last executing test programs: 12m23.813121037s ago: executing program 0 (id=171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000062c0)=@newtaction={0x6c, 0x30, 0xa29, 0x70bd29, 0x0, {0x0, 0x0, 0x6a00}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x1, 0xc, 0x4, 0x8}, @loopback, @dev={0xac, 0x14, 0x14, 0x27}, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r1, 0x8800000) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) close(r4) sendfile(r3, r1, 0x0, 0x578410e9) sendfile(r3, r1, 0x0, 0x100000000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'wlan1\x00', {0x147}, 0x800}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}}, 0x0) 12m21.516758648s ago: executing program 0 (id=175): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0xc, 0x6, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xf, 0x0, 0x8, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000140)={[0x6e, 0x0, 0x0, 0x20, 0x2, 0x10000, 0x106c, 0x80000001, 0x8000000000000, 0xc4af, 0xd, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x4000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x300, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1d}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x58}}, 0x8000) 12m19.419696175s ago: executing program 0 (id=178): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0xfeffff07, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000000)={0x0, 0x3b37, 0x0, 0x0, 0x34d}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x11, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r4, 0x4068aea3, &(0x7f0000000280)={0x80, 0x0, 0x9}) 12m18.814163994s ago: executing program 0 (id=179): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r0, 0x3, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x9) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x25c0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000200)) read$FUSE(r1, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r1, &(0x7f0000002280)={0x18, 0x0, r2, {0x81}}, 0x18) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xf) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002300)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4091}, 0x20040004) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000002400)="c637b151ba659deb61a4d306cd0e530d93bbec9a574ce38154e8252edb076d52f1d2f7c28ed871d51b39f1f40c04aee07425388f85eebe4274911b3ad803ab3a4af5f881f68a3f9beeddb9db72cdc245dc77c3ea1c1fdc1c50eb7f211a97eb") getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000002480)={0x0, @in6={{0xa, 0x4e23, 0x2c, @private0, 0x6}}, 0x9, 0x4, 0x4, 0x6, 0x6}, &(0x7f0000002540)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000002580)={0x0, 0x10, 0x3}, &(0x7f00000025c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000002600)={r5, 0x1000000, 0x7, 0x2, 0x7, 0x3, 0x8, 0x5, {r6, @in6={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}, 0x6}}, 0x6, 0x9, 0xa, 0x7c8, 0x9}}, &(0x7f00000026c0)=0xb0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xc) sendmsg$AUDIT_GET(r1, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x10, 0x3e8, 0x300, 0x70bd26, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) socketpair(0x0, 0x5, 0x80, &(0x7f0000002800)={0xffffffffffffffff}) mq_timedreceive(r1, &(0x7f0000002840)=""/241, 0xf1, 0x9, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x7) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x1) ioctl$RTC_VL_CLR(r1, 0x7014) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x5) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x30, r1, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x42810, r1, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000002940)=@IORING_OP_WRITE_FIXED={0x5, 0x8, 0x4000, @fd=r7, 0x3c9a, 0x9, 0x0, 0x8, 0x1, {0x3, r10}}) write$cgroup_pid(r1, &(0x7f0000002980)=r3, 0x12) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x9) 12m18.483801036s ago: executing program 0 (id=184): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x47ffffa, 0x122842) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r4, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x13, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a019363e8772fd29f35239d200", "24431a3977a68e174f005e95ac6a00"}}) ioctl$FS_IOC_GETFSMAP(r5, 0x4c09, 0x0) chdir(0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioperm(0x7, 0x81, 0x2) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000140)={0x1, 0xfd, 0x8, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x2}, {0x0, 0x3}}}, 0x24}}, 0x40) syz_emit_ethernet(0x34, &(0x7f0000000040)={@local, @broadcast, @void, {@arp={0x806, @generic={0x5, 0xfbfb, 0x6, 0x10, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, "74c391b40f1605ada8d8089dbe842fda", @multicast, "441f"}}}}, 0x0) 12m17.24408794s ago: executing program 0 (id=186): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$inet6(0xa, 0x3, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e24, @remote}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000700"/20, @ANYRES32=r4, @ANYBLOB="80000008"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0xf, &(0x7f0000000700)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000004c0)=""/15, 0xf, 0x6, 0x4, 0x9, 0x5, 0xc08}}, 0x120) read$FUSE(r5, &(0x7f0000006b40)={0x2020}, 0x2020) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000440), &(0x7f0000000480)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) mount$9p_unix(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f0000000380)=ANY=[]) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x0, 0x0) shutdown(r0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='projid_map\x00') r8 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000380), 0x400) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x6) fstat(r7, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r7, 0x4068aea3, &(0x7f0000000000)) lsm_get_self_attr(0x66, 0x0, 0xfffffffffffffffc, 0x1) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x100010, 0xffffffffffffffff, 0xfd0b1000) 12m2.03172418s ago: executing program 32 (id=186): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$inet6(0xa, 0x3, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e24, @remote}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000700"/20, @ANYRES32=r4, @ANYBLOB="80000008"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0xf, &(0x7f0000000700)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000004c0)=""/15, 0xf, 0x6, 0x4, 0x9, 0x5, 0xc08}}, 0x120) read$FUSE(r5, &(0x7f0000006b40)={0x2020}, 0x2020) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000440), &(0x7f0000000480)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) mount$9p_unix(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f0000000380)=ANY=[]) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x0, 0x0) shutdown(r0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='projid_map\x00') r8 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000380), 0x400) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x6) fstat(r7, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r7, 0x4068aea3, &(0x7f0000000000)) lsm_get_self_attr(0x66, 0x0, 0xfffffffffffffffc, 0x1) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x100010, 0xffffffffffffffff, 0xfd0b1000) 1m35.727099001s ago: executing program 5 (id=2827): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xa0000000}) open(&(0x7f00000000c0)='./file0\x00', 0x9c41, 0x0) (fail_nth: 7) 1m35.598537748s ago: executing program 5 (id=2829): r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x202040, 0x0) r1 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)=ANY=[@ANYBLOB="0101080000000000"]}) ioctl$TCXONC(r0, 0x540a, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0x1001}, @mss={0x2, 0x700000}, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000300)="0960d28f38b1e2cb5f4c0d2693e534a0a6284fa2476bedb480ca3d053c115c4d7937d3cca02f0138a208bc957d7a7fbd4442df97968810eb6ddbb5f1df622d34c151975f407741ef9241176356fcbf229018f4a5ac3575251ab8e336ca558fd4c99bf6b22ce14eec7a808e7641604c27fff0d2db7728b7ec65cac4e28ed447e4bff86ff48ce61faa2333a090dab5ef33c612e775d4a58a60b65b95b973596fe6cb5e33b69d80e16c61a9ad55e90c9a71486593b025dbfadec7dc91d48461cb28abb530687f5d77c93d3deafbd01f399089c4e8ebe909", 0xd6) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m31.078483089s ago: executing program 5 (id=2844): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000002780)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000440)="ac176ec272b134c7d93f1b8f02", 0xd}, {&(0x7f0000000600)="7377901c854e88967e149415b188c77c5f0e8e712ef574b4b2867b47cc39b7247ce73f1bee130fb0bfd543f7b82505a4e44a8b5a28fa6a1c1312a78638169fece89b20998539d78d924ead2682f7606b9dff996be3bcd01efb960017bd465c48ffc2f3b2603413ec37c28bb567cb29c62ac30a38906b4343cacc34da988d9054673afd71a2e997e02d22f4e20b0209d02d3b8901659bb36dcb24d713d022df9ac1e8ec00847d8e067a7122926597510fd5f0dcd5b9d29e563d11efb351b5f9e086c7ebbaf6879f4fa89f508b858317637af9043f2b655597e5caf48c07030141cb7dfff35819", 0xe6}, {&(0x7f0000000500)="374b003d06b8d261f7f8dfc89accc1e43c5b82c204e72afc64925a71c668c9ec0b010c8aa3712cd65ad60faeedc7a3ec4dbd8832e3619e4217bb1e46dc716403bfaf9e478c7c8a5bc44df3cc697152e7ef14cb21b784e0e97654e1d49dc70548f6ebaeffc93d60803b319b93254e1279721142cf5b7acb0250d51b494fe0d367fbccc0ecd016af62ec4f41d9d55733ec79a8e68639f6fe52e8607792c18ca56fb8f4ea7465c35083a32dc3aa38680223d951adb04fa8e7e8", 0xb8}, {&(0x7f0000000700)="f362d2f26fad2099a6df076ffb0cf195d56c83f550421e258bff20b222996713f3e36ddd6617b0d3419c3ba40bc48a1b1c60209c8722d36fc627140cb0605f066ca16d698f4905741da05d575c6d3f3fe912e7873ba86f11d46451307832d3432859f172933c170fad7d7c3f0629f833ddaa4b35cc1a8da6ab0628595082ef8314ff7fd0a4c60375709993a9cbbf4c72f33bf58e2251e618ae116b99ab0f1a6e701dddef00b7afca890fc531f75839c7920864a0456386ee7384b0b1d71158b7ea1cbbcd260d88c2ca96d8d9da91c20410be049359e24398faa4f59396a1073e54e88516093070610c8bddda48de428972fcdd9fb8173f2d00", 0xf9}], 0x5, &(0x7f0000001900), 0x0, 0x2000800}, {0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001a40)="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", 0xfc}, {&(0x7f0000000480)="212e9c9010d960725104f084b43c23b5e985a1dec163208a6453208cd947891c9239c3a6f04be440d429ec9318b94df524dd6507f9b64f58bf", 0x39}, {&(0x7f0000001b40)="29f0ca0def2b56a489492bfabe8481ac382576a3c2ce0a9dc2fcf77560176195aa94ad2fcb867bffd00e1882bfc9612a68073426e4cec5ea609c638aace919a8439ceeab8ddf07dca59d26ea83a82c88fa26449c9d757c9b154ec39280e63296bb4db2397db804f8a12a72febd12b5902ad8fe1b87fd3b32", 0x78}, {&(0x7f0000001bc0)="6677fd4dcc8e618d0c75a46de6f4097f3b29c714d0d413a1930a284cfb96b9b208f1feddec2834f5eead308d4d4eb833cf7c7a0d4fcd06bb114b17df815d9355cb1719a09d891dfbc128d1772e98fccc8ee29236", 0x54}, {&(0x7f0000001c40)="b2aa5c3f95805da17c4f555b41cf46e0995d27b7f7dba057eed335f24ef2dd858df92d231e742dfdf9064779dbab3c339de3b0c9099b22ea4cfe61a03004807cf94b9714a184f4e12dc0cd654abc183e447235db5f76651399b78d885063bb4138736ec1c5efd1b72c58529714f569d56947f514eea2a7f65800ae207fb0900cf31f5c3cd5ba66981e5683aaca48cd2d87061b5d5c2fb4482568f738f10e2dabeb37a02add276de7363fde227f6cf451e928d1b618f213319e88bc9e72604b74108d102a43d91d203b5d7f58078139792b265adff22591", 0xd7}, {&(0x7f0000000880)="04618181036f694c20b32fd8b6164941d0cb5627d1e3af477d86", 0x1a}, {&(0x7f0000001d40)="6145b0f8d46e74c339bd0831d3a740656562d72a9905518edd0c32d0e4af2ddc5d0664669255f141442305441603a81c8ce5ad638acb809149be7a1544dd5e7536f92a3c4e9d5e0eab52f6e90403de9dfd2854a1a5774149d9b51a7a33a5b15e54537fc5beeafff93cf32df8d7b920da859dfd0aad1429aa445ecbac3268b53bb5f800813e2b2cafb6cb8d245a1be858f74e18ae9098a9a05b1ae3", 0x9b}], 0x7, &(0x7f0000001e80)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x70, 0x117, 0x2, 0x56, "026e44d149d525fb1e2cabbe867f58ce9ca3dadbb6be1c29ad358669f509404ce7732977cef797a0788e77bb4a71d646b5fd3a1f9d6d1707e877430bbf06abe001a77e15c99bd67a077455eac20136f83dceb6a9e605"}, @iv={0xe8, 0x117, 0x2, 0xd1, "0229140753865b80ffd0ff3645b9b8d6c4f0c7bdae46a1fdd6514532ad9fba9c4ae4a08b9f3e69d9653070175b1ce045e78e65f762447f7e263732d135d1645160505c612770d998864c5a0a91f4c63bf1cb011043ddeb277b0a6c7bc860329bda6a8b0ae7d8f0fd18fc84125a10b30353dba4a9da078d30df92991be5efb35a78c958d3f0599ff2af383e8beecba795b235bb3f7a5dea67604c997c572ef63ed3a5f6afb8df94182599a7b1f7ec37d5403152604326c06e41b2b70724349c6132c5624b0ecfbc89dddc4d4a78830cfb65"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xd8, 0x117, 0x2, 0xbd, "dd706de2e539486ee7786a6af186d6c2f15a7cda43d16e81959a8e69d0f3ae2f2e843126f8062f509abde1faf34525e9baee4a11e34b1ab83969f32ad2f250d2e9f8d0ed5dabcc076378845b20a7ed71e7df555df078d8bd85421fe3a6c0a3529057cbf64d42729d29a96a58e4c683ed8f84528565aa1a67aa912c2d7d97ab7c3594d890e7a2619c367bfae5b252af6038139e4f70a098003c41b6a4ec2a7fda242e54f7093e9060593f0b3b2ff8cf750398de31e897d0e65d76bb5dbc"}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x278, 0xc0}, {0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002100)="b24383805a0d933bfbf997543020def2dbb4", 0x12}, {&(0x7f0000002140)="9e952a93b1171e2d25baab35e0afdfde5576e7d0c36df823f967ce3ba7fa7ce13948b15e6260fab84ae56c896b95c7fdce9240bdff27fa039b2632dcd4a52fbaa2d60013737692bfd362f200785a57221732da0e203c3ac98fe8ffc471ac663b9181a0222e723476ba667949b7ef678ed63a44c3aeea5aa1d5a52790854c6d65d9f01cc94448cbc4a767216859f2a17155b6c787ebaba0502195399676", 0x9d}, {&(0x7f0000002200)="36ac447cb2e5b289fe977b7c6cd99149bd675263f42a4186af2800a66bc13d090cea7da0c8e0f40ec690b04b3b8971d84f", 0x31}, {&(0x7f0000002240)="50a150bbad1f06a7d4ceb09539f82042bf9d2c36555f7d9778454896071ae8cebca2d6793e37037f2d0be3b3f6e7fdc706e170452d38da76ee0e3199a0f270ce3d8b1eab5e044d4450c59f9338cd3f3fa3b4c69816a99f0cc795c62377ec7d6d9eddbee41fab310605c2c3be3ca137366cb8068f1bc1bfd98dcc91668fe2075373b69c532e1515a9089d8ef38349f83d5a2f0cf6526dc54d0fea307336f7e37fdebb906a2c7843eab799d5a0d74521bc2d19dce0789796810c5f903fd35a86b657ad19bf72d7", 0xc6}, {&(0x7f0000002340)="80eaa8a1a6508469e69ee5750b4f27e1876dc24befe6ad6fdcb7a5d9d080744c5a373c16c5cbcae84f4ae973200fdffcc8b1b6e1ca70bfc0ab87b5b11921071632d7b34aec4fc930a986163e9bae8bfa59335ab0a1a2b26fed1bc3e2d295116f092cebf8a35164c9a15428289f6f171d7c7b844bf6243f7daacd9bc4085d08cbe5187029014bb0d979bb177ad307e52382ad37631f2bb5fb0070", 0x9a}], 0x5, 0x0, 0x0, 0x200280c5}, {0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001900)="fa73692ffcba76b96b92e4c10ed94af559e77b18ebfdbd5069dc88d755b9f9dfe3696a1abcaa5252055d21a96c488bcb69bbe85546dfd874db4f9901ae807e97a332170221e3281c6506aa736b263b1a3215d46df92dea6dec2165d80f00f1a301da7bb470c1a3af2ece74d0c1d347c3fe44ec121420a452720b521a3863b4e8", 0x80}, {&(0x7f0000002500)="8979b543f11f8e9ab1942c692e8aa6fd93b5088b702f1cd2827af9b7a42c6912743a74d1f9a7ab77322515718b6a07f41e54972276195a5e4e01eb0152ea534a07468e0a2704512945dbd85a86886fc897ec1f72b8942b755398", 0x5a}, {&(0x7f0000002580)="679549c89c5129346936817bdcb3d318e72f8461eb532837c6ff46ea9098a82e6a0b2812547e3ca533b1e1b18c806d3813b84f3fa3123e06175e48858b822c0c0a216c88b345893d42c55b1e9bbaf87bb4b1a9aabd7071eb69aefd2d70020eaf42553855f3239dbd938681a00671443dd3446a4d6fdae9b83838c6840137b8a2aa151d27e1afc93e9b01360fe0ac8ee4264bd3b90f9fcd9a029b93c2dfab03bafaf6276bf0d0b10e7fea4e3dd1d13855bf529816b692912369b7251cbe", 0xbd}], 0x3, &(0x7f0000002680)=[@assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x80000000}, @iv={0xd0, 0x117, 0x2, 0xb9, "97dd2113b76eb3fb9f13ad8234d65aeda28e304fc74fe9dbd29a5b223d68af1e15f095d8f39b24610941a48a106852df885898a62769ad4d7c69cb69ef0854e412f945d7407305e50c7536e62dc989d237d1d86eeb1a9894575a99c493270d5d8cdbf5d365cdd320f8ce08fcf18409dd8ebc4de0dacb1fbb5150709a9c350c6d1c622c00a1b816cd40411d6830ded4dd5fa6bee111b3bcc6508d0865fff086ed15bb1f18179bc6e5f6298c8e158e4be19b1b30c3102646d53a"}], 0x100, 0x4040004}], 0x4, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 1m30.615537828s ago: executing program 5 (id=2846): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) userfaultfd(0x801) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x688, 0x0) userfaultfd(0x80001) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='io\x00') r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x153c, 0x3000, 0x8, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x0, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000140)={0x7, 0x0, 0x4, 0x80000001, 'syz0\x00', 0x9}) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000a0a170200000000000000000400000908000f40000000070900020073797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x2000c084) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 1m30.127946417s ago: executing program 5 (id=2849): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003380)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)}], 0x1, &(0x7f0000003440)=ANY=[], 0x118, 0x20000004}], 0x1, 0x20004000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x80, 0xfe, 0x0, 0x9, 0x40, 0x8, 0x5a, 0x0, 0x0, 0x9}, 0xe) recvmmsg(r0, 0x0, 0x0, 0x40000023, 0x0) 1m26.387843765s ago: executing program 5 (id=2858): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000440)=[{0x83d, 0xfc, 0x0, 0x7ffc0002}, {0x9, 0x2, 0x4, 0x10}]}) rt_sigaction(0x1000d, 0x0, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="25473d3a2465cd6907752a5eff8a6771b7afb38e7276dcd158779382f675bbd80b74a3132eebf2f348de880c3f672892e52cddd460db7b4d22636156ee36e017a48622590a04be547a0285419ff6f9b0d6317525772addb46221b45ae82eba9feaffb83c3eaa22224073519d96308bfb0645d9b56343b2c3048dfca4f2dc66e02a768805069a5a292cf9ba5a"], 0x118) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000380)={0x2, @raw_data="d28dd7779b147dae046e015e3a8420327fde8d53a6362bfeb597a37457569478668fd9008031d870472cbc7645a0c6e77343c030d6d1b6a8d014b7a9d153b4428986141e13aaa2794f131c89f0bd289f65ba6f9b9cc3dac77795a93abf785a780787c1004f31175a2ca5618833c8d3c6f2cfb930023f4dd1ce472ecd79d17dfa1e94a8228b88e45f3ceb40cda9ce2956c168cf5f8db397ff9511b6dbf773bb1eb373aba464fe1ab4b0b040e26c7ce3026f7b22e7b5163b3b77b4edc449725a0d5818139b231935a0"}) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x107, 0x4) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)={[{}]}) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) 1m25.6828926s ago: executing program 33 (id=2858): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000440)=[{0x83d, 0xfc, 0x0, 0x7ffc0002}, {0x9, 0x2, 0x4, 0x10}]}) rt_sigaction(0x1000d, 0x0, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="25473d3a2465cd6907752a5eff8a6771b7afb38e7276dcd158779382f675bbd80b74a3132eebf2f348de880c3f672892e52cddd460db7b4d22636156ee36e017a48622590a04be547a0285419ff6f9b0d6317525772addb46221b45ae82eba9feaffb83c3eaa22224073519d96308bfb0645d9b56343b2c3048dfca4f2dc66e02a768805069a5a292cf9ba5a"], 0x118) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000380)={0x2, @raw_data="d28dd7779b147dae046e015e3a8420327fde8d53a6362bfeb597a37457569478668fd9008031d870472cbc7645a0c6e77343c030d6d1b6a8d014b7a9d153b4428986141e13aaa2794f131c89f0bd289f65ba6f9b9cc3dac77795a93abf785a780787c1004f31175a2ca5618833c8d3c6f2cfb930023f4dd1ce472ecd79d17dfa1e94a8228b88e45f3ceb40cda9ce2956c168cf5f8db397ff9511b6dbf773bb1eb373aba464fe1ab4b0b040e26c7ce3026f7b22e7b5163b3b77b4edc449725a0d5818139b231935a0"}) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x107, 0x4) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)={[{}]}) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) 1m22.417841065s ago: executing program 2 (id=2872): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0x10000000}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x29, "43488172070000000000476f60940acfbe50880594c1ff03000000000000ff5a792500000000000000"}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x67}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x187f5a7f2c0ade38}, 0x8000) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x67}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x187f5a7f2c0ade38}, 0x8000) recvfrom(r0, 0x0, 0x0, 0x10002, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x91, 0xe9, &(0x7f0000000080)="352dfcf184e9a595891f17142c6ef7ceaf94c4185f1e2b650dead2bea22c49394e805fc350865a30a258b69bf816303d36fadd426c12c6e0b668c5f3d274ff8fe0b4c4492e72d53305d5b4c697f55c181912b725498f8e4da544c30647e6288c4ab86ae9803dedf8b3bb5ecf1df9b4eefdd1d821205d09cf36f37be54111093f66f818f905caedf23a443dd75475b90ecc", &(0x7f0000000140)=""/233, 