last executing test programs: 18m22.083039579s ago: executing program 3 (id=4): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="000657", @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20014000000020"], 0x0}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r3 = socket(0x10, 0x803, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)={0x0, 0xc, 0x89, {0x89, 0x4c, "e9d5e6a7a4b4e313eb9a4906a4d7915487af7a877732ae1ca47ded82f35903bc0b099f0b686294619d06f698bdd68a74cc03a9ff48fe7d5a0163c7634dd80816e3dd3871b9042566ef106cd76b1ff8a2e24f10900648ac9c27a61e4dbbefb49f5db77b5da05e24bf93b0a1d6738673a789dcff6b1ea2dc0cd79dcbcb8a877e5ef267f4a9833f6d"}}, &(0x7f0000000200)={0x0, 0x3, 0x6d, @string={0x6d, 0x3, "d776d5c2d65c94ee231a78f2ff4a0f8a17c70676431f79808648665f4db8e09f4c04aa0529e1f6a298d49311d598a6b5a72480d0eac3310fee15b74366c857214c6dab81196eebb0bfce2655c67823ba38d7bceb04f78677628bcfb0ca6deb4ea97cb65a1a9f5c67d1b3ae"}}, &(0x7f0000000280)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x67, 0x0, 0x8bb, 0xff08, 0x9f9a}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x7, 0x2}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "e16834aa9d1294f976590cdd1725e316"}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0xb, 0x0, "121c5ee4", "e02f3e8b"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x21, 0x0, 0x5, 0x8, 0x7, 0x6, 0xd}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x0, 0x11, 0x38, "211c9f3a382f782fd714282141474dd39cc02e8e77d91e1fd995ca5fa9e0fc8ac2fd2d90e722d8db552b8d5c93405394dbaefb4a33649ee9"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x83}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0xfa0d3e07f453fe16, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x100, 0x4, [0xf]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000640)={0x40, 0xb, 0x2, '5\v'}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x17, 0x6}, &(0x7f0000000780)={0x40, 0x19, 0x2, 'n~'}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0xe}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0xe}}) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x2) r5 = creat(&(0x7f0000000080)='./file1\x00', 0x19c) fanotify_init(0xf00, 0x40000) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x1402, 0x200, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) socket$inet6(0xa, 0x800000000000002, 0x0) pipe2$watch_queue(&(0x7f0000001000), 0x80) fanotify_init(0x200, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20400) pselect6(0x40, &(0x7f00000001c0)={0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000a80)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) 18m18.361772174s ago: executing program 3 (id=12): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)='e\xb4\xd5') r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x120, 0x5802, 0x294, 0x0, 0x294, 0x258, 0x378, 0x378, 0x258, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x100, 0x120, 0x52020000, {0x0, 0x600}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [0x0, 0x0, 0x0, 0xffffff00], [], 'gre0\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @common=@mh={{0x28}, {"0500", 0x8}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x9, 0x6, 0x6, 0x200, 0x7fff, 0xffffffff, 0x4800000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) sendmsg$inet(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x18}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f00000003c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x20}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES16], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) poll(&(0x7f0000000480)=[{r7, 0xb9c628f2454de94a}, {r3, 0x102}, {r2, 0x8000}, {r1, 0x1}, {r7, 0x1100}, {r1, 0x10}, {r7, 0x122}, {r5, 0x4}, {r4, 0x44c}], 0x9, 0xffffffff) close(0x3) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r8], 0x118) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r9, &(0x7f0000000440), 0x0, 0x8014) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) readv(r7, &(0x7f0000000180)=[{&(0x7f0000000140)=""/49, 0x31}], 0x1) inotify_init1(0x80000) 18m14.07456939s ago: executing program 3 (id=23): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001000000", @ANYRES32, @ANYBLOB="000089551a", @ANYBLOB], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sessionid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0502103, &(0x7f0000000180)={0x0, 0xfff, 0x100fe}) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4f, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r4, &(0x7f0000000240)='./file0/file0\x00', 0x272) 18m12.928326148s ago: executing program 3 (id=25): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) syz_open_dev$MSR(0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x81901) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000180)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x5, 0x0, 0xf439}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 18m11.116954826s ago: executing program 3 (id=29): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r3, 0x25, 0x0, @val=@tracing={0x0, 0xfffffffffffffff7}}, 0x20) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0xfffffffc, 0xdc67}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x3a, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000894f00f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r9, 0x1, 0x62, 0x6, @remote}, 0x14) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r11}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe0, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xe0}}, 0xc010) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r3, 0x25, 0x0, @val=@tracing={0x0, 0xfffffffffffffff7}}, 0x20) (async) socket(0x10, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0xfffffffc, 0xdc67}}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x3a, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) (async) sendto$packet(r8, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000894f00f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r9, 0x1, 0x62, 0x6, @remote}, 0x14) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r11}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe0, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xe0}}, 0xc010) (async) 18m10.270202829s ago: executing program 32 (id=29): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r3, 0x25, 0x0, @val=@tracing={0x0, 0xfffffffffffffff7}}, 0x20) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0xfffffffc, 0xdc67}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x3a, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000894f00f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r9, 0x1, 0x62, 0x6, @remote}, 0x14) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r11}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe0, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xe0}}, 0xc010) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r3, 0x25, 0x0, @val=@tracing={0x0, 0xfffffffffffffff7}}, 0x20) (async) socket(0x10, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0xfffffffc, 0xdc67}}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x3a, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) (async) sendto$packet(r8, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000894f00f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r9, 0x1, 0x62, 0x6, @remote}, 0x14) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r11}) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe0, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xe0}}, 0xc010) (async) 12m9.240329297s ago: executing program 2 (id=1481): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x7f8) 12m8.745545553s ago: executing program 2 (id=1482): futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0xfffffffd) futex(&(0x7f000000cffc)=0x3, 0x5, 0x2, 0x0, &(0x7f0000000000)=0x3, 0x5000000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r0, 0x0}]) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) io_pgetevents(r1, 0x0, 0x4, &(0x7f0000000680)=[{}, {}, {}, {}], &(0x7f0000000740)={r2, r3+10000000}, &(0x7f00000011c0)={&(0x7f0000001180)={[0x401]}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x20, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffd00}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r9 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r8, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r9, 0x47f6, 0x195d, 0x25, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) futex_waitv(&(0x7f00000004c0)=[{0x7, &(0x7f0000000040)=0x8, 0x82}, {0x8000, &(0x7f0000000140)=0x2, 0x82}, {0x8a, &(0x7f0000000180)=0x7, 0x2}, {0x60e0, &(0x7f0000000200)=0x9, 0x82}, {0xff, &(0x7f0000000240)=0x9, 0x82}, {0x3ff, &(0x7f0000000280)=0x100000001, 0x2}, {0x7, &(0x7f00000002c0)=0x4f8, 0x2}, {0x10, &(0x7f0000000300)=0xffffffffffffffff, 0x82}, {0x2, &(0x7f0000000340)=0x1000, 0x82}, {0x2, &(0x7f0000000380)=0x9}, {0x5, &(0x7f00000003c0)=0x100, 0x82}, {0x0, &(0x7f0000000400)=0x10001, 0x2}, {0x4, &(0x7f0000000440)=0x1, 0x82}, {0x3, &(0x7f0000000480)=0x6, 0x2}], 0xe, 0x0, &(0x7f0000000640)={0x77359400}, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080101000000000000000005000007060002408863000004000480090001007379343000000000050003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) 12m7.565089892s ago: executing program 2 (id=1485): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (fail_nth: 3) 12m7.343827815s ago: executing program 2 (id=1488): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x7f8) 12m7.165347056s ago: executing program 2 (id=1491): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20040005) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x54, 0x0, 0xb, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xf, 0x1, '\xbf#,]-&!$--\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x4004) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d3d50df11512c66642c", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000017c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)=@generic={&(0x7f0000001640)='./file0\x00', 0x0, 0x10}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') futimesat(r8, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r10, @ANYRES64=r9], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r10, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r10, 0x2e, 0x1, 0x90, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001700)=@bpf_tracing={0x1a, 0x22, &(0x7f0000001840)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_val={0x18, 0xa, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}, @ldst={0x1, 0x3, 0x3, 0x3, 0x0, 0x8, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x13e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0xa, 0x7, 0x9, 0x40, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r6}], &(0x7f0000000500)='syzkaller\x00', 0xfffffff0, 0x1000, &(0x7f0000000540)=""/4096, 0x41100, 0x40, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x1, 0x6}, 0x8, 0x10, &(0x7f0000001580)={0x0, 0xf, 0x2, 0xf456}, 0x10, 0x1a195, r0, 0x0, &(0x7f00000016c0)=[r6, r6, r8, 0xffffffffffffffff, 0x1, r4, r10, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0xf00) 12m6.53313833s ago: executing program 2 (id=1495): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x3, 0xff, 0x9}, [@RTA_IIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000804) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) write(r5, &(0x7f0000000240)="ca59956c63a8e06e897210de5d98187630f04e41793ece086201b39512498feccbd5ead17d624036ac93298b1265acbe059f8eef66a9013c03dc8f0f30e3bca9768023d3b4cb17c196f2e8379425c49bb19101f05ab3e44a5e82e290b0ff790413e9a6e803bb35a32da19d430b1cf0b016b451", 0x73) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x800) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x8340}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x38, 0x6d, 0x2ec9b2c728e3c67, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48198, 0x800}, [@IFLA_PROP_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'caif0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x80}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12m6.250332856s ago: executing program 33 (id=1495): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x3, 0xff, 0x9}, [@RTA_IIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000804) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) write(r5, &(0x7f0000000240)="ca59956c63a8e06e897210de5d98187630f04e41793ece086201b39512498feccbd5ead17d624036ac93298b1265acbe059f8eef66a9013c03dc8f0f30e3bca9768023d3b4cb17c196f2e8379425c49bb19101f05ab3e44a5e82e290b0ff790413e9a6e803bb35a32da19d430b1cf0b016b451", 0x73) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x800) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x8340}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x38, 0x6d, 0x2ec9b2c728e3c67, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48198, 0x800}, [@IFLA_PROP_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'caif0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x80}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6m11.553609242s ago: executing program 4 (id=2889): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[]) (async, rerun: 32) chdir(&(0x7f0000000140)='./file0\x00') (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) (async, rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ftruncate(r0, 0x8008976) prlimit64(0x0, 0xa, &(0x7f0000000600)={0x7, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) mkdir(0x0, 0x0) (async) r6 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) (async, rerun: 64) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000240)="e98b721e42a9bf31e4e68967c6abcb9e4595cb2713ea2bdace146d827cffc56562f2c5b0a8b7bdad0ff95078d7b58047f1b4dba1b4aa74cf610bbb69f12bbc2b3f192abc82413e98acb7d2da6436cd945dc438b4d9db0567bb70e9757b890321a07093f99d8c9f541c757f3e2448638367b524f369309e476421402698f9", 0x7e}, {&(0x7f0000000300)="c6fd9d63a8fa2c03553d2498a3a027d715cbf8e773b0861938ad636fe604bce77eb8ca99dfb72c07d5808cd000968936251c071858d98eaae6b004bbb67914330eca8903506a68a71024fb5c1db4a2ce9e1480cecbcb48584af30b7ef64a258efab2771517b3315cd2d9cfa1a66b79d7558b9c36bbe71541b384fc7c125a452a9ac7f3f49619b851fbea3f06e2a8d0731f5e30c65c3b792bd741c281b970f28373b1aed63542473c806dad6c13b5faeab29b3a54db4c3855f7cb039562db8a9e8f8ee8bc76398346e6e1a9cf14de9e914f5a3248ae708c82100e01b2", 0xdc}, {&(0x7f0000000400)="0a42f406", 0x4}, {&(0x7f0000000440)="3a5a8dd6e57257e0ab25ee92914b2de57e0e6d90b53205e298825c179ed4bbc05d68cdf04099e4e5aed2590e54e50cf4fa85dca3389e117fb8fcb9f16e7a1709d2de2bf63e9bcc79fc9af18e74781cf9f4ff7266c7c8f1f7260e186ffeaee97dd41664edd576bf554e7b166cb82859696f326c0ba18c4bb38495d3f4d8a61b89acc53de1747d9139ec0d696cd7d07e350ed4d584d8d479fb2265f3022d7da1245dfaa7a830be3123098c705853578d168f65927542d43baecc3b2e6219451c51d47998dfbeaf5ad1fae363a2348f13842ab6f143325fed633ad8f1bd676b", 0xde}, {&(0x7f0000000540)="ab545826ae34e1e09c5b045ff6a156ebfd45ca98ce7592c72a046e9ddc07e054730c78d4ac7e689699d66a07f13af2ad4fc71052e538bd439eeb9e3a4809daf5785fe6676bb24cd44d5efdcb49488b21682336e16c560f25c7fc15919524a5a0b257b6076e6ba6dd7c356eca497f7fc542c7a071c79fee196d2deb2b011770156a7fb08a102b755edc33", 0x8a}], 0x5) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000700)={0x0, ""/256, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x9c) (async) mlock(&(0x7f0000ffe000/0x1000)=nil, 0xffffffffdf001fff) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001040)={r7, 0x0, "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", "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"}) 6m11.361909152s ago: executing program 4 (id=2892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2b, 0x4, 0xe, 0x0, 0x40, @empty, @empty, 0x40, 0x7800, 0x6b}}) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$amidi(0x0, 0x2, 0x8900) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100feffffff00000000010000001c0007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c000180d04a0100", @ANYRES32=r5, @ANYBLOB="0c0002"], 0x3c}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 6m7.908681584s ago: executing program 4 (id=2904): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/212, 0xd4}], 0x1, 0x32, 0x8001) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000180)={0x76, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000200)=r7, 0x12) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$FUSE(r5, &(0x7f0000002500)={0x2020}, 0x2020) 6m4.293370689s ago: executing program 4 (id=2917): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) setxattr$security_capability(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440), &(0x7f00000004c0)=@v2={0x2000000, [{0x101, 0xc}, {0xff, 0x3}]}, 0x14, 0x1) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000680)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000600)=0xe8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x13, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0x38, 0x8, "63956af68503043aa9fa47b34fd3b550a7dfd854d89a40f5108a642f76d477a70236ba00529b059d4383d8519cbc05473a39dfb5"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000010000000f6ff0000bfe1a11e18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) lsetxattr$security_capability(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000780)=@v3={0x3000000, [{0x713, 0x5}, {0x6, 0x2}], r3}, 0x18, 0x1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000507000000f4eb5cfd1b8b95442f3d45000021008000000000", @ANYRES32=r2, @ANYBLOB="0000000000000001007665746800000000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r1) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) 6m3.555861856s ago: executing program 4 (id=2920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000064d564b"]) 6m3.160578238s ago: executing program 4 (id=2923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x5c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2c008840}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2ce080, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x5, 0x0, r1, 0x6, '\x00', 0x0, r1, 0x2, 0x5, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x26, &(0x7f00000004c0)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x931}, @alu={0x4, 0x1, 0x6, 0x8, 0x7, 0x2, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0x32}], &(0x7f0000000180)='GPL\x00', 0x7f, 0x0, 0x0, 0x40f00, 0x50, '\x00', r3, 0x0, r1, 0x8, &(0x7f0000000240)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x9, 0x7, 0xff}, 0x10, 0x2b738, r1, 0x9, &(0x7f00000002c0)=[r1, r1], &(0x7f0000000340)=[{0x1, 0x3, 0xa, 0xb}, {0x2, 0x4, 0x0, 0x1}, {0x4, 0x4, 0x6, 0x6}, {0x0, 0x3, 0x4, 0xb}, {0x2, 0x3, 0x10, 0x1}, {0x4, 0x1, 0x6, 0x8}, {0x5, 0x3, 0x7, 0x7}, {0x1, 0x1, 0x5, 0xb}, {0x1, 0x1, 0x2, 0xc}], 0x10, 0xc22d}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x2, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000400)={0x0, 0x0, r1}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x1, 0x8, 0x10, r1, 0x10000, '\x00', r3, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x6}, 0x50) 6m2.876738398s ago: executing program 34 (id=2923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x5c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2c008840}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2ce080, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x5, 0x0, r1, 0x6, '\x00', 0x0, r1, 0x2, 0x5, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x26, &(0x7f00000004c0)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x931}, @alu={0x4, 0x1, 0x6, 0x8, 0x7, 0x2, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0x32}], &(0x7f0000000180)='GPL\x00', 0x7f, 0x0, 0x0, 0x40f00, 0x50, '\x00', r3, 0x0, r1, 0x8, &(0x7f0000000240)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x9, 0x7, 0xff}, 0x10, 0x2b738, r1, 0x9, &(0x7f00000002c0)=[r1, r1], &(0x7f0000000340)=[{0x1, 0x3, 0xa, 0xb}, {0x2, 0x4, 0x0, 0x1}, {0x4, 0x4, 0x6, 0x6}, {0x0, 0x3, 0x4, 0xb}, {0x2, 0x3, 0x10, 0x1}, {0x4, 0x1, 0x6, 0x8}, {0x5, 0x3, 0x7, 0x7}, {0x1, 0x1, 0x5, 0xb}, {0x1, 0x1, 0x2, 0xc}], 0x10, 0xc22d}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x2, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000400)={0x0, 0x0, r1}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x1, 0x8, 0x10, r1, 0x10000, '\x00', r3, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x6}, 0x50) 2m48.947410121s ago: executing program 6 (id=3714): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE]}, {0xa}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) sendfile(r4, r5, 0x0, 0xd) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r6, @ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x4, 0x7a8, 0x8000, 0x8, 0x8, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000000000800100"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2m47.985167726s ago: executing program 6 (id=3716): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r3, @ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2800, 0x0, 0x1, 0x5}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000100)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="030000a301000000000000000000008100000000000088be"], 0x10}}], 0x1, 0x4000000) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x3, @empty}}, 0x1e) 2m47.168806784s ago: executing program 6 (id=3717): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000550330ae43fcd673ad312c47e80fc6db6da6f59b0e906fa2338b2868d18c9578d05b9dd211b436b656003ef9b4a98c3f13f355ac5b4b93f722181b875fa6c076e64c15c7952e4d20734cfae8edcac5d242e4865761b94093ec78d230654a4ef567ce8f5f3be1dd08970b3a8f82c49491b929baa7a0d593f1e4cb83fea9705f50c3a8863114e5", @ANYRES16=r1, @ANYBLOB="57eb2bbd7000fbdbdf2545000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x48044) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) fchdir(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r7}, 0x18) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x60, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xb}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xa}, @NFULA_CFG_FLAGS={0x1, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c800}, 0x800) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x12, &(0x7f0000000540)=ANY=[@ANYBLOB="616e733d66642c7266646e6f3d000008a56b486d3a874ea6c6a57bc696d53455d3e4f02e4cbbdcf0677a2a437e45262caa6a448c113e4a6a3235a264b09b928481c340880289c42c507c13f9a0f39e147b3ddd266a77c1f8105fff077441bb2c7127200a990fa802e9161322cf310e754a3550d4531a2959074632b9d0c3ff011b6f335b313a251fbd374cf534dcb576d1", @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',\x00']) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r11}], 0x1, 0x0, 0x0, 0x0) 2m46.154380118s ago: executing program 6 (id=3723): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5, 0xc9, &(0x7f0000000080)=""/201}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)={0x14, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) socket$inet(0x2, 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x800, 0x55007}, [@IFLA_LINKMODE={0x5, 0x11, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x800, 0x55007}, [@IFLA_LINKMODE={0x5, 0x11, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=@flushsa={0x150, 0x1c, 0x20, 0x70bd24, 0x25dfdbfc, {0x3c}, [@tfcpad={0x8, 0x16, 0x1000}, @lastused={0xc, 0xf, 0x2ebe}, @algo_aead={0xfc, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x580, 0x180, "74e199bdbd2503948fedc8aa8024aab5f8c2c9af2781a212191021eb2100ffab7b01b176b7e49875d3fbd09ff12f98caab8073403f963ed29f68afd3d5c7853cdc11e663dc15578135e3b50018de6945a5438ecf275e13f66a03be27ba720a9f9dbe9b5b00951ec654ddc81fc40132a213d6ded8854a9bc1b2112083570183dcc266e0541cc67f9420aba8abddca84575c570a2a3b2699e5b8e9c70ca4795a05d4f4dc201afd1dd9e72958999eb988a8"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd28, 0x8}}, @extra_flags={0x8, 0x18, 0x9}, @mark={0xc, 0x15, {0x35075b, 0x4}}]}, 0x150}, 0x1, 0x0, 0x0, 0x870}, 0x20000040) syz_open_dev$MSR(&(0x7f00000002c0), 0x10000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m45.674766461s ago: executing program 6 (id=3728): r0 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='v', 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000000)=0x8) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12015002020000082505a1a4400001020b0109025c0002017f400f0904000001020200000524060001"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) ioctl$TCSBRKP(r1, 0x5425, 0x80000000) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x74, 0xad, 0x60, 0x10, 0x10c4, 0xeac1, 0xff7e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x2, 0x0, 0x30, 0xc8, 0x1e}}]}}]}}, 0x0) 2m44.161870379s ago: executing program 6 (id=3736): socket$kcm(0x2d, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000280)=[{0xd2f3, 0xe3b61685ee249bb1, 0x0, 0x0}], 0x1}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r5 = syz_open_pts(r4, 