last executing test programs: 14m39.989381121s ago: executing program 32 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="663d01040000d3a4", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,\x00']) 14m13.481719352s ago: executing program 33 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1c, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 14m2.561189946s ago: executing program 34 (id=89): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f0489010504"], 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x3) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x8, 0x0, 0x1, 0xfd, 0x6, @local}, 0x14) sendmsg$nl_route(r0, 0x0, 0x810) 13m42.633507177s ago: executing program 0 (id=125): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0002119}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x64, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffffc, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7fff, 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1000}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x85}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000034) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 13m42.271230033s ago: executing program 0 (id=126): r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="0200000000000000240012801100010062726964"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 13m41.028764299s ago: executing program 0 (id=128): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813, 0xfffffffd, 0x2}, 0x10) (async, rerun: 64) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ptrace(0x8, r2) ptrace$setregs(0xd, r2, 0x20000000002, &(0x7f00000000c0)="f387f3d0d636834c0123b2c3b3f6c5965f24e62c2e7c82d107a6808737c85e6970e8c7c8440000009c0ebf8e3f0a7efe0ed91d923af04bf049364e1b69237c6258215d8f1e91bd3b003e7f3876d52ef012264768d6b703075024a5164aebe8ba1203b8512b2258bb6dfa2f55f496386fd12d29590c6eee14a6c7bc9d4c9c26915315ab4f01f3b278e7") (async) ptrace$cont(0x21, r2, 0x80000001, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="6add231c09"], 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x14048010) 13m39.953860759s ago: executing program 0 (id=132): socket(0x28, 0x5, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') 13m38.715292125s ago: executing program 0 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc02063a1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x101) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000380)={0x2, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x5) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x400, 0x1) mount$9p_unix(0x0, &(0x7f0000002ac0)='./file0\x00', 0x0, 0x8, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200000000000c00028005000100000001000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x21f}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, 0x0) 13m33.290167496s ago: executing program 1 (id=137): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) close(r1) 13m33.219191885s ago: executing program 1 (id=138): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000080)={r1, r2/1000+60000}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2d, 'memory'}, {0x2d, 'net'}, {0x2b, 'cpuset'}, {0x2b, 'devices'}, {0x2b, 'cpuacct'}, {0x2d, 'cpuacct'}, {0x2b, 'rdma'}, {0x2d, 'memory'}, {0x2b, 'cpuset'}]}, 0x46) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000180)=0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000340)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) (async, rerun: 64) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x210c00, 0x0) (rerun: 64) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) (async, rerun: 32) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f00000003c0)={0x8000000000000001, r0}) (async, rerun: 32) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000400)=0x0) fcntl$setown(r6, 0x8, r7) r8 = syz_open_dev$ndb(&(0x7f0000000440), 0x0, 0x4000) ioctl$BLKBSZGET(r8, 0x80081270, &(0x7f0000000480)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0x5, &(0x7f00000004c0)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x86}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x95}], &(0x7f0000000500)='syzkaller\x00', 0x800, 0x19, &(0x7f0000000540)=""/25, 0x41000, 0x32, '\x00', 0x0, @fallback=0xb0688f9d545a1ef6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xc, 0x9aad, 0x307b}, 0x10, r9, r3, 0x8, &(0x7f00000008c0)=[r6, r6, r3, r0], &(0x7f0000000900)=[{0x1, 0x1, 0xf}, {0x2, 0x3, 0x9, 0x5}, {0x2, 0x2, 0x4, 0x9}, {0x1, 0x1, 0x8, 0x4}, {0x0, 0x4, 0x1, 0x3}, {0x1, 0x4, 0x9, 0x5}, {0x1, 0x2, 0x1, 0x6}, {0x4, 0x2, 0x1, 0x2}], 0x10, 0x28d5}, 0x94) (async) splice(r3, &(0x7f0000000a40)=0x6ccb3827, 0xffffffffffffffff, &(0x7f0000000a80)=0xb62, 0x2b55, 0x0) (async, rerun: 64) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000ac0)={0x4, 0x1, 0x3, 0x2, 0x2a2e0709, 0x101, 0x8}) (async, rerun: 64) ioctl$VT_ACTIVATE(r4, 0x5606, 0xca6) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000b00)={0x0, 0x7, 0x7f, 0x9, 0x1}) (async, rerun: 32) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000000b40)=0x2, 0x4) (rerun: 32) ioctl$BLKSSZGET(r6, 0x1268, &(0x7f0000000b80)) (async) r10 = accept$inet6(r3, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000c00)=0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8983, &(0x7f0000000c40)) (async) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r11, 0xf501, 0x0) (async, rerun: 32) r12 = dup(r11) (rerun: 32) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r12, 0x84, 0x7, &(0x7f0000000cc0)={0x8001}, 0x4) (async) statfs(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)=""/119) 13m33.095247108s ago: executing program 0 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="663d01040000d3a4", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,\x00']) 13m32.889285505s ago: executing program 35 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="663d01040000d3a4", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,\x00']) 13m32.880456219s ago: executing program 1 (id=141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f00000001c0)=""/216, &(0x7f00000002c0)=0xd8) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8969}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x3, 0xf}}}, 0x24}}, 0x14000000) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_delete(r5) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400400bce) r6 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000007c0)={0x5f}) 13m31.502301853s ago: executing program 1 (id=142): socket(0x28, 0x5, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') 13m31.401573065s ago: executing program 1 (id=143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 13m30.742144545s ago: executing program 1 (id=144): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 13m30.580331982s ago: executing program 36 (id=144): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 10m46.834532779s ago: executing program 7 (id=175): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2c}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 10m45.409747591s ago: executing program 7 (id=178): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000000000006110"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = syz_open_dev$audion(&(0x7f0000000240), 0x9, 0x38301) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000d7000000010000000800000020000000", @ANYRES32=r1, @ANYBLOB="0200"/20, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="050000000500000001000000050000e08b6cb5cf080f00"/35], 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r6 = socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f00000000c0)=0x8, 0x4) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffa, r7, 0x1) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000001c0)={0x2400, 0xfffffffd, 0x0, 0x401}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e008d2a"], 0x24}, 0x1, 0x0, 0x0, 0x10008000}, 0x14048010) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x110, r0, 0x46155000) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000340)=0x4cde0, 0x4) 10m44.995116152s ago: executing program 7 (id=179): bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x180, 0xb161, 0x2}, 0x48) 10m44.911745568s ago: executing program 7 (id=180): socket(0x28, 0x5, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') 10m44.584980714s ago: executing program 7 (id=182): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x3, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x140}}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="1841000008000000000000000000000018170000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xa0, &(0x7f00000001c0)=""/160, 0x41000, 0x20, '\x00', r3, @fallback=0xb, r4, 0x8, &(0x7f0000000300)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0xd73}, 0x94) 10m43.586065319s ago: executing program 7 (id=183): r0 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x8000, @local, 0x6}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000001ff020000000000000000000000000001"], 0x0) 10m43.283529045s ago: executing program 37 (id=183): r0 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x8000, @local, 0x6}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000001ff020000000000000000000000000001"], 0x0) 5m31.616738548s ago: executing program 5 (id=1038): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x11}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x12, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x8804, 0x0, 0x0) pipe2(&(0x7f0000000100), 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000fe0414010057c65c35cbb221a7bf112dbd1d453f99633e33d21b894a70002508000100010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8081}, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f00000000c0)=0x32) close(0x3) r6 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r7, 0x6d, 0x3, 0xfffffffffffffffe}) 5m31.383159834s ago: executing program 5 (id=1040): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3}, 0xe) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="b4080000000000007311f9ffffffffffffff0000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x100, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, r2}, 0x94) 5m28.366178021s ago: executing program 5 (id=1046): syz_open_dev$tty20(0xc, 0x4, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0xffe3, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 5m26.007202012s ago: executing program 5 (id=1054): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=@getstat={0xe0, 0x15, 0x400, 0x70bd2a, 0x25dfdbfc, {{'salsa20-asm\x00'}, '\x00', '\x00', 0x2400, 0x2000}, [""]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080044) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mknodat$null(r0, &(0x7f00000001c0)='./file0/file0\x00', 0x400, 0x103) symlinkat(0x0, 0xffffffffffffff9c, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)={0x20640, 0x80, 0x2}, 0x18) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x400, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5m25.819394097s ago: executing program 5 (id=1057): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f000000a640)=@deltfilter={0x30, 0x2d, 0x1, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x10, 0x5}, {0x0, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x80) ptrace(0x10, r3) ptrace$setregs(0x1a, r3, 0xc, &(0x7f0000000380)="7694fc9d5f80") ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x30, 0x80}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x16, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x6, 0xa4, 0x5, 0x5}, {0xd5c66804, 0xeeee0000, 0xb, 0x6, 0x5, 0x42, 0x9, 0xff, 0x8, 0x7, 0xe, 0x2}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x3909e40c33606d9c, 0xd, 0x7, 0xb1, 0x8, 0xfe, 0x73, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x73}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m19.735724303s ago: executing program 5 (id=1073): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) timer_delete(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x100002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB='\a']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4c004) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000052c0004802800018007000100637400001c000280050007000000000040000000100800024a000000150900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a000000"], 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x80000001, 0x80) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f0000000040)) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20050800) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r4, 0x0, 0x700) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) keyctl$clear(0x3, 0xfffffffffffffffc) 5m19.121699572s ago: executing program 38 (id=1073): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) timer_delete(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x100002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB='\a']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4c004) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000052c0004802800018007000100637400001c000280050007000000000040000000100800024a000000150900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a000000"], 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x80000001, 0x80) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f0000000040)) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20050800) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r4, 0x0, 0x700) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) keyctl$clear(0x3, 0xfffffffffffffffc) 4m9.448504236s ago: executing program 4 (id=1384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x1000, 0x0) r1 = socket(0xa, 0x3, 0xfc) setsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, 0xa8) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3, 0xfffffffe}) 4m8.462416s ago: executing program 4 (id=1386): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x5b, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002400010122bd7000fcffff70923dfa000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000180)}, 0x10) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffff6, &(0x7f0000000200)=[{0xffffffffffffdff7, 0x0, 0xfffffffffffffffc}], 0x1, 0x6, 0x0, 0x2, 0x7, 0x10}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 4m8.015511181s ago: executing program 4 (id=1390): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) write(r0, &(0x7f00000004c0)="0760ce88b1427557dbdaa2bb7b03b2c386ad477a17144cad909c6e2e74", 0x1d) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000004c40)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0xcc95056d0569446b}, 0x28) r4 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffff4, 0x200) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2, r0}, 0xc) 4m0.846607919s ago: executing program 4 (id=1401): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000100)={0x7, @output={0x0, 0x0, {0xf, 0x2}, 0x0, 0x4}}) 4m0.698665178s ago: executing program 4 (id=1405): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/rcu_expedited', 0x8000, 0x40) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x83) unshare(0x4000000) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) r5 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x700, 0x10, 0x5, 0x0, {{0xd, 0x4, 0x1, 0x3f, 0x34, 0x64, 0x0, 0xb, 0x2f, 0x0, @local, @local, {[@ssrr={0x89, 0xf, 0x65, [@private=0xa010101, @local, @remote]}, @generic={0x89, 0x10, "3cd4284e133a5b5398825b9e0dcb"}]}}}}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="000600000040001700000000000000000000000082792966647841e58c9cd79425b68827e377f701489ebeae67bf", @ANYRES32=r6, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="010000000200"/28], 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r10}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x1, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x0, 0x1, 0x1, 0x4, 0x0, 0x8}], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0xb, 0x8001, 0x5}, 0x10, 0x2c12c, r5, 0x2, &(0x7f00000008c0)=[r9, r2, r6, r5, r1, r0, r1, r10], &(0x7f0000000900)=[{0x0, 0x5, 0xf, 0xf}, {0x1, 0x1, 0x8, 0xc}], 0x10, 0x8}, 0x94) close(r3) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r5) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x4c, r11, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5abdbaff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r13 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x33}}}}}]}}]}}, 0x0) syz_usb_control_io(r13, 0x0, 0x0) syz_usb_control_io$hid(r13, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) ioctl$TUNSETOFFLOAD(r12, 0xc004743e, 0x12) 3m58.519015911s ago: executing program 4 (id=1424): socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x6e8c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @local, 0x4}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 3m43.426676079s ago: executing program 39 (id=1424): socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x6e8c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @local, 0x4}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 1m33.307895726s ago: executing program 2 (id=2353): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0xfffffffd) futex(&(0x7f000000cffc)=0x3, 0x5, 0xf2, 0x0, &(0x7f0000000000), 0x5000000) 1m33.139088958s ago: executing program 2 (id=2355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9f5}}, 0x24) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r5, &(0x7f0000000340)=""/246, 0xf6, 0x100000000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x26a4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 1m33.0261853s ago: executing program 2 (id=2357): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0xc48}, 0x0, 0x0, 0x6, 0x1d9d, 0xffff, 0xe, 0x8, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x7}, {0x0}, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x2}}], 0xa0}, 0x4000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e000000000000000600000007"], 0x48) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket(0x28, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYRES16=r5], 0x4c}, 0x1, 0x0, 0x0, 0xc000400}, 0x4000) 1m32.643187402s ago: executing program 2 (id=2359): capset(&(0x7f0000001680)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) 1m32.60173992s ago: executing program 2 (id=2360): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {0x4}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r7 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) 1m32.307207396s ago: executing program 2 (id=2362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b"], 0xac}}, 0x0) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fadf8676a7af31e40e59578241ca24f7fafb1af739f96800abc9caea792fbb67eba3982a3b7473401246f8ce7de29b9ec7fd7462b9f9c3592be5563a91b79d8319f7a0968442e97250d15cf8fb5f0abae8fca86ad43263f3a38af5d2459758b179df05", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ff0100005c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000170000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fe"], 0x48) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="00061c0000005ad6723f09"], 0x0, 0x0, 0x0, 0x0, 0x0}) 16.704095742s ago: executing program 9 (id=2540): set_mempolicy(0x1, 0x0, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, 0x0, 0x0) munlockall() openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='mm_migrate_pages\x00', r1, 0x0, 0x6}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000180)="1000000000000000290000003b000000", 0x10) r3 = add_key$keyring(&(0x7f0000000f40), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, r3) add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000440)="6acb4dfc01e881705d6184ea45aaef18e6868c29e5ec18e2a26dff2a3c1c0f50805fc9894ba91ef0d1288d1bc05c6c2400d43dcec98d3ffdd56e7e6647de91fac547b9e1cb36bb232992105d09fec8f1890d15f6bfd122614592c2d8eb4a418ee17be9f5b61e738fad49c715138f28f3b5b30c468116564eedd80f84bd6e5131975ec492b22753577dad5ade87cf1b15a85e376a55dbbf7ed01b13f3c9b810768ac31755b2609c8b824cb93913463a43923b07c3753f78bf297f62bd8ceafc943d1dc4853ec19271", 0xc8, r3) 13.834495935s ago: executing program 9 (id=2545): r0 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000080000000600000001000013040000000200000043000000010000000e00000006000004030000000010000005000000f70a00000500000002000000970000000900000043650000030001000400000000000000ffffff7f0600000000000000060000000a000b000200001000000900002e71005f5f2e"], &(0x7f0000003340)=""/5, 0x8c, 0x5, 0x1, 0x6abb}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x70bd2a, 0x25dfdbfc, {0x2, 0x1f, 0x49, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, @IFA_FLAGS={0x8, 0x8, 0x700}]}, 0x28}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setresuid(0xee01, 0x0, 0x0) r6 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000724000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3}) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000340)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x64, 0x4004, @fd=r9, 0x1ff, 0x0, 0x0, 0x4, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x104, &(0x7f0000000280)=0x7, 0x0, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) 8.698692412s ago: executing program 6 (id=2549): socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$rds(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0xc48}, 0x0, 0x0, 0x6, 0x1d9d, 0xffff, 0xe, 0x8, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x7}, {0x0}, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x2}}], 0xa0}, 0x4000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e000000000000000600000007"], 0x48) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket(0x28, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYRES16=r4], 0x4c}, 0x1, 0x0, 0x0, 0xc000400}, 0x4000) 8.090371909s ago: executing program 9 (id=2551): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_clone(0x0, 0x0, 0xffffff32, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ffffffff850000002a00000095000000000019001dcd24847163d5e49a23c8421c70"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0xf, &(0x7f00000000c0), 0x4) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x31, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @info_request={0xf, 0x0, 0x0, 0x8, 0x5}}}}}, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000080)={0x8004, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = getpgid(0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x0, 0x0, 0x4) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x50003, 0x0, {[0x0, 0x100000000, 0x59, 0x2f, 0x7fffffffffffffff, 0x2, 0x2, 0x80000001]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x76ab, 0x8000000000, 0x1, 0xfffffffffffffffd, 0xb, 0x4002004c5, 0x1000, 0x1, 0x0, 0x7, 0xe, 0x0, 0x6, 0x0, 0x49], 0xdddd1000, 0x1c6256}) 7.520360394s ago: executing program 6 (id=2554): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYRES64], 0x10, 0x408}, 0x402) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001440), 0x10, 0x0) 6.689570479s ago: executing program 9 (id=2555): r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1004, &(0x7f0000000040)=0x5, 0x0) 6.679901667s ago: executing program 8 (id=2557): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{0x0, 0x0, 0x0, 0x200000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xe}, {}, {0x448eade7, 0x0, 0x0, 0x10001}, {0x0, 0x0, 0x80000000, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x10001}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xfff}, {}, {0x80000, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x10}, {0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6}, {0x20000000}, {0x0, 0x7}, {}, {0x0, 0x4}, {}, {0x0, 0x5, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, {}, {0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x3}, {}, {}, {}, {0xfffffffe}, {0x4, 0x0, 0x0, 0x0, 0x1}, {}, {0x4, 0x9}, {}, {0xfffffffe, 0x0, 0x0, 0xffffff01, 0x2}, {0x2, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}], [{}, {}, {}, {}, {0x2}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x5, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x4}, {}, {0x5}, {0x5}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 6.535182283s ago: executing program 6 (id=2558): syz_emit_ethernet(0x8e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6b000001000000000000006bceb1cb1eedc0754f15dd5ff9ff02000000000000000000000000000189090000000000000502095605028001000100010500000000002c04015001030000000001000106000000000000c2"], 0x0) 6.339755313s ago: executing program 6 (id=2560): set_mempolicy(0x1, 0x0, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, 0x0, 0x0) munlockall() openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000180)="1000000000000000290000003b000000", 0x10) r2 = add_key$keyring(&(0x7f0000000f40), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, r2) add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000440)="6acb4dfc01e881705d6184ea45aaef18e6868c29e5ec18e2a26dff2a3c1c0f50805fc9894ba91ef0d1288d1bc05c6c2400d43dcec98d3ffdd56e7e6647de91fac547b9e1cb36bb232992105d09fec8f1890d15f6bfd122614592c2d8eb4a418ee17be9f5b61e738fad49c715138f28f3b5b30c468116564eedd80f84bd6e5131975ec492b22753577dad5ade87cf1b15a85e376a55dbbf7ed01b13f3c9b810768ac31755b2609c8b824cb93913463a43923b07c3753f78bf297f62bd8ceafc943d1dc4853ec19271", 0xc8, r2) 6.286950744s ago: executing program 8 (id=2561): shutdown(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xa, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x1000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2]}}) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000001}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x44, 0x5, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0xffffffff80013248, 0x2d, 0x0, 0x6, 0x5, 0x0, 0x0, 0x10}}, 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r9, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) syz_fuse_handle_req(r4, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x10000000, {0x100000000444, 0x0, 0x4000000000000c, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)=""/149, 0x95) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x24, 0x0, 0xffffffffc0416010, 0x20}}, 0x50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0) 5.079158057s ago: executing program 9 (id=2562): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) setitimer(0x0, &(0x7f0000000080)={{0x0, 0xea60}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)) setitimer(0x2, &(0x7f0000000140), &(0x7f0000000180)) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) rt_sigaction(0xe, &(0x7f0000000100)={&(0x7f0000000280)="66458f430f2832c4e1fd5aa13c9c43715065f30fc7fbc2e93b262e669f660f6239430f12957b280000e564d9fa67", 0x8000000, 0x0, {[0x8000]}}, 0x0, 0x8, &(0x7f0000000200)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getitimer(0x2, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000a80)={'veth1_vlan\x00', &(0x7f0000000440)=@ethtool_flash={0x26, 0x8000000, './file0\x00'}}) syz_clone(0x28000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.95207613s ago: executing program 3 (id=2563): socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$rds(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0xc48}, 0x0, 0x0, 0x6, 0x1d9d, 0xffff, 0xe, 0x8, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x7}, {0x0}, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x2}}], 0xa0}, 0x4000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e000000000000000600000007"], 0x48) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket(0x28, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYRES16=r4], 0x4c}, 0x1, 0x0, 0x0, 0xc000400}, 0x4000) 3.523574266s ago: executing program 8 (id=2564): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xe, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x18, "6750a2d44794061da3bf4ec851fe0511b0cc89a91470b2d6"}, &(0x7f0000000140)=0x20) 3.128662264s ago: executing program 3 (id=2565): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffb}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x43dca000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, r5, r6, 0x9, 0x2f8f, 0x4, 0xe, {0x3, 0x6, 0x1, 0xffff, 0x6, 0x5295, 0x4f03, 0xf801, 0xfff, 0x0, 0x2d3, 0x3, 0xfffffeff, 0x7270, "a77cd939e5ea586b3f67cb0c060d031ac5012a836a37fce8b6af6628ada48a7b"}}) 2.971014221s ago: executing program 8 (id=2566): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000240)={0x48, r1, 0x1, 0x70bd2e, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ccff00"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 2.011766846s ago: executing program 6 (id=2567): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, 0x0, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x84}}, 0x20004084) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0xffe4) 1.858133996s ago: executing program 8 (id=2568): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000005000000710000000000000300f3ffff030000000500000000000000010000000000000c00000000002e2e2500"], &(0x7f0000000600)=""/10, 0x41, 0xa, 0x1}, 0x20) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x12, r0, 0xffffe000) sched_setscheduler(0x0, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) setresuid(0xee00, 0xee00, 0x0) syz_clone(0x20080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.669902234s ago: executing program 3 (id=2569): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)="580000001400194140834b80040d8c560aff820fffff5baa003a0000002058000b48244a945f6400940f6a0325010ebc00ed4b1fb2d345a9ed4be10000000000008800f0fffeffe809005300fff5dd000000030001b5788a", 0x58}], 0x1) 1.511047306s ago: executing program 9 (id=2570): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x35c, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002240)=""/4113, 0x1011}], 0x1, 0x0, 0xffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) connect(r2, &(0x7f0000000140)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x19) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x6) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x5, 0x2, 0x9, 0x7, 0x2, 0x800000001, 0x9, 0x4, 0x3}) (async) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x5, 0x2, 0x9, 0x7, 0x2, 0x800000001, 0x9, 0x4, 0x3}) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x109) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDCTL_SEQ_GETINCOUNT(r4, 0x80045105, &(0x7f0000000280)) (async) ioctl$SNDCTL_SEQ_GETINCOUNT(r4, 0x80045105, &(0x7f0000000280)) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = fanotify_init(0x18, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r10, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) fanotify_mark(r8, 0x105, 0x4800003a, r7, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}, {@xino_off}, {@redirect_dir_nofollow}]}) 1.510620814s ago: executing program 3 (id=2571): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='decodes me'], 0xc) unshare(0x28000600) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x8, 0x4}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001dc0)=@newtaction={0x48, 0x1e, 0x109, 0x70bd25, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0xd, 0x0, 0x0, {{0x20}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000640)={"ee957e35fc21ed5a32a24878e1d0e01de47d1acfb66b570c8830d7ffe292371d", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f00000002c0)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000680)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r8, 0x0, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) r10 = socket$inet(0x2, 0x2, 0x1) connect$inet(r10, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) sendmmsg$unix(r3, &(0x7f0000003e40)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="8807550e3503d246a42455245b427108bc20e092b4406a55d44ff287ba3fa2712548db1647ac4041a983e7df93e54547b5339694eb5dacb00b69b00beea615c614d1ff926a9d117e4d45f273cd0d77d903d5ecdb1cbe6307bb031ee2089146883f6733dbb7e679a42f4001bf72bdb5bc27032b508bf970faae44ef76449a439264ede50050f62aefbc7e1b555c7e457dcf5ecbdf67b4e60af6a6d3c3d40a4a75e9ae715b7796ebdc79fbcc1e815a988d337a1b", 0xb3}, {&(0x7f0000000180)="68c980db087aa839b922d7a4ca0c2a59d5597086dbf0df6ab474acad9219303301b0f1e528569ba85dd389e5", 0x2c}, {&(0x7f00000001c0)="5bd38044233a272447daf5826cbcb92a9c70a32ff9b9aed3d640d40649b214f8b38fed56afdba61e177577b643fb22c806ab2c2eb8430ad75698425d3b06f34beeda2679620a2ff02224675a70e4ce663a1fd5e184ebc8a7bb12991d803f239b34c03d99970beba30a948905", 0x6c}], 0x3, &(0x7f00000002c0)}}, {{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=[@rights={{0x2c, 0x1, 0x1, [r1, r0, r1, r1, r1, r0, r1]}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, r0, r1, 0xffffffffffffffff, r1, r1, r1, r0]}}, @rights={{0x28, 0x1, 0x1, [r4, r1, r1, r1, r1, r1]}}], 0x90, 0x40800}}, {{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000500)="1e6174df0a067b577798cd", 0xb}, {&(0x7f0000000540)="bd443e7656db8886f02a377ee53e73f85a2cf6834f3a668c736e0c71a5ea5313398a177901f4de2dcd548ba5f0905bbcbecfff2eba47ff09a5c696734c41895cd52d44b27a20d4f2fe5ae9c8f9ed76900cc9334fc950b7c66a0c4c8bb75824f7398512f734f09fe53e7e06e7020fe9d0dd6661aee8b1b1943a55bd8ebef5860778feaa0356a19430c355a9c056bb4ccd53", 0x91}], 0x2, &(0x7f0000002700)=[@rights={{0x34, 0x1, 0x1, [r1, r0, r0, r5, r0, r1, r1, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x70, 0x40000}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002780)="6544756b6ef52ffc2cb51229ebf591936c32bd06b9d40a38cbbf47328e42ce6f168905b992a9e00cb98c0c4c21361e37c8eece2dae4d2a4b445c1a6dd346499931440c77dcdb7e47a79c", 0x4a}, {&(0x7f0000002800)="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", 0x1000}, {&(0x7f0000003800)="680e6c12cde3f94182f14c03c57649ea01f5b6dd23cbb1ba9afea98218e482f93a16a2e9589c3175768602f4b170b2c306d210bba46071794b5004e82b451ba29f3ef3698c361802dd390b5765ede69f6728f30dd3d9f7398a7310ab477a3f89544e6969da9f76ceada737da1773e81ae85150f10430c5bd628e480d58", 0x7d}, {&(0x7f0000003880)="a4e351de84d3c664e8fbb561bfaabf687e37b6c30896ba49325e6529f4892ec721bcae5a8cc1288afe692c0925496827bf99d1c446f55b3ee5d3d2fa091a7c920e818c53403a9d71c96abf73d994606bb1c0da98e80af4579d4e2875e3c7ec2efe019bbcb83f08f17ac3f49bea725d67d4c5673872302e", 0x77}], 0x4, 0x0, 0x0, 0x800}}, {{&(0x7f0000003940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003ac0)=[{&(0x7f00000039c0)="e696d925403822840faecf7dda4715ea6aa27ffd0e5a5aafeefda73ba780d4b93ff29382c79776dc3cdd14bb60b02b9cc4e0f39c1ebae612e74a508f11a81f59190b9814f2a05b672f9362c95965ec6aa9cf4f96a0ffe094486fb9158020b64588bd8b61dca0cca144a655056b4f90a609fb041338a671b405157729b143a8108d3934dfe12497ebf5698ef3ed07311db771e201e7574b123658f2a6b5a38c0dd1558b38a8960d3bafd0b7ec645ef7475f2e4b72dbc13036ca0c830845810b662a06752e74f0c9ae5c3fa5dbfeb7607a89d59d39", 0xd4}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r0, r0, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r0, r9, r0, r0, 0xffffffffffffffff]}}], 0x78, 0x8801}}, {{&(0x7f0000003b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003dc0)=[{&(0x7f0000003c00)="1c768ed642b437e539b1352be461a05a494a36946960812f1adfe08fe8fd7f92602489ea5555ce3d2f277dad515c1bc09ed0586903298dd3b805d0dcf9b3af576a2043897cef4e07aefc9aabcea384f0ec9b8445b4b3a873869a9f693b2a6601497029127678ad2053b3c8d753e738bfabfd4360493c92898a784c41dddab7109f1159eaf27f2d35fea27cf10ddf30ee7f226a553267e87f2ef694aa987da00c5418fa8c3b2daa5e50550fdca3beb757fc5313febdb8f34314ee5f769518ccf8b162904f899013ee49cb147dc4a0decc", 0xd0}, {&(0x7f0000003d00)="5983dc9109e269303dddf2c9bb8d3af88586100d6030689f0d1d4cba9403dd811244e7110dd35628a30e11e8312de3ecbee6f7446dfe164ceb6473db30a133f32aef328511f06102f2022eb9aaf3a45f0af954a88631be795f9cf1d8aed0a110a66177e283c0741c4b92d52c902bf3445fbceaaf2e22c5aaf373cc1282c5f9def93f469e84f0bac00fec77984204a4d48c452cacd1f8b257f7deac2458815af79113", 0xa2}], 0x2, &(0x7f0000003e00)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r0, r10]}}], 0x28, 0x20000014}}], 0x6, 0x40) 1.403543914s ago: executing program 8 (id=2572): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(r1, 0xd, &(0x7f0000000100)={0x9, 0x4}, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x1, 0x2, {0x2, 0x0, 0xfffffff8, 0x0, 0x1}, 0x400}) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) r6 = socket(0x2, 0x2, 0x1) bind$unix(r6, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r7, 0x0, 0x0, 0x1, 0x9) write$sndseq(r4, 0x0, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x58, r8, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0xffffff71, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200408d5}, 0x8000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="08002abd7016993989ccae00fbdbdf251000000008003b00080000000500290001000000050038000100000008003c000600000008003a00070000000800"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4008044) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f0000000440)=0xb, 0x4) 1.153771106s ago: executing program 3 (id=2573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x120}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x45c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_secret(0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6}, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7, 0xe}, {0xd, 0x4}, {0x8, 0xe84a77e204d232a5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r8, 0x89ee, &(0x7f0000000000)=0x5) close(0x4) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r9, 0xb3) 978.309416ms ago: executing program 6 (id=2574): socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$rds(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0xc48}, 0x0, 0x0, 0x6, 0x1d9d, 0xffff, 0xe, 0x8, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x7}, {0x0}, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x2}}], 0xa0}, 0x4000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e000000000000000600000007"], 0x48) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket(0x28, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYRES16=r4], 0x4c}, 0x1, 0x0, 0x0, 0xc000400}, 0x4000) 0s ago: executing program 3 (id=2575): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xe, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x18, "6750a2d44794061da3bf4ec851fe0511b0cc89a91470b2d6"}, &(0x7f0000000140)=0x20) kernel console output (not intermixed with test programs): 2 family 0 port 6081 - 0 [ 800.131168][T12353] QAT: failed to copy from user cfg_data. [ 800.134556][ T38] kauditd_printk_skb: 57 callbacks suppressed [ 800.134574][ T38] audit: type=1326 