0xffffffff, 0x0, 0x98, 0x92, &(0x7f00000002c0)="36350a03079c04d9fa5542faaff2dfe317d146e4b0e7572d7d9375689f9b02a96be2641935b3b96f29253a10f9b9fcccba116cef9c303096cbcfc7f0086decf175131fb0a22fab33f0c8002f6a17ddba4b6d60c55c8698698b252b028acf9828059cec22b534dd39c7ab768b92c0942b6bb29e7ebdf75c2aceb2fae26d66d217ef8c017c5799c486362840ecf47fa34fe45ac7526e3cba89", &(0x7f0000000380)="7236ca2b83e1bf886faa867cacde8db8a900b132d5da465bdf1b4686b81715636bcffa15cb094a97d2c348c5ecc17b085b23a808df87f0ecd8406c9737fb581e37cf7513da404ea427fffe1ae9a6d1352fa698246a3c39aa3a3d4a8a8b86ebc7edb83e13ae0cba91b83ac864c27389311e0954d701e5ea8867645e55b512016a44167c0226ec07f7e682dbbcfab74164722a", 0x6, 0x0, 0x7a6a}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x91, 0xe9, &(0x7f0000000080)="352dfcf184e9a595891f17142c6ef7ceaf94c4185f1e2b650dead2bea22c49394e805fc350865a30a258b69bf816303d36fadd426c12c6e0b668c5f3d274ff8fe0b4c4492e72d53305d5b4c697f55c181912b725498f8e4da544c30647e6288c4ab86ae9803dedf8b3bb5ecf1df9b4eefdd1d821205d09cf36f37be54111093f66f818f905caedf23a443dd75475b90ecc", &(0x7f0000000140)=""/233, 0xffffffff, 0x0, 0x98, 0x92, &(0x7f00000002c0)="36350a03079c04d9fa5542faaff2dfe317d146e4b0e7572d7d9375689f9b02a96be2641935b3b96f29253a10f9b9fcccba116cef9c303096cbcfc7f0086decf175131fb0a22fab33f0c8002f6a17ddba4b6d60c55c8698698b252b028acf9828059cec22b534dd39c7ab768b92c0942b6bb29e7ebdf75c2aceb2fae26d66d217ef8c017c5799c486362840ecf47fa34fe45ac7526e3cba89", &(0x7f0000000380)="7236ca2b83e1bf886faa867cacde8db8a900b132d5da465bdf1b4686b81715636bcffa15cb094a97d2c348c5ecc17b085b23a808df87f0ecd8406c9737fb581e37cf7513da404ea427fffe1ae9a6d1352fa698246a3c39aa3a3d4a8a8b86ebc7edb83e13ae0cba91b83ac864c27389311e0954d701e5ea8867645e55b512016a44167c0226ec07f7e682dbbcfab74164722a", 0x6, 0x0, 0x7a6a}, 0x50) close(0x3) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 1m21.485119459s ago: executing program 2 (id=2873): mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x1800044, &(0x7f00000011c0)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'upperdir'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x0, 0x65, 0x62, 0x37, 0x37, 0x66, 0x4], 0x2d, [0x65, 0x33, 0x33, 0x33], 0x2d, [0x62, 0x39, 0x54, 0x61], 0x2d, [0x34, 0x37, 0x62, 0x32], 0x2d, [0x33, 0x39, 0x33, 0x33, 0x61, 0x65, 0x33, 0x66]}}}, {@fowner_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x33, 0x38, 0x39, 0x32, 0x65, 0x39, 0x64], 0x2d, [0x62, 0x64, 0x66, 0x32], 0x2d, [0x34, 0x66, 0x52, 0x63], 0x2d, [0x64, 0x64, 0x36, 0x65], 0x2d, [0x33, 0x63, 0x65, 0x36, 0x66, 0x66, 0x66, 0x34]}}}, {@hash}, {@fowner_eq}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) open(&(0x7f0000000280)='./bus\x00', 0x50000, 0x19a) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x3, 0x2d20, 0x2, 0x0, 0x2}}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x2, 0x8b) getdents(r3, &(0x7f0000000240)=""/20, 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000001280)=ANY=[@ANYBLOB="c0100000", @ANYRES16=r2, @ANYBLOB="00022dbd7000fbdbdf253a00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x10c0}}, 0x40000) 1m21.236028073s ago: executing program 2 (id=2874): fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f00000000c0)=0x1, 0x4) 1m21.219265648s ago: executing program 2 (id=2875): mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)={[{@subsystem='memory'}, {@cpuset_v2_mode}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) mq_open(&(0x7f00000000c0)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%#-\xd3\xd2\x13\xe8\xdc\xe1\xfd\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x85\x03\x00\x00\x002\xb80\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xc0\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96~\x17|\xc9xR\\z\x9a\x8cRJ\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd1\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00', 0x40, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x1, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="202c020000000000200012800b00010065727370616e000010800280060002002300001200000000"], 0x40}}, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8) 1m21.104590581s ago: executing program 2 (id=2876): setfsgid(0xee00) r0 = syz_clone(0x80080100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x7, @local, 0x7}]}, &(0x7f0000000080)=0x10) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/ipc\x00') (fail_nth: 7) 1m15.170303427s ago: executing program 2 (id=2889): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) request_key(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0xd9, 0xd9, 0x9c, 0x8, 0x1a0a, 0x108, 0x109c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x3, 0x40, 0xf2, [{{0x9, 0x4, 0x1e, 0x8, 0x0, 0xe, 0xbe, 0x3, 0x5}}]}}]}}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r2 = fsmount(r0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002000)=@generic={&(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x18) fchdir(r2) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) 1m14.927277688s ago: executing program 34 (id=2889): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) request_key(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0xd9, 0xd9, 0x9c, 0x8, 0x1a0a, 0x108, 0x109c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x3, 0x40, 0xf2, [{{0x9, 0x4, 0x1e, 0x8, 0x0, 0xe, 0xbe, 0x3, 0x5}}]}}]}}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r2 = fsmount(r0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002000)=@generic={&(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x18) fchdir(r2) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) 11.798470661s ago: executing program 4 (id=3057): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x5, 0x35c08121, 0x401, 0x1, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0xa4801f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000003000}]) dup3(r2, r0, 0x0) 11.493695241s ago: executing program 4 (id=3059): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x258a, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x3efed000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='tunl0\x00') r1 = syz_usb_connect$cdc_ecm(0x6, 0x90, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x1, 0x1, 0x81, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xf, 0x9, 0x2, 0x6, 0x0, 0x3, {{0xb, 0x24, 0x6, 0x0, 0x0, "f632b57f2a06"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x3, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x8, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @ncm={0x6, 0x24, 0x1a, 0xfcfd, 0x13}, @mbim_extended={0x8, 0x24, 0x1c, 0x7800, 0x5, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x5, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x600, 0x3, 0x0, 0x50}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x40, 0xe4, 0x49}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xfa, 0x0, 0x9, 0x40, 0x5}, 0x42, &(0x7f0000000280)={0x5, 0xf, 0x42, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x0, 0x6, 0x7, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "9bdd0bedd3115ec750486b52e1cff1d3"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "94e83ee2c7f82b2bc4a97aed1642d3f5"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x3, 0x6, 0x6}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x242e}}, {0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="a94004498db4c2b43c9f68741ffcc27508aa693d3b102d04ca05f557cff41255848e0b904eca6500ea13f15224f657185dd8086803db6f3382bfb07a7df9b4b2ef67259dfaf6135f9270a7fc2c7b22397c0949ef2ed1bd078dc463670b7871186a98cfc6040a10e050bd331f9a1a0934e5a7eecd23af7e6f575c2bb27602bebbdd2108d5207f"]}, {0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="100330608d83f2be7125cb7a1e116baaf6ed76b4b58525c43b70098d7f62045cd22a9bf877586ba3fb6b5c99ad73a8616385884f3d830f3bb0bd06d9846d9a5047ff55151c99db8a9fd4b8f125a74c556ff109c4"]}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000580)={0x14, &(0x7f0000000480)={0x0, 0x6, 0x7e, {0x7e, 0x23, "777edc1ad24326b4f163e4b23d65b4b30f254ba8502334fcbe2ffca6a3f5d078473556f70b93308a0000a10269600eb2838ff624d32da53aa2e9365da4cf33c825a54908dbac73462ac548b3a6958435223cb86d310f42cb3702e95e1bc3305ba635fd88310c12e0f53335ad7119805946300ae00319b9c60807d27d"}}, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x1c, &(0x7f00000005c0)={0x0, 0x37, 0x71, "d96081829d578e948528b1bd802bebcbbd2de33ea0179467889074a6a2253e5067275b613b0d38bf0570a2b8c539b4fb778905b9edeb7558d5f8d933b7b18273ee86d40a6805f95e5d798976ac7f9ae45c73efdef4ed729f18203f6ce5e429861f0a9b2a29afdc4021b1444ce6dc4843c8"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x77}, &(0x7f0000000680)={0x0, 0x8, 0x1}}) syz_usb_control_io$rtl8150(r0, &(0x7f00000007c0)={0x14, &(0x7f0000000400)={0x40, 0x23, 0xb, {0xb, 0x31, "bccb533fdc29a6b4a8"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}}, &(0x7f0000000a00)={0x2c, &(0x7f0000000800)={0x20, 0x7b70fb6dd2c2d647, 0xf6, "50543a07b8b04da54e9c805dd14ac47ec1a1d348663a7133ee6c8089bd586d1efb57709cd53fef42e189ef111871f7bb8e46f1fc7472a88ded2a820c429347ab0625bb552c379a7c6262bc72c864e1bc249ee29887c4dd1bf77657b730fb17f64bd5358ce77afba1691a0354c2cdf8f6151689c316182f78ab285da3e4f9f951387fa665b5f06b3584b69e3fdd77fbf1b8facfd6413e52e3dd3dcef7708a6bb038c009d1a2d80ef87cf47136d8530356d729289464e23f4b25462eb5473abb7955e0266c46a515f52b816cb96e56d172f0bfe1efab7a7502b83eff43182a790c0dc0c59e057ec1a32dc31c97557e6f84349757da6329"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000980)={0xc0, 0x5, 0x5, "61c3776023"}, &(0x7f00000009c0)={0x40, 0x5, 0x3, "13e7d3"}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="e4265f"], 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0xd, 0x1, 0x2, "8b66318ae049a6ff005e43eeaacd98f7c41982879d8f125a160903fbc66418f5", 0x33363248}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x20, 0x0, 0x2a, {0x2a, 0x10, "a879cd082fbe1fd7b0b5414a8ebb88e518e925d85ed2f01da1bd55a925fc7a98dd07125a1724a9f1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 10.625956865s ago: executing program 1 (id=3062): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_connect$cdc_ncm(0x2, 0xa8, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002020000202505a1a440000102030109029600020108200f0904000001020d000008240600015bc392052400b6810d24f9000400000060acff070206241a07002a08241c614c02e60407240a000304011524120677a317a88b045e4f01a607c0ffcb7e392a050001fe07240a0409ff080905810300040206070904010000020d00000904010102020d000009058202200004f902090503022000ffde020000000000000000"], &(0x7f0000000440)={0xea, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0xd, 0x9, 0x28, 0x80}, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="eb0e08006d09d2398d9e4685c50eabac84c460c744da00d53b9e8f176777bac24891806efc4b48b5635e26a98a21d325e68b56553e14b5398fe9ba7c2f6407232d062fb2fc93bfb555a838f7caa0943f27bf6d"], 0x3, [{0xae, &(0x7f0000000380)=@string={0xae, 0x3, "e832a2e2d36641b476ee4d2754b0fb39930d4245ce9ea82a2918a8624034b45d3798417d886f7e5876532c1c9ceaeabcdbe1e345a0c6da53cdd6d7cfe119d80d5d9c744d0b21b31ba69e0c3d22e802062c5df1295cc1e0928017ad495735ae03ffc5d88bfa963141c9b093e7cf1c2fc95a91397dfd7df243084e99d4590197d1335bd28e16b40294be331bcc7ec7db23a106cdb76bc7cb09dc57e9109088be701a474409f3511167e1070559"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc3d}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f", 0x10}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x1a4, r2, 0xe701ac47a3d23ecd, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x17e, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00\x91d\xe6,\xd3@I\x17\xf3\xbeeI8bz\xdb\xb8s0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\xacs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=40\xe8R\x83p,J\xca\x85\xcb\xfa:\xdb\xda\x05\xed\xc8\xad\xa2\xfc0C\x9e3\x8e*\xae\x91\xa4\xc7)\xc0\x87\x9b\xee~\xdb\xac\x03\x90\xb1\x05\x81\xb1j\xfaO`\xa7\xa0\xeb\x83\x13 \xc8\x98\xdb\v \x95\x8eD\xc3\xc6:\xcc%\x88\xc7\xa5\xe5\xfc\xccl\x96F_\x92\xa2\xc3\xea@\"\xb1\x1b`o~B\xb4W\xd8\v\xabCBL\x81A\x92D\xd5{K\xf0\xd5\x91\n\x94\x9b\xd9\xdb2E\\\xb1\x90\xf1\xfc\xc1}\x96\xf4\xba3g\xc8\xf7j\xbc\xf1\x11\xe3\x05\xean9M\xeb&\xd2\xdf\xbe\xa1\xe8[\x91\xa5\x90uX\xd0IH!\xe3\x8a9k\x94\xc8\xde\xea\xc6^\x96\xceV\xb2\xcba\x8b\xbc\xe9'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r3 = gettid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r4, 0x8800000) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) close(r5) accept(r6, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendfile(r5, r4, 0x0, 0x578410ed) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r10, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x8003, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000280)={0x0, 0x0, 0x1014, 0x200000, 0x10001, 0x0, 0x8000, 0x1}) socket$nl_route(0x10, 0x3, 0x0) 9.416233445s ago: executing program 4 (id=3063): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480ef42b000081e3bd6efb01e5", 0x1e}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') lseek(r5, 0x8001, 0x1) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000001}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000240)=0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = fcntl$dupfd(r1, 0x0, r1) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x4, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c9", 0x0, 0x300, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TIOCSLCKTRMIOS(r0, 0x8926, &(0x7f0000000180)) 7.520038022s ago: executing program 1 (id=3069): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB, @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 5.779234548s ago: executing program 1 (id=3071): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x18) mremap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000ca7c6427d7417f0a3aa23d3fae0b50820b8841c20a4433dd6cf3465da808878995e270c2f965f6bca15f691962aeb6e4c708ce41a05c3284b7c7deea385cabfc5ce1594c1028f3f9dfec8dbd02ad232b1e109414ff85ca0d758412bd78fca9db5e3a32680b5435da53e70360007cc2f50e27655f040c6d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_io_uring_setup(0x46f1, &(0x7f0000000380)={0x0, 0xf736, 0x10100, 0x0, 0x37d}, &(0x7f0000000340), &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000dc0)={0x0, 0x1000, "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"}, &(0x7f0000000100)=0x1008) 3.56772433s ago: executing program 1 (id=3072): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006ec1000001e0a05010000000000000000070000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0002800800034000000002a81003800003008008000340000000010900090073797a32000000000900090073797a310000000014000b80100001800b000100736f636b65740000ec000a80b3000100c5f36d3652703d04704b657395ce67689bf528a2f0c27250370e9767ff6448284e3cb74413ae634ddbd48c838e4365b0d7fa1d595d2455162252851a0c95b0e4b8e58a580a843dd9e96cbcb2dcce22fd51d1d05e39bc7b3a6657360acd8f459e22cbe0b11992c3f0d5ca9a21a8c06dbfed6acf76b973669315b315953dd691b02f2c6d52de3f535c389a0ab6bc97365fe69093eabe75ad76a3768d6b73d26a587f5affde11b89a608de7b4e218db02003400028008000180fffffffc0900020073797a300000000008000180fffffffe08000180fffffffb0900020073797a32000000000c0005400000000000000000d001"], 0x1170}}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x2c, 0xa7f084dd5657bbbf, 0x14}) write$uinput_user_dev(r5, &(0x7f00000006c0)={'syz1\x00', {0x9, 0x9, 0x9, 0xfff}, 0x42, [0x2, 0x2, 0x7f, 0x7, 0xa0, 0x200, 0x9, 0x9, 0x72, 0x89, 0x101, 0x0, 0x356, 0x0, 0x4, 0x944, 0x1, 0x3, 0x187, 0x40, 0x855, 0x7, 0x8000, 0x4, 0x5f, 0x2, 0x1000, 0x80, 0x97, 0x8, 0x2, 0x6, 0x741b, 0x1, 0xffffb01f, 0x7, 0xfffffff3, 0xe, 0x8001, 0x19, 0x42219e6, 0x2, 0x9, 0x6, 0x7, 0x2, 0xff, 0x8001, 0xc, 0x9, 0x7, 0x6, 0x8001, 0x8, 0x8, 0x3, 0xe3bb5d82, 0x9, 0x80000001, 0x4, 0x5, 0x9, 0x5b, 0xfffffffc], [0x10000, 0x7fffffff, 0x9, 0x9, 0x6, 0x0, 0x4, 0x8000, 0xb7b, 0x0, 0xfffffffe, 0x6, 0x7, 0x8, 0x800, 0xab9, 0xa, 0x5, 0x2, 0x2, 0x0, 0x4, 0x79, 0x9, 0x80, 0x6, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x24000, 0x0, 0x3, 0x200, 0x0, 0x4, 0xb, 0x6, 0x4553, 0x7f, 0x40, 0x0, 0x200, 0x3ff, 0xfffffffb, 0x0, 0x401, 0xffff, 0x5, 0x964, 0x85f, 0x80000001, 0x4, 0x151, 0x1ff, 0x7, 0x3f, 0x324, 0x17db, 0x9, 0xc247, 0x7d], [0x5, 0x81, 0x0, 0x7a74ec32, 0x2, 0x5, 0xd, 0x8, 0x1, 0x5, 0x0, 0x3b, 0x7, 0x80, 0x0, 0x5, 0x7, 0x3, 0x0, 0x3, 0xfffff801, 0x1ff, 0x51, 0x400, 0x8, 0x0, 0x6, 0x800, 0xf, 0x1, 0x0, 0x8, 0x0, 0x5, 0x7, 0x5, 0x9, 0x0, 0x7, 0x4, 0x7, 0x4e19, 0xffff, 0x45864f1, 0x7ff, 0x7e, 0x3, 0xffffff80, 0x101, 0x2, 0x7e, 0x8000, 0x100, 0x0, 0x1, 0x4b8, 0x8, 0x1, 0x4, 0x7, 0x7, 0x1000, 0x8001, 0x2f9a], [0x1, 0xc, 0x2, 0x4, 0x8, 0x400, 0x4, 0x800, 0x4, 0x400, 0xc, 0xa8, 0xd89, 0x0, 0x3, 0x3, 0xfff, 0x8, 0x9, 0x7, 0x3, 0x0, 0x0, 0x3, 0x8, 0x3, 0x3, 0xbd94, 0xf542, 0x1ff, 0x7, 0xffffffff, 0x3, 0x80000000, 0x0, 0x1, 0x9, 0x7, 0x1dff7f26, 0x5, 0x7f, 0x9, 0x40, 0xe, 0x200, 0x7, 0x5, 0x1, 0xddf, 0x8, 0x0, 0x97, 0x9, 0x9, 0x7, 0x9, 0x5, 0x8, 0x20, 0xbe2, 0x8, 0x4, 0x3ff, 0x8]}, 0x45c) r6 = getpid() r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41020}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x1ec}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0xfff}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}, @IFLA_CARRIER={0x5, 0x21, 0xf9}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) sched_setscheduler(r6, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 3.166916506s ago: executing program 4 (id=3073): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000011c0)=@newlink={0xe8, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0xb8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa8, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0xc554}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x6}}]}, @IFLA_VLAN_INGRESS_QOS={0x70, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x10010}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0x8, 0x1, {0x2, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb22, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x806, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80, 0x6}}]}]}}}, @IFLA_PORT_SELF={0x0, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x0, 0x1, 0x6}]}, @IFLA_MASTER={0x8}]}, 0xe8}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 3.166360467s ago: executing program 3 (id=3074): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) unshare(0x4040600) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) 3.08442359s ago: executing program 3 (id=3075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.986461185s ago: executing program 3 (id=3076): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x1917, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x7, 0x3, 0x7}) close_range(r0, 0xffffffffffffffff, 0x0) 1.935982655s ago: executing program 4 (id=3077): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, 0x0, &(0x7f00000001c0)) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1380, &(0x7f0000000100)=ANY=[]) 1.729223124s ago: executing program 3 (id=3078): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r1, 0x1, 0xf, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b031200b7bc64000200475400f6a13bb1000000086086dd4803", 0xbcff, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x3, r1}, 0x14) 1.586047201s ago: executing program 1 (id=3079): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b92010024001280090001", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 1.491780061s ago: executing program 3 (id=3080): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x18) mremap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000ca7c6427d7417f0a3aa23d3fae0b50820b8841c20a4433dd6cf3465da808878995e270c2f965f6bca15f691962aeb6e4c708ce41a05c3284b7c7deea385cabfc5ce1594c1028f3f9dfec8dbd02ad232b1e109414ff85ca0d758412bd78fca9db5e3a32680b5435da53e70360007cc2f50e27655f040c6d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_io_uring_setup(0x46f1, &(0x7f0000000380)={0x0, 0xf736, 0x10100, 0x0, 0x37d}, &(0x7f0000000340), &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000dc0)={0x0, 0x1000, "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"}, &(0x7f0000000100)=0x1008) 244.724222ms ago: executing program 1 (id=3081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xc2, 0x0, 0x7fff0005}]}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)={0x14, 