0x20800) dup3(r5, r4, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x44) 2m27.104322146s ago: executing program 35 (id=3736): socket$kcm(0x2d, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000280)=[{0xd2f3, 0xe3b61685ee249bb1, 0x0, 0x0}], 0x1}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r5 = syz_open_pts(r4, 0x20800) dup3(r5, r4, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x44) 12.333262818s ago: executing program 7 (id=4342): r0 = syz_usb_connect(0x2, 0x6b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000385353608f20446b76e8e01022601090259000104f2000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x40800000000000, 0x3a, 'btrfs\x00', 0x3a, 'quota', 0x3a, './file1'}, 0x32) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300200000074000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300e4edf2b708000240000000000e000100636f6e6e6c6162656c0000000900010073797a300000"], 0xe8}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d07, 0x0, 0xf}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000180)={&(0x7f00004c4000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x40) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hpfs\x00', 0x4080, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYRES64=r0], 0x10}}, 0x20040004) userfaultfd(0x801) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}]) syz_usb_connect(0x0, 0x7e2, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/2007], &(0x7f00000015c0)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x250, 0x2, 0x5, 0x29, 0x8}, 0xa2, &(0x7f00000010c0)={0x5, 0xf, 0xa2, 0x1, [@generic={0x9d, 0x10, 0x3, "edc080723887b40cb7194683bcf0471e7e0d4386a5ee05e372e9dacda647dbb1f2669f043c2d5c473f7ee9f249ff608ccd7f07dd83a4d1c742d8e9c640ce55c16a73cd9ad90a8f23f5d9ce01079973fbe636dfbabbbcabc2701c3027a59daf19344af518c09e7d6a309317b5657687c746772b732760b3f097467c524f8732df1f64eaba50de4c527ed342279e23705f81fcff8a2d1ba1ce72d6"}]}, 0x6, [{0xd6, &(0x7f0000001180)=@string={0xd6, 0x3, "3681e10bc217d6a877e0434febf3178c1317d9c72c67de0418a584b5ee0d5ba99d686f0338229b8667ee0f5ce630d3dd54d5d75d5c67a863f6c32565b1b666b0aef430418dd5979c355ecaa64f537711b436b482f037a2fed3b5b8f30d60e2a97d9b3ac3fadf3b333fecff13cf000d30fd4ddaa8d62da1fdce65c7a038dd5f81ace3eb5beeeee7957c863f26a7146628ec600408a16c52ba1bec1d88b911a2811db7f5506a68a7511398b8c4a080fa1d2ae569aa1eb3f7e50c41362ab08865e4701e164f99e9a0bce701bd4fad489999f07f352c"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x422}}, {0x83, &(0x7f0000001640)=ANY=[@ANYBLOB="8303a0b10f0ccbb5535f2c2b416e449d68b7ba8a19eacbf373929b2b1ea2069604ab65ef1f5f174a52e0af6450e69f859787972d45462a8dce8211ab6420e0bac46e614ae51215715f015f2e527ba06abe04f6f9029aabf185d4c12a9fb14954ca1ed3aa1ad97c6ddf9f11adddfc023db5565157b5200cad234fddeccb3e0eecf6239317d82d3abcd9a82f0d1155079602d278cc69a3c9ab24cf3205ee70b0b21e730474b2fd5389e426d5d6cea03a184f1dcf1c287d96fabe31e96df16fc4e4410e8dd6507bda13ee4233df56283d46afb15e1bd9037137735d53172a19bf30c0ef5978be1262cf368bf4e4f38fd219634eb1a695772bdd"]}, {0xc5, &(0x7f0000001380)=@string={0xc5, 0x3, "f7b6aa9e4c9c0b2137dc69f04159da052b07660590a21aaefff163d06d26884a84277204be58101e37867f2fc5cf4138d883d9640cef538d82af45ae9a5ba3b0d4693e2ef9338fc65716f0e2984732b00c197ef8a65c3d3b4092e7deab57a232d2bfaeff53c4f21af8a6e4f1b4a5bc3e9fcc12a6c1cf639689fa8c008f8372591b0f929c2dd69efb78f0e320b8ec8f70861aa1041407ae12f32a212d58b4c4d583978775f91faa9f09ff929cced91bd3f61551cc95788c3c34b0bbe2235d07c80b39b2"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x41b}}, {0xca, &(0x7f00000014c0)=@string={0xca, 0x3, "3a76244f99a5aaa4ca289c9d245be4bdeb893dd853956dc64f6cc429a0d0a9a406970fae12e896065d5d5b618cd338c0e32484cbc7bd2f1b2a02038337ab59c936ee6efbce5023028a197ce079d25f4491fca0b26e5515ec884b82dd4639a8ca82eff2e81d362a230ac685e7357360075c16d075b8382fb23fa70494647c631c4cda53d33df4e6ed40efa801948c1c5c4111ec3f596bf8ba2c3d49709034b9532ecfd4cf8e13c7f3fdd07a7952c7dd1093aa26344999e5e87678fdb1e7ec059725deacd62b7fb9b5"}}]}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x1, 0xd4, {0xd4, 0x31, "fefb0f58c7883e4d24ecf67567207424a508ea2d17f90e31fa986e896029847879211faf68b7c1a496fe9a7105e01540b5eb82ae9150f305d15ad2933add06ebe55fadf5adb8777b7a365ebaf0d74bacd43cdd972442f38681c8e012f6cfbfeab8e4775e47a00dd289a3701ab5bd2f7962fbe2287c24a33a377ac3d00e3da6cc8fdfe3090b27dd3a5a4982d76915bc7698d2ce6012676dbc56c6bfcdcd3783ae47d9eeccd4b1ae05b490f3eb0c0f39affccf5786507bb0b6789cdb99d861e60f332d5509e3f2088bbd64403db4ea9ee90a28"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}, &(0x7f0000000200)={0x0, 0xf, 0x6f, {0x5, 0xf, 0x6f, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x5, 0x5f, 0xeaf}, @generic={0x2d, 0x10, 0x2, "4bc31878d88f8bd0056e7bb5e4e96e0f5bd456c5ef17e23b8d24b7f7ef04142801e7eaa72a46290e2f3f"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "e762d739851fa254709d80dc5970ee52"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "5ad185afc670e7254f3c18310338fbca"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x6, 0x5, "c8d72f86", "d18030b4"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb3, 0x80, 0xa, 0x8, 0xe, 0x7fff, 0x3}}}, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x20, 0x18, 0x5e, "f8347ee0710e95fb51ec0ee8e09c9f055d6272628ae1e9be792a5241c1fdf25386f8888c35940227e8097b126a4160e200dfb60272fe1bd2fdf493a9cec1a6e4404037802a3bb5021f876f20a1b830a448e2ae070cd8170506b26e6a015b"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0xc0, 0x40}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000540)={0x40, 0xb, 0x2, "df01"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x13, 0x6}, &(0x7f0000000600)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, &(0x7f0000000640)={0x40, 0x19, 0x2, "cff5"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x62}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xff}}) 7.968681029s ago: executing program 7 (id=4354): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = dup(r0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x3ffd, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32, @ANYBLOB="0000000000000000b70e67fcf6b5da7a0400000800000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000240)={'dvmrp0\x00', @random="bd4ac4c963f2"}) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x404c004) 6.144680489s ago: executing program 8 (id=4359): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x38}}, 0x20044050) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x2, 0x800, 0x2, 0xffffffff, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0x981}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) io_pgetevents(0x0, 0x54, 0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) 5.656843988s ago: executing program 5 (id=4361): mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000001, 0x13, 0xffffffffffffffff, 0x517a3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = fspick(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x32180, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000240)='\x00', 0x0, r3) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x38}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0x14}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_NET_SET_BACKEND(r1, 0xaf02, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f00000002c0)={0x5, 0x35, 0x1}) r6 = socket$inet(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) 5.268585846s ago: executing program 0 (id=4362): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010000140757e43cdd1e5477500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000420040004002b8008001b0000000000"], 0x2c}}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4.914775274s ago: executing program 5 (id=4364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x1, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xfffffffffffffe40}}]}, 0x34}}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYRES16=r1, @ANYBLOB="1c35b2725e343977aa071e40601095798e425fed3b28f05357b0f94e4d8c273a8c2c84e433a699056e471dfddafb184e645374b8ab1e0c3a5baeae737feddd5ccbf755d1f13609cebb5b1686ced41725dca8001311a4f26ff2f13f48fe799b14a42eadbabe4ccfaca745a95f07802e6f8ccfbf328471d9531807937a551ffae5895e1d3427c2793d4f496ca54ddee3161b4f68cba556028c9ddbc34f6427c1597e7f119266d6b7f65adc5746754fafb7d3c32e9eb60d047aff51062e890cfa8cbd820fd0d30ae5b773a5f55019bef1f67488447c5823ccb8d291c3f51b", @ANYRESHEX=r6, @ANYBLOB="fd6d7adf2cd3468749d0975a14da809f67c42d10627f8d9d3f05352dfe20b18c4ae86afc4fe1bd2746324fef623430d94bd29fecb8a098047f288773e99ac8459445bf453163d85c8d8c14020cf5f0138f6731184c2e7945e5d491db4a2ea0ac4fe62ad71892a11f65c6f7702c63eb7cbbfc80ff968ec7a9f8"], 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000007000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c200009078000302040a00b006ed883c51468be2b7b556b5d3cfd3b0f35a0ca018747e1340c180c5835d76262424a877a423f7fb1f299d675c102eff8f4a6fe7a0de5c22c8e6c1f4962d3a37727f3729fe983d02a134284886c6079c00000000000000"], 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x7, &(0x7f0000000040)=0x0) io_submit(r9, 0x2, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x3, r7, 0x0, 0x0, 0x4}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x2, r8, &(0x7f00000001c0)="e11600d03d3d3e", 0x7, 0xe}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r11, &(0x7f000000c280)=[{{&(0x7f0000000180)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000003c0)="b2c10ba5f41f4b7632071e7e43043478c7dc5559da0538d7b03b3f31ed07d8b5d34af062e02427e751ccc33f86e3a7a64e0fedc96563a4e8411f02dd87b99e9fa5709ee2bc6b99f8275bf6bb2abee0aa6bd6108005bdd47ce22d9bdf3199b9ccda4ea1e02cc399f6", 0x68}, {&(0x7f00000000c0)="c5461e8c4c143e999860e15b", 0xc}, {&(0x7f0000000500)="691f630b13d055a7c4c62aaa9defa399f99cb7a0705cd27b9f4e40893079de260b34a981050f9de65a822a699354ef20530aa1912c887500ad163bd7e5a30605818c7d0182674de5aeefea072044e746a29fb0c766370f67f6cbab16cb1afe5e46b4be389c085b85fde982ad314d48989e", 0x71}, {&(0x7f0000000340)="ba764095e6ea58c04347cfaae77b4d04e9a5abf9090f5a51193a3177d7dbb04680d1d7f9df097ff0389adb857cd62a61", 0x30}, {&(0x7f0000000800)="758bc8d9c7e395a2a79010232311a7702f617730b43b4cc3f9cdd6502ad516993f4f36c8deffb98d70ccbc9cd3884b47ea1afde93d9a0885f61a283f9b9734c3736a8ad525b8b905404ad007f312f71c24ba472e0aa6b0116b5dd86a9d2019eaef02e9fd87a2b4ad6a82fc8539c2092a31ff0b3b7a5954c267c79852c4a4ea5b2481cdd84d84bd366135dc07b467bd8343dbab9ce95a8ac87864d063c55de45b07c3a3311b82e5717f02ef065c2d55aed52e7e86451bfac487ad66cdc029e6c4ada6fc01d814ebcb8ba82e1ebb877dc682cc30", 0xd3}], 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRESDEC=r7, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="deff7d00"], 0x70, 0x4c000}}, {{&(0x7f0000000b40)=@file={0x0, './cgroup.cpu/cgroup.procs\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000bc0)="4e13f4743a3e23f748b47e3a72dc2c21ab41e7cec19760cd61403e3b275a629a34d3faff9c27d84b76a454b77b28bf230ea879d4632a360f61f66a5229f260fd396993602fb11c84afc709696c50000fc2833fafa2c7987acf532327587d", 0x5e}, {&(0x7f0000002140)="a504163c707a0017e4b91176a3cce84c6d89a245d62aa85148721e294003ebec4370541b3bb9e33ea73c6a968353a18d0ba301670436e49a78fcba98339b2d3300d36ef2208966d52af748d038d8daa3c7cf42acac037987982021c1ba1a9129f3997185244f559e8f639fc2a46b7b33ffc7b2521472fcbaf7432672a17046444b6f9ffb1fb3553d069956d5ed99f8d0991a32699fa868c292f291d7b9245e8f45ef144d5aeccb8317e496010850475eaee5a4939dd31bb7b07dd51a4ff5a3de8bfeafc844f4247ba005ba47990dd83ecb28c4c99ed215964e93b98b94f7ebc67538e2e6942037efb936984cfdec28fa64ca2eae8ab6796cf1298642396f366684699dfd23292666060355ed314fc1c98a6854b4d9f4d854efad5e6d7cefb3bba80527af6b9bd025470e8b4c4b4f32e74a6b9358d2cd5a697deb5e2a35c1952b25364a966311ab6163231761f3050fe4312c03b152d4839ae84e8565e17da5b0326ac18661d36a2e636b5ffc2f21fa1eb5c14161974e280cd92d4fd0d2827ea0fd5ba856f9ff0a055db38a0ab52bda3290bad203160f6204cac67a8440e917522c2f87ee7222ba1d2474e044bc21992a34df43bbf549a3e1748943b1dadf5be992ba7de9f97360619f9fe836fafe9e36dea1f83bfd59b1fc7cec37193ccc3ba5ce81f83aec6c8e62f346986301221d53d58cd4f9529f1d11f472f07e445c3b3ceed9056cd281fe2deb2c9b626f5a1b784d532b355ef08b66a5412baf50cb8395c48a047b8d246b7da9a628862c9ffd5c357c6951e67bfcc68f9a387dad48899c7aaa9b4574577d2173e758af2a4484196ad4d8112fdee0fe848a7c95b0a2bbb4e94769732b52eb6754fac52931c9ca1239d5af97b10a25b3a08294a0ff1b0e3e8e0add7c1b7b8dd04843c3d223740f8a43ffc3ad8ddd9a8302184cbda5e35fdb06ffacf38d7ce48dfc1397b35c1a8cde216edc34f2ebaa523d46369a5e4d4b8dc3a564670b4be83244134be71d55135bb0440c915cf62e57a4c5128aa74042eaa57d9d18ef5396b796d3c224b2359cd5c000ea98e3552f2054851d51885fb16242e9d92ee61e2335f58a73f8cf8bbae921926ca240ee38afabc046eb571239a676fd1c7029836b2b6c5f89c4bd28094fbe8854a24da2bbb9106332bd7d186673941863fd721d6bb6fc27e6366ad542ed66a95925fbeec36e4af929911e61aa088208d2fc3a5544e702d977ade4726c461d3efc426804a7db14b2684119e585721861851b33812f6cc12bcedfef320358aa2263b04975e50bbba76df894b9a035c08e9627be383efda61a7a40c3b5c8900709b0ffc71016cddc8179783101cbbf49e2f53d085c1a0dbe9d4365bc596c004e0506fcb53457c25f94e41e699cf611b7599b069167fc8c0b2ed0c7b68173d3a47881b3275258617e1058020eca87c90448ee5dbb9d72549434cada732289e64186a5cf78890097be393c4dd82b744da39e7c6616a04fd84f93f741e9f54817486e381ac9db7fe818a379c691f9ced8d1b7c2400fdc04af00a8c634df9a6c3bff6911b69d8f2f5f29eda62a92a51131c76b162ba7fa1cae9be65b99ec3adaf85bae3d30ecc6bbe9282d89c878680730d022b98967d38151823d3895e01641baee81b36b973047be06faa97b2779ce7d024567d807c79758f21356983d18d20b0a999fc5059f36c38822af2be37f69b2d8717ddc51b3786ac8a1aaaa42fb140595f97aa7472d0fba90523d4381ca97fa0b2c8121784304a0052367079279263a107b0628e32ceaffa558ec76ab155d7ad2516b0f2f0bdf547516c4b41c9aa9a838e17ce14965f0b09bcacf2927beaf4d8ba6edb01a61bc45ab0a2059a3eb862592b030d85d44f7f49e611d9f822ce0ed95e587286d609215bcdac82cfb2ece8ed8bc4fa6953ffd59351efa4e9391fcaf25d998f8d4c0c424e99de675b54d8f32c4340e561ae0a9c76fe1d1b2ab25e150f5781e67b458f12849b2f247f082b7c5b825c4072b228c92b4b5fab5ad468ad6d2527f258902e744e5ed3014516a6735275c6a63c6cb36e2511ca575fae8215513dc95da1b4986399cffd0949d4fc587f0d4b3e5e0f98e8c1d30e2c390c76d2c661b15ae287699d1e65f312d758422411d6eddcb975d4ec047731bfbc133aee7c8a6a2c460222a90191f98af2b74a665848350331f46d9bbd5ee8ff5b6e85af38b2d1e843d6373ae4ede308b8293bffe5292a3a3e472231cd98f288af59afd3d7e2db6c23f5ad003236e29d421f5ff84661699ae7ac5c1112614dcd6f782f7d3d6c7190a440894918dfff86d701c773e35caa81082d558825e26ebbea02a9a33d1409a25f66ab8f95b6723baa8f33c29bf2e92e742334109ccc2788340bf5a887c7b65d4e430d18c3a7ae9da501a828a3fe4081cb4b86110318c17c2b9629b2ea13d88125de37ad1c8acb591b0d4e07d03510c82a0d732ae6626c848fca48096a9aa5d1bb8624a11ca55c5c3dad1815cad1987acde7034a0cc90db59a6430125868546e4922fb540d49d0c5914943eb881686ca76397e5b2b3c94a7b2f95267fd6015fa2e697b1a15d8099d1f1caedf0ec06d466b14d1e04018b21b155198ecb2ad4b41be6e912283f4097bb041bd40db884569aef2959755b0fe4d4ea7e6fd2d6d126c9ba5a193728ebc9f971a02a2fb453a8637034b82f5c5c28202b206a03e4237ac3713e1a048d7f7f8eaa274f2ce30218f86aee5e565a7806a5e788e1d10f4656ff47d549fee494ef73b20e4d3345cc21fb14e18906aa34c97c6b4dc9a763d7dcdddd78dd4bad1702cd0f49955f63b093a2f207aaeab39a5e60b79125d5f522b8c1db92ff7c61596db8cbb46a38bb6eb2893d45f4fec6c50b730a65a854af2c3e10aec5b51a8dfca42cc30e792981f1e80dafc911065d7a13074135e95195164287f0e9d082b2835de8caf41c17538ae6409c7524ced23f4429985ff6530b01b4fddd4b1f046333b99735785bac39089f4c7935aa5a9c5b3b58eeb3039db45b49b7bc19ba7395f3bf104990e3f4552704450f9315ef25b7e17fe1cb93b65dd3d7e6c7e3e3060e8ce8aab4eb1ebd9588c65f35945bf393b50a7429a765ce5a9ac458523af182c5834d279ae60d47e8a8f5d0c409e76f12c06ae6f5a9e224fa5ed66603a8721706a3a23a99e38bff720ce85eb235fb3b7198d6a3f7aa7c669ffed5890dab000551d6550754f3bae4048709fbf41d9ccb3fd9ddad78263de7b4214296ba0fd12f79af9f5b8e8cefe739b749f2c910d6e6a7a5bf5e8f5f3d1a66090446f02a9adab3120cc3db22b3eda3a299e25f239837a97acc5a8c4a8bc5c1b1a59ea3e686ef2497021efa1abca46c92ae926e12eceb943e8c60db379ee23180ec327b2e767ef7a9b450ed2c6c84052102ad4fa2cc6e3de06feea56f10baf5b4caebddc034726fbe89d249cfbc80bc323a8933e5e8e592303e3dc442b649914aa4ad4947bd9b332b710e90fdb51e53b134b382abb04d91a95837a60ab8e3190e71af2ade400f5bdbbadc8720d99777a3c2469abcd7cf742ec3ce5a03e67022eccf599dcc3988bbf12781ca47d75f68b8f63f776b025b7e587b3c8f35c5ca2b5a8751d13e1b80602e4c8fbcc55982b3d61c567743167c64432b0ba9583453bf1594276ba65c83fea972cfa724bea0caf9acf64d9b144d741173c35401f7a9105c6375755fa0f9901633980ef7834633733be3e397e54cb42f0b0c84a26e6bd1aaa25d58232c79e8396b506e54601fd4198e9cfb8c35d3f90bb1f686d67e019b47a9f3961f257ef29ac83ae3c1866344dbf56660028f07b2b3e721313f22c782702f17d553ea4b184cc773b620eff05130961de2f3a25af66f835fc1939a69799c68f1cd3d1f464151b9a1c88afe0d0a1e54804340cd66c73c5b9ca81bd6376a4f89892a7ec2e65c5cd977b979c07cf8e94c05eef8c0cd3ec5665128301531fa2d10487a69eec7dfcb8016229c7dad72212b4c5ab8ae2e41cb1441399fea54e1893c20ffea5a1c1f067dc4ee3457a660a774465d67e2ce1cd54d6979238b5d9ea083b9a14ea16524c919c7b60fe6fc3119575892112adfd26ec4abbe4bde37687609f5f2b5c75efc548b9999738aa7221a9d6c6e2e0ad41ea797faafac6fc629d85f7fc69667e8e605ce8d1839c421a3342a08172f57cef9bef455846e864815e97a984de7f1b39eb5d2e23cede38e5930039d29c13f7f8aa5ada2ab540220703e63114c58729904abbf718c2e189f8b7b49b79499ab5c26b03f5f11d844f4c2d409314178b33c25500ea46b649b9369a5d8bd6f126355169a9a9eba6fc252c69c96964dac94f3f8afd3f74ede4e68e32ee193f42bb77f7138032620db8096bbe3d0552a9bc70909fba79c62133662f7a3d0d7dcd7b9cf4be2d4d8c8d4a47a933001121396f09dbf445618b05083f31694dffa25a3a920bd9f05a8fd7cd91156b86b2896ad918b0d1ffd807118ce910e84cd803908322ba1275f34f2cdc749bdb7410913cab2087e91773f1e6e4c39c0d6cead1bdbe4dbfa59c8238e10e2d47e07aa9f67b729e7e42d56034c08b5babb50cd5e303234a6e3aac25685aa59b439fc8e5bc1563a27b8f5f61cf70b74d63affda5f9e822c6ba5b5a146480b2fb3e7346fe0d7b9189df7eeea2320983c88cfb83a6a34d17f65f00d7240e48d2b1e0399bcad11595e7ca1de0e50bea95f13835dba7989ef068a637c0f958be948c8054b20aed01371f9d02bdacbb01fe98ab40f641496f8018f4565974fb7384aa1b1812cfb559fbd152b255a8d5289509d63df35ef0bd3642e6326957f48c6827e2127dd5a64136b89ec3db528457b294c328105c6e144dbd256226137205b6caf1b4aa5cc6b932552321fec4d69497327f132fe9e70f599cfdecbfaf062a9ccead9438f70fbbc4009a513217f33740c14eed65f3cb19296fc56a9d8154f2b401d30c546bf14f79130fa6f445bca10527bcfd768fc8acb2a59cf50efa5c866d29eae9a7ea1f6056a12707442b97f0c2dd3e8113c86102e88125ceb436f91a7e051724a50885126841e1bc2efae2ec81c854f0737e66f50d9e8214e80b9a5c1cad051e66f06d1fc890a3623ed9bc3a389d3444f03b4487c7097aa108aeba4f413ab5fbe41a68c493526df530902b352ccb4468a3f9c0eb9f4d4b0c5c314fd14db173afa75829c9fc75cde361de45d972f65ac02bad1851c93dcc1ef64d603c511e52f03d72f61a84de5cefdbec34a56be6452ec2181a32462713506f8b5220ec40657f24411356093581434e3ab41e69de27fb93eb514a5dcfea8aabc1ffb0c8662cc59fff5e9421da31b532a4a2d1dbd4ea2fe467fc84623335759a43629925a103311e07bc73cd3a9eb468f0d1314a092747d47997cdbe1656b3897d0ca62e1abdb92b1a43d39166d3fb3ef907847619ca23fa881ba86cd68c8dd197559877d5681dd63f83caa7792dd176a78c5199704d02c460d88fd672ec0d86935a6f3567007b32fda6e611967869533aa83e07de3649a2876770caf25335194ed90de71d04d033850f56c3595b2be1682bd5d285e74f473ff72a32a2bd9edcca8cea55f34b1cdb18be5f61564089bbb14f6ec4fc6f594176e286338934a654c76fc94f770e57fe87720613a8e968f944a3e72ab27e68de250e59a8ff67faab42c72c464be0a5d13a2c97f2ec83c5ed2019a2458b8e4d11fe039c51573c67c8b4aa699ccd99948cab113ed98555244a70d809dba4b4231b05071600bb274e537f2b7dfff7a", 0x1000}], 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32, @ANYRES32=r11, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRESDEC=r2, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRESHEX=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00006f0ace1c6acf176e0cb17f1a3fc66033e6000020006ec47a7a", @ANYRES32=r10, @ANYRES32, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYRES32=r11, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYRES32=r0, @ANYRES32=r3], 0x180, 0x8000}}, {{&(0x7f00000013c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001440)="3f452ca22a6b3071db22889d5d5ffd21a6c688eb49e4df2600d2f08f72d8454317713bce3b199f977257a10af06c4a070098a493be476f0bef2aabdde0", 0x3d}, {&(0x7f0000001480)="af2fa3a6a96cbfa8bf3ce49eff5b3682ea380b29200ebb8c9489b4a5eca3bca9b518f00dcecbc8e6522b8f55fda8733d5f3fe47811cf040799b33234e7d2ff6c436f6113c83f7436134160d37d4c6632bec41c4ca2aaec25617bdef5c311e9f888dff6b4963ed3aa559dc589c92ec4bb20d50ed36ff8261b36bacd0042caee9e5ed10251a21a057c11e3ae9e1e0c0bd1fad0797af25bfc817a50134c0f742011330fa60faece797a803e601d5cbe29419c0ba0a06efc28b13e14882c8e2d51088d0bc9db2356de7cfe20ccb5c113ee8a6c6787a3d9983af36d2eb7f9cfef724b5ba55977c56a", 0xe6}], 0x2, 0x0, 0x0, 0x48000}}, {{&(0x7f0000001600)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001680)="dcd961a9e340966267db866179c51ad52d0092cfb4e0c36f16fe7d2a4b8d771d8f79c8d26d8591097479c05c051759df10de", 0x32}, {&(0x7f00000016c0)="f0b0dad25442029cca81202b213a85d2ea1407d8e05d0875c4c2cbf5b407777f565135", 0x23}, {&(0x7f0000001700)="79d7d36ee930922508c1f25f1270be7893ca877f4d07c6e6e1b85cafcf750544a8d258bdad8820f57f2912bfa46d49bb2910e9f97d395189a1b9ff17aad76df2e74448ae7b863fef143f046eb18aef15d042dfd23601c42389c03932f5cc1ccaf43a5e6a78dd4880e37438905728d751e4f61a8ec4bf2ead43e442f263ee5e7fae654d91ff4487b230218f610200e7c1ef7127c7a68e3b9ac2eb3292532da3cabe1c5f38dc84acb0a2a5b483313de0bceed2ade9ebbbac8b7a6af8b35f855982b49eb80b4777576cc3418f034b0d745d7b4cf1540008d95da8f96d578199e65206a01c8895ae4bf81fb3964752e4", 0xee}, {&(0x7f0000001800)="099d6326b3e969a991c215c0e4b80dfdee24f465719e21c7203e9336d464eb25fcc10b791250a1e095567b13b75c61353d7fa0705bd592aec70a873f2472adb7e63197a2269af0f987c3c5f2d8541cba9653595b900190fdd8cc40787d54b9581a020dcac728e9dc3aa0804da64e01ffc9cabfc9eb9803f73416d6f87e964b8fb05a34784b4d40a7ffaaf35d", 0x8c}, {&(0x7f0000000c80)="3f8354ec91156248b3bff626a1010d6a8b7f601e0a7a36e2afb19be0744e105ce100a5366eb63c09133c6c70f2718962f400b96ad87cf3a8d954e3c90b5ecc0e0ef760b9b3c6de026af768197f15466d713e0a1f93ea51efa7b6afbdba45dd64d0c6a797ad78cd44bc7c8a2a00a4cc960dda93bfbba6ba7fdcb5bb4e6c5f56e3f52a92cf3fff15934de927247d9b6a1986c308fa2166036ed6a7e3aeaa34528f36", 0xa1}, {&(0x7f0000001980)="9bf2db230f66265ff08d78b9664c975fb04fdbf1b59f78e45a9366754a826752c3c4601fc3e39bca9ed3355d917f581e4e10977910542902a5076cce902c88ec3d5ded31aace99b2f00b1fe1cb874918c690d179bb53e4e54cfdc33f1de86d07bd9940cc6ab9bf4f60a71394b2297dd225e29e0301b2d7a0fd0ef3f5afd32edba44a6a4b22b3204c6a6464e19ec1d2db3832dac5c94d6f613d0f3b7e9c526a314721fcd61d12e43bf1e3afb00529852579e17422e7ace9cc08de95f5d2bfd00a631a9c81103618b1bea207ccd5f88e4d25e912902fee0edd58a46f8bb36c", 0xde}, {&(0x7f0000001a80)="68575c259039ed8b4d1b45b6a3147d8bec8b90fd469d87a9d61e1fb83ecf507179d2c7b065ab2fbb1f92cddb280673e77550831c7dbea8f8d6df7e5a83d52c0dfc47faa4", 0x44}], 0x7, &(0x7f0000001b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x70, 0x10008010}}, {{&(0x7f0000001c00)=@file={0x0, './cgroup.cpu/cgroup.procs\x00'}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001c80)="c87c23af609a542920004a1e11b7268d1b407bf3d8a976f7187067f754b09425935c08067dfd929429992a443e31d4f4d9b10e35ed603a3be207d3a0b5a9d8084e8ed720baab35b77035f6fd8ca143d38e764d1eeff71d845e13554d8324d1e9faa083f106d097588a215879979e1e5690ffdf151f752478139a30eaf381472c984af124dec57066a41279b39bfe447dbd60cb5d941766eaa6f13618b12c3af9d9df2ad9b97dd198c10af8f4a20f8226efe51fff53f981f163af9caa9f56672fde28bc733dfe9c118a60a3b5f69d1d0ce90d2e", 0xd3}, {&(0x7f0000003140)="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", 0x1000}, {&(0x7f0000001d80)="b64dd5baffe73364f8ce7783d890f2c34bd411713d950bc19f3a36ece41c0a859ab0b3d714ec6735a8fe7d530507efd9eaaa38b5f9e8abaedf63e503e1f1cfd7137425be0e4ebf30e9a0a70c88dfacf4acb42d5cfa653918036895be08545a23cb915fc179753f87eac9bc85d2d93d7be6290df168e3516de07ae21771e63445d003ea458418cd4763f3294b5f", 0x8d}], 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001800000000000000010000005b0278bc", @ANYRES32=r1, @ANYRES32, @ANYBLOB="1c000000ee1c5f9382fb410004c935a500000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES16=r8, @ANYRES32, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x100, 0x880}}], 0x5, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r12 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r12, 0xffffffffffffffff, 0x0, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40090}, 0x4000010) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 4.89556665s ago: executing program 0 (id=4365): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x2a8, 0x98, 0x2a8, 0x130, 0x1f0, 0x370, 0x370, 0x98, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004004) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000000)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}, {&(0x7f0000000180)="e535841f1b882c611cb31d28709b86e9267162f8a2b278f513195e57daae355eb2bcb823ec8c02b4f2fcd3739b02341c42406fdc28c92d23e36c4e97a0ccddfa597373f4656246ef0adae44fbc4af6aaec2e4cc87726754c9c86388b629abeaa97913f9845a06532d37f19d5a4741ac4010ef1bde8eaa05703044d4c3c43f13d", 0x80}], 0x3) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x3ff) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x5, 0x81}) sendfile(r3, r4, 