audit(1760450207.042:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12352 comm="syz.9.1588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e44eec9 code=0x0 [ 800.485144][T10889] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 800.585252][ T5874] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 800.590691][T12211] chnl_net:caif_netlink_parms(): no params data found [ 800.615217][T10889] usb 10-1: device descriptor read/64, error -71 [ 800.718347][ T5803] Bluetooth: hci5: command tx timeout [ 800.768718][T12362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.769141][T12362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.770115][T12362] tmpfs: Cannot disable swap on remount [ 800.772434][T12362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.772852][T12362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.776482][T12362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.776996][T12362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.836775][ T5874] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 800.836820][ T5874] usb 7-1: can't read configurations, error -71 [ 800.895107][T10889] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 801.310810][ T58] bridge_slave_1: left allmulticast mode [ 801.310843][ T58] bridge_slave_1: left promiscuous mode [ 801.311297][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.413643][ T58] bridge_slave_0: left allmulticast mode [ 801.413677][ T58] bridge_slave_0: left promiscuous mode [ 801.431022][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.078152][ T5874] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 802.243753][ T5874] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.243782][ T5874] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 802.243886][ T5874] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 802.278880][ T5874] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 802.278913][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 802.278989][ T5874] usb 7-1: SerialNumber: syz [ 802.835227][ T5803] Bluetooth: hci5: command tx timeout [ 803.396584][T12437] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1625'. [ 805.871843][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.947669][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.019025][ T58] bond0 (unregistering): Released all slaves [ 806.479015][ T5874] usb 7-1: 0:2 : does not exist [ 806.479113][ T5874] usb 7-1: unit 5 not found! [ 806.504582][ T5874] usb 7-1: USB disconnect, device number 50 [ 807.615149][ T7662] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 807.659060][T12211] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.694134][T12211] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.694462][T12211] bridge_slave_0: entered allmulticast mode [ 807.708063][T12211] bridge_slave_0: entered promiscuous mode [ 807.710471][ T5812] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 807.725485][T12211] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.725656][T12211] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.725964][T12211] bridge_slave_1: entered allmulticast mode [ 807.741219][T12211] bridge_slave_1: entered promiscuous mode [ 807.795084][ T7662] usb 7-1: Using ep0 maxpacket: 16 [ 807.797136][ T7662] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.797160][ T7662] usb 7-1: config 0 interface 0 has no altsetting 0 [ 807.797186][ T7662] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 807.797203][ T7662] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.850062][ T7662] usb 7-1: config 0 descriptor?? [ 807.866837][ T5812] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 807.866860][ T5812] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.873042][ T5812] usb 10-1: config 0 descriptor?? [ 807.942230][ T5812] cp210x 10-1:0.0: cp210x converter detected [ 808.130287][T12585] usb usb8: usbfs: process 12585 (syz.8.1690) did not claim interface 0 before use [ 808.150683][T12562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.151172][T12562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.152465][T12562] tmpfs: Cannot disable swap on remount [ 808.357183][T12562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.358301][T12562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.370926][ T5812] cp210x 10-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 808.386187][ T7662] nzxt-smart2 0003:1E71:2009.0018: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 808.402285][T12562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.438793][T12562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.458125][ T5812] cp210x 10-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 808.458249][ T5812] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 808.514008][ T5812] usb 10-1: cp210x converter now attached to ttyUSB0 [ 808.539442][T12561] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 808.588372][ T5812] usb 10-1: USB disconnect, device number 40 [ 808.653117][T12598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.831982][ T5812] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 808.834646][ T5812] cp210x 10-1:0.0: device disconnected [ 808.930663][ T7662] usb 7-1: USB disconnect, device number 51 [ 809.058790][T12211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.289542][ T58] hsr_slave_0: left promiscuous mode [ 809.322234][T12620] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 809.337382][ T58] hsr_slave_1: left promiscuous mode [ 809.338396][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.338423][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.399736][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.399767][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.605304][ T7662] usb 10-1: new low-speed USB device number 41 using dummy_hcd [ 809.661592][ T58] veth1_macvtap: left promiscuous mode [ 809.661709][ T58] veth0_macvtap: left promiscuous mode [ 809.661992][ T58] veth1_vlan: left promiscuous mode [ 809.662178][ T58] veth0_vlan: left promiscuous mode [ 809.763593][ T7662] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 809.763627][ T7662] usb 10-1: config 179 has no interface number 0 [ 809.763683][ T7662] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 809.763711][ T7662] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 809.763736][ T7662] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 809.763771][ T7662] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 809.763798][ T7662] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 809.763844][ T7662] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 809.763867][ T7662] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.801667][T12620] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 809.819166][ T7662] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 809.822210][ T7662] xpad 10-1:179.65: probe with driver xpad failed with error -90 [ 809.945413][ T5790] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 810.100618][ T5790] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 810.100651][ T5790] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.134912][ T5790] usb 7-1: config 0 descriptor?? [ 810.164780][ T5790] cp210x 7-1:0.0: cp210x converter detected [ 810.239350][ T7663] usb 10-1: USB disconnect, device number 41 [ 810.366613][T12637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.367082][T12637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.393014][T12637] tmpfs: Cannot disable swap on remount [ 810.604416][T12637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.604885][T12637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.638971][ T5790] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 810.640545][T12637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.641276][T12637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.856766][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1732'. [ 815.381924][T11661] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 815.558369][ T38] audit: type=1326 audit(1760450222.462:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12754 comm="syz.9.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e44eec9 code=0x7fc00000 [ 815.558432][ T38] audit: type=1326 audit(1760450222.462:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12754 comm="syz.9.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e3e44eec9 code=0x7fc00000 [ 815.558483][ T38] audit: type=1326 audit(1760450222.462:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12754 comm="syz.9.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e44eec9 code=0x7fc00000 [ 815.558533][ T38] audit: type=1326 audit(1760450222.462:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12754 comm="syz.9.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e44eec9 code=0x7fc00000 [ 815.558587][ T38] audit: type=1326 audit(1760450222.462:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12754 comm="syz.9.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e44eec9 code=0x7fc00000 [ 815.558639][ T38] audit: type=1326 audit(1760450222.462:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12754 comm="syz.9.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e44eec9 code=0x7fc00000 [ 815.558691][ T38] audit: type=1326 audit(1760450222.462:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12754 comm="syz.9.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e44eec9 code=0x7fc00000 [ 815.558743][ T38] audit: type=1326 audit(1760450222.462:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12754 comm="syz.9.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e44eec9 code=0x7fc00000 [ 815.558796][ T38] audit: type=1326 audit(1760450222.462:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12754 comm="syz.9.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e44eec9 code=0x7fc00000 [ 815.558848][ T38] audit: type=1326 audit(1760450222.462:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12754 comm="syz.9.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e44eec9 code=0x7fc00000 [ 815.705260][ T5790] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -110 [ 815.705318][ T5790] cp210x 7-1:0.0: GPIO initialisation failed: -110 [ 815.838491][ T5790] usb 7-1: cp210x converter now attached to ttyUSB0 [ 816.359511][ T58] team0 (unregistering): Port device team_slave_1 removed [ 816.492090][T12792] FAULT_INJECTION: forcing a failure. [ 816.492090][T12792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.492128][T12792] CPU: 0 UID: 0 PID: 12792 Comm: syz.8.1784 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 816.492153][T12792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 816.492167][T12792] Call Trace: [ 816.492177][T12792] [ 816.492186][T12792] dump_stack_lvl+0x189/0x250 [ 816.492219][T12792] ? __pfx____ratelimit+0x10/0x10 [ 816.492254][T12792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 816.492292][T12792] ? __pfx__printk+0x10/0x10 [ 816.492320][T12792] ? __might_fault+0xb0/0x130 [ 816.492356][T12792] should_fail_ex+0x46c/0x600 [ 816.492393][T12792] _copy_from_user+0x2d/0xb0 [ 816.492417][T12792] ___sys_sendmsg+0x158/0x2a0 [ 816.492443][T12792] ? __pfx____sys_sendmsg+0x10/0x10 [ 816.492505][T12792] ? __fget_files+0x2a/0x420 [ 816.492528][T12792] ? __fget_files+0x3a6/0x420 [ 816.492564][T12792] __x64_sys_sendmsg+0x1a1/0x260 [ 816.492590][T12792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 816.492623][T12792] ? __pfx_ksys_write+0x10/0x10 [ 816.492663][T12792] ? do_syscall_64+0xbe/0xfa0 [ 816.492701][T12792] do_syscall_64+0xfa/0xfa0 [ 816.492752][T12792] ? lockdep_hardirqs_on+0x9c/0x150 [ 816.492786][T12792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.492809][T12792] ? clear_bhb_loop+0x60/0xb0 [ 816.492838][T12792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.492860][T12792] RIP: 0033:0x7f5b4977eec9 [ 816.492880][T12792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.492898][T12792] RSP: 002b:00007f5b479c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.492922][T12792] RAX: ffffffffffffffda RBX: 00007f5b499d6090 RCX: 00007f5b4977eec9 [ 816.492939][T12792] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 816.492953][T12792] RBP: 00007f5b479c5090 R08: 0000000000000000 R09: 0000000000000000 [ 816.492967][T12792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.492980][T12792] R13: 00007f5b499d6128 R14: 00007f5b499d6090 R15: 00007fff2b209a18 [ 816.493018][T12792] [ 816.850703][ T58] team0 (unregistering): Port device team_slave_0 removed [ 819.202638][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.202734][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.959448][T12211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.987994][T12730] tipc: Started in network mode [ 819.988028][T12730] tipc: Node identity 16b72f718b94, cluster identity 4711 [ 819.988252][T12730] tipc: Enabled bearer , priority 0 [ 820.053665][ T5874] usb 7-1: USB disconnect, device number 52 [ 820.075916][ T5874] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 820.076448][ T5874] cp210x 7-1:0.0: device disconnected [ 820.298316][T12730] tipc: Disabling bearer [ 820.964610][T12211] team0: Port device team_slave_0 added [ 820.969008][T12211] team0: Port device team_slave_1 added [ 822.433557][T12840] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 822.588097][T12211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.588118][T12211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.588146][T12211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.591613][T12211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.591631][T12211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.591669][T12211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.094056][T12211] hsr_slave_0: entered promiscuous mode [ 823.107828][T12211] hsr_slave_1: entered promiscuous mode [ 823.108873][T12211] debugfs: 'hsr0' already exists in 'hsr' [ 823.108901][T12211] Cannot create hsr debugfs directory [ 824.510766][ T38] kauditd_printk_skb: 327 callbacks suppressed [ 824.510787][ T38] audit: type=1326 audit(1760450231.422:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12910 comm="syz.6.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fbaeec9 code=0x7fc00000 [ 824.581555][ T38] audit: type=1326 audit(1760450231.482:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12910 comm="syz.6.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3e2fbaeec9 code=0x7fc00000 [ 824.632109][ T38] audit: type=1326 audit(1760450231.542:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12910 comm="syz.6.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fbaeec9 code=0x7fc00000 [ 825.425190][ T5790] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 825.590436][ T5790] usb 7-1: Using ep0 maxpacket: 16 [ 825.601643][ T5790] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.601682][ T5790] usb 7-1: config 0 interface 0 has no altsetting 0 [ 825.601722][ T5790] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 825.601747][ T5790] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.651570][ T5790] usb 7-1: config 0 descriptor?? [ 826.116368][ T5790] nzxt-smart2 0003:1E71:2009.0019: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 826.276273][T12928] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 826.412276][T12960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.687929][ T5790] usb 7-1: USB disconnect, device number 53 [ 826.771974][T12967] FAULT_INJECTION: forcing a failure. [ 826.771974][T12967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.772017][T12967] CPU: 0 UID: 0 PID: 12967 Comm: syz.8.1858 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 826.772043][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 826.772057][T12967] Call Trace: [ 826.772067][T12967] [ 826.772077][T12967] dump_stack_lvl+0x189/0x250 [ 826.772119][T12967] ? __pfx____ratelimit+0x10/0x10 [ 826.772152][T12967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 826.772180][T12967] ? __pfx__printk+0x10/0x10 [ 826.772220][T12967] should_fail_ex+0x46c/0x600 [ 826.772255][T12967] _copy_to_user+0x31/0xb0 [ 826.772282][T12967] userio_char_read+0x67b/0x770 [ 826.772327][T12967] ? __pfx_userio_char_read+0x10/0x10 [ 826.772366][T12967] ? __pfx_autoremove_wake_function+0x10/0x10 [ 826.772410][T12967] ? rw_verify_area+0x2ac/0x4e0 [ 826.772445][T12967] ? __lock_acquire+0xab9/0xd20 [ 826.772466][T12967] ? __pfx_userio_char_read+0x10/0x10 [ 826.772503][T12967] vfs_read+0x206/0xa30 [ 826.772546][T12967] ? __pfx_vfs_read+0x10/0x10 [ 826.772582][T12967] ? __fget_files+0x2a/0x420 [ 826.772610][T12967] ? __fget_files+0x2a/0x420 [ 826.772632][T12967] ? __fget_files+0x3a6/0x420 [ 826.772656][T12967] ? __fget_files+0x2a/0x420 [ 826.772690][T12967] ksys_read+0x14b/0x260 [ 826.772727][T12967] ? __pfx_ksys_read+0x10/0x10 [ 826.772767][T12967] ? do_syscall_64+0xbe/0xfa0 [ 826.772807][T12967] do_syscall_64+0xfa/0xfa0 [ 826.772839][T12967] ? lockdep_hardirqs_on+0x9c/0x150 [ 826.772872][T12967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.772894][T12967] ? clear_bhb_loop+0x60/0xb0 [ 826.772922][T12967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.772944][T12967] RIP: 0033:0x7f5b4977eec9 [ 826.772965][T12967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.772984][T12967] RSP: 002b:00007f5b479e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 826.773009][T12967] RAX: ffffffffffffffda RBX: 00007f5b499d5fa0 RCX: 00007f5b4977eec9 [ 826.773026][T12967] RDX: 000000000000005d RSI: 00002000000001c0 RDI: 0000000000000003 [ 826.773041][T12967] RBP: 00007f5b479e6090 R08: 0000000000000000 R09: 0000000000000000 [ 826.773056][T12967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.773069][T12967] R13: 00007f5b499d6038 R14: 00007f5b499d5fa0 R15: 00007fff2b209a18 [ 826.773138][T12967] [ 827.763908][T12211] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 827.820176][T12211] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 827.877960][T12211] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 827.942906][T12211] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 828.491757][T12211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.536211][T12211] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.552150][T11661] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.553253][T11661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.584771][T11657] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.632933][T11657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.292691][T12211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.426489][T12211] veth0_vlan: entered promiscuous mode [ 829.466724][T12211] veth1_vlan: entered promiscuous mode [ 829.579276][T12211] veth0_macvtap: entered promiscuous mode [ 829.608840][T12211] veth1_macvtap: entered promiscuous mode [ 829.657627][T12211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.699904][T12211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.739159][T11637] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.739902][T11637] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.739948][T11637] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.739988][T11637] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.084760][T13070] FAULT_INJECTION: forcing a failure. [ 830.084760][T13070] name failslab, interval 1, probability 0, space 0, times 0 [ 830.084799][T13070] CPU: 0 UID: 0 PID: 13070 Comm: syz.8.1898 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 830.084824][T13070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 830.084839][T13070] Call Trace: [ 830.084848][T13070] [ 830.084858][T13070] dump_stack_lvl+0x189/0x250 [ 830.084890][T13070] ? __pfx____ratelimit+0x10/0x10 [ 830.084928][T13070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 830.084956][T13070] ? __pfx__printk+0x10/0x10 [ 830.084986][T13070] ? __pfx___might_resched+0x10/0x10 [ 830.085012][T13070] ? fs_reclaim_acquire+0x7d/0x100 [ 830.085049][T13070] should_fail_ex+0x46c/0x600 [ 830.085083][T13070] should_failslab+0xa8/0x100 [ 830.085109][T13070] __kmalloc_noprof+0xcc/0x7d0 [ 830.085130][T13070] ? tomoyo_encode+0x28b/0x550 [ 830.085166][T13070] tomoyo_encode+0x28b/0x550 [ 830.085203][T13070] tomoyo_realpath_from_path+0x58d/0x5d0 [ 830.085244][T13070] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 830.085270][T13070] tomoyo_path_number_perm+0x1e8/0x5a0 [ 830.085299][T13070] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 830.085330][T13070] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 830.085365][T13070] ? lockdep_hardirqs_on+0x9c/0x150 [ 830.085431][T13070] ? __fget_files+0x2a/0x420 [ 830.085460][T13070] ? __fget_files+0x3a6/0x420 [ 830.085483][T13070] ? __fget_files+0x2a/0x420 [ 830.085512][T13070] security_file_ioctl+0xcb/0x2d0 [ 830.085542][T13070] __se_sys_ioctl+0x47/0x170 [ 830.085577][T13070] do_syscall_64+0xfa/0xfa0 [ 830.085610][T13070] ? lockdep_hardirqs_on+0x9c/0x150 [ 830.085645][T13070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.085673][T13070] ? clear_bhb_loop+0x60/0xb0 [ 830.085701][T13070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.085723][T13070] RIP: 0033:0x7f5b4977eec9 [ 830.085742][T13070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.085761][T13070] RSP: 002b:00007f5b479c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 830.085785][T13070] RAX: ffffffffffffffda RBX: 00007f5b499d6090 RCX: 00007f5b4977eec9 [ 830.085801][T13070] RDX: 0000200000000240 RSI: 00000000c0884113 RDI: 0000000000000006 [ 830.085816][T13070] RBP: 00007f5b479c5090 R08: 0000000000000000 R09: 0000000000000000 [ 830.085830][T13070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.085843][T13070] R13: 00007f5b499d6128 R14: 00007f5b499d6090 R15: 00007fff2b209a18 [ 830.085877][T13070] [ 830.120319][T13070] ERROR: Out of memory at tomoyo_realpath_from_path. [ 830.416899][T11657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.416922][T11657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.591744][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.591769][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.925284][ T7664] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 831.083736][ T7664] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 831.083768][ T7664] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.099529][ T7664] usb 7-1: config 0 descriptor?? [ 831.112543][ T7664] cp210x 7-1:0.0: cp210x converter detected [ 831.314890][T13078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.315447][T13078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.349704][T13078] tmpfs: Cannot disable swap on remount [ 831.392925][T13091] netlink: 'syz.3.1908': attribute type 4 has an invalid length. [ 831.392954][T13091] netlink: 14345 bytes leftover after parsing attributes in process `syz.3.1908'. [ 831.586761][ T7664] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 831.626806][ T7664] usb 7-1: cp210x converter now attached to ttyUSB0 [ 831.796854][T13078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.797327][T13078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.839944][T10889] usb 7-1: USB disconnect, device number 54 [ 831.858802][T10889] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 831.975425][T10889] cp210x 7-1:0.0: device disconnected [ 832.172944][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 832.194008][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 832.200310][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 832.202209][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 832.203711][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 833.058839][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 833.776882][T13129] FAULT_INJECTION: forcing a failure. [ 833.776882][T13129] name failslab, interval 1, probability 0, space 0, times 0 [ 833.776919][T13129] CPU: 0 UID: 0 PID: 13129 Comm: syz.2.1922 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 833.776944][T13129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 833.776959][T13129] Call Trace: [ 833.776968][T13129] [ 833.776979][T13129] dump_stack_lvl+0x189/0x250 [ 833.777012][T13129] ? __pfx____ratelimit+0x10/0x10 [ 833.777046][T13129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.777075][T13129] ? __pfx__printk+0x10/0x10 [ 833.777109][T13129] ? __pfx___might_resched+0x10/0x10 [ 833.777140][T13129] ? fs_reclaim_acquire+0x7d/0x100 [ 833.777172][T13129] should_fail_ex+0x46c/0x600 [ 833.777217][T13129] ? security_file_alloc+0x34/0x330 [ 833.777245][T13129] should_failslab+0xa8/0x100 [ 833.777271][T13129] ? security_file_alloc+0x34/0x330 [ 833.777304][T13129] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 833.777350][T13129] security_file_alloc+0x34/0x330 [ 833.777380][T13129] init_file+0x99/0x320 [ 833.777413][T13129] alloc_empty_file+0x6e/0x1d0 [ 833.777443][T13129] path_openat+0x10d/0x3840 [ 833.777477][T13129] ? __lock_acquire+0xab9/0xd20 [ 833.777525][T13129] ? is_bpf_text_address+0x26/0x2b0 [ 833.777557][T13129] ? is_bpf_text_address+0x292/0x2b0 [ 833.777583][T13129] ? is_bpf_text_address+0x26/0x2b0 [ 833.777611][T13129] ? __pfx_path_openat+0x10/0x10 [ 833.777643][T13129] ? kernel_text_address+0xa5/0xe0 [ 833.777674][T13129] ? __kernel_text_address+0xd/0x40 [ 833.777703][T13129] ? unwind_get_return_address+0x4d/0x90 [ 833.777726][T13129] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 833.777766][T13129] ? arch_stack_walk+0xfc/0x150 [ 833.777812][T13129] do_filp_open+0x1fa/0x410 [ 833.777846][T13129] ? stack_depot_save_flags+0x40/0x860 [ 833.777880][T13129] ? __pfx_do_filp_open+0x10/0x10 [ 833.777946][T13129] ? do_open_execat+0x93/0x560 [ 833.777984][T13129] do_open_execat+0x135/0x560 [ 833.778016][T13129] ? __pfx_do_open_execat+0x10/0x10 [ 833.778064][T13129] alloc_bprm+0x28/0x5c0 [ 833.778100][T13129] do_execveat_common+0x1b3/0x6a0 [ 833.778149][T13129] __x64_sys_execveat+0xc4/0xe0 [ 833.778189][T13129] do_syscall_64+0xfa/0xfa0 [ 833.778223][T13129] ? lockdep_hardirqs_on+0x9c/0x150 [ 833.778258][T13129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.778280][T13129] ? clear_bhb_loop+0x60/0xb0 [ 833.778307][T13129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.778330][T13129] RIP: 0033:0x7fb33115eec9 [ 833.778350][T13129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.778370][T13129] RSP: 002b:00007fb32f3be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 833.778394][T13129] RAX: ffffffffffffffda RBX: 00007fb3313b5fa0 RCX: 00007fb33115eec9 [ 833.778412][T13129] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 833.778428][T13129] RBP: 00007fb32f3be090 R08: 0000000000000000 R09: 0000000000000000 [ 833.778443][T13129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.778458][T13129] R13: 00007fb3313b6038 R14: 00007fb3313b5fa0 R15: 00007fff5248c7c8 [ 833.778495][T13129] [ 834.320321][T11637] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.323301][ T61] Bluetooth: hci0: command tx timeout [ 834.323599][ T38] audit: type=1326 audit(1760450241.232:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13132 comm="syz.3.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748fb1eec9 code=0x7ffc0000 [ 834.339536][ T38] audit: type=1326 audit(1760450241.252:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13132 comm="syz.3.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f748fabaf79 code=0x7ffc0000 [ 834.341206][ T38] audit: type=1326 audit(1760450241.252:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13132 comm="syz.3.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f748fabaf79 code=0x7ffc0000 [ 834.343736][ T38] audit: type=1326 audit(1760450241.252:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13132 comm="syz.3.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f748fabaf79 code=0x7ffc0000 [ 834.353925][ T38] audit: type=1326 audit(1760450241.262:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13132 comm="syz.3.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f748fabaf79 code=0x7ffc0000 [ 834.353989][ T38] audit: type=1326 audit(1760450241.262:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13132 comm="syz.3.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f748fabaf79 code=0x7ffc0000 [ 834.354040][ T38] audit: type=1326 audit(1760450241.262:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13132 comm="syz.3.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f748fabaf79 code=0x7ffc0000 [ 834.355069][ T38] audit: type=1326 audit(1760450241.262:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13132 comm="syz.3.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f748fabaf79 code=0x7ffc0000 [ 834.356525][ T38] audit: type=1326 audit(1760450241.272:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13132 comm="syz.3.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f748fabaf79 code=0x7ffc0000 [ 834.358658][ T38] audit: type=1326 audit(1760450241.272:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13132 comm="syz.3.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f748fabaf79 code=0x7ffc0000 [ 836.057503][T11637] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.709778][ T61] Bluetooth: hci0: command tx timeout [ 837.425875][ C0] vkms_vblank_simulate: vblank timer overrun [ 837.500951][T11637] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.561242][T13175] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 837.619512][T13104] chnl_net:caif_netlink_parms(): no params data found [ 837.671397][T13178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.695176][ T1237] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 837.860308][ C0] vkms_vblank_simulate: vblank timer overrun [ 837.888165][ T1237] usb 7-1: Using ep0 maxpacket: 16 [ 837.893181][ T1237] usb 7-1: unable to get BOS descriptor or descriptor too short [ 837.898955][ T1237] usb 7-1: config 5 has an invalid interface number: 118 but max is 0 [ 837.898990][ T1237] usb 7-1: config 5 has no interface number 0 [ 837.899053][ T1237] usb 7-1: config 5 interface 118 has no altsetting 0 [ 837.904522][ T1237] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=1c.96 [ 837.904558][ T1237] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.904584][ T1237] usb 7-1: Product: syz [ 837.904603][ T1237] usb 7-1: Manufacturer: syz [ 837.904621][ T1237] usb 7-1: SerialNumber: syz [ 838.031874][T11637] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.256352][T13173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.256848][T13173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.270181][ T1237] imon_raw 7-1:5.118: IR endpoint missing [ 838.286796][ T1237] usb 7-1: USB disconnect, device number 55 [ 838.725156][ T61] Bluetooth: hci0: command tx timeout [ 838.768257][ C0] vkms_vblank_simulate: vblank timer overrun [ 839.546032][ C0] vkms_vblank_simulate: vblank timer overrun [ 839.862506][T13104] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.862604][T13104] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.862794][T13104] bridge_slave_0: entered allmulticast mode [ 839.877639][T13104] bridge_slave_0: entered promiscuous mode [ 839.973433][T13104] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.973656][T13104] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.974032][T13104] bridge_slave_1: entered allmulticast mode [ 839.978823][T13104] bridge_slave_1: entered promiscuous mode [ 840.244197][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.435213][ T38] kauditd_printk_skb: 227 callbacks suppressed [ 840.435235][ T38] audit: type=1326 audit(1760451015.361:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13200 comm="syz.6.1948" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fbaeec9 code=0x0 [ 840.777355][ T61] Bluetooth: hci0: command tx timeout [ 840.852643][T13104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.934817][ C0] vkms_vblank_simulate: vblank timer overrun [ 840.941029][T13104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.062299][ C0] vkms_vblank_simulate: vblank timer overrun [ 841.527175][T13236] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1958'. [ 841.995531][T11637] bridge_slave_1: left allmulticast mode [ 841.995565][T11637] bridge_slave_1: left promiscuous mode [ 841.995812][T11637] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.070335][T11637] bridge_slave_0: left allmulticast mode [ 842.070369][T11637] bridge_slave_0: left promiscuous mode [ 842.070647][T11637] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.365821][T13247] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 842.429024][ T5995] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 842.581063][ T5995] usb 7-1: Using ep0 maxpacket: 16 [ 842.596089][ T5995] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.596124][ T5995] usb 7-1: config 0 interface 0 has no altsetting 0 [ 842.596159][ T5995] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 842.596183][ T5995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.609161][ T5995] usb 7-1: config 0 descriptor?? [ 842.636279][ T7664] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 842.833264][ T7664] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 842.833300][ T7664] usb 4-1: config 179 has no interface number 0 [ 842.833358][ T7664] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 842.833387][ T7664] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 842.833413][ T7664] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 842.833440][ T7664] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 842.833468][ T7664] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 842.833514][ T7664] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 842.833540][ T7664] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.904963][T13247] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 842.919703][ T7664] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 842.934310][ T7664] xpad 4-1:179.65: probe with driver xpad failed with error -90 [ 843.240437][ T5995] nzxt-smart2 0003:1E71:2009.001A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 843.403156][T13245] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 843.541862][T13245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.694665][ T5995] usb 4-1: USB disconnect, device number 6 [ 843.805010][ T5874] usb 7-1: USB disconnect, device number 56 [ 845.763691][T11637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.820659][T11637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.848749][T11637] bond0 (unregistering): Released all slaves [ 845.891984][T13253] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 846.109156][T13104] team0: Port device team_slave_0 added [ 846.184111][T13104] team0: Port device team_slave_1 added [ 847.024969][T11655] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 847.530770][T13104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.530791][T13104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.530824][T13104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.906129][T13104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.906158][T13104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.906190][T13104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.140134][ T38] audit: type=1400 audit(1760451024.494:4265): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=13266 comm="syz.3.1968" daddr=::ffff:172.20.20.187 dest=5 [ 849.499748][T13271] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1968'. [ 850.553940][T13104] hsr_slave_0: entered promiscuous mode [ 850.569879][T13104] hsr_slave_1: entered promiscuous mode [ 850.571382][T13104] debugfs: 'hsr0' already exists in 'hsr' [ 850.571414][T13104] Cannot create hsr debugfs directory [ 850.813884][T11637] hsr_slave_0: left promiscuous mode [ 850.860531][T11637] hsr_slave_1: left promiscuous mode [ 850.861704][T11637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.861734][T11637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.937951][T11637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.938168][T11637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.587979][T11637] veth1_macvtap: left promiscuous mode [ 851.588062][T11637] veth0_macvtap: left promiscuous mode [ 851.588249][T11637] veth1_vlan: left promiscuous mode [ 851.588388][T11637] veth0_vlan: left promiscuous mode [ 853.655267][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2003'. [ 854.012197][ T1237] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 854.154564][ T1237] usb 7-1: Using ep0 maxpacket: 8 [ 854.158142][ T1237] usb 7-1: unable to get BOS descriptor or descriptor too short [ 854.160318][ T1237] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 854.160355][ T1237] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 854.160383][ T1237] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 854.160408][ T1237] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 854.160433][ T1237] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 854.160456][ T1237] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 854.160482][ T1237] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 854.160506][ T1237] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 854.163873][ T1237] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 854.320314][ T1237] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.320343][ T1237] usb 7-1: Product: syz [ 854.320360][ T1237] usb 7-1: Manufacturer: syz [ 854.320376][ T1237] usb 7-1: SerialNumber: syz [ 854.362340][ T1237] usb 7-1: config 0 descriptor?? [ 854.409416][T13355] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 854.486460][ T1237] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 854.735222][ T1237] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 855.327427][T11637] team0 (unregistering): Port device team_slave_1 removed [ 855.708122][T11637] team0 (unregistering): Port device team_slave_0 removed [ 858.833852][T13431] FAULT_INJECTION: forcing a failure. [ 858.833852][T13431] name failslab, interval 1, probability 0, space 0, times 0 [ 858.833894][T13431] CPU: 0 UID: 0 PID: 13431 Comm: syz.2.2042 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 858.833921][T13431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 858.833936][T13431] Call Trace: [ 858.833946][T13431] [ 858.833957][T13431] dump_stack_lvl+0x189/0x250 [ 858.833991][T13431] ? __pfx____ratelimit+0x10/0x10 [ 858.834026][T13431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 858.834054][T13431] ? __pfx__printk+0x10/0x10 [ 858.834090][T13431] ? __pfx___might_resched+0x10/0x10 [ 858.834125][T13431] ? fs_reclaim_acquire+0x7d/0x100 [ 858.834158][T13431] should_fail_ex+0x46c/0x600 [ 858.834195][T13431] ? __alloc_skb+0x112/0x2d0 [ 858.834227][T13431] should_failslab+0xa8/0x100 [ 858.834254][T13431] ? __alloc_skb+0x112/0x2d0 [ 858.834297][T13431] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 858.834335][T13431] ? netlink_autobind+0xdb/0x300 [ 858.834376][T13431] __alloc_skb+0x112/0x2d0 [ 858.834414][T13431] netlink_sendmsg+0x5c6/0xb30 [ 858.834446][T13431] ? is_bpf_text_address+0x26/0x2b0 [ 858.834486][T13431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.834528][T13431] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 858.834550][T13431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 858.834579][T13431] __sock_sendmsg+0x21c/0x270 [ 858.834605][T13431] ____sys_sendmsg+0x508/0x820 [ 858.834629][T13431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 858.834656][T13431] ? import_iovec+0x74/0xa0 [ 858.834679][T13431] ___sys_sendmsg+0x21f/0x2a0 [ 858.834699][T13431] ? __pfx____sys_sendmsg+0x10/0x10 [ 858.834750][T13431] ? __fget_files+0x2a/0x420 [ 858.834770][T13431] ? __fget_files+0x3a6/0x420 [ 858.834799][T13431] __x64_sys_sendmsg+0x1a1/0x260 [ 858.834820][T13431] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 858.834848][T13431] ? __pfx_ksys_write+0x10/0x10 [ 858.834881][T13431] ? do_syscall_64+0xbe/0xfa0 [ 858.834915][T13431] do_syscall_64+0xfa/0xfa0 [ 858.834942][T13431] ? lockdep_hardirqs_on+0x9c/0x150 [ 858.834971][T13431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.834990][T13431] ? clear_bhb_loop+0x60/0xb0 [ 858.835013][T13431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.835032][T13431] RIP: 0033:0x7fb33115eec9 [ 858.835048][T13431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 858.835066][T13431] RSP: 002b:00007fb32f3be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 858.835087][T13431] RAX: ffffffffffffffda RBX: 00007fb3313b5fa0 RCX: 00007fb33115eec9 [ 858.835102][T13431] RDX: 0000000000040804 RSI: 00002000000002c0 RDI: 0000000000000003 [ 858.835114][T13431] RBP: 00007fb32f3be090 R08: 0000000000000000 R09: 0000000000000000 [ 858.835127][T13431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.835138][T13431] R13: 00007fb3313b6038 R14: 00007fb3313b5fa0 R15: 00007fff5248c7c8 [ 858.835169][T13431] [ 860.208355][T10880] usb 7-1: USB disconnect, device number 57 [ 860.880305][ T5812] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 861.010440][T13469] tipc: Enabling of bearer rejected, failed to enable media [ 861.039104][ T5812] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 861.039163][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.071834][ T5812] usb 7-1: config 0 descriptor?? [ 861.076085][ T5812] cp210x 7-1:0.0: cp210x converter detected [ 861.273763][T13461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.275330][T13461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.546560][T13478] netlink: 'syz.3.2062': attribute type 29 has an invalid length. [ 861.585113][ T5812] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 861.615081][ T5812] usb 7-1: cp210x converter now attached to ttyUSB0 [ 861.791849][T13461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.792355][T13461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.795472][ T5995] usb 7-1: USB disconnect, device number 58 [ 861.823072][ T5995] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 861.845034][T13478] wireguard0: entered promiscuous mode [ 862.071600][ T5995] cp210x 7-1:0.0: device disconnected [ 863.393949][T13489] Bluetooth: MGMT ver 1.23 [ 863.393990][T13489] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 863.785640][ T5812] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 863.928594][ T5812] usb 4-1: Using ep0 maxpacket: 16 [ 863.932283][ T5812] usb 4-1: config 1 has an invalid interface number: 147 but max is 1 [ 863.932319][ T5812] usb 4-1: config 1 has an invalid interface number: 248 but max is 1 [ 863.932346][ T5812] usb 4-1: config 1 has no interface number 0 [ 863.932367][ T5812] usb 4-1: config 1 has no interface number 1 [ 863.932440][ T5812] usb 4-1: config 1 interface 248 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 863.932476][ T5812] usb 4-1: config 1 interface 248 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 863.932508][ T5812] usb 4-1: config 1 interface 248 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 863.932539][ T5812] usb 4-1: config 1 interface 248 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 863.932587][ T5812] usb 4-1: config 1 interface 248 altsetting 0 endpoint 0xE has invalid maxpacket 975, setting to 64 [ 864.232625][T13502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 864.898917][ T5812] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff78, bcdDevice=1e.1d [ 864.913257][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.914053][ T5812] usb 4-1: Product: ᪩薰쪺泋ж昘礮ረ܎爪⣔疇릚Ꜭ쁂ྐ늀㴝셓憫䞨⨃쐨뻭꩸퓍웮妬对咈빚ǩꩦᑁ寓朋텈깿찡ꁙ륷껸䃜ⴧꐺ⼕⧯ꅅ闦梩⚲篨㍮嘀兘㡕乔㗝筌髮醂椁ﶏﴓ祝➀㫕榋冴⭂꠆⸟熴䐮ᙓאַឱ츨覴䙹㛐㪞㑉溯〱ㆄ︞꡸阼淣莬骈辝憈⧿㉭씧ᐁ⃺輋 [ 864.914414][ T5812] usb 4-1: Manufacturer: ｹ켵ᗑ봴蹖왥䎃㜮麞㨥⢦譊㰣ࢻ퉑秗守㑸ꁮ쳰쯌䱮ᡑ蓳崐똓왝䄞姴踈藡㸍℮໯곻坮䈓䶱䗄ূ᢮Ꙋꡭ犡ꥶ耎蒙㷩禀浩构琫荠읆鑛ᮯ೎䃰㵡鿀ฦ㶴ᑌ໺笿苬洐벒숞Ą⣊ȗ뱸煩豏붡信锭쵋컦ᇹ돞怾揄䠋痿︙퓠됒殜ϥ珀 [ 864.915088][ T5812] usb 4-1: SerialNumber: syz [ 865.836592][ T5812] option 4-1:1.147: GSM modem (1-port) converter detected [ 865.941170][ T5812] usb 4-1: USB disconnect, device number 7 [ 865.943728][ T5812] option 4-1:1.147: device disconnected [ 866.100010][ T5790] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 866.243179][ T5790] usb 7-1: Using ep0 maxpacket: 32 [ 866.270728][ T5790] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 866.289168][ T5790] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 866.289202][ T5790] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 866.289225][ T5790] usb 7-1: Product: syz [ 866.289242][ T5790] usb 7-1: Manufacturer: syz [ 866.289259][ T5790] usb 7-1: SerialNumber: syz [ 866.332409][ T5790] usb 7-1: config 0 descriptor?? [ 866.354817][T13104] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 866.437321][T13104] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 866.496182][T13104] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 866.645626][T13104] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 867.145083][ T5790] usb 7-1: USB disconnect, device number 59 [ 867.533265][ T38] audit: type=1400 audit(1760451043.779:4266): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="^" object="_" requested=w pid=13537 comm="syz.3.2086" src=20249 daddr=ff02::1 dest=20000 netif=rose20 [ 867.581731][T13104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.756405][T13104] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.146444][T11666] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.152756][T11666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.519258][T11666] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.519387][T11666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.954952][T13574] bpf: Bad value for 'smackfsdef' [ 870.049586][T13572] 9pnet_fd: Insufficient options for proto=fd [ 870.281854][ T5812] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 870.415023][ T5812] usb 7-1: device descriptor read/64, error -71 [ 870.502118][T13593] FAULT_INJECTION: forcing a failure. [ 870.502118][T13593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.502158][T13593] CPU: 0 UID: 0 PID: 13593 Comm: syz.3.2104 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 870.502184][T13593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 870.502198][T13593] Call Trace: [ 870.502208][T13593] [ 870.502219][T13593] dump_stack_lvl+0x189/0x250 [ 870.502251][T13593] ? __pfx____ratelimit+0x10/0x10 [ 870.502284][T13593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 870.502312][T13593] ? __pfx__printk+0x10/0x10 [ 870.502340][T13593] ? __might_fault+0xb0/0x130 [ 870.502377][T13593] should_fail_ex+0x46c/0x600 [ 870.502413][T13593] _copy_from_user+0x2d/0xb0 [ 870.502439][T13593] __sys_bpf+0x1e3/0x860 [ 870.502468][T13593] ? __pfx___sys_bpf+0x10/0x10 [ 870.502489][T13593] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 870.502544][T13593] ? ksys_write+0x230/0x260 [ 870.502583][T13593] ? __pfx_ksys_write+0x10/0x10 [ 870.502626][T13593] __x64_sys_bpf+0x7c/0x90 [ 870.502661][T13593] do_syscall_64+0xfa/0xfa0 [ 870.502693][T13593] ? lockdep_hardirqs_on+0x9c/0x150 [ 870.502729][T13593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.502752][T13593] ? clear_bhb_loop+0x60/0xb0 [ 870.502779][T13593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.502800][T13593] RIP: 0033:0x7f748fb1eec9 [ 870.502820][T13593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.502839][T13593] RSP: 002b:00007f748dd86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 870.502862][T13593] RAX: ffffffffffffffda RBX: 00007f748fd75fa0 RCX: 00007f748fb1eec9 [ 870.502878][T13593] RDX: 000000000000001f RSI: 0000200000000380 RDI: 0000000000000012 [ 870.502892][T13593] RBP: 00007f748dd86090 R08: 0000000000000000 R09: 0000000000000000 [ 870.502907][T13593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 870.502920][T13593] R13: 00007f748fd76038 R14: 00007f748fd75fa0 R15: 00007ffc28dd2a28 [ 870.502957][T13593] [ 870.681916][ T5812] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 870.807815][ T5812] usb 7-1: device descriptor read/64, error -71 [ 871.010926][T13104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.072577][ C0] vkms_vblank_simulate: vblank timer overrun [ 871.624726][ T5812] usb usb7-port1: attempt power cycle [ 871.679515][T13104] veth0_vlan: entered promiscuous mode [ 871.780261][T13104] veth1_vlan: entered promiscuous mode [ 871.936813][T13614] Invalid logical block size (-1) [ 872.015149][ T5812] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 872.041301][ T5812] usb 7-1: device descriptor read/8, error -71 [ 872.264894][ C0] vkms_vblank_simulate: vblank timer overrun [ 872.288724][ T5812] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 872.306985][ T5812] usb 7-1: device descriptor read/8, error -71 [ 872.406622][ T5812] usb usb7-port1: unable to enumerate USB device [ 872.552618][ C0] vkms_vblank_simulate: vblank timer overrun [ 872.833798][T13104] veth0_macvtap: entered promiscuous mode [ 872.882513][T13104] veth1_macvtap: entered promiscuous mode [ 873.158432][ C0] vkms_vblank_simulate: vblank timer overrun [ 873.225952][T13104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.267097][T13104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.292322][T11656] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.307991][T11658] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.313126][T11657] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.323936][T11637] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.908731][ C0] vkms_vblank_simulate: vblank timer overrun [ 874.222535][ C0] vkms_vblank_simulate: vblank timer overrun [ 874.933237][T13664] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 875.000803][T11662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.000833][T11662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.242118][T11661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.242142][T11661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.408026][T13676] fuse: Bad value for 'fd' [ 875.616922][T13691] netlink: 'syz.6.2141': attribute type 16 has an invalid length. [ 875.616950][T13691] netlink: 'syz.6.2141': attribute type 17 has an invalid length. [ 875.654589][T10888] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 875.689241][T13690] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1906'. [ 875.726664][T13691] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.780655][T13691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 875.789171][T10888] usb 4-1: device descriptor read/64, error -71 [ 875.826226][ T7433] Bluetooth: hci2: command 0x0406 tx timeout [ 876.035317][T10888] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 876.225822][T10888] usb 4-1: device descriptor read/64, error -71 [ 876.334459][T10888] usb usb4-port1: attempt power cycle [ 876.606923][ T5790] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 876.642069][ T38] audit: type=1400 audit(1760451053.364:4267): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=13717 comm="syz.9.2154" daddr=fc01:: [ 876.683234][T10888] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 876.703386][T10888] usb 4-1: device descriptor read/8, error -71 [ 876.752982][ T5790] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 876.753016][ T5790] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 876.753060][ T5790] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 876.754830][ T5790] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 876.754853][ T5790] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 876.754869][ T5790] usb 7-1: SerialNumber: syz [ 876.825918][ T5995] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 876.987600][ T5995] usb 9-1: device descriptor read/64, error -71 [ 876.997436][T10888] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 877.026500][T10888] usb 4-1: device descriptor read/8, error -71 [ 877.133182][T10888] usb usb4-port1: unable to enumerate USB device [ 877.235184][ T5995] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 877.397141][ T5995] usb 9-1: device descriptor read/64, error -71 [ 877.545073][ T5995] usb usb9-port1: attempt power cycle [ 877.921506][ T5995] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 877.954017][ T5995] usb 9-1: device descriptor read/8, error -71 [ 878.178911][ T5995] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 878.203402][ T5995] usb 9-1: device descriptor read/8, error -71 [ 878.306521][ T5995] usb usb9-port1: unable to enumerate USB device [ 878.498773][T13732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.499913][T13732] batadv_slave_0: entered promiscuous mode [ 878.729438][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 878.729591][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.743555][T11660] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 879.030137][ T5790] usb 7-1: 0:2 : does not exist [ 879.030239][ T5790] usb 7-1: unit 5 not found! [ 879.098362][ T5790] usb 7-1: USB disconnect, device number 64 [ 880.399623][ T5812] kernel write not supported for file /uhid (pid: 5812 comm: kworker/1:4) [ 880.479947][T13764] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 880.480873][T13764] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 880.482053][T13764] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 882.650327][T13794] Smack: duplicate mount options [ 883.130653][ T38] audit: type=1400 audit(1760451060.177:4268): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=13814 comm="syz.3.2193" daddr=::ffff:172.20.20.11 dest=20003 [ 883.132461][T13816] netlink: 'syz.3.2193': attribute type 7 has an invalid length. [ 883.132489][T13816] netlink: 'syz.3.2193': attribute type 5 has an invalid length. [ 883.132507][T13816] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2193'. [ 884.887992][T13825] FAULT_INJECTION: forcing a failure. [ 884.887992][T13825] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 884.888042][T13825] CPU: 1 UID: 0 PID: 13825 Comm: syz.6.2195 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 884.888068][T13825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 884.888083][T13825] Call Trace: [ 884.888093][T13825] [ 884.888104][T13825] dump_stack_lvl+0x189/0x250 [ 884.888136][T13825] ? __pfx____ratelimit+0x10/0x10 [ 884.888171][T13825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 884.888199][T13825] ? __pfx__printk+0x10/0x10 [ 884.888229][T13825] ? fs_reclaim_acquire+0x7d/0x100 [ 884.888267][T13825] should_fail_ex+0x46c/0x600 [ 884.888303][T13825] prepare_alloc_pages+0x213/0x670 [ 884.888341][T13825] __alloc_frozen_pages_noprof+0x123/0x370 [ 884.888376][T13825] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 884.888418][T13825] ? policy_nodemask+0x27c/0x720 [ 884.888452][T13825] alloc_pages_mpol+0xd1/0x380 [ 884.888482][T13825] alloc_pages_noprof+0xcf/0x1e0 [ 884.888513][T13825] alloc_pages_exact_noprof+0x3b/0xc0 [ 884.888544][T13825] snd_pcm_attach_substream+0x633/0xb50 [ 884.888593][T13825] snd_pcm_open_substream+0xb9/0x23a0 [ 884.888629][T13825] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 884.888664][T13825] ? lockdep_hardirqs_on+0x9c/0x150 [ 884.888702][T13825] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 884.888739][T13825] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 884.888777][T13825] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 884.888807][T13825] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 884.888838][T13825] ? mutex_lock_nested+0x154/0x1d0 [ 884.888864][T13825] ? snd_pcm_open+0x196/0x670 [ 884.888892][T13825] snd_pcm_open+0x1f9/0x670 [ 884.888914][T13825] ? lockdep_hardirqs_on+0x9c/0x150 [ 884.888961][T13825] ? __pfx_snd_pcm_open+0x10/0x10 [ 884.888985][T13825] ? __pfx_default_wake_function+0x10/0x10 [ 884.889017][T13825] ? snd_lookup_minor_data+0x14b/0x180 [ 884.889200][T13825] snd_pcm_capture_open+0x72/0xe0 [ 884.889233][T13825] chrdev_open+0x4cf/0x5e0 [ 884.889261][T13825] ? __pfx_chrdev_open+0x10/0x10 [ 884.889288][T13825] ? fsnotify_open_perm_and_set_mode+0x116/0x620 [ 884.889322][T13825] ? __pfx_chrdev_open+0x10/0x10 [ 884.889347][T13825] do_dentry_open+0x9b1/0x1350 [ 884.889390][T13825] vfs_open+0x3b/0x350 [ 884.889416][T13825] ? path_openat+0x2ed9/0x3840 [ 884.889454][T13825] path_openat+0x2ef1/0x3840 [ 884.889495][T13825] ? try_to_take_rt_mutex+0x840/0xb00 [ 884.889559][T13825] ? __pfx_path_openat+0x10/0x10 [ 884.889594][T13825] ? do_raw_spin_lock+0x121/0x290 [ 884.889643][T13825] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 884.889681][T13825] ? lockdep_hardirqs_on+0x9c/0x150 [ 884.889718][T13825] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 884.889763][T13825] do_filp_open+0x1fa/0x410 [ 884.889799][T13825] ? __pfx_do_filp_open+0x10/0x10 [ 884.889828][T13825] ? rt_mutex_slowunlock+0x493/0x8a0 [ 884.890064][T13825] ? alloc_fd+0x64f/0x6c0 [ 884.890119][T13825] do_sys_openat2+0x121/0x1c0 [ 884.890157][T13825] ? __pfx_do_sys_openat2+0x10/0x10 [ 884.890193][T13825] ? ksys_write+0x230/0x260 [ 884.890232][T13825] ? __pfx_ksys_write+0x10/0x10 [ 884.890268][T13825] __x64_sys_openat+0x138/0x170 [ 884.890304][T13825] do_syscall_64+0xfa/0xfa0 [ 884.890337][T13825] ? lockdep_hardirqs_on+0x9c/0x150 [ 884.890374][T13825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.890398][T13825] ? clear_bhb_loop+0x60/0xb0 [ 884.890427][T13825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.890449][T13825] RIP: 0033:0x7f3e2fbad710 [ 884.890470][T13825] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 884.890490][T13825] RSP: 002b:00007f3e2ddd3b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 884.890516][T13825] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3e2fbad710 [ 884.890533][T13825] RDX: 0000000000000000 RSI: 00007f3e2ddd3c10 RDI: 00000000ffffff9c [ 884.890549][T13825] RBP: 00007f3e2ddd3c10 R08: 0000000000000000 R09: 0000000000000000 [ 884.890563][T13825] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 884.890579][T13825] R13: 00007f3e2fe06218 R14: 