0x2c, 0x107, 0x0, 0x25dfdbfd, {0x8, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000001c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r9) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_SE_IO(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000001c40)=ANY=[@ANYBLOB="e8120000", @ANYRES16=r10, @ANYBLOB="01002cbd7000fbdbdf251b000000080015000200000008000100", @ANYRES32, @ANYBLOB="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", @ANYRES32=r12], 0x12e8}, 0x1, 0x0, 0x0, 0x2000c8e0}, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x14e2e158920950ee}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008001}, 0x24008840) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x6, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000007100011800c000100636f756e74657200640000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000003800038034000080080003400000000228000b8006"], 0xf8}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 88.872194ms ago: executing program 4 (id=3082): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7, @empty}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r5], 0x44}}, 0x8000) sendmsg$inet6(r2, &(0x7f0000000b00)={&(0x7f00000003c0)={0xa, 0x4e21, 0x7, @private2, 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000400)="a6c7e2d72d340059cfad1eaf33be659f12c94abf9618beec45905d4ae01ec677b7d8a4182c8f9b597fdf93e479b289f92f6f6ddf07cb644180850f82f8b7ceb72cd6fac69c8f3033", 0x48}, {&(0x7f0000000480)="b67811356afd4da0a0ab00399ba68cd9fc921251a2d434220f23a27a50618c466b05d7e29e1280321463aad8d74001e8fc38e34eea88e02a202bc3eadf939e7129f24814c8865165255bdbfcc3a10d3a7ff497166d4960576fd559ff80d88c322e456c89e6092cbf94a4573e5f479f181ec05a529784961742f5de05245b3b86638293d32a67b6ee2f049590302d2547c1bcf4fd0c4093", 0x97}, {&(0x7f0000000540)="1c344c5b0544d481888b3dc6645d618b497725f6319e996568e17a4fcbe34cf67839d0743b6baae154f2a81d8bf4b5bb8222ba424c1d793b1f7d2db9b46bea7a1115a0806529ddf0cfb9be06a78547c13729715ae0595292c6a29acf1f61b34694fb9294caf29b435cc830c095afc3e56fa25597a7267a011d4a8fd88b445810", 0x80}], 0x3, &(0x7f0000000900)=[@rthdr={{0x38, 0x29, 0x39, {0x6, 0x4, 0x3, 0x8, 0x0, [@rand_addr=' \x01\x00', @private0]}}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x3c, 0x5, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @mcast1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r3}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x41}, r5}}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x7b, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x90d9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2}, @jumbo={0xc2, 0x4, 0x28d5}, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @hopopts={{0xb0, 0x29, 0x36, {0x2b, 0x12, '\x00', [@generic={0x4, 0x51, "6697af37d91689733afbb44b940eea534e8c25b8c8bef72c83186e1caa6ad6549ff0bf8c57a2c7fe4c033e7446b9dcf89af753787d9e36c8ba2d19adcbd860f1b82ca1d0eecca255d09e92cfbaaed44fb4"}, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x38, {0x3, 0xc, 0xf6, 0x8, [0x8, 0x2, 0x40, 0x5, 0xe397, 0x9]}}]}}}], 0x1f0}, 0x4048080) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$PPPIOCSMRRU(r7, 0x4004743b, &(0x7f0000000080)=0x5) r9 = dup(r6) write$UHID_INPUT(r9, &(0x7f00000031c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r9, 0xc01064ac, &(0x7f00000001c0)={0x0, 0xd2, &(0x7f00000000c0)=""/210}) 0s ago: executing program 3 (id=3083): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) unshare(0x4040600) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) kernel console output (not intermixed with test programs): fx_xfrm_alloc_compat+0x10/0x10 [ 737.223239][T13711] xfrm_nlmsg_multicast+0xda/0x1f0 [ 737.223269][T13711] xfrm_send_state_notify+0x11f1/0x18b0 [ 737.223303][T13711] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 737.223325][T13711] ? km_state_notify+0x25/0x1f0 [ 737.223353][T13711] ? rt_spin_lock+0x1c1/0x3e0 [ 737.223378][T13711] ? km_state_notify+0x25/0x1f0 [ 737.223401][T13711] ? km_state_notify+0x25/0x1f0 [ 737.223424][T13711] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 737.223450][T13711] km_state_notify+0x110/0x1f0 [ 737.223479][T13711] km_state_expired+0xaa/0xf0 [ 737.223504][T13711] ? __pfx_km_state_expired+0x10/0x10 [ 737.223545][T13711] xfrm_add_sa_expire+0x247/0x4c0 [ 737.223571][T13711] ? rcu_is_watching+0x15/0xb0 [ 737.223592][T13711] ? xfrm_add_sa_expire+0x1a1/0x4c0 [ 737.223620][T13711] ? __pfx_xfrm_add_sa_expire+0x10/0x10 [ 737.223651][T13711] ? __nla_parse+0x40/0x60 [ 737.223684][T13711] xfrm_user_rcv_msg+0x7a3/0xab0 [ 737.223718][T13711] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 737.223797][T13711] ? __lock_acquire+0xab9/0xd20 [ 737.223842][T13711] netlink_rcv_skb+0x208/0x470 [ 737.223865][T13711] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 737.223894][T13711] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 737.223934][T13711] ? mutex_lock_nested+0x154/0x1d0 [ 737.223953][T13711] ? xfrm_netlink_rcv+0x6a/0x90 [ 737.223982][T13711] xfrm_netlink_rcv+0x79/0x90 [ 737.224009][T13711] netlink_unicast+0x846/0xa10 [ 737.224049][T13711] ? __pfx_netlink_unicast+0x10/0x10 [ 737.224079][T13711] ? netlink_sendmsg+0x642/0xb30 [ 737.224097][T13711] ? skb_put+0x11b/0x210 [ 737.224123][T13711] netlink_sendmsg+0x805/0xb30 [ 737.224142][T13711] ? is_bpf_text_address+0x26/0x2b0 [ 737.224181][T13711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.224221][T13711] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 737.224246][T13711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.224268][T13711] __sock_sendmsg+0x21c/0x270 [ 737.224299][T13711] ____sys_sendmsg+0x508/0x820 [ 737.224330][T13711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 737.224365][T13711] ? import_iovec+0x74/0xa0 [ 737.224392][T13711] ___sys_sendmsg+0x21f/0x2a0 [ 737.224419][T13711] ? __pfx____sys_sendmsg+0x10/0x10 [ 737.224489][T13711] ? __fget_files+0x2a/0x420 [ 737.224514][T13711] ? __fget_files+0x3a6/0x420 [ 737.224552][T13711] __x64_sys_sendmsg+0x1a1/0x260 [ 737.224579][T13711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 737.224615][T13711] ? __pfx_ksys_write+0x10/0x10 [ 737.224643][T13711] ? do_syscall_64+0xbe/0xfa0 [ 737.224673][T13711] do_syscall_64+0xfa/0xfa0 [ 737.224696][T13711] ? lockdep_hardirqs_on+0x9c/0x150 [ 737.224720][T13711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.224740][T13711] ? clear_bhb_loop+0x60/0xb0 [ 737.224764][T13711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.224783][T13711] RIP: 0033:0x7fa4c76aefc9 [ 737.224801][T13711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.224818][T13711] RSP: 002b:00007fa4c5916038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 737.224840][T13711] RAX: ffffffffffffffda RBX: 00007fa4c7905fa0 RCX: 00007fa4c76aefc9 [ 737.224855][T13711] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 737.224868][T13711] RBP: 00007fa4c5916090 R08: 0000000000000000 R09: 0000000000000000 [ 737.224881][T13711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.224893][T13711] R13: 00007fa4c7906038 R14: 00007fa4c7905fa0 R15: 00007ffd78fc5fe8 [ 737.224931][T13711] [ 737.331454][ T5885] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 738.280700][ T5885] usb 6-1: device descriptor read/64, error -71 [ 738.394869][ T5885] usb usb6-port1: attempt power cycle [ 738.761547][ T5885] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 738.985344][ T5885] usb 6-1: device descriptor read/8, error -71 [ 739.401462][ T5885] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 739.465548][ T5885] usb 6-1: device descriptor read/8, error -71 [ 739.516136][T13729] netlink: 'syz.2.2584': attribute type 4 has an invalid length. [ 739.557713][T13729] netlink: 'syz.2.2584': attribute type 4 has an invalid length. [ 739.666175][T13735] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2586'. [ 739.666199][T13735] openvswitch: netlink: Flow key attr not present in new flow. [ 739.690605][ T1232] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 739.726112][ T5885] usb usb6-port1: unable to enumerate USB device [ 739.871338][ T1232] usb 5-1: Using ep0 maxpacket: 32 [ 739.874079][ T1232] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 739.874104][ T1232] usb 5-1: config 0 has no interface number 0 [ 739.874154][ T1232] usb 5-1: config 0 interface 12 has no altsetting 0 [ 739.907135][ T1232] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 739.907152][ T1232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.907163][ T1232] usb 5-1: Product: syz [ 739.907171][ T1232] usb 5-1: Manufacturer: syz [ 739.907179][ T1232] usb 5-1: SerialNumber: syz [ 739.943891][ T1232] usb 5-1: config 0 descriptor?? [ 740.251231][T13745] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 742.053434][T13767] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 743.607396][ T31] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 744.010565][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 744.013548][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 744.015712][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 744.015748][ T31] usb 3-1: can't read configurations, error -61 [ 744.170545][ T31] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 744.303002][T13792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2604'. [ 744.341255][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 744.344313][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 744.346549][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 744.346584][ T31] usb 3-1: can't read configurations, error -61 [ 744.347007][ T31] usb usb3-port1: attempt power cycle [ 744.462080][ T1232] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 744.462135][ T1232] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 744.462153][ T1232] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 744.462237][ T1232] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 744.521563][ T1232] usb 5-1: USB disconnect, device number 53 [ 744.592912][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'. [ 744.618451][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'. [ 744.680614][ T31] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 744.701618][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 744.707137][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 744.743516][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 744.743553][ T31] usb 3-1: can't read configurations, error -61 [ 744.890734][ T31] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 744.911740][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 744.914085][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 744.915798][ T31] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 744.915833][ T31] usb 3-1: can't read configurations, error -61 [ 744.916413][ T31] usb usb3-port1: unable to enumerate USB device [ 745.041715][T13805] FAULT_INJECTION: forcing a failure. [ 745.041715][T13805] name failslab, interval 1, probability 0, space 0, times 0 [ 745.041748][T13805] CPU: 1 UID: 0 PID: 13805 Comm: syz.1.2609 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 745.041771][T13805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 745.041783][T13805] Call Trace: [ 745.041792][T13805] [ 745.041800][T13805] dump_stack_lvl+0x189/0x250 [ 745.041831][T13805] ? __pfx____ratelimit+0x10/0x10 [ 745.041855][T13805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 745.041881][T13805] ? __pfx__printk+0x10/0x10 [ 745.041911][T13805] ? __pfx___might_resched+0x10/0x10 [ 745.041936][T13805] should_fail_ex+0x46c/0x600 [ 745.041968][T13805] should_failslab+0xa8/0x100 [ 745.041996][T13805] __kmalloc_cache_noprof+0x6f/0x6c0 [ 745.042020][T13805] ? bpf_prog_alloc_no_stats+0x4a/0x530 [ 745.042044][T13805] ? __vmalloc_noprof+0xb1/0xf0 [ 745.042066][T13805] ? bpf_prog_alloc_no_stats+0xdb/0x530 [ 745.042095][T13805] bpf_prog_alloc_no_stats+0xdb/0x530 [ 745.042125][T13805] bpf_prog_alloc+0x3c/0x1a0 [ 745.042152][T13805] bpf_prog_load+0x735/0x19e0 [ 745.042192][T13805] ? __pfx_bpf_prog_load+0x10/0x10 [ 745.042240][T13805] ? bpf_lsm_bpf+0x9/0x20 [ 745.042258][T13805] ? security_bpf+0x7e/0x300 [ 745.042280][T13805] __sys_bpf+0x507/0x860 [ 745.042307][T13805] ? __pfx___sys_bpf+0x10/0x10 [ 745.042328][T13805] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 745.042366][T13805] ? ksys_write+0x230/0x260 [ 745.042391][T13805] ? __pfx_ksys_write+0x10/0x10 [ 745.042419][T13805] __x64_sys_bpf+0x7c/0x90 [ 745.042442][T13805] do_syscall_64+0xfa/0xfa0 [ 745.042468][T13805] ? lockdep_hardirqs_on+0x9c/0x150 [ 745.042492][T13805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.042512][T13805] ? clear_bhb_loop+0x60/0xb0 [ 745.042535][T13805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.042554][T13805] RIP: 0033:0x7effb9c9efc9 [ 745.042572][T13805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.042590][T13805] RSP: 002b:00007effb7efe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 745.042612][T13805] RAX: ffffffffffffffda RBX: 00007effb9ef5fa0 RCX: 00007effb9c9efc9 [ 745.042627][T13805] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 745.042641][T13805] RBP: 00007effb7efe090 R08: 0000000000000000 R09: 0000000000000000 [ 745.042654][T13805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.042672][T13805] R13: 00007effb9ef6038 R14: 00007effb9ef5fa0 R15: 00007fff951b0338 [ 745.042707][T13805] [ 745.375070][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.532550][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.098212][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.323428][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.973846][ C1] vkms_vblank_simulate: vblank timer overrun [ 747.251761][ C1] vkms_vblank_simulate: vblank timer overrun [ 747.301113][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.459071][T13811] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 747.814804][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.812715][ C1] vkms_vblank_simulate: vblank timer overrun [ 749.768846][T13852] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2623'. [ 751.032246][T13865] veth1_to_batadv: entered promiscuous mode [ 751.051212][T13865] batadv_slave_0: entered promiscuous mode [ 751.051480][T13865] batadv_slave_0: left promiscuous mode [ 751.110092][T13865] veth1_to_batadv: left promiscuous mode [ 751.697673][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 751.697691][ T37] audit: type=1804 audit(1762211536.113:367): pid=13886 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.2635" name="/newroot/409/file0" dev="tmpfs" ino=2176 res=1 errno=0 [ 751.716190][T13886] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 751.716213][T13886] ref_ctr increment failed for inode: 0x880 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888031002e00 [ 751.728567][T13887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2637'. [ 751.761216][T13879] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 751.761247][T13879] ref_ctr decrement failed for inode: 0x880 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888031002e00 [ 751.761294][T13879] uprobe: syz.4.2635:13879 failed to unregister, leaking uprobe [ 752.326817][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 753.160721][T13902] ubi0: attaching mtd0 [ 753.168025][T13902] ubi0: scanning is finished [ 753.168044][T13902] ubi0: empty MTD device detected [ 753.301776][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 753.304086][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.304142][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 753.304170][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.354011][ T9] usb 3-1: config 0 descriptor?? [ 753.382004][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 753.484283][ T5885] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 753.693509][ T5885] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 753.693542][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.693564][ T5885] usb 6-1: Product: syz [ 753.693580][ T5885] usb 6-1: Manufacturer: syz [ 753.693596][ T5885] usb 6-1: SerialNumber: syz [ 753.830649][ T31] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 753.990677][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 754.007284][ T31] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 754.007407][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 754.007435][ T31] usb 4-1: Product: syz [ 754.007534][ T31] usb 4-1: Manufacturer: syz [ 754.007551][ T31] usb 4-1: SerialNumber: syz [ 754.024491][ C0] vkms_vblank_simulate: vblank timer overrun [ 754.039764][ T9] gspca_vc032x: reg_r err -110 [ 754.039851][ T9] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 754.095045][T13901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.099037][T13901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.135040][ T31] usb 4-1: config 0 descriptor?? [ 754.135333][ T5885] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 754.136036][ T5885] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 754.162115][ C0] vkms_vblank_simulate: vblank timer overrun [ 754.208414][ T31] gspca_main: sq905-2.14.0 probing 2770:9120 [ 754.238315][T13895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.239587][T13895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.314823][ C0] vkms_vblank_simulate: vblank timer overrun [ 754.341445][ T31] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 754.341757][ T31] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 754.350316][ T31] usb 4-1: USB disconnect, device number 51 [ 754.381988][T13902] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 754.544591][T13918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2643'. [ 754.626906][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2643'. [ 754.627657][ T5885] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 754.627720][ T5885] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 754.630839][ T5885] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 754.706493][ T5885] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 754.744124][ T5885] usb 6-1: USB disconnect, device number 38 [ 754.812030][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2648'. [ 754.812052][T13923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2648'. [ 754.813934][T13923] netlink: 'syz.1.2648': attribute type 15 has an invalid length. [ 755.457676][ T37] audit: type=1326 audit(1762211539.903:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13943 comm="syz.5.2654" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0599bdefc9 code=0x0 [ 755.731076][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.196328][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.435311][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.758811][T13959] smc: net device ip6_vti0 erased user defined pnetid SYZ0 [ 757.024316][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.102036][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.240364][ T5885] usb 3-1: USB disconnect, device number 46 [ 757.869836][ C0] vkms_vblank_simulate: vblank timer overrun [ 758.029616][ C0] vkms_vblank_simulate: vblank timer overrun [ 758.711932][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.100876][ T5874] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 759.131311][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 759.134774][T14001] MPI: mpi too large (124808 bits) [ 759.261136][ T5860] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 759.281337][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 759.283575][ T9] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 759.283602][ T9] usb 5-1: config 0 has no interface number 0 [ 759.286447][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 759.286476][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.286498][ T9] usb 5-1: Product: syz [ 759.286515][ T9] usb 5-1: Manufacturer: syz [ 759.286530][ T9] usb 5-1: SerialNumber: syz [ 759.294617][ T9] usb 5-1: config 0 descriptor?? [ 759.315371][ T9] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 759.415709][ T5860] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.415767][ T5860] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 