last executing test programs:

19m28.870312073s ago: executing program 1 (id=75):
ioperm(0x0, 0x3, 0x2)
quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x10001, 0x2, 0x4, 0x1000, &(0x7f0000003000/0x1000)=nil})
unshare(0x2a020400)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
preadv(r3, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0x62}], 0x1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x15, 0x0, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0)
pread64(r5, &(0x7f0000000200)=""/174, 0xae, 0x3b11)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'erspan0\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', r9, 0x29, 0x0, 0x5, 0x400, 0x8, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x760, 0x8731, 0x3, 0x6}})
io_setup(0x6, &(0x7f0000001380)=<r10=>0x0)
r11 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
io_submit(r10, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, r11}])

19m25.007485754s ago: executing program 1 (id=88):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff000)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x4604, &(0x7f00000005c0))

19m22.533647283s ago: executing program 1 (id=92):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x13, 0xc, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c4000000190001000000000000000000ff0200000000000000000000000000017f000001000000000000000000000000fffd0000", @ANYRES64=r1, @ANYBLOB="0000000000000000000000000000006545184b0000000000050000000000000000000000000000000a0000000000000000000000fcff00"/93], 0xc4}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0)
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x3)

19m19.667866617s ago: executing program 1 (id=97):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000080)={0x401, 0xfffc, 0x8000, 0x0, 0x104, 0x6})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e26, 0x3, 'dh\x00', 0x1, 0x7, 0x4b}, 0x2c)
r6 = io_uring_setup(0x4006900, &(0x7f0000000340)={0x0, 0x3942, 0x1000, 0x1})
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$tipc(r7, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r8=>r4, {0x4}}, './file0\x00'})
writev(r8, &(0x7f0000001a40)=[{&(0x7f0000000300)="57f88e5e7d7ca8d453b6b27acebe9bff98297bcd068e797adb3faf5b66b7fe568270302a6ee18b0c6ed2634584390d278cf42cee51e755", 0x37}, {&(0x7f0000000240)="53cf94cb0f5b6dbe7368c89d6fb3d293d10eacfd1d840727d493ecfb916f9963eee22a2ce2cad38d734fe9e65386e48274b309557290a901", 0x38}, {&(0x7f00000008c0)="cb64bbeb37b251baecf0560a5fc387eecce428aba30ce0cab626c93ea525deb62534a89c0318a56989a98bbdab3ddfa0143c92033c6564021eb2450ab86d1c1e02c70d20ad671123ef69dda6d94160d8ca57add2149f2d8b2fe1ea52e5a0104b59e50fefded1bab03ac49575895910b30c323c7fedcf4a1f54105ca544b98ac63fd7a358bf346bfdc45565f36d0b547a2e588223b580", 0x96}, {&(0x7f0000000a40)="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", 0xbda}], 0x4)
close_range(r6, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@broadcast, 0x4e21, 0x10000, 0xc24, 0x0, 0xfffffffb}}, 0x44)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
io_uring_setup(0xf02, &(0x7f00000008c0)={0x0, 0xd9d8, 0x1000, 0x0, 0xc7})
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000000)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
fcntl$notify(r2, 0x402, 0xc7cbeac8c764b099)

19m17.089104344s ago: executing program 1 (id=106):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000002140)=0x4)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @rand_addr=0x64010101}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @broadcast}, 0xa4, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000000)='netdevsim0\x00', 0x9, 0x916, 0x3})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
socket$unix(0x1, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8})
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', r3}, 0x18)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94)
clock_gettime(0x0, &(0x7f0000000100)={<r4=>0x0, <r5=>0x0})
clock_gettime(0x0, &(0x7f0000000180)={<r6=>0x0, <r7=>0x0})
sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x0, 0x2b8, 0x5, {r4, r5/1000+60000}, {r6, r7/1000+10000}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "e14542d90a3192b1"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)
sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000008008"], 0x80}}, 0x0)
close(r2)

19m15.227840459s ago: executing program 1 (id=109):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d3, &(0x7f0000000100))
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100))
socket$inet_mptcp(0x2, 0x1, 0x106)

19m0.001910462s ago: executing program 32 (id=109):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d3, &(0x7f0000000100))
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100))
socket$inet_mptcp(0x2, 0x1, 0x106)

18m31.320410964s ago: executing program 4 (id=198):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x5c, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_setup(0x18d6, 0x0, 0x0, &(0x7f0000ffe000))
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x212800, 0x0)
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000240)={0x4, 0x1, 0x47, 0x6, 0x10, "11293eeb48c4c245"})
r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000000)=0x3)

18m25.00181373s ago: executing program 4 (id=209):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
kexec_load(0xf5, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000d00)={[&(0x7f00000002c0)='(N,\x04\xca\xf3\xbf\x95\x92\xd9\x86\x1e\xa9\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\x02\x06']})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[], 0x78)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000380)={0xa, 0x4e21, 0x10001, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffff8}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@dstopts={{0xc0, 0x29, 0x37, {0x2f, 0x14, '\x00', [@generic={0x0, 0x91, "9dc974cbef4b6662ffc9509f9317a48c9193caa51ec7121ae35e533480a255cdf03d52dcfc51671311ab5dd7626fb4ba0e58853aa1f40247cffe5d302a607d1f7adfa4cef0c05216a802c24f23dca6ad6c7f38e08dc5b529aafd9d4debe034d100239f271f042fe7bcd1aeeb1faef83005bbfc91fa16448c18701e4a51c9a285241df03e71ad031b3edf6578a41318ad05"}, @hao={0xc9, 0x10, @empty}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x80000001}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0xf0}}, {{&(0x7f00000006c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000700)="6d170ad392ab258227fe37c39cdcbabebf6c255fa4d3d9a8c99bf1f4d57be4fcc426d57c78467296a7d25a43aab984d8afa769da06a25c60ad29cf607d9761f120d7bfa66a06012b71de84bedee3992fb94adfcd39ad0f93d027942e3bb0569f69ccdb43e5917075e1513582d827c411", 0x70}, {&(0x7f0000000780)="1f6fccced4dd40d23efe85efb3a1d4303d78fd3d38cdf3475af2dbb4ad67e6f958fb77bb1087cb0dca89bc82ea04bc13acb7a91e5ac958bc4113ec4e2ec09fff1ae889b2646577fdcfdd8775082ec1ed45dfdf3a517444df9cadbacc95047b9b78a1f1c662742bfed571b93c8c71e4bbaeb8d70c25027563e65c9bd44843b5de0456f6e34ae5add6341baef0af26125ca8ced8faa63b8f2bffafca157b88c09a0599ebfa96195b0a6ab96fd1791a5a7e17c5f9a5c2444033ea1e738fc7a230d5d8b16bdff9b86df1c253aadea42979e95caace", 0xd3}, {&(0x7f0000000880)="b4b1c175d627a1118a2e2785d7a5e198b8095bcab650ca151ece8b5de91ac74cb6ebf07e0953e8103a7efd91b11772b1d217729d0947244d1e70b994c7c0930db66a6c99acbde131737b3d87383d0e43f403c8", 0x53}, {&(0x7f0000000900)="fd2f866c8bf5c4ec8700d2326fca530d227e1b609f3d4b73c4", 0x19}, {&(0x7f0000000940)="24723f83af63f5cc0a26dc8f61b7df11e088e54c6b9e76a853376575f36846266cac17fdbf65f8baf281969552347e157e747c8cb04d8b681b370fecb2c82a8c905a39213424e9af0579960a6ae9dcbdf0ec5cdcced40b8dae89d58ba051d4b7181fe95fcd52631f2ab6dc3808c65e26a998d54a1d2d722b1d8bb02b33b5943b5f093676a1348d3aa84b0be8e03010185654cb0be7832a2f2d01afa2d222aef671a04794b91b5ec0d3ab59ccdfd07ca63885750f363a7e725f3692e3623eaac06b6305170ee6b6f644", 0xc9}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bcdd17e803fa9edeb8f119e5438964aeecc7b2e2acdb0cd4480f53a6380457bcaf94016e2020f277ee5a5e4631aec05515ae1443fee9840b3b82826499d9fabacf33f6dd96d03c86209cdceea6907033693bc33901205a7fe3b9bdf332ae921d6160ff08d2005f8049c4fa", 0x6b}], 0x7}}, {{&(0x7f0000000b80)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, 0x0}}], 0x3, 0x805)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004004)
iopl(0x3)
r2 = getpid()
wait4(r2, 0x0, 0x40000000, 0x0)
r3 = syz_open_dev$video4linux(0x0, 0xc99, 0x101001)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x2, 0x10, 0x1014, 0x0, 0x6, 0x0, 0x3, 0xdd2fcb245114ab72}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000003e000000", 0xfe60)
r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xa001)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x200081, 0x5})

18m22.318073953s ago: executing program 4 (id=214):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'sit0\x00', 0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000680010002cbd7000ffdbdf25000003002c00000006000700030000000c000880050005000a0000000c000200000000000f", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x2400c8c1}, 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
socket$inet6_tcp(0xa, 0x1, 0x0)

18m21.138205083s ago: executing program 4 (id=215):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0)
syz_pidfd_open(0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netlink\x00')
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x41, 0x0, "d86adaa9ce82e10f6177fa999685c43d5042ddd6740fb249181d73dab87ea2fa8ee95f3f70c56ff9ef31c4fc281a67440ff0e38e6ba0997b1028741368abc8cd7c8d9d9ae736ede0eb4ff476a0469d17"}, 0xd8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8971, &(0x7f0000000040)={'netdevsim0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0xffffffff}})
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
syz_open_dev$amidi(&(0x7f00000001c0), 0x5, 0x20c001)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r2, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)
lstat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000440))

18m19.802767357s ago: executing program 4 (id=218):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8800, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="0d779affffff00", @ANYRESHEX, @ANYBLOB=',dfltuid=', @ANYRESHEX=r2, @ANYBLOB=',access=user,cache=none,access=any,dont_measure,smackfsfloor=/dev/vcs\x00,fsname=/dev/vcs\x00,\x00'])

18m17.965784274s ago: executing program 4 (id=225):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000080)={0x401, 0xfffc, 0x8000, 0x0, 0x104, 0x6})
sched_setscheduler(r1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e26, 0x3, 'dh\x00', 0x1, 0x7, 0x4b}, 0x2c)
r6 = io_uring_setup(0x4006900, &(0x7f0000000340)={0x0, 0x3942, 0x1000, 0x1})
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$tipc(r7, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r8=>r4, {0x4}}, './file0\x00'})
writev(r8, &(0x7f0000001a40)=[{&(0x7f0000000300)="57f88e5e7d7ca8d453b6b27acebe9bff98297bcd068e797adb3faf5b66b7fe568270302a6ee18b0c6ed2634584390d278cf42cee51e755", 0x37}, {&(0x7f0000000240)="53cf94cb0f5b6dbe7368c89d6fb3d293d10eacfd1d840727d493ecfb916f9963eee22a2ce2cad38d734fe9e65386e48274b309557290a901", 0x38}, {&(0x7f00000008c0)="cb64bbeb37b251baecf0560a5fc387eecce428aba30ce0cab626c93ea525deb62534a89c0318a56989a98bbdab3ddfa0143c92033c6564021eb2450ab86d1c1e02c70d20ad671123ef69dda6d94160d8ca57add2149f2d8b2fe1ea52e5a0104b59e50fefded1bab03ac49575895910b30c323c7fedcf4a1f54105ca544b98ac63fd7a358bf346bfdc45565f36d0b547a2e588223b580", 0x96}, {&(0x7f0000000a40)="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", 0xbda}], 0x4)
close_range(r6, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@broadcast, 0x4e21, 0x10000, 0xc24, 0x0, 0xfffffffb}}, 0x44)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
io_uring_setup(0xf02, &(0x7f00000008c0)={0x0, 0xd9d8, 0x1000, 0x0, 0xc7})
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000000)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
fcntl$notify(r2, 0x402, 0xc7cbeac8c764b099)

18m2.707937981s ago: executing program 33 (id=225):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000080)={0x401, 0xfffc, 0x8000, 0x0, 0x104, 0x6})
sched_setscheduler(r1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e26, 0x3, 'dh\x00', 0x1, 0x7, 0x4b}, 0x2c)
r6 = io_uring_setup(0x4006900, &(0x7f0000000340)={0x0, 0x3942, 0x1000, 0x1})
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$tipc(r7, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r8=>r4, {0x4}}, './file0\x00'})
writev(r8, &(0x7f0000001a40)=[{&(0x7f0000000300)="57f88e5e7d7ca8d453b6b27acebe9bff98297bcd068e797adb3faf5b66b7fe568270302a6ee18b0c6ed2634584390d278cf42cee51e755", 0x37}, {&(0x7f0000000240)="53cf94cb0f5b6dbe7368c89d6fb3d293d10eacfd1d840727d493ecfb916f9963eee22a2ce2cad38d734fe9e65386e48274b309557290a901", 0x38}, {&(0x7f00000008c0)="cb64bbeb37b251baecf0560a5fc387eecce428aba30ce0cab626c93ea525deb62534a89c0318a56989a98bbdab3ddfa0143c92033c6564021eb2450ab86d1c1e02c70d20ad671123ef69dda6d94160d8ca57add2149f2d8b2fe1ea52e5a0104b59e50fefded1bab03ac49575895910b30c323c7fedcf4a1f54105ca544b98ac63fd7a358bf346bfdc45565f36d0b547a2e588223b580", 0x96}, {&(0x7f0000000a40)="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", 0xbda}], 0x4)
close_range(r6, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@broadcast, 0x4e21, 0x10000, 0xc24, 0x0, 0xfffffffb}}, 0x44)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
io_uring_setup(0xf02, &(0x7f00000008c0)={0x0, 0xd9d8, 0x1000, 0x0, 0xc7})
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000000)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
fcntl$notify(r2, 0x402, 0xc7cbeac8c764b099)

2m33.149380221s ago: executing program 6 (id=2712):
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)

2m32.835710941s ago: executing program 6 (id=2713):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2)
r0 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x9d4f187d55e75324, @empty, 0x4e24, 0x0, 'lc\x00', 0x1c, 0x2, 0x4a}, 0x2c)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, <r4=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x5, &(0x7f00000003c0)=@raw=[@call={0x85, 0x0, 0x0, 0x62}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @generic={0x5, 0x4, 0x2, 0xe, 0x7618}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000400)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0xd, 0x2, 0x94d3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], 0x0, 0x10, 0x6, @void, @value}, 0x94)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0)
r6 = fanotify_init(0x200, 0x0)
fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

2m31.81812144s ago: executing program 6 (id=2716):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000001600)={0x0, 0xea60}, 0x10)
getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
dup3(r1, r0, 0x80000)

2m28.393165456s ago: executing program 6 (id=2723):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x888)
sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0xfffffffc)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)

2m26.330334337s ago: executing program 6 (id=2729):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, 0x0, &(0x7f0000001100))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12)
write$uinput_user_dev(r4, &(0x7f0000000e80)={'syz0\x00', {0x3f, 0x9, 0x8, 0xe}, 0x200012, [0x3, 0x8, 0x76f, 0x3, 0x8001, 0x5, 0x63e, 0xfffffffd, 0x3, 0xc, 0x9, 0x1, 0x3, 0x9, 0x9, 0xb0c, 0x8, 0xa3d0, 0x7, 0x7b, 0x5, 0xbc2f, 0x4, 0x80000001, 0xfffffffe, 0x3, 0xa, 0xf, 0x8, 0xd2f1, 0x7, 0xffffffff, 0x3, 0xe, 0x3, 0x0, 0x1ff, 0x47f2, 0x80000000, 0x4, 0x0, 0x7, 0x5, 0x29e, 0x2, 0x2, 0x9, 0xdf26, 0x1, 0x40, 0x4, 0x8, 0x80, 0x3, 0x9, 0x1a, 0x3, 0x5, 0x5, 0x9, 0x8000, 0x80000000, 0xcd, 0xfff], [0x6, 0x227, 0x9, 0x7, 0x8, 0x5, 0x81, 0x45, 0xc322, 0x6000, 0x7, 0x2, 0xf0, 0x1, 0x90000, 0x798, 0x7ff, 0x7, 0xa, 0xb, 0x9e, 0xd1a, 0x0, 0x1, 0x2, 0xa, 0x0, 0x5, 0x2, 0x101, 0xfff, 0xfff, 0x1, 0x401, 0x5, 0x0, 0x1000, 0x5, 0x10, 0x4, 0x7fffffff, 0x3ea1, 0xfffffffa, 0x2, 0xfffffff9, 0x1, 0x6, 0x400, 0x2243ccfc, 0x8455, 0x0, 0xb, 0xffffffa8, 0xdc9b, 0x0, 0x4, 0xff, 0x5, 0x1, 0x4, 0x2, 0xd5c, 0x6, 0x6], [0x1, 0x7fff, 0x1, 0x6b, 0x9, 0x3, 0x8, 0x80000000, 0x2, 0x5, 0x6, 0x0, 0x4, 0x40, 0x7, 0x2, 0x6, 0x8, 0xe2, 0x80000001, 0x7fffffff, 0x8, 0x401, 0x4, 0xc7, 0x4, 0x2, 0x6, 0x2, 0x648, 0x1, 0x10001, 0x4f68, 0x5, 0x40, 0x1, 0xc, 0x3, 0xffff, 0x7, 0x9, 0x1, 0xc0c, 0xcd, 0x9, 0x2, 0x401, 0x0, 0xd, 0x9, 0x0, 0x10, 0x7ff, 0x0, 0x7, 0x8a, 0x5, 0x2, 0x3, 0x2, 0x5, 0x0, 0x3, 0x3], [0xc51, 0x2, 0x8, 0x1, 0x9, 0x3, 0x7fff, 0x10000, 0x1, 0x6, 0x200, 0x7, 0x5, 0x0, 0x9, 0x8, 0x3, 0x10, 0x6, 0xd2, 0x8, 0x1ff, 0x400, 0x4, 0xb, 0x9, 0xfbd, 0x9, 0x0, 0x2, 0x1, 0xed, 0x6, 0x2, 0x5, 0xfff, 0xe79, 0x20c, 0xe0, 0x2, 0x3ff, 0xfffffffe, 0x9, 0xa, 0x100, 0x9, 0x3ff, 0x8e6, 0x3, 0x200, 0x9, 0x2, 0x3, 0x0, 0xb7, 0xc, 0x0, 0x9, 0x4, 0x4, 0x3, 0xcd87, 0x8001, 0x9]}, 0x45c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c000a0001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2], 0xb4}}, 0x40050)

2m25.153107172s ago: executing program 6 (id=2730):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x128200, 0x0)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0400000007000004040000000400000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000000000000000b6000000000000030000"], 0x48)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000001c0)={{{0x5, 0x1}}, 0x37, 0x9, &(0x7f0000000100)="cfe55479d3e35514084ad9803e15c5c21729ab3876d9e96793fbf3923baf06a11c765802e713473dd64c499e8ba0aaa498d4a581a9b759"})
accept(r2, 0x0, 0x0)
r3 = fcntl$getown(r0, 0x9)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0xe, 0x0, 0x0, @remote}, 0x10)
munlockall()
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0xa050, 0x10000, 0x0, 0xeaf, r3})
fsmount(0xffffffffffffffff, 0x1, 0x70)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = socket(0x10, 0x80003, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x90041, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)

2m8.898218332s ago: executing program 34 (id=2730):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x128200, 0x0)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0400000007000004040000000400000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000000000000000b6000000000000030000"], 0x48)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000001c0)={{{0x5, 0x1}}, 0x37, 0x9, &(0x7f0000000100)="cfe55479d3e35514084ad9803e15c5c21729ab3876d9e96793fbf3923baf06a11c765802e713473dd64c499e8ba0aaa498d4a581a9b759"})
accept(r2, 0x0, 0x0)
r3 = fcntl$getown(r0, 0x9)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0xe, 0x0, 0x0, @remote}, 0x10)
munlockall()
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0xa050, 0x10000, 0x0, 0xeaf, r3})
fsmount(0xffffffffffffffff, 0x1, 0x70)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = socket(0x10, 0x80003, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x90041, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)