00007f3e2fe06180 R15: 00007ffec7cb95c8 [ 884.890618][T13825] [ 887.266006][T10889] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 887.408717][T10889] usb 7-1: Using ep0 maxpacket: 8 [ 887.421493][T10889] usb 7-1: no configurations [ 887.421519][T10889] usb 7-1: can't read configurations, error -22 [ 887.451798][ T5995] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 887.552934][T10889] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 887.611458][ T5995] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.611491][ T5995] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 887.611540][ T5995] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 887.613324][ T5995] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 887.613354][ T5995] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 887.613378][ T5995] usb 9-1: SerialNumber: syz [ 887.780619][T10889] usb 7-1: Using ep0 maxpacket: 8 [ 887.781553][T10889] usb 7-1: no configurations [ 887.781571][T10889] usb 7-1: can't read configurations, error -22 [ 887.782053][T10889] usb usb7-port1: attempt power cycle [ 888.122895][T10889] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 888.142903][T10889] usb 7-1: Using ep0 maxpacket: 8 [ 888.143947][T10889] usb 7-1: no configurations [ 888.143965][T10889] usb 7-1: can't read configurations, error -22 [ 888.265865][T10889] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 888.285779][T10889] usb 7-1: Using ep0 maxpacket: 8 [ 888.287041][T10889] usb 7-1: no configurations [ 888.287062][T10889] usb 7-1: can't read configurations, error -22 [ 888.288248][T10889] usb usb7-port1: unable to enumerate USB device [ 888.809118][ T7662] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 889.040252][ T7662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.040293][ T7662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.040320][ T7662] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 889.040367][ T7662] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 889.040394][ T7662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.049695][ T7662] usb 4-1: config 0 descriptor?? [ 889.681039][ T7662] plantronics 0003:047F:FFFF.001B: reserved main item tag 0xd [ 889.746750][ T7662] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 890.512527][ T5995] usb 9-1: 0:2 : does not exist [ 890.512610][ T5995] usb 9-1: unit 5 not found! [ 890.567640][ T5995] usb 9-1: USB disconnect, device number 31 [ 890.986165][ T7664] usb 4-1: USB disconnect, device number 12 [ 891.126574][ T7662] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 891.310776][T13890] QAT: failed to copy from user. [ 891.334434][ T7662] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 891.334469][ T7662] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.334531][ T7662] usb 7-1: Product: syz [ 891.334548][ T7662] usb 7-1: Manufacturer: syz [ 891.334564][ T7662] usb 7-1: SerialNumber: syz [ 891.360474][ T7662] usb 7-1: config 0 descriptor?? [ 891.578241][ T7662] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 891.848158][ T38] audit: type=1400 audit(1760451069.342:4269): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=13907 comm="syz.8.2226" daddr=fe80::aa [ 892.566624][ T5790] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 892.803909][ T5790] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.803930][ T5790] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 892.803960][ T5790] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 893.310287][ T5790] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 893.310536][ T5790] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 893.310755][ T5790] usb 9-1: SerialNumber: syz [ 893.662959][T13933] ntfs3(nullb0): Primary boot signature is not NTFS. [ 893.792839][T13933] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 894.235749][ T7662] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 894.359149][ T5812] usb 7-1: USB disconnect, device number 69 [ 896.692862][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.435293][ T5790] usb 9-1: 0:2 : does not exist [ 897.435360][ T5790] usb 9-1: unit 5 not found! [ 897.604517][ T5790] usb 9-1: USB disconnect, device number 32 [ 897.904266][T13952] input: syz0 as /devices/virtual/input/input18 [ 899.982903][ T7662] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 900.021277][T13992] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2255'. [ 900.021325][T13992] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2255'. [ 900.021343][T13992] netlink: 58 bytes leftover after parsing attributes in process `syz.9.2255'. [ 900.153935][ T7662] usb 7-1: Using ep0 maxpacket: 16 [ 900.156963][ T7662] usb 7-1: config 1 has an invalid interface number: 147 but max is 1 [ 900.157003][ T7662] usb 7-1: config 1 has an invalid interface number: 248 but max is 1 [ 900.157028][ T7662] usb 7-1: config 1 has no interface number 0 [ 900.157046][ T7662] usb 7-1: config 1 has no interface number 1 [ 900.157113][ T7662] usb 7-1: config 1 interface 248 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 900.157145][ T7662] usb 7-1: config 1 interface 248 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 900.157173][ T7662] usb 7-1: config 1 interface 248 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 900.157201][ T7662] usb 7-1: config 1 interface 248 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 900.157228][ T7662] usb 7-1: config 1 interface 248 altsetting 0 endpoint 0xE has invalid maxpacket 975, setting to 64 [ 900.160696][ T7662] usb 7-1: New USB device found, idVendor=19d2, idProduct=ff78, bcdDevice=1e.1d [ 900.160731][ T7662] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.160754][ T7662] usb 7-1: Product: ᪩薰쪺泋ж昘礮ረ܎爪⣔疇릚Ꜭ쁂ྐ늀㴝셓憫䞨⨃쐨뻭꩸퓍웮妬对咈빚ǩꩦᑁ寓朋텈깿찡ꁙ륷껸䃜ⴧꐺ⼕⧯ꅅ闦梩⚲篨㍮嘀兘㡕乔㗝筌髮醂椁ﶏﴓ祝➀㫕榋冴⭂꠆⸟熴䐮ᙓאַឱ츨覴䙹㛐㪞㑉溯〱ㆄ︞꡸阼淣莬骈辝憈⧿㉭씧ᐁ⃺輋 [ 900.160794][ T7662] usb 7-1: Manufacturer: ｹ켵ᗑ봴蹖왥䎃㜮麞㨥⢦譊㰣ࢻ퉑秗守㑸ꁮ쳰쯌䱮ᡑ蓳崐똓왝䄞姴踈藡㸍℮໯곻坮䈓䶱䗄ূ᢮Ꙋꡭ犡ꥶ耎蒙㷩禀浩构琫荠읆鑛ᮯ೎䃰㵡鿀ฦ㶴ᑌ໺笿苬洐벒숞Ą⣊ȗ뱸煩豏붡信锭쵋컦ᇹ돞怾揄䠋痿︙퓠됒殜ϥ珀 [ 900.160829][ T7662] usb 7-1: SerialNumber: syz [ 900.423726][ T7662] option 7-1:1.147: GSM modem (1-port) converter detected [ 900.561409][ T7662] usb 7-1: USB disconnect, device number 70 [ 900.573774][ T7662] option 7-1:1.147: device disconnected [ 903.157070][ T7662] usb 7-1: new full-speed USB device number 71 using dummy_hcd [ 904.175174][ T7662] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 904.188246][ T7662] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 904.188287][ T7662] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.188313][ T7662] usb 7-1: Product: syz [ 904.188332][ T7662] usb 7-1: Manufacturer: syz [ 904.188351][ T7662] usb 7-1: SerialNumber: syz [ 904.223581][ T7662] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 904.458667][ T7662] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 904.535614][ T7662] usb 7-1: USB disconnect, device number 71 [ 905.601034][T14051] FAULT_INJECTION: forcing a failure. [ 905.601034][T14051] name failslab, interval 1, probability 0, space 0, times 0 [ 905.601076][T14051] CPU: 1 UID: 0 PID: 14051 Comm: syz.2.2276 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 905.601103][T14051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 905.601119][T14051] Call Trace: [ 905.601128][T14051] [ 905.601139][T14051] dump_stack_lvl+0x189/0x250 [ 905.601173][T14051] ? __pfx____ratelimit+0x10/0x10 [ 905.601209][T14051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 905.601238][T14051] ? __pfx__printk+0x10/0x10 [ 905.601276][T14051] ? __pfx___might_resched+0x10/0x10 [ 905.601311][T14051] ? fs_reclaim_acquire+0x7d/0x100 [ 905.601344][T14051] should_fail_ex+0x46c/0x600 [ 905.601380][T14051] ? __alloc_skb+0x112/0x2d0 [ 905.601413][T14051] should_failslab+0xa8/0x100 [ 905.601441][T14051] ? __alloc_skb+0x112/0x2d0 [ 905.601473][T14051] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 905.601522][T14051] ? __lock_acquire+0xab9/0xd20 [ 905.601552][T14051] __alloc_skb+0x112/0x2d0 [ 905.601590][T14051] alloc_skb_with_frags+0xca/0x890 [ 905.601637][T14051] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 905.601679][T14051] sock_alloc_send_pskb+0x859/0x990 [ 905.601727][T14051] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 905.601761][T14051] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 905.601811][T14051] unix_dgram_sendmsg+0x461/0x1850 [ 905.601845][T14051] ? do_wp_page+0x1556/0x4930 [ 905.601874][T14051] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 905.601926][T14051] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 905.601956][T14051] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 905.602005][T14051] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 905.602030][T14051] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 905.602063][T14051] __sock_sendmsg+0x21c/0x270 [ 905.602096][T14051] ____sys_sendmsg+0x534/0x820 [ 905.602125][T14051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 905.602161][T14051] ? import_iovec+0x74/0xa0 [ 905.602190][T14051] ___sys_sendmsg+0x21f/0x2a0 [ 905.602216][T14051] ? __pfx____sys_sendmsg+0x10/0x10 [ 905.602418][T14051] ? __might_fault+0xb0/0x130 [ 905.602451][T14051] __sys_sendmmsg+0x22d/0x430 [ 905.602482][T14051] ? __pfx___sys_sendmmsg+0x10/0x10 [ 905.602530][T14051] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 905.602581][T14051] ? ksys_write+0x230/0x260 [ 905.602621][T14051] ? __pfx_ksys_write+0x10/0x10 [ 905.602664][T14051] __x64_sys_sendmmsg+0xa0/0xc0 [ 905.602688][T14051] do_syscall_64+0xfa/0xfa0 [ 905.602720][T14051] ? lockdep_hardirqs_on+0x9c/0x150 [ 905.602757][T14051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.602782][T14051] ? clear_bhb_loop+0x60/0xb0 [ 905.602812][T14051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.602837][T14051] RIP: 0033:0x7fb33115eec9 [ 905.602858][T14051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.602879][T14051] RSP: 002b:00007fb32f3be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 905.602904][T14051] RAX: ffffffffffffffda RBX: 00007fb3313b5fa0 RCX: 00007fb33115eec9 [ 905.602923][T14051] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000005 [ 905.602939][T14051] RBP: 00007fb32f3be090 R08: 0000000000000000 R09: 0000000000000000 [ 905.602955][T14051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 905.602969][T14051] R13: 00007fb3313b6038 R14: 00007fb3313b5fa0 R15: 00007fff5248c7c8 [ 905.603008][T14051] [ 905.936638][ T38] audit: type=1400 audit(1760451084.113:4270): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=14052 comm="syz.9.2275" daddr=fc00:: dest=20001 [ 906.411302][ T38] audit: type=1400 audit(1760451084.616:4271): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=14063 comm="syz.9.2281" dest=20000 [ 907.598907][T10880] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 907.855762][T10880] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 907.855801][T10880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.860210][T10880] usb 9-1: config 0 descriptor?? [ 907.864964][T10880] cp210x 9-1:0.0: cp210x converter detected [ 908.072084][T14090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.074418][T14090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.281946][T10880] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 908.384551][T10880] usb 9-1: cp210x converter now attached to ttyUSB0 [ 908.496287][T14090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.496766][T14090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.507349][T10880] usb 9-1: USB disconnect, device number 33 [ 908.643506][T10880] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 908.770261][T10880] cp210x 9-1:0.0: device disconnected [ 909.195681][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2302'. [ 909.195734][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2302'. [ 909.197254][T11655] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 910.758757][T14143] cgroup: fork rejected by pids controller in /syz2 [ 912.750408][T14190] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 913.811286][ C1] vkms_vblank_simulate: vblank timer overrun [ 914.490456][T10889] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 914.635764][T10889] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 914.635800][T10889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.674183][T10889] usb 7-1: config 0 descriptor?? [ 914.702290][T10889] cp210x 7-1:0.0: cp210x converter detected [ 914.873285][T14323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.873769][T14323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.073306][T10889] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 915.132690][T10889] usb 7-1: cp210x converter now attached to ttyUSB0 [ 915.269643][T14323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.270180][T14323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.274564][ T7662] usb 7-1: USB disconnect, device number 72 [ 915.285305][ T7662] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 915.423832][ T7662] cp210x 7-1:0.0: device disconnected [ 915.468337][T14336] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 915.519083][ T7664] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 915.694273][ T7664] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 915.694314][ T7664] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 915.694345][ T7664] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 915.694380][ T7664] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 915.694432][ T7664] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 915.694459][ T7664] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.707407][ T7664] usb 9-1: config 0 descriptor?? [ 915.728479][ T5812] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 915.747722][ T7433] Bluetooth: hci5: command 0x0406 tx timeout [ 915.904331][T14337] ALSA: mixer_oss: invalid OSS volume 'VMIX' [ 915.904590][ T5812] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 915.904625][ T5812] usb 4-1: config 179 has no interface number 0 [ 915.904748][ T5812] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 915.904779][ T5812] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 915.904806][ T5812] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 915.904894][ T5812] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 915.904923][ T5812] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 915.904967][ T5812] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 915.904991][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.938731][T14336] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 915.959177][ T5812] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 915.961361][ T5812] xpad 4-1:179.65: probe with driver xpad failed with error -90 [ 916.217259][ T7664] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 916.335954][ T5995] usb 9-1: USB disconnect, device number 34 [ 916.694348][ T5812] usb 4-1: USB disconnect, device number 13 [ 918.064211][ T38] audit: type=1400 audit(1760451096.857:4272): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=14362 comm="syz.6.2329" daddr=fc01:: dest=20002 [ 920.243359][T10889] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 921.198514][T10889] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.198546][T10889] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 921.200433][T10889] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 921.200465][T10889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 921.200488][T10889] usb 9-1: SerialNumber: syz [ 921.481751][T10889] usb 9-1: 0:2 : does not exist [ 921.589020][T10889] usb 9-1: USB disconnect, device number 35 [ 923.153431][T14408] infiniband !yz!: set active [ 923.153455][T14408] infiniband !yz!: added team_slave_0 [ 923.163341][T14408] !yz!: rxe_create_cq: returned err = -12 [ 923.163427][T14408] infiniband !yz!: Couldn't create ib_mad CQ [ 923.163643][T14408] infiniband !yz!: Couldn't open port 1 [ 923.368869][T14444] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1048580, id = 0 [ 923.410990][T14408] RDS/IB: !yz!: added [ 923.412226][T14408] smc: adding ib device !yz! with port count 1 [ 923.412633][T14408] smc: ib device !yz! port 1 has no pnetid [ 924.306330][T10889] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 924.815894][T10889] usb 7-1: Using ep0 maxpacket: 8 [ 924.822155][T10889] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.822242][T10889] usb 7-1: config 0 interface 0 has no altsetting 0 [ 924.852608][T10889] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 924.852642][T10889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.852665][T10889] usb 7-1: Product: syz [ 924.852683][T10889] usb 7-1: Manufacturer: syz [ 924.852699][T10889] usb 7-1: SerialNumber: syz [ 925.058527][T10889] usb 7-1: config 0 descriptor?? [ 925.146370][T10889] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 925.507204][T10889] snd_usb_toneport 7-1:0.0: cannot get proper max packet size [ 925.508179][T10889] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 925.523150][ T38] audit: type=1400 audit(1760451104.689:4273): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=14465 comm="syz.8.2366" daddr=fc01:: dest=20003 [ 925.586480][T10889] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 925.808643][T10889] usb 7-1: USB disconnect, device number 73 [ 926.361011][ T38] audit: type=1400 audit(1760451105.570:4274): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=14476 comm="syz.3.2371" daddr=fc01:: dest=20003 [ 926.362311][T14478] FAULT_INJECTION: forcing a failure. [ 926.362311][T14478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 926.362348][T14478] CPU: 1 UID: 0 PID: 14478 Comm: syz.3.2371 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 926.362375][T14478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 926.362402][T14478] Call Trace: [ 926.362412][T14478] [ 926.362422][T14478] dump_stack_lvl+0x189/0x250 [ 926.362454][T14478] ? __pfx____ratelimit+0x10/0x10 [ 926.362498][T14478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.362526][T14478] ? __pfx__printk+0x10/0x10 [ 926.362571][T14478] should_fail_ex+0x46c/0x600 [ 926.362606][T14478] _copy_to_user+0x31/0xb0 [ 926.362633][T14478] simple_read_from_buffer+0xe1/0x170 [ 926.362660][T14478] proc_fail_nth_read+0x1b6/0x220 [ 926.362703][T14478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 926.362739][T14478] ? rw_verify_area+0x2ac/0x4e0 [ 926.362771][T14478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 926.362805][T14478] vfs_read+0x206/0xa30 [ 926.362839][T14478] ? __pfx___local_bh_enable+0x10/0x10 [ 926.362883][T14478] ? __pfx_vfs_read+0x10/0x10 [ 926.362914][T14478] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 926.362948][T14478] ? lockdep_hardirqs_on+0x9c/0x150 [ 926.362989][T14478] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 926.363019][T14478] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 926.363055][T14478] ? rt_spin_unlock+0x150/0x200 [ 926.363094][T14478] ksys_read+0x14b/0x260 [ 926.363128][T14478] ? release_sock+0x192/0x210 [ 926.363162][T14478] ? __pfx_ksys_read+0x10/0x10 [ 926.363201][T14478] ? do_syscall_64+0xbe/0xfa0 [ 926.363240][T14478] do_syscall_64+0xfa/0xfa0 [ 926.363270][T14478] ? lockdep_hardirqs_on+0x9c/0x150 [ 