759.415879][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.441516][ T5860] usb 6-1: config 0 descriptor?? [ 759.488006][ T5860] pwc: Askey VC010 type 2 USB webcam detected. [ 759.543670][T13985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.548617][T13985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.932211][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.936557][ T9] gspca_sn9c2028: read1 error -110 [ 759.938772][ T9] gspca_sn9c2028: read1 error -32 [ 759.939820][ T9] gspca_sn9c2028: read1 error -32 [ 759.940317][ T9] sn9c2028 5-1:0.119: probe with driver sn9c2028 failed with error -32 [ 759.982493][ T5860] pwc: recv_control_msg error -32 req 02 val 2b00 [ 759.985566][ T5860] pwc: recv_control_msg error -32 req 02 val 2700 [ 759.986252][ T5860] pwc: recv_control_msg error -32 req 02 val 2c00 [ 759.987027][ T5860] pwc: recv_control_msg error -32 req 04 val 1000 [ 759.987936][ T5860] pwc: recv_control_msg error -32 req 04 val 1300 [ 759.993452][ T5860] pwc: recv_control_msg error -32 req 04 val 1400 [ 759.995697][ T5860] pwc: recv_control_msg error -32 req 02 val 2000 [ 759.998393][ T5860] pwc: recv_control_msg error -32 req 02 val 2100 [ 760.002137][ T5860] pwc: recv_control_msg error -32 req 04 val 1500 [ 760.003844][ T5860] pwc: recv_control_msg error -32 req 02 val 2500 [ 760.808027][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.871453][ T5874] usb 3-1: device descriptor read/64, error -71 [ 761.111684][ T5874] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 761.167812][T14019] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2675'. [ 761.278428][ T5874] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 761.278504][ T5874] usb 3-1: config 1 has no interface number 0 [ 761.278553][ T5874] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 761.278578][ T5874] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 761.278593][ T5874] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.331878][ T5874] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 761.331963][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.331987][ T5874] usb 3-1: Product: syz [ 761.332002][ T5874] usb 3-1: Manufacturer: syz [ 761.332019][ T5874] usb 3-1: SerialNumber: syz [ 761.393677][T14005] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 761.597283][ T5874] usb 3-1: Error in usbnet_get_endpoints (-71) [ 761.622015][ T5874] usb 3-1: USB disconnect, device number 48 [ 761.666577][T13981] usb 5-1: USB disconnect, device number 54 [ 762.124822][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.166747][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.272014][ C0] vkms_vblank_simulate: vblank timer overrun [ 762.510069][ C0] vkms_vblank_simulate: vblank timer overrun [ 763.099832][ T5860] pwc: recv_control_msg error -71 req 02 val 2600 [ 763.100354][ T5860] pwc: recv_control_msg error -71 req 02 val 2900 [ 763.115404][ T5860] pwc: recv_control_msg error -71 req 02 val 2800 [ 763.116219][ T5860] pwc: recv_control_msg error -71 req 04 val 1100 [ 763.116830][ T5860] pwc: recv_control_msg error -71 req 04 val 1200 [ 763.245180][ T5860] pwc: Registered as video103. [ 763.261613][ T5860] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input29 [ 763.291622][ T5860] usb 6-1: USB disconnect, device number 39 [ 763.846471][T14048] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 763.846671][T14048] overlayfs: failed to set xattr on upper [ 763.846705][T14048] overlayfs: ...falling back to redirect_dir=nofollow. [ 763.846739][T14048] overlayfs: ...falling back to index=off. [ 763.846774][T14048] overlayfs: ...falling back to uuid=null. [ 763.846891][T14048] overlayfs: maximum fs stacking depth exceeded [ 763.936797][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.359855][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.931412][ T5860] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 765.094388][ T5860] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.094417][ T5860] usb 4-1: config 0 has no interfaces? [ 765.128094][ T5860] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 765.128126][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.128147][ T5860] usb 4-1: Product: syz [ 765.128163][ T5860] usb 4-1: Manufacturer: syz [ 765.128179][ T5860] usb 4-1: SerialNumber: syz [ 765.204613][ T5860] usb 4-1: config 0 descriptor?? [ 765.382507][T14070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2691'. [ 765.838793][ C0] vkms_vblank_simulate: vblank timer overrun [ 765.937768][ C0] vkms_vblank_simulate: vblank timer overrun [ 766.100006][T13980] usb 4-1: USB disconnect, device number 52 [ 766.226433][T14066] netlink: 'syz.5.2692': attribute type 15 has an invalid length. [ 766.720587][ T5885] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 766.902914][ T5885] usb 3-1: config 16 interface 0 altsetting 75 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 766.902934][ T5885] usb 3-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0 [ 766.902947][ T5885] usb 3-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 766.902962][ T5885] usb 3-1: config 16 interface 0 has no altsetting 0 [ 766.902981][ T5885] usb 3-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 766.902994][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.975951][T14094] ubi31: attaching mtd0 [ 767.055592][T14094] ubi31: scanning is finished [ 767.494114][ T5885] usb 3-1: string descriptor 0 read error: -71 [ 767.500340][ T5885] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 767.513811][ T5885] imon 3-1:16.0: unable to initialize intf0, err -19 [ 767.513833][ T5885] imon:imon_probe: failed to initialize context! [ 767.513848][ T5885] imon 3-1:16.0: unable to register, err -19 [ 767.553646][ T5885] usb 3-1: USB disconnect, device number 49 [ 767.838835][T14094] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 767.838854][T14094] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 767.838864][T14094] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 767.838873][T14094] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 767.838883][T14094] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 767.838892][T14094] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 767.838901][T14094] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2831901055 [ 767.838913][T14094] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 767.852017][T14115] ubi31: background thread "ubi_bgt31d" started, PID 14115 [ 768.238742][T14117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2704'. [ 768.944922][ C0] vkms_vblank_simulate: vblank timer overrun [ 769.766671][T11047] Bluetooth: hci3: command 0x0405 tx timeout [ 770.122121][ C0] vkms_vblank_simulate: vblank timer overrun [ 770.765870][T14153] FAULT_INJECTION: forcing a failure. [ 770.765870][T14153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.765928][T14153] CPU: 0 UID: 0 PID: 14153 Comm: syz.1.2711 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 770.765951][T14153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 770.765962][T14153] Call Trace: [ 770.765971][T14153] [ 770.765980][T14153] dump_stack_lvl+0x189/0x250 [ 770.766011][T14153] ? __pfx____ratelimit+0x10/0x10 [ 770.766035][T14153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 770.766062][T14153] ? __pfx__printk+0x10/0x10 [ 770.766085][T14153] ? __might_fault+0xb0/0x130 [ 770.766122][T14153] should_fail_ex+0x46c/0x600 [ 770.766153][T14153] _copy_from_user+0x2d/0xb0 [ 770.766175][T14153] __sys_bpf+0x1e3/0x860 [ 770.766203][T14153] ? __pfx___sys_bpf+0x10/0x10 [ 770.766244][T14153] ? ksys_write+0x1e7/0x260 [ 770.766280][T14153] __x64_sys_bpf+0x7c/0x90 [ 770.766304][T14153] do_syscall_64+0xfa/0xfa0 [ 770.766330][T14153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.766349][T14153] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 770.766368][T14153] ? clear_bhb_loop+0x60/0xb0 [ 770.766391][T14153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.766410][T14153] RIP: 0033:0x7effb9c9efc9 [ 770.766428][T14153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.766453][T14153] RSP: 002b:00007effb7ebc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 770.766474][T14153] RAX: ffffffffffffffda RBX: 00007effb9ef6180 RCX: 00007effb9c9efc9 [ 770.766489][T14153] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000012 [ 770.766502][T14153] RBP: 00007effb7ebc090 R08: 0000000000000000 R09: 0000000000000000 [ 770.766515][T14153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.766527][T14153] R13: 00007effb9ef6218 R14: 00007effb9ef6180 R15: 00007fff951b0338 [ 770.766561][T14153] [ 770.795979][ C0] vkms_vblank_simulate: vblank timer overrun [ 771.657880][T14155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2715'. [ 772.893958][ C0] vkms_vblank_simulate: vblank timer overrun [ 772.895408][ T5860] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 773.076488][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 773.367228][ T5860] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.367635][ T5860] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 773.367711][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.511322][ C0] vkms_vblank_simulate: vblank timer overrun [ 773.554925][ T5860] usb 4-1: config 0 descriptor?? [ 773.576617][ T5860] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 774.551649][ T5860] gspca_vc032x: reg_r err -110 [ 774.551747][ T5860] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 774.583709][T14157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.584285][T14157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.011093][T14182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2716'. [ 775.011482][ C1] sd 0:0:1:0: [sda] tag#1882 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 775.011548][ C1] sd 0:0:1:0: [sda] tag#1882 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 775.014028][T14181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 775.561280][T14179] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 775.649365][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2716'. [ 776.590487][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2726'. [ 777.464531][ T5874] usb 4-1: USB disconnect, device number 53 [ 779.128818][T14216] kvm: kvm [14215]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x200000000080 [ 780.354145][T14227] binder: Unknown parameter 'sùˆ@ͪbal' [ 780.992123][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2744'. [ 781.821385][ T5860] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 781.985270][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.985306][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.985346][ T5860] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 781.985371][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.052631][ T5860] usb 5-1: config 0 descriptor?? [ 782.802562][ T5860] usb 5-1: string descriptor 0 read error: -22 [ 783.241394][ T5860] uclogic 0003:256C:006D.000D: failed retrieving string descriptor #100: -71 [ 783.241455][ T5860] uclogic 0003:256C:006D.000D: failed retrieving pen parameters: -71 [ 783.241474][ T5860] uclogic 0003:256C:006D.000D: failed probing pen v1 parameters: -71 [ 783.241545][ T5860] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 783.241658][ T5860] uclogic 0003:256C:006D.000D: probe with driver uclogic failed with error -71 [ 783.375367][ T5860] usb 5-1: USB disconnect, device number 55 [ 783.767671][T14275] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2757'. [ 783.768114][T14274] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2757'. [ 784.024196][ C1] vkms_vblank_simulate: vblank timer overrun [ 784.938997][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.062996][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2761'. [ 785.068601][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.241736][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.621873][ C1] vkms_vblank_simulate: vblank timer overrun [ 787.004730][ C1] vkms_vblank_simulate: vblank timer overrun [ 787.583127][ C1] vkms_vblank_simulate: vblank timer overrun [ 787.734065][T14319] FAULT_INJECTION: forcing a failure. [ 787.734065][T14319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.734100][T14319] CPU: 0 UID: 0 PID: 14319 Comm: syz.1.2769 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 787.734124][T14319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 787.734136][T14319] Call Trace: [ 787.734144][T14319] [ 787.734153][T14319] dump_stack_lvl+0x189/0x250 [ 787.734184][T14319] ? __pfx____ratelimit+0x10/0x10 [ 787.734209][T14319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 787.734236][T14319] ? __pfx__printk+0x10/0x10 [ 787.734271][T14319] should_fail_ex+0x46c/0x600 [ 787.734302][T14319] _copy_to_user+0x31/0xb0 [ 787.734326][T14319] video_usercopy+0xe32/0x1450 [ 787.734362][T14319] ? __pfx___video_do_ioctl+0x10/0x10 [ 787.734386][T14319] ? __pfx_video_usercopy+0x10/0x10 [ 787.734408][T14319] ? smack_file_ioctl+0x2ac/0x340 [ 787.734458][T14319] ? __fget_files+0x3a6/0x420 [ 787.734487][T14319] v4l2_ioctl+0x190/0x1e0 [ 787.734511][T14319] ? __pfx_v4l2_ioctl+0x10/0x10 [ 787.734534][T14319] __se_sys_ioctl+0xff/0x170 [ 787.734559][T14319] do_syscall_64+0xfa/0xfa0 [ 787.734581][T14319] ? lockdep_hardirqs_on+0x9c/0x150 [ 787.734605][T14319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.734624][T14319] ? clear_bhb_loop+0x60/0xb0 [ 787.734648][T14319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.734667][T14319] RIP: 0033:0x7effb9c9efc9 [ 787.734684][T14319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.734701][T14319] RSP: 002b:00007effb7ebc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 787.734722][T14319] RAX: ffffffffffffffda RBX: 00007effb9ef6180 RCX: 00007effb9c9efc9 [ 787.734737][T14319] RDX: 00002000000001c0 RSI: 00000000c0205648 RDI: 0000000000000005 [ 787.734750][T14319] RBP: 00007effb7ebc090 R08: 0000000000000000 R09: 0000000000000000 [ 787.734763][T14319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.734775][T14319] R13: 00007effb9ef6218 R14: 00007effb9ef6180 R15: 00007fff951b0338 [ 787.734808][T14319] [ 788.475602][T14326] netlink: 'syz.3.2771': attribute type 1 has an invalid length. [ 788.505926][ T5874] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 788.600402][T14326] 8021q: adding VLAN 0 to HW filter on device bond2 [ 788.672625][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.672681][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 788.672723][ T5874] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 788.672746][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.685898][ T5874] usb 3-1: config 0 descriptor?? [ 788.706093][ T5874] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 788.875151][T14326] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 788.885624][T14326] bond2: (slave batadv1): making interface the new active one [ 788.900409][T14326] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 788.933692][T14307] 9pnet_fd: Insufficient options for proto=fd [ 789.517312][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'. [ 790.503372][T14342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2776'. [ 790.557012][ T5860] usb 3-1: USB disconnect, device number 50 [ 790.802703][T14353] could not open pipe file descriptor [ 791.051022][ T5860] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 791.134422][T14355] bond3: Removing last arp target with arp_interval on [ 791.135596][T14355] bond3: entered allmulticast mode [ 791.136117][T14355] 8021q: adding VLAN 0 to HW filter on device bond3 [ 791.234366][ T5860] usb 3-1: Using ep0 maxpacket: 8 [ 791.247140][ T5860] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 791.247169][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.247190][ T5860] usb 3-1: Product: syz [ 791.247206][ T5860] usb 3-1: Manufacturer: syz [ 791.247221][ T5860] usb 3-1: SerialNumber: syz [ 791.276962][ T5860] usb 3-1: config 0 descriptor?? [ 791.306820][ T5860] gspca_main: sq905-2.14.0 probing 2770:9120 [ 791.617512][T14364] FAULT_INJECTION: forcing a failure. [ 791.617512][T14364] name failslab, interval 1, probability 0, space 0, times 0 [ 791.617546][T14364] CPU: 0 UID: 0 PID: 14364 Comm: syz.4.2783 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 791.617569][T14364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 791.617581][T14364] Call Trace: [ 791.617590][T14364] [ 791.617599][T14364] dump_stack_lvl+0x189/0x250 [ 791.617635][T14364] ? __pfx____ratelimit+0x10/0x10 [ 791.617660][T14364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 791.617687][T14364] ? __pfx__printk+0x10/0x10 [ 791.617717][T14364] ? __pfx___might_resched+0x10/0x10 [ 791.617746][T14364] should_fail_ex+0x46c/0x600 [ 791.617779][T14364] should_failslab+0xa8/0x100 [ 791.617808][T14364] __kvmalloc_node_noprof+0x169/0x920 [ 791.617834][T14364] ? drm_gem_get_pages+0x169/0xa30 [ 791.617861][T14364] drm_gem_get_pages+0x169/0xa30 [ 791.617878][T14364] ? kmem_cache_alloc_noprof+0x181/0x6b0 [ 791.617914][T14364] ? __pfx_drm_gem_get_pages+0x10/0x10 [ 791.617977][T14364] drm_gem_shmem_get_pages_locked+0x201/0x440 [ 791.618001][T14364] ? drm_gem_shmem_mmap+0x18b/0x450 [ 791.618026][T14364] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 791.618056][T14364] ? rt_read_unlock+0x150/0x220 [ 791.618082][T14364] drm_gem_shmem_mmap+0x193/0x450 [ 791.618110][T14364] drm_gem_mmap_obj+0x18a/0x4e0 [ 791.618139][T14364] drm_gem_mmap+0x38d/0x640 [ 791.618163][T14364] ? __pfx_drm_gem_mmap+0x10/0x10 [ 791.618186][T14364] ? __mas_set_range+0x12f/0x3c0 [ 791.618213][T14364] mmap_region+0x18c9/0x20f0 [ 791.618253][T14364] ? __pfx_mmap_region+0x10/0x10 [ 791.618351][T14364] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 791.618391][T14364] ? bpf_lsm_mmap_addr+0x9/0x20 [ 791.618407][T14364] ? security_mmap_addr+0x71/0x270 [ 791.618430][T14364] ? shmem_mapping+0xd/0x50 [ 791.618452][T14364] ? memfd_check_seals_mmap+0xcb/0x210 [ 791.618475][T14364] do_mmap+0xc23/0x10c0 [ 791.618509][T14364] ? __pfx_do_mmap+0x10/0x10 [ 791.618530][T14364] ? rwbase_write_lock+0x56f/0x750 [ 791.618561][T14364] ? __lock_acquire+0xab9/0xd20 [ 791.618592][T14364] vm_mmap_pgoff+0x2a9/0x4d0 [ 791.618623][T14364] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 791.618646][T14364] ? __fget_files+0x2a/0x420 [ 791.618676][T14364] ? __fget_files+0x3a6/0x420 [ 791.618699][T14364] ? __fget_files+0x2a/0x420 [ 791.618729][T14364] ksys_mmap_pgoff+0x4e9/0x720 [ 791.618754][T14364] ? __x64_sys_mmap+0x7f/0x140 [ 791.618781][T14364] do_syscall_64+0xfa/0xfa0 [ 791.618804][T14364] ? lockdep_hardirqs_on+0x9c/0x150 [ 791.618828][T14364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.618847][T14364] ? clear_bhb_loop+0x60/0xb0 [ 791.618871][T14364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.618888][T14364] RIP: 0033:0x7f3cf791efc9 [ 791.618906][T14364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 791.618924][T14364] RSP: 002b:00007f3cf5b7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 791.618946][T14364] RAX: ffffffffffffffda RBX: 00007f3cf7b75fa0 RCX: 00007f3cf791efc9 [ 791.618961][T14364] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 791.618975][T14364] RBP: 00007f3cf5b7e090 R08: 0000000000000003 R09: 0000000100000000 [ 791.618988][T14364] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 791.619000][T14364] R13: 00007f3cf7b76038 R14: 00007f3cf7b75fa0 R15: 00007fffb51012b8 [ 791.619034][T14364] [ 792.523918][ T5875] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 792.536421][ T5860] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 792.536513][ T5860] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 792.560279][ T5860] usb 3-1: USB disconnect, device number 51 [ 793.027727][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2787'. [ 793.550239][ T5875] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.550266][ T5875] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 793.550322][ T5875] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 793.550347][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.604709][ C0] vkms_vblank_simulate: vblank timer overrun [ 793.791550][ T5875] usb 6-1: config 0 descriptor?? [ 