45.866001049s ago: executing program 0 (id=2952):
r0 = io_uring_setup(0x2471, &(0x7f0000000280)={0x0, 0x4170, 0x1000, 0x0, 0x2e6})
io_uring_setup(0x2a5a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = msgget$private(0x0, 0x123)
msgrcv(r2, 0x0, 0x0, 0x3, 0x3000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x20}, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc3dc1bff80c6c3adc10d4d5e80b7e8ba831803a75ec985af4d6a2cb5b55253b53fa002cc116305a8a0f9c5a1f153dd29f879ae306e71979115e31f29082cb9edf60f9d3baa08f6a7b9f7653a7b4287abaace2e084e83f8dc8f69af6f2234fbf788ada52e1b54382913e45ba18c2e086f48011edf1c34a94"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
msgsnd(r2, 0x0, 0x0, 0x800)
r4 = syz_open_dev$sg(0x0, 0x6, 0x41c005)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xb)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r7}, 0x18)
r8 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0)
write$binfmt_script(r8, &(0x7f00000001c0)={'#! ', './file0', [{0x20, 'RXbl'}]}, 0xfffffd81)
ioctl$SG_IO(r4, 0x2285, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r9 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x21, 0x0, 0x1)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)

44.327420323s ago: executing program 0 (id=2954):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38)

43.165116322s ago: executing program 0 (id=2957):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x888)
sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0xfffffffc)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa08000600"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)

41.902922649s ago: executing program 0 (id=2960):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x8000000000000}, 0x18)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$packet(r1, &(0x7f0000000080)={0x11, 0x9, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
syz_io_uring_submit(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x1f00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc}, {0x2}, {0xa}}}, 0x24}}, 0x0)

40.284478233s ago: executing program 0 (id=2963):
openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0)

39.950711707s ago: executing program 0 (id=2965):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/127, 0x7f}], 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
io_uring_enter(0xffffffffffffffff, 0xce3, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0xfffffffffffffffe}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x22c000, 0x800}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

13.893727932s ago: executing program 2 (id=3009):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149000, 0x0)
syz_io_uring_setup(0x1443, &(0x7f0000000480)={0x0, 0x1474, 0x8, 0x3}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xd6, 0x0})
r3 = io_uring_setup(0xefe, &(0x7f0000000380)={0x0, 0xd9d8, 0x8})
io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1)
io_uring_enter(r3, 0x57bd, 0xc23, 0x28, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff})
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000300)=""/106, &(0x7f0000000280)=0x6a)
fgetxattr(r8, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000080)=""/237, 0xed)

12.461355453s ago: executing program 3 (id=3012):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000840)={0xb0, 0xffffffda, 0x3, [{{0x4, 0x0, 0x8000000000000000, 0x4, 0x0, 0xff, {0x1, 0x6, 0x5, 0x9c, 0x81, 0x7e, 0x0, 0x7, 0x46e, 0x8000, 0x8c50, 0x0, 0x0, 0x4, 0x81}}, {0x0, 0x2, 0x1, 0x7, '\x00'}}]}, 0xb0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002a80)=<r4=>0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002ac0)={{{@in6=@private2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000002bc0)=0xe8)
r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x8)
close(r6)
read$FUSE(r6, &(0x7f000000c400)={0x2020, 0x0, 0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
syz_fuse_handle_req(r6, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x400, {0x410000006, 0x50, 0x0, {0x0, 0x4000000, 0x10000000, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x8001, 0x0, r7, r8, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = getpgid(0xffffffffffffffff)
fstat(r2, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
statx(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x6000, 0x4, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
r12 = getpgid(0x0)
r13 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r14=>0x0}, &(0x7f0000cab000)=0x32)
setresuid(0x0, r14, 0x0)
fstat(r2, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
read$FUSE(0xffffffffffffffff, &(0x7f0000002e40)={0x2020, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}, 0x2020)
r17 = accept4$llc(r2, &(0x7f0000004e80)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000004ec0)=0x10, 0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
r19 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r19, 0x1, r18, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_MOD(r19, 0x3, r18, &(0x7f0000000100)={0x2})
epoll_ctl$EPOLL_CTL_MOD(r19, 0x3, r18, &(0x7f0000000140)={0x20000004})
epoll_pwait(r19, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="3d89d3132f6db5619c55d223c46ff33b4b7b8a0573eef771fc14525289e5c8d48ec8c9fe6e8d18d66af88a698c458b3a58353be205383e8aa19ecab4c4b3cbd1e4581b7da55dba24e26dad330ce77faa2a3c6ab8a7202391f69ad030fb5288bbd09d919ed7754453aedda1fa04383415d37030856ac53d110bfc8deaa0c23986ae4186f6e113825805a4a0da53", 0x8d}, {&(0x7f0000000040)="fddcb85da156c65c83af3cb5d5", 0xd}, {&(0x7f0000000300)="48c9839405541e0bcea1c77d9c6053b75b5855855d3e13c63b4a2854fa0802c99dc88dd7daa7b32c0933291bf84e33009a2a8119240bbe96c525aea0e03abc1e50f0966942733ff32c7a793594708c7b96edefc72d1d09e6a7481c60c55dbbfd601d3e4235324a3601eaae16ef6c9bde992074ad198cd61b6672e1dff64e6bd1780b1fb630df5290583f61f9974618fe81ee058c7bed35549c07e602a2", 0x9d}, {&(0x7f00000003c0)="a348260534ba2f5e598124407111ce3dfe36390c8c8c1e56b37506b0cbf7a11f68f2c6e0e0cdc05e1a0ec03f6e171ef9edf4ae049ff8f31372a5a3c6f325ff4c6799b61d372a65df548c83028ecf55a575ab54b6a7c0ae6ac942ae0d90701788f032c01400058e288d59cf0922145a732004a27e2bc773d17c060f774563eb810bed2b54fdb083bdb1da6ada0e67dac0c1e12dea739fe9b5a6d3187ed7cada895d6c8eb20618c0c9c690b0b1911bd4a382f281ba6d6e72debfafefd94816b7f9783058aa73f989f764dfcd2897f5e9483e31bc967a9acfb0291cc6", 0xdb}, {&(0x7f00000000c0)="849f6e3e047c3ee0e364be27dbe0c46b16", 0x11}, {&(0x7f0000000200)="1e5109294565be7a285b37b89a13213eb7d42c0844309333a714b39e81a1114f54e86b80636b0512af9c963e9f0bc6d149687941eebaac8699ca20be32ec9af3f839ced83ebc726d604a2537ebacc1b7f31c91b8ce5e0cfc", 0x58}, {&(0x7f00000004c0)="7f5f5782a27cbb5576b5067e", 0xc}], 0x7, &(0x7f00000006c0)=[@cred={{0x1c}}], 0x20, 0x4}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000700)="a4ae6ceab3269157", 0x8}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="fc9076bfb1f3c113fa4a304dc67e857969af655e084ed7126444ced5d319d7faa4bc48cb147885052532812fb9075da3592a08303fc7bca763aa63324bb4c20f8724588582ad1356687a5cb8f9018db6b32cc2cf1bd9b680accdab840e8adca4063afea51a70add9ac784cec187663d78bec3201e1b4e3396c33cf106c2989779d4e5bf221021386037c63895de542d1394148984737cc0b69332aa002b510ba185918b8a28446aca7dd5d9da723f3ad7b3a9267fbcb77e29395bd6a91a505b6ce7c0fd1726a6c8429a36ad97bc00b32a3c7113f5d9bfd3653929621d1f38353103a", 0xe2}, {&(0x7f0000001840)="4e21f86307af4ffb8c8610c5", 0xc}, {&(0x7f0000001880)="03e6a3a3b42149851e23e5efb26c05f917ec922b8c9dd9209fb76381a3306216645f3f41ca22bb2d34a0f00c2982fbba3c7f977ae9e837d0f0dbf260b84239c54fb0ded437c06d202d52f2a10b1a6773122e829c243c024abcc78504bb7e522b68eee95b1d8f21e12a84ba3e01582fc3548fc714424cc20dea5adfc17d6bfe78631bab159ada9a99d87c8513cd22ad55ce001a12157c9b593bcd633c96497c9fdda28675604e3fc48e95", 0xaa}, {&(0x7f0000001940)="ad62b6b79b50d98fa167f295e5942f67ddefedf3c4d3df563ab2be4103ee75f15608c9976b629c3afd4a5ee07a62ffeab6ffc84624735337d4138dcfcaefce51798ceed02d2aa59e787396783c02042753f85f5ac05c71529c7bff707697566300c1d8caca3cfac99c2c28dfba4ce42edeacc03635b9a8b97c4e8aad0bfe6a0ccbeba1fa5c086422ef90451880611ead14ea34ba3398cfd0c8632fdea52c9aa8718c6832535c975ca4b1", 0xaa}, {&(0x7f0000001a00)="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", 0x1000}], 0x7, &(0x7f0000004f00)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r1, r2, r17]}}, @rights={{0x18, 0x1, 0x1, [r1, r19]}}], 0xb8, 0x20008001}}], 0x2, 0x0)

11.577254262s ago: executing program 2 (id=3013):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000006, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000380)={0x0, 0x0, {0x80000, 0x8, 0x300c, 0x4, 0xc, 0x1, 0x5, 0x5}})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x5, @loopback, 0x61}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r0, {r0}}, './file0\x00'})
getsockname$l2tp6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000300)=0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffb}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0x40004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000d26a871dba07e83f34c6e27805b6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0xd0}}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, &(0x7f0000000200), 0x0)
socketpair(0x1a, 0x0, 0x6, 0x0)

11.40887852s ago: executing program 3 (id=3014):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, 0x0, &(0x7f0000001100))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12)
write$uinput_user_dev(r4, &(0x7f0000000e80)={'syz0\x00', {0x3f, 0x9, 0x8, 0xe}, 0x200012, [0x3, 0x8, 0x76f, 0x3, 0x8001, 0x5, 0x63e, 0xfffffffd, 0x3, 0xc, 0x9, 0x1, 0x3, 0x9, 0x9, 0xb0c, 0x8, 0xa3d0, 0x7, 0x7b, 0x5, 0xbc2f, 0x4, 0x80000001, 0xfffffffe, 0x3, 0xa, 0xf, 0x8, 0xd2f1, 0x7, 0xffffffff, 0x3, 0xe, 0x3, 0x0, 0x1ff, 0x47f2, 0x80000000, 0x4, 0x0, 0x7, 0x5, 0x29e, 0x2, 0x2, 0x9, 0xdf26, 0x1, 0x40, 0x4, 0x8, 0x80, 0x3, 0x9, 0x1a, 0x3, 0x5, 0x5, 0x9, 0x8000, 0x80000000, 0xcd, 0xfff], [0x6, 0x227, 0x9, 0x7, 0x8, 0x5, 0x81, 0x45, 0xc322, 0x6000, 0x7, 0x2, 0xf0, 0x1, 0x90000, 0x798, 0x7ff, 0x7, 0xa, 0xb, 0x9e, 0xd1a, 0x0, 0x1, 0x2, 0xa, 0x0, 0x5, 0x2, 0x101, 0xfff, 0xfff, 0x1, 0x401, 0x5, 0x0, 0x1000, 0x5, 0x10, 0x4, 0x7fffffff, 0x3ea1, 0xfffffffa, 0x2, 0xfffffff9, 0x1, 0x6, 0x400, 0x2243ccfc, 0x8455, 0x0, 0xb, 0xffffffa8, 0xdc9b, 0x0, 0x4, 0xff, 0x5, 0x1, 0x4, 0x2, 0xd5c, 0x6, 0x6], [0x1, 0x7fff, 0x1, 0x6b, 0x9, 0x3, 0x8, 0x80000000, 0x2, 0x5, 0x6, 0x0, 0x4, 0x40, 0x7, 0x2, 0x6, 0x8, 0xe2, 0x80000001, 0x7fffffff, 0x8, 0x401, 0x4, 0xc7, 0x4, 0x2, 0x6, 0x2, 0x648, 0x1, 0x10001, 0x4f68, 0x5, 0x40, 0x1, 0xc, 0x3, 0xffff, 0x7, 0x9, 0x1, 0xc0c, 0xcd, 0x9, 0x2, 0x401, 0x0, 0xd, 0x9, 0x0, 0x10, 0x7ff, 0x0, 0x7, 0x8a, 0x5, 0x2, 0x3, 0x2, 0x5, 0x0, 0x3, 0x3], [0xc51, 0x2, 0x8, 0x1, 0x9, 0x3, 0x7fff, 0x10000, 0x1, 0x6, 0x200, 0x7, 0x5, 0x0, 0x9, 0x8, 0x3, 0x10, 0x6, 0xd2, 0x8, 0x1ff, 0x400, 0x4, 0xb, 0x9, 0xfbd, 0x9, 0x0, 0x2, 0x1, 0xed, 0x6, 0x2, 0x5, 0xfff, 0xe79, 0x20c, 0xe0, 0x2, 0x3ff, 0xfffffffe, 0x9, 0xa, 0x100, 0x9, 0x3ff, 0x8e6, 0x3, 0x200, 0x9, 0x2, 0x3, 0x0, 0xb7, 0xc, 0x0, 0x9, 0x4, 0x4, 0x3, 0xcd87, 0x8001, 0x9]}, 0x45c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c000a0001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2], 0xb4}}, 0x40050)

10.344504967s ago: executing program 2 (id=3015):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38)

9.949025843s ago: executing program 5 (id=3016):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x27, 0x25, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0}, 0x40)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
creat(&(0x7f0000000340)='./file1\x00', 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$rxrpc(0x21, 0x2, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x100004, 0x5, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100))
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYRES16=r4]) (fail_nth: 1)

9.765601344s ago: executing program 2 (id=3017):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
mount$nfs(0x0, &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0)

9.390498433s ago: executing program 2 (id=3018):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40004)
socket$nl_generic(0x10, 0x3, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000040), 0x0, 0x8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', 0x0})
syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x201)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680), 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f00000006c0), 0x0}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0b000000ff000000020000000900000001000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES16=r2, @ANYBLOB="00000000000000000099ce00000000000000000000000000000000005f1f00e668eefcbd998a37ae01131eb58616cc7eb63937c93782d59189ddbaa62da1e874c5d9a812e0f458c4223592df420bd8e58d62667420bd8a80"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r3, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2)
r5 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3)
ftruncate(r5, 0xffff)
fcntl$addseals(r5, 0x409, 0x7)
r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r0, 0x0, 0xfffffffff0000000, 0x1000})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x5)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)

8.062176835s ago: executing program 7 (id=3021):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149000, 0x0)
syz_io_uring_setup(0x1443, &(0x7f0000000480)={0x0, 0x1474, 0x8, 0x3}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xd6, 0x0})
r3 = io_uring_setup(0xefe, &(0x7f0000000380)={0x0, 0xd9d8, 0x8})
io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1)
io_uring_enter(r3, 0x57bd, 0xc23, 0x28, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff})
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000300)=""/106, &(0x7f0000000280)=0x6a)
fgetxattr(r8, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000080)=""/237, 0xed)

6.863154519s ago: executing program 7 (id=3022):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f000033d000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r5 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
kcmp(r3, r3, 0x2, r5, 0xffffffffffffffff)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000009c0), 0x183106, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0xffff, {"2c8b42d5bb6c7a3f461813a3c240739c"}, 0x80000000000, 0x2, 0x8000000000000001}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}}}, 0x118)

5.731009314s ago: executing program 7 (id=3023):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38)

5.179656127s ago: executing program 5 (id=3024):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0}) (async)
r3 = getpid()
sched_setscheduler(r3, 0x0, &(0x7f0000000140)=0x7) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000b20c0000000000000000000007000000", @ANYRES32=r2, @ANYBLOB="10000180040004800800010000400300"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
write$P9_RREMOVE(r4, &(0x7f0000000180)={0x7, 0x7b, 0x2}, 0x7)

4.931270527s ago: executing program 7 (id=3025):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e27}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$ttys(0xc, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='smbus_result\x00', r1, 0x0, 0x5}, 0x18)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000d80)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x6, @string={0x6, 0x3, "9fdc678c"}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x4, @string={0x4, 0x3, "e8af"}}, 0x0, 0x0}, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)

4.922130402s ago: executing program 3 (id=3026):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38)

4.627886111s ago: executing program 5 (id=3027):
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
r4 = msgget(0x2, 0x3a8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, 0x0, 0x0)
msgrcv(r4, 0x0, 0x0, 0x3, 0x1000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
msgctl$IPC_RMID(r4, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
shutdown(r5, 0x0)
listen(r6, 0x9)

4.107332752s ago: executing program 2 (id=3028):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'macvlan1\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r1)
socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x22020600)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'dvmrp0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
read$msr(0xffffffffffffffff, &(0x7f0000000140)=""/77, 0x4d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xa280000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
epoll_create1(0x80000)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x2)
syz_usbip_server_init(0x5)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)

3.909094018s ago: executing program 5 (id=3029):
iopl(0x3)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)

3.856796963s ago: executing program 3 (id=3030):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b00)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x358, 0xffff8880b880e080)

3.634901412s ago: executing program 5 (id=3031):
r0 = io_uring_setup(0x2471, &(0x7f0000000280)={0x0, 0x4170, 0x1000, 0x0, 0x2e6})
io_uring_setup(0x2a5a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = msgget$private(0x0, 0x123)
msgrcv(r2, 0x0, 0x0, 0x3, 0x3000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x20}, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc3dc1bff80c6c3adc10d4d5e80b7e8ba831803a75ec985af4d6a2cb5b55253b53fa002cc116305a8a0f9c5a1f153dd29f879ae306e71979115e31f29082cb9edf60f9d3baa08f6a7b9f7653a7b4287abaace2e084e83f8dc8f69af6f2234fbf788ada52e1b54382913e45ba18c2e086f48011edf1c34a94"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
msgsnd(r2, 0x0, 0x0, 0x800)
r4 = syz_open_dev$sg(0x0, 0x6, 0x41c005)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xb)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r6}, 0x18)
r7 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0)
write$binfmt_script(r7, &(0x7f00000001c0)={'#! ', './file0', [{0x20, 'RXbl'}]}, 0xfffffd81)
setpriority(0x2, 0xff, 0x0)
ioctl$SG_IO(r4, 0x2285, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r8 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x21, 0x0, 0x1)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)

2.992777426s ago: executing program 3 (id=3032):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f000033d000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r5 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
kcmp(r3, r3, 0x2, r5, 0xffffffffffffffff)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000009c0), 0x183106, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0xffff, {"2c8b42d5bb6c7a3f461813a3c240739c"}, 0x80000000000, 0x2, 0x8000000000000001}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}}}, 0x118)

2.191212142s ago: executing program 5 (id=3033):
r0 = io_uring_setup(0x2471, &(0x7f0000000280)={0x0, 0x4170, 0x1000, 0x0, 0x2e6})
io_uring_setup(0x2a5a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = msgget$private(0x0, 0x123)
msgrcv(r2, 0x0, 0x0, 0x3, 0x3000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x20}, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc3dc1bff80c6c3adc10d4d5e80b7e8ba831803a75ec985af4d6a2cb5b55253b53fa002cc116305a8a0f9c5a1f153dd29f879ae306e71979115e31f29082cb9edf60f9d3baa08f6a7b9f7653a7b4287abaace2e084e83f8dc8f69af6f2234fbf788ada52e1b54382913e45ba18c2e086f48011edf1c34a94"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
msgsnd(r2, 0x0, 0x0, 0x800)
r4 = syz_open_dev$sg(0x0, 0x6, 0x41c005)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xb)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18)
r5 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0)
write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', './file0', [{0x20, 'RXbl'}]}, 0xfffffd81)
setpriority(0x2, 0xff, 0x0)
ioctl$SG_IO(r4, 0x2285, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r6 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, 0x0, 0x1)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)

1.280172179s ago: executing program 3 (id=3034):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f000033d000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)='~', 0x1}], 0x1}, 0x48000)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="5c00000014006b03000000d86e6c1d0002845da60600000000000000e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000040)

1.279584709s ago: executing program 7 (id=3035):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = fsopen(&(0x7f00000000c0)='cramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b00)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x358, 0x7fffffffefff)