926.363304][T14478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.363327][T14478] ? clear_bhb_loop+0x60/0xb0 [ 926.363355][T14478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.363378][T14478] RIP: 0033:0x7f748fb1d8dc [ 926.363398][T14478] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 926.363418][T14478] RSP: 002b:00007f748dd86030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 926.363442][T14478] RAX: ffffffffffffffda RBX: 00007f748fd75fa0 RCX: 00007f748fb1d8dc [ 926.363460][T14478] RDX: 000000000000000f RSI: 00007f748dd860a0 RDI: 0000000000000004 [ 926.363475][T14478] RBP: 00007f748dd86090 R08: 0000000000000000 R09: 0000000000000000 [ 926.363490][T14478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.363504][T14478] R13: 00007f748fd76038 R14: 00007f748fd75fa0 R15: 00007ffc28dd2a28 [ 926.363539][T14478] [ 926.386344][ C0] vkms_vblank_simulate: vblank timer overrun [ 926.429896][T14477] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 926.538108][ T7433] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 926.567485][ T7433] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 926.581161][ T7433] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 926.606979][ T7433] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 926.621304][ T7433] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 927.143902][ C0] vkms_vblank_simulate: vblank timer overrun [ 927.148161][T14485] 9pnet_fd: Insufficient options for proto=fd [ 927.507188][ C0] vkms_vblank_simulate: vblank timer overrun [ 928.626182][ T61] Bluetooth: hci4: command tx timeout [ 928.718007][ T7664] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 928.897205][ T7664] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 928.897240][ T7664] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.931808][ T7664] usb 7-1: config 0 descriptor?? [ 928.964513][ T7664] cp210x 7-1:0.0: cp210x converter detected [ 929.136806][T14494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.140351][T14494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.384538][T14494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.402498][T14494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.407323][ T7664] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 929.430387][ T7664] usb 7-1: cp210x converter now attached to ttyUSB0 [ 929.604635][T14494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.605089][T14494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.647759][ T7664] usb 7-1: USB disconnect, device number 74 [ 929.675039][ T7664] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 929.856914][ T7664] cp210x 7-1:0.0: device disconnected [ 930.404339][T11660] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.417385][ T61] Bluetooth: hci4: command tx timeout [ 933.361534][ T61] Bluetooth: hci4: command tx timeout [ 933.905227][T14535] Falling back ldisc for ttyprintk. [ 935.332441][ T61] Bluetooth: hci4: command tx timeout [ 935.431141][T11660] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.576466][T14479] chnl_net:caif_netlink_parms(): no params data found [ 935.760838][ T990] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 935.951161][ T990] usb 7-1: Using ep0 maxpacket: 32 [ 935.964327][ T990] usb 7-1: config index 0 descriptor too short (expected 2075, got 27) [ 935.964360][ T990] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 935.964382][ T990] usb 7-1: config 8 has no interfaces? [ 936.094426][ T990] usb 7-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 936.094459][ T990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.094481][ T990] usb 7-1: Product: syz [ 936.094496][ T990] usb 7-1: Manufacturer: syz [ 936.094512][ T990] usb 7-1: SerialNumber: syz [ 936.943933][ C1] vkms_vblank_simulate: vblank timer overrun [ 937.035127][T14558] overlayfs: failed to clone upperpath [ 937.114005][ C1] vkms_vblank_simulate: vblank timer overrun [ 937.118594][T14563] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2398'. [ 937.118628][T14563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2398'. [ 937.118648][T14563] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2398'. [ 937.118667][T14563] netlink: 'syz.3.2398': attribute type 2 has an invalid length. [ 937.118683][T14563] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2398'. [ 937.215181][T11660] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.247379][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.247457][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.519020][ C1] vkms_vblank_simulate: vblank timer overrun [ 937.907006][ C1] vkms_vblank_simulate: vblank timer overrun [ 938.202507][ C1] vkms_vblank_simulate: vblank timer overrun [ 938.277430][T11660] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.363723][T10888] usb 7-1: USB disconnect, device number 75 [ 938.805044][ C1] vkms_vblank_simulate: vblank timer overrun [ 939.186607][ C1] vkms_vblank_simulate: vblank timer overrun [ 939.268390][ C1] vkms_vblank_simulate: vblank timer overrun [ 939.807214][ C1] vkms_vblank_simulate: vblank timer overrun [ 940.126930][T10888] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 940.385400][T10888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 146, changing to 7 [ 940.385439][T10888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 34695, setting to 1024 [ 940.390759][T10888] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 940.390793][T10888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.390817][T10888] usb 7-1: Product: syz [ 940.390833][T10888] usb 7-1: Manufacturer: syz [ 940.390849][T10888] usb 7-1: SerialNumber: syz [ 940.422117][T10888] usb 7-1: config 0 descriptor?? [ 941.612585][T14479] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.612884][T14479] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.613173][T14479] bridge_slave_0: entered allmulticast mode [ 941.616394][T14479] bridge_slave_0: entered promiscuous mode [ 941.676063][T14479] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.676977][ T7664] usb 7-1: USB disconnect, device number 76 [ 941.694675][T14479] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.694962][T14479] bridge_slave_1: entered allmulticast mode [ 941.714509][T10880] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 941.779393][T14479] bridge_slave_1: entered promiscuous mode [ 942.075969][T10880] usb 9-1: Using ep0 maxpacket: 32 [ 942.079740][T10880] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.079768][T10880] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 942.079820][T10880] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 942.122369][T10880] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 942.122402][T10880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.122424][T10880] usb 9-1: Product: syz [ 942.122441][T10880] usb 9-1: Manufacturer: syz [ 942.122456][T10880] usb 9-1: SerialNumber: syz [ 943.898286][ T38] audit: type=1326 audit(1760451123.973:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14618 comm="syz.9.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e44eec9 code=0x7ffc0000 [ 943.898356][ T38] audit: type=1326 audit(1760451123.973:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14618 comm="syz.9.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e44eec9 code=0x7ffc0000 [ 943.898411][ T38] audit: type=1326 audit(1760451123.973:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14618 comm="syz.9.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f0e3e44eec9 code=0x7ffc0000 [ 943.898465][ T38] audit: type=1326 audit(1760451123.973:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14618 comm="syz.9.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e44eec9 code=0x7ffc0000 [ 943.898521][ T38] audit: type=1326 audit(1760451123.973:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14618 comm="syz.9.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e44eec9 code=0x7ffc0000 [ 943.898575][ T38] audit: type=1326 audit(1760451123.973:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14618 comm="syz.9.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0e3e450d5c code=0x7ffc0000 [ 943.898628][ T38] audit: type=1326 audit(1760451123.973:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14618 comm="syz.9.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0e3e450c94 code=0x7ffc0000 [ 943.898683][ T38] audit: type=1326 audit(1760451123.973:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14618 comm="syz.9.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0e3e450c94 code=0x7ffc0000 [ 943.898838][ T38] audit: type=1326 audit(1760451123.973:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14618 comm="syz.9.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e44eec9 code=0x7ffc0000 [ 943.898894][ T38] audit: type=1326 audit(1760451123.973:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14618 comm="syz.9.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3e44eec9 code=0x7ffc0000 [ 944.185500][T11662] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 944.507498][T10880] usb 9-1: can't set config #1, error -71 [ 944.529167][T10880] usb 9-1: USB disconnect, device number 36 [ 944.958172][T14479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.985614][T14479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.030764][T14635] fuse: Bad value for 'group_id' [ 945.030787][T14635] fuse: Bad value for 'group_id' [ 945.034858][T14635] fuse: Bad value for 'user_id' [ 945.034881][T14635] fuse: Bad value for 'user_id' [ 945.614552][T14650] netlink: 'syz.3.2426': attribute type 10 has an invalid length. [ 945.663694][T14652] netlink: 'syz.3.2426': attribute type 10 has an invalid length. [ 945.663723][T14652] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2426'. [ 945.696257][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2427'. [ 945.972230][T14650] batman_adv: batadv0: Adding interface: team0 [ 945.972250][T14650] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.972283][T14650] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 946.235333][T14652] team0: entered promiscuous mode [ 946.235359][T14652] team_slave_0: entered promiscuous mode [ 946.235631][T14652] team_slave_1: entered promiscuous mode [ 946.244462][T14652] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.427853][T14652] batman_adv: batadv0: Interface activated: team0 [ 946.427942][T14652] batman_adv: batadv0: Interface deactivated: team0 [ 946.428909][T14652] batman_adv: batadv0: Removing interface: team0 [ 946.531881][T14652] bridge0: port 3(team0) entered blocking state [ 946.533704][T14652] bridge0: port 3(team0) entered disabled state [ 946.536224][T14652] team0: entered allmulticast mode [ 946.536258][T14652] team_slave_0: entered allmulticast mode [ 946.536287][T14652] team_slave_1: entered allmulticast mode [ 946.633732][T14671] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2431'. [ 946.634490][T14671] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2431'. [ 946.645658][T14671] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2431'. [ 946.645726][T14671] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2431'. [ 947.377148][T14652] bridge0: port 3(team0) entered blocking state [ 947.399708][T14652] bridge0: port 3(team0) entered forwarding state [ 947.434338][T14479] team0: Port device team_slave_0 added [ 947.770005][T14479] team0: Port device team_slave_1 added [ 948.413704][T11660] bridge_slave_1: left allmulticast mode [ 948.413738][T11660] bridge_slave_1: left promiscuous mode [ 948.414069][T11660] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.576872][T11660] bridge_slave_0: left allmulticast mode [ 948.576908][T11660] bridge_slave_0: left promiscuous mode [ 948.577206][T11660] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.967765][T10880] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 949.115499][T10880] usb 4-1: Using ep0 maxpacket: 32 [ 949.119972][T10880] usb 4-1: unable to get BOS descriptor or descriptor too short [ 949.123331][T10880] usb 4-1: config 13 has an invalid interface number: 141 but max is 0 [ 949.123363][T10880] usb 4-1: config 13 has no interface number 0 [ 949.123406][T10880] usb 4-1: config 13 interface 141 has no altsetting 0 [ 949.179138][T10880] usb 4-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=c8.33 [ 949.179174][T10880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.179197][T10880] usb 4-1: Product: syz [ 949.179214][T10880] usb 4-1: Manufacturer: syz [ 949.179231][T10880] usb 4-1: SerialNumber: syz [ 949.201582][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 951.498970][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2444'. [ 952.396928][T10880] usb 4-1: USB disconnect, device number 14 [ 952.460839][T11660] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 954.411879][T10880] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 954.558936][T10880] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 954.558968][T10880] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 954.559021][T10880] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 954.560971][T10880] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 954.561051][T10880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 954.561075][T10880] usb 9-1: SerialNumber: syz [ 957.415245][T14743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2454'. [ 959.376715][T11660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.487443][T11660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.516711][T10880] usb 9-1: 0:2 : does not exist [ 959.516818][T10880] usb 9-1: unit 5 not found! [ 959.551150][T11660] bond0 (unregistering): Released all slaves [ 959.588660][T11660] bond1 (unregistering): Released all slaves [ 961.981885][T11660] bond2 (unregistering): Released all slaves [ 962.026509][T14479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.026530][T14479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.026562][T14479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.105605][T14700] ip6gretap1: entered allmulticast mode [ 962.314931][T14479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.314952][T14479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.314984][T14479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.517967][T10888] usb 9-1: USB disconnect, device number 37 [ 963.693808][T11660] : left promiscuous mode [ 963.699805][ T990] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 963.846719][ T990] usb 4-1: Using ep0 maxpacket: 16 [ 963.850390][ T990] usb 4-1: unable to get BOS descriptor or descriptor too short [ 963.857262][ T990] usb 4-1: config 4 has an invalid interface number: 75 but max is 0 [ 963.857292][ T990] usb 4-1: config 4 has no interface number 0 [ 963.857329][ T990] usb 4-1: config 4 interface 75 has no altsetting 0 [ 963.909771][ T990] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=f9.c7 [ 963.909808][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.909832][ T990] usb 4-1: Product: syz [ 963.909848][ T990] usb 4-1: Manufacturer: syz [ 963.909865][ T990] usb 4-1: SerialNumber: syz [ 963.973233][T14479] hsr_slave_0: entered promiscuous mode [ 963.974741][T14479] hsr_slave_1: entered promiscuous mode [ 963.992733][T14479] debugfs: 'hsr0' already exists in 'hsr' [ 963.992765][T14479] Cannot create hsr debugfs directory [ 964.247626][T11660] tipc: Left network mode [ 964.905056][T14780] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2464'. [ 966.120154][T14786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2468'. [ 967.309769][T10889] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 967.395299][T14793] dummy0: entered allmulticast mode [ 967.681151][T10889] usb 9-1: Using ep0 maxpacket: 8 [ 967.733829][T10889] usb 9-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 967.733868][T10889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.733901][T10889] usb 9-1: Product: syz [ 967.733918][T10889] usb 9-1: Manufacturer: syz [ 967.733935][T10889] usb 9-1: SerialNumber: syz [ 967.790812][T10889] usb 9-1: config 0 descriptor?? [ 968.450889][T14797] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2472'. [ 968.451078][T14797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.764323][T10889] usb_ehset_test 9-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 968.769637][T10889] usb 9-1: USB disconnect, device number 38 [ 968.810663][ C0] vkms_vblank_simulate: vblank timer overrun [ 968.852626][T14797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.931872][ C0] vkms_vblank_simulate: vblank timer overrun [ 969.026922][ C0] vkms_vblank_simulate: vblank timer overrun [ 969.068584][ T990] usb 4-1: USB disconnect, device number 15 [ 969.320724][ C0] vkms_vblank_simulate: vblank timer overrun [ 970.329233][T14817] gfs2: gfs2 mount does not exist [ 970.503442][T10888] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 970.647840][ C0] vkms_vblank_simulate: vblank timer overrun [ 970.787102][T10888] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 970.787135][T10888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 970.843031][T10888] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 970.843959][T10888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.843986][T10888] usb 4-1: Product: С [ 970.844001][T10888] usb 4-1: Manufacturer: ٌ⠥Ũ䙊濔硲塷뽱喝ﵥ倢‬ä쇳㪓筰䕸蠞꼍㾢｡