793.851196][ C0] vkms_vblank_simulate: vblank timer overrun [ 794.315755][ T5875] Bluetooth: Can't get version to change to load ram patch err [ 794.315769][ T5875] Bluetooth: Loading patch file failed [ 794.315794][ T5875] ath3k 6-1:0.0: probe with driver ath3k failed with error -71 [ 794.359158][ T5875] usb 6-1: USB disconnect, device number 40 [ 795.272082][ C0] vkms_vblank_simulate: vblank timer overrun [ 795.344402][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.195158][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.197082][ T5874] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 796.350877][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 796.357799][ T5874] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 796.357827][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.357849][ T5874] usb 3-1: Product: syz [ 796.357864][ T5874] usb 3-1: Manufacturer: syz [ 796.357879][ T5874] usb 3-1: SerialNumber: syz [ 796.426218][ T5874] usb 3-1: config 0 descriptor?? [ 796.459686][ T5874] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 796.562376][T14413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2802'. [ 796.605925][T13981] IPVS: starting estimator thread 0... [ 796.692310][T14414] IPVS: using max 7 ests per chain, 16800 per kthread [ 796.761636][ T5860] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 796.862674][T14418] kvm: user requested TSC rate below hardware speed [ 796.928830][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 796.935617][ T5860] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 796.935644][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.935714][ T5860] usb 4-1: Product: syz [ 796.935730][ T5860] usb 4-1: Manufacturer: syz [ 796.935751][ T5860] usb 4-1: SerialNumber: syz [ 796.973581][ T5860] usb 4-1: config 0 descriptor?? [ 797.014268][ T5860] powermate 4-1:0.0: probe with driver powermate failed with error -5 [ 797.142681][T14424] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2807'. [ 797.233684][T13981] usb 4-1: USB disconnect, device number 54 [ 797.418299][ T5875] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 797.446839][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.614966][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.723945][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.744285][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.850744][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 797.854743][ T5875] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 797.854772][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.934018][ T5875] usb 5-1: config 0 descriptor?? [ 797.947580][ T5875] gspca_main: sq930x-2.14.0 probing 041e:403c [ 798.449890][ C0] vkms_vblank_simulate: vblank timer overrun [ 798.490297][ C0] vkms_vblank_simulate: vblank timer overrun [ 798.557299][ T5875] gspca_sq930x: reg_r 001f failed -110 [ 798.559022][ T5875] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 799.064221][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.094601][T14442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.095137][T14442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.228603][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.778759][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.974853][ T5874] gspca_sonixj: reg_w err -110 [ 799.974948][ T5874] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 800.180880][ C0] vkms_vblank_simulate: vblank timer overrun [ 801.418849][ C0] vkms_vblank_simulate: vblank timer overrun [ 801.512119][ C0] vkms_vblank_simulate: vblank timer overrun [ 801.519284][T10802] usb 3-1: USB disconnect, device number 52 [ 801.674424][ T5874] usb 5-1: USB disconnect, device number 56 [ 802.020577][T13981] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 802.035454][T14472] FAULT_INJECTION: forcing a failure. [ 802.035454][T14472] name failslab, interval 1, probability 0, space 0, times 0 [ 802.035486][T14472] CPU: 1 UID: 0 PID: 14472 Comm: syz.4.2821 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 802.035510][T14472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 802.035520][T14472] Call Trace: [ 802.035528][T14472] [ 802.035537][T14472] dump_stack_lvl+0x189/0x250 [ 802.035569][T14472] ? __pfx____ratelimit+0x10/0x10 [ 802.035593][T14472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 802.035620][T14472] ? __pfx__printk+0x10/0x10 [ 802.035648][T14472] ? __pfx___might_resched+0x10/0x10 [ 802.035673][T14472] should_fail_ex+0x46c/0x600 [ 802.035706][T14472] ? io_submit_one+0x11f/0x1310 [ 802.035725][T14472] should_failslab+0xa8/0x100 [ 802.035750][T14472] ? io_submit_one+0x11f/0x1310 [ 802.035766][T14472] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 802.035797][T14472] io_submit_one+0x11f/0x1310 [ 802.035834][T14472] ? __pfx_io_submit_one+0x10/0x10 [ 802.035855][T14472] ? __might_fault+0xb0/0x130 [ 802.035894][T14472] ? __might_fault+0xb0/0x130 [ 802.035924][T14472] __se_sys_io_submit+0x185/0x2f0 [ 802.035951][T14472] ? __pfx___se_sys_io_submit+0x10/0x10 [ 802.035971][T14472] ? ksys_write+0x230/0x260 [ 802.036003][T14472] ? do_syscall_64+0xbe/0xfa0 [ 802.036028][T14472] do_syscall_64+0xfa/0xfa0 [ 802.036050][T14472] ? lockdep_hardirqs_on+0x9c/0x150 [ 802.036072][T14472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.036092][T14472] ? clear_bhb_loop+0x60/0xb0 [ 802.036123][T14472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.036142][T14472] RIP: 0033:0x7f3cf791efc9 [ 802.036157][T14472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 802.036174][T14472] RSP: 002b:00007f3cf5b7e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 802.036194][T14472] RAX: ffffffffffffffda RBX: 00007f3cf7b75fa0 RCX: 00007f3cf791efc9 [ 802.036209][T14472] RDX: 0000200000004540 RSI: 0000000000000001 RDI: 00007f3cf86af000 [ 802.036223][T14472] RBP: 00007f3cf5b7e090 R08: 0000000000000000 R09: 0000000000000000 [ 802.036236][T14472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.036248][T14472] R13: 00007f3cf7b76038 R14: 00007f3cf7b75fa0 R15: 00007fffb51012b8 [ 802.036282][T14472] [ 802.040144][T14467] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 802.040159][T14467] PKCS7: Only support pkcs7_signedData type [ 802.175206][T13981] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 802.175236][T13981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.350410][T13981] usb 4-1: config 0 descriptor?? [ 802.562183][T13981] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 802.633916][T14485] FAULT_INJECTION: forcing a failure. [ 802.633916][T14485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.633947][T14485] CPU: 0 UID: 0 PID: 14485 Comm: syz.5.2827 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 802.633969][T14485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 802.633981][T14485] Call Trace: [ 802.633989][T14485] [ 802.633998][T14485] dump_stack_lvl+0x189/0x250 [ 802.634029][T14485] ? __pfx____ratelimit+0x10/0x10 [ 802.634063][T14485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 802.634090][T14485] ? __pfx__printk+0x10/0x10 [ 802.634128][T14485] should_fail_ex+0x46c/0x600 [ 802.634159][T14485] _copy_to_user+0x31/0xb0 [ 802.634181][T14485] simple_read_from_buffer+0xe1/0x170 [ 802.634210][T14485] proc_fail_nth_read+0x1b6/0x220 [ 802.634233][T14485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 802.634258][T14485] ? rw_verify_area+0x2ac/0x4e0 [ 802.634284][T14485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 802.634306][T14485] vfs_read+0x206/0xa30 [ 802.634335][T14485] ? __pfx_vfs_read+0x10/0x10 [ 802.634353][T14485] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 802.634383][T14485] ? mutex_lock_nested+0x154/0x1d0 [ 802.634401][T14485] ? fdget_pos+0x253/0x320 [ 802.634435][T14485] ksys_read+0x14b/0x260 [ 802.634461][T14485] ? __pfx_ksys_read+0x10/0x10 [ 802.634487][T14485] ? do_syscall_64+0xbe/0xfa0 [ 802.634515][T14485] do_syscall_64+0xfa/0xfa0 [ 802.634536][T14485] ? lockdep_hardirqs_on+0x9c/0x150 [ 802.634559][T14485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.634579][T14485] ? clear_bhb_loop+0x60/0xb0 [ 802.634602][T14485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.634620][T14485] RIP: 0033:0x7f0599bdd9dc [ 802.634638][T14485] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 802.634654][T14485] RSP: 002b:00007f0597e46030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 802.634675][T14485] RAX: ffffffffffffffda RBX: 00007f0599e35fa0 RCX: 00007f0599bdd9dc [ 802.634690][T14485] RDX: 000000000000000f RSI: 00007f0597e460a0 RDI: 0000000000000005 [ 802.634703][T14485] RBP: 00007f0597e46090 R08: 0000000000000000 R09: 0000000000000000 [ 802.634715][T14485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.634727][T14485] R13: 00007f0599e36038 R14: 00007f0599e35fa0 R15: 00007fff9b7f74d8 [ 802.634761][T14485] [ 803.604659][ T5885] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 803.616465][T10802] IPVS: starting estimator thread 0... [ 803.710666][T14498] IPVS: using max 13 ests per chain, 31200 per kthread [ 803.761255][ T5885] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 803.761287][ T5885] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 803.761314][ T5885] usb 6-1: config 1 interface 0 has no altsetting 0 [ 803.771071][ T5885] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 803.771249][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.771272][ T5885] usb 6-1: Product: syz [ 803.771341][ T5885] usb 6-1: Manufacturer: syz [ 803.771357][ T5885] usb 6-1: SerialNumber: syz [ 803.800011][T14489] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 803.800252][T14489] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 803.892320][ C0] vkms_vblank_simulate: vblank timer overrun [ 804.284865][ C0] vkms_vblank_simulate: vblank timer overrun [ 804.496459][T14509] binder: 14501:14509 ioctl 4018620d 0 returned -22 [ 806.111385][ C0] vkms_vblank_simulate: vblank timer overrun [ 806.183738][ C0] vkms_vblank_simulate: vblank timer overrun [ 806.321835][T13981] [drm:udl_init] *ERROR* Selecting channel failed [ 806.385596][ T5885] rtl8150 6-1:1.0: couldn't reset the device [ 806.385821][ T5885] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 806.437204][T13981] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 806.437230][T13981] [drm] Initialized udl on minor 2 [ 806.453549][T13981] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 806.453877][T13981] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 806.495591][T14520] autofs4:pid:14520:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 806.537150][ T5875] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 806.547253][T13981] usb 4-1: USB disconnect, device number 55 [ 806.570700][ T5875] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 806.572082][ T5875] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 806.912905][T14528] Bluetooth: MGMT ver 1.23 [ 807.080293][T14532] FAULT_INJECTION: forcing a failure. [ 807.080293][T14532] name failslab, interval 1, probability 0, space 0, times 0 [ 807.080317][T14532] CPU: 1 UID: 0 PID: 14532 Comm: syz.4.2842 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 807.080330][T14532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 807.080337][T14532] Call Trace: [ 807.080342][T14532] [ 807.080347][T14532] dump_stack_lvl+0x189/0x250 [ 807.080367][T14532] ? __pfx____ratelimit+0x10/0x10 [ 807.080382][T14532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.080398][T14532] ? __pfx__printk+0x10/0x10 [ 807.080415][T14532] ? __pfx___might_resched+0x10/0x10 [ 807.080434][T14532] ? fs_reclaim_acquire+0x7d/0x100 [ 807.080462][T14532] should_fail_ex+0x46c/0x600 [ 807.080491][T14532] should_failslab+0xa8/0x100 [ 807.080519][T14532] __kmalloc_cache_noprof+0x6f/0x6c0 [ 807.080544][T14532] ? tcf_block_get_ext+0x992/0x1860 [ 807.080569][T14532] tcf_block_get_ext+0x992/0x1860 [ 807.080587][T14532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.080619][T14532] ? __pfx_drr_init_qdisc+0x10/0x10 [ 807.080639][T14532] tcf_block_get+0x67/0xa0 [ 807.080657][T14532] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 807.080679][T14532] drr_init_qdisc+0x2e/0xd0 [ 807.080701][T14532] qdisc_create+0x7ac/0xea0 [ 807.080743][T14532] tc_modify_qdisc+0x1538/0x20e0 [ 807.080767][T14532] ? __lock_acquire+0xab9/0xd20 [ 807.080807][T14532] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 807.080862][T14532] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 807.080886][T14532] rtnetlink_rcv_msg+0x77c/0xb70 [ 807.080903][T14532] ? __lock_acquire+0xab9/0xd20 [ 807.080928][T14532] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 807.080945][T14532] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 807.080981][T14532] netlink_rcv_skb+0x208/0x470 [ 807.080999][T14532] ? __lock_acquire+0xab9/0xd20 [ 807.081022][T14532] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 807.081043][T14532] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 807.081075][T14532] ? netlink_deliver_tap+0x2e/0x1b0 [ 807.081098][T14532] netlink_unicast+0x846/0xa10 [ 807.081120][T14532] ? __pfx_netlink_unicast+0x10/0x10 [ 807.081137][T14532] ? netlink_sendmsg+0x642/0xb30 [ 807.081147][T14532] ? skb_put+0x11b/0x210 [ 807.081160][T14532] netlink_sendmsg+0x805/0xb30 [ 807.081177][T14532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.081192][T14532] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 807.081207][T14532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.081219][T14532] __sock_sendmsg+0x21c/0x270 [ 807.081236][T14532] ____sys_sendmsg+0x534/0x820 [ 807.081252][T14532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.081269][T14532] ? import_iovec+0x74/0xa0 [ 807.081283][T14532] ___sys_sendmsg+0x21f/0x2a0 [ 807.081297][T14532] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.081329][T14532] ? __fget_files+0x2a/0x420 [ 807.081344][T14532] ? __fget_files+0x3a6/0x420 [ 807.081364][T14532] __sys_sendmmsg+0x22d/0x430 [ 807.081380][T14532] ? __pfx___sys_sendmmsg+0x10/0x10 [ 807.081398][T14532] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 807.081419][T14532] ? ksys_write+0x230/0x260 [ 807.081434][T14532] ? __pfx_ksys_write+0x10/0x10 [ 807.081449][T14532] __x64_sys_sendmmsg+0xa0/0xc0 [ 807.081463][T14532] do_syscall_64+0xfa/0xfa0 [ 807.081477][T14532] ? lockdep_hardirqs_on+0x9c/0x150 [ 807.081491][T14532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.081501][T14532] ? clear_bhb_loop+0x60/0xb0 [ 807.081514][T14532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.081524][T14532] RIP: 0033:0x7f3cf791efc9 [ 807.081535][T14532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.081545][T14532] RSP: 002b:00007f3cf5b7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 807.081557][T14532] RAX: ffffffffffffffda RBX: 00007f3cf7b75fa0 RCX: 00007f3cf791efc9 [ 807.081566][T14532] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 807.081573][T14532] RBP: 00007f3cf5b7e090 R08: 0000000000000000 R09: 0000000000000000 [ 807.081580][T14532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.081586][T14532] R13: 00007f3cf7b76038 R14: 00007f3cf7b75fa0 R15: 00007fffb51012b8 [ 807.081604][T14532] [ 807.266652][ T5875] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 807.269126][T13981] usb 6-1: USB disconnect, device number 41 [ 807.622333][ T5875] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 807.622375][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.623418][ T5875] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 807.623434][ T5875] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 807.623446][ T5875] usb 4-1: Manufacturer: syz [ 807.626561][ T5875] usb 4-1: config 0 descriptor?? [ 807.898648][T14541] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 807.900571][ T5875] rc_core: IR keymap rc-hauppauge not found [ 807.900590][ T5875] Registered IR keymap rc-empty [ 807.933676][ T5875] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 807.954417][ T5875] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30 [ 807.959006][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 808.030999][T10802] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 808.058749][T14528] batman_adv: batadv0: Adding interface: gretap1 [ 808.058765][T14528] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.058861][T14528] batman_adv: batadv0: Interface activated: gretap1 [ 808.193682][T10802] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.193709][T10802] usb 5-1: config 0 has no interfaces? [ 808.193739][T10802] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 808.193764][T10802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.233298][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'. [ 808.247982][T10802] usb 5-1: config 0 descriptor?? [ 808.297984][ T5875] usb 4-1: USB disconnect, device number 56 [ 808.476936][T14548] netlink: 'syz.1.2850': attribute type 16 has an invalid length. [ 808.476957][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2850'. [ 808.676543][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.244391][T14561] erofs (device nbd2): cannot find valid erofs superblock [ 811.645202][T10802] usb 5-1: USB disconnect, device number 57 [ 812.010986][ T5860] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 812.022712][T14578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2859'. [ 812.162189][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 812.309801][ T5860] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.311263][ T5860] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 812.311291][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.352733][ T5860] usb 4-1: config 0 descriptor?? [ 812.358326][ T5860] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 812.597523][T14571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.597967][T14571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.867962][T14571] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2855'. [ 813.133010][ T5860] gspca_vc032x: reg_w err -110 [ 813.133108][ T5860] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 813.926218][ T1177] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.926254][ T1177] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.427073][T11047] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 814.439334][T11047] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 814.441158][T11047] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 814.442345][T11047] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 814.446986][T11047] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 815.119137][ T5860] usb 4-1: USB disconnect, device number 57 [ 815.275418][ T37] audit: type=1326 audit(1762211599.703:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14606 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 815.275474][ T37] audit: type=1326 audit(1762211599.703:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14606 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 815.275516][ T37] audit: type=1326 audit(1762211599.703:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14606 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 815.275560][ T37] audit: type=1326 audit(1762211599.703:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14606 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 815.275604][ T37] audit: type=1326 audit(1762211599.703:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14606 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 815.275647][ T37] audit: type=1326 audit(1762211599.703:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14606 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 815.275688][ T37] audit: type=1326 audit(1762211599.703:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14606 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 815.275729][ T37] audit: type=1326 audit(1762211599.703:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14606 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 815.275771][ T37] audit: type=1326 audit(1762211599.703:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14606 comm="syz.1.