0s ago: executing program 7 (id=3036):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
listen(r0, 0x11)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

xf6/0x210
[  999.236388][T15046]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  999.236410][T15046]  ? clear_bhb_loop+0x60/0xb0
[  999.236439][T15046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  999.236461][T15046] RIP: 0033:0x7f0c47b8e969
[  999.236481][T15046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  999.236501][T15046] RSP: 002b:00007f0c489b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  999.236525][T15046] RAX: ffffffffffffffda RBX: 00007f0c47db6080 RCX: 00007f0c47b8e969
[  999.236542][T15046] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  999.236558][T15046] RBP: 00007f0c489b6090 R08: 0000000000000000 R09: 0000000000000000
[  999.236572][T15046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  999.236586][T15046] R13: 0000000000000000 R14: 00007f0c47db6080 R15: 00007ffd23250b98
[  999.236621][T15046]  </TASK>
[  999.236729][T15046] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1000.130311][ T9748] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 1000.300490][ T9748] usb 7-1: Using ep0 maxpacket: 32
[ 1000.312685][ T9748] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[ 1000.322933][ T9748] usb 7-1: config 0 has no interface number 0
[ 1000.337574][ T9748] usb 7-1: config 0 interface 184 has no altsetting 0
[ 1000.368714][ T9748] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1000.381351][ T9748] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1000.864107][ T9748] usb 7-1: Product: syz
[ 1000.868584][ T9748] usb 7-1: Manufacturer: syz
[ 1000.880739][ T9748] usb 7-1: SerialNumber: syz
[ 1000.986758][ T9748] usb 7-1: config 0 descriptor??
[ 1001.854367][ T9748] usb 7-1: can't set config #0, error -71
[ 1001.870810][ T9748] usb 7-1: USB disconnect, device number 39
[ 1003.244227][T15069] netlink: 'syz.0.2372': attribute type 32 has an invalid length.
[ 1003.256718][T15069] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1003.501127][T15082] netlink: 'syz.6.2375': attribute type 32 has an invalid length.
[ 1003.571260][T15082] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1006.933714][T15090] input input41: cannot allocate more than FF_MAX_EFFECTS effects
[ 1007.327300][T15089] IPVS: set_ctl: invalid protocol: 21284 0.0.0.0:20004
[ 1012.073906][T15131] netlink: 'syz.3.2390': attribute type 32 has an invalid length.
[ 1012.287124][T15131] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1012.875643][T15145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2393'.
[ 1012.937087][T15145] vlan0: entered allmulticast mode
[ 1012.942433][T15145] erspan0: entered allmulticast mode
[ 1013.593467][T15144] loop6: detected capacity change from 0 to 524287999
[ 1014.517190][T15151] pim6reg: entered allmulticast mode
[ 1014.545787][T15151] pim6reg: left allmulticast mode
[ 1015.322633][T15157] /dev/nullb0: Can't open blockdev
[ 1019.071451][T15187] FAULT_INJECTION: forcing a failure.
[ 1019.071451][T15187] name failslab, interval 1, probability 0, space 0, times 0
[ 1019.100285][T15187] CPU: 0 UID: 0 PID: 15187 Comm: syz.5.2408 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) 
[ 1019.100320][T15187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1019.100335][T15187] Call Trace:
[ 1019.100348][T15187]  <TASK>
[ 1019.100358][T15187]  dump_stack_lvl+0x189/0x250
[ 1019.100397][T15187]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1019.100427][T15187]  ? __pfx__printk+0x10/0x10
[ 1019.100467][T15187]  ? __pfx___might_resched+0x10/0x10
[ 1019.100500][T15187]  ? fs_reclaim_acquire+0x7d/0x100
[ 1019.100531][T15187]  should_fail_ex+0x414/0x560
[ 1019.100561][T15187]  should_failslab+0xa8/0x100
[ 1019.100585][T15187]  __kmalloc_noprof+0xcb/0x4f0
[ 1019.100617][T15187]  ? kfree+0x4d/0x440
[ 1019.100646][T15187]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1019.100683][T15187]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1019.100726][T15187]  ? tomoyo_mount_permission+0x27a/0x970
[ 1019.100756][T15187]  tomoyo_mount_permission+0x377/0x970
[ 1019.100788][T15187]  ? stack_depot_save_flags+0x40/0x910
[ 1019.100816][T15187]  ? tomoyo_mount_permission+0x27a/0x970
[ 1019.100845][T15187]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[ 1019.100940][T15187]  security_sb_mount+0xec/0x350
[ 1019.100983][T15187]  path_mount+0xbc/0xfe0
[ 1019.101027][T15187]  ? user_path_at+0x44/0x60
[ 1019.101056][T15187]  ? kmem_cache_free+0x192/0x3f0
[ 1019.101100][T15187]  __se_sys_mount+0x317/0x410
[ 1019.101129][T15187]  ? __pfx___se_sys_mount+0x10/0x10
[ 1019.101153][T15187]  ? do_syscall_64+0xba/0x210
[ 1019.101178][T15187]  ? __x64_sys_mount+0x20/0xc0
[ 1019.101201][T15187]  do_syscall_64+0xf6/0x210
[ 1019.101231][T15187]  ? clear_bhb_loop+0x60/0xb0
[ 1019.101259][T15187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1019.101280][T15187] RIP: 0033:0x7fa1d318e969
[ 1019.101300][T15187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1019.101320][T15187] RSP: 002b:00007fa1d3f7e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1019.101344][T15187] RAX: ffffffffffffffda RBX: 00007fa1d33b5fa0 RCX: 00007fa1d318e969
[ 1019.101362][T15187] RDX: 0000200000000080 RSI: 0000200000000400 RDI: 0000000000000000
[ 1019.101378][T15187] RBP: 00007fa1d3f7e090 R08: 0000200000000700 R09: 0000000000000000
[ 1019.101394][T15187] R10: 0000000001010410 R11: 0000000000000246 R12: 0000000000000001
[ 1019.101408][T15187] R13: 0000000000000000 R14: 00007fa1d33b5fa0 R15: 00007ffc05ad4788
[ 1019.101444][T15187]  </TASK>
[ 1019.103734][T15187] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1019.353301][ T9747] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[ 1019.550600][ T9747] usb 7-1: Using ep0 maxpacket: 16
[ 1019.602844][ T9747] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1019.629586][ T9747] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1019.686961][T15196] IPVS: set_ctl: invalid protocol: 21284 0.0.0.0:20004
[ 1019.708178][ T9747] usb 7-1: can't read configurations, error -71
[ 1019.990876][T15199] netlink: 'syz.0.2411': attribute type 162 has an invalid length.
[ 1020.015290][T15199] FAULT_INJECTION: forcing a failure.
[ 1020.015290][T15199] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1020.049794][T15199] CPU: 0 UID: 0 PID: 15199 Comm: syz.0.2411 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) 
[ 1020.049828][T15199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1020.049844][T15199] Call Trace:
[ 1020.049854][T15199]  <TASK>
[ 1020.049866][T15199]  dump_stack_lvl+0x189/0x250
[ 1020.049903][T15199]  ? __lock_acquire+0xaac/0xd20
[ 1020.049939][T15199]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1020.049970][T15199]  ? __pfx__printk+0x10/0x10
[ 1020.050005][T15199]  ? __might_fault+0xb0/0x130
[ 1020.050055][T15199]  should_fail_ex+0x414/0x560
[ 1020.050086][T15199]  _copy_from_user+0x2d/0xb0
[ 1020.050120][T15199]  kstrtouint_from_user+0xc4/0x170
[ 1020.050151][T15199]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1020.050197][T15199]  proc_fail_nth_write+0x88/0x240
[ 1020.050220][T15199]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1020.050249][T15199]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1020.050275][T15199]  vfs_write+0x27e/0xa90
[ 1020.050315][T15199]  ? __pfx_vfs_write+0x10/0x10
[ 1020.050349][T15199]  ? __fget_files+0x2a/0x420
[ 1020.050375][T15199]  ? __fget_files+0x3a0/0x420
[ 1020.050395][T15199]  ? __fget_files+0x2a/0x420
[ 1020.050426][T15199]  ksys_write+0x145/0x250
[ 1020.050456][T15199]  ? rcu_is_watching+0x15/0xb0
[ 1020.050491][T15199]  ? __pfx_ksys_write+0x10/0x10
[ 1020.050527][T15199]  ? do_syscall_64+0xba/0x210
[ 1020.050562][T15199]  do_syscall_64+0xf6/0x210
[ 1020.050593][T15199]  ? clear_bhb_loop+0x60/0xb0
[ 1020.050621][T15199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1020.050643][T15199] RIP: 0033:0x7fe996f8d41f
[ 1020.050664][T15199] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1020.050685][T15199] RSP: 002b:00007fe997edf030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1020.050709][T15199] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe996f8d41f
[ 1020.050726][T15199] RDX: 0000000000000001 RSI: 00007fe997edf0a0 RDI: 0000000000000004
[ 1020.050747][T15199] RBP: 00007fe997edf090 R08: 0000000000000000 R09: 0000000000000000
[ 1020.050762][T15199] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 1020.050775][T15199] R13: 0000000000000000 R14: 00007fe9971b5fa0 R15: 00007ffc127c7678
[ 1020.050811][T15199]  </TASK>
[ 1020.591625][T15209] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1020.705954][T15206] IPVS: set_ctl: invalid protocol: 21284 0.0.0.0:20004
[ 1021.970967][T15220] IPVS: set_ctl: invalid protocol: 21284 0.0.0.0:20004
[ 1023.674578][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2422'.
[ 1023.691250][T15237] vlan2: entered allmulticast mode
[ 1023.696519][T15237] erspan0: entered allmulticast mode
[ 1024.957131][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2423'.
[ 1025.021143][T15243] netlink: 'syz.6.2423': attribute type 2 has an invalid length.
[ 1026.520505][ T9747] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1026.604900][T15259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2429'.
[ 1026.614336][T15259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2429'.
[ 1027.510359][ T9747] usb 6-1: Using ep0 maxpacket: 16
[ 1027.560313][ T9747] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1027.575065][T15267] loop9: detected capacity change from 0 to 8
[ 1027.588487][T15267]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[ 1027.594200][T15267] loop9: partition table partially beyond EOD, truncated
[ 1027.601923][T15267] loop9: p1 size 81768186 extends beyond EOD, truncated
[ 1027.630980][ T9747] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1027.684247][ T9747] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1027.711510][ T9747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1027.938549][ T9747] usb 6-1: config 0 descriptor??
[ 1028.773847][ T9747] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1028.867400][T15275] loop4: detected capacity change from 0 to 524255232
[ 1029.152763][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2435'.
[ 1029.195412][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2435'.
[ 1029.619347][T15292] unknown channel width for channel at 909000KHz?
[ 1030.880991][ T9747] usb 6-1: USB disconnect, device number 47
[ 1032.010524][ T9748] usb 3-1: new full-speed USB device number 42 using dummy_hcd
[ 1032.495029][ T9748] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1032.515309][ T9748] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1032.718874][ T9748] usb 3-1: can't read configurations, error -71
[ 1035.160724][T15330] FAULT_INJECTION: forcing a failure.
[ 1035.160724][T15330] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1035.204647][T15330] CPU: 0 UID: 0 PID: 15330 Comm: syz.0.2452 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) 
[ 1035.204681][T15330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1035.204695][T15330] Call Trace:
[ 1035.204705][T15330]  <TASK>
[ 1035.204716][T15330]  dump_stack_lvl+0x189/0x250
[ 1035.204749][T15330]  ? __lock_acquire+0xaac/0xd20
[ 1035.204782][T15330]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1035.204812][T15330]  ? __pfx__printk+0x10/0x10
[ 1035.204846][T15330]  ? __might_fault+0xb0/0x130
[ 1035.204894][T15330]  should_fail_ex+0x414/0x560
[ 1035.204921][T15330]  _copy_from_user+0x2d/0xb0
[ 1035.204955][T15330]  kstrtouint_from_user+0xc4/0x170
[ 1035.204984][T15330]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1035.205025][T15330]  proc_fail_nth_write+0x88/0x240
[ 1035.205045][T15330]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1035.205071][T15330]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1035.205097][T15330]  vfs_write+0x27e/0xa90
[ 1035.205141][T15330]  ? __pfx_vfs_write+0x10/0x10
[ 1035.205168][T15330]  ? __fget_files+0x2a/0x420
[ 1035.205189][T15330]  ? __fget_files+0x3a0/0x420
[ 1035.205204][T15330]  ? __fget_files+0x2a/0x420
[ 1035.205228][T15330]  ksys_write+0x145/0x250
[ 1035.205252][T15330]  ? rcu_is_watching+0x15/0xb0
[ 1035.205280][T15330]  ? __pfx_ksys_write+0x10/0x10
[ 1035.205308][T15330]  ? do_syscall_64+0xba/0x210
[ 1035.205336][T15330]  do_syscall_64+0xf6/0x210
[ 1035.205359][T15330]  ? clear_bhb_loop+0x60/0xb0
[ 1035.205381][T15330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1035.205398][T15330] RIP: 0033:0x7fe996f8d41f
[ 1035.205415][T15330] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1035.205436][T15330] RSP: 002b:00007fe997edf030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1035.205454][T15330] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe996f8d41f
[ 1035.205467][T15330] RDX: 0000000000000001 RSI: 00007fe997edf0a0 RDI: 0000000000000006
[ 1035.205479][T15330] RBP: 00007fe997edf090 R08: 0000000000000000 R09: 0000000000000000
[ 1035.205494][T15330] R10: 200000000000049a R11: 0000000000000293 R12: 0000000000000001
[ 1035.205505][T15330] R13: 0000000000000000 R14: 00007fe9971b5fa0 R15: 00007ffc127c7678
[ 1035.205538][T15330]  </TASK>
[ 1035.708124][   T30] kauditd_printk_skb: 60 callbacks suppressed
[ 1035.709513][   T30] audit: type=1326 audit(1747396389.549:5874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15339 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996f8e969 code=0x7ffc0000
[ 1035.932640][ T9761] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 1036.200918][   T30] audit: type=1326 audit(1747396389.549:5875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15339 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996f8e969 code=0x7ffc0000
[ 1036.250449][ T9761] usb 3-1: Using ep0 maxpacket: 8
[ 1036.336212][ T9761] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[ 1036.565470][ T9761] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1036.580108][   T30] audit: type=1326 audit(1747396389.549:5876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15339 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe996f8e969 code=0x7ffc0000
[ 1036.595137][ T9761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1036.618196][   T30] audit: type=1326 audit(1747396389.549:5877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15339 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996f8e969 code=0x7ffc0000
[ 1036.641142][   T30] audit: type=1326 audit(1747396389.549:5878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15339 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996f8e969 code=0x7ffc0000
[ 1036.728200][   T30] audit: type=1326 audit(1747396389.549:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15339 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fe996f8e969 code=0x7ffc0000
[ 1036.785721][ T9761] usb 3-1: Product: syz
[ 1036.817221][ T9761] usb 3-1: Manufacturer: syz
[ 1037.110577][ T9761] usb 3-1: SerialNumber: syz
[ 1037.260483][T15350] netlink: 'syz.5.2457': attribute type 32 has an invalid length.
[ 1037.454124][T15350] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1037.492415][ T9761] usb 3-1: config 0 descriptor??
[ 1038.200423][   T30] audit: type=1326 audit(1747396389.549:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15339 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996f8e969 code=0x7ffc0000
[ 1038.205432][ T9761] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1038.303806][T15337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1038.338889][   T30] audit: type=1326 audit(1747396389.549:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15339 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996f8e969 code=0x7ffc0000
[ 1038.408033][T15337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1038.489145][ T9761] usb 3-1: setting power ON
[ 1038.495060][ T9761] dvb-usb: bulk message failed: -22 (2/0)
[ 1038.528794][ T9761] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1038.546887][   T30] audit: type=1326 audit(1747396389.549:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15339 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe996f8d2d0 code=0x7ffc0000
[ 1038.560865][ T9761] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1038.598457][   T30] audit: type=1326 audit(1747396389.549:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15339 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996f8e969 code=0x7ffc0000
[ 1038.671721][ T9761] usb 3-1: media controller created
[ 1039.250667][ T9761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1039.360089][ T9761] usb 3-1: selecting invalid altsetting 6
[ 1039.380495][ T9761] usb 3-1: digital interface selection failed (-22)
[ 1039.422058][ T9761] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1039.461788][ T9761] usb 3-1: setting power OFF
[ 1039.467440][ T9761] dvb-usb: bulk message failed: -22 (2/0)
[ 1039.528443][ T9761] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1039.593472][ T9761] (NULL device *): no alternate interface
[ 1039.902154][T15384] netlink: 'syz.5.2468': attribute type 21 has an invalid length.
[ 1039.918443][T15384] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2468'.
[ 1040.338258][ T9761] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1040.652023][ T9761] usb 3-1: USB disconnect, device number 44
[ 1041.535284][T15397] loop9: detected capacity change from 0 to 8
[ 1041.544621][T15397]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[ 1041.549990][T15397] loop9: partition table partially beyond EOD, truncated
[ 1041.557394][T15397] loop9: p1 size 81768186 extends beyond EOD, truncated
[ 1043.086113][T15406] netlink: 'syz.3.2472': attribute type 32 has an invalid length.
[ 1043.224825][T15406] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1043.421178][ T5189] udevd[5189]: worker [5837] terminated by signal 33 (Unknown signal 33)
[ 1043.895124][ T5189] udevd[5189]: worker [5837] failed while handling '/devices/virtual/block/loop9'
[ 1044.291034][ T6303] udevd[6303]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[ 1047.334088][T15448] IPVS: set_ctl: invalid protocol: 21284 0.0.0.0:20004
[ 1047.750899][ T9747] page_pool_release_retry() stalled pool shutdown: id 71, 1 inflight 60 sec
[ 1048.453580][T15455] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[ 1051.519749][T15481] FAULT_INJECTION: forcing a failure.
[ 1051.519749][T15481] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1051.548781][T15477] netlink: 'syz.0.2490': attribute type 39 has an invalid length.
[ 1051.578289][T15481] CPU: 0 UID: 0 PID: 15481 Comm: syz.6.2491 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) 
[ 1051.578324][T15481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1051.578339][T15481] Call Trace:
[ 1051.578349][T15481]  <TASK>
[ 1051.578359][T15481]  dump_stack_lvl+0x189/0x250
[ 1051.578400][T15481]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1051.578431][T15481]  ? __pfx__printk+0x10/0x10
[ 1051.578481][T15481]  should_fail_ex+0x414/0x560
[ 1051.578512][T15481]  _copy_to_user+0x31/0xb0
[ 1051.578547][T15481]  simple_read_from_buffer+0xe1/0x170
[ 1051.578587][T15481]  proc_fail_nth_read+0x1df/0x250
[ 1051.578616][T15481]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1051.578644][T15481]  ? rw_verify_area+0x258/0x650
[ 1051.578675][T15481]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1051.578701][T15481]  vfs_read+0x200/0x980
[ 1051.578738][T15481]  ? __pfx___mutex_lock+0x10/0x10
[ 1051.578769][T15481]  ? __pfx_vfs_read+0x10/0x10
[ 1051.578802][T15481]  ? __fget_files+0x2a/0x420
[ 1051.578829][T15481]  ? __fget_files+0x3a0/0x420
[ 1051.578849][T15481]  ? __fget_files+0x2a/0x420
[ 1051.578881][T15481]  ksys_read+0x145/0x250
[ 1051.578914][T15481]  ? __pfx_ksys_read+0x10/0x10
[ 1051.578950][T15481]  ? do_syscall_64+0xba/0x210
[ 1051.578985][T15481]  do_syscall_64+0xf6/0x210
[ 1051.579015][T15481]  ? clear_bhb_loop+0x60/0xb0
[ 1051.579043][T15481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1051.579066][T15481] RIP: 0033:0x7f6a6af8d37c
[ 1051.579086][T15481] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1051.579106][T15481] RSP: 002b:00007f6a6be31030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1051.579129][T15481] RAX: ffffffffffffffda RBX: 00007f6a6b1b5fa0 RCX: 00007f6a6af8d37c
[ 1051.579147][T15481] RDX: 000000000000000f RSI: 00007f6a6be310a0 RDI: 0000000000000004
[ 1051.579161][T15481] RBP: 00007f6a6be31090 R08: 0000000000000000 R09: 0000000000000000
[ 1051.579175][T15481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1051.579189][T15481] R13: 0000000000000000 R14: 00007f6a6b1b5fa0 R15: 00007ffd7c1815a8
[ 1051.579231][T15481]  </TASK>
[ 1051.791704][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1052.672523][T15500] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[ 1053.578765][T15507] IPVS: set_ctl: invalid protocol: 21284 0.0.0.0:20004
[ 1054.476377][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.482968][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.605733][T15518] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2499'.
[ 1055.087159][T15522] netlink: 'syz.0.2501': attribute type 32 has an invalid length.
[ 1055.215815][T15522] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1055.404102][T15518] netlink: 'syz.2.2499': attribute type 32 has an invalid length.
[ 1055.600211][T15518] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1057.421207][ T9761] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1057.600895][   T30] kauditd_printk_skb: 4 callbacks suppressed
[ 1057.601149][ T9761] usb 6-1: Using ep0 maxpacket: 8
[ 1057.601255][   T30] audit: type=1326 audit(1747396411.439:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15542 comm="syz.2.2507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c47b8e969 code=0x0
[ 1057.624579][ T9761] usb 6-1: config 254 has an invalid interface number: 167 but max is 0
[ 1057.863840][T15548] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[ 1058.582785][ T9761] usb 6-1: config 254 has no interface number 0
[ 1058.719002][ T9761] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[ 1058.833898][ T9761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1058.927360][ T9761] usb 6-1: Product: syz
[ 1058.980974][ T9761] usb 6-1: Manufacturer: syz
[ 1058.986975][ T9761] usb 6-1: SerialNumber: syz
[ 1059.168048][ T9761] mxuport 6-1:254.167: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[ 1059.242989][ T9761] mxuport 6-1:254.167: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[ 1059.763662][T15564] netlink: 'syz.0.2510': attribute type 3 has an invalid length.
[ 1059.771661][T15564] netlink: 'syz.0.2510': attribute type 1 has an invalid length.
[ 1060.158712][ T9761] mxuport 6-1:254.167: probe with driver mxuport failed with error -71
[ 1060.430326][ T9761] usb 6-1: USB disconnect, device number 48
[ 1060.550727][T15567] input: syz0 as /devices/virtual/input/input47
[ 1060.620967][T15570] IPVS: set_ctl: invalid protocol: 21284 0.0.0.0:20004