0x0, 0x10ffff) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000740)={0x6e, 0x483aa015, 0x0, 0x0, 0x0, "fe00"}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r5 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) pwritev2(r5, 0x0, 0x0, 0x7f, 0xc, 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='fd/3\x00') socket$can_j1939(0x1d, 0x2, 0x7) 4.737036988s ago: executing program 7 (id=4366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000080)={0x24, r5, 0x62c21a4ade68aba1, 0x70bd23, 0xfffffffd, {{0x32}, {@val={0x8, 0x117, 0x59}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 4.543640934s ago: executing program 0 (id=4367): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) (async) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x17, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 4.542929226s ago: executing program 0 (id=4368): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000580)=""/200, 0xc8, 0x69a) (fail_nth: 2) 4.135250161s ago: executing program 0 (id=4369): syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000693c1e10cd060202043e010203010902240001000000000904238003722f680009050300ff0306090509050e101040000000"], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000006c0)=0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x4004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x90, 0x1, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0xcc5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xff, 0xf0}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x0, 0x5, 0xa, 0xff, 0x2}, 0x2a, &(0x7f00000000c0)={0x5, 0xf, 0x2a, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x2, 0x7f, 0x8cb, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "79bc82effa0d874a49c3fd5cf4bc7f44"}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x812}}, {0x57, &(0x7f0000000180)=@string={0x57, 0x3, "819d1b1de48deff872b6e8eb2eefe475921f6f54098c3659dd9b2a5d890eadf318d745a6730b5c1963de3c2f9ffb48e82adef955a7f5f4d4e0a72ca07c1d3c4d98eb42882aba3b782f37bb0d5ce3039f55b9ed3942"}}, {0xb7, &(0x7f0000000200)=@string={0xb7, 0x3, "497c5c45aac43496da591cbb770a919ac5c3883dd7ff9deb9fb228bd9edbb60d74a58f208122d4387c68760e89026ef0c78600088f51754f1c16ba6d70373a1a22881555f0f339f010f882759a61c60e068432bf16fda225d8a4cd9732d977ef57717e7ea4dbb4cf7774d58728ca76048d7e4930c9501730b7ff8c270baa16bb0ffd80b5bc600836df11930a548ba12f38191af1ef7624c07c2f4853a77d5f985a09c12a2527b6b5c3789af10d593a631268556077"}}, {0x44, &(0x7f00000002c0)=@string={0x44, 0x3, "95ba397e8ef3cccf862b05c65706393fc04f9d7c2e8e3f9a10588ce20017dc90af90102c921779758af6f6c1c11d8a5e43416b27541bea041fb459eb4f1dabc680a0"}}]}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)={0x280, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x98, 0x8, 0x0, 0x1, [{0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22bd949a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b3be4aa}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x368119ab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a0ddc54}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61cbd512}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x438bd492}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6dfc0f8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f2e0401}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x104, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d6fcb48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e3902cc}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cddd492}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73f73fd6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60a9909a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4314632b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59bb952c}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcfba720}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5854eeef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x118dc3ed}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cbd44f2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4823ef06}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x400}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf2e438f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x504cd165}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9af4f67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3381e03d}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb8, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e06dd29}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25f8f61b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1456dbb6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ba9c6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f8addf7}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9d3e1a1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x127582e7}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x646e58f3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c9bf9d2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78702a7e}]}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) 3.908658053s ago: executing program 5 (id=4370): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) fchdir(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r6, @ANYBLOB="0600360000000000b903738a9bf84c1b91867c286126ef5b2c7eb963bfbbfbce862b9c04c582cbdea6c482e2f9292784501f1e2960eb6c2918f10ea500000000a1d4c092fbdfae8cb7febc26875fd6b3e1b48e380361a9898ba0"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x440) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r10}, 0x18) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r11, &(0x7f0000000f80)=""/4096, 0x1000) ppoll(&(0x7f0000000040)=[{r1, 0x1708}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="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", 0x1000) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000a7aa302ff3fce7f000000000000000000330373284ea8ad9ec14c57ff61e7d617874123f0a6f06e0907b0899156803f8fc400735381cc8aeed898599b0756dc5a71cba3c5f881c12d2dd3b4a6e4d241868170d0b5c061b09df990df72bb097f03c510fecfbc6c3655646975781fe08d2edaefb36c9e7711974b81926aef3a70fa396358be44ab15951a4a3ff671f3e76030c2ad06b25e66035d42f6c97d07d0b2261be08e5189e8ca4ccdd967bca3391cbfb7ad21b11ef62a7628db681ab9552a3295dd1a6df4a19fa7736b5c14990fd83ed036c5e625c9348eb67036f9c03dea29834453ccf6347629ffb84abbc94f1f609126570730cf66762514734940dcf3e3"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r12}, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x84000) 3.70831174s ago: executing program 8 (id=4371): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 3.607202506s ago: executing program 7 (id=4372): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0xfffffff9, 0x3, 0x5, 0x3fd, 0x7, 0x7, 0x5, 0x80000000, 0x6, 0x9, 0x1, 0x1003, 0x6, 0xffff, 0x10003, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x4, 0x10, 0x46, 0x8, 0xe2df, 0x746f, 0x8c56, 0x5, 0x96c8, 0x1, 0x7, 0x8049]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000740), 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'ip_vti0\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x1f, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @func={0x85, 0x0, 0x1, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xad}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x9, 0x5b, &(0x7f0000000580)=""/91, 0x41000, 0x0, '\x00', r4, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xd, 0x8, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)=[{0x2, 0x2, 0xd, 0x4}], 0x10, 0x81}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000001100)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = dup2(r2, r2) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) 3.494373783s ago: executing program 7 (id=4373): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)={0x0, 0x24, 0x5, {0x5, 0x5, "513196"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYBLOB='\a\x00\x00\x00\x00\x00b'], 0x20) 3.417600601s ago: executing program 8 (id=4374): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000580)=""/200, 0xc8, 0x69a) 3.01404152s ago: executing program 1 (id=4375): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000005c0)=0x0) sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x505200, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004340)=""/102376, 0x18fe8) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) 2.851213348s ago: executing program 5 (id=4376): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000003c0)={0x4, @pix_mp={0x8, 0xfffffff7, 0x32314d54, 0x7, 0x5, [{0x3, 0x9}, {0x10000, 0x6}, {0x80000000, 0xfffffffc}, {0x8, 0xa09a}, {0x7, 0x1}, {0xcb, 0x2}, {0x7, 0x6}, {0x2, 0x4}], 0x2, 0x11, 0x4, 0x1}}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0xb) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0xe) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x7, 0x7, 0x47, @mcast2, @loopback, 0x8, 0x40, 0xfffff001, 0x5}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x73, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000280)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x1) close(r8) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000018000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r10, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r7, 0x0, r9, 0x0, 0x10d00, 0xf) clock_settime(0xfffffffc, 0x0) 2.455740663s ago: executing program 1 (id=4377): prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcd) 2.453959253s ago: executing program 8 (id=4378): syz_emit_ethernet(0x46, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x8, 0x1, 0x3}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 2.427809447s ago: executing program 1 (id=4379): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f0000000140), 0x8) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001c) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) pselect6(0x40, &(0x7f0000000080)={0x5, 0x7, 0x7, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0xffffffffffffffff, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r3) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r3, 0x40047459, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x3b94, 0x2000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[@ANYBLOB="ddf963", @ANYRES32]) 2.173503306s ago: executing program 5 (id=4380): r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x62602) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000001080)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c80, 0x0) 1.840539723s ago: executing program 8 (id=4381): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000000040)={0x20000000000084, @remote, 0x0, 0x1, 'none\x00', 0x20, 0x0, 0x1}, 0x2c) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x1, 0x3, 0x1, @empty, @remote, 0x1, 0x7, 0x1ff, 0x7}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x34, 0x12, 0xff05, 0x40000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0x2045, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x0) connect$packet(r1, &(0x7f0000000240)={0x11, 0xf6, r2, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x14) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000280)=r4) 1.139610525s ago: executing program 7 (id=4382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000080)={0x24, r5, 0x62c21a4ade68aba1, 0x70bd23, 0xfffffffd, {{0x32}, {@val={0x8, 0x117, 0x59}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.009866211s ago: executing program 5 (id=4383): syz_emit_ethernet(0x46, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "517f00", 0x10, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x8, 0x1, 0x3}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff03000000090534"], 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x88, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010100}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x78}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd845}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}]}]}, 0x88}}, 0x0) 949.317198ms ago: executing program 1 (id=4384): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0xfffffff9, 0x3, 0x5, 0x3fd, 0x7, 0x7, 0x5, 0x80000000, 0x6, 0x9, 0x1, 0x1003, 0x6, 0xffff, 0x10003, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x4, 0x10, 0x46, 0x8, 0xe2df, 0x746f, 0x8c56, 0x5, 0x96c8, 0x1, 0x7, 0x8049]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000740), 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'ip_vti0\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x1f, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @func={0x85, 0x0, 0x1, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xad}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x9, 0x5b, &(0x7f0000000580)=""/91, 0x41000, 0x0, '\x00', r4, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xd, 0x8, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)=[{0x2, 0x2, 0xd, 0x4}], 0x10, 0x81}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000001100)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = dup2(r2, r2) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) 792.797236ms ago: executing program 0 (id=4385): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'ip6gretap0\x00', 0x400}) close(0x3) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x4) r10 = openat$cgroup_pressure(r9, &(0x7f0000000380)='memory.pressure\x00', 0x2, 0x0) read(r10, &(0x7f0000000040)=""/252, 0xfc) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) recvmmsg(r7, &(0x7f0000006100), 0x49f, 0x0, 0x0) 790.886746ms ago: executing program 1 (id=4386): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0xfffffff9, 0x3, 0x5, 0x3fd, 0x7, 0x7, 0x5, 0x80000000, 0x6, 0x9, 0x1, 0x1003, 0x6, 0xffff, 0x10003, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x4, 0x10, 0x46, 0x8, 0xe2df, 0x746f, 0x8c56, 0x5, 0x96c8, 0x1, 0x7, 0x8049]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000740), 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f00000000c0)={0x0, 0x0, 0x20, 0x2, 0x5a1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000280)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'ip_vti0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb11060000000000000000000000040079f7000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x1f, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @func={0x85, 0x0, 0x1, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xad}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x9, 0x5b, &(0x7f0000000580)=""/91, 0x41000, 0x0, '\x00', r7, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xd, 0x8, 0x4}, 0x10, 0x0, r2, 0x1, 0x0, &(0x7f0000000640)=[{0x2, 0x2, 0xd, 0x4}], 0x10, 0x81}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f0000001100)={0x11, 0x3, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = dup2(r5, r5) sendmmsg$unix(r10, &(0x7f0000008380), 0x400000000000174, 0x4008890) 697.350195ms ago: executing program 8 (id=4387): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r4, @ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x7e0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x616) r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r5) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) syz_pidfd_open(r6, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$RTC_AIE_OFF(r5, 0x7002) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010825bd7000fbdbdf253a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b000600650080000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x20008040) r7 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r7, 0x111, 0x1, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) fdatasync(0xffffffffffffffff) 0s ago: executing program 1 (id=4388): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85513, &(0x7f0000002600)={{0x1, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x9, 0x0, 0x100000001, 0x3, 0x0, 0x10001, 0xff, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xc6c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x7b, 0x1, 0x3, 0xca, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x48a0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x1, 0x4, 0x8000000, 0x2, 0x0, 0x3, 0xc291, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3f, 0x0, 0x7, 0x8001, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100009]}) (fail_nth: 2) kernel console output (not intermixed with test programs): 7488] usb 9-1: can't read configurations, error -71 [ 1100.973484][T19447] overlayfs: missing 'lowerdir' [ 1100.980900][T19449] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1101.279771][ T5932] usb 8-1: new full-speed USB device number 54 using dummy_hcd [ 1102.156688][ T30] audit: type=1400 audit(1763620966.774:2373): avc: denied { read } for pid=19457 comm="syz.8.4047" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1102.230792][ T30] audit: type=1400 audit(1763620966.774:2374): avc: denied { open } for pid=19457 comm="syz.8.4047" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1102.295867][ T5932] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1102.312811][ T5932] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1102.333672][ T5932] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1102.365713][ T5932] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.392963][T19447] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1102.410684][T19447] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1102.432139][ T5932] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1102.470698][T19467] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4050'. [ 1102.659536][ T979] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1102.692562][ T10] usb 8-1: USB disconnect, device number 54 [ 1103.216912][ T979] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1103.225534][ T979] usb 6-1: not running at top speed; connect to a high speed hub [ 1103.234550][ T979] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 1103.243090][ T979] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.302806][ T979] usb 6-1: config 4 has no interface number 0 [ 1103.312582][ T979] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1103.322000][ T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 1103.330281][ T979] usb 6-1: Product: syz [ 1103.334861][ T979] usb 6-1: Manufacturer: syz [ 1103.339528][ T979] usb 6-1: SerialNumber: syz [ 1103.577932][T19463] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4049'. [ 1103.587798][T19463] Unknown options in mask b7f2 [ 1103.796098][T19483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4055'. [ 1104.336581][T19463] hpfs: hpfs_map_sector(): read error [ 1104.370591][T19463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.382711][T19463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.816563][ T979] uvcvideo 6-1:4.147: probe with driver uvcvideo failed with error -22 [ 1104.843714][ T979] usb 6-1: USB disconnect, device number 25 [ 1104.938323][T19495] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4059'. [ 1105.509221][T19500] mkiss: ax0: crc mode is auto. [ 1105.539168][T19503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4061'. [ 1105.548938][T19503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4061'. [ 1105.558085][T19503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4061'. [ 1105.568042][T19503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4061'. [ 1107.043746][T19518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4063'. [ 1109.472926][T19551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4075'. [ 1109.665097][T19560] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4076'. [ 1109.768180][T19562] mkiss: ax0: crc mode is auto. [ 1111.181453][T19573] netlink: 'syz.5.4079': attribute type 1 has an invalid length. [ 1111.219402][T19573] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4079'. [ 1111.605437][ T30] audit: type=1400 audit(1763620975.614:2375): avc: denied { audit_write } for pid=19579 comm="syz.8.4082" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1111.639399][ T976] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1111.810125][ T976] usb 2-1: Using ep0 maxpacket: 16 [ 1111.822706][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 1111.845064][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1120, setting to 1024 [ 1111.867687][ T976] usb 2-1: New USB device found, idVendor=0eef, idProduct=722a, bcdDevice= 0.00 [ 1111.884812][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.901722][ T976] usb 2-1: config 0 descriptor?? [ 1111.908450][T19576] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1112.002546][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1112.013275][ T24] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1112.069049][T19587] SELinux: failed to load policy [ 1112.150645][T19576] netlink: 856 bytes leftover after parsing attributes in process `syz.1.4080'. [ 1112.167591][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1112.183219][ T10] usb 9-1: config 0 has an invalid interface number: 83 but max is 0 [ 1112.194627][ T10] usb 9-1: config 0 has no interface number 0 [ 1112.198266][ T24] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1112.203586][ T10] usb 9-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1112.210383][ T979] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1112.219792][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.236233][ T10] usb 9-1: Product: syz [ 1112.236551][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.262337][ T10] usb 9-1: Manufacturer: syz [ 1112.267711][ T10] usb 9-1: SerialNumber: syz [ 1112.269690][ T24] usb 6-1: Product: syz [ 1112.277168][ T24] usb 6-1: Manufacturer: syz [ 1112.278383][ T10] usb 9-1: config 0 descriptor?? [ 1112.287379][ T24] usb 6-1: SerialNumber: syz [ 1112.299752][ T24] usb 6-1: config 0 descriptor?? [ 1112.301362][ T10] redrat3 9-1:0.83: Couldn't find all endpoints [ 1112.419402][ T979] usb 8-1: Using ep0 maxpacket: 16 [ 1112.428589][ T979] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1112.438341][ T979] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1112.451902][ T979] usb 8-1: Product: syz [ 1112.456173][ T979] usb 8-1: Manufacturer: syz [ 1112.470453][ T979] usb 8-1: SerialNumber: syz [ 1112.483281][ T979] usb 8-1: config 0 descriptor?? [ 1112.530920][ T24] airspy 6-1:0.0: usb_control_msg() failed -71 request 09 [ 1112.541165][ T5859] usb 9-1: USB disconnect, device number 10 [ 1112.549117][ T24] airspy 6-1:0.0: Could not detect board [ 1112.569090][ T24] airspy 6-1:0.0: probe with driver airspy failed with error -71 [ 1112.586542][ T24] usb 6-1: USB disconnect, device number 26 [ 1112.674128][ T976] usbhid 2-1:0.0: can't add hid device: -71 [ 1112.681087][ T976] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1112.693983][ T976] usb 2-1: USB disconnect, device number 59 [ 1112.715648][ T30] audit: type=1400 audit(1763620976.652:2376): avc: denied { mounton } for pid=19588 comm="syz.7.4086" path="mnt:[4026533071]" dev="nsfs" ino=4026533071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1112.746677][ T5859] usb 8-1: USB disconnect, device number 55 [ 1113.464997][T19608] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=11 sclass=netlink_xfrm_socket pid=19608 comm=syz.7.4090 [ 1113.500430][T19602] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1113.661560][ T979] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1114.919166][ T979] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1114.960913][ T979] usb 2-1: not running at top speed; connect to a high speed hub [ 1114.996861][ T979] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 1115.016545][ T979] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.027204][ T979] usb 2-1: config 4 has no interface number 0 [ 1115.061885][ T979] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1115.072219][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 1115.080718][ T979] usb 2-1: Product: syz [ 1115.085699][ T979] usb 2-1: Manufacturer: syz [ 1115.097317][ T979] usb 2-1: SerialNumber: syz [ 1115.331160][T19604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4089'. [ 1115.341605][T19604] Unknown options in mask b7f2 [ 1115.514531][T19632] hpfs: hpfs_map_sector(): read error [ 1115.522673][ T5859] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1115.553312][T19632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.577709][T19632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.695171][ T30] audit: type=1400 audit(1763620979.439:2377): avc: denied { read write } for pid=19630 comm="syz.8.4095" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1115.724707][ T5859] usb 8-1: Using ep0 maxpacket: 16 [ 1115.751608][ T5859] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.765980][ T5859] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1115.773704][ T30] audit: type=1400 audit(1763620979.439:2378): avc: denied { open } for pid=19630 comm="syz.8.4095" path="/55/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1115.798223][ T5859] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1115.811127][ T5859] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.824936][ T5859] usb 8-1: config 0 descriptor?? [ 1116.648603][ T5859] usbhid 8-1:0.0: can't add hid device: -71 [ 1116.656310][ T5859] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1116.677160][ T5859] usb 8-1: USB disconnect, device number 56 [ 1117.255255][T19653] netlink: 'syz.5.4102': attribute type 1 has an invalid length. [ 1117.264770][T19653] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4102'. [ 1117.456709][T15693] Bluetooth: hci4: command 0x0406 tx timeout [ 1118.074805][ T5859] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1118.178254][T19661] sctp: [Deprecated]: syz.7.4104 (pid 19661) Use of int in max_burst socket option. [ 1118.178254][T19661] Use struct sctp_assoc_value instead [ 1118.226385][T19663] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4105'. [ 1118.276147][ T979] uvcvideo 2-1:4.147: probe with driver uvcvideo failed with error -22 [ 1118.291494][ T5859] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1118.306521][ T979] usb 2-1: USB disconnect, device number 60 [ 1118.313306][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.313342][ T5859] usb 6-1: Product: syz [ 1118.313360][ T5859] usb 6-1: Manufacturer: syz [ 1118.313374][ T5859] usb 6-1: SerialNumber: syz [ 1118.364435][ T5859] usb 6-1: config 0 descriptor?? [ 1118.572995][T19672] FAULT_INJECTION: forcing a failure. [ 1118.572995][T19672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1118.588525][T19672] CPU: 1 UID: 0 PID: 19672 Comm: syz.8.4108 Not tainted syzkaller #0 PREEMPT(full) [ 1118.588555][T19672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1118.588567][T19672] Call Trace: [ 1118.588574][T19672] [ 1118.588582][T19672] dump_stack_lvl+0x16c/0x1f0 [ 1118.588613][T19672] should_fail_ex+0x512/0x640 [ 1118.588650][T19672] strncpy_from_user+0x3b/0x2e0 [ 1118.588671][T19672] getname_flags.part.0+0x8f/0x550 [ 1118.588696][T19672] ? ksys_write+0x190/0x250 [ 1118.588714][T19672] getname_flags+0x93/0xf0 [ 1118.588727][T19672] user_path_at+0x24/0x60 [ 1118.588744][T19672] do_utimes+0x102/0x2a0 [ 1118.588765][T19672] ? __pfx_do_utimes+0x10/0x10 [ 1118.588784][T19672] ? __fget_files+0x20e/0x3c0 [ 1118.588803][T19672] __x64_sys_utimensat+0x1c6/0x290 [ 1118.588822][T19672] ? fput+0x9b/0xd0 [ 1118.588843][T19672] ? __pfx___x64_sys_utimensat+0x10/0x10 [ 1118.588861][T19672] ? ksys_write+0x1ac/0x250 [ 1118.588883][T19672] do_syscall_64+0xcd/0xfa0 [ 1118.588901][T19672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.588919][T19672] RIP: 0033:0x7f4e3e58f749 [ 1118.588937][T19672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1118.588954][T19672] RSP: 002b:00007f4e3f40d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 1118.588974][T19672] RAX: ffffffffffffffda RBX: 00007f4e3e7e6090 RCX: 00007f4e3e58f749 [ 1118.588986][T19672] RDX: 0000000000000000 RSI: 0000200000006380 RDI: ffffffffffffff9c [ 1118.588997][T19672] RBP: 00007f4e3f40d090 R08: 0000000000000000 R09: 0000000000000000 [ 1118.589007][T19672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1118.589018][T19672] R13: 00007f4e3e7e6128 R14: 00007f4e3e7e6090 R15: 00007fff40afc968 [ 1118.589043][T19672] [ 1118.606352][ T5859] airspy 6-1:0.0: usb_control_msg() failed -71 request 09 [ 1118.868275][ T979] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1118.873786][ T5859] airspy 6-1:0.0: Could not detect board [ 1118.909763][ T5859] airspy 6-1:0.0: probe with driver airspy failed with error -71 [ 1118.922304][ T5859] usb 6-1: USB disconnect, device number 27 [ 1119.048112][ T979] usb 2-1: Using ep0 maxpacket: 16 [ 1119.075897][ T979] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1119.089382][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.156469][ T979] usb 2-1: Product: syz [ 1119.161055][ T979] usb 2-1: Manufacturer: syz [ 1119.165981][ T979] usb 2-1: SerialNumber: syz [ 1119.206084][ T979] usb 2-1: config 0 descriptor?? [ 1119.233583][ T979] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1119.255056][ T979] usb 2-1: Detected FT-X [ 1119.454865][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4106'. [ 1119.522066][T19666] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1119.536322][T19666] team0: Device ipvlan3 is already an upper device of the team interface [ 1119.613781][ T24] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 1119.622486][ T24] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 1119.647357][ T24] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 1119.662645][ T24] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 1119.688107][ T24] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 1119.696467][ T24] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 1119.709375][ T979] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1119.716723][ T979] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1119.738720][ T979] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1119.752130][ T24] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 1119.769705][ T979] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1119.778543][ T24] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 1119.802686][ T24] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 1119.811998][ T979] usb 2-1: USB disconnect, device number 61 [ 1119.829182][ T24] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 1119.884027][ T979] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1119.896973][ T24] hid-generic 0000:0000:0004.001C: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1119.910071][ T979] ftdi_sio 2-1:0.0: device disconnected [ 1119.983984][T19691] syzkaller0: entered promiscuous mode [ 1120.098465][T19691] syzkaller0: entered allmulticast mode [ 1120.648302][T19691] FAULT_INJECTION: forcing a failure. [ 1120.648302][T19691] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.823175][T19691] CPU: 1 UID: 0 PID: 19691 Comm: syz.0.4114 Not tainted syzkaller #0 PREEMPT(full) [ 1120.823225][T19691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1120.823237][T19691] Call Trace: [ 1120.823248][T19691] [ 1120.823259][T19691] dump_stack_lvl+0x16c/0x1f0 [ 1120.823285][T19691] should_fail_ex+0x512/0x640 [ 1120.823305][T19691] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1120.823328][T19691] should_failslab+0xc2/0x120 [ 1120.823346][T19691] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1120.823363][T19691] ? __alloc_skb+0x2b2/0x380 [ 1120.823384][T19691] ? __alloc_skb+0x2b2/0x380 [ 1120.823397][T19691] ? __pfx_avc_has_perm+0x10/0x10 [ 1120.823418][T19691] __alloc_skb+0x2b2/0x380 [ 1120.823432][T19691] ? __pfx___alloc_skb+0x10/0x10 [ 1120.823445][T19691] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 1120.823457][T19691] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1120.823472][T19691] netlink_alloc_large_skb+0x69/0x140 [ 1120.823495][T19691] netlink_sendmsg+0x698/0xdd0 [ 1120.823513][T19691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1120.823534][T19691] ____sys_sendmsg+0xa98/0xc70 [ 1120.823548][T19691] ? copy_msghdr_from_user+0x10a/0x160 [ 1120.823563][T19691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1120.823581][T19691] ___sys_sendmsg+0x134/0x1d0 [ 1120.823603][T19691] ? __pfx____sys_sendmsg+0x10/0x10 [ 1120.823616][T19691] ? __lock_acquire+0x622/0x1c90 [ 1120.823648][T19691] __sys_sendmsg+0x16d/0x220 [ 1120.823664][T19691] ? __pfx___sys_sendmsg+0x10/0x10 [ 1120.823688][T19691] do_syscall_64+0xcd/0xfa0 [ 1120.823704][T19691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.823718][T19691] RIP: 0033:0x7faac5b8f749 [ 1120.823730][T19691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1120.823743][T19691] RSP: 002b:00007faac6a7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1120.823756][T19691] RAX: ffffffffffffffda RBX: 00007faac5de5fa0 RCX: 00007faac5b8f749 [ 1120.823763][T19691] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1120.823770][T19691] RBP: 00007faac6a7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1120.823775][T19691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1120.823781][T19691] R13: 00007faac5de6038 R14: 00007faac5de5fa0 R15: 00007ffeed58dd88 [ 1120.823797][T19691] [ 1121.424734][T19704] FAULT_INJECTION: forcing a failure. [ 1121.424734][T19704] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.456150][T19704] CPU: 0 UID: 0 PID: 19704 Comm: syz.5.4118 Not tainted syzkaller #0 PREEMPT(full) [ 1121.456182][T19704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1121.456193][T19704] Call Trace: [ 1121.456200][T19704] [ 1121.456209][T19704] dump_stack_lvl+0x16c/0x1f0 [ 1121.456234][T19704] should_fail_ex+0x512/0x640 [ 1121.456257][T19704] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1121.456285][T19704] should_failslab+0xc2/0x120 [ 1121.456306][T19704] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1121.456328][T19704] ? __alloc_skb+0x2b2/0x380 [ 1121.456357][T19704] ? __alloc_skb+0x2b2/0x380 [ 1121.456374][T19704] ? __pfx_netlink_insert+0x10/0x10 [ 1121.456400][T19704] __alloc_skb+0x2b2/0x380 [ 1121.456418][T19704] ? __pfx___alloc_skb+0x10/0x10 [ 1121.456437][T19704] ? netlink_autobind.isra.0+0x158/0x370 [ 1121.456464][T19704] netlink_alloc_large_skb+0x69/0x140 [ 1121.456490][T19704] netlink_sendmsg+0x698/0xdd0 [ 1121.456517][T19704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1121.456544][T19704] ____sys_sendmsg+0xa98/0xc70 [ 1121.456562][T19704] ? copy_msghdr_from_user+0x10a/0x160 [ 1121.456585][T19704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1121.456609][T19704] ___sys_sendmsg+0x134/0x1d0 [ 1121.456629][T19704] ? __pfx____sys_sendmsg+0x10/0x10 [ 1121.456646][T19704] ? __lock_acquire+0x622/0x1c90 [ 1121.456690][T19704] __sys_sendmsg+0x16d/0x220 [ 1121.456711][T19704] ? __pfx___sys_sendmsg+0x10/0x10 [ 1121.456743][T19704] do_syscall_64+0xcd/0xfa0 [ 1121.456762][T19704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.456778][T19704] RIP: 0033:0x7f313db8f749 [ 1121.456793][T19704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1121.456808][T19704] RSP: 002b:00007f313e96f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1121.456826][T19704] RAX: ffffffffffffffda RBX: 00007f313dde5fa0 RCX: 00007f313db8f749 [ 1121.456837][T19704] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1121.456853][T19704] RBP: 00007f313e96f090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.456863][T19704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.456872][T19704] R13: 00007f313dde6038 R14: 00007f313dde5fa0 R15: 00007ffd23f4ad58 [ 1121.456897][T19704] [ 1121.704992][T19702] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1122.055912][T19719] netlink: 'syz.8.4123': attribute type 1 has an invalid length. [ 1122.067889][ T30] audit: type=1400 audit(1763620985.398:2379): avc: denied { getopt } for pid=19708 comm="syz.5.4121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1122.083838][T19719] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4123'. [ 1122.410758][T19734] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1122.853716][ T979] IPVS: starting estimator thread 0... [ 1122.949723][T19735] IPVS: using max 52 ests per chain, 124800 per kthread [ 1123.302061][T19730] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1123.794613][ T979] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1123.844319][T19747] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1123.956601][ T979] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 1123.966328][ T979] usb 6-1: config 0 has no interface number 1 [ 1123.973946][ T979] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1123.988526][ T979] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1123.999457][ T24] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1124.010360][ T979] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1124.019945][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1124.028072][ T979] usb 6-1: SerialNumber: syz [ 1124.036736][ T979] usb 6-1: config 0 descriptor?? [ 1124.057042][ T979] uvcvideo 6-1:0.199: Found UVC 0.00 device (0002:0000) [ 1124.065250][ T979] uvcvideo 6-1:0.199: No valid video chain found. [ 1124.156403][T19748] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1124.173829][ T24] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1124.183074][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.191971][ T24] usb 9-1: Product: syz [ 1124.196354][ T24] usb 9-1: Manufacturer: syz [ 1124.202033][ T24] usb 9-1: SerialNumber: syz [ 1124.209554][ T24] usb 9-1: config 0 descriptor?? [ 1124.395018][T19749] vlan2: entered allmulticast mode [ 1124.400630][T19749] macsec0: entered allmulticast mode [ 1124.436706][ T24] airspy 9-1:0.0: usb_control_msg() failed -71 request 09 [ 1124.449903][ T24] airspy 9-1:0.0: Could not detect board [ 1124.455810][ T24] airspy 9-1:0.0: probe with driver airspy failed with error -71 [ 1124.469393][ T24] usb 9-1: USB disconnect, device number 11 [ 1124.503932][T19749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.513546][T19749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.982476][T19765] Cannot find add_set index 0 as target [ 1126.006852][T19765] netlink: 'syz.1.4134': attribute type 10 has an invalid length. [ 1126.498382][T19772] FAULT_INJECTION: forcing a failure. [ 1126.498382][T19772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1126.511958][T19772] CPU: 0 UID: 0 PID: 19772 Comm: syz.7.4136 Not tainted syzkaller #0 PREEMPT(full) [ 1126.511985][T19772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1126.511996][T19772] Call Trace: [ 1126.512002][T19772] [ 1126.512006][T19772] dump_stack_lvl+0x16c/0x1f0 [ 1126.512028][T19772] should_fail_ex+0x512/0x640 [ 1126.512047][T19772] strncpy_from_user+0x3b/0x2e0 [ 1126.512062][T19772] getname_flags.part.0+0x8f/0x550 [ 1126.512083][T19772] getname_flags+0x93/0xf0 [ 1126.512094][T19772] do_sys_openat2+0xb8/0x1d0 [ 1126.512111][T19772] ? __pfx_do_sys_openat2+0x10/0x10 [ 1126.512128][T19772] ? __pfx___schedule+0x10/0x10 [ 1126.512148][T19772] __x64_sys_openat+0x174/0x210 [ 1126.512162][T19772] ? __pfx___x64_sys_openat+0x10/0x10 [ 1126.512183][T19772] do_syscall_64+0xcd/0xfa0 [ 1126.512195][T19772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.512208][T19772] RIP: 0033:0x7fdaf7d8f749 [ 1126.512220][T19772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1126.512232][T19772] RSP: 002b:00007fdaf8c7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1126.512244][T19772] RAX: ffffffffffffffda RBX: 00007fdaf7fe6180 RCX: 00007fdaf7d8f749 [ 1126.512251][T19772] RDX: 0000000000101201 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 1126.512258][T19772] RBP: 00007fdaf8c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.512264][T19772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.512270][T19772] R13: 00007fdaf7fe6218 R14: 00007fdaf7fe6180 R15: 00007ffc446532f8 [ 1126.512287][T19772] [ 1126.680560][ C0] vkms_vblank_simulate: vblank timer overrun [ 1126.921914][ T30] audit: type=1400 audit(1763620989.944:2380): avc: denied { getopt } for pid=19767 comm="syz.0.4137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1127.016308][ T5859] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1127.041802][ T10] usb 6-1: USB disconnect, device number 28 [ 1127.614011][ T5859] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.625629][ T5859] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1127.640327][ T5859] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1127.650799][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.665901][ T5859] usb 2-1: Product: syz [ 1127.676098][ T5859] usb 2-1: Manufacturer: syz [ 1127.778464][ T5859] usb 2-1: SerialNumber: syz [ 1128.234549][T19795] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4144'. [ 1128.281099][T19797] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4143'. [ 1128.320425][T19798] overlayfs: missing 'lowerdir' [ 1128.356053][ T5859] usb 2-1: 0:2 : does not exist [ 1128.373340][ T5859] usb 2-1: USB disconnect, device number 62 [ 1128.420967][T19786] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1128.615850][ T979] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1128.779427][ T979] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1128.829711][ T979] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1128.889725][ T979] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1128.895791][T19804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4146'. [ 1128.908828][T19804] nbd: must specify a size in bytes for the device [ 1128.940022][ T979] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.247134][T19798] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1129.256354][T19798] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1129.281354][ T979] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1129.511546][ T979] usb 9-1: USB disconnect, device number 12 [ 1129.695748][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1130.187685][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1130.196392][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1130.214363][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1130.233247][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1130.259331][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1130.277135][ T10] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1130.294948][ T10] usb 6-1: Product: syz [ 1130.300544][ T10] usb 6-1: Manufacturer: syz [ 1130.305349][ T10] usb 6-1: SerialNumber: syz [ 1130.331606][ T10] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input116 [ 1130.359153][T19820] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4152'. [ 1130.564811][T19806] bridge0: entered allmulticast mode [ 1130.764095][ T979] usb 6-1: USB disconnect, device number 29 [ 1130.770189][ C1] appletouch 6-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1131.146393][T19827] syzkaller0: entered promiscuous mode [ 1131.155116][ T979] appletouch 6-1:1.0: input: appletouch disconnected [ 1131.173915][T19827] syzkaller0: entered allmulticast mode [ 1131.238773][T19827] fuse: Unknown parameter 'user_' [ 1131.244112][ T30] audit: type=1400 audit(1763620993.966:2381): avc: denied { mounton } for pid=19823 comm="syz.7.4155" path="/271/file0" dev="tmpfs" ino=1438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1131.599267][T19834] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1131.995220][T19844] bridge_slave_0: invalid flags given to default FDB implementation [ 1132.751637][T19862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4165'. [ 1132.995815][T19869] FAULT_INJECTION: forcing a failure. [ 1132.995815][T19869] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.011395][T19869] CPU: 0 UID: 0 PID: 19869 Comm: syz.7.4167 Not tainted syzkaller #0 PREEMPT(full) [ 1133.011431][T19869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1133.011442][T19869] Call Trace: [ 1133.011450][T19869] [ 1133.011458][T19869] dump_stack_lvl+0x16c/0x1f0 [ 1133.011493][T19869] should_fail_ex+0x512/0x640 [ 1133.011515][T19869] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1133.011545][T19869] should_failslab+0xc2/0x120 [ 1133.011563][T19869] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1133.011584][T19869] ? __alloc_skb+0x2b2/0x380 [ 1133.011608][T19869] ? __alloc_skb+0x2b2/0x380 [ 1133.011623][T19869] ? __pfx_netlink_insert+0x10/0x10 [ 1133.011643][T19869] __alloc_skb+0x2b2/0x380 [ 1133.011661][T19869] ? __pfx___alloc_skb+0x10/0x10 [ 1133.011679][T19869] ? netlink_autobind.isra.0+0x158/0x370 [ 1133.011704][T19869] netlink_alloc_large_skb+0x69/0x140 [ 1133.011727][T19869] netlink_sendmsg+0x698/0xdd0 [ 1133.011753][T19869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1133.011783][T19869] ____sys_sendmsg+0xa98/0xc70 [ 1133.011802][T19869] ? copy_msghdr_from_user+0x10a/0x160 [ 1133.011823][T19869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1133.011851][T19869] ___sys_sendmsg+0x134/0x1d0 [ 1133.011873][T19869] ? __pfx____sys_sendmsg+0x10/0x10 [ 1133.011892][T19869] ? __lock_acquire+0x622/0x1c90 [ 1133.011939][T19869] __sys_sendmsg+0x16d/0x220 [ 1133.011960][T19869] ? __pfx___sys_sendmsg+0x10/0x10 [ 1133.011998][T19869] do_syscall_64+0xcd/0xfa0 [ 1133.012017][T19869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.012034][T19869] RIP: 0033:0x7fdaf7d8f749 [ 1133.012052][T19869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1133.012068][T19869] RSP: 002b:00007fdaf8cc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1133.012088][T19869] RAX: ffffffffffffffda RBX: 00007fdaf7fe5fa0 RCX: 00007fdaf7d8f749 [ 1133.012099][T19869] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1133.012109][T19869] RBP: 00007fdaf8cc0090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.012118][T19869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.012127][T19869] R13: 00007fdaf7fe6038 R14: 00007fdaf7fe5fa0 R15: 00007ffc446532f8 [ 1133.012152][T19869] [ 1133.522686][ T5859] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1133.551632][T19877] FAULT_INJECTION: forcing a failure. [ 1133.551632][T19877] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.565173][T19877] CPU: 0 UID: 0 PID: 19877 Comm: syz.7.4169 Not tainted syzkaller #0 PREEMPT(full) [ 1133.565203][T19877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1133.565214][T19877] Call Trace: [ 1133.565220][T19877] [ 1133.565227][T19877] dump_stack_lvl+0x16c/0x1f0 [ 1133.565253][T19877] should_fail_ex+0x512/0x640 [ 1133.565276][T19877] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1133.565305][T19877] should_failslab+0xc2/0x120 [ 1133.565325][T19877] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1133.565349][T19877] ? __alloc_skb+0x2b2/0x380 [ 1133.565376][T19877] ? __alloc_skb+0x2b2/0x380 [ 1133.565393][T19877] __alloc_skb+0x2b2/0x380 [ 1133.565414][T19877] ? __pfx___alloc_skb+0x10/0x10 [ 1133.565442][T19877] alloc_skb_with_frags+0xe0/0x860 [ 1133.565479][T19877] sock_alloc_send_pskb+0x7f9/0x980 [ 1133.565510][T19877] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1133.565532][T19877] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1133.565559][T19877] ? bt_sock_wait_ready+0x3d9/0x5f0 [ 1133.565589][T19877] ? reacquire_held_locks+0xcd/0x1f0 [ 1133.565611][T19877] bt_skb_sendmsg.constprop.0+0xbd/0x600 [ 1133.565644][T19877] ? __pfx_bt_skb_sendmsg.constprop.0+0x10/0x10 [ 1133.565673][T19877] ? rfcomm_sock_sendmsg+0x1bd/0x4d0 [ 1133.565698][T19877] ? rcu_is_watching+0x12/0xc0 [ 1133.565722][T19877] ? __local_bh_enable_ip+0xa4/0x120 [ 1133.565750][T19877] rfcomm_sock_sendmsg+0x25d/0x4d0 [ 1133.565780][T19877] ____sys_sendmsg+0xa98/0xc70 [ 1133.565799][T19877] ? copy_msghdr_from_user+0x10a/0x160 [ 1133.565822][T19877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1133.565851][T19877] ___sys_sendmsg+0x134/0x1d0 [ 1133.565875][T19877] ? __pfx____sys_sendmsg+0x10/0x10 [ 1133.565895][T19877] ? __lock_acquire+0x622/0x1c90 [ 1133.565942][T19877] __sys_sendmsg+0x16d/0x220 [ 1133.565965][T19877] ? __pfx___sys_sendmsg+0x10/0x10 [ 1133.566003][T19877] do_syscall_64+0xcd/0xfa0 [ 1133.566023][T19877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.566040][T19877] RIP: 0033:0x7fdaf7d8f749 [ 1133.566057][T19877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1133.566073][T19877] RSP: 002b:00007fdaf8cc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1133.566092][T19877] RAX: ffffffffffffffda RBX: 00007fdaf7fe5fa0 RCX: 00007fdaf7d8f749 [ 1133.566103][T19877] RDX: 0000000024044014 RSI: 0000200000000180 RDI: 0000000000000004 [ 1133.566114][T19877] RBP: 00007fdaf8cc0090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.566124][T19877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.566133][T19877] R13: 00007fdaf7fe6038 R14: 00007fdaf7fe5fa0 R15: 00007ffc446532f8 [ 1133.566157][T19877] [ 1133.950216][ T5859] usb 2-1: Using ep0 maxpacket: 32 [ 1133.974622][T19887] FAULT_INJECTION: forcing a failure. [ 1133.974622][T19887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.985810][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1133.988363][T19887] CPU: 1 UID: 0 PID: 19887 Comm: syz.5.4176 Not tainted syzkaller #0 PREEMPT(full) [ 1133.988387][T19887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1133.988398][T19887] Call Trace: [ 1133.988404][T19887] [ 1133.988411][T19887] dump_stack_lvl+0x16c/0x1f0 [ 1133.988443][T19887] should_fail_ex+0x512/0x640 [ 1133.988467][T19887] _copy_to_iter+0x463/0x1710 [ 1133.988495][T19887] ? __pfx__copy_to_iter+0x10/0x10 [ 1133.988513][T19887] ? _raw_spin_unlock+0x28/0x50 [ 1133.988535][T19887] ? unix_seq_stop+0xba/0xf0 [ 1133.988553][T19887] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 1133.988587][T19887] seq_read_iter+0x71e/0x12d0 [ 1133.988619][T19887] seq_read+0x3a3/0x570 [ 1133.988642][T19887] ? __pfx_seq_read+0x10/0x10 [ 1133.988668][T19887] ? get_pid_task+0xfc/0x250 [ 1133.988688][T19887] ? avc_policy_seqno+0x9/0x20 [ 1133.988716][T19887] ? __pfx_seq_read+0x10/0x10 [ 1133.988738][T19887] proc_reg_read+0x240/0x330 [ 1133.988759][T19887] ? __pfx_proc_reg_read+0x10/0x10 [ 1133.988781][T19887] vfs_read+0x1e4/0xcf0 [ 1133.988801][T19887] ? __pfx_vfs_read+0x10/0x10 [ 1133.988813][T19887] ? find_held_lock+0x2b/0x80 [ 1133.988833][T19887] ? __fget_files+0x204/0x3c0 [ 1133.988852][T19887] ? __fget_files+0x20e/0x3c0 [ 1133.988865][T19887] ? __fget_files+0x140/0x3c0 [ 1133.988887][T19887] __x64_sys_pread64+0x1eb/0x250 [ 1133.988903][T19887] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1133.988925][T19887] do_syscall_64+0xcd/0xfa0 [ 1133.988942][T19887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.988959][T19887] RIP: 0033:0x7f313db8f749 [ 1133.988973][T19887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1133.988989][T19887] RSP: 002b:00007f313e96f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1133.989006][T19887] RAX: ffffffffffffffda RBX: 00007f313dde5fa0 RCX: 00007f313db8f749 [ 1133.989016][T19887] RDX: 000000000000009a RSI: 0000200000000480 RDI: 0000000000000007 [ 1133.989025][T19887] RBP: 00007f313e96f090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.989034][T19887] R10: 00000000000000e4 R11: 0000000000000246 R12: 0000000000000001 [ 1133.989043][T19887] R13: 00007f313dde6038 R14: 00007f313dde5fa0 R15: 00007ffd23f4ad58 [ 1133.989065][T19887] [ 1134.049243][T19890] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4177'. [ 1134.049973][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1134.185484][ T979] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1134.257349][ T5859] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1134.268798][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.288905][ T5859] usb 2-1: Product: syz [ 1134.293399][ T5859] usb 2-1: Manufacturer: syz [ 1134.298024][ T5859] usb 2-1: SerialNumber: syz [ 1134.314197][ T5859] usb 2-1: config 0 descriptor?? [ 1134.331421][ T5859] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input117 [ 1134.401265][T19901] FAULT_INJECTION: forcing a failure. [ 1134.401265][T19901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1134.416143][T19901] CPU: 0 UID: 0 PID: 19901 Comm: syz.5.4180 Not tainted syzkaller #0 PREEMPT(full) [ 1134.416173][T19901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1134.416181][T19901] Call Trace: [ 1134.416186][T19901] [ 1134.416191][T19901] dump_stack_lvl+0x16c/0x1f0 [ 1134.416215][T19901] should_fail_ex+0x512/0x640 [ 1134.416235][T19901] _copy_to_iter+0x463/0x1710 [ 1134.416256][T19901] ? __pfx__copy_to_iter+0x10/0x10 [ 1134.416271][T19901] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 1134.416301][T19901] seq_read_iter+0x71e/0x12d0 [ 1134.416319][T19901] ? _kstrtoull+0x145/0x200 [ 1134.416341][T19901] seq_read+0x3a3/0x570 [ 1134.416357][T19901] ? __pfx_seq_read+0x10/0x10 [ 1134.416376][T19901] ? import_ubuf+0x1b6/0x220 [ 1134.416390][T19901] ? avc_policy_seqno+0x9/0x20 [ 1134.416409][T19901] ? __pfx_seq_read+0x10/0x10 [ 1134.416425][T19901] proc_reg_read+0x240/0x330 [ 1134.416449][T19901] ? __pfx_proc_reg_read+0x10/0x10 [ 1134.416464][T19901] vfs_readv+0x5c1/0x8b0 [ 1134.416485][T19901] ? __pfx_vfs_readv+0x10/0x10 [ 1134.416502][T19901] ? find_held_lock+0x2b/0x80 [ 1134.416526][T19901] ? __fget_files+0x20e/0x3c0 [ 1134.416543][T19901] ? do_preadv+0x1a6/0x270 [ 1134.416558][T19901] do_preadv+0x1a6/0x270 [ 1134.416574][T19901] ? __pfx_do_preadv+0x10/0x10 [ 1134.416593][T19901] do_syscall_64+0xcd/0xfa0 [ 1134.416607][T19901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.416619][T19901] RIP: 0033:0x7f313db8f749 [ 1134.416633][T19901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1134.416644][T19901] RSP: 002b:00007f313e94e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1134.416660][T19901] RAX: ffffffffffffffda RBX: 00007f313dde6090 RCX: 00007f313db8f749 [ 1134.416668][T19901] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1134.416674][T19901] RBP: 00007f313e94e090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.416680][T19901] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 1134.416688][T19901] R13: 00007f313dde6128 R14: 00007f313dde6090 R15: 00007ffd23f4ad58 [ 1134.416703][T19901] [ 1134.656030][ T979] usb 8-1: Using ep0 maxpacket: 16 [ 1134.673750][ T979] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1134.687628][ T5932] usb 2-1: USB disconnect, device number 63 [ 1134.697987][ T979] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.709800][ T979] usb 8-1: Product: syz [ 1134.720135][ T979] usb 8-1: Manufacturer: syz [ 1134.724876][ T979] usb 8-1: SerialNumber: syz [ 1134.767107][ T979] usb 8-1: config 0 descriptor?? [ 1134.768232][T19905] FAULT_INJECTION: forcing a failure. [ 1134.768232][T19905] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.785366][T19905] CPU: 0 UID: 0 PID: 19905 Comm: syz.8.4183 Not tainted syzkaller #0 PREEMPT(full) [ 1134.785400][T19905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1134.785412][T19905] Call Trace: [ 1134.785419][T19905] [ 1134.785439][T19905] dump_stack_lvl+0x16c/0x1f0 [ 1134.785469][T19905] should_fail_ex+0x512/0x640 [ 1134.785491][T19905] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1134.785523][T19905] should_failslab+0xc2/0x120 [ 1134.785542][T19905] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1134.785565][T19905] ? __alloc_skb+0x2b2/0x380 [ 1134.785593][T19905] ? __alloc_skb+0x2b2/0x380 [ 1134.785610][T19905] ? __pfx_avc_has_perm+0x10/0x10 [ 1134.785629][T19905] __alloc_skb+0x2b2/0x380 [ 1134.785643][T19905] ? __pfx___alloc_skb+0x10/0x10 [ 1134.785655][T19905] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 1134.785667][T19905] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1134.785685][T19905] netlink_alloc_large_skb+0x69/0x140 [ 1134.785711][T19905] netlink_sendmsg+0x698/0xdd0 [ 1134.785736][T19905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.785767][T19905] ____sys_sendmsg+0xa98/0xc70 [ 1134.785786][T19905] ? copy_msghdr_from_user+0x10a/0x160 [ 1134.785806][T19905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1134.785831][T19905] ___sys_sendmsg+0x134/0x1d0 [ 1134.785853][T19905] ? __pfx____sys_sendmsg+0x10/0x10 [ 1134.785872][T19905] ? __lock_acquire+0x622/0x1c90 [ 1134.785914][T19905] __sys_sendmsg+0x16d/0x220 [ 1134.785936][T19905] ? __pfx___sys_sendmsg+0x10/0x10 [ 1134.785973][T19905] do_syscall_64+0xcd/0xfa0 [ 1134.785993][T19905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.786011][T19905] RIP: 0033:0x7f4e3e58f749 [ 1134.786027][T19905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1134.786043][T19905] RSP: 002b:00007f4e3f42e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.786064][T19905] RAX: ffffffffffffffda RBX: 00007f4e3e7e5fa0 RCX: 00007f4e3e58f749 [ 1134.786074][T19905] RDX: 0000000000004010 RSI: 0000200000001700 RDI: 0000000000000004 [ 1134.786083][T19905] RBP: 00007f4e3f42e090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.786091][T19905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.786099][T19905] R13: 00007f4e3e7e6038 R14: 00007f4e3e7e5fa0 R15: 00007fff40afc968 [ 1134.786122][T19905] [ 1134.789751][ T979] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1135.038086][T19883] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4173'. [ 1135.060997][T19883] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1135.068973][T19883] team0: Device ipvlan3 is already an upper device of the team interface [ 1135.108673][ T979] usb 8-1: Detected FT-X [ 1135.191824][ T979] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1135.201583][ T979] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1135.210946][ T979] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 1135.237486][ T979] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1135.269489][ T979] usb 8-1: USB disconnect, device number 57 [ 1135.282571][ T979] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1135.295312][ T979] ftdi_sio 8-1:0.0: device disconnected [ 1136.853213][ T30] audit: type=1400 audit(1763620999.223:2382): avc: denied { getopt } for pid=19908 comm="syz.8.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1138.136130][ T30] audit: type=1400 audit(1763621000.430:2383): avc: denied { wake_alarm } for pid=19945 comm="syz.5.4197" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1138.702168][T19955] FAULT_INJECTION: forcing a failure. [ 1138.702168][T19955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1138.719706][T19955] CPU: 0 UID: 0 PID: 19955 Comm: syz.0.4200 Not tainted syzkaller #0 PREEMPT(full) [ 1138.719737][T19955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1138.719748][T19955] Call Trace: [ 1138.719755][T19955] [ 1138.719764][T19955] dump_stack_lvl+0x16c/0x1f0 [ 1138.719794][T19955] should_fail_ex+0x512/0x640 [ 1138.719825][T19955] _copy_from_user+0x2e/0xd0 [ 1138.719852][T19955] sctp_getsockopt+0x2748/0x6a40 [ 1138.719884][T19955] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1138.719911][T19955] ? __pfx_sctp_getsockopt+0x10/0x10 [ 1138.719934][T19955] ? avc_has_perm+0x144/0x1f0 [ 1138.719959][T19955] ? __pfx_avc_has_perm+0x10/0x10 [ 1138.719993][T19955] ? sock_has_perm+0x259/0x2f0 [ 1138.720029][T19955] ? find_held_lock+0x2b/0x80 [ 1138.720054][T19955] ? __might_fault+0xe3/0x190 [ 1138.720081][T19955] ? __might_fault+0xe3/0x190 [ 1138.720104][T19955] ? __might_fault+0x13b/0x190 [ 1138.720139][T19955] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1138.720169][T19955] do_sock_getsockopt+0x34d/0x440 [ 1138.720198][T19955] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1138.720224][T19955] ? __fget_files+0x204/0x3c0 [ 1138.720256][T19955] __sys_getsockopt+0x12f/0x260 [ 1138.720285][T19955] __x64_sys_getsockopt+0xbd/0x160 [ 1138.720306][T19955] ? do_syscall_64+0x91/0xfa0 [ 1138.720323][T19955] ? lockdep_hardirqs_on+0x7c/0x110 [ 1138.720340][T19955] do_syscall_64+0xcd/0xfa0 [ 1138.720358][T19955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.720378][T19955] RIP: 0033:0x7faac5b8f749 [ 1138.720394][T19955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1138.720411][T19955] RSP: 002b:00007faac6a7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1138.720431][T19955] RAX: ffffffffffffffda RBX: 00007faac5de5fa0 RCX: 00007faac5b8f749 [ 1138.720449][T19955] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1138.720459][T19955] RBP: 00007faac6a7e090 R08: 0000200000000180 R09: 0000000000000000 [ 1138.720470][T19955] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.720480][T19955] R13: 00007faac5de6038 R14: 00007faac5de5fa0 R15: 00007ffeed58dd88 [ 1138.720507][T19955] [ 1138.996570][T19957] FAULT_INJECTION: forcing a failure. [ 1138.996570][T19957] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.018929][T19957] CPU: 0 UID: 0 PID: 19957 Comm: syz.7.4199 Not tainted syzkaller #0 PREEMPT(full) [ 1139.018963][T19957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1139.018975][T19957] Call Trace: [ 1139.018982][T19957] [ 1139.018992][T19957] dump_stack_lvl+0x16c/0x1f0 [ 1139.019022][T19957] should_fail_ex+0x512/0x640 [ 1139.019048][T19957] ? fs_reclaim_acquire+0xae/0x150 [ 1139.019074][T19957] should_failslab+0xc2/0x120 [ 1139.019098][T19957] __kmalloc_noprof+0xdd/0x880 [ 1139.019125][T19957] ? tomoyo_encode2+0x100/0x3e0 [ 1139.019157][T19957] ? tomoyo_encode2+0x100/0x3e0 [ 1139.019176][T19957] tomoyo_encode2+0x100/0x3e0 [ 1139.019201][T19957] tomoyo_encode+0x29/0x50 [ 1139.019221][T19957] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1139.019245][T19957] ? tomoyo_profile+0x47/0x60 [ 1139.019275][T19957] tomoyo_path_number_perm+0x245/0x580 [ 1139.019292][T19957] ? tomoyo_path_number_perm+0x237/0x580 [ 1139.019312][T19957] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1139.019331][T19957] ? find_held_lock+0x2b/0x80 [ 1139.019379][T19957] ? find_held_lock+0x2b/0x80 [ 1139.019401][T19957] ? hook_file_ioctl_common+0x145/0x410 [ 1139.019433][T19957] ? __fget_files+0x20e/0x3c0 [ 1139.019465][T19957] security_file_ioctl+0x9b/0x240 [ 1139.019489][T19957] __x64_sys_ioctl+0xb7/0x210 [ 1139.019517][T19957] do_syscall_64+0xcd/0xfa0 [ 1139.019538][T19957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.019558][T19957] RIP: 0033:0x7fdaf7d8f749 [ 1139.019575][T19957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1139.019593][T19957] RSP: 002b:00007fdaf8cc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1139.019612][T19957] RAX: ffffffffffffffda RBX: 00007fdaf7fe5fa0 RCX: 00007fdaf7d8f749 [ 1139.019624][T19957] RDX: 0000200000000300 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 1139.019635][T19957] RBP: 00007fdaf8cc0090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.019646][T19957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.019656][T19957] R13: 00007fdaf7fe6038 R14: 00007fdaf7fe5fa0 R15: 00007ffc446532f8 [ 1139.019683][T19957] [ 1139.019711][T19957] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1139.634074][T19968] netlink: 'syz.5.4203': attribute type 1 has an invalid length. [ 1139.644941][T19968] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4203'. [ 1140.610746][ T10] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1140.786224][ T10] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1140.796267][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.809396][ T10] usb 6-1: Product: syz [ 1140.841754][ T10] usb 6-1: Manufacturer: syz [ 1140.849498][ T10] usb 6-1: SerialNumber: syz [ 1140.912097][ T10] usb 6-1: config 0 descriptor?? [ 1141.188767][ T10] airspy 6-1:0.0: usb_control_msg() failed -71 request 09 [ 1141.195949][ T10] airspy 6-1:0.0: Could not detect board [ 1141.211543][ T10] airspy 6-1:0.0: probe with driver airspy failed with error -71 [ 1141.224515][ T10] usb 6-1: USB disconnect, device number 30 [ 1141.289214][T19995] FAULT_INJECTION: forcing a failure. [ 1141.289214][T19995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1141.302895][T19995] CPU: 1 UID: 0 PID: 19995 Comm: syz.1.4213 Not tainted syzkaller #0 PREEMPT(full) [ 1141.302919][T19995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1141.302928][T19995] Call Trace: [ 1141.302933][T19995] [ 1141.302938][T19995] dump_stack_lvl+0x16c/0x1f0 [ 1141.302961][T19995] should_fail_ex+0x512/0x640 [ 1141.302982][T19995] _copy_to_user+0x32/0xd0 [ 1141.303002][T19995] simple_read_from_buffer+0xcb/0x170 [ 1141.303026][T19995] proc_fail_nth_read+0x197/0x240 [ 1141.303043][T19995] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1141.303057][T19995] ? rw_verify_area+0xcf/0x6c0 [ 1141.303075][T19995] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1141.303088][T19995] vfs_read+0x1e4/0xcf0 [ 1141.303100][T19995] ? __pfx___mutex_lock+0x10/0x10 [ 1141.303114][T19995] ? __pfx_vfs_read+0x10/0x10 [ 1141.303127][T19995] ? __fget_files+0x20e/0x3c0 [ 1141.303143][T19995] ksys_read+0x12a/0x250 [ 1141.303153][T19995] ? __pfx_ksys_read+0x10/0x10 [ 1141.303162][T19995] ? fput+0x9b/0xd0 [ 1141.303178][T19995] do_syscall_64+0xcd/0xfa0 [ 1141.303191][T19995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.303204][T19995] RIP: 0033:0x7f6ff4f8e15c [ 1141.303215][T19995] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1141.303227][T19995] RSP: 002b:00007f6ff5eb0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1141.303239][T19995] RAX: ffffffffffffffda RBX: 00007f6ff51e5fa0 RCX: 00007f6ff4f8e15c [ 1141.303246][T19995] RDX: 000000000000000f RSI: 00007f6ff5eb00a0 RDI: 0000000000000004 [ 1141.303252][T19995] RBP: 00007f6ff5eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1141.303258][T19995] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1141.303264][T19995] R13: 00007f6ff51e6038 R14: 00007f6ff51e5fa0 R15: 00007ffc6756e538 [ 1141.303280][T19995] [ 1141.626140][ T5932] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1141.729191][T20002] dlm: no local IP address has been set [ 1141.734970][T20002] dlm: cannot start dlm midcomms -107 [ 1141.818741][ T5932] usb 8-1: Using ep0 maxpacket: 8 [ 1141.825701][ T5932] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 1141.839485][ T5932] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1141.853981][ T5932] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 189 [ 1141.909274][ T5932] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1141.989602][T20007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4217'. [ 1142.017748][T20007] nbd: must specify a size in bytes for the device [ 1142.289799][ T5932] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 1142.298055][ T5932] usb 8-1: SerialNumber: syz [ 1142.334666][ T5932] usb 8-1: config 0 descriptor?? [ 1142.341393][T19991] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1142.373018][T19991] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1142.464992][T20012] FAULT_INJECTION: forcing a failure. [ 1142.464992][T20012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1142.482286][T20013] overlayfs: missing 'lowerdir' [ 1142.488569][T20012] CPU: 1 UID: 0 PID: 20012 Comm: syz.1.4219 Not tainted syzkaller #0 PREEMPT(full) [ 1142.488604][T20012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1142.488616][T20012] Call Trace: [ 1142.488623][T20012] [ 1142.488631][T20012] dump_stack_lvl+0x16c/0x1f0 [ 1142.488661][T20012] should_fail_ex+0x512/0x640 [ 1142.488683][T20012] ? __pfx_device_write+0x10/0x10 [ 1142.488704][T20012] ? __pfx_device_write+0x10/0x10 [ 1142.488720][T20012] _copy_from_user+0x2e/0xd0 [ 1142.488744][T20012] memdup_user_nul+0x6c/0x120 [ 1142.488765][T20012] device_write+0xc1/0x1e60 [ 1142.488783][T20012] ? __pfx_device_write+0x10/0x10 [ 1142.488800][T20012] ? bpf_lsm_file_permission+0x9/0x10 [ 1142.488817][T20012] ? security_file_permission+0x71/0x210 [ 1142.488836][T20012] ? rw_verify_area+0xcf/0x6c0 [ 1142.488860][T20012] ? __pfx_device_write+0x10/0x10 [ 1142.488872][T20012] vfs_write+0x2a0/0x11d0 [ 1142.488886][T20012] ? __pfx_vfs_write+0x10/0x10 [ 1142.488895][T20012] ? find_held_lock+0x2b/0x80 [ 1142.488910][T20012] ? __fget_files+0x204/0x3c0 [ 1142.488924][T20012] ? __fget_files+0x20e/0x3c0 [ 1142.488939][T20012] ksys_write+0x12a/0x250 [ 1142.488949][T20012] ? __pfx_ksys_write+0x10/0x10 [ 1142.488963][T20012] do_syscall_64+0xcd/0xfa0 [ 1142.488976][T20012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.488987][T20012] RIP: 0033:0x7f6ff4f8f749 [ 1142.488997][T20012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1142.489008][T20012] RSP: 002b:00007f6ff5eb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1142.489020][T20012] RAX: ffffffffffffffda RBX: 00007f6ff51e5fa0 RCX: 00007f6ff4f8f749 [ 1142.489027][T20012] RDX: 0000000000000068 RSI: 0000200000001380 RDI: 0000000000000003 [ 1142.489034][T20012] RBP: 00007f6ff5eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1142.489040][T20012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1142.489046][T20012] R13: 00007f6ff51e6038 R14: 00007f6ff51e5fa0 R15: 00007ffc6756e538 [ 1142.489061][T20012] [ 1142.713664][ T5932] usb 8-1: USB disconnect, device number 58 [ 1142.831971][ T30] audit: type=1400 audit(1763621005.820:2384): avc: denied { create } for pid=20008 comm="syz.8.4218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1143.165318][ T10] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1143.394130][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1143.529226][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1143.560107][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1143.571483][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.591876][T20025] dlm: no local IP address has been set [ 1143.617815][T20013] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1143.625060][T20013] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1143.632683][T20025] dlm: cannot start dlm midcomms -107 [ 1143.654227][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1143.926418][ T5907] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1143.926519][ T979] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1143.961100][T17488] usb 6-1: USB disconnect, device number 31 [ 1144.107752][ T979] usb 8-1: Using ep0 maxpacket: 8 [ 1144.132659][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 1144.155907][ T979] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1144.166006][ T979] usb 8-1: config index 0 descriptor too short (expected 51, got 18) [ 1144.174514][ T979] usb 8-1: config 4 has an invalid interface number: 30 but max is 0 [ 1144.182817][ T979] usb 8-1: config 4 has no interface number 0 [ 1144.189131][ T5907] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1144.198330][ T979] usb 8-1: config 4 interface 30 has no altsetting 0 [ 1144.207468][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.215708][ T5907] usb 2-1: Product: syz [ 1144.220446][ T5907] usb 2-1: Manufacturer: syz [ 1144.225345][ T5907] usb 2-1: SerialNumber: syz [ 1144.232025][ T979] usb 8-1: string descriptor 0 read error: -22 [ 1144.238647][ T979] usb 8-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 1144.248559][ T5907] usb 2-1: config 0 descriptor?? [ 1144.253876][ T979] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.263691][ T5907] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1144.272056][ T5907] usb 2-1: Detected FT-X [ 1144.281436][ T979] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1144.288694][ T979] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1144.294808][ T979] dvb-usb: bulk message failed: -22 (2/0) [ 1144.302758][ T979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1144.312801][ T979] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 1144.320904][ T979] usb 8-1: media controller created [ 1144.326197][ T979] dvb-usb: bulk message failed: -22 (6/0) [ 1144.332725][ T979] dw2102: i2c transfer failed. [ 1144.337655][ T979] dvb-usb: bulk message failed: -22 (6/0) [ 1144.343457][ T979] dw2102: i2c transfer failed. [ 1144.348256][ T979] dvb-usb: bulk message failed: -22 (6/0) [ 1144.354162][ T979] dw2102: i2c transfer failed. [ 1144.358946][ T979] dvb-usb: bulk message failed: -22 (6/0) [ 1144.364795][ T979] dw2102: i2c transfer failed. [ 1144.369597][ T979] dvb-usb: bulk message failed: -22 (6/0) [ 1144.375512][ T979] dw2102: i2c transfer failed. [ 1144.380300][ T979] dvb-usb: bulk message failed: -22 (6/0) [ 1144.386525][ T979] dw2102: i2c transfer failed. [ 1144.391347][ T979] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1144.408209][ T979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1144.424297][ T979] dvb-usb: bulk message failed: -22 (3/0) [ 1144.430212][ T979] dw2102: command 0x0e transfer failed. [ 1144.435857][ T979] dvb-usb: bulk message failed: -22 (3/0) [ 1144.442309][ T979] dw2102: command 0x0e transfer failed. [ 1144.487705][T20028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4224'. [ 1144.507140][T20028] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1144.612789][T20028] team0: Device ipvlan3 is already an upper device of the team interface [ 1144.698968][T18120] libceph: connect (1)[c::]:6789 error -101 [ 1144.705399][T18120] libceph: mon0 (1)[c::]:6789 connect error [ 1144.724203][ T5907] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1144.735978][ T5907] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1144.750706][ T5907] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1144.763181][ T5907] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1144.770063][ T10] libceph: connect (1)[b::]:6789 error -101 [ 1144.777737][ T979] dvb-usb: bulk message failed: -22 (3/0) [ 1144.777961][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 1144.790605][ T979] dw2102: command 0x0e transfer failed. [ 1144.804244][ T5907] usb 2-1: USB disconnect, device number 64 [ 1144.816976][ T979] dvb-usb: bulk message failed: -22 (3/0) [ 1144.827183][ T979] dw2102: command 0x0e transfer failed. [ 1144.833632][ T5907] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1144.843497][ T979] dvb-usb: bulk message failed: -22 (1/0) [ 1144.850099][ T5907] ftdi_sio 2-1:0.0: device disconnected [ 1144.856001][ T979] dw2102: command 0x51 transfer failed. [ 1144.861667][ T979] dvb-usb: bulk message failed: -22 (5/0) [ 1144.869931][ T979] dw2102: i2c probe for address 0x68 failed. [ 1144.879808][ T979] dvb-usb: bulk message failed: -22 (5/0) [ 1144.885675][ T979] dw2102: i2c probe for address 0x69 failed. [ 1144.891942][ T979] dvb-usb: bulk message failed: -22 (5/0) [ 1144.897936][ T979] dw2102: i2c probe for address 0x6a failed. [ 1144.904092][ T979] dw2102: probing for demodulator failed. Is the external