last executing test programs: 4m55.18545326s ago: executing program 1 (id=87): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000800c00000000000003", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = gettid() r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r6 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/667, 0x9) fcntl$addseals(r6, 0x409, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="6a03e63a4905f8e8dc01cf21f8f7", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}}) 4m53.774158394s ago: executing program 1 (id=92): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r1], 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32=r3], 0x20}}, 0x0) 4m53.057011451s ago: executing program 1 (id=96): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 4m52.732125618s ago: executing program 1 (id=97): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) 4m52.206455828s ago: executing program 1 (id=99): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x9, &(0x7f0000000100)=[{0x9, 0x7b, 0x8, 0x1}, {0x7, 0x80, 0xcb, 0x65d9}, {0x7, 0x4, 0x0, 0x8}, {0x8, 0xff, 0x35, 0x73}, {0x0, 0x9, 0x3f, 0x9}, {0x9, 0x7, 0x40, 0x8}, {0x3, 0x6, 0x1, 0x94a3}, {0x1, 0x9, 0x80, 0x5}, {0x4, 0x8, 0x2, 0x9}]}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x379) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000640000000000000013"], 0xa7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x4004743a, &(0x7f0000000300)) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'ip6gre0\x00'}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 4m51.803943319s ago: executing program 1 (id=100): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x3, 0xfffefffd}, 0x4, {0x0, 0x2}, 0xa, 0x1, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x2, 0x1, 0x3, {0x4, 0x40}, 0x82c7, 0xf}) tkill(r0, 0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r2}, 0x18) 4m51.279507773s ago: executing program 32 (id=100): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x3, 0xfffefffd}, 0x4, {0x0, 0x2}, 0xa, 0x1, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x2, 0x1, 0x3, {0x4, 0x40}, 0x82c7, 0xf}) tkill(r0, 0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r2}, 0x18) 2m44.22031793s ago: executing program 4 (id=602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m43.871380698s ago: executing program 4 (id=604): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = gettid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r5 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/667, 0x9) fcntl$addseals(r5, 0x409, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="6a03e63a4905f8e8dc01cf21f8f7", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}}) 2m42.969527465s ago: executing program 4 (id=607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x10000017) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x44040, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x8, r0, 0x1}) socket(0x840000000002, 0x3, 0xff) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) socket(0x11, 0x800000003, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0xee, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x5, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x8, 0x4, 0xffff, 0x6, 0xffffffa7, 0x4, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x7fd, 0xe2e3, 0x9, 0x4e, 0x4, 0x3, 0x7, 0x5, 0x5]}) socket$nl_netfilter(0x10, 0x3, 0xc) 2m42.005549509s ago: executing program 4 (id=608): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m41.934118872s ago: executing program 4 (id=609): creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000540)="bbfb1830b347ad7cb9599c33ff131884d5625d959cce72d6bc59f2439c813757f0d17e8b0dceb0f34393852b8fa80b562a8d376a591dbe31e51318316e486648ea4952ef9c94480b2b6eca588ae97117e0e7d34bf84b2a6d1a8e9832147fe4ce3c51ad825ae4a2c091831d593e033371bc2d9b858909cebd7f250ec00a0b1e3f0bca8696e984ca681a3cf1dd07f2e2c0ccde3a93abae8562d9f9266943a32c938961e4912d80cb16bb427580616679e27448cdfe76e325186c751c2c15757e42afa269038a33d1f63cc96a59d43c8014de82ddf4091e846f314708de5da220824a491deff3f366228597543b1755d6c651e3081d09291d03f1db744063f79104569abd95594aa3f557da731fba93ef0663ba85be8c6e2dcda1ef9cf073e8ea5f02420a487563b87c5d6091ac037c79fd83e8ba03b50482f9130ce34113221e873c5d07f96119f75e7b054c2b4d621b8112bd2290fdfbe59ffb36070febde7cd119702f4b979dcc3e554b80b854ee23a4523ed9555b827c0ee49b2d1687e9488b604a4bb022c1d229f849074a93621cfe04a145a48e1ac54d4f2439876e86a2e9b06b506129e8079deef356f65ee3ab702470a194112a5ff760612646e895670521056ed90100a36bf956a8c2b2c552f5dbe44a45ec542746b7593c38c45409dd80792e4470be69f845e71b93cd92cc61006d633d5656ae7631e216c6765df492651179dcb2b428541d26dc2750a498de4edada9e053699de25b6fd5158b5a8f60c0cdb0d082763948a3376b15fee0c0d4f015a023b274f2d0f278ec20c8de047e9f26549f1e8dc634e947c3784da0a54200c9ce2c5a73b51c5215a51b2a4a7d67c2aedd5d8ab789ef997690622046251347606cb1a0a738897478e1c3a8c451476d0c9e7230c76c0a26ac7bdbe923f731998b4a4cde0f2b73c117a7692f9aa07475791e239d725f1bc197cc371e09d83d084b749ad5355222c87256a7542b2e7c2d2f2fc78b3eaf07b7dba64491b062333bd8af8e3d0be23910716b2ced1045dc0627a34c9b6bd4183a836442aa714d6bbbb0cd9f3f62042f26c505f37f92556c2e5fe90be226c69b9a663772cf04069db3310efc0d8cd94c93953f29dcee74881b8dd64d1d72dd6a79010d18dd8c98778ea00e52c8d9695dc9312d354807056566cf04ef6a149d5c46362a618e354312af10f6e730febce3ec3d5e02e15df60eedda1f62c699d932b384014e5a2ab0a9101e87a4305781a8d9687ddef0d6364943ebf7b2fd287d1e928f49198b389c9fd30d47feba50589cc85abdadfdc1a7bd1219215bec43e6ebc893cc8d8ae7bbcc469e88fde1e772128c42868a2edb2b6f400cf4fe67991ab6dac3f795899e704259b274e7ff5c2cf8ca894424d92a7676d7f6dadb9b5f9b76c9851aa15eacf09ff0507094f8f040c65bd30a5cbcc90c5410c1c35c1fb940f354862ae43e26a4ac6647a0fbb1e19cccadfed4c0d94f5626e4a0c12f06444c6eb72fc05b7efc4c22cccfdcab9f81ee530e4c8d42597b54a00a62f71a39586dc7cf826df6620e271c4b9aa47a5a4177bb8da2ad9040d75b943a4cec2239b6409f51beb2584c7f42e3ac97ba62dc547c349298a99ca8e98b8166d0ff1a1a79a034e0448e7ccfb1ab266ef41faa27fff96f878eb011f79fa73bb627ac567c809531d49bd30b5e9313a876e0357bdfa16048f17daef6d7f85f7e7b23ec03a57bc71b991ca4b6c043fe62cfacbe9595a0228f3fbc979059dad5dd5ef824b5af5b56539536653d58d06c10022243b8dac6d36c8e70ee4a4bff2166191e740e17580c125e281a18668506149f955ca88171dc0965bb2d8f1f5c92c1db961f3c3a60e944a8543376813b7291ff942f0e2af87d5cd0125cad7bc4d8424a601c7807639a18e6628f37b3a6d71060c802268c3d87848cd575ed98b77a457c24a6869110ed1211c5156c9447651ec53948f9bf1302e42480e88f36b0f76e6182e4c7d5a9cee535afa1871931511a216523b7e383c779760d89c673c52711e573e379bec55c4f95b1e04e574aa2565cbd1edd453964717f229ec46944a1f1729642fc15a8d413cd02cc091188a16f9cf2c82c6b3714a08406fb959cf69