[ 1064.790569][ T9761] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 1064.942795][ T9761] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1065.120388][ T9761] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1065.185951][ T9761] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1065.279793][ T9761] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1065.329841][ T9761] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1065.358291][ T9761] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1065.384627][ T9761] usb 7-1: config 0 descriptor??
[ 1066.268210][T15586] ubi: mtd0 is already attached to ubi31
[ 1066.882091][T15600] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[ 1068.120435][ T9747] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1068.282099][ T9747] usb 6-1: Using ep0 maxpacket: 8
[ 1068.289562][ T9747] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[ 1068.303818][ T9747] usb 6-1: config 0 has no interface number 0
[ 1068.319834][ T9747] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1068.340324][ T9747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1068.412797][ T9747] usb 6-1: Product: syz
[ 1068.423822][ T9747] usb 6-1: Manufacturer: syz
[ 1068.435308][ T9747] usb 6-1: SerialNumber: syz
[ 1069.141854][ T9747] usb 6-1: config 0 descriptor??
[ 1069.473885][T15618] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2527'.
[ 1070.571113][ T9761] usbhid 7-1:0.0: can't add hid device: -71
[ 1070.581673][ T9761] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1070.595885][ T9761] usb 7-1: USB disconnect, device number 42
[ 1070.617316][ T9747] usb 6-1: Found UVC 0.04 device syz (046d:08c3)
[ 1070.650796][ T9747] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized!
[ 1070.763329][T15630] input: syz0 as /devices/virtual/input/input48
[ 1072.028936][ T9747] usb 6-1: USB disconnect, device number 49
[ 1072.714290][T15641] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[ 1074.369489][T15647] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[ 1074.369489][T15647] The task syz.6.2534 (15647) triggered the difference, watch for misbehavior.
[ 1074.721384][T15661] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2540'.
[ 1075.830014][T15667] lo speed is unknown, defaulting to 1000
[ 1076.351299][ T9747] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[ 1076.440575][ T9748] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1076.803968][T15682] loop9: detected capacity change from 0 to 8
[ 1077.370255][ T9747] usb 7-1: Using ep0 maxpacket: 16
[ 1077.378872][T15682]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[ 1077.384280][T15682] loop9: partition table partially beyond EOD, truncated
[ 1077.391601][T15682] loop9: p1 size 81768186 extends beyond EOD, truncated
[ 1077.564865][ T9747] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1077.590507][ T9748] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1077.624459][ T6302] udevd[6302]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[ 1077.667576][T15675] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2545'.
[ 1077.712426][ T9747] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1077.723214][ T9748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1077.748009][ T9747] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1077.757046][ T9748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1077.770509][ T9748] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1077.784682][ T9747] usb 7-1: config 0 descriptor??
[ 1077.798182][ T9748] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1077.807981][ T9748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1077.821362][T15675] netlink: 'syz.5.2545': attribute type 32 has an invalid length.
[ 1077.851578][T15675] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1077.884358][ T9748] usb 4-1: config 0 descriptor??
[ 1079.398461][ T9747] usbhid 7-1:0.0: can't add hid device: -71
[ 1079.404665][ T9747] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1079.415049][ T9747] usb 7-1: USB disconnect, device number 43
[ 1080.499057][ T9748] usbhid 4-1:0.0: can't add hid device: -71
[ 1080.520400][ T9748] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1080.609878][ T9748] usb 4-1: USB disconnect, device number 48
[ 1082.129525][T15696] delete_channel: no stack
[ 1083.166960][T15731] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[ 1084.580395][ T9748] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 1085.191149][   T10] kworker/0:1 (10) used greatest stack depth: 16392 bytes left
[ 1085.427124][   T30] audit: type=1326 audit(1747396439.269:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6a6af8e969 code=0x7ffc0000
[ 1085.531019][ T9748] usb 6-1: Using ep0 maxpacket: 16
[ 1085.551429][ T9748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1085.626914][ T9748] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1085.643427][T15750] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[15750]
[ 1085.660910][   T30] audit: type=1326 audit(1747396439.309:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6a6af8e969 code=0x7ffc0000
[ 1085.695573][ T9748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1085.728715][ T9748] usb 6-1: config 0 descriptor??
[ 1085.935676][   T30] audit: type=1326 audit(1747396439.309:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6a6af8e969 code=0x7ffc0000
[ 1085.988451][T15755] input: syz0 as /devices/virtual/input/input49
[ 1087.021273][   T30] audit: type=1326 audit(1747396439.309:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6a6af8e969 code=0x7ffc0000
[ 1087.084764][   T30] audit: type=1326 audit(1747396439.309:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6a6af8e969 code=0x7ffc0000
[ 1087.146806][ T9748] usbhid 6-1:0.0: can't add hid device: -71
[ 1087.169345][ T9748] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1087.463579][   T30] audit: type=1326 audit(1747396439.309:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6a6af8e969 code=0x7ffc0000
[ 1087.679485][ T9748] usb 6-1: USB disconnect, device number 50
[ 1087.730466][   T30] audit: type=1326 audit(1747396439.309:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6a6af8e969 code=0x7ffc0000
[ 1087.810844][   T30] audit: type=1326 audit(1747396439.309:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6a6af8e969 code=0x7ffc0000
[ 1087.929247][   T30] audit: type=1326 audit(1747396439.309:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6a6af8e969 code=0x7ffc0000
[ 1088.025706][   T30] audit: type=1326 audit(1747396439.309:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15744 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6a6af8e969 code=0x7ffc0000
[ 1088.377794][T15772] netlink: 'syz.0.2570': attribute type 12 has an invalid length.
[ 1088.403204][T15772] netlink: 'syz.0.2570': attribute type 29 has an invalid length.
[ 1088.446920][T15772] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2570'.
[ 1088.484443][T15772] netlink: 'syz.0.2570': attribute type 1 has an invalid length.
[ 1088.520475][T15772] netlink: 'syz.0.2570': attribute type 2 has an invalid length.
[ 1088.644212][T15772] netlink: 39 bytes leftover after parsing attributes in process `syz.0.2570'.
[ 1089.060942][T15774] netlink: 'syz.0.2570': attribute type 12 has an invalid length.
[ 1089.123303][T15774] netlink: 'syz.0.2570': attribute type 29 has an invalid length.
[ 1089.169028][T15774] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2570'.
[ 1089.181979][T15774] netlink: 'syz.0.2570': attribute type 1 has an invalid length.
[ 1089.227404][T15774] netlink: 'syz.0.2570': attribute type 2 has an invalid length.
[ 1089.289041][T15774] netlink: 39 bytes leftover after parsing attributes in process `syz.0.2570'.
[ 1089.672022][ T9748] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 1089.740604][ T9770] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1089.800515][ T5942] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1089.830498][ T9748] usb 3-1: Using ep0 maxpacket: 16
[ 1089.841720][ T9748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1089.858183][ T9748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1089.868923][ T9748] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00
[ 1089.885784][ T9748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1089.902230][ T9770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1089.906095][ T9748] usb 3-1: config 0 descriptor??
[ 1089.930986][ T9770] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1089.948400][ T9770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1089.963192][ T5942] usb 7-1: config 0 has an invalid interface number: 91 but max is 0
[ 1089.977764][ T5942] usb 7-1: config 0 has no interface number 0
[ 1089.981682][ T9770] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[ 1089.985037][ T5942] usb 7-1: config 0 interface 91 has no altsetting 0
[ 1089.993466][ T9770] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[ 1089.993497][ T9770] usb 1-1: Manufacturer: syz
[ 1090.012287][ T9770] usb 1-1: config 0 descriptor??
[ 1090.041680][ T9770] smsusb:smsusb_probe: board id=9, interface number 0
[ 1090.042679][ T5942] usb 7-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=60.41
[ 1090.050723][ T9770] smsusb:smsusb_probe: Device initialized with return code -19
[ 1090.107311][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1090.143526][ T5942] usb 7-1: config 0 descriptor??
[ 1090.941353][ T9748] aquacomputer_d5next 0003:0C70:F00A.0019: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.2-1/input0
[ 1090.946911][T15786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1090.963902][T15786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1090.987293][ T5942] usb 7-1: string descriptor 0 read error: -71
[ 1091.008304][ T5942] usb 7-1: Found UVC 0.00 device <unnamed> (174f:5212)
[ 1091.021119][ T5942] usb 7-1: No valid video chain found.
[ 1091.032565][ T5942] usb 7-1: USB disconnect, device number 44
[ 1092.644101][ T9761] usb 1-1: USB disconnect, device number 38
[ 1094.640494][ T5942] usb 3-1: reset high-speed USB device number 45 using dummy_hcd
[ 1095.608213][ T9748] usb 3-1: USB disconnect, device number 45
[ 1096.150417][ T9770] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1096.194091][T15827] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[ 1096.704358][ T9770] usb 1-1: Using ep0 maxpacket: 32
[ 1097.185728][ T9770] usb 1-1: config 0 has an invalid interface number: 235 but max is 0
[ 1097.188001][T15830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2585'.
[ 1097.245479][ T9770] usb 1-1: config 0 has no interface number 0
[ 1097.396633][ T9770] usb 1-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47
[ 1097.406454][ T9770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1097.419312][ T9770] usb 1-1: Product: syz
[ 1097.425209][ T9770] usb 1-1: Manufacturer: syz
[ 1097.431470][ T9770] usb 1-1: SerialNumber: syz
[ 1097.492823][ T9770] usb 1-1: config 0 descriptor??
[ 1097.652246][ T5942] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1097.984352][ T5942] usb 6-1: Using ep0 maxpacket: 32
[ 1098.220383][ T5942] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1098.233822][ T5942] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1098.243366][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1098.252002][ T5942] usb 6-1: Product: syz
[ 1098.256350][ T5942] usb 6-1: Manufacturer: syz
[ 1098.849049][ T5942] usb 6-1: SerialNumber: syz
[ 1098.901791][ T5942] usb 6-1: config 0 descriptor??
[ 1099.458958][ T5942] gs_usb 6-1:0.0: Configuring for 1 interfaces
[ 1099.624367][ T5942] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[ 1099.674162][ T5942] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71
[ 1099.941439][ T5942] usb 6-1: USB disconnect, device number 51
[ 1100.179750][ T9770] kaweth 1-1:0.235: Firmware present in device.
[ 1100.187701][ T9770] kaweth 1-1:0.235: Error reading configuration (-71), no net device created
[ 1100.197123][ T9770] kaweth 1-1:0.235: probe with driver kaweth failed with error -5
[ 1100.226588][ T9770] usb 1-1: USB disconnect, device number 39
[ 1101.801034][T15851] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1102.382621][ T9770] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 1102.712602][ T9770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1102.790414][ T9770] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1102.810427][ T9770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1102.855216][ T9770] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[ 1102.891979][ T9770] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[ 1102.960464][ T9770] usb 6-1: Manufacturer: syz
[ 1102.982548][ T9770] usb 6-1: config 0 descriptor??
[ 1103.002099][ T9770] smsusb:smsusb_probe: board id=9, interface number 0
[ 1103.021309][ T9770] smsusb:smsusb_probe: Device initialized with return code -19
[ 1103.545656][T15878] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1104.380615][ T9770] usb 6-1: USB disconnect, device number 52
[ 1107.756532][T15918] FAULT_INJECTION: forcing a failure.
[ 1107.756532][T15918] name failslab, interval 1, probability 0, space 0, times 0
[ 1107.820352][T15918] CPU: 1 UID: 0 PID: 15918 Comm: syz.0.2607 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) 
[ 1107.820384][T15918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1107.820398][T15918] Call Trace:
[ 1107.820408][T15918]  <TASK>
[ 1107.820418][T15918]  dump_stack_lvl+0x189/0x250
[ 1107.820458][T15918]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1107.820487][T15918]  ? __pfx__printk+0x10/0x10
[ 1107.820524][T15918]  ? __pfx___might_resched+0x10/0x10
[ 1107.820558][T15918]  ? fs_reclaim_acquire+0x7d/0x100
[ 1107.820589][T15918]  should_fail_ex+0x414/0x560
[ 1107.820619][T15918]  should_failslab+0xa8/0x100
[ 1107.820642][T15918]  __kmalloc_noprof+0xcb/0x4f0
[ 1107.820675][T15918]  ? tomoyo_encode+0x28b/0x550
[ 1107.820708][T15918]  tomoyo_encode+0x28b/0x550
[ 1107.820751][T15918]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1107.820793][T15918]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1107.820817][T15918]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1107.820847][T15918]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1107.820891][T15918]  ? __lock_acquire+0xaac/0xd20
[ 1107.820944][T15918]  ? __fget_files+0x2a/0x420
[ 1107.820969][T15918]  ? __fget_files+0x3a0/0x420
[ 1107.820989][T15918]  ? __fget_files+0x2a/0x420
[ 1107.821013][T15918]  security_file_ioctl+0xcb/0x2d0
[ 1107.821042][T15918]  __se_sys_ioctl+0x47/0x170
[ 1107.821076][T15918]  do_syscall_64+0xf6/0x210
[ 1107.821107][T15918]  ? clear_bhb_loop+0x60/0xb0
[ 1107.821133][T15918]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1107.821153][T15918] RIP: 0033:0x7fe996f8e969
[ 1107.821174][T15918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1107.821194][T15918] RSP: 002b:00007fe997edf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1107.821219][T15918] RAX: ffffffffffffffda RBX: 00007fe9971b5fa0 RCX: 00007fe996f8e969
[ 1107.821237][T15918] RDX: 0000200000000280 RSI: 0000000040085112 RDI: 0000000000000003
[ 1107.821252][T15918] RBP: 00007fe997edf090 R08: 0000000000000000 R09: 0000000000000000
[ 1107.821266][T15918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1107.821279][T15918] R13: 0000000000000000 R14: 00007fe9971b5fa0 R15: 00007ffc127c7678
[ 1107.821314][T15918]  </TASK>
[ 1107.821362][T15918] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1108.301087][T15926] /dev/nullb0: Can't open blockdev
[ 1109.897795][T15932] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2611'.
[ 1110.034488][T15932] netlink: 'syz.0.2611': attribute type 32 has an invalid length.
[ 1110.611480][T15939] lo speed is unknown, defaulting to 1000
[ 1114.297178][T15974] IPVS: set_ctl: invalid protocol: 21284 0.0.0.0:20004
[ 1115.360433][ T5942] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[ 1115.540296][ T5942] usb 3-1: device descriptor read/64, error -71
[ 1116.011282][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.017808][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.603870][ T5942] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[ 1116.826088][ T5942] usb 3-1: device descriptor read/64, error -71
[ 1117.105138][ T5942] usb usb3-port1: attempt power cycle
[ 1117.520581][ T9748] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 1117.540285][ T5942] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[ 1117.581331][ T5942] usb 3-1: device descriptor read/8, error -71
[ 1117.710615][ T9748] usb 7-1: Using ep0 maxpacket: 16
[ 1117.815154][T16017] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[ 1117.824482][ T5942] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[ 1117.855772][ T9748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1117.882686][ T9748] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1117.893168][ T5942] usb 3-1: device descriptor read/8, error -71
[ 1118.002511][ T5942] usb usb3-port1: unable to enumerate USB device
[ 1118.010081][ T9748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1118.034881][ T9748] usb 7-1: config 0 descriptor??
[ 1118.555981][T16021] input: syz0 as /devices/virtual/input/input50
[ 1118.903649][ T9748] usbhid 7-1:0.0: can't add hid device: -71
[ 1118.931485][ T9748] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1119.435534][ T9748] usb 7-1: USB disconnect, device number 45
[ 1122.476339][T16059] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2650'.
[ 1122.519060][T16054] lo speed is unknown, defaulting to 1000
[ 1124.205021][T16089] syz.5.2659: attempt to access beyond end of device
[ 1124.205021][T16089] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[ 1124.329177][T16089] syz.5.2659: attempt to access beyond end of device
[ 1124.329177][T16089] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0
[ 1124.353034][T16089] Mount JFS Failure: -5
[ 1124.385412][T16089] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2659'.
[ 1124.409662][T16089] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2659'.
[ 1125.200409][ T9748] usb 7-1: new full-speed USB device number 46 using dummy_hcd
[ 1125.333252][T16096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2661'.
[ 1125.401297][ T9748] usb 7-1: device descriptor read/64, error -71
[ 1125.460785][T16105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2663'.
[ 1125.800457][ T9748] usb 7-1: new full-speed USB device number 47 using dummy_hcd
[ 1126.620325][ T9748] usb 7-1: device descriptor read/64, error -71
[ 1126.636399][T16116] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[ 1126.766768][ T9748] usb usb7-port1: attempt power cycle
[ 1127.770781][ T9748] usb 7-1: new full-speed USB device number 48 using dummy_hcd
[ 1127.961315][ T9748] usb 7-1: device descriptor read/8, error -71
[ 1128.185787][T16131] pim6reg1: entered promiscuous mode
[ 1128.223418][T16131] pim6reg1: entered allmulticast mode
[ 1129.614193][T16141] lo speed is unknown, defaulting to 1000
[ 1129.645614][T16146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2674'.
[ 1131.047107][T16151] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[ 1132.958080][T16184] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2684'.
[ 1133.220275][T16184] netlink: 'syz.5.2684': attribute type 32 has an invalid length.
[ 1134.459481][T16189] ip6tnl2: entered promiscuous mode
[ 1134.478928][T16189] ip6tnl2: entered allmulticast mode
[ 1135.050468][T16189] team0: Device ip6tnl2 is of different type
[ 1135.604972][T16202] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[ 1137.120562][T16222] macvlan2: entered promiscuous mode
[ 1137.146431][T16222] macvlan2: entered allmulticast mode
[ 1137.173202][T16222] batadv0: entered allmulticast mode
[ 1137.178630][T16222] batadv0: entered promiscuous mode
[ 1137.185141][T16222] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1137.200851][T16222] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[ 1138.962575][T16239] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1141.499971][T16268] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[ 1144.461772][T16283] IPVS: set_ctl: invalid protocol: 21284 0.0.0.0:20004
[ 1146.011125][T16298] loop9: detected capacity change from 0 to 8
[ 1146.390080][T16298]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[ 1146.390508][T16298] loop9: partition table partially beyond EOD, truncated
[ 1146.391335][T16298] loop9: p1 size 81768186 extends beyond EOD, truncated
[ 1148.011010][ T6302] udevd[6302]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[ 1148.788638][T16319] bridge0: left promiscuous mode
[ 1149.091333][T16324] sctp: [Deprecated]: syz.2.2724 (pid 16324) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1149.091333][T16324] Use struct sctp_sack_info instead
[ 1150.520735][ T5942] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 1150.913305][T16340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2729'.
[ 1151.671621][ T5942] usb 6-1: Using ep0 maxpacket: 8
[ 1152.361132][ T5942] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1152.384719][ T5942] usb 6-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8
[ 1152.481422][ T5942] usb 6-1: config 8 interface 0 has no altsetting 0
[ 1152.630087][ T5942] usb 6-1: string descriptor 0 read error: -71
[ 1152.855088][T16349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2731'.
[ 1153.090715][ T5942] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[ 1153.099835][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1153.172679][ T5942] usb 6-1: can't set config #8, error -71
[ 1153.201399][ T5942] usb 6-1: USB disconnect, device number 53
[ 1153.703311][T16365] loop9: detected capacity change from 0 to 8
[ 1154.292253][T16365]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[ 1154.297695][T16365] loop9: partition table partially beyond EOD, truncated
[ 1154.305377][T16365] loop9: p1 size 81768186 extends beyond EOD, truncated
[ 1154.480045][T16368] pimreg: left allmulticast mode
[ 1154.978612][ T6302] udevd[6302]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[ 1155.466061][ T5942] usb 1-1: new low-speed USB device number 40 using dummy_hcd
[ 1155.678715][T16373] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1155.741713][ T5942] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1155.765878][ T5942] usb 1-1: config 8 has an invalid interface number: 150 but max is 0
[ 1155.780315][ T5942] usb 1-1: config 8 has an invalid descriptor of length 242, skipping remainder of the config
[ 1155.813401][ T5942] usb 1-1: config 8 has no interface number 0
[ 1156.318863][ T5942] usb 1-1: config 8 interface 150 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 8
[ 1156.377689][ T5942] usb 1-1: config 8 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1156.397857][ T5942] usb 1-1: config 8 interface 150 has no altsetting 0
[ 1156.414775][ T5942] usb 1-1: string descriptor 0 read error: -22
[ 1156.426627][ T5942] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=c5.3c