power switched on? [ 1144.916875][ T979] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 1145.019654][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1145.025798][ T979] rc_core: IR keymap rc-tt-1500 not found [ 1145.031540][ T979] Registered IR keymap rc-empty [ 1145.036723][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1145.080610][ T979] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 1145.081764][ T10] libceph: connect (1)[b::]:6789 error -101 [ 1145.097875][ T10] libceph: mon0 (1)[b::]:6789 connect error [ 1145.285000][ T979] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input118 [ 1145.300576][T20052] FAULT_INJECTION: forcing a failure. [ 1145.300576][T20052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.319190][T20052] CPU: 0 UID: 0 PID: 20052 Comm: syz.5.4229 Not tainted syzkaller #0 PREEMPT(full) [ 1145.319221][T20052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1145.319233][T20052] Call Trace: [ 1145.319241][T20052] [ 1145.319252][T20052] dump_stack_lvl+0x16c/0x1f0 [ 1145.319282][T20052] should_fail_ex+0x512/0x640 [ 1145.319310][T20052] _copy_to_user+0x32/0xd0 [ 1145.319335][T20052] ax25_getsockopt+0x453/0x760 [ 1145.319366][T20052] ? __pfx_ax25_getsockopt+0x10/0x10 [ 1145.319394][T20052] ? __pfx_ax25_getsockopt+0x10/0x10 [ 1145.319413][T20052] do_sock_getsockopt+0x34d/0x440 [ 1145.319442][T20052] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1145.319464][T20052] ? __fget_files+0x204/0x3c0 [ 1145.319498][T20052] __sys_getsockopt+0x12f/0x260 [ 1145.319527][T20052] __x64_sys_getsockopt+0xbd/0x160 [ 1145.319553][T20052] ? do_syscall_64+0x91/0xfa0 [ 1145.319571][T20052] ? lockdep_hardirqs_on+0x7c/0x110 [ 1145.319588][T20052] do_syscall_64+0xcd/0xfa0 [ 1145.319607][T20052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.319629][T20052] RIP: 0033:0x7f313db8f749 [ 1145.319646][T20052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1145.319664][T20052] RSP: 002b:00007f313e96f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1145.319683][T20052] RAX: ffffffffffffffda RBX: 00007f313dde5fa0 RCX: 00007f313db8f749 [ 1145.319695][T20052] RDX: 0000000000000007 RSI: 0000000000000101 RDI: 0000000000000004 [ 1145.319706][T20052] RBP: 00007f313e96f090 R08: 0000200000000680 R09: 0000000000000000 [ 1145.319716][T20052] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.319727][T20052] R13: 00007f313dde6038 R14: 00007f313dde5fa0 R15: 00007ffd23f4ad58 [ 1145.319753][T20052] [ 1145.320821][ T979] dvb-usb: schedule remote query interval to 250 msecs. [ 1145.523541][ T979] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1145.530666][ T979] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 1145.595403][ T979] libceph: connect (1)[c::]:6789 error -101 [ 1145.598404][T20042] ceph: No mds server is up or the cluster is laggy [ 1145.602002][T20038] ceph: No mds server is up or the cluster is laggy [ 1145.641916][T20055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4230'. [ 1145.652456][T20055] nbd: must specify a size in bytes for the device [ 1145.799450][T17488] libceph: connect (1)[b::]:6789 error -101 [ 1145.847052][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 1145.861623][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1145.868993][ T24] dw2102: i2c transfer failed. [ 1145.869290][T17488] libceph: mon0 (1)[b::]:6789 connect error [ 1146.159169][ T979] dvb-usb: bulk message failed: -22 (1/0) [ 1146.169543][ T979] dw2102: i2c transfer failed. [ 1146.469321][ T979] dvb-usb: bulk message failed: -22 (1/0) [ 1146.475410][ T979] dw2102: i2c transfer failed. [ 1147.135753][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1147.141533][ T24] dw2102: i2c transfer failed. [ 1147.165243][T20070] kvm: user requested TSC rate below hardware speed [ 1147.238886][ T10] usb 8-1: USB disconnect, device number 59 [ 1147.817034][ T10] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 1147.872764][T20079] FAULT_INJECTION: forcing a failure. [ 1147.872764][T20079] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.890561][T20079] CPU: 0 UID: 0 PID: 20079 Comm: syz.5.4238 Not tainted syzkaller #0 PREEMPT(full) [ 1147.890593][T20079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1147.890604][T20079] Call Trace: [ 1147.890611][T20079] [ 1147.890620][T20079] dump_stack_lvl+0x16c/0x1f0 [ 1147.890654][T20079] should_fail_ex+0x512/0x640 [ 1147.890677][T20079] ? __kmalloc_noprof+0xca/0x880 [ 1147.890702][T20079] should_failslab+0xc2/0x120 [ 1147.890723][T20079] __kmalloc_noprof+0xdd/0x880 [ 1147.890744][T20079] ? bpf_test_init.isra.0+0x88/0x130 [ 1147.890772][T20079] ? bpf_test_init.isra.0+0x88/0x130 [ 1147.890789][T20079] bpf_test_init.isra.0+0x88/0x130 [ 1147.890810][T20079] bpf_prog_test_run_skb+0x261/0x2290 [ 1147.890832][T20079] ? __fget_files+0x204/0x3c0 [ 1147.890854][T20079] ? __fget_files+0x20e/0x3c0 [ 1147.890869][T20079] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1147.890893][T20079] ? fput+0x9b/0xd0 [ 1147.890918][T20079] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1147.890941][T20079] __sys_bpf+0x1035/0x4980 [ 1147.890975][T20079] ? __pfx___sys_bpf+0x10/0x10 [ 1147.890998][T20079] ? find_held_lock+0x2b/0x80 [ 1147.891027][T20079] ? find_held_lock+0x2b/0x80 [ 1147.891054][T20079] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1147.891085][T20079] ? fput+0x9b/0xd0 [ 1147.891104][T20079] ? ksys_write+0x1ac/0x250 [ 1147.891119][T20079] ? __pfx_ksys_write+0x10/0x10 [ 1147.891139][T20079] __x64_sys_bpf+0x78/0xc0 [ 1147.891154][T20079] ? lockdep_hardirqs_on+0x7c/0x110 [ 1147.891171][T20079] do_syscall_64+0xcd/0xfa0 [ 1147.891188][T20079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.891206][T20079] RIP: 0033:0x7f313db8f749 [ 1147.891222][T20079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1147.891239][T20079] RSP: 002b:00007f313e96f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1147.891263][T20079] RAX: ffffffffffffffda RBX: 00007f313dde5fa0 RCX: 00007f313db8f749 [ 1147.891274][T20079] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 000000000000000a [ 1147.891283][T20079] RBP: 00007f313e96f090 R08: 0000000000000000 R09: 0000000000000000 [ 1147.891292][T20079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1147.891301][T20079] R13: 00007f313dde6038 R14: 00007f313dde5fa0 R15: 00007ffd23f4ad58 [ 1147.891322][T20079] [ 1148.837254][T20088] FAULT_INJECTION: forcing a failure. [ 1148.837254][T20088] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.851778][T20088] CPU: 1 UID: 0 PID: 20088 Comm: syz.5.4241 Not tainted syzkaller #0 PREEMPT(full) [ 1148.851807][T20088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1148.851815][T20088] Call Trace: [ 1148.851821][T20088] [ 1148.851826][T20088] dump_stack_lvl+0x16c/0x1f0 [ 1148.851848][T20088] should_fail_ex+0x512/0x640 [ 1148.851865][T20088] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1148.851887][T20088] should_failslab+0xc2/0x120 [ 1148.851901][T20088] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1148.851918][T20088] ? __alloc_skb+0x2b2/0x380 [ 1148.851937][T20088] ? __alloc_skb+0x2b2/0x380 [ 1148.851948][T20088] ? __pfx_netlink_insert+0x10/0x10 [ 1148.851964][T20088] __alloc_skb+0x2b2/0x380 [ 1148.851978][T20088] ? __pfx___alloc_skb+0x10/0x10 [ 1148.851991][T20088] ? netlink_autobind.isra.0+0x158/0x370 [ 1148.852010][T20088] netlink_alloc_large_skb+0x69/0x140 [ 1148.852028][T20088] netlink_sendmsg+0x698/0xdd0 [ 1148.852045][T20088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1148.852066][T20088] ____sys_sendmsg+0xa98/0xc70 [ 1148.852080][T20088] ? copy_msghdr_from_user+0x10a/0x160 [ 1148.852095][T20088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1148.852112][T20088] ___sys_sendmsg+0x134/0x1d0 [ 1148.852127][T20088] ? __pfx____sys_sendmsg+0x10/0x10 [ 1148.852140][T20088] ? __lock_acquire+0x622/0x1c90 [ 1148.852169][T20088] __sys_sendmsg+0x16d/0x220 [ 1148.852183][T20088] ? __pfx___sys_sendmsg+0x10/0x10 [ 1148.852206][T20088] do_syscall_64+0xcd/0xfa0 [ 1148.852218][T20088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.852230][T20088] RIP: 0033:0x7f313db8f749 [ 1148.852241][T20088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1148.852251][T20088] RSP: 002b:00007f313e96f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1148.852263][T20088] RAX: ffffffffffffffda RBX: 00007f313dde5fa0 RCX: 00007f313db8f749 [ 1148.852270][T20088] RDX: 0000000000004084 RSI: 0000200000000100 RDI: 0000000000000003 [ 1148.852276][T20088] RBP: 00007f313e96f090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.852282][T20088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.852289][T20088] R13: 00007f313dde6038 R14: 00007f313dde5fa0 R15: 00007ffd23f4ad58 [ 1148.852303][T20088] [ 1149.081543][T20090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20090 comm=syz.8.4242 [ 1149.352344][T20094] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4243'. [ 1149.362691][T20094] nbd: must specify a size in bytes for the device [ 1149.619753][ T30] audit: type=1400 audit(1763621012.172:2385): avc: denied { validate_trans } for pid=20095 comm="syz.1.4244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1149.784127][ T10] IPVS: starting estimator thread 0... [ 1150.343540][T20111] IPVS: using max 58 ests per chain, 139200 per kthread [ 1150.870585][T20125] block nbd8: Cannot use ioctl interface on a netlink controlled device. [ 1150.925882][T20126] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4251'. [ 1151.026420][T20128] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1151.405787][T20135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4255'. [ 1151.415462][T20135] nbd: must specify a size in bytes for the device [ 1151.934199][T20146] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4261'. [ 1151.996045][T17488] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1152.156606][ T5859] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1152.177935][T17488] usb 6-1: Using ep0 maxpacket: 16 [ 1152.187327][T17488] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.200240][T17488] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1152.214925][T17488] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1152.233434][T17488] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1152.250478][T17488] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1152.260503][T17488] usb 6-1: Manufacturer: syz [ 1152.271131][T17488] usb 6-1: config 0 descriptor?? [ 1152.329657][ T5859] usb 2-1: Using ep0 maxpacket: 8 [ 1152.337117][ T5859] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 1152.350231][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1152.361908][ T5859] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 189 [ 1152.382674][ T5859] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1152.392659][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 1152.401042][ T5859] usb 2-1: SerialNumber: syz [ 1152.410073][ T5859] usb 2-1: config 0 descriptor?? [ 1152.416603][T20142] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1152.425016][T20142] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1152.788822][ T5859] usb 2-1: USB disconnect, device number 65 [ 1155.880270][T20168] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1156.225604][T20188] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1156.258228][T17488] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1156.675173][ T5859] usb 6-1: USB disconnect, device number 32 [ 1156.694000][ T30] audit: type=1400 audit(1763621018.794:2386): avc: denied { mounton } for pid=20191 comm="syz.1.4273" path="/243/bus" dev="tmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1156.717781][T20192] bridge0: entered promiscuous mode [ 1156.734522][T20194] XFS (nullb0): Invalid superblock magic number [ 1156.740979][T17488] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1156.755335][T17488] usb 9-1: not running at top speed; connect to a high speed hub [ 1156.786887][T20201] FAULT_INJECTION: forcing a failure. [ 1156.786887][T20201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.824045][T20192] bridge0: port 3(macvlan2) entered blocking state [ 1156.831382][T17488] usb 9-1: config 4 has an invalid interface number: 147 but max is 0 [ 1156.840166][T20201] CPU: 0 UID: 0 PID: 20201 Comm: syz.5.4274 Not tainted syzkaller #0 PREEMPT(full) [ 1156.840206][T20201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1156.840218][T20201] Call Trace: [ 1156.840225][T20201] [ 1156.840239][T20201] dump_stack_lvl+0x16c/0x1f0 [ 1156.840267][T20201] should_fail_ex+0x512/0x640 [ 1156.840295][T20201] _copy_from_user+0x2e/0xd0 [ 1156.840319][T20201] move_addr_to_kernel+0x65/0x170 [ 1156.840343][T20201] __copy_msghdr+0x386/0x470 [ 1156.840366][T20201] copy_msghdr_from_user+0xc1/0x160 [ 1156.840386][T20201] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1156.840412][T20201] ? __pfx__kstrtoull+0x10/0x10 [ 1156.840441][T20201] ___sys_sendmsg+0xfe/0x1d0 [ 1156.840463][T20201] ? __pfx____sys_sendmsg+0x10/0x10 [ 1156.840495][T20201] ? find_held_lock+0x2b/0x80 [ 1156.840536][T20201] __sys_sendmmsg+0x200/0x420 [ 1156.840561][T20201] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1156.840591][T20201] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1156.840620][T20201] ? fput+0x9b/0xd0 [ 1156.840643][T20201] ? ksys_write+0x1ac/0x250 [ 1156.840658][T20201] ? __pfx_ksys_write+0x10/0x10 [ 1156.840677][T20201] __x64_sys_sendmmsg+0x9c/0x100 [ 1156.840697][T20201] ? lockdep_hardirqs_on+0x7c/0x110 [ 1156.840713][T20201] do_syscall_64+0xcd/0xfa0 [ 1156.840731][T20201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.840749][T20201] RIP: 0033:0x7f313db8f749 [ 1156.840764][T20201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1156.840779][T20201] RSP: 002b:00007f313e96f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1156.840798][T20201] RAX: ffffffffffffffda RBX: 00007f313dde5fa0 RCX: 00007f313db8f749 [ 1156.840808][T20201] RDX: 3284b164842c97f7 RSI: 0000200000000c40 RDI: 0000000000000004 [ 1156.840818][T20201] RBP: 00007f313e96f090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.840829][T20201] R10: 0000000000008014 R11: 0000000000000246 R12: 0000000000000001 [ 1156.840840][T20201] R13: 00007f313dde6038 R14: 00007f313dde5fa0 R15: 00007ffd23f4ad58 [ 1156.840868][T20201] [ 1156.841156][T17488] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.892545][T20192] bridge0: port 3(macvlan2) entered disabled state [ 1156.904461][T17488] usb 9-1: config 4 has no interface number 0 [ 1156.922939][T20192] macvlan2: entered allmulticast mode [ 1157.034052][T17488] usb 9-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1157.084806][T20192] bridge0: entered allmulticast mode [ 1157.132853][T17488] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 1157.144648][T17488] usb 9-1: Product: syz [ 1157.147321][T20192] macvlan2: left allmulticast mode [ 1157.149057][T17488] usb 9-1: Manufacturer: syz [ 1157.149078][T17488] usb 9-1: SerialNumber: syz [ 1157.191913][T20192] bridge0: left allmulticast mode [ 1157.294230][T20192] bridge0: left promiscuous mode [ 1157.839281][T20185] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4270'. [ 1157.849459][T20185] Unknown options in mask b7f2 [ 1157.889306][T20211] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4276'. [ 1157.929618][T20211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4276'. [ 1159.041867][T20216] hpfs: hpfs_map_sector(): read error [ 1159.135831][T20216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.160307][T20216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.580239][T20232] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1160.701919][T20240] FAULT_INJECTION: forcing a failure. [ 1160.701919][T20240] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.752537][T20240] CPU: 1 UID: 0 PID: 20240 Comm: syz.1.4284 Not tainted syzkaller #0 PREEMPT(full) [ 1160.752566][T20240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1160.752577][T20240] Call Trace: [ 1160.752583][T20240] [ 1160.752592][T20240] dump_stack_lvl+0x16c/0x1f0 [ 1160.752621][T20240] should_fail_ex+0x512/0x640 [ 1160.752646][T20240] ? fs_reclaim_acquire+0xae/0x150 [ 1160.752670][T20240] should_failslab+0xc2/0x120 [ 1160.752693][T20240] __kmalloc_noprof+0xdd/0x880 [ 1160.752717][T20240] ? tomoyo_encode2+0x100/0x3e0 [ 1160.752742][T20240] ? tomoyo_encode2+0x100/0x3e0 [ 1160.752761][T20240] tomoyo_encode2+0x100/0x3e0 [ 1160.752784][T20240] tomoyo_encode+0x29/0x50 [ 1160.752803][T20240] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1160.752824][T20240] ? tomoyo_profile+0x47/0x60 [ 1160.752851][T20240] tomoyo_path_number_perm+0x245/0x580 [ 1160.752867][T20240] ? tomoyo_path_number_perm+0x237/0x580 [ 1160.752885][T20240] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1160.752904][T20240] ? find_held_lock+0x2b/0x80 [ 1160.752951][T20240] ? find_held_lock+0x2b/0x80 [ 1160.752970][T20240] ? hook_file_ioctl_common+0x145/0x410 [ 1160.753001][T20240] ? __fget_files+0x20e/0x3c0 [ 1160.753023][T20240] security_file_ioctl+0x9b/0x240 [ 1160.753047][T20240] __x64_sys_ioctl+0xb7/0x210 [ 1160.753076][T20240] do_syscall_64+0xcd/0xfa0 [ 1160.753098][T20240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.753124][T20240] RIP: 0033:0x7f6ff4f8f749 [ 1160.753143][T20240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1160.753161][T20240] RSP: 002b:00007f6ff5eb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1160.753182][T20240] RAX: ffffffffffffffda RBX: 00007f6ff51e5fa0 RCX: 00007f6ff4f8f749 [ 1160.753193][T20240] RDX: 0000200000000340 RSI: 00000000400448e2 RDI: 0000000000000004 [ 1160.753204][T20240] RBP: 00007f6ff5eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.753214][T20240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.753223][T20240] R13: 00007f6ff51e6038 R14: 00007f6ff51e5fa0 R15: 00007ffc6756e538 [ 1160.753245][T20240] [ 1160.753680][T20240] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1161.936331][T17488] uvcvideo 9-1:4.147: probe with driver uvcvideo failed with error -22 [ 1161.969147][T17488] usb 9-1: USB disconnect, device number 13 [ 1162.005960][T20248] bond0: option mode: unable to set because the bond device has slaves [ 1162.729655][ T5891] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1163.233515][T20258] FAULT_INJECTION: forcing a failure. [ 1163.233515][T20258] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.340917][T20258] CPU: 1 UID: 0 PID: 20258 Comm: syz.7.4289 Not tainted syzkaller #0 PREEMPT(full) [ 1163.340951][T20258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1163.340963][T20258] Call Trace: [ 1163.340970][T20258] [ 1163.340980][T20258] dump_stack_lvl+0x16c/0x1f0 [ 1163.341010][T20258] should_fail_ex+0x512/0x640 [ 1163.341034][T20258] ? fs_reclaim_acquire+0xae/0x150 [ 1163.341061][T20258] should_failslab+0xc2/0x120 [ 1163.341084][T20258] __kmalloc_noprof+0xdd/0x880 [ 1163.341108][T20258] ? tomoyo_encode2+0x100/0x3e0 [ 1163.341133][T20258] ? tomoyo_encode2+0x100/0x3e0 [ 1163.341152][T20258] tomoyo_encode2+0x100/0x3e0 [ 1163.341178][T20258] tomoyo_encode+0x29/0x50 [ 1163.341198][T20258] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1163.341227][T20258] tomoyo_path_number_perm+0x245/0x580 [ 1163.341245][T20258] ? tomoyo_path_number_perm+0x237/0x580 [ 1163.341265][T20258] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1163.341282][T20258] ? __schedule+0x11a3/0x5de0 [ 1163.341338][T20258] ? find_held_lock+0x2b/0x80 [ 1163.341371][T20258] ? hook_file_ioctl_common+0x145/0x410 [ 1163.341403][T20258] ? __fget_files+0x20e/0x3c0 [ 1163.341429][T20258] security_file_ioctl+0x9b/0x240 [ 1163.341455][T20258] __x64_sys_ioctl+0xb7/0x210 [ 1163.341487][T20258] do_syscall_64+0xcd/0xfa0 [ 1163.341508][T20258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.341529][T20258] RIP: 0033:0x7fdaf7d8f749 [ 1163.341546][T20258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1163.341565][T20258] RSP: 002b:00007fdaf8cc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1163.341585][T20258] RAX: ffffffffffffffda RBX: 00007fdaf7fe5fa0 RCX: 00007fdaf7d8f749 [ 1163.341597][T20258] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 1163.341608][T20258] RBP: 00007fdaf8cc0090 R08: 0000000000000000 R09: 0000000000000000 [ 1163.341619][T20258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1163.341629][T20258] R13: 00007fdaf7fe6038 R14: 00007fdaf7fe5fa0 R15: 00007ffc446532f8 [ 1163.341656][T20258] [ 1163.554905][ C1] vkms_vblank_simulate: vblank timer overrun [ 1163.825523][T20258] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1164.068960][ T5891] usb 2-1: config 1 has an invalid interface number: 140 but max is 0 [ 1164.086250][ T5891] usb 2-1: config 1 has no interface number 0 [ 1164.093171][ T5891] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 1164.102551][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.117168][T20264] FAULT_INJECTION: forcing a failure. [ 1164.117168][T20264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1164.120548][T20267] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1164.132307][T20264] CPU: 0 UID: 0 PID: 20264 Comm: syz.8.4292 Not tainted syzkaller #0 PREEMPT(full) [ 1164.132333][T20264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1164.132344][T20264] Call Trace: [ 1164.132351][T20264] [ 1164.132358][T20264] dump_stack_lvl+0x16c/0x1f0 [ 1164.132385][T20264] should_fail_ex+0x512/0x640 [ 1164.132410][T20264] _copy_from_user+0x2e/0xd0 [ 1164.132433][T20264] kstrtouint_from_user+0xd6/0x1d0 [ 1164.132457][T20264] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1164.132479][T20264] ? __lock_acquire+0xb8a/0x1c90 [ 1164.132508][T20264] proc_fail_nth_write+0x83/0x220 [ 1164.132536][T20264] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1164.132560][T20264] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1164.132577][T20264] vfs_write+0x2a0/0x11d0 [ 1164.132600][T20264] ? __pfx___mutex_lock+0x10/0x10 [ 1164.132620][T20264] ? __pfx_vfs_write+0x10/0x10 [ 1164.132642][T20264] ? __fget_files+0x20e/0x3c0 [ 1164.132667][T20264] ksys_write+0x12a/0x250 [ 1164.132681][T20264] ? __pfx_ksys_write+0x10/0x10 [ 1164.132696][T20264] ? fdget+0x187/0x210 [ 1164.132715][T20264] do_syscall_64+0xcd/0xfa0 [ 1164.132734][T20264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.132756][T20264] RIP: 0033:0x7f4e3e58e1ff [ 1164.132773][T20264] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1164.132789][T20264] RSP: 002b:00007f4e3f42e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1164.132809][T20264] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4e3e58e1ff [ 1164.132820][T20264] RDX: 0000000000000001 RSI: 00007f4e3f42e0a0 RDI: 0000000000000005 [ 1164.132830][T20264] RBP: 00007f4e3f42e090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.132841][T20264] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1164.132850][T20264] R13: 00007f4e3e7e6038 R14: 00007f4e3e7e5fa0 R15: 00007fff40afc968 [ 1164.132875][T20264] [ 1164.137706][ T5891] usb 2-1: MBOX3: Invalid descriptor size=18. [ 1164.145330][T20267] block device autoloading is deprecated and will be removed. [ 1164.281722][ C1] vkms_vblank_simulate: vblank timer overrun [ 1164.359372][T17488] usb 2-1: USB disconnect, device number 66 [ 1164.686074][ T24] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1164.848022][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.858541][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1164.871597][ T24] usb 9-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1164.881043][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.958635][ T24] usb 9-1: config 0 descriptor?? [ 1165.194814][ T30] audit: type=1400 audit(1763621026.727:2387): avc: denied { write } for pid=20272 comm="syz.8.4294" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1165.219342][ T30] audit: type=1400 audit(1763621026.727:2388): avc: denied { open } for pid=20272 comm="syz.8.4294" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1165.243867][ C1] vkms_vblank_simulate: vblank timer overrun [ 1165.261775][T18120] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1165.426857][T18120] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1165.435542][T18120] usb 6-1: not running at top speed; connect to a high speed hub [ 1165.444424][T18120] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 1165.453837][T18120] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.464876][T18120] usb 6-1: config 4 has no interface number 0 [ 1165.473307][T18120] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1165.482597][T18120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 1165.491921][T18120] usb 6-1: Product: syz [ 1165.496126][T18120] usb 6-1: Manufacturer: syz [ 1165.500915][T18120] usb 6-1: SerialNumber: syz [ 1165.729228][T20282] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4298'. [ 