d424eb75fbbce02beb51e88d622c8f67aa8ea96e6ef15f7f82ebe52d4530ef08d7e29238e200cb1a2abf04afe7921f7cb6804920c65e5996a8854e4a238f381e446118483c431ac28b6dd5d40a71d9faeec84508e1e885759b3ddfc791c9107b25a88ca6fba5dc66f46e1fac3ab5a6c64c8a2cb0505685839f5fbe0cf3bf0cffaf7e2341421dfcd20ec0aa7b9a4044d63e09d1d1058783ded9b00e685eeabfa6e59bf96584f3dfb71ba03f4ec677b72e3b42e3e2e7449b3fccd31c2e20af26de15b7d188f5d10414b96fbe403ebd49ae162ac89ee3dbb3670e9e243422115a2eeec9348df589385c8b630218adb43ac384e992d092f5091dd76ac769f64e29d0a08409c0ce2a60b7bf4e50283bb47482d0c365e6187bbc7723633de9addb2702220c086fd636fab39dcba815e32f61299045e5eaf5dc16cfaa419af41c6717176368bf0a5a1d1bca4f3a5099b628cf1f4b3e2d02a2964543b586364edaa81e36cfde4b9063d79eeaafeea3329c1fcfd17b48ccc834a713122fdb7d0350faa7bd27de716c91c5d747a882e060925c106d48a8d3edca593bbd686973836d8f0a71f3f86bc595ab9618285ef445d172a2e9c5dfdde948347bb5851dc6092582c53c53e243aa635e7e3dcd33fb0faa5a1d98e42238f4f0b9a97d5c86c61c1aca34ee06d8753108f4ea85892af07bfd6787ac1b425ec328e6b9679fd3728a0b19c3b0a99d17de4eec91f8713165dfdb8a633a73b7d7453f0767d74e1f27ec8f7806e5a127029d8205d080707e8241ce21864c68eedef64429cc41cb8ff5955b777a8140b9aa14ab506a570c7a6d5a8535f12e10329442d00e8e65d390aa0af38692a34437b428bf83c231959d14987b6910c8c5794cba81c25621d5951ce9628c27a7b40d80afc800c23dd2348b65966f765d3e70fe38caea5c80ccf7cc04f0cb7b54cf61f11030e41bc62a3e3e7df44689f93938004cae1b2131560726860fe1edc8915286d98f249a7023a4c900bfcc4812c67f929301e9e21e9c8c40efcfb759cc1607637a12ec8cb73d0702615d5ea072f8d8aa7bb98cd2c33597934f65bd0d6c4714a8e3b7089dd507de223802c348fff38c7fff23ea2c5ecb8e60868e016879f2453fcd16431b20470c5f65aad9261d0f6ac6e578356dde1f95b2a452294f74169c7cd37f7d8658a5cda8a349963afe6bd38a3c09b56d41c2d3e464a8af0692b31af3636c31c54db423b8e5be67096267a91dcca37cfae594d287c173a26c33d5cee822f07b76f3ed7eaaff19c4b5b8ec99f7768cded06c7f6c28a8cdae86d9c6fd7a5955e6b5acbb1c91832cbfeac793fc6494a77528d14d618d1826137d59d785c863244c05d11ffa3ac3a5dfb368105e1aba81a237ca4ca1a81afa668970f038eb2359d9308aa07dedd34cdf24a275eaf42ed34daaf521b08b6ff167cf936b639d3f274fa5fb2229dd64c108a6d34b25fef01732bd22f2cee847bbc7009be13637e35ea227fa91c79d0be0ac9a4d9b2a393086c0c078a60d29792fdec82cf5859ccfda62baf6090f10b00bdad66ab6745fa4b939e4262c1758b4bc0d47e49c82b2d8299baedf7327b2bfee0cea7a498a5f326ad308146ddb10485dc54caa8a69479fd274fc6b64171456e2f9efd421b3c42d4cbdbd4183e21406779346f67297aea3c6f636dce7edc7addebfdd970c5a3f4b67e34b883d6526840abf622eff4725231769a6bd6f62fa088236dc42d2243f49267b6edb663be49d50cd866776910ee3ba43df09fed7073e8971c3c7e0ee70b60db659fc816d81dd9ec734f30367fa2513ef14d5335f2e7fb67b6009cb6bb04b5a4980fb0349afec46afd03825d1ff8d14b2a2e1c7bccea71304d9c61a73ca39cc40c1c487d2b76dc23a78b154fea44c1c1378fe80a86f86d8cf51c0049f00555cad26f08e9c5e766e19471d7f5e5716ad570eec044e4f5a77050c3a711b81d6c256f9796dd3ad41c15785dcbf8958757686f34f21cc40ba2284e25c14514fbfd53f521c0017bc6780326e06709d8644aad316620f2c855e9db192b1c9fcd4b8583438f9b0cc51705ce45190b100beac7c2d31ffacf64ae5eb1322c9d81c14c99f124f3b8ff6236dabee69b111bb4730c59d6f5b5a113bfd61058573016d079ac28ab05e762680d4ed104b89c55b47c59cc362151912f0ad9d898ec7f068fba19a3bc06236c077559234d4378f94cfd598601aa0f63d0d54cbf918e197408c81304b7cef836fd6c90e9d74caff06962312fccb614174a5034de7ddee9b492d789ac70899af0b1860eda763bc24a2df28a401a848196b01207e14ec93437d4f6e496a7a01baed960b2278a0ed71a8ffe078ea518b410bdf8eed5ca42007f8b9df3537ff9a5d4a467099eab0d8e1b121292290355c2c10c8c841569c257ad042407d8ff9427a67e0426be4962e337bd4fe540614ab21638b3f7c475f9b1b1032287f84429edbbd3ea8ab37beac321fbce63d9c7db353a44d06679ac38b65d5e993ed82def33d6f17b291a8fbf80aaf10ce91f967974c3dd45e94caa857e405a6afa9e84ba07a4097fa6dffb88d0e158c130a41f830c430c9f98c6f77a75ccfdef550073c80dcdada5d2151618e72a52346c410557bc68aae603bd16554b86fbda4da6bf94dcec25244cb81dae156966e4067ae9c3cf8de8bcedc4db12f28d5ee3a7124fdab92c95747cf4f4c1164430b6320ec4b41bd8995a90ffc3fbb603be1cb2039aed95ef879a1c9660df91fac44d6f2ae357f42cdd01e40ebaab578e2067dd64980c3f88a8636e188741c84d2e7ef988b7bfd91cac15847771f074ab55197544e80817fcfa54d9702231e257386a8ae73d4636b1b78602c8e94d3fe81df922590b97ecb0f0bcd39d6a03428ec19946604e5ee1fc3cdb4642359c4f4df686903c9f217639dae3143e65b5a58a3b122dddbe8f896c526820e8fc990aa22de2b255a7d8827e89e74e8f5208863a3ffa393bf62979217d73c62a7c562fb7a40e6d0746fcba1465f9b70865b2ab000355a683d811360bf70efcd5a49ca495238097c2811d3fc70331e03b18540c3f7aa869b8bc5f3e99f1e2241e731e452f0c43caf9ddbcfb19353a34783c63ec2f75ff3c8ec9bf04d03fcc688a655a8424d24de9dfa47e58b5b2ebec6a3a8ce58570baa7e7f919a2ffaab054bce1bb89ad341305a128c36eb27d5e3d0e86490af4995ca81a6dac18d5e5d92a93b232b17df52bcdfad0e32adb18c114add6676841fab02235bece58e93d74d24d6fb1b046a2c97235f466055ff063899fa518d40c9ddbc6f1774137befdd2b78a281766b8acb31a71f7ac3b6d56dd1bacc3cfcb067081bc8a30dd02d74ef060fab80865d4c37ed2572b2a006a9c968e45e9fd0120c", 0xf41}], 0x2, 0x8, 0x7, 0x17) (fail_nth: 2) 2m41.76792312s ago: executing program 4 (id=610): socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000300)={'pcmmio\x00', [0x4f27, 0x9, 0x4, 0x4, 0xfffffffd, 0x4, 0x4, 0x7, 0x50c6cff3, 0xfd, 0x88, 0x100001, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000e00), 0x12) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r6, &(0x7f0000000000), 0x8) io_submit(r7, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r6}]) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 2m26.343668393s ago: executing program 33 (id=610): socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000300)={'pcmmio\x00', [0x4f27, 0x9, 0x4, 0x4, 0xfffffffd, 0x4, 0x4, 0x7, 0x50c6cff3, 0xfd, 0x88, 0x100001, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000e00), 0x12) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r6, &(0x7f0000000000), 0x8) io_submit(r7, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r6}]) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 51.644939464s ago: executing program 0 (id=1001): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 49.427572692s ago: executing program 0 (id=1006): socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000300)={'pcmmio\x00', [0x4f27, 0x9, 0x4, 0x4, 0xfffffffd, 0x4, 0x4, 0x7, 0x50c6cff3, 0xfd, 0x88, 0x100001, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000e00), 0x12) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r5, &(0x7f0000000000), 0x8) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 47.180015586s ago: executing program 0 (id=1017): prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x2, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0x1d) setsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x300) r6 