[ 1156.449217][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1156.560799][   T30] kauditd_printk_skb: 9 callbacks suppressed
[ 1156.560821][   T30] audit: type=1800 audit(1747396510.399:5908): pid=16387 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.2741" name="file1" dev="overlay" ino=2857 res=0 errno=0
[ 1156.623230][T16387] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2741'.
[ 1156.909906][T16394] netlink: 'syz.5.2743': attribute type 4 has an invalid length.
[ 1156.920538][T16394] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2743'.
[ 1157.088026][T16394] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1157.205809][ T5942] peak_usb 1-1:8.150 can0: unable to request usb[type=0 value=1] err=-71
[ 1157.224606][ T5942] peak_usb 1-1:8.150: unable to read PCAN-Chip USB firmware info (err -71)
[ 1157.372933][ T5942] peak_usb 1-1:8.150: probe with driver peak_usb failed with error -71
[ 1157.441620][ T5942] usb 1-1: USB disconnect, device number 40
[ 1157.809151][T16408] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1158.294498][ T5942] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1158.660367][ T5942] usb 4-1: Using ep0 maxpacket: 32
[ 1158.710185][ T5942] usb 4-1: config 0 has an invalid interface number: 204 but max is 0
[ 1158.718440][ T5942] usb 4-1: config 0 has no interface number 0
[ 1158.741623][ T5942] usb 4-1: config 0 interface 204 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1158.775639][ T5942] usb 4-1: New USB device found, idVendor=1b75, idProduct=7318, bcdDevice=1f.c6
[ 1158.809599][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1158.836712][ T5942] usb 4-1: Product: syz
[ 1158.855893][ T5942] usb 4-1: Manufacturer: syz
[ 1158.870326][ T5942] usb 4-1: SerialNumber: syz
[ 1158.886197][T16424] futex_wake_op: syz.2.2750 tries to shift op by -1; fix this program
[ 1158.896738][ T5942] usb 4-1: config 0 descriptor??
[ 1159.176973][ T9793] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 1159.515372][ T9793] usb 3-1: Using ep0 maxpacket: 8
[ 1159.530637][ T9793] usb 3-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=46.ac
[ 1159.651818][ T9793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1159.807123][ T9793] usb 3-1: Product: syz
[ 1159.897924][ T9793] usb 3-1: Manufacturer: syz
[ 1159.993890][ T9793] usb 3-1: SerialNumber: syz
[ 1160.226776][ T9793] usb 3-1: config 0 descriptor??
[ 1160.250564][ T9793] kl5kusb105 3-1:0.0: KL5KUSB105D / PalmConnect converter detected
[ 1160.276974][ T9793] usb 3-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[ 1160.481495][T16424] netlink: 'syz.2.2750': attribute type 1 has an invalid length.
[ 1160.617510][T16449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1160.620357][T16424] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2750'.
[ 1160.654553][T16449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1160.686855][T16424] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2750'.
[ 1160.888518][ T9793] usb 3-1: USB disconnect, device number 50
[ 1161.113296][ T9793] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[ 1161.166320][ T9793] kl5kusb105 3-1:0.0: device disconnected
[ 1161.387145][ T9761] usb 4-1: USB disconnect, device number 49
[ 1161.762385][T16465] sch_tbf: burst 64 is lower than device lo mtu (65550) !
[ 1162.418051][T16472] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1164.564065][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2765'.
[ 1164.660413][ T9761] usb 6-1: new full-speed USB device number 54 using dummy_hcd
[ 1164.785527][T16505] batadv0: left allmulticast mode
[ 1164.830369][T16505] batadv0: left promiscuous mode
[ 1164.883766][ T9761] usb 6-1: device descriptor read/all, error -71
[ 1166.572737][T16536] pim6reg1: entered promiscuous mode
[ 1166.590722][T16536] pim6reg1: entered allmulticast mode
[ 1169.485498][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1169.496648][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1169.506788][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1169.515467][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1169.523790][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1169.590386][T11387] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1169.614941][T11387] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1169.626338][T11387] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1169.644293][T11387] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1169.654251][T11387] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1169.742199][T16571] lo speed is unknown, defaulting to 1000
[ 1170.208824][T16571] chnl_net:caif_netlink_parms(): no params data found
[ 1170.350465][ T9761] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 1170.568403][ T9761] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1170.600976][ T9761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1170.660425][ T9761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1170.692152][T16600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2785'.
[ 1170.705716][ T9761] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1170.720598][T16571] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1170.727883][T16571] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1170.747590][ T9761] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1170.760618][T16571] bridge_slave_0: entered allmulticast mode
[ 1170.776880][ T9761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1170.787877][T16571] bridge_slave_0: entered promiscuous mode
[ 1170.812973][T16571] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1170.826397][ T9761] usb 1-1: config 0 descriptor??
[ 1170.845253][T16571] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1170.865138][T16571] bridge_slave_1: entered allmulticast mode
[ 1170.893757][T16571] bridge_slave_1: entered promiscuous mode
[ 1171.030693][T16608] IPVS: set_ctl: invalid protocol: 21284 0.0.0.0:20004
[ 1171.195803][T16571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1171.265924][T16571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1171.708387][T16571] team0: Port device team_slave_0 added
[ 1171.750265][T11387] Bluetooth: hci4: command tx timeout
[ 1171.826716][T16571] team0: Port device team_slave_1 added
[ 1172.666349][T16625] pim6reg1: entered promiscuous mode
[ 1172.675926][T16625] pim6reg1: entered allmulticast mode
[ 1172.706368][T16571] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1172.733718][T16571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1172.760020][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1172.815251][T16571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1172.917789][T16571] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1172.944920][T16571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1173.052463][T16571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1173.181244][T16635] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2790'.
[ 1173.410304][T16571] hsr_slave_0: entered promiscuous mode
[ 1173.451692][T16571] hsr_slave_1: entered promiscuous mode
[ 1173.605304][ T9761] usbhid 1-1:0.0: can't add hid device: -71
[ 1173.620348][ T9761] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1173.655503][ T9761] usb 1-1: USB disconnect, device number 41
[ 1173.870335][T11387] Bluetooth: hci4: command tx timeout
[ 1174.363227][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2792'.
[ 1175.036936][T16663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2796'.
[ 1175.663228][T16679] pim6reg1: entered promiscuous mode
[ 1175.690209][T16679] pim6reg1: entered allmulticast mode
[ 1175.910383][T11387] Bluetooth: hci4: command tx timeout
[ 1176.336534][T16571] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1176.419143][T16689] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2800'.
[ 1176.483529][T16571] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1176.635030][T16571] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1176.744856][T16571] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1177.150332][ T5942] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 1177.195533][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'.
[ 1177.218395][T16571] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1177.247368][T16699] vlan3: entered allmulticast mode
[ 1177.252723][T16699] erspan0: entered allmulticast mode
[ 1177.335275][T16571] 8021q: adding VLAN 0 to HW filter on device team0
[ 1177.355450][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.374895][ T5942] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1177.432379][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1177.455915][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1177.463256][ T6007] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1177.480308][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1177.497322][ T5942] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1177.513229][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1177.520461][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1177.542033][ T5942] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1177.575819][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1177.626615][ T5942] usb 1-1: config 0 descriptor??
[ 1177.994232][T11387] Bluetooth: hci4: command tx timeout
[ 1178.369574][T16724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2805'.
[ 1178.386766][T16722] input: syz0 as /devices/virtual/input/input54
[ 1180.080612][ T9748] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 1180.281632][T16571] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1180.320544][ T9748] usb 3-1: device descriptor read/64, error -71
[ 1180.401530][ T9761] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1180.595059][ T9761] usb 6-1: config 2 has an invalid interface number: 177 but max is 1
[ 1180.603939][ T9748] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 1180.625802][ T9761] usb 6-1: config 2 has an invalid interface number: 177 but max is 1
[ 1180.671320][ T9761] usb 6-1: config 2 has 1 interface, different from the descriptor's value: 2
[ 1180.730626][ T9761] usb 6-1: config 2 has no interface number 0
[ 1180.752869][ T9761] usb 6-1: config 2 interface 177 has no altsetting 1
[ 1180.840759][ T9748] usb 3-1: device descriptor read/64, error -71
[ 1180.850307][ T5942] usbhid 1-1:0.0: can't add hid device: -71
[ 1180.858466][ T5942] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1180.931534][ T9761] usb 6-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=1a.dd
[ 1180.962449][ T9761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1180.992840][ T9761] usb 6-1: Product: syz
[ 1181.001107][ T9748] usb usb3-port1: attempt power cycle
[ 1181.002939][ T9761] usb 6-1: Manufacturer: syz
[ 1181.011591][ T5942] usb 1-1: USB disconnect, device number 42
[ 1181.029538][ T9761] usb 6-1: SerialNumber: syz
[ 1181.207111][ T9793] hid (null): unknown global tag 0xe
[ 1181.247185][ T9793] hid-generic 0001:000B:00E6.001A: unknown global tag 0xe
[ 1181.370337][ T9793] hid-generic 0001:000B:00E6.001A: item 0 1 1 14 parsing failed
[ 1181.380580][ T9748] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 1181.407364][ T9793] hid-generic 0001:000B:00E6.001A: probe with driver hid-generic failed with error -22
[ 1181.440754][ T9748] usb 3-1: device descriptor read/8, error -71
[ 1181.710217][ T9748] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 1181.818544][ T9748] usb 3-1: device descriptor read/8, error -71
[ 1182.021075][ T9748] usb usb3-port1: unable to enumerate USB device
[ 1182.736686][T16571] veth0_vlan: entered promiscuous mode
[ 1182.903441][T16571] veth1_vlan: entered promiscuous mode
[ 1183.117043][T16571] veth0_macvtap: entered promiscuous mode
[ 1183.309487][T16571] veth1_macvtap: entered promiscuous mode
[ 1184.327245][T16571] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1184.343963][T16779] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2814'.
[ 1184.365362][T16571] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1184.412451][ T9761] usb 6-1: selecting invalid altsetting 1
[ 1184.418382][ T9761] sierra 6-1:2.177: Sierra USB modem converter detected
[ 1184.479643][ T9761] usb 6-1: Sierra USB modem converter now attached to ttyUSB0
[ 1184.501346][ T9761] usb 6-1: USB disconnect, device number 56
[ 1184.532809][T16571] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1184.639158][T16571] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1184.705856][ T9761] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1184.710430][T16571] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1184.895644][ T9761] sierra 6-1:2.177: device disconnected
[ 1185.320187][T16571] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1185.622339][T16797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2818'.
[ 1185.729743][T16789] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2817'.
[ 1185.739397][T16791] netlink: 'syz.3.2817': attribute type 32 has an invalid length.
[ 1186.430513][T16733] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 1186.491744][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1186.520393][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1186.590080][T16733] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1186.640529][T16733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1186.689187][T12992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1186.697170][T16733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1186.697208][T16733] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1186.697276][T16733] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1186.751474][T12992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1186.766464][T16733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1186.791942][T16733] usb 3-1: config 0 descriptor??
[ 1186.824302][T16809] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2823'.
[ 1188.753204][T16828] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1189.991046][T16733] usbhid 3-1:0.0: can't add hid device: -71
[ 1190.134747][T16733] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1190.225336][T16733] usb 3-1: USB disconnect, device number 55
[ 1190.400422][T16825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2826'.
[ 1190.791979][T16847] loop9: detected capacity change from 0 to 8
[ 1190.858643][T16847]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[ 1190.864743][T16847] loop9: partition table partially beyond EOD, truncated
[ 1190.873374][T16847] loop9: p1 size 81768186 extends beyond EOD, truncated
[ 1191.478072][T16837] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1192.125737][T16580] udevd[16580]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[ 1193.047122][T16863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2835'.
[ 1194.377907][T16873] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2836'.
[ 1194.390668][T16873] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2836'.
[ 1194.504634][ T9747] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1194.949992][ T9747] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1194.967684][ T9747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1194.979433][ T9747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1195.001769][ T9747] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1195.026195][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2840'.
[ 1195.095783][ T9747] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1195.105321][ T9747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1195.122570][T16867] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1195.131530][T16867] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1195.150778][ T9747] usb 4-1: config 0 descriptor??
[ 1195.350211][ T9761] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1195.494852][T16867] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1195.510565][ T9761] usb 6-1: device descriptor read/64, error -71
[ 1195.527771][T16867] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1195.735743][T16867] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1195.749293][T16867] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1195.760341][ T9761] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1195.768623][T16867] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1195.778169][T16867] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1195.900421][ T9761] usb 6-1: device descriptor read/64, error -71
[ 1196.022414][ T9761] usb usb6-port1: attempt power cycle
[ 1196.185840][T16886] ipvlan2: entered promiscuous mode
[ 1196.458553][T16886] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1196.940608][ T9761] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1196.965486][ T9761] usb 6-1: device descriptor read/8, error -71
[ 1197.480469][ T9761] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1197.819079][ T9747] usbhid 4-1:0.0: can't add hid device: -71
[ 1197.879152][ T9747] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1198.151090][ T9747] usb 4-1: USB disconnect, device number 50
[ 1198.237723][T16904] futex_wake_op: syz.2.2845 tries to shift op by -33; fix this program
[ 1198.272601][T16906] trusted_key: encrypted_key: key user:syz not found
[ 1198.281819][T16906] trusted_key: encrypted_key: key user:syz not found
[ 1198.318086][ T9761] usb 6-1: device descriptor read/8, error -71
[ 1198.608660][ T9761] usb usb6-port1: unable to enumerate USB device
[ 1199.549640][T16920] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2850'.
[ 1199.693464][T16932] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2852'.
[ 1199.719464][T16932] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2852'.
[ 1200.655401][T16944] FAULT_INJECTION: forcing a failure.
[ 1200.655401][T16944] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1200.700305][T16947] FAULT_INJECTION: forcing a failure.
[ 1200.700305][T16947] name failslab, interval 1, probability 0, space 0, times 0
[ 1200.714593][T16944] CPU: 1 UID: 0 PID: 16944 Comm: syz.3.2857 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) 
[ 1200.714623][T16944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1200.714638][T16944] Call Trace:
[ 1200.714648][T16944]  <TASK>
[ 1200.714659][T16944]  dump_stack_lvl+0x189/0x250
[ 1200.714700][T16944]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1200.714731][T16944]  ? __pfx__printk+0x10/0x10
[ 1200.714781][T16944]  should_fail_ex+0x414/0x560
[ 1200.714810][T16944]  _copy_to_user+0x31/0xb0
[ 1200.714845][T16944]  simple_read_from_buffer+0xe1/0x170
[ 1200.714884][T16944]  proc_fail_nth_read+0x1df/0x250
[ 1200.714912][T16944]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1200.714940][T16944]  ? rw_verify_area+0x258/0x650
[ 1200.714971][T16944]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1200.714997][T16944]  vfs_read+0x200/0x980
[ 1200.715037][T16944]  ? __pfx___mutex_lock+0x10/0x10
[ 1200.715068][T16944]  ? __pfx_vfs_read+0x10/0x10
[ 1200.715100][T16944]  ? __fget_files+0x2a/0x420
[ 1200.715128][T16944]  ? __fget_files+0x3a0/0x420
[ 1200.715147][T16944]  ? __fget_files+0x2a/0x420
[ 1200.715179][T16944]  ksys_read+0x145/0x250
[ 1200.715209][T16944]  ? __fget_files+0x2a/0x420
[ 1200.715232][T16944]  ? __pfx_ksys_read+0x10/0x10
[ 1200.715268][T16944]  ? do_syscall_64+0xba/0x210
[ 1200.715302][T16944]  do_syscall_64+0xf6/0x210
[ 1200.715332][T16944]  ? clear_bhb_loop+0x60/0xb0
[ 1200.715360][T16944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1200.715382][T16944] RIP: 0033:0x7f79f678d37c
[ 1200.715403][T16944] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1200.715429][T16944] RSP: 002b:00007f79f756d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1200.715452][T16944] RAX: ffffffffffffffda RBX: 00007f79f69b5fa0 RCX: 00007f79f678d37c
[ 1200.715469][T16944] RDX: 000000000000000f RSI: 00007f79f756d0a0 RDI: 0000000000000004
[ 1200.715484][T16944] RBP: 00007f79f756d090 R08: 0000000000000000 R09: 0000000000000000
[ 1200.715498][T16944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1200.715512][T16944] R13: 0000000000000000 R14: 00007f79f69b5fa0 R15: 00007ffe7264e3d8
[ 1200.715548][T16944]  </TASK>
[ 1200.810296][T16947] CPU: 0 UID: 0 PID: 16947 Comm: syz.7.2858 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) 
[ 1200.810330][T16947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1200.810345][T16947] Call Trace:
[ 1200.810356][T16947]  <TASK>
[ 1200.810367][T16947]  dump_stack_lvl+0x189/0x250
[ 1200.810410][T16947]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1200.810443][T16947]  ? __pfx__printk+0x10/0x10
[ 1200.810484][T16947]  ? __pfx___might_resched+0x10/0x10
[ 1200.810521][T16947]  ? fs_reclaim_acquire+0x7d/0x100
[ 1200.810554][T16947]  should_fail_ex+0x414/0x560
[ 1200.810585][T16947]  should_failslab+0xa8/0x100
[ 1200.810611][T16947]  __kmalloc_noprof+0xcb/0x4f0
[ 1200.810647][T16947]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 1200.810693][T16947]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 1200.810741][T16947]  genl_family_rcv_msg_doit+0xb8/0x300
[ 1200.810786][T16947]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1200.810825][T16947]  ? rcu_is_watching+0x15/0xb0
[ 1200.810862][T16947]  ? cap_capable+0x11f/0x460
[ 1200.810889][T16947]  ? safesetid_security_capable+0xa9/0x1a0
[ 1200.810919][T16947]  ? bpf_lsm_capable+0x9/0x20
[ 1200.810950][T16947]  ? security_capable+0x7e/0x2e0
[ 1200.810991][T16947]  genl_rcv_msg+0x60e/0x790
[ 1200.811034][T16947]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1200.811068][T16947]  ? __pfx_ieee802154_llsec_add_devkey+0x10/0x10
[ 1200.811126][T16947]  netlink_rcv_skb+0x219/0x490
[ 1200.811155][T16947]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1200.811202][T16947]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1200.811264][T16947]  ? down_read+0x1ad/0x2e0
[ 1200.811303][T16947]  genl_rcv+0x28/0x40
[ 1200.811334][T16947]  netlink_unicast+0x75b/0x8d0
[ 1200.811372][T16947]  netlink_sendmsg+0x805/0xb30
[ 1200.811398][T16947]  ? is_bpf_text_address+0x26/0x2b0
[ 1200.811441][T16947]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1200.811480][T16947]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1200.811507][T16947]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1200.811537][T16947]  __sock_sendmsg+0x219/0x270
[ 1200.811567][T16947]  ____sys_sendmsg+0x505/0x830
[ 1200.811608][T16947]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1200.811651][T16947]  ? import_iovec+0x74/0xa0
[ 1200.811690][T16947]  ___sys_sendmsg+0x21f/0x2a0
[ 1200.811726][T16947]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1200.811805][T16947]  ? __fget_files+0x2a/0x420
[ 1200.811826][T16947]  ? __fget_files+0x3a0/0x420
[ 1200.811863][T16947]  __x64_sys_sendmsg+0x19b/0x260
[ 1200.811899][T16947]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1200.811954][T16947]  ? do_syscall_64+0xba/0x210
[ 1200.811991][T16947]  do_syscall_64+0xf6/0x210
[ 1200.812023][T16947]  ? clear_bhb_loop+0x60/0xb0
[ 1200.812055][T16947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1200.812079][T16947] RIP: 0033:0x7f13f798e969
