11079] hsr_slave_1: entered promiscuous mode [ 816.133271][T11117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.133287][T11117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.133313][T11117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.422215][T11097] hsr_slave_0: entered promiscuous mode [ 816.433020][T11097] hsr_slave_1: entered promiscuous mode [ 816.447544][T11097] debugfs: 'hsr0' already exists in 'hsr' [ 816.447573][T11097] Cannot create hsr debugfs directory [ 816.636571][T11117] hsr_slave_0: entered promiscuous mode [ 816.647284][T11117] hsr_slave_1: entered promiscuous mode [ 816.659980][T11117] debugfs: 'hsr0' already exists in 'hsr' [ 816.660006][T11117] Cannot create hsr debugfs directory [ 817.722043][T11189] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 817.934865][T10514] Bluetooth: hci0: command 0x0c1a tx timeout [ 818.014644][T10514] Bluetooth: hci7: command 0x0c1a tx timeout [ 818.094732][T10514] Bluetooth: hci6: command 0x0c1a tx timeout [ 820.094932][T10514] Bluetooth: hci7: command 0x0c1a tx timeout [ 822.434612][T11189] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 822.434773][T11189] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 822.499274][T11189] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 823.220981][T10916] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 823.249045][T10916] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 823.253238][T10916] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 823.254466][T10916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 823.280598][T10916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 824.495012][T10916] Bluetooth: hci1: command 0x0c1a tx timeout [ 825.374725][T10916] Bluetooth: hci2: command tx timeout [ 826.574872][T10514] Bluetooth: hci1: command 0x0c1a tx timeout [ 827.455121][T10916] Bluetooth: hci2: command tx timeout [ 828.654666][T10916] Bluetooth: hci1: command 0x0c1a tx timeout [ 829.534949][T10916] Bluetooth: hci2: command tx timeout [ 831.410598][ T147] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.614717][T10916] Bluetooth: hci2: command tx timeout [ 836.243180][T10514] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 836.265307][T10514] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 836.268539][T10514] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 836.269626][T10514] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 836.270632][T10514] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 836.432672][T11133] chnl_net:caif_netlink_parms(): no params data found [ 836.668963][ T147] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.334878][T10916] Bluetooth: hci3: command tx timeout [ 839.303498][T10514] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 839.328211][T10514] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 839.330067][T10514] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 839.333258][T10514] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 839.334272][T10514] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 840.414975][T10514] Bluetooth: hci3: command tx timeout [ 841.375144][T10514] Bluetooth: hci0: command tx timeout [ 842.213562][T10916] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 842.233665][T10916] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 842.243938][T10916] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 842.254312][T10916] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 842.267495][T10916] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 842.494773][T10514] Bluetooth: hci3: command tx timeout [ 843.454657][T10514] Bluetooth: hci0: command tx timeout [ 844.334715][T10514] Bluetooth: hci4: command tx timeout [ 844.358526][ T147] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.574679][T10514] Bluetooth: hci3: command tx timeout [ 845.324000][T10916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 845.343626][T10916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 845.356997][T10916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 845.358382][T10916] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 845.359282][T10916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 845.534884][T10514] Bluetooth: hci0: command tx timeout [ 846.414716][T10916] Bluetooth: hci4: command tx timeout [ 847.454798][T10514] Bluetooth: hci5: command tx timeout [ 847.615394][T10514] Bluetooth: hci0: command tx timeout [ 848.494838][T10514] Bluetooth: hci4: command tx timeout [ 849.534877][T10514] Bluetooth: hci5: command tx timeout [ 850.574860][T10514] Bluetooth: hci4: command tx timeout [ 851.614812][T10514] Bluetooth: hci5: command tx timeout [ 853.694979][T10514] Bluetooth: hci5: command tx timeout [ 870.099431][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.099514][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.728999][ T147] team0: Port device netdevsim0 removed [ 872.732026][ T147] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.876673][T10916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 883.903040][T10916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 