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) syz_emit_ethernet(0x104, &(0x7f00000007c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x73, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1=0xac1414aa}, {0x0, 0x0, 0xe2, 0x0, @opaque="41a53bc57d107c6ff061f03cf6bb904c78ef576fdf1a82582813d34772ce2518f6e064561bc8e7c4c3b88889ba6f28ff51a9fa5b94875a7f49e85b4bac7040c621fa1ab002461bb46e93c9f5664d16a8691bdff00d19f7d7fa1a06180e28c9c4ba89da8d2b37f8b0922eaf0298e2395e4b02c08e80b8dfbdfaf63d3c0cd02bc258452710b9ef5347ac7329042cbf02c5878b573d4abaeb9da781b320fd79d482302a8a531644f0d27c0bef42ed5444393fcb1886713b667dc79bd243ea971d9779b208dea2b767d07df0f49a807f9e23d1a8affe410311d17962"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0214f9f40700090400810000000003000000000000080004", 0x1f) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 44.31737522s ago: executing program 0 (id=1023): write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0xfe, 0x4}, {0x4, 0x6}, @time=@tick=0xcd}, {0x0, 0x0, 0x0, 0x4, @time={0x10001, 0x3ff}, {0x6, 0x4}, {0x0, 0xfe}, @result={0xd, 0x4}}], 0x38) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e08003950323030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 43.392602764s ago: executing program 0 (id=1029): socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000300)={'pcmmio\x00', [0x4f27, 0x9, 0x4, 0x4, 0xfffffffd, 0x4, 0x4, 0x7, 0x50c6cff3, 0xfd, 0x88, 0x100001, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000e00), 0x12) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r5, &(0x7f0000000000), 0x8) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 40.360329063s ago: executing program 0 (id=1033): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) userfaultfd(0x801) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4888", 0x2}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) ptrace(0x11, r4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket(0x22, 0x2, 0x24) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x2, 0x35a, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x400}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats_percpu\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000140)=""/186, 0xba}], 0x1, 0x236, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5, 0x0, 0x0, r7}) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100008010cc40820514009dbb0000000109022400013cc80aca0fac8a0f022a3e740009058bff273461e8da60582e812dabfc956493007c36697ed6c5dc5913ffae50f60000000000000000"], 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r8) 23.722264171s ago: executing program 34 (id=1033): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) userfaultfd(0x801) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4888", 0x2}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) ptrace(0x11, r4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket(0x22, 0x2, 0x24) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x2, 0x35a, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x400}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats_percpu\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000140)=""/186, 0xba}], 0x1, 0x236, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5, 0x0, 0x0, r7}) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100008010cc40820514009dbb0000000109022400013cc80aca0fac8a0f022a3e740009058bff273461e8da60582e812dabfc956493007c36697ed6c5dc5913ffae50f60000000000000000"], 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r8) 12.047070734s ago: executing program 3 (id=1150): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) execve(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0xf0f005, 0x2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1ce0ff00070601080000000000000000000000000500010006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000680)=""/4096, 0x1000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210800000122f8040905a103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500380012800b0001006272696467650000280002800500190002000000050017000000000008000100810000000a0014080000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) setuid(0x0) 11.390028755s ago: executing program 2 (id=1154): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x0, 0x2, 0x2, 0x9, 0xb, 0x4, 0xffffffffffffffff}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0xc3200, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x0, 0xb, 0x9, 0xc431}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000140)=[{0x3, 0x5, 0xf, 0xb}, {0x5, 0x1, 0x4, 0xc}, {0x3, 0x4, 0xb, 0x8}, {0x3, 0x1, 0xa, 0xc}], 0x10, 0x7}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x9, 0xff, 0xb3, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x20, 0x7, 0x3165c11b, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x12, 0x16, &(0x7f0000000740)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x32}, 0x94) 10.983787669s ago: executing program 2 (id=1158): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0xd, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/667, 0x9) fcntl$addseals(r6, 0x409, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, r8, 0x1, 0x4000000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x7}]}]}, 0x5c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 9.707502004s ago: executing program 2 (id=1161): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x9da, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}}}]}}]}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0x5, "fe1fc7e0"}, @main=@item_012={0x2, 0x0, 0xc, 'G_'}, @local=@item_4={0x3, 0x2, 0x3, "adba60a8"}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x9da, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}}}]}}]}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) (async) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0x5, "fe1fc7e0"}, @main=@item_012={0x2, 0x0, 0xc, 'G_'}, @local=@item_4={0x3, 0x2, 0x3, "adba60a8"}]}}, 0x0}, 0x0) (async) 9.021354067s ago: executing program 7 (id=1164): openat$tun(0xffffffffffffff9c, 0x0, 0xacd00, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x328}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xd806, 0x3010}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) faccessat(0xffffffffffffffff, 0x0, 0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000740)={'gre0\x00'}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000000)) 7.942786757s ago: executing program 3 (id=1166): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000043c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pwritev2(r4, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e489bcdd", 0x4}], 0x1, 0xfffffffc, 0xb, 