[ 1200.812101][T16947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1200.812121][T16947] RSP: 002b:00007f13f57f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1200.812146][T16947] RAX: ffffffffffffffda RBX: 00007f13f7bb5fa0 RCX: 00007f13f798e969
[ 1200.812170][T16947] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000006
[ 1200.812186][T16947] RBP: 00007f13f57f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1200.812201][T16947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1200.812216][T16947] R13: 0000000000000000 R14: 00007f13f7bb5fa0 R15: 00007fffa909ba48
[ 1200.812255][T16947]  </TASK>
[ 1201.451345][ T9747] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1201.481952][ T9761] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 1202.720621][ T9761] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1202.740152][ T9761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1203.430214][ T9761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1203.447388][ T9761] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1203.463798][ T9761] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1203.473125][ T9761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1203.514926][ T9761] usb 1-1: config 0 descriptor??
[ 1203.556671][ T9747] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1203.590958][ T9747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1203.631835][ T9747] usb 6-1: config 0 descriptor??
[ 1203.663680][ T9747] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1203.713625][ T9761] usb 1-1: can't set config #0, error -71
[ 1203.728657][ T9761] usb 1-1: USB disconnect, device number 43
[ 1203.841645][T16959] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2862'.
[ 1203.864686][ T9747] gspca_cpia1: usb_control_msg 05, error -71
[ 1203.882943][ T9747] gspca_cpia1: usb_control_msg 01, error -71
[ 1203.939033][ T9747] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0)
[ 1204.220940][ T9747] usb 6-1: USB disconnect, device number 61
[ 1206.632213][T16979] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2871'.
[ 1206.832911][ T5942] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[ 1208.920615][ T5942] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1208.972201][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1210.034887][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1210.998099][ T5942] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1210.998257][ T5942] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1210.998330][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1211.035780][ T5942] usb 1-1: config 0 descriptor??
[ 1211.288810][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1211.292358][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1211.293313][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1211.294917][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1211.295593][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1212.522519][ T5942] usb 1-1: can't set config #0, error -71
[ 1212.524295][ T5942] usb 1-1: USB disconnect, device number 44
[ 1213.360312][ T5829] Bluetooth: hci2: command tx timeout
[ 1213.453807][T17010] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2877'.
[ 1213.872303][T16999] lo speed is unknown, defaulting to 1000
[ 1213.911674][T17018] openvswitch: netlink: IP tunnel dst address not specified
[ 1213.982453][T17019] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1214.032468][T17016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2878'.
[ 1214.055134][T12995] bridge_slave_1: left allmulticast mode
[ 1214.089909][T12995] bridge_slave_1: left promiscuous mode
[ 1214.122503][T12995] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1214.198736][   T30] audit: type=1326 audit(1747396568.039:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17008 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996f8e969 code=0x7fc00000
[ 1214.223267][T12995] bridge_slave_0: left allmulticast mode
[ 1214.242263][T12995] bridge_slave_0: left promiscuous mode
[ 1214.263768][T12995] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1214.281421][T17026] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2881'.
[ 1214.302010][   T30] audit: type=1326 audit(1747396568.039:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17008 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe996f8e969 code=0x7fc00000
[ 1214.444053][   T30] audit: type=1326 audit(1747396568.039:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17008 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996f8e969 code=0x7fc00000
[ 1214.605609][   T30] audit: type=1326 audit(1747396568.039:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17008 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996f8e969 code=0x7fc00000
[ 1214.726802][T17033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2882'.
[ 1214.779305][   T30] audit: type=1326 audit(1747396568.039:5913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17008 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996f8e969 code=0x7fc00000
[ 1214.995159][   T30] audit: type=1326 audit(1747396568.039:5914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17008 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996f8e969 code=0x7fc00000
[ 1215.254865][   T30] audit: type=1326 audit(1747396568.039:5915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17008 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996f8e969 code=0x7fc00000
[ 1215.431752][ T5829] Bluetooth: hci2: command tx timeout
[ 1216.057407][   T30] audit: type=1326 audit(1747396568.039:5916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17008 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996f8e969 code=0x7fc00000
[ 1216.159788][   T30] audit: type=1326 audit(1747396568.039:5917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17008 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996f8e969 code=0x7fc00000
[ 1216.318303][   T30] audit: type=1326 audit(1747396568.039:5918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17008 comm="syz.0.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe996f8e969 code=0x7fc00000
[ 1216.871569][T17059] loop9: detected capacity change from 0 to 8
[ 1216.890567][T17059]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[ 1216.896198][T17059] loop9: partition table partially beyond EOD, truncated
[ 1216.904811][T17059] loop9: p1 size 81768186 extends beyond EOD, truncated
[ 1217.550453][ T5829] Bluetooth: hci2: command tx timeout
[ 1217.672171][T16580] udevd[16580]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[ 1219.000533][ T9751] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 1219.171911][ T9751] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1219.184665][ T9751] usb 6-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df
[ 1219.207422][ T9751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1219.241315][ T9751] usb 6-1: config 0 descriptor??
[ 1219.265051][ T9751] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected.
[ 1219.285773][T12995] bond0 (unregistering): left promiscuous mode
[ 1219.300647][T12995] bond_slave_0: left promiscuous mode
[ 1219.321493][T12995] bond_slave_1: left promiscuous mode
[ 1219.338416][T12995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1219.360016][T12995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1219.389405][T12995] bond0 (unregistering): Released all slaves
[ 1219.512819][T17074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1219.537250][T17074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1219.612472][T12995] : left promiscuous mode
[ 1219.650259][ T5829] Bluetooth: hci2: command tx timeout
[ 1219.660874][ T9751] pwc: send_video_command error -71
[ 1219.666139][ T9751] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1219.707953][ T9751] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71
[ 1219.849090][T17080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2890'.
[ 1219.881477][ T9751] usb 6-1: USB disconnect, device number 62
[ 1220.684077][T17086] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2892'.
[ 1221.727208][T17098] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2894'.
[ 1222.810062][T16999] chnl_net:caif_netlink_parms(): no params data found
[ 1226.908367][T17134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2901'.
[ 1226.940302][ T9761] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 1227.090494][ T9761] usb 3-1: device descriptor read/64, error -71
[ 1227.216811][T17141] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2904'.
[ 1227.276479][T16999] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1227.293189][T16999] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1227.300914][T17144] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2905'.
[ 1227.320072][T16999] bridge_slave_0: entered allmulticast mode
[ 1227.331265][ T9761] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 1227.360848][T16999] bridge_slave_0: entered promiscuous mode
[ 1227.431263][T12995] team0: left promiscuous mode
[ 1227.446361][T12995] team_slave_0: left promiscuous mode
[ 1227.468950][T12995] team_slave_1: left promiscuous mode
[ 1227.474944][ T9761] usb 3-1: device descriptor read/64, error -71
[ 1227.602174][T12995] hsr_slave_0: left promiscuous mode
[ 1227.608279][ T9761] usb usb3-port1: attempt power cycle
[ 1227.655010][T12995] hsr_slave_1: left promiscuous mode
[ 1227.870345][ T9751] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1227.996970][ T9761] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 1228.110827][ T9761] usb 3-1: device descriptor read/8, error -71
[ 1228.114833][ T9751] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1228.175798][ T9751] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1228.211691][ T9751] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1228.243650][ T9751] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[ 1228.315473][ T9751] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[ 1228.370456][ T9761] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 1228.434573][ T9761] usb 3-1: device descriptor read/8, error -71
[ 1228.540923][ T9751] usb 6-1: Manufacturer: syz
[ 1228.624876][ T9761] usb usb3-port1: unable to enumerate USB device
[ 1228.731236][ T9751] usb 6-1: config 0 descriptor??
[ 1228.873109][ T9751] smsusb:smsusb_probe: board id=9, interface number 0
[ 1228.896834][ T9751] smsusb:smsusb_probe: Device initialized with return code -19
[ 1229.893816][T17170] fuse: Bad value for 'fd'
[ 1230.558623][ T9761] usb 6-1: USB disconnect, device number 63
[ 1231.561634][T12995] team0 (unregistering): Port device team_slave_1 removed
[ 1231.841660][ T9751] hid-generic 002F:0004:0007.001B: unknown main item tag 0x0
[ 1231.849549][ T9751] hid-generic 002F:0004:0007.001B: unknown main item tag 0x0
[ 1232.360271][ T9751] hid-generic 002F:0004:0007.001B: unknown main item tag 0x0
[ 1232.369305][ T9751] hid-generic 002F:0004:0007.001B: unknown main item tag 0x0
[ 1232.403991][ T9751] hid-generic 002F:0004:0007.001B: unknown main item tag 0x0
[ 1232.450357][ T9751] hid-generic 002F:0004:0007.001B: unknown main item tag 0x0
[ 1232.457835][ T9751] hid-generic 002F:0004:0007.001B: unknown main item tag 0x0
[ 1232.520206][ T9751] hid-generic 002F:0004:0007.001B: unknown main item tag 0x0
[ 1232.545923][ T9751] hid-generic 002F:0004:0007.001B: unknown main item tag 0x0
[ 1232.563943][T12995] team0 (unregistering): Port device team_slave_0 removed
[ 1232.575207][ T9751] hid-generic 002F:0004:0007.001B: unknown main item tag 0x0
[ 1232.590942][T17188] netlink: 388 bytes leftover after parsing attributes in process `syz.7.2917'.
[ 1232.600209][ T9751] hid-generic 002F:0004:0007.001B: unknown main item tag 0x0
[ 1232.607657][ T9751] hid-generic 002F:0004:0007.001B: unknown main item tag 0x0
[ 1232.619674][ T9793] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 1232.630458][ T9751] hid-generic 002F:0004:0007.001B: unknown main item tag 0x0
[ 1232.637911][ T9751] hid-generic 002F:0004:0007.001B: unknown main item tag 0x0
[ 1232.694842][ T9751] hid-generic 002F:0004:0007.001B: unknown main item tag 0x0
[ 1232.717054][ T9751] hid-generic 002F:0004:0007.001B: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz1
[ 1232.900539][ T9793] usb 1-1: Using ep0 maxpacket: 32
[ 1232.907594][ T9793] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1232.942650][ T9793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1233.038859][ T9793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1233.212289][T17194] loop9: detected capacity change from 0 to 8
[ 1233.243577][T17194]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[ 1233.249178][T17194] loop9: partition table partially beyond EOD, truncated
[ 1233.257810][T17194] loop9: p1 size 81768186 extends beyond EOD, truncated
[ 1233.878546][ T9793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 1233.938616][ T9793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 1234.015695][ T9793] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1234.055900][ T9793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1234.179596][ T6302] udevd[6302]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[ 1234.194061][ T9793] usb 1-1: Product: syz
[ 1234.243397][ T9793] usb 1-1: Manufacturer: syz
[ 1234.248288][ T9793] usb 1-1: SerialNumber: syz
[ 1234.514643][ T9793] usb 1-1: config 0 descriptor??
[ 1234.630644][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1234.643154][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1234.669653][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1234.698588][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1234.842133][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1234.989349][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1235.035032][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2921'.
[ 1235.166976][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1235.177005][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1235.190610][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1235.197931][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1235.219447][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1235.229704][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1235.239700][T17189] fido_id[17189]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1235.395810][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1235.409357][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1235.470241][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1235.494336][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1235.520647][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1235.558201][T17208] tmpfs: Bad value for 'mpol'
[ 1235.609919][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1235.652634][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1235.710277][ T9793] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 1235.757542][ T9793] input input57: Timeout waiting for response from device.
[ 1235.824719][ T9793] usb 1-1: USB disconnect, device number 45
[ 1238.806620][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.938036][T17233] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2928'.
[ 1239.136655][T16999] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1239.145808][T16999] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1239.160430][T16999] bridge_slave_1: entered allmulticast mode
[ 1239.289443][T16999] bridge_slave_1: entered promiscuous mode
[ 1239.408900][T17211] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1239.644610][T16999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1239.742685][T16999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1240.242588][T16999] team0: Port device team_slave_0 added
[ 1241.292765][T16999] team0: Port device team_slave_1 added
[ 1241.323598][T12995] IPVS: stop unused estimator thread 0...
[ 1242.162584][T16999] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1242.173767][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1242.262139][T16999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1242.333853][T16999] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1242.358176][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1242.456107][T16999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1243.437505][T16999] hsr_slave_0: entered promiscuous mode
[ 1243.475488][T16999] hsr_slave_1: entered promiscuous mode
[ 1243.521078][T16999] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1243.528860][T16999] Cannot create hsr debugfs directory
[ 1245.653820][T17286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2939'.
[ 1246.040055][T17289] FAULT_INJECTION: forcing a failure.
[ 1246.040055][T17289] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1246.056686][T17289] CPU: 1 UID: 0 PID: 17289 Comm: syz.2.2940 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) 
[ 1246.056707][T17289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1246.056718][T17289] Call Trace:
[ 1246.056725][T17289]  <TASK>
[ 1246.056731][T17289]  dump_stack_lvl+0x189/0x250
[ 1246.056762][T17289]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1246.056784][T17289]  ? __pfx__printk+0x10/0x10
[ 1246.056819][T17289]  should_fail_ex+0x414/0x560
[ 1246.056840][T17289]  _copy_to_user+0x31/0xb0
[ 1246.056866][T17289]  bpf_test_finish+0x4d1/0x660
[ 1246.056893][T17289]  ? __pfx_bpf_test_finish+0x10/0x10
[ 1246.056927][T17289]  ? bpf_test_init+0x133/0x170
[ 1246.056955][T17289]  bpf_prog_test_run_xdp+0x79a/0xf90
[ 1246.056998][T17289]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 1246.057026][T17289]  ? __fget_files+0x2a/0x420
[ 1246.057046][T17289]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 1246.057065][T17289]  bpf_prog_test_run+0x2a9/0x340
[ 1246.057090][T17289]  __sys_bpf+0x4a4/0x860
[ 1246.057110][T17289]  ? __pfx___sys_bpf+0x10/0x10
[ 1246.057139][T17289]  ? ksys_write+0x1f0/0x250
[ 1246.057160][T17289]  ? rcu_is_watching+0x15/0xb0
[ 1246.057192][T17289]  __x64_sys_bpf+0x7c/0x90
[ 1246.057209][T17289]  do_syscall_64+0xf6/0x210
[ 1246.057232][T17289]  ? clear_bhb_loop+0x60/0xb0
[ 1246.057251][T17289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1246.057267][T17289] RIP: 0033:0x7f0c47b8e969
[ 1246.057281][T17289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1246.057296][T17289] RSP: 002b:00007f0c489d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1246.057313][T17289] RAX: ffffffffffffffda RBX: 00007f0c47db5fa0 RCX: 00007f0c47b8e969
[ 1246.057325][T17289] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[ 1246.057336][T17289] RBP: 00007f0c489d7090 R08: 0000000000000000 R09: 0000000000000000
[ 1246.057346][T17289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1246.057355][T17289] R13: 0000000000000000 R14: 00007f0c47db5fa0 R15: 00007ffd23250b98
[ 1246.057379][T17289]  </TASK>
[ 1247.170878][ T9751] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 1247.253814][ T9748] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1247.379642][ T9751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1247.401692][ T9751] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1247.430568][ T9748] usb 6-1: Using ep0 maxpacket: 8
[ 1247.446481][ T9751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1247.469655][ T9748] usb 6-1: config 135 has an invalid interface number: 230 but max is 0
[ 1247.505917][ T9751] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[ 1247.520476][ T9748] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[ 1247.542819][ T9751] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[ 1247.551536][ T9748] usb 6-1: config 135 has no interface number 0
[ 1247.569639][ T9751] usb 1-1: Manufacturer: syz
[ 1247.588493][ T9748] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[ 1247.682747][ T9748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1248.029623][ T9751] usb 1-1: config 0 descriptor??
[ 1248.157846][ T9748] usb 6-1: Product: syz
[ 1248.192944][ T9748] usb 6-1: Manufacturer: syz
[ 1248.197600][ T9748] usb 6-1: SerialNumber: syz
[ 1248.203261][ T9751] smsusb:smsusb_probe: board id=9, interface number 0
[ 1248.244890][ T9751] smsusb:smsusb_probe: Device initialized with return code -19
[ 1248.579704][T17302] kvm: emulating exchange as write
[ 1248.947895][ T9748] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 1249.360970][ T9747] usb 1-1: USB disconnect, device number 46
[ 1249.400173][ T9748] usb 3-1: Using ep0 maxpacket: 8
[ 1249.440624][ T9748] usb 3-1: config 0 has no interfaces?
[ 1249.463175][ T9748] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1249.507284][ T9748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1249.553280][ T9748] usb 3-1: config 0 descriptor??
[ 1249.568449][T16733] usb 6-1: USB disconnect, device number 64
[ 1249.982856][T17326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1250.000844][T17326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1250.043882][   T30] kauditd_printk_skb: 3 callbacks suppressed
[ 1250.043903][   T30] audit: type=1326 audit(1747396603.889:5922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17325 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c47b8e969 code=0x7ffc0000
[ 1250.050313][T17335] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2949'.
[ 1250.086406][T17326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1250.128606][T16999] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1250.140076][T17326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1250.409075][T16999] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1250.540672][   T30] audit: type=1326 audit(1747396603.919:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17325 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0c47b8e969 code=0x7ffc0000
[ 1250.563856][ T9748] usb 3-1: USB disconnect, device number 60
[ 1250.645942][   T30] audit: type=1326 audit(1747396603.919:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17325 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c47b8e969 code=0x7ffc0000
[ 1250.694676][T16999] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1250.788072][   T30] audit: type=1326 audit(1747396603.919:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17325 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f0c47b8e969 code=0x7ffc0000
[ 1250.816884][T16999] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1250.934328][   T30] audit: type=1326 audit(1747396603.919:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17325 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c47b8e969 code=0x7ffc0000
[ 1250.995874][   T30] audit: type=1326 audit(1747396603.919:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17325 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f0c47b8e969 code=0x7ffc0000
[ 1251.080587][   T30] audit: type=1326 audit(1747396603.919:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17325 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c47b8e969 code=0x7ffc0000