883.906155][T10916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 883.927441][T10916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 883.930262][T10916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 886.024711][T10916] Bluetooth: hci1: command tx timeout [ 888.094980][T10916] Bluetooth: hci1: command tx timeout [ 890.174929][T10916] Bluetooth: hci1: command tx timeout [ 891.565333][T11259] chnl_net:caif_netlink_parms(): no params data found [ 891.763175][T11251] chnl_net:caif_netlink_parms(): no params data found [ 891.788960][T11262] chnl_net:caif_netlink_parms(): no params data found [ 892.100527][T11256] chnl_net:caif_netlink_parms(): no params data found [ 892.264138][T10916] Bluetooth: hci1: command tx timeout [ 892.369374][ T147] bridge_slave_1: left allmulticast mode [ 892.369403][ T147] bridge_slave_1: left promiscuous mode [ 892.369634][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.106430][ T147] bridge_slave_0: left allmulticast mode [ 895.106459][ T147] bridge_slave_0: left promiscuous mode [ 895.106780][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.302146][T10514] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 896.328308][T10514] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 896.329854][T10514] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 896.331540][T10514] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 896.332274][T10514] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 898.414771][T10916] Bluetooth: hci8: command tx timeout [ 898.662417][ T147] bridge_slave_1: left allmulticast mode [ 898.662448][ T147] bridge_slave_1: left promiscuous mode [ 898.662671][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.302310][T10514] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 900.326517][T10514] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 900.328236][T10514] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 900.333039][T10514] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 900.370404][T10514] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 900.494925][T10514] Bluetooth: hci8: command tx timeout [ 901.806260][ T147] bridge_slave_0: left allmulticast mode [ 901.806290][ T147] bridge_slave_0: left promiscuous mode [ 901.806524][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.414962][T10514] Bluetooth: hci2: command tx timeout [ 902.574666][T10514] Bluetooth: hci8: command tx timeout [ 902.927258][T10916] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 902.947038][T10916] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 902.948751][T10916] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 902.949936][T10916] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 902.951026][T10916] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 904.494925][T10916] Bluetooth: hci2: command tx timeout [ 904.654900][T10916] Bluetooth: hci8: command tx timeout [ 905.054960][T10916] Bluetooth: hci9: command tx timeout [ 905.678939][ T147] bridge_slave_1: left allmulticast mode [ 905.678969][ T147] bridge_slave_1: left promiscuous mode [ 905.679191][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.831260][T10514] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 905.855310][T10514] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 905.857723][T10514] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 905.859043][T10514] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 905.859739][T10514] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 906.575155][T10916] Bluetooth: hci2: command tx timeout [ 907.134934][T10916] Bluetooth: hci9: command tx timeout [ 907.934692][T10916] Bluetooth: hci10: command tx timeout [ 908.654949][T10916] Bluetooth: hci2: command tx timeout [ 908.986377][ T147] bridge_slave_0: left allmulticast mode [ 908.986407][ T147] bridge_slave_0: left promiscuous mode [ 908.986639][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.214898][T10916] Bluetooth: hci9: command tx timeout [ 910.014648][T10916] Bluetooth: hci10: command tx timeout [ 911.294934][T10916] Bluetooth: hci9: command tx timeout [ 912.094722][T10916] Bluetooth: hci10: command tx timeout [ 914.175082][T10916] Bluetooth: hci10: command tx timeout [ 931.539433][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.539526][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 943.960514][T10514] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 943.991730][T10514] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 943.993496][T10514] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 944.009464][T10514] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 944.010529][T10514] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 944.738037][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.799814][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.818050][ T147] bond0 (unregistering): Released all slaves [ 946.095038][T10916] Bluetooth: hci11: command tx timeout [ 948.175514][T10916] Bluetooth: hci11: command tx timeout [ 950.254938][T10514] Bluetooth: hci11: command tx timeout [ 951.108255][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.334770][T10514] Bluetooth: hci11: command