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r4, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r4], 0x40c}}, 0x0) 7.736011047s ago: executing program 6 (id=1167): openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x118) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() 7.418062228s ago: executing program 7 (id=1169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000001c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000080)={0x0, 0x6, 0xfffffffffffffdd5, 0x200400}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300080001000000000014000000460000c914000000000190780a010100ac1414aa00000000040090780000000045000000"], 0x42) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000700)=[@rdmsr={0x32, 0x18, {0x238}}, @code={0xa, 0x67, {"c74424000e010000c744240202000000ff2c24f30f1efa2e450f005a0042dacdb9440300000f320f799ad00000000fc75a034124ff66ba4100ecc744240017000000c74424020e000000c7442406000000000f011424"}}, @wrmsr={0x1e, 0x20, {0x4000009b, 0x4}}, @wrmsr={0x1e, 0x20, {0x0, 0x9}}, @rdmsr={0x32, 0x18, {0xce36908675ed2dd6}}, @code={0xa, 0x62, {"b9a90a00000f3266baf80cb84bb9b68aef66bafc0cec66b81e008ee065f0430fc08a1b2b223b410f01cf3ef22ed9ff430f08f30fbd25db000000650f3266baf80cb81c14a48def66bafc0cb864fc4e0def"}}, @code={0xa, 0x7b, {"66450ffe280fc76bedb805000000b903f300000f01d9c74424002b010000c744240202000000ff1c24c44195f80d00000000b9df080000b8f4600000ba000000000f300fc75c7aa566b847008ee0b9060b0000b89faa0000ba000000000f300f20c035000000400f22c0"}}, @cpuid={0x14, 0x18, {0x503e, 0x5f46}}, @wr_crn={0x46, 0x20, {0x3, 0x3}}, @code={0xa, 0x7d, {"262e26acc46179114dec66b83f000f00d02e0f01c9c74424003a010000c744240200000000ff2c2466baf80cb8c80e2f86ef66bafc0cb800a00000ef0f01f80fc7bb00000100c744240043000000c74424022d480000ff2c24c744240035000000c7442402d3fa6101ff2c24"}}, @uexit={0x0, 0x18, 0x1}, @wrmsr={0x1e, 0x20, {0xe94, 0xf201}}, @code={0xa, 0x48, {"66430f21d066430f38301e0f553d35800000410f01dff30f3566400ff27d17dbed260f0866bad004b801000000efc4c22dba90d5020000"}}, @wr_crn={0x46, 0x20, {0x3, 0x8}}], 0x309}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="83000000000000002d090000000000000010000000000000db09000000000000050600000000000000000000000000000000000000006dc58f4899325ec80706960000"]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @initdev}, &(0x7f00000001c0)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r7, 0x25, 0x10, @void}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"}) syz_open_pts(r8, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r10 = eventfd(0x10) io_submit(r9, 0x1, &(0x7f00000006c0)=[&(0x7f0000000080)={0x0, 0x3e00, 0x0, 0x0, 0x4, r8, &(0x7f0000000400)='\x00', 0x1, 0xceaa, 0x0, 0x5, r10}]) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x30, r10, 0x31762000) close_range(r8, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom1\x00', 0x2, 0x0) 6.766039441s ago: executing program 3 (id=1170): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x2a) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000006, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc000, 0x0, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x1, 0x7ff, '\x00'}}]}, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x8e2, &(0x7f0000000940)={{0x12, 0x1, 0x200, 0x5, 0x2d, 0xf0, 0x10, 0x1bc7, 0x1072, 0xbf62, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d0, 0x4, 0x5, 0x4, 0x50, 0x40, [{{0x9, 0x4, 0xef, 0xff, 0xa, 0xff, 0x6e, 0x18, 0x4, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "8d74a25d13"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x6, 0x30, 0x2f}, {0x6, 0x24, 0x1a, 0x79ce, 0x13}, [@dmm={0x7, 0x24, 0x14, 0xfffa, 0x5}, @acm={0x4, 0x24, 0x2, 0x3}, @country_functional={0xa, 0x24, 0x7, 0x1, 0x2, [0x3, 0x2]}, @country_functional={0x8, 0x24, 0x7, 0x4, 0xa, [0x80]}, @mbim={0xc, 0x24, 0x1b, 0x1ff, 0x5, 0x8, 0x5, 0x2, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x800}]}], [{{0x9, 0x5, 0x7, 0x2, 0x8, 0x5, 0xf, 0xf9}}, {{0x9, 0x5, 0xf, 0xc, 0x210, 0xe8, 0x1, 0x1, [@generic={0x35, 0x6, "e80c4d02497fb7432ae6a8784972fbfe3ec26cc57faf8a3fda4a7c4476936ac12b63695682b9a5bc3b62e410e5425a1b42dac7"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x1}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x6, 0x7, 0xa5}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x3, 0xf8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0xe8c}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x10, 0x7}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x3, 0x0, 0x43}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x3, 0x3, 0x6}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x1, 0xf7, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x82, 0xd}, @generic={0x5c, 0x7, "4f93a2565f37ed36cb8d20a3626bf63b736a085380ebf36be49e97bc65fc795cafd3d636659536ac6f4c4b4f1547357ac6aa4c2b4c3e6cf3d267d1d1b96d6bf3698561731911bd2ab3f8722892087b34e0eba9f38636fc6a79d8"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x428, 0x1, 0xa4, 0x72, [@generic={0xb0, 0x31, "88d88189bb20658b874ea4f958e10819975af4dd945e0758a5eb9ac6e960ae949ab8f6b889b9798f4090a5f22fcbcd753a2e3b806eb18e1c0e3f7d996e6741bab133da87cd546a90e9c7a74ae0e4ecced776deb554b596d50a15fe27cbb6e4733844b17f20d658bff7cbb207000b7e16d7f8c83cac520c87a42c6262d7236cd8aef56ae78bb9508a902696ff63222b8eb52c9829aefcb09f37fe75b8a70bede6fe6d557002ea3a49c68612e10b34"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0xffff}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x7, 0x8, 0xce, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x9fc7}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x3, 0x2, 0xa, [@generic={0xef, 0x0, "ea5f0d2579a8c730b3d3cc08ff556dceffe140793906451006ce1dedea8688bf0a61182215b065773d5f40ccd9c62ae5cfb49f7e2759e2d9cbda16930fe3d592b4274ab9fc0a48d3c985a62dd34e812ef7144455eac7990b7ed646a8ddb8fdd383515ee0ff668b25a1d8229661e7a76897d4eb69abc0573e98223627941aa82f13e81f3199d677028f85cc52ed573ca6c9de0e2644637de2db93611ab3b9b54993b24bef8889d2cd36725f20caf364e119a0949d4c17cbc026b37b88ccc54088a4daf377e498ee366896afcf5294cbe5112472c925c4d7264a6bc5b61a43acf0226e6132bb239c2811e83cf07e"}]}}]}}, {{0x9, 0x4, 0xf, 0x40, 0x2, 0xff, 0x1, 0x32, 0x62, [@generic={0x100, 0x8, "19b3d8602f53020f0e87e01896def33807c059c6fcd3cccba8fd3a61ae2ac722544f84678b542c413af3e4e8e57680404f3ee5a920b0c695025bad69f334be2fecefca01e14af3570ed765a66a9055c9409f7c8ca63851645926bf51f1a7f64f3d37e1391dcc4990acc9ed38ea9a50f11b4c37d786b88c755c9430fe9a665b608e3c0edbde338201a79c6958211cd41f3e89a167d886512a35f53eaa04d6621c8c2bf7bec984e4e6a770867be7ec8e874884d697d35c2a37b9e18fdf7056f3f388fbd4ebe65d26a2c312a0c75aa29bd85eba84094061ab315db6cb7502df36ceb11af92b15e60263442b53cd370c16327c7fb67e4f69b62a6d1d6fdb7edb"}, @uac_control={{0xa, 