[ 1251.150293][T17209] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1251.220344][   T30] audit: type=1326 audit(1747396603.919:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17325 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0c47b8e969 code=0x7ffc0000
[ 1251.320508][T17209] usb 6-1: Using ep0 maxpacket: 8
[ 1251.479223][T17209] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1251.650517][   T30] audit: type=1326 audit(1747396603.919:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17325 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c47b8e969 code=0x7ffc0000
[ 1251.679343][T17209] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1251.850381][T17209] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1251.880468][   T30] audit: type=1326 audit(1747396603.919:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17325 comm="syz.2.2947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0c47b8e969 code=0x7ffc0000
[ 1251.883160][T16999] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1251.933933][T17209] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1252.091470][T17355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2953'.
[ 1252.430380][T17209] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1252.473241][T17209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1252.557624][T17209] hub 6-1:1.0: bad descriptor, ignoring hub
[ 1252.582223][T16999] 8021q: adding VLAN 0 to HW filter on device team0
[ 1252.594967][T17209] hub 6-1:1.0: probe with driver hub failed with error -5
[ 1252.637072][T17209] cdc_wdm 6-1:1.0: skipping garbage
[ 1252.655726][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1252.664560][ T6007] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1252.670437][T17209] cdc_wdm 6-1:1.0: skipping garbage
[ 1252.700718][T17209] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1252.734323][T17209] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1252.921808][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1252.929087][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1254.533213][ T9747] usb 6-1: USB disconnect, device number 65
[ 1255.390760][T16733] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 1255.731880][T17391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2960'.
[ 1255.770982][T16733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1255.840755][T16733] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1255.917190][T16733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1256.016298][T16733] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[ 1256.055703][T16733] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[ 1256.070845][T16733] usb 3-1: Manufacturer: syz
[ 1256.110850][T16733] usb 3-1: config 0 descriptor??
[ 1256.122572][T16733] smsusb:smsusb_probe: board id=9, interface number 0
[ 1256.184536][T16733] smsusb:smsusb_probe: Device initialized with return code -19
[ 1256.245986][T17391] bond0: (slave bond_slave_0): Releasing backup interface
[ 1256.339151][T17395] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2961'.
[ 1256.392711][T17395] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2961'.
[ 1256.480852][T16999] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1256.815208][T16999] veth0_vlan: entered promiscuous mode
[ 1256.875915][T16999] veth1_vlan: entered promiscuous mode
[ 1257.092467][T16999] veth0_macvtap: entered promiscuous mode
[ 1257.192309][T17415] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2964'.
[ 1258.218151][T16999] veth1_macvtap: entered promiscuous mode
[ 1258.457861][T16999] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1258.483886][ T9793] usb 3-1: USB disconnect, device number 61
[ 1258.588531][T16999] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1258.648825][T16999] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1258.751038][T16999] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1258.767176][T16999] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1258.776524][T16999] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1258.980334][ T9793] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1259.612868][ T9793] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1259.643347][ T9793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1259.690190][ T9793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1259.739384][T12995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1259.760276][ T9793] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1259.805094][T12995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1259.840299][ T9793] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1259.893328][ T9793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1259.941636][ T9793] usb 6-1: config 0 descriptor??
[ 1260.041933][T12992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1260.049952][T12992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1260.400260][T17209] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 1260.420716][ T9793] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving
[ 1260.494232][ T9793] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1260.605914][T17209] usb 3-1: Using ep0 maxpacket: 32
[ 1260.659096][T17209] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[ 1260.845700][T17209] usb 3-1: config 0 has no interface number 0
[ 1260.875996][T17209] usb 3-1: config 0 interface 184 has no altsetting 0
[ 1260.935761][T17209] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1260.975459][T17209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1260.991439][T17209] usb 3-1: Product: syz
[ 1260.995744][T17209] usb 3-1: Manufacturer: syz
[ 1261.057879][T17209] usb 3-1: SerialNumber: syz
[ 1261.091579][T17209] usb 3-1: config 0 descriptor??
[ 1261.112456][T17209] smsc75xx v1.0.0
[ 1261.129771][T17209] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1261.245607][T17209] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22
[ 1261.706076][T17452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1261.921570][T17452] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1262.300288][ T9747] usb 6-1: reset high-speed USB device number 66 using dummy_hcd
[ 1263.820207][ T5829] block nbd3: Receive control failed (result -32)
[ 1263.944969][T17456] block nbd3: shutting down sockets
[ 1264.055298][T16733] usb 3-1: USB disconnect, device number 62
[ 1265.376176][T17478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2975'.
[ 1266.380560][ T9793] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1266.620817][ T9793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1266.668951][ T9793] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1266.741752][ T9793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1266.816803][ T9793] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[ 1266.855711][T11387] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1266.874358][T11387] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1266.900601][T11387] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1266.910377][ T9793] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[ 1266.950363][ T9793] usb 4-1: Manufacturer: syz
[ 1266.958415][T11387] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1266.966759][ T9793] usb 4-1: config 0 descriptor??
[ 1266.979968][ T9793] smsusb:smsusb_probe: board id=9, interface number 0
[ 1266.990429][ T9793] smsusb:smsusb_probe: Device initialized with return code -19
[ 1266.998232][T11387] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1267.582484][ T9748] usb 6-1: USB disconnect, device number 66
[ 1268.218809][ T6007] bond0: (slave netdevsim0): Releasing backup interface
[ 1268.407778][T17491] lo speed is unknown, defaulting to 1000
[ 1268.667655][ T9748] usb 4-1: USB disconnect, device number 51
[ 1268.671343][T17492] lo speed is unknown, defaulting to 1000
[ 1269.042735][ T5829] Bluetooth: hci0: command tx timeout
[ 1269.653722][T17518] overlayfs: missing 'lowerdir'
[ 1269.691177][T17518] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1271.033859][ T6007] bridge_slave_1: left allmulticast mode
[ 1271.070139][ T6007] bridge_slave_1: left promiscuous mode
[ 1271.083590][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1271.159488][ T5829] Bluetooth: hci0: command tx timeout
[ 1271.299110][ T6007] bridge_slave_0: left allmulticast mode
[ 1271.317914][ T6007] bridge_slave_0: left promiscuous mode
[ 1271.338471][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1271.654497][T17547] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2987'.
[ 1272.910638][T16733] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 1273.170574][T16733] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1273.194332][ T5829] Bluetooth: hci0: command tx timeout
[ 1273.380712][T16733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1273.395384][T16733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1273.411027][T16733] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1273.444630][T16733] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1273.454206][T16733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1273.472444][T16733] usb 6-1: config 0 descriptor??
[ 1273.918796][T16733] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving
[ 1273.993609][T16733] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1275.270737][ T5829] Bluetooth: hci0: command tx timeout
[ 1275.670963][ T6007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1275.705484][ T6007] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[ 1275.786674][ T6007] bond0 (unregistering): Released all slaves
[ 1275.928226][ T6007] bond1 (unregistering): Released all slaves
[ 1276.015717][ T6007] bond2 (unregistering): Released all slaves
[ 1276.030583][T16733] usb 6-1: reset high-speed USB device number 67 using dummy_hcd
[ 1276.437261][ T6007] ave_0: left promiscuous mode
[ 1276.618971][ T6007] tipc: Left network mode
[ 1277.216368][T17492] chnl_net:caif_netlink_parms(): no params data found
[ 1277.550504][ T6007] hsr_slave_0: left promiscuous mode
[ 1277.600820][ T6007] hsr_slave_1: left promiscuous mode
[ 1277.653073][ T6007] batman_adv: batadv0: Removing interface: dummy0
[ 1277.696397][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1277.783018][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1278.255103][T17006] usb 6-1: USB disconnect, device number 67
[ 1278.962237][T17599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2998'.
[ 1280.283326][T17006] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0
[ 1280.291380][T17006] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0
[ 1280.300201][T17006] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0
[ 1280.307678][T17006] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0
[ 1280.330154][T17006] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0
[ 1280.337638][T17006] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0
[ 1280.414942][T17006] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0
[ 1280.474329][T17006] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0
[ 1280.531522][T17006] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0
[ 1280.579552][T17006] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0
[ 1280.624578][T17006] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0
[ 1280.656517][T17006] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0
[ 1280.698318][T17006] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0
[ 1280.757550][T17006] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0
[ 1280.800050][T17006] hid-generic 002F:0004:0007.001E: unknown main item tag 0x0
[ 1280.808724][T17609] FAULT_INJECTION: forcing a failure.
[ 1280.808724][T17609] name failslab, interval 1, probability 0, space 0, times 0
[ 1280.860507][T17609] CPU: 1 UID: 0 PID: 17609 Comm: syz.5.3001 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) 
[ 1280.860543][T17609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1280.860557][T17609] Call Trace:
[ 1280.860567][T17609]  <TASK>
[ 1280.860577][T17609]  dump_stack_lvl+0x189/0x250
[ 1280.860617][T17609]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1280.860648][T17609]  ? __pfx__printk+0x10/0x10
[ 1280.860690][T17609]  ? __pfx___might_resched+0x10/0x10
[ 1280.860723][T17609]  ? fs_reclaim_acquire+0x7d/0x100
[ 1280.860755][T17609]  should_fail_ex+0x414/0x560
[ 1280.860786][T17609]  should_failslab+0xa8/0x100
[ 1280.860842][T17609]  __kmalloc_noprof+0xcb/0x4f0
[ 1280.860876][T17609]  ? kfree+0x4d/0x440
[ 1280.860904][T17609]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1280.860941][T17609]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1280.860976][T17609]  ? tomoyo_domain+0xda/0x130
[ 1280.861018][T17609]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1280.861043][T17609]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1280.861071][T17609]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1280.861116][T17609]  ? __lock_acquire+0xaac/0xd20
[ 1280.861170][T17609]  ? __fget_files+0x2a/0x420
[ 1280.861197][T17609]  ? __fget_files+0x3a0/0x420
[ 1280.861217][T17609]  ? __fget_files+0x2a/0x420
[ 1280.861244][T17609]  security_file_ioctl+0xcb/0x2d0
[ 1280.861274][T17609]  __se_sys_ioctl+0x47/0x170
[ 1280.861307][T17609]  do_syscall_64+0xf6/0x210
[ 1280.861339][T17609]  ? clear_bhb_loop+0x60/0xb0
[ 1280.861368][T17609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1280.861390][T17609] RIP: 0033:0x7fa1d318e969
[ 1280.861410][T17609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1280.861430][T17609] RSP: 002b:00007fa1d3f7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1280.861454][T17609] RAX: ffffffffffffffda RBX: 00007fa1d33b5fa0 RCX: 00007fa1d318e969
[ 1280.861471][T17609] RDX: 0000200000000040 RSI: 000000004010ae68 RDI: 0000000000000004
[ 1280.861486][T17609] RBP: 00007fa1d3f7e090 R08: 0000000000000000 R09: 0000000000000000
[ 1280.861500][T17609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1280.861514][T17609] R13: 0000000000000000 R14: 00007fa1d33b5fa0 R15: 00007ffc05ad4788
[ 1280.861551][T17609]  </TASK>
[ 1280.861586][T17609] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1280.931140][T17006] hid-generic 002F:0004:0007.001E: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz1
[ 1283.060990][ T9793] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1284.370305][ T9793] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1284.382418][ T9793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1284.400505][ T9793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1284.410807][ T9793] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1284.632156][ T9793] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1285.186096][T17639] netlink: zone id is out of range
[ 1285.239487][ T9793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1285.252920][ T9793] usb 6-1: config 0 descriptor??
[ 1285.288186][T17639] netlink: set zone limit has 4 unknown bytes
[ 1285.308618][ T5829] Bluetooth: hci4: unknown advertising packet type: 0x7f
[ 1285.308701][ T5829] Bluetooth: hci4: Dropping invalid advertising data
[ 1285.323775][ T5829] Bluetooth: hci4: Malformed LE Event: 0x02
[ 1285.487729][ T6007] team0 (unregistering): Port device team_slave_1 removed
[ 1285.785200][ T9793] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving
[ 1285.961192][ T9793] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1286.180469][ T6007] team0 (unregistering): Port device team_slave_0 removed
[ 1286.285232][T17006] usb 6-1: USB disconnect, device number 68
[ 1286.487652][T17653] fido_id[17653]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1286.603726][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3014'.
[ 1287.097287][T17661] FAULT_INJECTION: forcing a failure.
[ 1287.097287][T17661] name failslab, interval 1, probability 0, space 0, times 0
[ 1287.159508][T17661] CPU: 1 UID: 0 PID: 17661 Comm: syz.5.3016 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) 
[ 1287.159550][T17661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1287.159564][T17661] Call Trace:
[ 1287.159575][T17661]  <TASK>
[ 1287.159586][T17661]  dump_stack_lvl+0x189/0x250
[ 1287.159626][T17661]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1287.159658][T17661]  ? __pfx__printk+0x10/0x10
[ 1287.159701][T17661]  ? __pfx___might_resched+0x10/0x10
[ 1287.159735][T17661]  ? fs_reclaim_acquire+0x7d/0x100
[ 1287.159767][T17661]  should_fail_ex+0x414/0x560
[ 1287.159798][T17661]  should_failslab+0xa8/0x100
[ 1287.159822][T17661]  __kmalloc_noprof+0xcb/0x4f0
[ 1287.159855][T17661]  ? kfree+0x4d/0x440
[ 1287.159883][T17661]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1287.159922][T17661]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1287.159955][T17661]  ? tomoyo_domain+0xda/0x130
[ 1287.159998][T17661]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1287.160025][T17661]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1287.160054][T17661]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1287.160101][T17661]  ? __lock_acquire+0xaac/0xd20
[ 1287.160153][T17661]  ? __fget_files+0x2a/0x420
[ 1287.160179][T17661]  ? __fget_files+0x3a0/0x420
[ 1287.160198][T17661]  ? __fget_files+0x2a/0x420
[ 1287.160224][T17661]  security_file_ioctl+0xcb/0x2d0
[ 1287.160253][T17661]  __se_sys_ioctl+0x47/0x170
[ 1287.160284][T17661]  do_syscall_64+0xf6/0x210
[ 1287.160316][T17661]  ? clear_bhb_loop+0x60/0xb0
[ 1287.160344][T17661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1287.160366][T17661] RIP: 0033:0x7fa1d318e969
[ 1287.160386][T17661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1287.160407][T17661] RSP: 002b:00007fa1d3f5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1287.160431][T17661] RAX: ffffffffffffffda RBX: 00007fa1d33b6080 RCX: 00007fa1d318e969
[ 1287.160448][T17661] RDX: 0000200000000200 RSI: 0000000000000001 RDI: 0000000000000054
[ 1287.160463][T17661] RBP: 00007fa1d3f5d090 R08: 0000000000000000 R09: 0000000000000000
[ 1287.160477][T17661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1287.160490][T17661] R13: 0000000000000000 R14: 00007fa1d33b6080 R15: 00007ffc05ad4788
[ 1287.160537][T17661]  </TASK>
[ 1287.432245][T17661] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1287.441724][T17661] program syz.5.3016 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1290.321086][T17682] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[ 1291.279572][T17657] vlan2: entered allmulticast mode
[ 1291.290794][T17657] erspan0: entered allmulticast mode
[ 1292.083857][T11387] Bluetooth: hci4: command 0x0406 tx timeout
[ 1292.745883][T17492] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1292.812781][T17492] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1292.861126][T17492] bridge_slave_0: entered allmulticast mode
[ 1292.907787][T17492] bridge_slave_0: entered promiscuous mode
[ 1292.967855][T17492] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1293.001161][T17492] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1293.036564][T17492] bridge_slave_1: entered allmulticast mode
[ 1293.072460][T17492] bridge_slave_1: entered promiscuous mode
[ 1293.126461][T17712] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13)
[ 1293.133960][T17712] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1293.277916][T17712] vhci_hcd vhci_hcd.0: Device attached
[ 1293.448744][ T9793] vhci_hcd: vhci_device speed not set
[ 1293.613199][T17719] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15)
[ 1293.619890][T17719] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1293.675568][ T9793] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[ 1293.815953][T17492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1293.833814][ T6007] IPVS: stop unused estimator thread 0...
[ 1293.842744][T17492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1293.889020][T17719] vhci_hcd vhci_hcd.0: Device attached
[ 1293.987914][T17712] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(21)
[ 1293.994581][T17712] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1294.013023][T17712] vhci_hcd vhci_hcd.0: Device attached
[ 1294.562808][T17704] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(18)
[ 1294.569490][T17704] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1294.652756][T17737] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(17)
[ 1294.659461][T17737] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1294.821639][T17743] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[ 1295.513417][T17704] vhci_hcd vhci_hcd.0: Device attached
[ 1295.549915][T17712] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1295.587703][T17708] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1295.640454][T17737] vhci_hcd vhci_hcd.0: Device attached
[ 1295.649609][T17725] vhci_hcd: connection closed
[ 1295.658734][T12995] vhci_hcd: stop threads
[ 1295.669275][T12995] vhci_hcd: release socket
[ 1295.676441][T17730] vhci_hcd: connection closed
[ 1295.691585][T17714] vhci_hcd: connection reset by peer
[ 1295.694733][T17722] vhci_hcd: connection closed
[ 1295.753091][T12995] vhci_hcd: disconnect device
[ 1296.015692][T12995] vhci_hcd: stop threads
[ 1296.068296][T12995] vhci_hcd: release socket
[ 1296.163489][T12995] vhci_hcd: disconnect device
[ 1296.276554][T17492] team0: Port device team_slave_0 added
[ 1296.590367][T12995] vhci_hcd: stop threads
[ 1296.595326][T12995] vhci_hcd: release socket
[ 1296.601950][T12995] vhci_hcd: disconnect device
[ 1296.609035][T12995] vhci_hcd: stop threads
[ 1296.629223][T12995] vhci_hcd: release socket
[ 1296.631014][T17492] team0: Port device team_slave_1 added
[ 1296.679568][T12995] vhci_hcd: disconnect device
[ 1296.785195][T17739] vhci_hcd: connection closed
[ 1296.808239][T12995] vhci_hcd: stop threads
[ 1296.830326][T12995] vhci_hcd: release socket
[ 1296.959385][T12995] vhci_hcd: disconnect device
[ 1297.050357][   T31] INFO: task syz.6.2730:16354 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1297.226198][   T31]       Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0
[ 1297.240791][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1297.316917][   T31] task:syz.6.2730      state:D stack:28280 pid:16354 tgid:16344 ppid:6965   task_flags:0x400140 flags:0x00000004
[ 1297.402846][   T31] Call Trace:
[ 1297.406206][   T31]  <TASK>
[ 1297.439824][   T31]  __schedule+0x168f/0x4c70
[ 1297.467388][   T31]  ? schedule+0x165/0x360
[ 1297.510235][   T31]  ? __pfx___schedule+0x10/0x10
[ 1297.515205][   T31]  ? schedule+0x91/0x360
[ 1297.519520][   T31]  schedule+0x165/0x360
[ 1297.620296][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1297.625888][   T31]  __mutex_lock+0x724/0xe80
[ 1297.690150][   T31]  ? __mutex_lock+0x51b/0xe80
[ 1297.694924][   T31]  ? blk_trace_ioctl+0x1b9/0x430
[ 1297.699936][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1297.754079][   T31]  ? stack_depot_save_flags+0x40/0x910
[ 1297.759670][   T31]  ? kasan_save_track+0x4f/0x80
[ 1297.780242][   T31]  ? kasan_save_track+0x3e/0x80
[ 1297.785223][   T31]  blk_trace_ioctl+0x1b9/0x430
[ 1297.800280][   T31]  ? __pfx_blk_trace_ioctl+0x10/0x10
[ 1297.805682][   T31]  ? kasan_quarantine_put+0xdd/0x220