傗悀⺞噶珜撲賂콻娄钦䌸藨Tⲋᮾ舕彖轰玔┸Ⴈ苩᭲㐊❥钱瞡腡홉鋻ⶅ㔲ⵟ੥窪괳춨䁡뙰홠䜕卢Ṛ砿飍ᄍ朹霱ꌾ鄩Ꟃ䄀ታ좌ﴓ菨踛䏸⁛七v紂㙺ꥫ嶮 [ 970.844036][T10888] usb 4-1: SerialNumber: ࠝ [ 971.320923][T14810] binder: 14809:14810 ioctl c0306201 200000000240 returned -11 [ 971.383550][T10888] usb 4-1: 0:2 : does not exist [ 971.791272][T10888] usb 4-1: USB disconnect, device number 16 [ 972.109402][T11660] hsr_slave_0: left promiscuous mode [ 972.296884][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.726990][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.754499][ C0] vkms_vblank_simulate: vblank timer overrun [ 973.455196][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 973.455219][ T38] audit: type=1804 audit(1760451154.701:4294): pid=14845 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.2486" name="/newroot/63/file0" dev="tmpfs" ino=344 res=1 errno=0 [ 973.881093][T11660] hsr_slave_1: left promiscuous mode [ 973.882635][T11660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.882668][T11660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.913497][T10888] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 974.089337][T10888] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 974.089373][T10888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.089395][T10888] usb 4-1: Product: syz [ 974.089412][T10888] usb 4-1: Manufacturer: syz [ 974.089428][T10888] usb 4-1: SerialNumber: syz [ 974.147901][T11660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 974.147936][T11660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 974.200256][T11660] batman_adv: batadv0: Interface deactivated: dummy0 [ 974.200298][T11660] batman_adv: batadv0: Removing interface: dummy0 [ 974.201301][T10888] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 974.201435][T10888] usb 4-1: setting power ON [ 974.202268][T10888] dvb-usb: bulk message failed: -22 (2/0) [ 974.253748][T10888] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 974.275357][T10888] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 974.276044][T10888] dvb_usb_cxusb 4-1:4.0: probe with driver dvb_usb_cxusb failed with error -22 [ 974.624521][T14855] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2489'. [ 974.625135][T14855] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2489'. [ 974.629329][T14855] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2489'. [ 974.629388][T14855] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2489'. [ 974.705025][T10888] usb 4-1: USB disconnect, device number 17 [ 975.615498][T11660] veth1_macvtap: left promiscuous mode [ 975.615619][T11660] veth0_macvtap: left promiscuous mode [ 975.616118][T11660] veth1_vlan: left promiscuous mode [ 975.616636][T11660] veth0_vlan: left promiscuous mode [ 975.816146][ C0] vkms_vblank_simulate: vblank timer overrun [ 976.337291][T14862] netlink: 'syz.3.2491': attribute type 2 has an invalid length. [ 976.337318][T14862] netlink: 5356 bytes leftover after parsing attributes in process `syz.3.2491'. [ 976.730403][ T7662] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 976.813094][ C0] vkms_vblank_simulate: vblank timer overrun [ 976.874219][ T7662] usb 4-1: too many configurations: 20, using maximum allowed: 8 [ 976.903870][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.008637][ T7662] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 977.008674][ T7662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.014140][ T7662] usb 4-1: config 0 descriptor?? [ 977.022771][ T7662] gspca_main: 8086:0110 too many config [ 977.112522][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.219739][T14862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 977.323778][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.523191][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.610296][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.686624][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.761660][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.838414][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.110383][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.192909][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.272867][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.351536][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.425436][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.500323][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.584760][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.732852][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.881468][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.946442][ C0] vkms_vblank_simulate: vblank timer overrun [ 979.021004][ C0] vkms_vblank_simulate: vblank timer overrun [ 979.061760][ T5812] usb 4-1: USB disconnect, device number 18 [ 979.116767][ C0] vkms_vblank_simulate: vblank timer overrun [ 979.200184][ C0] vkms_vblank_simulate: vblank timer overrun [ 979.393936][ C0] vkms_vblank_simulate: vblank timer overrun [ 979.520336][ C0] vkms_vblank_simulate: vblank timer overrun [ 979.773368][ C0] vkms_vblank_simulate: vblank timer overrun [ 980.074608][T11660] team0 (unregistering): Port device team_slave_1 removed [ 980.576341][T11660] team0 (unregistering): Port device team_slave_0 removed [ 983.041115][ T7433] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 983.070067][ T7433] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 983.086700][ T7433] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 983.165737][ T7433] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 983.198669][ T7433] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 983.406649][T14882] overlayfs: missing 'lowerdir' [ 983.815496][T14887] FAULT_INJECTION: forcing a failure. [ 983.815496][T14887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.815533][T14887] CPU: 0 UID: 0 PID: 14887 Comm: syz.3.2499 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 983.815557][T14887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 983.815571][T14887] Call Trace: [ 983.815579][T14887] [ 983.815588][T14887] dump_stack_lvl+0x189/0x250 [ 983.815621][T14887] ? __pfx____ratelimit+0x10/0x10 [ 983.815652][T14887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 983.815677][T14887] ? __pfx__printk+0x10/0x10 [ 983.815703][T14887] ? __might_fault+0xb0/0x130 [ 983.815736][T14887] should_fail_ex+0x46c/0x600 [ 983.815768][T14887] _copy_from_user+0x2d/0xb0 [ 983.815790][T14887] ___sys_sendmsg+0x158/0x2a0 [ 983.815813][T14887] ? __pfx____sys_sendmsg+0x10/0x10 [ 983.815870][T14887] ? __fget_files+0x2a/0x420 [ 983.815892][T14887] ? __fget_files+0x3a6/0x420 [ 983.815925][T14887] __sys_sendmmsg+0x22d/0x430 [ 983.815950][T14887] ? __pfx___sys_sendmmsg+0x10/0x10 [ 983.815980][T14887] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 983.816022][T14887] ? ksys_write+0x230/0x260 [ 983.816056][T14887] ? __pfx_ksys_write+0x10/0x10 [ 983.816094][T14887] __x64_sys_sendmmsg+0xa0/0xc0 [ 983.816116][T14887] do_syscall_64+0xfa/0xfa0 [ 983.816147][T14887] ? lockdep_hardirqs_on+0x9c/0x150 [ 983.816178][T14887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.816199][T14887] ? clear_bhb_loop+0x60/0xb0 [ 983.816224][T14887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.816244][T14887] RIP: 0033:0x7f748fb1eec9 [ 983.816263][T14887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.816281][T14887] RSP: 002b:00007f748dd86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 983.816303][T14887] RAX: ffffffffffffffda RBX: 00007f748fd75fa0 RCX: 00007f748fb1eec9 [ 983.816319][T14887] RDX: 0000000000000001 RSI: 0000200000003c00 RDI: 0000000000000003 [ 983.816332][T14887] RBP: 00007f748dd86090 R08: 0000000000000000 R09: 0000000000000000 [ 983.816345][T14887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.816357][T14887] R13: 00007f748fd76038 R14: 00007f748fd75fa0 R15: 00007ffc28dd2a28 [ 983.816391][T14887] [ 985.170490][ T7433] Bluetooth: hci1: command tx timeout [ 985.931786][T14857] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 986.226924][ T7664] kernel write not supported for file /amidi2 (pid: 7664 comm: kworker/1:8) [ 987.236462][ T7433] Bluetooth: hci1: command tx timeout [ 988.392665][ C0] vkms_vblank_simulate: vblank timer overrun [ 988.982162][ C0] vkms_vblank_simulate: vblank timer overrun [ 990.002397][ T7433] Bluetooth: hci1: command tx timeout [ 990.065742][ C0] vkms_vblank_simulate: vblank timer overrun [ 990.416194][ T38] audit: type=1400 audit(1760451172.810:4295): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=14928 comm="syz.8.2513" dest=20001 [ 990.477663][T14927] overlayfs: conflicting options: nfs_export=on,index=off [ 990.571514][ C0] vkms_vblank_simulate: vblank timer overrun [ 990.703071][ C0] vkms_vblank_simulate: vblank timer overrun [ 990.797128][ C0] vkms_vblank_simulate: vblank timer overrun [ 990.905784][ C0] vkms_vblank_simulate: vblank timer overrun [ 991.050279][ C0] vkms_vblank_simulate: vblank timer overrun [ 991.200800][ C0] vkms_vblank_simulate: vblank timer overrun [ 991.439777][T14946] netlink: 'syz.6.2519': attribute type 1 has an invalid length. [ 991.963796][ T7433] Bluetooth: hci1: command tx timeout [ 992.064503][ C0] vkms_vblank_simulate: vblank timer overrun [ 992.212449][ C0] vkms_vblank_simulate: vblank timer overrun [ 992.403645][ C0] vkms_vblank_simulate: vblank timer overrun [ 992.594790][ C0] vkms_vblank_simulate: vblank timer overrun [ 992.618538][ C0] vkms_vblank_simulate: vblank timer overrun [ 992.779887][ C0] vkms_vblank_simulate: vblank timer overrun [ 993.553067][T11660] bridge_slave_1: left allmulticast mode [ 993.553096][T11660] bridge_slave_1: left promiscuous mode [ 993.554568][T11660] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.790720][T10888] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 994.110980][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2523'. [ 994.125865][ C0] vkms_vblank_simulate: vblank timer overrun [ 994.637333][ T7433] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 995.079700][ C0] vkms_vblank_simulate: vblank timer overrun [ 995.080114][T11660] bridge_slave_0: left allmulticast mode [ 995.080143][T11660] bridge_slave_0: left promiscuous mode [ 995.080412][T11660] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.144007][T10888] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 995.144043][T10888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.149850][T10888] usb 4-1: config 0 descriptor?? [ 995.192582][T10888] cp210x 4-1:0.0: cp210x converter detected [ 995.282381][ C0] vkms_vblank_simulate: vblank timer overrun [ 995.354188][T14969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.355542][T14969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.398158][ C0] vkms_vblank_simulate: vblank timer overrun [ 995.783045][ C0] vkms_vblank_simulate: vblank timer overrun [ 995.792968][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.793077][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.815029][T14971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.815541][T14971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.871886][T10888] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 995.935770][T10888] usb 4-1: cp210x converter now attached to ttyUSB0 [ 995.954702][ T7664] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 996.087054][ T7664] usb 9-1: device descriptor read/64, error -71 [ 996.088330][T11660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.133357][T14969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.135315][T14969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.149994][ T5874] usb 4-1: USB disconnect, device number 19 [ 996.162365][ T5874] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 996.194420][T11660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.261498][T11660] bond0 (unregistering): Released all slaves [ 996.287127][ T5874] cp210x 4-1:0.0: device disconnected [ 996.303203][T14975] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2523'. [ 996.303232][T14975] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 996.315712][ T7664] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 996.374013][ C0] vkms_vblank_simulate: vblank timer overrun [ 996.504159][ C0] vkms_vblank_simulate: vblank timer overrun [ 996.591806][ C0] vkms_vblank_simulate: vblank timer overrun [ 996.619934][ T7664] usb 9-1: device descriptor read/64, error -71 [ 996.660539][ C0] vkms_vblank_simulate: vblank timer overrun [ 996.693522][T14883] chnl_net:caif_netlink_parms(): no params data found [ 996.716270][ T7664] usb usb9-port1: attempt power cycle [ 996.986163][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.550880][T14990] binder: 14988:14990 ioctl 9361 2a0d returned -22 [ 998.306026][ T7664] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 998.326394][ T7664] usb 9-1: Using ep0 maxpacket: 16 [ 998.390532][ T7664] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.390555][ T7664] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 998.428736][ T7664] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 998.428770][ T7664] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.428793][ T7664] usb 9-1: Product: С [ 998.428809][ T7664] usb 9-1: Manufacturer: ٌ⠥Ũ䙪濔硲塷뽱喝ﵥ倢‬ä쇳㪓筰䕸蠞꼍㾢｡傗悀⺞噶珜撲賂콻娄钦䌸藨Tⲋᮾ舕彖轰玔┸Ⴈ苩᭲㐊❥钱瞡腡홉鋻ⶅ㔲ⵟ੥窪괳춨䁡뙰홠䜕卢Ṛ砿飍ᄍ朹霱ꌾ鄩Ꟃ䄀ታ좌ﴓ菨踛䏸⁛七v紂㙺ꥫ嶮 [ 998.428844][ T7664] usb 9-1: SerialNumber: ࠝ [ 999.138164][ T7664] usb 9-1: 0:2 : does not exist [ 999.190128][T11660] hsr_slave_0: left promiscuous mode [ 999.221200][ T7664] usb 9-1: USB disconnect, device number 41 [ 999.266707][T11660] hsr_slave_1: left promiscuous mode [ 999.267881][T11660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.320205][T11660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.877750][ T5874] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1000.005040][ T5874] usb 7-1: device descriptor read/64, error -71 [ 1000.543054][ T5874] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1003.012628][ T5874] usb 7-1: device descriptor read/64, error -71 [ 1003.783596][ T5874] usb usb7-port1: attempt power cycle [ 1006.633106][T11660] team0 (unregistering): Port device team_slave_1 removed [ 1006.851325][T11660] team0 (unregistering): Port device team_slave_0 removed [ 1008.161707][T14883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.161939][T14883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.162191][T14883] bridge_slave_0: entered allmulticast mode [ 1008.190249][T14883] bridge_slave_0: entered promiscuous mode [ 1008.214680][T14883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.214824][T14883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.215078][T14883] bridge_slave_1: entered allmulticast mode [ 1008.219810][T14883] bridge_slave_1: entered promiscuous mode [ 1008.364971][ T38] audit: type=1400 audit(1760451191.612:4296): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="^" object="_" requested=w pid=15060 comm="syz.8.2552" saddr=fc00::1 daddr=fe80::aa dest=16385 netif=wpan0 [ 1009.434688][ C0] vkms_vblank_simulate: vblank timer overrun [ 1009.700159][T14883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.705877][T14883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.952791][ C0] vkms_vblank_simulate: vblank timer overrun [ 1010.496158][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2559'. [ 1012.143041][ C0] vkms_vblank_simulate: vblank timer overrun [ 1012.539011][T15092] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1012.654817][ C0] vkms_vblank_simulate: vblank timer overrun [ 1012.725381][T14883] team0: Port device team_slave_0 added [ 1012.736572][T14883] team0: Port device team_slave_1 added [ 1013.161724][ C0] vkms_vblank_simulate: vblank timer overrun [ 1014.100905][T14883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.100925][T14883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.100955][T14883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.586206][T14883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.586225][T14883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.586255][T14883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.733175][T15112] netlink: 'syz.3.2571': attribute type 8 has an invalid length. [ 1015.282564][T15127] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1015.371562][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2572'. [ 1016.194110][T15117] uprobe: syz.9.2570:15117 failed to unregister, leaking uprobe [ 1016.208538][ T26] ================================================================== [ 1016.208556][ T26] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 1016.208591][ T26] Read of size 8 at addr ffffc9000c366090 by task irq_work/1/26 [ 1016.208611][ T26] [ 1016.208625][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1016.208660][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1016.208677][ T26] Call Trace: [ 1016.208688][ T26] [ 1016.208699][ T26] dump_stack_lvl+0x189/0x250 [ 1016.208728][ T26] ? run_irq_workd+0x116/0x190 [ 1016.208749][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1016.208772][ T26] ? __pfx__printk+0x10/0x10 [ 1016.208798][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 1016.208821][ T26] ? __virt_addr_valid+0xdc/0x5c0 [ 1016.208845][ T26] print_report+0xca/0x240 [ 1016.208872][ T26] ? run_irq_workd+0x116/0x190 [ 1016.208892][ T26] kasan_report+0x118/0x150 [ 1016.208917][ T26] ? run_irq_workd+0x116/0x190 [ 1016.208941][ T26] run_irq_workd+0x116/0x190 [ 1016.208962][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 1016.208982][ T26] ? schedule+0x91/0x360 [ 1016.209012][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 1016.209031][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 1016.209048][ T26] smpboot_thread_fn+0x542/0xa60 [ 1016.209067][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 1016.209089][ T26] kthread+0x711/0x8a0 [ 1016.209117][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1016.209137][ T26] ? __pfx_kthread+0x10/0x10 [ 1016.209157][ T26] ? rt_spin_unlock+0x150/0x200 [ 1016.209185][ T26] ? rt_spin_unlock+0x161/0x200 [ 1016.209208][ T26] ? __pfx_kthread+0x10/0x10 [ 1016.209230][ T26] ret_from_fork+0x4bc/0x870 [ 1016.209262][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 1016.209294][ T26] ? __switch_to_asm+0x39/0x70 [ 1016.209320][ T26] ? __switch_to_asm+0x33/0x70 [ 1016.209344][ T26] ? __pfx_kthread+0x10/0x10 [ 1016.209368][ T26] ret_from_fork_asm+0x1a/0x30 [ 1016.209403][ T26] [ 1016.209410][ T26] [ 1016.209416][ T26] The buggy address belongs to a vmalloc virtual mapping [ 1016.209436][ T26] Memory state around the buggy address: [ 1016.209447][ T26] ffffc9000c365f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1016.209461][ T26] ffffc9000c366000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1016.209474][ T26] >ffffc9000c366080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1016.209492][ T26] ^ [ 1016.209503][ T26] ffffc9000c366100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1016.209516][ T26] ffffc9000c366180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1016.209526][ T26] ================================================================== [ 1016.209558][ T26] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1016.209574][ T26] CPU: 1 UID: 0 PID: 26 Comm: irq_work/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1016.209599][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1016.209612][ T26] Call Trace: [ 1016.209621][ T26] [ 1016.209630][ T26] dump_stack_lvl+0x99/0x250 [ 1016.209667][ T26] ? __asan_memcpy+0x40/0x70 [ 1016.209701][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1016.209729][ T26] ? __pfx__printk+0x10/0x10 [ 1016.209765][ T26] vpanic+0x237/0x6d0 [ 1016.209788][ T26] ? __pfx_vpanic+0x10/0x10 [ 1016.209818][ T26] panic+0xb9/0xc0 [ 1016.209839][ T26] ? __pfx_panic+0x10/0x10 [ 1016.209863][ T26] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1016.209901][ T26] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1016.209944][ T26] ? run_irq_workd+0x116/0x190 [ 1016.209970][ T26] check_panic_on_warn+0x89/0xb0 [ 1016.209999][ T26] ? run_irq_workd+0x116/0x190 [ 1016.210022][ T26] end_report+0x78/0x160 [ 1016.210046][ T26] kasan_report+0x129/0x150 [ 1016.210073][ T26] ? run_irq_workd+0x116/0x190 [ 1016.210103][ T26] run_irq_workd+0x116/0x190 [ 1016.210129][ T26] ? __pfx_run_irq_workd+0x10/0x10 [ 1016.210152][ T26] ? schedule+0x91/0x360 [ 1016.210187][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 1016.210210][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 1016.210232][ T26] smpboot_thread_fn+0x542/0xa60 [ 1016.210256][ T26] ? smpboot_thread_fn+0x4d/0xa60 [ 1016.210284][ T26] kthread+0x711/0x8a0 [ 1016.210313][ T26] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1016.210335][ T26] ? __pfx_kthread+0x10/0x10 [ 1016.210361][ T26] ? rt_spin_unlock+0x150/0x200 [ 1016.210394][ T26] ? rt_spin_unlock+0x161/0x200 [ 1016.210422][ T26] ? __pfx_kthread+0x10/0x10 [ 1016.210450][ T26] ret_from_fork+0x4bc/0x870 [ 1016.210488][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 1016.210529][ T26] ? __switch_to_asm+0x39/0x70 [ 1016.210605][ T26] ? __switch_to_asm+0x33/0x70 [ 1016.210637][ T26] ? __pfx_kthread+0x10/0x10 [ 1016.210674][ T26] ret_from_fork_asm+0x1a/0x30 [ 1016.210718][ T26] [ 1016.211112][ T26] Kernel Offset: disabled