0x24, 0x1, 0x813, 0x6}, [@extension_unit={0xb, 0x24, 0x8, 0x1, 0x5, 0xb, "db51943c"}, @processing_unit={0xd, 0x24, 0x7, 0x4, 0x1, 0xb, "2f09069e1d95"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x300, 0x4, 0x4, 0xb9}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x9, '\r'}]}], [{{0x9, 0x5, 0x7, 0xc, 0x10, 0x0, 0xfa, 0x3}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0xf, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x40}]}}]}}, {{0x9, 0x4, 0x49, 0x74, 0x0, 0xf1, 0x69, 0x7e, 0x2, [@hid_hid={0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0xd3c}}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "86"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x401, 0xd, 0x7f, 0x7}, {0x6, 0x24, 0x1a, 0xc, 0x20}, [@acm={0x4, 0x24, 0x2, 0x5}]}]}}, {{0x9, 0x4, 0xf5, 0x0, 0xf, 0xe3, 0x25, 0xcb, 0x10, [], [{{0x9, 0x5, 0x4, 0x0, 0x20, 0x7e, 0xfb, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x9}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x6, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5d, 0x9}]}}, {{0x9, 0x5, 0xea80d0a910ae2ab, 0x8, 0x210, 0xfb, 0x5, 0x5, [@generic={0x1c, 0x23, "d16c602844784bd5dad4110cfec5695f8df1e58de5249e47d5d7"}, @generic={0x9, 0x23, "e0a07326d26b0c"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x0, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x1, 0x0, 0x23, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x35, 0x7}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x1, 0x6, 0x7, [@generic={0xb4, 0x6, "d23717b87cda42587f53de391b57d9868566c9e31c81cd7c95378a1c4db6409ec6197b1e3b8be3efaca697714710ab7f6d3805491447cb7854124c16d940008ae5287f209f5fe0989ad086889721ea0c97ff15c3593284b093c498e08e6732c73f74c7a43ea81e272d3f0cad662bac2317dfa442d31b6cb5878ba015439a0bd99edbde5f9d0506961034800231916b24801999d448b18e9093d4e814594e75ae2ac07345615694079d70d37eeb0fb507163c"}, @generic={0x9, 0x24, "97ba0f60b31887"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x7, 0x5, 0x7}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x7, 0x1, 0x8}}, {{0x9, 0x5, 0x9, 0xc, 0x200, 0x3, 0x7, 0x30, [@generic={0xef, 0x31, "45e5bbeb3a98d23f3ed0059d982c48a1af2a60e54fbab05f50308de8d6723fa2b2cecfea29ae92e280485559d25dfc41fb4ccd15afdc8091acc98af4b78320b1074d0b756674ececdde09692651e16c13ed0d011baae1a4e7d2d0408cf0c6dd46fbd7d30e71a164692cde8493607673fdff510ca1ed43341be4e29d708a42132c2f52fe1e81e53c6e4c714150263bfdd870ec7e7ae49c06d91b924a5467e9d52e94a2d13242012e58a1aa527c3fdf3c5358826964d5ef68073d9aff2f41d0c83c39985d8cdf6f6fc6ebf1c7fb7730a2c57fa7dbb2938efb0bebbc77882f3b4fd3ed21c0212959c65d186d4ef48"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x2, 0x0, [@generic={0x5b, 0x9, "fd120a88f6540cd07da3f47cedcf2367a4a1534c82fb3222ae2444056c6906af1e3defdec9be91835832fc92c13073e30513f30f04a0b3f4a3e7ad85976c4b189bdc7a66e23a92e31d2794ee1bd9625684286e6b4e6d098e03"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc9, 0x8}]}}, {{0x9, 0x5, 0x0, 0xc, 0x1ff, 0x9, 0x8, 0x8, [@generic={0x4b, 0x21, "f97fad1556b27e0a0b343ffb0baf8255c85c0faba6ad6c2e9e9a22375573a18a610a5957b806ac0385fc17e00708336759842834c1f3fe1071d34f248a121e89ded06aa8ea355d28eb"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x24, 0x7, 0x44, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xa, 0x2}]}}, {{0x9, 0x5, 0x8, 0x10, 0x0, 0x5, 0x8, 0x0, [@generic={0xc9, 0x9, "b14c61bd4aa8839f5a0ad23437bd8869842a3de82f93f27b749cf8538d66659bb07b3b27e07f8f0cd76e97bdfd63205416174061fa4b39640f72b8f361662a66c82c9d444bf2556b46624a8e7866927be3dfe86cba5875a2c659883696b943f277aa7eea73189aff7ba0e58f412f403272f42e85b835161acdc1ddfc68b7f1f58abad0c078ce124449ce8b12a8b2c691ca9db4b9ce796d8ba99911633fe230dc957b6a38c66c374b326adf0b844af8f573d78b3a1e188098b9787635dea3ee9f405bbbd7f7eb0c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xb961}]}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0xc, 0x7, 0x40}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x0, 0xe, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x1db}]}}]}}]}}]}}, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001240)={0x0, 0xfffffffffffffff2, 0x9, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000006380)={0x0, 0x631fad01, @start={r3, 0x1, "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", "d296209afe19db4aefc74cf7da1a4f2245422b5af098b2fc2e8c92a5a4d27f62006d78c16e9be819d99c18521d4a8dcc829d038518a8c74376207847e21e05de4ddd172e3205f65417aed7e4754f7588b07f9ff311939b33f9a4b6666c05470e167982fc62ad4801213fe0458e4aaf1dbdf9561ecd8048dffc0f220341b8d44ea55411bf12a1f2b72666f05dd19e8f5c7f77abe18e1924459873e44a94a2a6e909991559c36244aeffd7bb9bb72f50137be5b1af57b46900436ed2027de4ce184f57e3926f749351b292999a67a1ca6fa43b2c3367e244978f12a0d2f7b85db427117db2856727aa050426a3bb6a51710165ef823577cbdff0ce17870cd4c0b86fe23c87cd3e0d99c8cb753380758fc545e51c1a6a64fa44ace139c44dd927dcfe316eb3b0b61162ccc1cdbe0f907d884927249c146ce98bb55b9cf5ee9add47cf3e8450ff022121d8e3f26f475fc3a5e88277651137f047ee633bcd6b1c10bd6903403a9d21a2f85b8d2184dc6304cd16b4b56fcb017d00882dcd8f81ad9545690fca2f383bef5378487f49878cd7b36c091e4ae14290eeb30beb359fa36e242ea012ea854ef16993db176afe0ff2495b603546c6360d4c02cf69269ae0b8b5da40c0a50fca71d802f7bf864576f0e6fdda1ed6427957a07aff78acff419466e01703ad085969de4fb34bea82fdcb30a19d803fca7f5493f07e7671db9288bea4a567e2ef4213504bfe321fb9568f205bbc49ab214f91241f8a4a77ace9db80d4387ade14202f86359482becf0c50c3340af49f0d1cec26f74627b0d1a8d6b47bed2f6c466b1175c8061912b64807be428eb4a8e58938bcf318ff89261bec963c091d757eec82e00f3a5a16e8bb3f55ff955e30d34f1dd184ee33c5575bc5053b8e75240ab41a569da080ebd90f7918e26d95e2d7007e6674f18f61688d6b259183385150d797a79c8af06185142c1ea4ce93247d2082eb0d49428370461e08c2de5d97f40f382f8be314f8704afd75af305f8d2657a96ee725fa013e19c5963b0f9a317735317d066b5c4a4b8e9e14dd8cf992c72d9e025133fedf8d28e7d4cab7f644a20f2d546aac1a2da12ca503a45654be97584356be1d01b003876fde773e4eb81fb5a043b7b824b119765880bb016be2c158b8bf99d6667a762dc177d4b2bc790734c7f12a1de9e21a2219d7196b7064e4124a0143e08e26e6760077a17e1581e6f3220087684b7fffb6e0327b592388d978302ec149ffa8f00f973d866d490ee6e4b1e99252ac4255d4e30f2c5f2b8a90f33fd0b139966f85b656485667bd95e5f92156496660d7c12c3254a808e84988411e860ad8575b7d95d19622e40930462018dd792ece1ee7751434bd784e29987110c05d597396a5068f66857a5f98c916ab22b6676f828d15cd319f595a7b740823e489f2a0fceeb9b3cdb4"}, [0x8, 0x3, 0x8, 0x9, 0x401, 0x6, 0x2, 0x7, 0x4, 0x1, 0x40000, 0xffff, 0x8, 0x5, 0x1, 0xc8, 0x1efc, 0x8000, 0x0, 0x0, 0x8, 0x3ff, 0x7, 0x5, 0x0, 0x6, 0x2, 0x5, 0x5, 0x6, 0xfffffffffffffff9, 0x800, 0x18b, 0x9, 0xfffffffffffffff7, 0xf, 0x2, 0xfff, 0x40, 0x9, 0xc, 0x5, 0x1, 0xb, 0x9, 0x3, 0xfffffffffffffff4, 0x400, 0x7f, 0x2, 0x986, 0x8, 0x10000, 0x75, 0x8, 0xe, 0x100000000, 0x3, 0x6, 0x7fff, 0x1a, 0xfffffffffffffff8, 0x7, 0x3]}) 6.595881009s ago: executing program 2 (id=1171): socket$unix(0x1, 0x5, 0x0) eventfd2(0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYRES32], &(0x7f0000000100)='syzkaller\x00', 0x10af39, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x24c3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2, 0x0, 0x10000}, 0x18) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0100, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x16) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000080)='pipefs\x00', 0x2, &(0x7f00000000c0)='${^!