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 815.457173][ T1177] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.457208][ T1177] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.631708][ T5875] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 815.712194][T14621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2869'. [ 815.812894][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.812923][ T5875] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 815.812964][ T5875] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 815.812990][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.819908][ T5875] usb 5-1: config 0 descriptor?? [ 815.945441][ T1177] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.945478][ T1177] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.991022][ T5860] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 816.143462][ T5860] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 816.143494][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.154341][ T5860] usb 4-1: config 0 descriptor?? [ 816.265302][ T1177] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.265338][ T1177] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.551893][ T5806] Bluetooth: hci0: command tx timeout [ 816.761962][ T5860] ath6kl: Failed to submit usb control message: -71 [ 816.762014][ T5860] ath6kl: unable to send the bmi data to the device: -71 [ 816.762029][ T5860] ath6kl: Unable to send get target info: -71 [ 816.764096][ T5860] ath6kl: Failed to init ath6kl core: -71 [ 816.765892][ T5860] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 816.824581][ T5860] usb 4-1: USB disconnect, device number 58 [ 816.962002][T14641] overlay: Unknown parameter 'fsuuid' [ 817.091619][ T1177] bridge_slave_1: left allmulticast mode [ 817.093225][ T1177] bridge_slave_1: left promiscuous mode [ 817.094164][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.175534][ T37] audit: type=1800 audit(1762211601.623:378): pid=14646 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2875" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="overlay" ino=52339 res=0 errno=0 [ 817.210122][ T1177] bridge_slave_0: left allmulticast mode [ 817.210407][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.511048][ T5860] usb 5-1: USB disconnect, device number 58 [ 818.630628][ T5806] Bluetooth: hci0: command tx timeout [ 819.346506][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.659616][ C1] vkms_vblank_simulate: vblank timer overrun [ 820.435568][ C1] vkms_vblank_simulate: vblank timer overrun [ 820.569282][T14671] netlink: 'syz.4.2883': attribute type 16 has an invalid length. [ 820.569303][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2883'. [ 820.688621][ C1] vkms_vblank_simulate: vblank timer overrun [ 820.713004][ T5806] Bluetooth: hci0: command tx timeout [ 820.921279][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.982288][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 821.003853][ T1177] bond0 (unregistering): Released all slaves [ 821.467829][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.502511][ T5173] udevd[5173]: worker [12339] terminated by signal 33 (Unknown signal 33) [ 822.557906][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.685590][ T5173] udevd[5173]: worker [12404] terminated by signal 33 (Unknown signal 33) [ 822.709049][ T5173] udevd[5173]: worker [12593] terminated by signal 33 (Unknown signal 33) [ 822.728726][ T5173] udevd[5173]: worker [12405] terminated by signal 33 (Unknown signal 33) [ 822.771016][ T5173] udevd[5173]: worker [13457] terminated by signal 33 (Unknown signal 33) [ 822.791977][ T5806] Bluetooth: hci0: command tx timeout [ 822.869211][ T37] audit: type=1326 audit(1762211607.313:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14683 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 822.869355][ T37] audit: type=1326 audit(1762211607.313:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14683 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 822.869862][ T37] audit: type=1326 audit(1762211607.313:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14683 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 822.869986][ T37] audit: type=1326 audit(1762211607.313:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14683 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 822.870155][ T37] audit: type=1326 audit(1762211607.313:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14683 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 822.870400][ T37] audit: type=1326 audit(1762211607.313:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14683 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 822.873167][ T37] audit: type=1326 audit(1762211607.323:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14683 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 822.873216][ T37] audit: type=1326 audit(1762211607.323:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14683 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 822.873259][ T37] audit: type=1326 audit(1762211607.323:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14683 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 822.873300][ T37] audit: type=1326 audit(1762211607.323:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14683 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb9c9efc9 code=0x7ffc0000 [ 823.175565][ C1] vkms_vblank_simulate: vblank timer overrun [ 823.312028][T14598] chnl_net:caif_netlink_parms(): no params data found [ 825.134768][T11047] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 825.151862][T11047] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 825.156189][T11047] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 825.157374][T11047] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 825.183200][T11047] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 825.871947][T14721] netlink: 'syz.1.2897': attribute type 16 has an invalid length. [ 825.871969][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2897'. [ 826.232957][T14598] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.237497][T14598] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.237713][T14598] bridge_slave_0: entered allmulticast mode [ 826.306237][T14598] bridge_slave_0: entered promiscuous mode [ 826.454080][ T1177] hsr_slave_0: left promiscuous mode [ 826.490679][ T1177] hsr_slave_1: left promiscuous mode [ 826.491532][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.491549][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.521461][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.521480][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.581240][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 826.637230][ T1177] veth1_macvtap: left promiscuous mode [ 826.637298][ T1177] veth0_macvtap: left promiscuous mode [ 826.637548][ T1177] veth1_vlan: left promiscuous mode [ 826.637651][ T1177] veth0_vlan: left promiscuous mode [ 826.730953][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 826.734547][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 826.734572][ T9] usb 4-1: config 179 has no interface number 0 [ 826.734624][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 826.734653][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 826.734682][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 826.734710][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 826.734728][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 826.734753][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 826.734765][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.773330][T14731] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 827.286097][ T5806] Bluetooth: hci3: command tx timeout [ 827.848349][T13980] usb 4-1: USB disconnect, device number 59 [ 827.848450][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 827.848516][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 829.387628][ T5806] Bluetooth: hci3: command tx timeout [ 830.170587][T13980] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 830.201311][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 830.340778][T13980] usb 5-1: Using ep0 maxpacket: 8 [ 830.343499][T13980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.343554][T13980] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 830.343580][T13980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.360265][T13980] usb 5-1: config 0 descriptor?? [ 830.377935][T13980] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 830.451838][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 830.584180][T14749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.584782][T14749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.790121][T14749] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2907'. [ 830.827389][T13980] gspca_vc032x: reg_w err -71 [ 830.827480][T13980] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 830.846443][T13980] usb 5-1: USB disconnect, device number 59 [ 831.430625][ T5806] Bluetooth: hci3: command tx timeout [ 831.549861][T14753] tmpfs: Unknown parameter '8ol' [ 831.556455][T14753] netlink: 'syz.4.2909': attribute type 4 has an invalid length. [ 831.556470][T14753] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2909'. [ 832.761649][T14598] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.761784][T14598] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.761945][T14598] bridge_slave_1: entered allmulticast mode [ 832.763922][T14598] bridge_slave_1: entered promiscuous mode [ 832.812154][T14753] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 833.510822][ T5806] Bluetooth: hci3: command tx timeout [ 833.624401][T14768] futex_wake_op: syz.3.2915 tries to shift op by 144; fix this program [ 833.826467][T14598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.992131][T14598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.304703][T14598] team0: Port device team_slave_0 added [ 834.309331][T14598] team0: Port device team_slave_1 added [ 834.506706][T14598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 834.506724][T14598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.506753][T14598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.520679][ T5885] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 834.571852][T14598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.571867][T14598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.571890][T14598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.710260][ T5885] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 834.710304][ T5885] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 834.710331][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.727988][ T5885] usb 4-1: config 0 descriptor?? [ 834.891277][T14598] hsr_slave_0: entered promiscuous mode [ 834.892268][T14598] hsr_slave_1: entered promiscuous mode [ 834.892966][T14598] debugfs: 'hsr0' already exists in 'hsr' [ 834.892981][T14598] Cannot create hsr debugfs directory [ 835.100035][T14788] fuse: Unknown parameter './file0' [ 835.139714][T14787] netlink: 'syz.1.2920': attribute type 1 has an invalid length. [ 835.813955][T14794] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 835.977841][T14795] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 835.977841][T14795] program syz.4.2921 not setting count and/or reply_len properly [ 836.484831][T14790] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 836.487164][T14790] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 836.583619][T14791] bond2: (slave gretap2): making interface the new active one [ 836.585849][T14791] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 836.643467][ T1177] IPVS: stop unused estimator thread 0... [ 837.307040][ T9] usb 4-1: USB disconnect, device number 60 [ 841.770006][ T2427] cec-vivid-000-vid-cap0: message 44 timed out [ 842.508882][T14834] FAULT_INJECTION: forcing a failure. [ 842.508882][T14834] name failslab, interval 1, probability 0, space 0, times 0 [ 842.508915][T14834] CPU: 0 UID: 0 PID: 14834 Comm: syz.4.2929 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 842.508938][T14834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 842.508949][T14834] Call Trace: [ 842.508958][T14834] [ 842.508966][T14834] dump_stack_lvl+0x189/0x250 [ 842.508997][T14834] ? __pfx____ratelimit+0x10/0x10 [ 842.509022][T14834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 842.509048][T14834] ? __pfx__printk+0x10/0x10 [ 842.509077][T14834] ? __pfx___might_resched+0x10/0x10 [ 842.509113][T14834] should_fail_ex+0x46c/0x600 [ 842.509144][T14834] should_failslab+0xa8/0x100 [ 842.509172][T14834] __kmalloc_noprof+0xcc/0x7d0 [ 842.509196][T14834] ? nft_obj_init+0x1e0/0x360 [ 842.509223][T14834] nft_obj_init+0x1e0/0x360 [ 842.509247][T14834] nf_tables_newobj+0xade/0x1c30 [ 842.509289][T14834] ? __pfx_nf_tables_newobj+0x10/0x10 [ 842.509323][T14834] ? __nla_parse+0x40/0x60 [ 842.509354][T14834] nfnetlink_rcv+0x11e0/0x2590 [ 842.509417][T14834] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 842.509498][T14834] ? netlink_deliver_tap+0x2e/0x1b0 [ 842.509539][T14834] netlink_unicast+0x846/0xa10 [ 842.509576][T14834] ? __pfx_netlink_unicast+0x10/0x10 [ 842.509604][T14834] ? netlink_sendmsg+0x642/0xb30 [ 842.509623][T14834] ? skb_put+0x11b/0x210 [ 842.509647][T14834] netlink_sendmsg+0x805/0xb30 [ 842.509666][T14834] ? is_bpf_text_address+0x26/0x2b0 [ 842.509702][T14834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.509731][T14834] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 842.509756][T14834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.509777][T14834] __sock_sendmsg+0x21c/0x270 [ 842.509806][T14834] ____sys_sendmsg+0x508/0x820 [ 842.509835][T14834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 842.509867][T14834] ? import_iovec+0x74/0xa0 [ 842.509892][T14834] ___sys_sendmsg+0x21f/0x2a0 [ 842.509917][T14834] ? __pfx____sys_sendmsg+0x10/0x10 [ 842.509977][T14834] ? __fget_files+0x2a/0x420 [ 842.510001][T14834] ? __fget_files+0x3a6/0x420 [ 842.510036][T14834] __x64_sys_sendmsg+0x1a1/0x260 [ 842.510062][T14834] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 842.510100][T14834] ? __pfx_ksys_write+0x10/0x10 [ 842.510128][T14834] ? do_syscall_64+0xbe/0xfa0 [ 842.510157][T14834] do_syscall_64+0xfa/0xfa0 [ 842.510179][T14834] ? lockdep_hardirqs_on+0x9c/0x150 [ 842.510204][T14834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.510223][T14834] ? clear_bhb_loop+0x60/0xb0 [ 842.510247][T14834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.510266][T14834] RIP: 0033:0x7f3cf791efc9 [ 842.510284][T14834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.510302][T14834] RSP: 002b:00007f3cf5b7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.510322][T14834] RAX: ffffffffffffffda RBX: 00007f3cf7b75fa0 RCX: 00007f3cf791efc9 [ 842.510337][T14834] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000006 [ 842.510349][T14834] RBP: 00007f3cf5b7e090 R08: 0000000000000000 R09: 0000000000000000 [ 842.510362][T14834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.510373][T14834] R13: 00007f3cf7b76038 R14: 00007f3cf7b75fa0 R15: 00007fffb51012b8 [ 842.510410][T14834] [ 843.361337][T14703] chnl_net:caif_netlink_parms(): no params data found [ 843.382210][T14848] FAULT_INJECTION: forcing a failure. [ 843.382210][T14848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.382240][T14848] CPU: 0 UID: 0 PID: 14848 Comm: syz.4.2934 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 843.382268][T14848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 843.382281][T14848] Call Trace: [ 843.382288][T14848] [ 843.382297][T14848] dump_stack_lvl+0x189/0x250 [ 843.382324][T14848] ? __pfx____ratelimit+0x10/0x10 [ 843.382347][T14848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 843.382369][T14848] ? __pfx__printk+0x10/0x10 [ 843.382398][T14848] should_fail_ex+0x46c/0x600 [ 843.382421][T14848] _copy_to_user+0x31/0xb0 [ 843.382439][T14848] simple_read_from_buffer+0xe1/0x170 [ 843.382463][T14848] proc_fail_nth_read+0x1b6/0x220 [ 843.382482][T14848] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 843.382500][T14848] ? rw_verify_area+0x2ac/0x4e0 [ 843.382516][T14848] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 843.382533][T14848] vfs_read+0x206/0xa30 [ 843.382557][T14848] ? __pfx_vfs_read+0x10/0x10 [ 843.382576][T14848] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 843.382601][T14848] ? mutex_lock_nested+0x154/0x1d0 [ 843.382616][T14848] ? fdget_pos+0x253/0x320 [ 843.382644][T14848] ksys_read+0x14b/0x260 [ 843.382666][T14848] ? __pfx_ksys_read+0x10/0x10 [ 843.382688][T14848] ? do_syscall_64+0xbe/0xfa0 [ 843.382711][T14848] do_syscall_64+0xfa/0xfa0 [ 843.382729][T14848] ? lockdep_hardirqs_on+0x9c/0x150 [ 843.382748][T14848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.382764][T14848] ? clear_bhb_loop+0x60/0xb0 [ 843.382784][T14848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.382801][T14848] RIP: 0033:0x7f3cf791d9dc [ 843.382816][T14848] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 843.382832][T14848] RSP: 002b:00007f3cf5b7e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 843.382851][T14848] RAX: ffffffffffffffda RBX: 00007f3cf7b75fa0 RCX: 00007f3cf791d9dc [ 843.382865][T14848] RDX: 000000000000000f RSI: 00007f3cf5b7e0a0 RDI: 0000000000000004 [ 843.382876][T14848] RBP: 00007f3cf5b7e090 R08: 0000000000000000 R09: 0000000000000000 [ 843.382886][T14848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.382897][T14848] R13: 00007f3cf7b76038 R14: 00007f3cf7b75fa0 R15: 00007fffb51012b8 [ 843.382925][T14848] [ 843.760631][T13981] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 843.920827][T13981] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 843.920874][T13981] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 843.920900][T13981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.927354][T13981] usb 4-1: config 0 descriptor?? [ 844.985634][ T1177] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.019975][T14867] FAULT_INJECTION: forcing a failure. [ 845.019975][T14867] name failslab, interval 1, probability 0, space 0, times 0 [ 845.020010][T14867] CPU: 1 UID: 0 PID: 14867 Comm: syz.4.2938 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 845.020033][T14867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 845.020045][T14867] Call Trace: [ 845.020054][T14867] [ 845.020063][T14867] dump_stack_lvl+0x189/0x250 [ 845.020093][T14867] ? __pfx____ratelimit+0x10/0x10 [ 845.020118][T14867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 845.020153][T14867] ? __pfx__printk+0x10/0x10 [ 845.020183][T14867] ? __pfx___might_resched+0x10/0x10 [ 845.020209][T14867] should_fail_ex+0x46c/0x600 [ 845.020240][T14867] should_failslab+0xa8/0x100 [ 845.020268][T14867] __kmalloc_cache_noprof+0x6f/0x6c0 [ 845.020295][T14867] ? snd_seq_oss_open+0xe3/0xea0 [ 845.020325][T14867] snd_seq_oss_open+0xe3/0xea0 [ 845.020361][T14867] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 845.020384][T14867] ? rtlock_slowlock_locked+0xd8/0x4010 [ 845.020415][T14867] ? __lock_acquire+0xab9/0xd20 [ 845.020446][T14867] ? do_raw_spin_lock+0x121/0x290 [ 845.020480][T14867] ? __lock_acquire+0xab9/0xd20 [ 845.020511][T14867] ? do_raw_spin_lock+0x121/0x290 [ 845.020544][T14867] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 845.020570][T14867] ? lockdep_hardirqs_on+0x9c/0x150 [ 845.020596][T14867] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 845.020621][T14867] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 845.020657][T14867] ? mutex_lock_nested+0x154/0x1d0 [ 845.020676][T14867] ? odev_open+0x5c/0xd0 [ 845.020704][T14867] odev_open+0x67/0xd0 [ 845.020729][T14867] chrdev_open+0x4cf/0x5e0 [ 845.020758][T14867] ? __pfx_chrdev_open+0x10/0x10 [ 845.020786][T14867] ? fsnotify_open_perm_and_set_mode+0x116/0x620 [ 845.020819][T14867] ? __pfx_chrdev_open+0x10/0x10 [ 845.020843][T14867] do_dentry_open+0x9b1/0x1350 [ 845.020876][T14867] vfs_open+0x3b/0x350 [ 845.020892][T14867] ? path_openat+0x2ed9/0x3840 [ 845.020917][T14867] path_openat+0x2ef1/0x3840 [ 845.020945][T14867] ? try_to_take_rt_mutex+0x840/0xb00 [ 845.020992][T14867] ? __pfx_path_openat+0x10/0x10 [ 845.021013][T14867] ? do_raw_spin_lock+0x121/0x290 [ 845.021044][T14867] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 845.021069][T14867] ? lockdep_hardirqs_on+0x9c/0x150 [ 845.021095][T14867] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 845.021133][T14867] do_filp_open+0x1fa/0x410 [ 845.021157][T14867] ? __pfx_do_filp_open+0x10/0x10 [ 845.021176][T14867] ? rt_mutex_slowunlock+0x493/0x8a0 [ 845.021223][T14867] ? alloc_fd+0x64f/0x6c0 [ 845.021261][T14867] do_sys_openat2+0x121/0x1c0 [ 845.021284][T14867] ? __pfx_do_sys_openat2+0x10/0x10 [ 845.021305][T14867] ? ksys_write+0x230/0x260 [ 845.021331][T14867] ? __pfx_ksys_write+0x10/0x10 [ 845.021359][T14867] __x64_sys_creat+0x8f/0xc0 [ 845.021384][T14867] do_syscall_64+0xfa/0xfa0 [ 845.021407][T14867] ? lockdep_hardirqs_on+0x9c/0x150 [ 845.021431][T14867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.021451][T14867] ? clear_bhb_loop+0x60/0xb0 [ 845.021475][T14867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.021494][T14867] RIP: 0033:0x7f3cf791efc9 [ 845.021512][T14867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 845.021528][T14867] RSP: 002b:00007f3cf5b5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 845.021549][T14867] RAX: ffffffffffffffda RBX: 00007f3cf7b76090 RCX: 00007f3cf791efc9 [ 845.021564][T14867] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000200000000100 [ 845.021577][T14867] RBP: 00007f3cf5b5d090 R08: 0000000000000000 R09: 0000000000000000 [ 845.021590][T14867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.021603][T14867] R13: 00007f3cf7b76128 R14: 00007f3cf7b76090 R15: 00007fffb51012b8 [ 845.021639][T14867] [ 845.043484][T14869] FAULT_INJECTION: forcing a failure. [ 845.043484][T14869] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 845.043514][T14869] CPU: 0 UID: 0 PID: 14869 Comm: syz.1.2939 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 845.043537][T14869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 845.043548][T14869] Call Trace: [ 845.043556][T14869] [ 845.043565][T14869] dump_stack_lvl+0x189/0x250 [ 845.043595][T14869] ? __pfx____ratelimit+0x10/0x10 [ 845.043619][T14869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 845.043645][T14869] ? __pfx__printk+0x10/0x10 [ 845.043669][T14869] ? fs_reclaim_acquire+0x7d/0x100 [ 845.043704][T14869] should_fail_ex+0x46c/0x600 [ 845.043734][T14869] prepare_alloc_pages+0x213/0x670 [ 845.043768][T14869] __alloc_frozen_pages_noprof+0x123/0x370 [ 845.043800][T14869] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 845.043835][T14869] ? policy_nodemask+0x27c/0x720 [ 845.043867][T14869] alloc_pages_mpol+0xd1/0x380 [ 845.043902][T14869] alloc_pages_noprof+0xcf/0x1e0 [ 845.043930][T14869] pte_alloc_one+0x23/0x330 [ 845.043953][T14869] ? __pte_alloc+0x1d/0x1a0 [ 845.043975][T14869] __pte_alloc+0x25/0x1a0 [ 845.043992][T14869] ? mm_alloc_pmd+0x246/0x410 [ 845.044020][T14869] mfill_atomic_poison+0x8e2/0x1350 [ 845.044060][T14869] ? __pfx_mfill_atomic_poison+0x10/0x10 [ 845.044100][T14869] userfaultfd_ioctl+0x2549/0x5050 [ 845.044130][T14869] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 845.044156][T14869] ? security_file_ioctl+0xcb/0x2d0 [ 845.044174][T14869] ? __se_sys_ioctl+0x47/0x170 [ 845.044191][T14869] ? do_syscall_64+0xfa/0xfa0 [ 845.044212][T14869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.044238][T14869] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 845.044296][T14869] ? kasan_quarantine_put+0xdd/0x220 [ 845.044317][T14869] ? lockdep_hardirqs_on+0x9c/0x150 [ 845.044350][T14869] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 845.044382][T14869] ? do_vfs_ioctl+0xbeb/0x1440 [ 845.044400][T14869] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 845.044428][T14869] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 845.044447][T14869] ? smack_log+0xef/0x3f0 [ 845.044472][T14869] ? __pfx_smack_log+0x10/0x10 [ 845.044495][T14869] ? lockdep_hardirqs_on+0x9c/0x150 [ 845.044516][T14869] ? smk_access+0x14c/0x4e0 [ 845.044545][T14869] ? smk_tskacc+0x2fc/0x370 [ 845.044574][T14869] ? smack_file_ioctl+0x2ac/0x340 [ 845.044602][T14869] ? __pfx_smack_file_ioctl+0x10/0x10 [ 845.044638][T14869] ? __fget_files+0x3a6/0x420 [ 845.044661][T14869] ? __fget_files+0x2a/0x420 [ 845.044688][T14869] ? bpf_lsm_file_ioctl+0x9/0x20 [ 845.044706][T14869] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 845.044731][T14869] __se_sys_ioctl+0xff/0x170 [ 845.044755][T14869] do_syscall_64+0xfa/0xfa0 [ 845.044777][T14869] ? lockdep_hardirqs_on+0x9c/0x150 [ 845.044799][T14869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.044817][T14869] ? clear_bhb_loop+0x60/0xb0 [ 845.044841][T14869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.044859][T14869] RIP: 0033:0x7effb9c9efc9 [ 845.044880][T14869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 845.044896][T14869] RSP: 002b:00007effb7efe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 845.044916][T14869] RAX: ffffffffffffffda RBX: 00007effb9ef5fa0 RCX: 00007effb9c9efc9 [ 845.044931][T14869] RDX: 0000200000000080 RSI: 00000000c020aa08 RDI: 0000000000000003 [ 845.044944][T14869] RBP: 00007effb7efe090 R08: 0000000000000000 R09: 0000000000000000 [ 845.044956][T14869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.044968][T14869] R13: 00007effb9ef6038 R14: 00007effb9ef5fa0 R15: 00007fff951b0338 [ 845.045001][T14869] [ 845.355764][T14873] fuse: Unknown parameter 'ÿ00000000000000000003' [ 845.427849][T14871] netlink: 'syz.1.2940': attribute type 4 has an invalid length. [ 845.994467][ T1177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.370932][ T5885] usb 4-1: USB disconnect, device number 61 [ 846.572367][ T1177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.640811][T14895] loop2: detected capacity change from 0 to 7 [ 846.695165][T14895] Dev loop2: unable to read RDB block 7 [ 846.695212][T14895] loop2: unable to read partition table [ 846.695517][T14895] loop2: partition table beyond EOD, truncated [ 846.695536][T14895] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 848.260439][T14909] overlayfs: failed to resolve './file1': -2 [ 848.510605][ T1177] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.551813][T14703] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.551947][T14703] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.552176][T14703] bridge_slave_0: entered allmulticast mode [ 848.559598][T14703] bridge_slave_0: entered promiscuous mode [ 848.610136][T14703] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.618410][T14703] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.618658][T14703] bridge_slave_1: entered allmulticast mode [ 848.635184][T14703] bridge_slave_1: entered promiscuous mode [ 848.790729][T13981] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 848.815009][T14598] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 848.872188][T14703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.880202][T14598] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 848.939010][T14703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.940065][T14598] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 848.963378][T13981] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 848.963442][T13981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.964950][T13981] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 848.964979][T13981] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 848.965002][T13981] usb 4-1: Manufacturer: syz [ 848.974346][T13981] usb 4-1: config 0 descriptor?? [ 849.080713][T13981] rc_core: IR keymap rc-hauppauge not found [ 849.080733][T13981] Registered IR keymap rc-empty [ 849.083251][T13981] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 849.086339][T13981] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input31 [ 849.307384][T14598] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 849.499034][T13981] usb 4-1: USB disconnect, device number 62 [ 849.550047][T14703] team0: Port device team_slave_0 added [ 849.567313][T14703] team0: Port device team_slave_1 added [ 851.012422][T14703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.012440][T14703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.012466][T14703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.017434][T14703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.017448][T14703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.017474][T14703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.304359][ T1177] bridge_slave_1: left allmulticast mode [ 851.304388][ T1177] bridge_slave_1: left promiscuous mode [ 851.304623][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.392046][ T1177] bridge_slave_0: left allmulticast mode [ 851.392065][ T1177] bridge_slave_0: left promiscuous mode [ 851.392207][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.487611][T14955] netlink: 'syz.4.2960': attribute type 2 has an invalid length. [ 851.487624][T14955] netlink: 'syz.4.2960': attribute type 1 has an invalid length. [ 851.487632][T14955] netlink: 'syz.4.2960': attribute type 1 has an invalid length. [ 851.487639][T14955] netlink: 'syz.4.2960': attribute type 1 has an invalid length. [ 851.755647][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2963'. [ 852.595505][T14969] FAULT_INJECTION: forcing a failure. [ 852.595505][T14969] name failslab, interval 1, probability 0, space 0, times 0 [ 852.595593][T14969] CPU: 0 UID: 0 PID: 14969 Comm: syz.3.2965 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 852.595617][T14969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 852.595629][T14969] Call Trace: [ 852.595638][T14969] [ 852.595647][T14969] dump_stack_lvl+0x189/0x250 [ 852.595678][T14969] ? __pfx____ratelimit+0x10/0x10 [ 852.595702][T14969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 852.595728][T14969] ? __pfx__printk+0x10/0x10 [ 852.595753][T14969] ? fs_reclaim_acquire+0x7d/0x100 [ 852.595789][T14969] should_fail_ex+0x46c/0x600 [ 852.595820][T14969] should_failslab+0xa8/0x100 [ 852.595848][T14969] __kmalloc_noprof+0xcc/0x7d0 [ 852.595870][T14969] ? genl_family_rcv_msg_attrs_parse+0x88/0x2a0 [ 852.595894][T14969] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 852.595926][T14969] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 852.595959][T14969] genl_family_rcv_msg_doit+0xb8/0x300 [ 852.595991][T14969] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 852.596018][T14969] ? rcu_is_watching+0x15/0xb0 [ 852.596037][T14969] ? cap_capable+0x11f/0x460 [ 852.596054][T14969] ? __pfx_bpf_lsm_capable+0x10/0x10 [ 852.596076][T14969] ? safesetid_security_capable+0xa9/0x1a0 [ 852.596099][T14969] ? bpf_lsm_capable+0x9/0x20 [ 852.596117][T14969] ? security_capable+0x7e/0x2e0 [ 852.596147][T14969] genl_rcv_msg+0x60e/0x790 [ 852.596177][T14969] ? __pfx_genl_rcv_msg+0x10/0x10 [ 852.596200][T14969] ? __pfx_netlbl_unlabel_accept+0x10/0x10 [ 852.596224][T14969] ? kasan_check_range+0x79/0x2c0 [ 852.596262][T14969] netlink_rcv_skb+0x208/0x470 [ 852.596283][T14969] ? __pfx_genl_rcv_msg+0x10/0x10 [ 852.596309][T14969] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 852.596351][T14969] ? __pfx_genl_rcv+0x10/0x10 [ 852.596383][T14969] genl_rcv+0x28/0x40 [ 852.596405][T14969] netlink_unicast+0x846/0xa10 [ 852.596442][T14969] ? __pfx_netlink_unicast+0x10/0x10 [ 852.596465][T14969] ? security_netlink_send+0x9e/0x290 [ 852.596493][T14969] ? security_netlink_send+0x232/0x290 [ 852.596523][T14969] netlink_sendmsg+0x805/0xb30 [ 852.596541][T14969] ? is_bpf_text_address+0x26/0x2b0 [ 852.596575][T14969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.596602][T14969] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 852.596625][T14969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.596645][T14969] __sock_sendmsg+0x21c/0x270 [ 852.596673][T14969] ____sys_sendmsg+0x508/0x820 [ 852.596702][T14969] ? __pfx_____sys_sendmsg+0x10/0x10 [ 852.596734][T14969] ? import_iovec+0x74/0xa0 [ 852.596756][T14969] ___sys_sendmsg+0x21f/0x2a0 [ 852.596780][T14969] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.596835][T14969] ? __fget_files+0x2a/0x420 [ 852.596858][T14969] ? __fget_files+0x3a6/0x420 [ 852.596892][T14969] __x64_sys_sendmsg+0x1a1/0x260 [ 852.596916][T14969] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 852.596950][T14969] ? __pfx_ksys_write+0x10/0x10 [ 852.596977][T14969] ? do_syscall_64+0xbe/0xfa0 [ 852.597004][T14969] do_syscall_64+0xfa/0xfa0 [ 852.597029][T14969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.597047][T14969] ? asm_sysvec_call_function_single+0x1a/0x20 [ 852.597067][T14969] ? clear_bhb_loop+0x60/0xb0 [ 852.597089][T14969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.597106][T14969] RIP: 0033:0x7fa4c76aefc9 [ 852.597123][T14969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 852.597139][T14969] RSP: 002b:00007fa4c58f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.597159][T14969] RAX: ffffffffffffffda RBX: 00007fa4c7906090 RCX: 00007fa4c76aefc9 [ 852.597174][T14969] RDX: 0000000020000000 RSI: 0000200000001d80 RDI: 0000000000000007 [ 852.597188][T14969] RBP: 00007fa4c58f5090 R08: 0000000000000000 R09: 0000000000000000 [ 852.597201][T14969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.597213][T14969] R13: 00007fa4c7906128 R14: 00007fa4c7906090 R15: 00007ffd78fc5fe8 [ 852.597247][T14969] [ 855.662666][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.721255][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.743981][ T1177] bond0 (unregistering): Released all slaves [ 856.024354][T14961] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 856.033690][T14976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2967'. [ 856.063211][T14703] hsr_slave_0: entered promiscuous mode [ 856.064532][T14703] hsr_slave_1: entered promiscuous mode [ 856.065488][T14703] debugfs: 'hsr0' already exists in 'hsr' [ 856.065511][T14703] Cannot create hsr debugfs directory [ 856.423640][T14984] input: syz1 as /devices/virtual/input/input32 [ 857.978200][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.909595][ C1] vkms_vblank_simulate: vblank timer overrun [ 859.048517][ C1] vkms_vblank_simulate: vblank timer overrun [ 859.272151][ T1177] hsr_slave_0: left promiscuous mode [ 859.313369][ T1177] hsr_slave_1: left promiscuous mode [ 859.314314][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.314339][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.322329][T15037] netlink: 'syz.3.2984': attribute type 6 has an invalid length. [ 859.407931][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 859.407958][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.566576][ T1177] veth1_macvtap: left promiscuous mode [ 859.566688][ T1177] veth0_macvtap: left promiscuous mode [ 859.566964][ T1177] veth1_vlan: left promiscuous mode [ 859.567155][ T1177] veth0_vlan: left promiscuous mode [ 860.440349][ C1] vkms_vblank_simulate: vblank timer overrun [ 860.928689][ C1] vkms_vblank_simulate: vblank timer overrun [ 860.964343][ C1] vkms_vblank_simulate: vblank timer overrun [ 862.601248][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 862.811582][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 864.957909][T15034] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 864.965670][T15061] netlink: 'syz.3.2990': attribute type 298 has an invalid length. [ 865.189125][T15079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2995'. [ 865.194199][T14598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.299435][ C1] vkms_vblank_simulate: vblank timer overrun [ 865.333065][T14598] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.521927][ T7144] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.522079][ T7144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.558875][ T1816] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.566599][ T1816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.630382][T14703] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 866.094382][T15091] NILFS (nullb0): couldn't find nilfs on the device [ 866.937621][T14703] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 867.305028][ C1] vkms_vblank_simulate: vblank timer overrun [ 868.781730][T15097] openvswitch: netlink: Message has 536 unknown bytes. [ 868.781771][T15097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.790952][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 868.790999][ T37] audit: type=1326 audit(1762211653.233:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15094 comm="syz.3.3000" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4c76aefc9 code=0x0 [ 869.140312][ C1] vkms_vblank_simulate: vblank timer overrun [ 869.219667][T14703] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 869.287621][T14703] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 869.940302][T15107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 870.076445][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.087462][T15113] netlink: 'syz.1.3003': attribute type 21 has an invalid length. [ 870.087483][T15113] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3003'. [ 870.112505][T15113] netlink: 'syz.1.3003': attribute type 5 has an invalid length. [ 870.112526][T15113] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3003'. [ 870.117592][T15111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3003'. [ 870.309078][T14703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.428424][T14703] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.117091][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.121300][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.208637][ T7144] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.208784][ T7144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.835481][T15146] FAULT_INJECTION: forcing a failure. [ 871.835481][T15146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.835538][T15146] CPU: 0 UID: 0 PID: 15146 Comm: syz.4.3009 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 871.835562][T15146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 871.835574][T15146] Call Trace: [ 871.835583][T15146] [ 871.835593][T15146] dump_stack_lvl+0x189/0x250 [ 871.835624][T15146] ? __pfx____ratelimit+0x10/0x10 [ 871.835649][T15146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 871.835675][T15146] ? __pfx__printk+0x10/0x10 [ 871.835713][T15146] should_fail_ex+0x46c/0x600 [ 871.835744][T15146] strncpy_from_user+0x36/0x290 [ 871.835773][T15146] getname_flags+0xf3/0x540 [ 871.835799][T15146] ? _copy_from_user+0x94/0xb0 [ 871.835823][T15146] user_path_at+0x24/0x60 [ 871.835844][T15146] __se_sys_mount+0x2d4/0x410 [ 871.835882][T15146] ? __pfx___se_sys_mount+0x10/0x10 [ 871.835908][T15146] ? __x64_sys_mount+0x2f/0xc0 [ 871.835934][T15146] ? __x64_sys_mount+0x20/0xc0 [ 871.835961][T15146] do_syscall_64+0xfa/0xfa0 [ 871.835986][T15146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.836004][T15146] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 871.836023][T15146] ? clear_bhb_loop+0x60/0xb0 [ 871.836047][T15146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.836066][T15146] RIP: 0033:0x7f3cf791efc9 [ 871.836084][T15146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 871.836102][T15146] RSP: 002b:00007f3cf5b3c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 871.836123][T15146] RAX: ffffffffffffffda RBX: 00007f3cf7b76180 RCX: 00007f3cf791efc9 [ 871.836138][T15146] RDX: 0000200000000400 RSI: 0000200000000100 RDI: 0000200000000040 [ 871.836152][T15146] RBP: 00007f3cf5b3c090 R08: 0000000000000000 R09: 0000000000000000 [ 871.836165][T15146] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 871.836178][T15146] R13: 00007f3cf7b76218 R14: 00007f3cf7b76180 R15: 00007fffb51012b8 [ 871.836212][T15146] [ 873.041171][ T5860] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 873.191063][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 873.193464][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 873.193512][ T5860] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 873.193537][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.200048][ T5860] usb 4-1: config 0 descriptor?? [ 873.371259][T15165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3017'. [ 873.421902][ T5860] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 