1165.739425][T20282] Unknown options in mask b7f2 [ 1165.817033][T20295] hpfs: hpfs_map_sector(): read error [ 1165.828046][T20295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.838110][T20295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.043567][T15693] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1166.382661][T20300] netlink: 84 bytes leftover after parsing attributes in process `syz.7.4303'. [ 1166.445669][T18120] uvcvideo 6-1:4.147: probe with driver uvcvideo failed with error -22 [ 1166.462913][T18120] usb 6-1: USB disconnect, device number 33 [ 1166.486625][T20306] overlayfs: missing 'lowerdir' [ 1166.494516][T20304] mkiss: ax0: crc mode is auto. [ 1166.675090][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 1166.681267][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1166.692394][ T24] usb 9-1: USB disconnect, device number 14 [ 1166.750859][ T979] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1166.973578][T20316] FAULT_INJECTION: forcing a failure. [ 1166.973578][T20316] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.986386][T20316] CPU: 1 UID: 0 PID: 20316 Comm: syz.8.4309 Not tainted syzkaller #0 PREEMPT(full) [ 1166.986412][T20316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1166.986424][T20316] Call Trace: [ 1166.986431][T20316] [ 1166.986440][T20316] dump_stack_lvl+0x16c/0x1f0 [ 1166.986471][T20316] should_fail_ex+0x512/0x640 [ 1166.986492][T20316] ? fs_reclaim_acquire+0xae/0x150 [ 1166.986513][T20316] should_failslab+0xc2/0x120 [ 1166.986532][T20316] __kmalloc_noprof+0xdd/0x880 [ 1166.986553][T20316] ? tomoyo_encode2+0x100/0x3e0 [ 1166.986575][T20316] ? tomoyo_encode2+0x100/0x3e0 [ 1166.986589][T20316] tomoyo_encode2+0x100/0x3e0 [ 1166.986608][T20316] tomoyo_encode+0x29/0x50 [ 1166.986622][T20316] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1166.986644][T20316] tomoyo_path_number_perm+0x245/0x580 [ 1166.986657][T20316] ? tomoyo_path_number_perm+0x237/0x580 [ 1166.986671][T20316] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1166.986692][T20316] ? __pfx___schedule+0x10/0x10 [ 1166.986724][T20316] ? rcu_is_watching+0x12/0xc0 [ 1166.986745][T20316] ? irqentry_exit+0x3b/0x90 [ 1166.986757][T20316] ? lockdep_hardirqs_on+0x7c/0x110 [ 1166.986775][T20316] ? security_file_ioctl+0x21c/0x240 [ 1166.986797][T20316] security_file_ioctl+0x9b/0x240 [ 1166.986813][T20316] __x64_sys_ioctl+0xb7/0x210 [ 1166.986839][T20316] do_syscall_64+0xcd/0xfa0 [ 1166.986855][T20316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.986870][T20316] RIP: 0033:0x7f4e3e58f749 [ 1166.986886][T20316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1166.986902][T20316] RSP: 002b:00007f4e3f3ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1166.986928][T20316] RAX: ffffffffffffffda RBX: 00007f4e3e7e6180 RCX: 00007f4e3e58f749 [ 1166.986937][T20316] RDX: 0000200000002380 RSI: 00000000c058534f RDI: 0000000000000005 [ 1166.986946][T20316] RBP: 00007f4e3f3ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.986954][T20316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.986962][T20316] R13: 00007f4e3e7e6218 R14: 00007f4e3e7e6180 R15: 00007fff40afc968 [ 1166.986985][T20316] [ 1166.987125][T20316] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1167.149370][ C1] vkms_vblank_simulate: vblank timer overrun [ 1167.566400][ T979] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1167.587256][ T979] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1167.600816][ T979] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1167.612310][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.645763][T20306] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1167.658778][T20306] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1167.666707][T20320] FAULT_INJECTION: forcing a failure. [ 1167.666707][T20320] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.681795][ T979] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1167.687936][T20320] CPU: 0 UID: 0 PID: 20320 Comm: syz.7.4311 Not tainted syzkaller #0 PREEMPT(full) [ 1167.687961][T20320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1167.687971][T20320] Call Trace: [ 1167.687979][T20320] [ 1167.687989][T20320] dump_stack_lvl+0x16c/0x1f0 [ 1167.688016][T20320] should_fail_ex+0x512/0x640 [ 1167.688037][T20320] ? fs_reclaim_acquire+0xae/0x150 [ 1167.688065][T20320] should_failslab+0xc2/0x120 [ 1167.688085][T20320] __kmalloc_noprof+0xdd/0x880 [ 1167.688107][T20320] ? tomoyo_encode2+0x100/0x3e0 [ 1167.688131][T20320] ? tomoyo_encode2+0x100/0x3e0 [ 1167.688146][T20320] tomoyo_encode2+0x100/0x3e0 [ 1167.688167][T20320] tomoyo_encode+0x29/0x50 [ 1167.688183][T20320] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1167.688207][T20320] tomoyo_path_number_perm+0x245/0x580 [ 1167.688222][T20320] ? tomoyo_path_number_perm+0x237/0x580 [ 1167.688238][T20320] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1167.688254][T20320] ? find_held_lock+0x2b/0x80 [ 1167.688296][T20320] ? find_held_lock+0x2b/0x80 [ 1167.688313][T20320] ? hook_file_ioctl_common+0x145/0x410 [ 1167.688338][T20320] ? __fget_files+0x20e/0x3c0 [ 1167.688358][T20320] security_file_ioctl+0x9b/0x240 [ 1167.688378][T20320] __x64_sys_ioctl+0xb7/0x210 [ 1167.688403][T20320] do_syscall_64+0xcd/0xfa0 [ 1167.688420][T20320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.688438][T20320] RIP: 0033:0x7fdaf7d8f749 [ 1167.688453][T20320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1167.688469][T20320] RSP: 002b:00007fdaf8cc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1167.688485][T20320] RAX: ffffffffffffffda RBX: 00007fdaf7fe5fa0 RCX: 00007fdaf7d8f749 [ 1167.688495][T20320] RDX: 0000200000000140 RSI: 00000000c0106407 RDI: 0000000000000003 [ 1167.688505][T20320] RBP: 00007fdaf8cc0090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.688514][T20320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.688523][T20320] R13: 00007fdaf7fe6038 R14: 00007fdaf7fe5fa0 R15: 00007ffc446532f8 [ 1167.688547][T20320] [ 1167.688568][T20320] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1167.935546][ T24] usb 2-1: USB disconnect, device number 67 [ 1167.978082][T20323] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1167.987499][T20323] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1167.989214][ T979] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1168.023529][T20323] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4312'. [ 1168.058717][ T30] audit: type=1400 audit(1763621029.421:2389): avc: denied { ioctl } for pid=20322 comm="syz.8.4312" path="socket:[87900]" dev="sockfs" ino=87900 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1168.134188][ T30] audit: type=1400 audit(1763621029.477:2390): avc: denied { bind } for pid=20326 comm="syz.0.4314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1168.674110][ T30] audit: type=1400 audit(1763621029.477:2391): avc: denied { setopt } for pid=20326 comm="syz.0.4314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1168.701644][ T979] usb 6-1: Using ep0 maxpacket: 32 [ 1168.726048][ T979] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 1168.835486][ T979] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1168.839905][T20333] SET target dimension over the limit! [ 1169.045793][ T979] usb 6-1: config 0 has no interface number 0 [ 1169.107322][ T979] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1169.123660][ T979] usb 6-1: config 0 has no interface number 0 [ 1169.156310][ T979] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1169.164370][ T979] usb 6-1: config 0 has no interface number 0 [ 1169.172083][ T979] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1169.192502][ T979] usb 6-1: config 0 has no interface number 0 [ 1169.217359][ T979] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1169.236660][ T979] usb 6-1: config 0 has no interface number 0 [ 1169.256125][ T979] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1169.313852][ T979] usb 6-1: config 0 has no interface number 0 [ 1169.450715][ T979] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1169.464032][ T979] usb 6-1: config 0 has no interface number 0 [ 1169.495862][ T979] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1169.603499][ T979] usb 6-1: config 0 has no interface number 0 [ 1169.626460][ T979] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1169.646287][ T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.187915][ T979] usb 6-1: Product: syz [ 1170.198424][ T979] usb 6-1: Manufacturer: syz [ 1170.229808][ T979] usb 6-1: SerialNumber: syz [ 1170.237110][T20346] kAFS: unable to lookup cell 'syz1' [ 1170.253706][ T979] usb 6-1: config 0 descriptor?? [ 1170.263874][ T979] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz) [ 1170.496006][ T30] audit: type=1400 audit(1763621031.703:2392): avc: denied { connect } for pid=20317 comm="syz.5.4310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1170.585809][ T30] audit: type=1400 audit(1763621031.778:2393): avc: denied { setopt } for pid=20350 comm="syz.0.4323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1170.765347][T20360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4325'. [ 1170.883647][T20365] netlink: 'syz.7.4327': attribute type 1 has an invalid length. [ 1170.891778][T17488] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1170.905491][T20365] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4327'. [ 1171.057551][T17488] usb 2-1: Using ep0 maxpacket: 8 [ 1171.065703][T17488] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 1171.089426][T17488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1171.100563][T17488] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 189 [ 1171.497934][T17488] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1171.512896][T17488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 1171.523030][T17488] usb 2-1: SerialNumber: syz [ 1171.530835][T17488] usb 2-1: config 0 descriptor?? [ 1171.542405][T20353] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1171.551821][T20353] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1171.787772][ T979] etas_es58x 6-1:0.2: could not retrieve the product info string [ 1171.822830][T20374] FAULT_INJECTION: forcing a failure. [ 1171.822830][T20374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1171.844242][T17488] usb 2-1: USB disconnect, device number 68 [ 1171.861768][T20374] CPU: 0 UID: 0 PID: 20374 Comm: syz.8.4328 Not tainted syzkaller #0 PREEMPT(full) [ 1171.861795][T20374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1171.861806][T20374] Call Trace: [ 1171.861812][T20374] [ 1171.861821][T20374] dump_stack_lvl+0x16c/0x1f0 [ 1171.861848][T20374] should_fail_ex+0x512/0x640 [ 1171.861871][T20374] ? __pfx_device_write+0x10/0x10 [ 1171.861894][T20374] ? __pfx_device_write+0x10/0x10 [ 1171.861910][T20374] _copy_from_user+0x2e/0xd0 [ 1171.861933][T20374] memdup_user_nul+0x6c/0x120 [ 1171.861953][T20374] device_write+0xc1/0x1e60 [ 1171.861971][T20374] ? __pfx_device_write+0x10/0x10 [ 1171.861988][T20374] ? bpf_lsm_file_permission+0x9/0x10 [ 1171.862007][T20374] ? security_file_permission+0x71/0x210 [ 1171.862028][T20374] ? rw_verify_area+0xcf/0x6c0 [ 1171.862056][T20374] ? __pfx_device_write+0x10/0x10 [ 1171.862072][T20374] vfs_write+0x2a0/0x11d0 [ 1171.862092][T20374] ? __pfx_vfs_write+0x10/0x10 [ 1171.862106][T20374] ? find_held_lock+0x2b/0x80 [ 1171.862128][T20374] ? __fget_files+0x204/0x3c0 [ 1171.862148][T20374] ? __fget_files+0x20e/0x3c0 [ 1171.862169][T20374] ksys_write+0x12a/0x250 [ 1171.862183][T20374] ? __pfx_ksys_write+0x10/0x10 [ 1171.862203][T20374] do_syscall_64+0xcd/0xfa0 [ 1171.862219][T20374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.862237][T20374] RIP: 0033:0x7f4e3e58f749 [ 1171.862260][T20374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1171.862275][T20374] RSP: 002b:00007f4e3f42e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1171.862293][T20374] RAX: ffffffffffffffda RBX: 00007f4e3e7e5fa0 RCX: 00007f4e3e58f749 [ 1171.862305][T20374] RDX: 0000000000000070 RSI: 0000200000000280 RDI: 0000000000000003 [ 1171.862315][T20374] RBP: 00007f4e3f42e090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.862326][T20374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.862336][T20374] R13: 00007f4e3e7e6038 R14: 00007f4e3e7e5fa0 R15: 00007fff40afc968 [ 1171.862359][T20374] [ 1171.867659][ T979] usb 6-1: USB disconnect, device number 34 [ 1171.867989][T20377] FAULT_INJECTION: forcing a failure. [ 1171.867989][T20377] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.896645][ T979] etas_es58x 6-1:0.2: Disconnecting syz syz [ 1171.899980][T20377] CPU: 0 UID: 0 PID: 20377 Comm: syz.5.4329 Not tainted syzkaller #0 PREEMPT(full) [ 1171.900006][T20377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1171.900016][T20377] Call Trace: [ 1171.900023][T20377] [ 1171.900032][T20377] dump_stack_lvl+0x16c/0x1f0 [ 1171.900062][T20377] should_fail_ex+0x512/0x640 [ 1171.900085][T20377] ? fs_reclaim_acquire+0xae/0x150 [ 1171.900108][T20377] should_failslab+0xc2/0x120 [ 1171.900128][T20377] __kmalloc_noprof+0xdd/0x880 [ 1171.900150][T20377] ? tomoyo_encode2+0x100/0x3e0 [ 1171.900175][T20377] ? tomoyo_encode2+0x100/0x3e0 [ 1171.900190][T20377] tomoyo_encode2+0x100/0x3e0 [ 1171.900211][T20377] tomoyo_encode+0x29/0x50 [ 1171.900227][T20377] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1171.900256][T20377] tomoyo_path_number_perm+0x245/0x580 [ 1171.900271][T20377] ? tomoyo_path_number_perm+0x237/0x580 [ 1171.900288][T20377] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1171.900304][T20377] ? find_held_lock+0x2b/0x80 [ 1171.900346][T20377] ? find_held_lock+0x2b/0x80 [ 1171.900364][T20377] ? hook_file_ioctl_common+0x145/0x410 [ 1171.900391][T20377] ? __fget_files+0x20e/0x3c0 [ 1171.900411][T20377] security_file_ioctl+0x9b/0x240 [ 1171.900436][T20377] __x64_sys_ioctl+0xb7/0x210 [ 1171.900462][T20377] do_syscall_64+0xcd/0xfa0 [ 1171.900481][T20377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.900500][T20377] RIP: 0033:0x7f313db8f749 [ 1171.900516][T20377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1171.900534][T20377] RSP: 002b:00007f313e96f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1171.900554][T20377] RAX: ffffffffffffffda RBX: 00007f313dde5fa0 RCX: 00007f313db8f749 [ 1171.900565][T20377] RDX: 00000000000000d5 RSI: 000000000000ae03 RDI: 0000000000000003 [ 1171.900575][T20377] RBP: 00007f313e96f090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.900584][T20377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.900593][T20377] R13: 00007f313dde6038 R14: 00007f313dde5fa0 R15: 00007ffd23f4ad58 [ 1171.900617][T20377] [ 1171.900646][T20377] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1172.490914][ T976] usb 8-1: new full-speed USB device number 60 using dummy_hcd [ 1173.084614][ T976] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1173.166626][ T976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.269554][ T976] usb 8-1: Product: syz [ 1173.542929][ T976] usb 8-1: Manufacturer: syz [ 1173.547611][ T976] usb 8-1: SerialNumber: syz [ 1173.600134][ T976] usb 8-1: config 0 descriptor?? [ 1173.630571][T20387] netlink: 'syz.5.4335': attribute type 1 has an invalid length. [ 1173.844374][ T976] airspy 8-1:0.0: usb_control_msg() failed -71 request 09 [ 1173.860188][ T976] airspy 8-1:0.0: Could not detect board [ 1173.875636][ T976] airspy 8-1:0.0: probe with driver airspy failed with error -71 [ 1173.891248][ T976] usb 8-1: USB disconnect, device number 60 [ 1174.332973][T15693] Bluetooth: hci2: command 0x0406 tx timeout [ 1174.352073][T20402] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4339'. [ 1174.638976][ T976] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1174.750367][T20410] netlink: 'syz.8.4341': attribute type 1 has an invalid length. [ 1174.758601][T20410] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4341'. [ 1175.152271][T20415] FAULT_INJECTION: forcing a failure. [ 1175.152271][T20415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1175.166161][T20415] CPU: 0 UID: 0 PID: 20415 Comm: syz.1.4340 Not tainted syzkaller #0 PREEMPT(full) [ 1175.166192][T20415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1175.166204][T20415] Call Trace: [ 1175.166212][T20415] [ 1175.166221][T20415] dump_stack_lvl+0x116/0x1f0 [ 1175.166250][T20415] should_fail_ex+0x512/0x640 [ 1175.166279][T20415] strncpy_from_user+0x3b/0x2e0 [ 1175.166302][T20415] strncpy_from_user_nofault+0x7f/0x180 [ 1175.166336][T20415] bpf_bprintf_prepare+0xe90/0x13f0 [ 1175.166366][T20415] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 1175.166384][T20415] ? __lock_acquire+0x622/0x1c90 [ 1175.166412][T20415] ? bpf_trace_run1+0x3d9/0x580 [ 1175.166434][T20415] bpf_trace_printk+0xda/0x190 [ 1175.166453][T20415] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1175.166471][T20415] ? find_held_lock+0x2b/0x80 [ 1175.166497][T20415] ? bpf_trace_run1+0x3d9/0x580 [ 1175.166527][T20415] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 1175.166544][T20415] bpf_trace_run1+0x231/0x580 [ 1175.166565][T20415] ? __pfx_bpf_trace_run1+0x10/0x10 [ 1175.166587][T20415] ? __lock_acquire+0x622/0x1c90 [ 1175.166609][T20415] __bpf_trace_rcu_utilization+0x8d/0xc0 [ 1175.166635][T20415] ? __pfx___bpf_trace_rcu_utilization+0x10/0x10 [ 1175.166657][T20415] ? look_up_lock_class+0x59/0x150 [ 1175.166676][T20415] ? register_lock_class+0x41/0x4c0 [ 1175.166691][T20415] ? find_held_lock+0x2b/0x80 [ 1175.166714][T20415] trace_rcu_utilization+0xd9/0x200 [ 1175.166734][T20415] rcu_note_context_switch+0x72/0x1e00 [ 1175.166758][T20415] ? rb_read_data_buffer.constprop.0+0x18c/0x430 [ 1175.166782][T20415] ? preempt_schedule_irq+0x51/0x90 [ 1175.166808][T20415] __schedule+0x2fd/0x5de0 [ 1175.166842][T20415] ? __pfx_search_extable+0x10/0x10 [ 1175.166859][T20415] ? strncpy_from_user+0x1d5/0x2e0 [ 1175.166881][T20415] ? pt_regs_offset+0x63/0x90 [ 1175.166905][T20415] ? look_up_lock_class+0x6b/0x150 [ 1175.166922][T20415] ? register_lock_class+0x41/0x4c0 [ 1175.166938][T20415] ? register_lock_class+0x41/0x4c0 [ 1175.166961][T20415] ? __pfx___schedule+0x10/0x10 [ 1175.166996][T20415] ? mark_held_locks+0x49/0x80 [ 1175.167025][T20415] preempt_schedule_irq+0x51/0x90 [ 1175.167051][T20415] irqentry_exit+0x36/0x90 [ 1175.167067][T20415] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1175.167087][T20415] RIP: 0010:netlink_insert+0x2e1/0x1850 [ 1175.167117][T20415] Code: 45 5c ff ff 49 8d 7c 24 28 48 8d 83 38 07 00 00 48 89 fa 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 85 d8 13 00 00 49 83 7c 24 28 00 0f 84 27 0c 00 00 e8 b8 71 49 [ 1175.167134][T20415] RSP: 0018:ffffc9000bcd7878 EFLAGS: 00000246 [ 1175.167150][T20415] RAX: dffffc0000000000 RBX: ffff888053e01000 RCX: 0000000000000000 [ 1175.167163][T20415] RDX: 1ffff110281dea81 RSI: 0000000000000000 RDI: ffff888140ef5408 [ 1175.167174][T20415] RBP: 000000000000032f R08: 0000000000000001 R09: 0000000000000000 [ 1175.167184][T20415] R10: ffffc9000bcd7910 R11: 0000000000000001 R12: ffff888140ef53e0 [ 1175.167194][T20415] R13: 000000000000032f R14: 00000000000013e0 R15: ffff888053e01578 [ 1175.167219][T20415] ? netlink_insert+0x2bb/0x1850 [ 1175.167248][T20415] ? __netlink_lookup+0x65e/0x900 [ 1175.167272][T20415] ? __pfx_netlink_insert+0x10/0x10 [ 1175.167297][T20415] ? find_held_lock+0x2b/0x80 [ 1175.167318][T20415] ? netlink_autobind.isra.0+0x158/0x370 [ 1175.167349][T20415] ? netlink_autobind.isra.0+0xa8/0x370 [ 1175.167372][T20415] netlink_autobind.isra.0+0x1f1/0x370 [ 1175.167402][T20415] netlink_sendmsg+0x966/0xdd0 [ 1175.167432][T20415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1175.167467][T20415] ____sys_sendmsg+0xa98/0xc70 [ 1175.167489][T20415] ? copy_msghdr_from_user+0x10a/0x160 [ 1175.167514][T20415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1175.167544][T20415] ___sys_sendmsg+0x134/0x1d0 [ 1175.167569][T20415] ? __pfx____sys_sendmsg+0x10/0x10 [ 1175.167589][T20415] ? __lock_acquire+0x622/0x1c90 [ 1175.167635][T20415] __sys_sendmsg+0x16d/0x220 [ 1175.167659][T20415] ? __pfx___sys_sendmsg+0x10/0x10 [ 1175.167699][T20415] do_syscall_64+0xcd/0xfa0 [ 1175.167718][T20415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.167734][T20415] RIP: 0033:0x7f6ff4f8f749 [ 1175.167750][T20415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1175.167766][T20415] RSP: 002b:00007f6ff5e6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1175.167782][T20415] RAX: ffffffffffffffda RBX: 00007f6ff51e6180 RCX: 00007f6ff4f8f749 [ 1175.167792][T20415] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000008 [ 1175.167802][T20415] RBP: 00007f6ff5e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1175.167812][T20415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1175.167822][T20415] R13: 00007f6ff51e6218 R14: 00007f6ff51e6180 R15: 00007ffc6756e538 [ 1175.167848][T20415] [ 1175.626426][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.767414][ T976] usb 6-1: Using ep0 maxpacket: 8 [ 1175.803260][ T976] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1175.818553][ T976] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1175.827126][ T976] usb 6-1: Product: syz [ 1175.831319][ T976] usb 6-1: Manufacturer: syz [ 1175.837121][T17488] usb 8-1: new full-speed USB device number 61 using dummy_hcd [ 1175.845342][ T976] usb 6-1: SerialNumber: syz [ 1175.929494][ T976] usb 6-1: config 0 descriptor?? [ 1176.021693][T17488] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1176.046231][T17488] usb 8-1: not running at top speed; connect to a high speed hub [ 1176.062782][T17488] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 1176.072448][T17488] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.085892][T17488] usb 8-1: config 4 has no interface number 0 [ 1176.103527][T17488] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1176.112821][T17488] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 1176.122308][T17488] usb 8-1: Product: syz [ 1176.129163][T17488] usb 8-1: Manufacturer: syz [ 1176.133867][T17488] usb 8-1: SerialNumber: syz [ 1176.275466][ T10] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1176.803395][ T10] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1176.876609][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.986209][ T10] usb 9-1: Product: syz [ 1177.054006][ T10] usb 9-1: Manufacturer: syz [ 1177.150332][ T10] usb 9-1: SerialNumber: syz [ 1177.363310][T20408] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4342'. [ 1177.619436][T20408] Unknown options in mask b7f2 [ 1177.653141][ T10] usb 9-1: config 0 descriptor?? [ 1177.690414][T20408] hpfs: hpfs_map_sector(): read error [ 1177.698642][T20408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.707376][T20408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.912744][ T10] airspy 9-1:0.0: usb_control_msg() failed -71 request 09 [ 1177.920070][ T10] airspy 9-1:0.0: Could not detect board [ 1177.944046][T17488] uvcvideo 8-1:4.147: probe with driver uvcvideo failed with error -22 [ 1177.954995][ T10] airspy 9-1:0.0: probe with driver airspy failed with error -71 [ 1177.978827][T17488] usb 8-1: USB disconnect, device number 61 [ 1178.006756][ T10] usb 9-1: USB disconnect, device number 15 [ 1178.117883][ T976] usb 6-1: USB disconnect, device number 35 [ 1178.182386][T20434] mkiss: ax0: crc mode is auto. [ 1178.661313][T20439] FAULT_INJECTION: forcing a failure. [ 1178.661313][T20439] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.674166][T20439] CPU: 0 UID: 0 PID: 20439 Comm: syz.1.4351 Not tainted syzkaller #0 PREEMPT(full) [ 1178.674187][T20439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1178.674194][T20439] Call Trace: [ 1178.674205][T20439] [ 1178.674210][T20439] dump_stack_lvl+0x16c/0x1f0 [ 1178.674232][T20439] should_fail_ex+0x512/0x640 [ 1178.674248][T20439] ? fs_reclaim_acquire+0xae/0x150 [ 1178.674264][T20439] should_failslab+0xc2/0x120 [ 1178.674279][T20439] __kmalloc_noprof+0xdd/0x880 [ 1178.674294][T20439] ? tomoyo_encode2+0x100/0x3e0 [ 1178.674311][T20439] ? tomoyo_encode2+0x100/0x3e0 [ 1178.674322][T20439] tomoyo_encode2+0x100/0x3e0 [ 1178.674336][T20439] tomoyo_encode+0x29/0x50 [ 1178.674347][T20439] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1178.674364][T20439] tomoyo_path_number_perm+0x245/0x580 [ 1178.674375][T20439] ? tomoyo_path_number_perm+0x237/0x580 [ 1178.674387][T20439] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1178.674398][T20439] ? find_held_lock+0x2b/0x80 [ 1178.674426][T20439] ? find_held_lock+0x2b/0x80 [ 1178.674439][T20439] ? hook_file_ioctl_common+0x145/0x410 [ 1178.674457][T20439] ? __fget_files+0x20e/0x3c0 [ 1178.674472][T20439] security_file_ioctl+0x9b/0x240 [ 1178.674486][T20439] __x64_sys_ioctl+0xb7/0x210 [ 