tx timeout [ 955.653100][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.640087][ T147] bond0 (unregistering): Released all slaves [ 957.487589][ T5809] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 957.514111][ T5809] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 957.528295][ T5809] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 957.529508][ T5809] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 957.530606][ T5809] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 959.215185][T10514] Bluetooth: hci3: command 0x0406 tx timeout [ 959.615070][T10514] Bluetooth: hci12: command tx timeout [ 961.514232][T10514] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 961.547563][T10514] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 961.551917][T10514] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 961.553827][T10514] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 961.587112][T10514] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 961.694847][T10916] Bluetooth: hci12: command tx timeout [ 963.580444][ T5809] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 963.603957][ T5809] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 963.615821][ T5809] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 963.617574][ T5809] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 963.618410][ T5809] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 963.694691][ T5809] Bluetooth: hci13: command tx timeout [ 963.774846][ T5809] Bluetooth: hci12: command tx timeout [ 964.340999][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 965.694710][ T5809] Bluetooth: hci14: command tx timeout [ 965.774769][ T5809] Bluetooth: hci13: command tx timeout [ 965.854960][ T5809] Bluetooth: hci12: command tx timeout [ 966.980777][T10514] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 967.002359][T10514] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 967.016975][T10514] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 967.018446][T10514] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 967.021404][T10514] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 967.223505][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.774686][T10916] Bluetooth: hci14: command tx timeout [ 967.854858][T10916] Bluetooth: hci13: command tx timeout [ 969.134680][T10916] Bluetooth: hci15: command tx timeout [ 969.454640][T11347] Bluetooth: hci4: command 0x0406 tx timeout [ 969.454961][T10916] Bluetooth: hci5: command 0x0406 tx timeout [ 969.854995][T10916] Bluetooth: hci14: command tx timeout [ 969.934970][T11347] Bluetooth: hci13: command tx timeout [ 971.065431][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 971.214965][T10916] Bluetooth: hci15: command tx timeout [ 971.934796][T10916] Bluetooth: hci14: command tx timeout [ 972.971898][ T147] bond0 (unregistering): Released all slaves [ 973.294659][ T5809] Bluetooth: hci15: command tx timeout [ 975.374739][ T5809] Bluetooth: hci15: command tx timeout [ 975.427047][T11251] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 975.525459][T11262] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 975.589688][T11259] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 976.335481][ T37] INFO: task syz-executor:11117 blocked for more than 143 seconds. [ 976.335508][ T37] Tainted: G L syzkaller #0 [ 976.335519][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 976.335528][ T37] task:syz-executor state:D stack:22984 pid:11117 tgid:11117 ppid:1 task_flags:0x400140 flags:0x00080002 [ 976.335580][ T37] Call Trace: [ 976.335587][ T37] [ 976.335601][ T37] __schedule+0x1553/0x5240 [ 976.335637][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 976.335667][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 976.335694][ T37] ? _raw_spin_unlock_irq+0x2e/0x50 [ 976.335717][ T37] ? rt_mutex_adjust_prio_chain+0x237f/0x23f0 [ 976.335740][ T37] ? __pfx___schedule+0x10/0x10 [ 976.335779][ T37] rt_mutex_schedule+0x76/0xf0 [ 976.335800][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 976.335840][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 976.335864][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 976.335885][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 976.335925][ T37] ? del_device_store+0xd7/0x370 [ 976.336042][ T37] ? del_device_store+0xd7/0x370 [ 976.336065][ T37] mutex_lock_nested+0x168/0x1d0 [ 976.336092][ T37] del_device_store+0xd7/0x370 [ 976.336115][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 976.336171][ T37] ? __pfx_del_device_store+0x10/0x10 [ 976.336196][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 976.336215][ T37] ? sysfs_kf_write+0x166/0x260 [ 976.336237][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 976.336254][ T37] kernfs_fop_write_iter+0x3b0/0x540 [ 976.336314][ T37] vfs_write+0x629/0xba0 [ 976.336349][ T37] ? __pfx_vfs_write+0x10/0x10 [ 976.336377][ T37] ? kmem_cache_free+0x185/0x6b0 [ 976.336394][ T37] ? do_sys_openat2+0x14c/0x200 [ 976.336431][ T37] ksys_write+0x156/0x270 [ 976.336459][ T37] ? __pfx_ksys_write+0x10/0x10 [ 976.336495][ T37] do_syscall_64+0x14d/0xf80 [ 976.336520][ T37] ? trace_irq_disable+0x3b/0x150 [ 976.336541][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.336560][ T37] ? clear_bhb_loop+0x40/0x90 [ 976.336584][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.336603][ T37] RIP: 0033:0x7f8aa31ccfce [ 976.336622][ T37] RSP: 002b:00007ffde87e52a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 976.336642][ T37] RAX: ffffffffffffffda RBX: 0000555574730500 RCX: 00007f8aa31ccfce [ 976.336656][ T37] RDX: 0000000000000001 RSI: 00007ffde87e5330 RDI: 0000000000000005 [ 976.336669][ T37] RBP: 00007f8aa32a351c R08: 0000000000000000 R09: 0000000000000000 [ 976.336681][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.336693][ T37] R13: 00007ffde87e5330 R14: 00007f8aa3fb4620 R15: 0000000000000003 [ 976.336724][ T37] [ 976.336766][ T37] [ 976.336766][ T37] Showing all locks held in the system: [ 976.336778][ T37] 5 locks held by ktimers/1/29: [ 976.336790][ T37] 3 locks held by ksoftirqd/1/30: [ 976.336802][ T37] 1 lock held by khungtaskd/37: [ 976.336812][ T37] #0: ffffffff8ddcb8c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 976.336868][ T37] 4 locks held by kworker/u8:5/147: [ 976.336879][ T37] #0: ffff88801aee1138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 976.336927][ T37] #1: ffffc90003b87c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 976.336974][ T37] #2: ffffffff8f14c0c0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 976.337083][ T37] #3: ffffffff8ddd1b30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 976.337130][ T37] 3 locks held by kworker/0:2/809: [ 976.337140][ T37] #0: ffff888019c03938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 976.337187][ T37] #1: ffffc90004c07c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 976.337234][ T37] #2: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 976.337345][ T37] 3 locks held by kworker/u8:8/1165: [ 976.337356][ T37] #0: ffff888031a15138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 976.337404][ T37] #1: ffffc900057cfc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 976.337452][ T37] #2: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 976.337610][ T37] 2 locks held by dhcpcd/5458: [ 976.337621][ T37] #0: ffff88803b622928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 976.337692][ T37] #1: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 976.337787][ T37] 2 locks held by getty/5557: [ 976.337798][ T37] #0: ffff888036da60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 976.337897][ T37] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 976.337952][ T37] 3 locks held by kworker/u8:13/10815: [ 976.337963][ T37] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 976.338018][ T37] #1: ffffc9000614fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 976.338065][ T37] #2: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 976.338110][ T37] 6 locks held by syz-executor/11097: [ 976.338121][ T37] #0: ffff8880376fa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 976.338172][ T37] #1: ffff88802ad75878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 976.338219][ T37] #2: ffff88802835ed28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 976.338270][ T37] #3: ffffffff8e9c8258 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 976.338317][ T37] #4: ffff88803fb860d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 976.338421][ T37] #5: ffff888021fb2300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 976.338465][ T37] 4 locks held by syz-executor/11117: [ 976.338476][ T37] #0: ffff8880376fa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 976.338525][ T37] #1: ffff88805ce39878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 976.338571][ T37] #2: ffff88802835ed28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 976.338623][ T37] #3: ffffffff8e9c8258 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 976.338672][ T37] 1 lock held by syz-executor/11246: [ 976.338683][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 976.338732][ T37] 1 lock held by syz-executor/11314: [ 976.338742][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 976.338823][ T37] 1 lock held by syz-executor/11319: [ 976.338835][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 976.338880][ T37] 1 lock held by syz-executor/11322: [ 976.338891][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 976.338936][ T37] 1 lock held by syz-executor/11325: [ 976.338947][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 976.338992][ T37] 1 lock held by syz-executor/11331: [ 976.339009][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 976.339054][ T37] 1 lock held by syz-executor/11336: [ 976.339065][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 976.339110][ T37] 1 lock held by syz-executor/11339: [ 976.339121][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 976.339165][ T37] 1 lock held by syz-executor/11342: [ 976.339176][ T37] #0: ffffffff8f15a878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 976.339222][ T37] 1 lock held by dhcpcd/11352: [ 976.339231][ T37] #0: ffff888028eea358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 976.339307][ T37] 1 lock held by dhcpcd/11353: [ 976.339318][ T37] #0: ffff888033440358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 976.339365][ T37] 1 lock held by dhcpcd/11354: [ 976.339375][ T37] #0: ffff88805d108358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 976.339421][ T37] 1 lock held by dhcpcd/11355: [ 976.339432][ T37] #0: ffff88803a738358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 976.339478][ T37] [ 976.339484][ T37] ============================================= [ 976.339484][ T37] [ 976.339498][ T37] NMI backtrace for cpu 0 [ 976.339514][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 976.339538][ T37] Tainted: [L]=SOFTLOCKUP [ 976.339545][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 976.339556][ T37] Call Trace: [ 976.339565][ T37] [ 976.339574][ T37] dump_stack_lvl+0xe8/0x150 [ 976.339601][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 976.339650][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 976.339676][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 976.339700][ T37] sys_info+0x135/0x170 [ 976.339718][ T37] watchdog+0xfd9/0x1030 [ 976.339745][ T37] ? watchdog+0x21a/0x1030 [ 976.339772][ T37] kthread+0x388/0x470 [ 976.339791][ T37] ? __pfx_watchdog+0x10/0x10 [ 976.339810][ T37] ? __pfx_kthread+0x10/0x10 [ 976.339837][ T37] ret_from_fork+0x51e/0xb90 [ 976.339864][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 976.339886][ T37] ? __switch_to+0xc7d/0x1450 [ 976.339911][ T37] ? __pfx_kthread+0x10/0x10 [ 976.339932][ T37] ret_from_fork_asm+0x1a/0x30 [ 976.339981][ T37] [ 976.339989][ T37] Sending NMI from CPU 0 to CPUs 1: [ 976.340026][ C1] NMI backtrace for cpu 1 [ 976.340042][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 976.340064][ C1] Tainted: [L]=SOFTLOCKUP [ 976.340070][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 976.340080][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 976.340099][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc 89 f6 31 d2 e9 a6 22 66 03 66 0f 1f 44 00 [ 976.340114][ C1] RSP: 0018:ffffc90000a3f990 EFLAGS: 00000046 [ 976.340127][ C1] RAX: 000000000000003e RBX: ffff8880b8923e40 RCX: 0000000000000838 [ 976.340138][ C1] RDX: 0000000000000000 RSI: 000000000000003e RDI: 0000000000000838 [ 976.340148][ C1] RBP: 000000000000003e R08: 0000000000000000 R09: 0000000000000100 [ 976.340158][ C1] R10: 0000000000000100 R11: ffffffff8173bad0 R12: ffff8880b8923e80 [ 976.340170][ C1] R13: ffff8880b8923e78 R14: 0000000000000020 R15: dffffc0000000000 [ 976.340181][ C1] FS: 0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 [ 976.340194][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 976.340205][ C1] CR2: 00007ffce1f2f430 CR3: 00000000381d0000 CR4: 00000000003526f0 [ 976.340220][ C1] Call Trace: [ 976.340226][ C1] [ 976.340232][ C1] lapic_next_event+0x11/0x20 [ 976.340253][ C1] clockevents_program_min_delta+0x1b0/0x350 [ 976.340277][ C1] hrtimer_start_range_ns+0x16b0/0x2020 [ 976.340297][ C1] ? qdisc_watchdog_schedule_range_ns+0x29/0x380 [ 976.340361][ C1] ? qdisc_watchdog_schedule_range_ns+0x29/0x380 [ 976.340377][ C1] ? qdisc_watchdog_schedule_range_ns+0x2a9/0x380 [ 976.340395][ C1] tbf_dequeue+0x4e1/0xd30 [ 976.340440][ C1] __qdisc_run+0x26d/0x1600 [ 976.340489][ C1] net_tx_action+0x831/0xc80 [ 976.340538][ C1] ? net_tx_action+0x5e1/0xc80 [ 976.340557][ C1] handle_softirqs+0x1de/0x6f0 [ 976.340581][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 976.340602][ C1] run_ktimerd+0x69/0x100 [ 976.340616][ C1] smpboot_thread_fn+0x541/0xa50 [ 976.340636][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 976.340660][ C1] kthread+0x388/0x470 [ 976.340675][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 976.340694][ C1] ? __pfx_kthread+0x10/0x10 [ 976.340710][ C1] ret_from_fork+0x51e/0xb90 [ 976.340730][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 976.340748][ C1] ? __switch_to+0xc7d/0x1450 [ 976.340767][ C1] ? __pfx_kthread+0x10/0x10 [ 976.340783][ C1] ret_from_fork_asm+0x1a/0x30 [ 976.340805][ C1] [ 976.341037][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 976.341054][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 976.341079][ T37] Tainted: [L]=SOFTLOCKUP [ 976.341087][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 976.341098][ T37] Call Trace: [ 976.341106][ T37] [ 976.341114][ T37] vpanic+0x56c/0xa60 [ 976.341143][ T37] ? __pfx_vpanic+0x10/0x10 [ 976.341177][ T37] panic+0xc5/0xd0 [ 976.341201][ T37] ? __pfx_panic+0x10/0x10 [ 976.341223][ T37] ? printk_trigger_flush+0x117/0x180 [ 976.341249][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 976.341280][ T37] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 976.341306][ T37] watchdog+0x1023/0x1030 [ 976.341332][ T37] ? watchdog+0x21a/0x1030 [ 976.341360][ T37] kthread+0x388/0x470 [ 976.341380][ T37] ? __pfx_watchdog+0x10/0x10 [ 976.341399][ T37] ? __pfx_kthread+0x10/0x10 [ 976.341419][ T37] ret_from_fork+0x51e/0xb90 [ 976.341445][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 976.341467][ T37] ? __switch_to+0xc7d/0x1450 [ 976.341492][ T37] ? __pfx_kthread+0x10/0x10 [ 976.341512][ T37] ret_from_fork_asm+0x1a/0x30 [ 976.341544][ T37] [ 976.341812][ T37] Kernel Offset: disabled