[ 1297.822146][   T31]  blkdev_common_ioctl+0xdce/0x2450
[ 1297.827455][   T31]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1297.850145][   T31]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[ 1297.855894][   T31]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1297.882290][   T31]  ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 1297.888050][   T31]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1297.899864][   T31]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1297.912163][   T31]  ? __lock_acquire+0xaac/0xd20
[ 1297.917126][   T31]  ? __asan_memset+0x22/0x50
[ 1297.925053][   T31]  ? smack_file_ioctl+0x24a/0x340
[ 1297.936420][   T31]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1297.944697][   T31]  blkdev_ioctl+0x4ef/0x6d0
[ 1297.949290][   T31]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1297.956837][   T31]  ? __fget_files+0x3a0/0x420
[ 1297.964463][   T31]  ? __fget_files+0x2a/0x420
[ 1297.969138][   T31]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1297.974971][   T31]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1297.980409][   T31]  __se_sys_ioctl+0xf9/0x170
[ 1297.985065][   T31]  do_syscall_64+0xf6/0x210
[ 1297.989650][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1297.994597][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1298.000672][   T31] RIP: 0033:0x7f6a6af8e969
[ 1298.005141][   T31] RSP: 002b:00007f6a6bdce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1298.013778][   T31] RAX: ffffffffffffffda RBX: 00007f6a6b1b6240 RCX: 00007f6a6af8e969
[ 1298.022083][   T31] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000004
[ 1298.030545][   T31] RBP: 00007f6a6b010ab1 R08: 0000000000000000 R09: 0000000000000000
[ 1298.038577][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1298.047114][   T31] R13: 0000000000000000 R14: 00007f6a6b1b6240 R15: 00007ffd7c1815a8
[ 1298.055706][   T31]  </TASK>
[ 1298.058918][   T31] 
[ 1298.058918][   T31] Showing all locks held in the system:
[ 1298.068483][   T31] 1 lock held by khungtaskd/31:
[ 1298.102151][   T31]  #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1298.134177][   T31] 1 lock held by dhcpcd/5484:
[ 1298.138926][   T31]  #0: ffffffff8f2e4fc8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50
[ 1298.149450][   T31] 2 locks held by getty/5581:
[ 1298.154817][   T31]  #0: ffff88803064f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1298.165756][   T31]  #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1298.176787][   T31] 5 locks held by kworker/1:14/9793:
[ 1298.182516][   T31]  #0: ffff8880206f9148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[ 1298.194530][   T31]  #1: ffffc90003c0fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[ 1298.207030][   T31]  #2: ffff888028a3c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00
[ 1298.216483][   T31]  #3: ffff888028a3f510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00
[ 1298.227068][   T31]  #4: ffff888028752668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00
[ 1298.239558][   T31] 3 locks held by kworker/u8:16/12994:
[ 1298.245514][   T31]  #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[ 1298.257735][   T31]  #1: ffffc9000c0a7c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[ 1298.269262][   T31]  #2: ffffffff8f2e4fc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1298.278778][   T31] 3 locks held by kworker/u8:17/12995:
[ 1298.284717][   T31]  #0: ffff88801d779948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[ 1298.300899][   T31]  #1: ffffc9000e837c60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[ 1298.322880][   T31]  #2: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730
[ 1298.334423][   T31] 2 locks held by syz.6.2730/16345:
[ 1298.339693][   T31] 1 lock held by syz.6.2730/16354:
[ 1298.346706][   T31]  #0: ffff888144374398 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x1b9/0x430
[ 1298.355455][T16345] syz.6.2730: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null)
[ 1298.356978][   T31] 5 locks held by kworker/1:1/17429:
[ 1298.357028][T16345] ,cpuset=
[ 1298.372953][   T31]  #0: 
[ 1298.382697][T16345] /,mems_allowed=0-1
[ 1298.387007][   T31] ffff8880206f9148
[ 1298.390054][T16345] CPU: 1 UID: 0 PID: 16345 Comm: syz.6.2730 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) 
[ 1298.390083][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1298.390098][T16345] Call Trace:
[ 1298.390107][T16345]  <TASK>
[ 1298.390118][T16345]  dump_stack_lvl+0x189/0x250
[ 1298.390154][T16345]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[ 1298.390184][T16345]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1298.390217][T16345]  ? __pfx__printk+0x10/0x10
[ 1298.390257][T16345]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1298.390301][T16345]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1298.390363][T16345]  warn_alloc+0x214/0x310
[ 1298.390399][T16345]  ? __pfx_warn_alloc+0x10/0x10
[ 1298.390439][T16345]  ? __get_vm_area_node+0x28f/0x300
[ 1298.390474][T16345]  __vmalloc_node_range_noprof+0x5f2/0x12c0
[ 1298.390503][T16345]  ? __asan_memset+0x22/0x50
[ 1298.390567][T16345]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1298.390592][T16345]  ? __kasan_kmalloc_large+0x1a/0xa0
[ 1298.390641][T16345]  ? rcu_is_watching+0x15/0xb0
[ 1298.390680][T16345]  ? relay_open_buf+0x217/0xd40
[ 1298.390702][T16345]  ? relay_open_buf+0x217/0xd40
[ 1298.390721][T16345]  __kvmalloc_node_noprof+0x3a0/0x5e0
[ 1298.390746][T16345]  ? relay_open_buf+0x217/0xd40
[ 1298.390766][T16345]  ? trace_kmalloc+0x1f/0xd0
[ 1298.390801][T16345]  ? relay_open_buf+0x17c/0xd40
[ 1298.390830][T16345]  relay_open_buf+0x217/0xd40
[ 1298.390868][T16345]  relay_open+0x427/0x920
[ 1298.390900][T16345]  do_blk_trace_setup+0x591/0x9d0
[ 1298.390943][T16345]  blk_trace_setup+0x116/0x1f0
[ 1298.390981][T16345]  ? __pfx_blk_trace_setup+0x10/0x10
[ 1298.391023][T16345]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1298.391062][T16345]  blk_trace_ioctl+0x181/0x430
[ 1298.391092][T16345]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1298.391121][T16345]  ? __pfx_blk_trace_ioctl+0x10/0x10
[ 1298.391151][T16345]  ? __pfx_smack_log+0x10/0x10
[ 1298.391188][T16345]  ? smk_access+0x14c/0x4e0
[ 1298.391233][T16345]  ? smk_tskacc+0x2fc/0x370
[ 1298.391276][T16345]  ? smack_file_ioctl+0x2a9/0x340
[ 1298.391304][T16345]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1298.391335][T16345]  blkdev_ioctl+0x416/0x6d0
[ 1298.391370][T16345]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1298.391397][T16345]  ? __fget_files+0x3a0/0x420
[ 1298.391419][T16345]  ? __fget_files+0x2a/0x420
[ 1298.391446][T16345]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1298.391478][T16345]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1298.391508][T16345]  __se_sys_ioctl+0xf9/0x170
[ 1298.391544][T16345]  do_syscall_64+0xf6/0x210
[ 1298.391580][T16345]  ? clear_bhb_loop+0x60/0xb0
[ 1298.391617][T16345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1298.391643][T16345] RIP: 0033:0x7f6a6af8e969
[ 1298.391668][T16345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1298.391690][T16345] RSP: 002b:00007f6a6be31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1298.391716][T16345] RAX: ffffffffffffffda RBX: 00007f6a6b1b5fa0 RCX: 00007f6a6af8e969
[ 1298.391736][T16345] RDX: 0000200000000140 RSI: 00000000c0481273 RDI: 0000000000000004
[ 1298.391752][T16345] RBP: 00007f6a6b010ab1 R08: 0000000000000000 R09: 0000000000000000
[ 1298.391768][T16345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1298.391783][T16345] R13: 0000000000000000 R14: 00007f6a6b1b5fa0 R15: 00007ffd7c1815a8
[ 1298.391822][T16345]  </TASK>
[ 1298.392077][T16345] Mem-Info:
[ 1298.406509][   T31]  (
[ 1298.416179][T16345] active_anon:298 inactive_anon:870 isolated_anon:0
[ 1298.416179][T16345]  active_file:2785 inactive_file:2774 isolated_file:0
[ 1298.416179][T16345]  unevictable:768 dirty:120 writeback:0
[ 1298.416179][T16345]  slab_reclaimable:6334 slab_unreclaimable:103727
[ 1298.416179][T16345]  mapped:12400 shmem:826 pagetables:773
[ 1298.416179][T16345]  sec_pagetables:0 bounce:0
[ 1298.416179][T16345]  kernel_misc_reclaimable:0
[ 1298.416179][T16345]  free:626456 free_pcp:813 free_cma:0
[ 1298.433712][   T31] (wq_completion)usb_hub_wq
[ 1298.438674][T16345] Node 0 active_anon:916kB inactive_anon:876kB active_file:2332kB inactive_file:568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:33908kB dirty:76kB writeback:0kB shmem:1736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10768kB pagetables:2548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1298.460535][   T31] ){+.+.}-{0:0}
[ 1298.470831][T16345] Node 1 active_anon:276kB inactive_anon:2604kB active_file:8808kB inactive_file:10528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:15692kB dirty:404kB writeback:0kB shmem:1568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:500kB pagetables:544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1298.477575][   T31] , at: process_scheduled_works+0x9b1/0x17a0
[ 1298.484683][T16345] Node 0 
[ 1298.488178][   T31]  #1: 
[ 1298.494437][T16345] DMA free:10136kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:12kB free_cma:0kB
[ 1298.500585][   T31] ffffc9000483fc60
[ 1298.508926][T16345] lowmem_reserve[]:
[ 1298.515483][   T31]  (
[ 1298.520954][T16345]  0
[ 1298.524060][   T31] (work_completion)(&hub->events)
[ 1298.528744][T16345]  2504
[ 1298.533536][   T31] ){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[ 1298.533592][   T31]  #2: ffff888028aa2198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00
[ 1298.533671][   T31]  #3: ffff888028aa3510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00
[ 1298.544314][T16345]  2504
[ 1298.548140][   T31]  #4: 
[ 1298.557870][T16345]  2504
[ 1298.559255][   T31] ffff888028752668
[ 1298.566816][T16345]  2504
[ 1298.575650][   T31]  (
[ 1298.576182][T16345] 
[ 1298.580789][   T31] hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00
[ 1298.580850][   T31] 3 locks held by syz-executor/17492:
[ 1298.580866][   T31]  #0: ffffffff8ea7ea20 (&ops->srcu#2){.+.+}-{0:0}
[ 1298.595702][T16345] Node 0 
[ 1298.607838][   T31] , at: rtnl_link_ops_get+0x23/0x250
[ 1298.611236][T16345] DMA32 free:45216kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:2048KB active_anon:916kB inactive_anon:876kB active_file:2320kB inactive_file:568kB unevictable:1536kB writepending:76kB present:3129332kB managed:2564584kB mlocked:0kB bounce:0kB free_pcp:1704kB local_pcp:1360kB free_cma:0kB
[ 1298.615384][   T31]  #1: ffffffff8f2e4fc8
[ 1298.619972][T16345] lowmem_reserve[]: 0
[ 1298.641669][   T31]  (rtnl_mutex){+.+.}-{4:4}
[ 1298.656477][T16345]  0
[ 1298.656845][   T31] , at: rtnl_newlink+0x8db/0x1c70
[ 1298.693121][T16345]  0 0
[ 1298.708213][   T31]  #2: 
[ 1298.709508][T16345]  0
[ 1298.718405][   T31] ffffffff8df437b8
[ 1298.726677][T16345] 
[ 1298.734751][   T31]  (
[ 1298.779942][T16345] Node 0 
[ 1298.825940][   T31] rcu_state.exp_mutex
[ 1298.861237][T16345] Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB
[ 1298.861299][T16345] lowmem_reserve[]: 0 0 0
[ 1298.905261][   T31] ){+.+.}-{4:4}
[ 1298.913552][T16345]  0
[ 1298.923678][   T31] , at: synchronize_rcu_expedited+0x3b7/0x730
[ 1298.923729][   T31] 1 lock held by syz.2.3028/17708:
[ 1298.923746][   T31]  #0: ffffffff8f2e4fc8 (rtnl_mutex){+.+.}-{4:4}
[ 1298.941171][T16345]  0
[ 1298.945561][   T31] , at: tun_chr_close+0x3e/0x1c0
[ 1298.948301][T16345] 
[ 1298.957905][   T31] 
[ 1299.156339][ T9793] vhci_hcd: vhci_device speed not set
[ 1299.206142][T16345] Node 1 Normal free:2451716kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:276kB inactive_anon:2604kB active_file:8828kB inactive_file:10508kB unevictable:1536kB writepending:404kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:10640kB local_pcp:10248kB free_cma:0kB
[ 1299.257965][   T31] =============================================
[ 1299.257965][   T31] 
[ 1299.266967][   T31] NMI backtrace for cpu 0
[ 1299.266987][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) 
[ 1299.267014][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1299.267029][   T31] Call Trace:
[ 1299.267038][   T31]  <TASK>
[ 1299.267047][   T31]  dump_stack_lvl+0x189/0x250
[ 1299.267082][   T31]  ? __wake_up_klogd+0xd9/0x110
[ 1299.267111][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1299.267141][   T31]  ? __pfx__printk+0x10/0x10
[ 1299.267190][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1299.267218][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1299.267238][   T31]  ? _printk+0xcf/0x120
[ 1299.267278][   T31]  ? __pfx__printk+0x10/0x10
[ 1299.267314][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1299.267340][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1299.267367][   T31]  watchdog+0xfee/0x1030
[ 1299.267396][   T31]  ? watchdog+0x1de/0x1030
[ 1299.267433][   T31]  kthread+0x70e/0x8a0
[ 1299.267463][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1299.267489][   T31]  ? __pfx_kthread+0x10/0x10
[ 1299.267516][   T31]  ? __pfx_kthread+0x10/0x10
[ 1299.267550][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1299.267575][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1299.267603][   T31]  ? __pfx_kthread+0x10/0x10
[ 1299.267628][   T31]  ret_from_fork+0x4b/0x80
[ 1299.267649][   T31]  ? __pfx_kthread+0x10/0x10
[ 1299.267674][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1299.267726][   T31]  </TASK>
[ 1299.267734][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1299.403719][T16345] lowmem_reserve[]:
[ 1299.407912][    C1] NMI backtrace for cpu 1
[ 1299.407930][    C1] CPU: 1 UID: 0 PID: 16345 Comm: syz.6.2730 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) 
[ 1299.407954][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1299.407966][    C1] RIP: 0010:debug_object_deactivate+0xd5/0x250
[ 1299.408003][    C1] Code: 4c 89 ff e8 8d 0e 68 fd 4d 8b 3f 45 31 f6 eb 06 4d 8b 3f 41 ff c6 4d 85 ff 74 36 4d 8d 6f 18 4c 89 e8 48 c1 e8 03 80 3c 28 00 <74> 08 4c 89 ef e8 61 0e 68 fd 4d 39 65 00 74 29 4c 89 f8 48 c1 e8
[ 1299.408020][    C1] RSP: 0018:ffffc90000a08c08 EFLAGS: 00000046
[ 1299.408037][    C1] RAX: 1ffff1100c92b4ea RBX: ffffffff99a6c0b0 RCX: dffffc0000000000
[ 1299.408052][    C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000a08ae0
[ 1299.408066][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[ 1299.408078][    C1] R10: dffffc0000000000 R11: fffff5200014115c R12: ffff888178487048
[ 1299.408093][    C1] R13: ffff88806495a750 R14: 0000000000000008 R15: ffff88806495a738
[ 1299.408108][    C1] FS:  00007f6a6be316c0(0000) GS:ffff8881261f9000(0000) knlGS:0000000000000000
[ 1299.408124][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1299.408138][    C1] CR2: 00007ffe737001c0 CR3: 000000002f748000 CR4: 00000000003526f0
[ 1299.408155][    C1] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008
[ 1299.408167][    C1] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1299.408180][    C1] Call Trace:
[ 1299.408189][    C1]  <IRQ>
[ 1299.408203][    C1]  debug_deactivate+0x1d/0x200
[ 1299.408235][    C1]  __hrtimer_run_queues+0x2b0/0xc60
[ 1299.408274][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1299.408300][    C1]  ? read_tsc+0x9/0x20
[ 1299.408329][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[ 1299.408364][    C1]  hrtimer_run_softirq+0x187/0x2b0
[ 1299.408395][    C1]  handle_softirqs+0x286/0x870
[ 1299.408425][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[ 1299.408457][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1299.408488][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[ 1299.408514][    C1]  __irq_exit_rcu+0xca/0x1f0
[ 1299.408541][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[ 1299.408584][    C1]  irq_exit_rcu+0x9/0x30
[ 1299.408610][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1299.408633][    C1]  </IRQ>
[ 1299.408640][    C1]  <TASK>
[ 1299.408647][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1299.408667][    C1] RIP: 0010:vprintk_emit+0x58f/0x7a0
[ 1299.408684][    C1] Code: 85 32 01 00 00 e8 d1 f2 1e 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 c0 f2 1e 00 eb 06 e8 b9 f2 1e 00 fb 48 c7 c7 00 1f f3 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 f9 3f
[ 1299.408701][    C1] RSP: 0018:ffffc90015197220 EFLAGS: 00000246
[ 1299.408716][    C1] RAX: ffffffff81a0fe47 RBX: ffffffff81a0fd04 RCX: 0000000000080000
[ 1299.408730][    C1] RDX: ffffc9000c68a000 RSI: 000000000007ffff RDI: ffffffff8df31f00
[ 1299.408757][    C1] RBP: ffffc90015197330 R08: ffffffff8f7dd377 R09: 1ffffffff1efba6e
[ 1299.408772][    C1] R10: dffffc0000000000 R11: fffffbfff1efba6f R12: dffffc0000000000
[ 1299.408787][    C1] R13: 1ffff92002a32e48 R14: 0000000000000200 R15: 0000000000000011
[ 1299.408802][    C1]  ? vprintk_emit+0x444/0x7a0
[ 1299.408820][    C1]  ? vprintk_emit+0x587/0x7a0
[ 1299.408840][    C1]  ? vprintk_emit+0x444/0x7a0
[ 1299.408858][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[ 1299.408879][    C1]  ? _printk+0xcf/0x120
[ 1299.408914][    C1]  _printk+0xcf/0x120
[ 1299.408945][    C1]  ? __pfx__printk+0x10/0x10
[ 1299.408974][    C1]  ? __show_mem+0x1621/0x2210
[ 1299.408997][    C1]  __show_mem+0x1631/0x2210
[ 1299.409015][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1299.409048][    C1]  ? __pfx___show_mem+0x10/0x10
[ 1299.409066][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[ 1299.409091][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1299.409116][    C1]  ? __pfx__printk+0x10/0x10
[ 1299.409144][    C1]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1299.409175][    C1]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1299.409209][    C1]  warn_alloc+0x2dd/0x310
[ 1299.409234][    C1]  ? __pfx_warn_alloc+0x10/0x10
[ 1299.409259][    C1]  ? __get_vm_area_node+0x28f/0x300
[ 1299.409281][    C1]  __vmalloc_node_range_noprof+0x5f2/0x12c0
[ 1299.409303][    C1]  ? __asan_memset+0x22/0x50
[ 1299.409343][    C1]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1299.409362][    C1]  ? __kasan_kmalloc_large+0x1a/0xa0
[ 1299.409391][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1299.409420][    C1]  ? relay_open_buf+0x217/0xd40
[ 1299.409436][    C1]  ? relay_open_buf+0x217/0xd40
[ 1299.409450][    C1]  __kvmalloc_node_noprof+0x3a0/0x5e0
[ 1299.409469][    C1]  ? relay_open_buf+0x217/0xd40
[ 1299.409484][    C1]  ? trace_kmalloc+0x1f/0xd0
[ 1299.409511][    C1]  ? relay_open_buf+0x17c/0xd40
[ 1299.409530][    C1]  relay_open_buf+0x217/0xd40
[ 1299.409558][    C1]  relay_open+0x427/0x920
[ 1299.409579][    C1]  do_blk_trace_setup+0x591/0x9d0
[ 1299.409607][    C1]  blk_trace_setup+0x116/0x1f0
[ 1299.409633][    C1]  ? __pfx_blk_trace_setup+0x10/0x10
[ 1299.409660][    C1]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1299.409686][    C1]  blk_trace_ioctl+0x181/0x430
[ 1299.409708][    C1]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1299.409729][    C1]  ? __pfx_blk_trace_ioctl+0x10/0x10
[ 1299.409751][    C1]  ? __pfx_smack_log+0x10/0x10
[ 1299.409778][    C1]  ? smk_access+0x14c/0x4e0
[ 1299.409809][    C1]  ? smk_tskacc+0x2fc/0x370
[ 1299.409838][    C1]  ? smack_file_ioctl+0x2a9/0x340
[ 1299.409858][    C1]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1299.409879][    C1]  blkdev_ioctl+0x416/0x6d0
[ 1299.409905][    C1]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1299.409925][    C1]  ? __fget_files+0x3a0/0x420
[ 1299.409942][    C1]  ? __fget_files+0x2a/0x420
[ 1299.409961][    C1]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1299.409985][    C1]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1299.410007][    C1]  __se_sys_ioctl+0xf9/0x170
[ 1299.410032][    C1]  do_syscall_64+0xf6/0x210
[ 1299.410064][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1299.410086][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1299.410109][    C1] RIP: 0033:0x7f6a6af8e969
[ 1299.410127][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1299.410144][    C1] RSP: 002b:00007f6a6be31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1299.410163][    C1] RAX: ffffffffffffffda RBX: 00007f6a6b1b5fa0 RCX: 00007f6a6af8e969
[ 1299.410177][    C1] RDX: 0000200000000140 RSI: 00000000c0481273 RDI: 0000000000000004
[ 1299.410190][    C1] RBP: 00007f6a6b010ab1 R08: 0000000000000000 R09: 0000000000000000
[ 1299.410203][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1299.410214][    C1] R13: 0000000000000000 R14: 00007f6a6b1b5fa0 R15: 00007ffd7c1815a8
[ 1299.410237][    C1]  </TASK>
[ 1300.074248][T16345]  0 0 0 0 0
[ 1300.077861][T16345] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10136kB
[ 1300.092638][T16345] Node 0 DMA32: 600*4kB (UMEH) 328*8kB (UME) 258*16kB (UMEH) 260*32kB (UMEH) 135*64kB (UME) 59*128kB (UME) 50*256kB (UM) 17*512kB (UM) 3*1024kB (M) 11*2048kB (M) 0*4096kB = 80768kB
[ 1300.114727][T16345] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1300.126586][T16345] Node 1 Normal: 548*4kB (UM) 411*8kB (UME) 234*16kB (UME) 197*32kB (UME) 72*64kB (UME) 56*128kB (UM) 21*256kB (UM) 11*512kB (UM) 3*1024kB (UME) 10*2048kB (UME) 586*4096kB (UM) = 2462120kB
[ 1300.150264][T16345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1300.159977][T16345] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1300.169411][T16345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1300.190168][T16345] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1300.199683][T16345] 6472 total pagecache pages
[ 1300.204522][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1300.204543][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) 
[ 1300.223237][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1300.233316][   T31] Call Trace:
[ 1300.236616][   T31]  <TASK>
[ 1300.239569][   T31]  dump_stack_lvl+0x99/0x250
[ 1300.244176][   T31]  ? __asan_memcpy+0x40/0x70
[ 1300.248773][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1300.253979][   T31]  ? __pfx__printk+0x10/0x10
[ 1300.258590][   T31]  panic+0x2db/0x790
[ 1300.262497][   T31]  ? __pfx_panic+0x10/0x10
[ 1300.266915][   T31]  ? tick_nohz_tick_stopped+0x86/0xb0
[ 1300.272300][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1300.277674][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[ 1300.283842][   T31]  watchdog+0x102d/0x1030
[ 1300.288180][   T31]  ? watchdog+0x1de/0x1030
[ 1300.292618][   T31]  kthread+0x70e/0x8a0
[ 1300.296698][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1300.301436][   T31]  ? __pfx_kthread+0x10/0x10
[ 1300.306212][   T31]  ? __pfx_kthread+0x10/0x10
[ 1300.310892][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1300.316110][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1300.321311][   T31]  ? __pfx_kthread+0x10/0x10
[ 1300.325901][   T31]  ret_from_fork+0x4b/0x80
[ 1300.330325][   T31]  ? __pfx_kthread+0x10/0x10
[ 1300.334923][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1300.339705][   T31]  </TASK>
[ 1300.343046][   T31] Kernel Offset: disabled
[ 1300.347378][   T31] Rebooting in 86400 seconds..