1178.674502][T20439] do_syscall_64+0xcd/0xfa0 [ 1178.674514][T20439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.674526][T20439] RIP: 0033:0x7f6ff4f8f749 [ 1178.674537][T20439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1178.674548][T20439] RSP: 002b:00007f6ff5eb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1178.674559][T20439] RAX: ffffffffffffffda RBX: 00007f6ff51e5fa0 RCX: 00007f6ff4f8f749 [ 1178.674566][T20439] RDX: 0000200000002080 RSI: 0000000040445637 RDI: 0000000000000003 [ 1178.674572][T20439] RBP: 00007f6ff5eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.674578][T20439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.674584][T20439] R13: 00007f6ff51e6038 R14: 00007f6ff51e5fa0 R15: 00007ffc6756e538 [ 1178.674599][T20439] [ 1178.674613][T20439] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1179.225126][ T976] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1179.428632][ T976] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.440598][ T976] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1179.449858][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.519771][ T976] usb 6-1: config 0 descriptor?? [ 1179.583924][ T976] pwc: Askey VC010 type 2 USB webcam detected. [ 1179.770605][ T976] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1179.795397][ T976] pwc: recv_control_msg error -32 req 02 val 2700 [ 1179.842211][ T976] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1179.873558][ T976] pwc: recv_control_msg error -32 req 04 val 1000 [ 1179.925279][ T976] pwc: recv_control_msg error -32 req 04 val 1300 [ 1179.980584][ T976] pwc: recv_control_msg error -32 req 04 val 1400 [ 1180.009588][ T976] pwc: recv_control_msg error -32 req 02 val 2000 [ 1180.038359][ T976] pwc: recv_control_msg error -32 req 02 val 2100 [ 1180.068929][ T976] pwc: recv_control_msg error -32 req 04 val 1500 [ 1180.122516][ T976] pwc: recv_control_msg error -32 req 02 val 2500 [ 1180.177289][ T976] pwc: recv_control_msg error -32 req 02 val 2400 [ 1180.282547][ T30] audit: type=1400 audit(1763621040.832:2394): avc: denied { setopt } for pid=20451 comm="syz.1.4356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1180.693324][ T976] pwc: recv_control_msg error -71 req 02 val 2600 [ 1180.703261][ T976] pwc: recv_control_msg error -71 req 02 val 2900 [ 1180.742751][ T976] pwc: recv_control_msg error -71 req 02 val 2800 [ 1180.778024][ T976] pwc: recv_control_msg error -71 req 04 val 1100 [ 1180.803629][ T976] pwc: recv_control_msg error -71 req 04 val 1200 [ 1180.820695][ T976] pwc: Registered as video103. [ 1181.032141][ T976] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input119 [ 1181.128851][ T5907] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 1181.134039][ T976] usb 6-1: USB disconnect, device number 36 [ 1181.348494][ T5907] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1181.383397][ T5907] usb 9-1: config 0 has no interface number 0 [ 1181.455990][ T5907] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1181.800152][ T5907] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1181.923409][ T5907] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1181.963383][ T5907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.006822][ T5907] usb 9-1: config 0 descriptor?? [ 1182.015854][T20459] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1182.051767][ T5907] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1182.060841][T20477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4364'. [ 1182.304051][T17488] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1182.390627][ T5891] usb 9-1: USB disconnect, device number 16 [ 1182.464289][T17488] usb 2-1: Using ep0 maxpacket: 32 [ 1182.472064][T17488] usb 2-1: config index 0 descriptor too short (expected 48155, got 27) [ 1182.481181][T17488] usb 2-1: config 249 has too many interfaces: 50, using maximum allowed: 32 [ 1182.490470][T17488] usb 2-1: config 249 has 2 interfaces, different from the descriptor's value: 50 [ 1182.515926][T17488] usb 2-1: config 249 has no interface number 1 [ 1182.527742][T17488] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1182.547005][T17488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.556079][T17488] usb 2-1: Product: syz [ 1182.561773][T20495] FAULT_INJECTION: forcing a failure. [ 1182.561773][T20495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1182.575569][T17488] usb 2-1: Manufacturer: syz [ 1182.580610][T20495] CPU: 0 UID: 0 PID: 20495 Comm: syz.0.4368 Not tainted syzkaller #0 PREEMPT(full) [ 1182.580640][T20495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1182.580652][T20495] Call Trace: [ 1182.580663][T20495] [ 1182.580673][T20495] dump_stack_lvl+0x16c/0x1f0 [ 1182.580705][T20495] should_fail_ex+0x512/0x640 [ 1182.580733][T20495] _copy_to_user+0x32/0xd0 [ 1182.580761][T20495] simple_read_from_buffer+0xcb/0x170 [ 1182.580795][T20495] proc_fail_nth_read+0x197/0x240 [ 1182.580821][T20495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1182.580843][T20495] ? rw_verify_area+0xcf/0x6c0 [ 1182.580870][T20495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1182.580891][T20495] vfs_read+0x1e4/0xcf0 [ 1182.580909][T20495] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1182.580939][T20495] ? __pfx___mutex_lock+0x10/0x10 [ 1182.580965][T20495] ? __pfx_vfs_read+0x10/0x10 [ 1182.580985][T20495] ? __rcu_read_unlock+0x2bc/0x550 [ 1182.581008][T20495] ? __fget_files+0x20e/0x3c0 [ 1182.581031][T20495] ksys_read+0x12a/0x250 [ 1182.581048][T20495] ? __pfx_ksys_read+0x10/0x10 [ 1182.581073][T20495] do_syscall_64+0xcd/0xfa0 [ 1182.581093][T20495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.581113][T20495] RIP: 0033:0x7faac5b8e15c [ 1182.581130][T20495] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1182.581148][T20495] RSP: 002b:00007faac6a3c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1182.581168][T20495] RAX: ffffffffffffffda RBX: 00007faac5de6180 RCX: 00007faac5b8e15c [ 1182.581179][T20495] RDX: 000000000000000f RSI: 00007faac6a3c0a0 RDI: 0000000000000007 [ 1182.581190][T20495] RBP: 00007faac6a3c090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.581201][T20495] R10: 000000000000069a R11: 0000000000000246 R12: 0000000000000001 [ 1182.581211][T20495] R13: 00007faac5de6218 R14: 00007faac5de6180 R15: 00007ffeed58dd88 [ 1182.581238][T20495] [ 1182.770907][ C0] vkms_vblank_simulate: vblank timer overrun [ 1182.784544][T17488] usb 2-1: SerialNumber: syz [ 1183.057739][T20475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.064490][T20499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4370'. [ 1183.066814][T20475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.292280][T17488] usb 2-1: Could not set interface, error -71 [ 1183.306888][T17488] usb 2-1: USB disconnect, device number 69 [ 1183.694770][ T24] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1183.854105][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 1183.862274][ T24] usb 8-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1183.871803][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.882914][ T24] usb 8-1: config 0 descriptor?? [ 1184.394698][ T24] hid_parser_main: 78 callbacks suppressed [ 1184.394770][ T24] saitek 0003:06A3:0621.001D: unknown main item tag 0x5 [ 1184.431427][ T24] saitek 0003:06A3:0621.001D: item fetching failed at offset 4/5 [ 1184.449014][ T24] saitek 0003:06A3:0621.001D: parse failed [ 1184.463525][ T24] saitek 0003:06A3:0621.001D: probe with driver saitek failed with error -22 [ 1184.503494][T20520] tipc: Started in network mode [ 1184.509564][T20520] tipc: Node identity ac14140f, cluster identity 4711 [ 1184.557488][T20520] tipc: New replicast peer: 255.255.255.255 [ 1184.576577][T17488] usb 8-1: USB disconnect, device number 62 [ 1184.600044][T20520] tipc: Enabled bearer , priority 10 [ 1185.820125][ T5859] tipc: Node number set to 2886997007 [ 1186.627699][ T5859] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1186.794088][ T5859] usb 6-1: device descriptor read/64, error -71 [ 1187.094048][T20556] FAULT_INJECTION: forcing a failure. [ 1187.094048][T20556] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.125416][ T5859] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1187.873771][ T31] INFO: task kworker/0:0:9 blocked for more than 144 seconds. [ 1187.892482][T20556] CPU: 1 UID: 0 PID: 20556 Comm: syz.1.4388 Not tainted syzkaller #0 PREEMPT(full) [ 1187.892516][T20556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1187.892528][T20556] Call Trace: [ 1187.892540][T20556] [ 1187.892554][T20556] dump_stack_lvl+0x16c/0x1f0 [ 1187.892587][T20556] should_fail_ex+0x512/0x640 [ 1187.892615][T20556] ? fs_reclaim_acquire+0xae/0x150 [ 1187.892639][T20556] should_failslab+0xc2/0x120 [ 1187.892662][T20556] __kmalloc_noprof+0xdd/0x880 [ 1187.892686][T20556] ? tomoyo_encode2+0x100/0x3e0 [ 1187.892711][T20556] ? tomoyo_encode2+0x100/0x3e0 [ 1187.892726][T20556] tomoyo_encode2+0x100/0x3e0 [ 1187.892747][T20556] tomoyo_encode+0x29/0x50 [ 1187.892762][T20556] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1187.892784][T20556] tomoyo_path_number_perm+0x245/0x580 [ 1187.892800][T20556] ? tomoyo_path_number_perm+0x237/0x580 [ 1187.892819][T20556] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1187.892834][T20556] ? find_held_lock+0x2b/0x80 [ 1187.892880][T20556] ? find_held_lock+0x2b/0x80 [ 1187.892897][T20556] ? hook_file_ioctl_common+0x145/0x410 [ 1187.892927][T20556] ? __fget_files+0x20e/0x3c0 [ 1187.892948][T20556] security_file_ioctl+0x9b/0x240 [ 1187.892975][T20556] __x64_sys_ioctl+0xb7/0x210 [ 1187.893007][T20556] do_syscall_64+0xcd/0xfa0 [ 1187.893029][T20556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.893053][T20556] RIP: 0033:0x7f6ff4f8f749 [ 1187.893075][T20556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1187.893093][T20556] RSP: 002b:00007f6ff5eb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1187.893126][T20556] RAX: ffffffffffffffda RBX: 00007f6ff51e5fa0 RCX: 00007f6ff4f8f749 [ 1187.893138][T20556] RDX: 0000200000002600 RSI: 00000000c4c85513 RDI: 0000000000000005 [ 1187.893149][T20556] RBP: 00007f6ff5eb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1187.893159][T20556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.893170][T20556] R13: 00007f6ff51e6038 R14: 00007f6ff51e5fa0 R15: 00007ffc6756e538 [ 1187.893193][T20556] [ 1187.893215][T20556] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1187.903461][ T31] Not tainted syzkaller #0 [ 1188.116926][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1188.126417][ T31] task:kworker/0:0 state:D stack:21320 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1188.140563][ T31] Workqueue: usb_hub_wq hub_event [ 1188.150730][ T31] Call Trace: [ 1188.157123][ T31] [ 1188.160115][ T31] __schedule+0x1190/0x5de0 [ 1188.169921][ T31] ? device_del+0x64e/0x9f0 [ 1188.174985][ T5859] usb 6-1: device descriptor read/64, error -71 [ 1188.188116][ T31] ? device_unregister+0x1d/0xc0 [ 1188.201916][ T31] ? i2c_del_adapter+0x53e/0x6f0 [ 1188.207667][ T31] ? dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 1188.218093][ T31] ? __lock_acquire+0x622/0x1c90 [ 1188.223100][ T31] ? __pfx___schedule+0x10/0x10 [ 1188.231811][ T31] ? find_held_lock+0x2b/0x80 [ 1188.236746][ T31] ? schedule+0x2d7/0x3a0 [ 1188.242927][ T31] schedule+0xe7/0x3a0 [ 1188.247092][ T31] schedule_timeout+0x257/0x290 [ 1188.253026][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1188.258648][ T31] ? mark_held_locks+0x49/0x80 [ 1188.263446][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1188.268688][ T31] __wait_for_common+0x2fc/0x4e0 [ 1188.273829][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1188.279251][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1188.284964][ T31] ? __pfx_device_del+0x10/0x10 [ 1188.289860][ T31] ? kobject_put+0xab/0x5a0 [ 1188.294895][ T5859] usb usb6-port1: attempt power cycle [ 1188.294927][ T31] i2c_del_adapter+0x546/0x6f0 [ 1188.305251][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1188.310550][ T31] ? kfree+0x2b8/0x6d0 [ 1188.314799][ T31] ? dvb_usbv2_exit.isra.0+0x3c6/0x9f0 [ 1188.320275][ T31] dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 1188.325694][ T31] dvb_usbv2_probe+0x1f61/0x3e50 [ 1188.330625][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 1188.335925][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1188.342071][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 1188.348014][ T31] usb_probe_interface+0x303/0xa40 [ 1188.353124][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1188.358877][ T31] really_probe+0x241/0xa90 [ 1188.363385][ T31] __driver_probe_device+0x1de/0x440 [ 1188.369794][ T31] driver_probe_device+0x4c/0x1b0 [ 1188.374847][ T31] __device_attach_driver+0x1df/0x310 [ 1188.380337][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1188.386239][ T31] bus_for_each_drv+0x159/0x1e0 [ 1188.391216][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1188.396757][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1188.402083][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1188.407909][ T31] __device_attach+0x1e4/0x4b0 [ 1188.412820][ T31] ? __pfx___device_attach+0x10/0x10 [ 1188.418110][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1188.423349][ T31] bus_probe_device+0x17f/0x1c0 [ 1188.428199][ T31] device_add+0x1148/0x1aa0 [ 1188.432811][ T31] ? __pfx_device_add+0x10/0x10 [ 1188.437642][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1188.443215][ T31] usb_set_configuration+0x1187/0x1e20 [ 1188.448964][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1188.455171][ T31] usb_generic_driver_probe+0xb1/0x110 [ 1188.460623][ T31] usb_probe_device+0xef/0x3e0 [ 1188.465614][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1188.470992][ T31] really_probe+0x241/0xa90 [ 1188.475656][ T31] __driver_probe_device+0x1de/0x440 [ 1188.480954][ T31] driver_probe_device+0x4c/0x1b0 [ 1188.486069][ T31] __device_attach_driver+0x1df/0x310 [ 1188.491455][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1188.497507][ T31] bus_for_each_drv+0x159/0x1e0 [ 1188.502372][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1188.507826][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1188.513029][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1188.519004][ T31] __device_attach+0x1e4/0x4b0 [ 1188.523770][ T31] ? __pfx___device_attach+0x10/0x10 [ 1188.533519][ T31] bus_probe_device+0x17f/0x1c0 [ 1188.539259][ T31] device_add+0x1148/0x1aa0 [ 1188.543805][ T31] ? __pfx_device_add+0x10/0x10 [ 1188.548705][ T31] ? usb_new_device+0xb6c/0x1a60 [ 1188.553744][ T31] usb_new_device+0xd07/0x1a60 [ 1188.559226][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1188.564281][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1188.569688][ T31] ? mark_held_locks+0x49/0x80 [ 1188.574454][ T31] hub_event+0x2f34/0x4fe0 [ 1188.578877][ T31] ? __pfx_hub_event+0x10/0x10 [ 1188.583876][ T31] ? assoc_array_destroy_subtree.part.0+0x2c0/0x4d0 [ 1188.590620][ T31] ? rcu_is_watching+0x12/0xc0 [ 1188.595401][ T31] process_one_work+0x9cf/0x1b70 [ 1188.600389][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 1188.605774][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1188.611182][ T31] ? assign_work+0x1a0/0x250 [ 1188.616048][ T31] worker_thread+0x6c8/0xf10 [ 1188.620632][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1188.625795][ T31] kthread+0x3c5/0x780 [ 1188.629846][ T31] ? __pfx_kthread+0x10/0x10 [ 1188.634516][ T31] ? rcu_is_watching+0x12/0xc0 [ 1188.639267][ T31] ? __pfx_kthread+0x10/0x10 [ 1188.643921][ T31] ret_from_fork+0x675/0x7d0 [ 1188.648506][ T31] ? __pfx_kthread+0x10/0x10 [ 1188.653073][ T31] ret_from_fork_asm+0x1a/0x30 [ 1188.658063][ T31] [ 1188.661453][ T31] INFO: task syz.6.3736:18433 blocked for more than 144 seconds. [ 1188.670110][ T31] Not tainted syzkaller #0 [ 1188.675097][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1188.683993][ T31] task:syz.6.3736 state:D stack:28856 pid:18433 tgid:18423 ppid:11011 task_flags:0x400040 flags:0x00080002 [ 1188.686179][ T5859] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1188.696064][ T31] Call Trace: [ 1188.707072][ T31] [ 1188.710357][ T31] __schedule+0x1190/0x5de0 [ 1188.714901][ T31] ? __lock_acquire+0x622/0x1c90 [ 1188.719996][ T31] ? __pfx___schedule+0x10/0x10 [ 1188.724887][ T31] ? find_held_lock+0x2b/0x80 [ 1188.729661][ T31] ? schedule+0x2d7/0x3a0 [ 1188.731556][ T5859] usb 6-1: device descriptor read/8, error -71 [ 1188.734022][ T31] ? usbdev_open+0x1b6/0x8b0 [ 1188.734049][ T31] schedule+0xe7/0x3a0 [ 1188.734081][ T31] schedule_preempt_disabled+0x13/0x30 [ 1188.754549][ T31] __mutex_lock+0x818/0x1060 [ 1188.759175][ T31] ? klist_put+0xc7/0x1b0 [ 1188.763709][ T31] ? usbdev_open+0x1b6/0x8b0 [ 1188.768325][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1188.773668][ T31] ? kobject_put+0xab/0x5a0 [ 1188.778455][ T31] ? __pfx_device_match_devt+0x10/0x10 [ 1188.784752][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1188.790074][ T31] ? usbdev_open+0x1b6/0x8b0 [ 1188.794821][ T31] usbdev_open+0x1b6/0x8b0 [ 1188.799248][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 1188.804937][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1188.809875][ T31] ? chrdev_open+0x10b/0x6a0 [ 1188.814594][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1188.819521][ T31] chrdev_open+0x234/0x6a0 [ 1188.823941][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1188.829137][ T31] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1188.835497][ T31] do_dentry_open+0x982/0x1530 [ 1188.840398][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1188.845426][ T31] vfs_open+0x82/0x3f0 [ 1188.849549][ T31] path_openat+0x1de4/0x2cb0 [ 1188.854146][ T31] ? __pfx_path_openat+0x10/0x10 [ 1188.859191][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 1188.864129][ T31] do_filp_open+0x20b/0x470 [ 1188.868714][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1188.873760][ T31] ? alloc_fd+0x471/0x7d0 [ 1188.878102][ T31] do_sys_openat2+0x11b/0x1d0 [ 1188.883107][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1188.888562][ T31] ? find_held_lock+0x2b/0x80 [ 1188.893292][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 1188.898239][ T31] __x64_sys_openat+0x174/0x210 [ 1188.903347][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1188.908727][ T31] ? do_user_addr_fault+0x843/0x1370 [ 1188.914069][ T31] do_syscall_64+0xcd/0xfa0 [ 1188.918584][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.925036][ T31] RIP: 0033:0x7f181698df90 [ 1188.929472][ T31] RSP: 002b:00007f18177b3b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1188.937924][ T31] RAX: ffffffffffffffda RBX: 0000000000002581 RCX: 00007f181698df90 [ 1188.946140][ T31] RDX: 0000000000002581 RSI: 00007f18177b3c10 RDI: 00000000ffffff9c [ 1188.954357][ T31] RBP: 00007f18177b3c10 R08: 0000000000000000 R09: 0000000000000000 [ 1188.962342][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1188.970443][ T31] R13: 00007f1816be6128 R14: 00007f1816be6090 R15: 00007ffc174c91e8 [ 1188.978510][ T31] [ 1188.982417][ T31] [ 1188.982417][ T31] Showing all locks held in the system: [ 1188.990393][ T31] 5 locks held by kworker/0:0/9: [ 1188.995579][ T31] #0: ffff8880236d5548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1189.006471][ T31] #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1189.017857][ T31] #2: ffff888029937198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 1189.026726][ T31] #3: ffff888053a23198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1189.028359][ T5859] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1189.036009][ T31] #4: ffff888029214160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1189.053262][ T31] 1 lock held by khungtaskd/31: [ 1189.058436][ T31] #0: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1189.068985][ T31] 2 locks held by getty/5575: [ 1189.073780][ T31] #0: ffff88814d0f30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1189.085117][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1189.095395][ T31] 5 locks held by kworker/0:3/5859: [ 1189.100571][ T31] #0: ffff8880236d5548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1189.104520][ T5859] usb 6-1: device descriptor read/8, error -71 [ 1189.112204][ T31] #1: ffffc9000434fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1189.130941][ T31] #2: ffff888143f48198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 1189.139974][ T31] #3: ffff888029932518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 1189.149983][ T31] #4: ffff888029820968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 1189.159778][ T31] 3 locks held by kworker/u8:8/6089: [ 1189.165049][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1189.176387][ T31] #1: ffffc9000b687d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1189.187001][ T31] #2: ffffffff900e79c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1189.196157][ T31] 1 lock held by syz.6.3736/18433: [ 1189.201482][ T31] #0: ffff888029937198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x8b0 [ 1189.210585][ T31] 1 lock held by syz.5.4383/20542: [ 1189.216044][ T31] 2 locks held by syz.0.4385/20544: [ 1189.221366][ T31] #0: ffffffff900e79c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1189.230497][ T31] #1: ffffffff8e3cfcf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1189.240731][ T31] [ 1189.248062][ T31] ============================================= [ 1189.248062][ T31] [ 1189.250377][ T5859] usb usb6-port1: unable to enumerate USB device [ 1189.256618][ T31] NMI backtrace for cpu 1 [ 1189.256637][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1189.256656][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1189.256665][ T31] Call Trace: [ 1189.256671][ T31] [ 1189.256679][ T31] dump_stack_lvl+0x116/0x1f0 [ 1189.256706][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1189.256727][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1189.256753][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1189.256783][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1189.256805][ T31] watchdog+0xf3f/0x1170 [ 1189.256833][ T31] ? rcu_is_watching+0x12/0xc0 [ 1189.256877][ T31] ? __pfx_watchdog+0x10/0x10 [ 1189.256894][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1189.256912][ T31] ? __kthread_parkme+0x19e/0x250 [ 1189.256937][ T31] ? __pfx_watchdog+0x10/0x10 [ 1189.256956][ T31] kthread+0x3c5/0x780 [ 1189.256973][ T31] ? __pfx_kthread+0x10/0x10 [ 1189.256991][ T31] ? rcu_is_watching+0x12/0xc0 [ 1189.257010][ T31] ? __pfx_kthread+0x10/0x10 [ 1189.257026][ T31] ret_from_fork+0x675/0x7d0 [ 1189.257041][ T31] ? __pfx_kthread+0x10/0x10 [ 1189.257057][ T31] ret_from_fork_asm+0x1a/0x30 [ 1189.257092][ T31] [ 1189.257099][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1189.390885][ C0] NMI backtrace for cpu 0 [ 1189.390911][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1189.390929][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1189.390939][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1189.390973][ C0] Code: b7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 65 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1189.390988][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 1189.391005][ C0] RAX: 00000000044c3ccb RBX: 0000000000000000 RCX: ffffffff8b60c2a9 [ 1189.391015][ C0] RDX: 0000000000000000 RSI: ffffffff8da2c014 RDI: ffffffff8bf073c0 [ 1189.391023][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 1189.391030][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 1189.391038][ C0] R13: ffffffff8e097a00 R14: ffffffff908214d0 R15: 0000000000000000 [ 1189.391046][ C0] FS: 0000000000000000(0000) GS:ffff888124a05000(0000) knlGS:0000000000000000 [ 1189.391062][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1189.391071][ C0] CR2: 00007f313ddb42f8 CR3: 0000000062730000 CR4: 00000000003526f0 [ 1189.391079][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1189.391088][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1189.391097][ C0] Call Trace: [ 1189.391107][ C0] [ 1189.391113][ C0] default_idle+0x13/0x20 [ 1189.391140][ C0] default_idle_call+0x6c/0xb0 [ 1189.391155][ C0] do_idle+0x38d/0x500 [ 1189.391183][ C0] ? __pfx_do_idle+0x10/0x10 [ 1189.391201][ C0] ? do_idle+0x2e2/0x500 [ 1189.391220][ C0] cpu_startup_entry+0x4f/0x60 [ 1189.391241][ C0] rest_init+0x16b/0x2b0 [ 1189.391258][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1189.391287][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1189.391313][ C0] start_kernel+0x3f6/0x4e0 [ 1189.391335][ C0] x86_64_start_reservations+0x18/0x30 [ 1189.391355][ C0] x86_64_start_kernel+0x130/0x190 [ 1189.391373][ C0] common_startup_64+0x13e/0x148 [ 1189.391398][ C0] [ 1189.596327][ C0] vkms_vblank_simulate: vblank timer overrun