873.524917][T15171] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 873.529571][T15171] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 873.548659][T15171] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 873.561310][T15171] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 873.565951][T15171] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 873.772502][T14703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.016702][T10802] usb 4-1: USB disconnect, device number 63 [ 874.272838][T15184] binder: 15183:15184 unknown command 0 [ 874.272861][T15184] binder: 15183:15184 ioctl c0306201 200000000080 returned -22 [ 874.295469][T15184] binder: 15183:15184 ioctl c01064b5 200000000800 returned -22 [ 874.295801][T15184] binder: 15183:15184 ioctl c01064b5 2000000018c0 returned -22 [ 874.296011][T15184] binder: 15183:15184 ioctl c01864c6 200000001940 returned -22 [ 874.296264][T15184] binder: 15183:15184 ioctl c0306201 2000000003c0 returned -14 [ 874.696497][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3024'. [ 874.865489][T15198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.890527][ T5885] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 875.190202][ C1] vkms_vblank_simulate: vblank timer overrun [ 875.215079][ T5885] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 875.215107][ T5885] usb 4-1: config 0 has no interface number 0 [ 875.239189][ T5885] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 875.239219][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.239235][ T5885] usb 4-1: Product: syz [ 875.239243][ T5885] usb 4-1: Manufacturer: syz [ 875.239251][ T5885] usb 4-1: SerialNumber: syz [ 875.247553][ T5885] usb 4-1: config 0 descriptor?? [ 876.028002][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.030214][ T5806] Bluetooth: hci5: command tx timeout [ 876.281177][ T5885] uvcvideo 4-1:0.64: Found Unit with invalid ID 0 [ 876.281240][ T5885] uvcvideo 4-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 876.281327][ T5885] uvcvideo 4-1:0.64: Entity type for entity Output 65535 was not initialized! [ 876.281397][ T5885] uvcvideo 4-1:0.64: Failed to create links for entity 65535 [ 876.281415][ T5885] uvcvideo 4-1:0.64: Failed to register entities (-22). [ 876.298964][ T5885] usb 4-1: USB disconnect, device number 64 [ 876.623560][T15218] tipc: Cannot configure node identity twice [ 876.665851][T14703] veth0_vlan: entered promiscuous mode [ 876.677125][ T5860] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 876.840985][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 876.845403][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.845432][ T5860] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 876.845445][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.899098][ T5860] usb 5-1: config 0 descriptor?? [ 876.988037][T15168] chnl_net:caif_netlink_parms(): no params data found [ 877.035800][ T37] audit: type=1326 audit(1762211661.483:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15226 comm="syz.3.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c76aefc9 code=0x7ffc0000 [ 877.036120][ T37] audit: type=1326 audit(1762211661.483:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15226 comm="syz.3.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c76aefc9 code=0x7ffc0000 [ 877.036953][ T37] audit: type=1326 audit(1762211661.483:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15226 comm="syz.3.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa4c76aefc9 code=0x7ffc0000 [ 877.037319][ T37] audit: type=1326 audit(1762211661.483:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15226 comm="syz.3.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c76aefc9 code=0x7ffc0000 [ 877.037935][ T37] audit: type=1326 audit(1762211661.483:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15226 comm="syz.3.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fa4c76aefc9 code=0x7ffc0000 [ 877.171567][ T37] audit: type=1326 audit(1762211661.623:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15226 comm="syz.3.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c76aefc9 code=0x7ffc0000 [ 877.172065][ T37] audit: type=1326 audit(1762211661.623:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15226 comm="syz.3.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c76aefc9 code=0x7ffc0000 [ 877.172524][ T37] audit: type=1326 audit(1762211661.623:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15226 comm="syz.3.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa4c76aefc9 code=0x7ffc0000 [ 877.173133][ T37] audit: type=1326 audit(1762211661.623:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15226 comm="syz.3.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c76aefc9 code=0x7ffc0000 [ 877.173717][ T37] audit: type=1326 audit(1762211661.623:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15226 comm="syz.3.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c76aefc9 code=0x7ffc0000 [ 877.176508][T14703] veth1_vlan: entered promiscuous mode [ 877.461981][T15230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3034'. [ 877.607602][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3029'. [ 877.853991][ T5860] usbhid 5-1:0.0: can't add hid device: -71 [ 877.854121][ T5860] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 877.885558][ T5860] usb 5-1: USB disconnect, device number 60 [ 877.999292][T15168] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.999442][T15168] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.999651][T15168] bridge_slave_0: entered allmulticast mode [ 878.006900][T15168] bridge_slave_0: entered promiscuous mode [ 878.047127][T15168] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.047255][T15168] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.047448][T15168] bridge_slave_1: entered allmulticast mode [ 878.066282][T15168] bridge_slave_1: entered promiscuous mode [ 878.071427][ T5806] Bluetooth: hci5: command tx timeout [ 878.120726][T15242] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 878.249987][T15168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.258854][T15168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.370744][T13980] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 878.414581][ T1177] bridge_slave_1: left allmulticast mode [ 878.414608][ T1177] bridge_slave_1: left promiscuous mode [ 878.414856][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.501812][ T1177] bridge_slave_0: left allmulticast mode [ 878.501829][ T1177] bridge_slave_0: left promiscuous mode [ 878.501970][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.559005][T13980] usb 4-1: Using ep0 maxpacket: 16 [ 878.691230][T13980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.691264][T13980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.691290][T13980] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 878.691334][T13980] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 878.691357][T13980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.821994][T13980] usb 4-1: config 0 descriptor?? [ 879.348148][T13980] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 879.348183][T13980] microsoft 0003:045E:07DA.000E: no inputs found [ 879.348282][T13980] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway [ 879.514851][ T990] usb 4-1: USB disconnect, device number 65 [ 879.591013][ T5860] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 879.758173][ T5860] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 879.758205][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.763096][ T5860] usb 5-1: config 0 descriptor?? [ 880.156673][ T5806] Bluetooth: hci5: command tx timeout [ 880.610199][T15262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.611482][T15262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.241517][ T5806] Bluetooth: hci5: command tx timeout [ 882.465620][ T5860] ath6kl: Failed to read usb control message: -110 [ 882.465655][ T5860] ath6kl: Unable to read the bmi data from the device: -110 [ 882.465664][ T5860] ath6kl: unable to read target info byte count: -110 [ 882.466383][ T5860] ath6kl: Failed to init ath6kl core: -110 [ 882.467060][ T5860] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 883.047326][T13981] IPVS: starting estimator thread 0... [ 883.082429][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 883.131367][T15274] IPVS: using max 10 ests per chain, 24000 per kthread [ 883.139765][T13981] libceph: connect (1)[c::]:6789 error -101 [ 883.139968][T13981] libceph: mon0 (1)[c::]:6789 connect error [ 883.142376][T13981] libceph: connect (1)[c::]:6789 error -101 [ 883.142564][T13981] libceph: mon0 (1)[c::]:6789 connect error [ 883.167389][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 883.175031][T15276] ceph: No mds server is up or the cluster is laggy [ 883.299051][ T1177] bond0 (unregistering): Released all slaves [ 883.586406][T15168] team0: Port device team_slave_0 added [ 883.600195][T15168] team0: Port device team_slave_1 added [ 884.783029][ T1232] usb 5-1: USB disconnect, device number 61 [ 885.516075][T15168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.516093][T15168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.516120][T15168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.605841][T15168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.605858][T15168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.605884][T15168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.821702][ T5860] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 885.834722][T15171] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 885.865001][T15171] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 885.871608][T15171] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 885.882831][T15171] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 885.885857][T15171] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 886.002192][ T5860] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 886.002223][ T5860] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 886.002244][ T5860] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 886.002285][ T5860] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 886.002347][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 886.002372][ T5860] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 886.026046][ T5860] usb 4-1: string descriptor 0 read error: -22 [ 886.026214][ T5860] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 886.026240][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.128643][ T5860] usb 4-1: config 0 descriptor?? [ 886.130104][T15304] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 886.189458][ T5860] hub 4-1:0.0: bad descriptor, ignoring hub [ 886.189497][ T5860] hub 4-1:0.0: probe with driver hub failed with error -5 [ 886.283830][ T5860] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input34 [ 886.400473][ C0] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 886.576920][ T5860] usb 4-1: USB disconnect, device number 66 [ 886.577923][ C1] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -19 [ 887.304324][T10802] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 887.784187][ T1177] hsr_slave_0: left promiscuous mode [ 887.801118][T10802] usb 5-1: Using ep0 maxpacket: 8 [ 887.803384][T10802] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 887.803432][T10802] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 887.803461][T10802] usb 5-1: config 0 interface 0 has no altsetting 0 [ 887.803496][T10802] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 887.803521][T10802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.810341][T10802] usb 5-1: config 0 descriptor?? [ 887.871330][ T1177] hsr_slave_1: left promiscuous mode [ 887.872331][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.922473][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.011059][ T5860] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 888.070997][ T5806] Bluetooth: hci0: command tx timeout [ 888.161226][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 888.174693][ T5860] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.174971][ T5860] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.175000][ T5860] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.175024][ T5860] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 888.175051][ T5860] usb 4-1: config 0 interface 0 has no altsetting 0 [ 888.175187][ T5860] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 888.175211][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.189671][ T5860] usb 4-1: config 0 descriptor?? [ 888.309174][T15329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.312934][T15329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.332117][T10802] usbhid 5-1:0.0: can't add hid device: -71 [ 888.332350][T10802] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 888.374983][T10802] usb 5-1: USB disconnect, device number 62 [ 888.608036][ T5860] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 888.608076][ T5860] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 888.608106][ T5860] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 888.608133][ T5860] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 888.608161][ T5860] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 888.627714][ T5860] hid-thrustmaster 0003:044F:B65D.000F: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 888.628002][ T5860] hid-thrustmaster 0003:044F:B65D.000F: Wrong number of endpoints? [ 888.807301][ C0] hid-thrustmaster 0003:044F:B65D.000F: Unknown packet type 0x0, unable to proceed further with wheel init [ 889.041324][ T5860] usb 4-1: USB disconnect, device number 67 [ 889.521839][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 889.762956][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 890.159457][ T5806] Bluetooth: hci0: command tx timeout [ 890.816914][T15360] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3069'. [ 891.359678][ C0] vkms_vblank_simulate: vblank timer overrun [ 891.843717][ C0] vkms_vblank_simulate: vblank timer overrun [ 891.912376][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.240596][ T5806] Bluetooth: hci0: command tx timeout [ 892.308752][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.456561][T15168] hsr_slave_0: entered promiscuous mode [ 892.457383][T15168] hsr_slave_1: entered promiscuous mode [ 892.458005][T15168] debugfs: 'hsr0' already exists in 'hsr' [ 892.458024][T15168] Cannot create hsr debugfs directory [ 894.455183][ C0] vkms_vblank_simulate: vblank timer overrun [ 894.486638][ T5806] Bluetooth: hci0: command tx timeout [ 894.575641][ C0] vkms_vblank_simulate: vblank timer overrun [ 895.151584][T15376] netlink: 'syz.1.3072': attribute type 1 has an invalid length. [ 895.200323][T15379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3073'. [ 895.228040][T15376] 8021q: adding VLAN 0 to HW filter on device bond3 [ 895.378876][ C0] vkms_vblank_simulate: vblank timer overrun [ 895.448451][ C0] vkms_vblank_simulate: vblank timer overrun [ 896.261159][T15382] bond3: (slave ip6gretap2): making interface the new active one [ 896.263154][T15382] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 896.706164][ C1] vkms_vblank_simulate: vblank timer overrun [ 896.886710][ C1] vkms_vblank_simulate: vblank timer overrun [ 896.887543][T15401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3079'. [ 897.091323][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.006928][T15308] chnl_net:caif_netlink_parms(): no params data found [ 898.008513][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.138753][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.330754][T15415] netlink: 688 bytes leftover after parsing attributes in process `syz.1.3081'. [ 898.352129][T15416] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000087: 0000 [#1] SMP KASAN PTI [ 898.352158][T[ 898.352158][T15416] KASAN: null-ptr-deref in range [0x0000000000000438-0x000000000000043f] [ 898.352182][T15416] CPU: 1 UID: 0 PID: 15416 Comm: syz.4.3082 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 898.352209][T15416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 898.352224][T15416] RIP: 0010:h5_recv+0x146/0x910 [ 898.352260][T15416] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 cc 88 70 fa 4d 8b 65 00 31 ff 4c 89 [ 898.352281][T15416] RSP: 0018:ffffc9000556fc20 EFLAGS: 00010202 [ 898.352302][T15416] RAX: dffffc0000000000 RBX: 0000000000000428 RCX: 0000000000000087 [ 898.352319][T15416] RDX: 0000000000000086 RSI: 0000000000000001 RDI: 0000000000000000 [ 898.352333][T15416] RBP: ffffc9000556fd40 R08: 0000000000000000 R09: 0000000000000000 [ 898.352348][T15416] R10: dffffc0000000000 R11: ffffffff87afedb0 R12: 0000000000000001 [ 898.352364][T15416] R13: 0000000000000438 R14: ffff8880484e7810 R15: ffffc9000556fde0 [ 898.352381][T15416] FS: 00007f3cf5b5d6c0(0000) GS:ffff888126ef9000(0000) knlGS:0000000000000000 [ 898.352401][T15416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 898.352417][T15416] CR2: 00007f3cf5b5cf98 CR3: 000000003a70c000 CR4: 00000000003526f0 [ 898.352437][T15416] Call Trace: [ 898.352446][T15416] [ 898.352459][T15416] ? __pfx_h5_recv+0x10/0x10 [ 898.352488][T15416] ? rcu_read_lock_any_held+0xb3/0x120 [ 898.352510][T15416] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 898.352531][T15416] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 898.352560][T15416] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 898.352592][T15416] hci_uart_tty_receive+0x194/0x220 [ 898.352617][T15416] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 898.352644][T15416] tiocsti+0x23c/0x2c0 [ 898.352671][T15416] ? __pfx_tiocsti+0x10/0x10 [ 898.352697][T15416] ? __fget_files+0x3a6/0x420 [ 898.352726][T15416] ? __fget_files+0x2a/0x420 [ 898.352763][T15416] tty_ioctl+0x62c/0xde0 [ 898.352788][T15416] ? __pfx_tty_ioctl+0x10/0x10 [ 898.352813][T15416] __se_sys_ioctl+0xff/0x170 [ 898.352839][T15416] do_syscall_64+0xfa/0xfa0 [ 898.352865][T15416] ? lockdep_hardirqs_on+0x9c/0x150 [ 898.352892][T15416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.352915][T15416] ? clear_bhb_loop+0x60/0xb0 [ 898.352944][T15416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.352965][T15416] RIP: 0033:0x7f3cf791efc9 [ 898.352983][T15416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.353004][T15416] RSP: 002b:00007f3cf5b5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 898.353026][T15416] RAX: ffffffffffffffda RBX: 00007f3cf7b76090 RCX: 00007f3cf791efc9 [ 898.353044][T15416] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000005 [ 898.353059][T15416] RBP: 00007f3cf79a1f91 R08: 0000000000000000 R09: 0000000000000000 [ 898.353074][T15416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.353088][T15416] R13: 00007f3cf7b76128 R14: 00007f3cf7b76090 R15: 00007fffb51012b8 [ 898.353122][T15416] [ 898.353130][T15416] Modules linked in: [ 898.353167][T15416] ---[ end trace 0000000000000000 ]--- [ 898.368407][T15416] RIP: 0010:h5_recv+0x146/0x910 [ 898.368448][T15416] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 cc 88 70 fa 4d 8b 65 00 31 ff 4c 89 [ 898.368467][T15416] RSP: 0018:ffffc9000556fc20 EFLAGS: 00010202 [ 898.368486][T15416] RAX: dffffc0000000000 RBX: 0000000000000428 RCX: 0000000000000087 [ 898.368503][T15416] RDX: 0000000000000086 RSI: 0000000000000001 RDI: 0000000000000000 [ 898.368517][T15416] RBP: ffffc9000556fd40 R08: 0000000000000000 R09: 0000000000000000 [ 898.368531][T15416] R10: dffffc0000000000 R11: ffffffff87afedb0 R12: 0000000000000001 [ 898.368547][T15416] R13: 0000000000000438 R14: ffff8880484e7810 R15: ffffc9000556fde0 [ 898.368563][T15416] FS: 00007f3cf5b5d6c0(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 898.368582][T15416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 898.368597][T15416] CR2: 0000555563e0e808 CR3: 000000003a70c000 CR4: 00000000003526f0 [ 898.368616][T15416] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 898.368630][T15416] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 898.368656][T15416] Kernel panic - not syncing: Fatal exception [ 898.368907][T15416] Kernel Offset: disabled