%!^-\x06(\xdb&\x94}\\\x00') msgget$private(0x0, 0x181) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000a2f000/0x1000)=nil, 0x1000, 0x300000f, 0x6, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) 6.415929329s ago: executing program 6 (id=1172): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.411553148s ago: executing program 5 (id=1173): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1ea4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000229bd7000fedbdf250100000008000600e0000002060001004e24000014000900fe8000000000000000000000000000aa08000b00", @ANYRES32=0x0, @ANYBLOB='\b\x00\v\x00', @ANYRES32=0x0, @ANYBLOB="1400090000000000000001000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x48001}, 0x4810) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x1, 0x803, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x1c, 0x43, 0x101, 0x70bd2d, 0x25dfdbfb, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) (async, rerun: 32) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) write$UHID_INPUT(r9, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000304000000000000400000000000", @ANYRES32=0x0, @ANYBLOB="adffa88800000000180012800e000100776972656775617264000000040002800800040000000000"], 0x40}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028029c20dd2", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8c4}, 0x8000) 6.348823431s ago: executing program 6 (id=1174): r0 = socket(0x40000000015, 0x5, 0x0) getpeername$tipc(r0, 0x0, 0x0) 6.278675132s ago: executing program 6 (id=1175): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r0, &(0x7f00000004c0)={0x18}, 0x18) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r2, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 6.216290417s ago: executing program 5 (id=1176): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$netlink(0x10, 0x3, 0x0) 6.215675074s ago: executing program 5 (id=1177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000d164dc024c656ed8", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f000000ab40)=[{{&(0x7f00000003c0)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}, 0x8}, {{&(0x7f0000000a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, 0x0}, 0x7}], 0x2, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x1, @rand_addr=0x64010101}, 0xa, 0x0, 0x800}}, 0x26) sendmmsg$inet(r6, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 5.590237727s ago: executing program 2 (id=1178): socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000300)={'pcmmio\x00', [0x4f27, 0x9, 0x4, 0x4, 0xfffffffd, 0x4, 0x4, 0x7, 0x50c6cff3, 0xfd, 0x88, 0x100001, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) syz_init_net_socket$x25(0x9, 0x5, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r4, &(0x7f0000000000), 0x8) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 5.444678942s ago: executing program 7 (id=1179): openat$tun(0xffffffffffffff9c, 0x0, 0xacd00, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a00030000060a010400000000000000000a0000010900010073797a3100000000d4020480d00201800a0001006d61746368000000c00202800e000100636f6e6e6c696d69740000000a00010071756f746100000053000300524fe5f7bfa25e1e47f1c3117c2eae4a49645f9b7406df29429e67f9ddc94aa356735e7babefb4578cf664e11b402b55e7b9d16bfca2d8afc172001988423a8762760891d68cab90ac84fe41a3e116000800024000000001da0003002409bb5468e4f70765c9bcb52a477bfaf974f96d6b0a7833dec945cb62643cfbd9bbd4e3d37640a10fb588a4caba4e8ae63304e3e6bac6df94b98fa8d712744782b3dc22a002194edfe83c86e6b1c50590a0975f5258a81f2d96486c39fb026106a671c9c4c094bb27be60c53487eba7a5ef3c093f5ae446e8883d13fb259f717d516b3c61db4901277716024c2967992f9031459766cf4f9507759a687b2f3c908c2c061e0b5de8e1275832ffcd0f8f412b97c22b44b6dfcd244617fe50403668ab8f0783f9daf2c9472129661f69fc56b067f25d8b00000800024000000003c2000300c26a1f0623dee8c8edb605bce29840447a3d0e5bf1ff02a634342f0ab3ae0b89bebcdd0fe8e052a8151ab5ca6fe43472c04f01ef85eab6e87f3821f3fc408f9a9908b36b403e446e9b71f50bb21242fb44bd35081e7cc810d01928fe186571372a179088eddac0ea62b8cabf01e1b069b405ee87a2d510f7d111d8ed2dc26bbe5260a5e6386db6d6e02feaa0d5317eebcc6196b4acf373f00169b4c03b4a90cf42da9fc310c300aab79a7658fbfc6e8977bf4f96fc2ae8e939ed007228d50000080002400000000094000300c167cc561df986b646e75dc4ec1f875c52562e49ccc52f75c319802ca24b7f96e049c940178515da05c344eb9b67eb75d3fd3d8c4b85bb4ed940e5aca75b286b9e82f06e1fa93d0954a1d958e2a39985001f027b30557f7d94694e221768e7fe7c77e2bd1bf2b8712829eb90242718dbf8546705f613d520dac4673c327248ca266b59c787a922d46c1444e9cfa7d5690900020073797a32"], 0x328}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xd806, 0x3010}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) faccessat(0xffffffffffffffff, 0x0, 0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000740)={'gre0\x00'}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000000)) 5.253221332s ago: executing program 5 (id=1180): socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000300)={'pcmmio\x00', [0x4f27, 0x9, 0x4, 0x4, 0xfffffffd, 0x4, 0x4, 0x7, 0x50c6cff3, 0xfd, 0x88, 0x100001, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) syz_init_net_socket$x25(0x9, 0x5, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r4, &(0x7f0000000000), 0x8) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 5.128085808s ago: executing program 6 (id=1181): prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000000000/0x3000)=nil) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1ff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000140)={r4, 0x1}, 0x8) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r6 = syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x0, 0x54}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0xa047, 0x0, 0x0, 0x0) 4.274261148s ago: executing program 7 (id=1182): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) 4.003771315s ago: executing program 7 (id=1183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="ffff0601611940000000000095000000000000f7fdff8e286bb7624a79628cbeed80c2c63e5c28dcb65c9ba9f43e685ed06b55b3d91c9518557bf34f9263f5b1840dcc32ddf4f5ef4b91d13fd8e01eb746ce7969fe1afe4bcd16189bea78b7e538e653c3189a88f277d95f1cc48ef3ec1c9c05f8ad0aacc23da7ae5c878856a2b452"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0xe, 0xf, 0x8, 0x1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x40, 0x8, 0x6}}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r2, @ANYBLOB='@H@\x00\x00\x00\x00\x00\x00\x00\n\r', @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, 0x0, 0x10) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x7, 0x2003) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x3, 0x0, &(0x7f0000000600)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000440)=[{}], 0x2, 0x0, &(0x7f0000000740)=[{}, {}], 0xa, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r6, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6}) 2.904577509s ago: executing program 7 (id=1184): socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000300)={'pcmmio\x00', [0x4f27, 0x9, 0x4, 0x4, 0xfffffffd, 0x4, 0x4, 0x7, 0x50c6cff3, 0xfd, 0x88, 0x100001, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000e00), 0x12) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r6, &(0x7f0000000000), 0x8) io_submit(r7, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r6}]) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 2.902112946s ago: executing program 2 (id=1185): socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000300)={'pcmmio\x00', [0x4f27, 0x9, 0x4, 0x4, 0xfffffffd, 0x4, 0x4, 0x7, 0x50c6cff3, 0xfd, 0x88, 0x100001, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000e00), 0x12) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r6, &(0x7f0000000000), 0x8) io_submit(r7, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r6}]) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 2.868261075s ago: executing program 3 (id=1186): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14e7e100158b010000000000000000000001fd00"], 0x14}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'sit0\x00'}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x3}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x993568c40857f797, &(0x7f00000011c0)=""/57, &(0x7f0000001200)=0x39) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x2, 0xb}}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x8228, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000080)) 2.847292412s ago: executing program 6 (id=1187): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x1, 0x2c000) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000300)={0x3, 0x3, 0x5}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x149a82, 0x40) write$cgroup_int(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'syzkaller1\x00', &(0x7f0000000080)=@ethtool_test={0x1a, 0x6, 0x3}}) pipe(&(0x7f00000000c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20000880) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000001040)={0x1002, 0x9, 0x0, 0xff, 0x17}) write$UHID_INPUT(r6, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0x64000ba6) r8 = getpgrp(r5) sched_setattr(r8, &(0x7f0000000240)={0x38, 0x3, 0x10000025, 0x100000, 0x8, 0x4, 0x3, 0x7, 0x2, 0x100}, 0x0) 1.72724133s ago: executing program 3 (id=1188): truncate(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000080), 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000300)=0x1f06) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000cc0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_advertising_info={{}, {0x1, [{0x4, 0x0, @none, 0x0, "", 0xc}]}}}}, 0xf) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000002100), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r7, 0x540a, 0x2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x78, r3, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x8000, @void, @void, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x1, 0x6, 0x0, {0x7, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}}, 0x24000080) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) sendmmsg(r1, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003500)="ee", 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.486274229s ago: executing program 5 (id=1189): pipe2$9p(&(0x7f0000000080), 0x84000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000080000060000000000000000975d00000000"], 0x0, 0x4, 0x1d, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0xa8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a73657428f842af5f7661725f72756e5f743a7330207379737406000000000000006563745f723a637261636b5f64625f743a733020313834343637343430373337303935353136303720756e636feb43696e65645f753a73797374656d5f723a696e736d6f645f743a73302d73303a63302e633130323300"], 0x8a) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r5, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 857.009266ms ago: executing program 3 (id=1190): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=1191): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000d164dc024c656ed8", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f000000ab40)=[{{&(0x7f00000003c0)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}, 0x8}, {{&(0x7f0000000a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, 0x0}, 0x7}], 0x2, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x1, @rand_addr=0x64010101}, 0xa, 0x0, 0x800}}, 0x26) sendmmsg$inet(r6, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) kernel console output (not intermixed with test programs): T8902] ? copy_msghdr_from_user+0x10a/0x160 [ 265.766331][ T8902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.766363][ T8902] ___sys_sendmsg+0x134/0x1d0 [ 265.766381][ T8902] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.766406][ T8902] ? __mutex_unlock_slowpath+0x100/0x800 [ 265.766422][ T8902] __sys_sendmsg+0x16d/0x220 [ 265.766433][ T8902] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.766458][ T8902] ? fdget+0x187/0x210 [ 265.766480][ T8902] do_syscall_64+0xcd/0x4c0 [ 265.766500][ T8902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.766516][ T8902] RIP: 0033:0x7f459318ebe9 [ 265.766527][ T8902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.766538][ T8902] RSP: 002b:00007f4594085038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.766549][ T8902] RAX: ffffffffffffffda RBX: 00007f45933b6090 RCX: 00007f459318ebe9 [ 265.766559][ T8902] RDX: 0000000000000080 RSI: 0000200000001540 RDI: 0000000000000003 [ 265.766568][ T8902] RBP: 00007f4594085090 R08: 0000000000000000 R09: 0000000000000000 [ 265.766578][ T8902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.766586][ T8902] R13: 00007f45933b6128 R14: 00007f45933b6090 R15: 00007fff3513d788 [ 265.766610][ T8902] [ 265.990443][ T979] sony 0003:054C:024B.000C: unexpected long global item [ 265.997828][ T979] sony 0003:054C:024B.000C: parse failed [ 266.004171][ T979] sony 0003:054C:024B.000C: probe with driver sony failed with error -22 [ 266.376441][ T8906] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 266.502672][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.725'. [ 267.284715][ T976] usb 1-1: USB disconnect, device number 16 [ 267.414215][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 267.429228][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 267.503319][ T10] usb 3-1: USB disconnect, device number 10 [ 267.546950][ T5991] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 267.641874][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:5.192/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.724829][ T5991] usb 7-1: Using ep0 maxpacket: 16 [ 267.734193][ T5991] usb 7-1: config 5 has an invalid interface number: 239 but max is 3 [ 267.752929][ T5991] usb 7-1: config 5 has an invalid interface number: 15 but max is 3 [ 267.833278][ T5991] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 267.856369][ T5991] usb 7-1: config 5 has 2 interfaces, different from the descriptor's value: 4 [ 267.868957][ T5991] usb 7-1: config 5 has no interface number 0 [ 267.883707][ T5991] usb 7-1: config 5 has no interface number 1 [ 267.891727][ T5991] usb 7-1: config 5 interface 239 altsetting 255 bulk endpoint 0x7 has invalid maxpacket 8 [ 267.909199][ T5991] usb 7-1: config 5 interface 239 altsetting 255 endpoint 0xF has invalid maxpacket 528, setting to 64 [ 267.923221][ T5991] usb 7-1: config 5 interface 239 altsetting 255 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 267.946017][ T8935] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.731'. [ 267.982503][ T5991] usb 7-1: config 5 interface 239 altsetting 255 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 267.993905][ T5991] usb 7-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 268.005497][ T5991] usb 7-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 268.023872][ T5991] usb 7-1: config 5 interface 239 altsetting 255 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 268.035728][ T5991] usb 7-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 268.050099][ T5991] usb 7-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0xC, skipping [ 268.061531][ T5991] usb 7-1: config 5 interface 239 altsetting 255 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 268.073023][ T5991] usb 7-1: config 5 interface 15 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 268.086220][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 268.096759][ T5991] usb 7-1: config 5 interface 239 has no altsetting 0 [ 268.108808][ T5991] usb 7-1: config 5 interface 15 has no altsetting 0 [ 268.119045][ T5991] usb 7-1: New USB device found, idVendor=1bc7, idProduct=1072, bcdDevice=bf.62 [ 268.129366][ T5991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.137515][ T5991] usb 7-1: Product: syz [ 268.171973][ T5991] usb 7-1: Manufacturer: syz [ 268.176703][ T5991] usb 7-1: SerialNumber: syz [ 268.184381][ T8918] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 268.226637][ T10] usb 3-1: device descriptor read/64, error -71 [ 268.244587][ T8938] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.732'. [ 268.270976][ T8937] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.732'. [ 268.397990][ T5991] option 7-1:5.239: GSM modem (1-port) converter detected [ 268.412694][ T5991] option 7-1:5.15: GSM modem (1-port) converter detected [ 268.432622][ T5991] usb 7-1: USB disconnect, device number 2 [ 268.455601][ T5991] option 7-1:5.239: device disconnected [ 268.471070][ T5991] option 7-1:5.15: device disconnected [ 268.476672][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 268.636715][ T10] usb 3-1: device descriptor read/64, error -71 [ 268.746917][ T10] usb usb3-port1: attempt power cycle [ 268.998388][ T8945] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 269.036030][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 269.174397][ T8950] 9pnet_fd: Insufficient options for proto=fd [ 269.181998][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 269.207339][ T10] usb 3-1: device descriptor read/8, error -71 [ 269.308662][ T8953] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 269.538584][ T8960] FAULT_INJECTION: forcing a failure. [ 269.538584][ T8960] name failslab, interval 1, probability 0, space 0, times 0 [ 269.551348][ T8960] CPU: 1 UID: 0 PID: 8960 Comm: syz.5.738 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 269.551374][ T8960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.551384][ T8960] Call Trace: [ 269.551391][ T8960] [ 269.551398][ T8960] dump_stack_lvl+0x16c/0x1f0 [ 269.551421][ T8960] should_fail_ex+0x512/0x640 [ 269.551441][ T8960] ? fs_reclaim_acquire+0xae/0x150 [ 269.551467][ T8960] ? tomoyo_encode2+0x100/0x3e0 [ 269.551491][ T8960] should_failslab+0xc2/0x120 [ 269.551512][ T8960] __kmalloc_noprof+0xd2/0x510 [ 269.551536][ T8960] tomoyo_encode2+0x100/0x3e0 [ 269.551565][ T8960] tomoyo_encode+0x29/0x50 [ 269.551588][ T8960] tomoyo_realpath_from_path+0x18f/0x6e0 [ 269.551617][ T8960] ? tomoyo_profile+0x47/0x60 [ 269.551636][ T8960] tomoyo_path_number_perm+0x245/0x580 [ 269.551657][ T8960] ? tomoyo_path_number_perm+0x237/0x580 [ 269.551681][ T8960] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 269.551704][ T8960] ? lockdep_hardirqs_on+0x7c/0x110 [ 269.551747][ T8960] ? find_held_lock+0x2b/0x80 [ 269.551769][ T8960] ? hook_file_ioctl_common+0x145/0x410 [ 269.551793][ T8960] ? __fget_files+0x20e/0x3c0 [ 269.551818][ T8960] security_file_ioctl+0x9b/0x240 [ 269.551844][ T8960] __x64_sys_ioctl+0xb7/0x210 [ 269.551872][ T8960] do_syscall_64+0xcd/0x4c0 [ 269.551893][ T8960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.551911][ T8960] RIP: 0033:0x7f8966f8ebe9 [ 269.551925][ T8960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.551942][ T8960] RSP: 002b:00007f8967e97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.551960][ T8960] RAX: ffffffffffffffda RBX: 00007f89671b6180 RCX: 00007f8966f8ebe9 [ 269.551971][ T8960] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000005 [ 269.551982][ T8960] RBP: 00007f8967e97090 R08: 0000000000000000 R09: 0000000000000000 [ 269.551992][ T8960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.552003][ T8960] R13: 00007f89671b6218 R14: 00007f89671b6180 R15: 00007ffece22d0f8 [ 269.552029][ T8960] [ 269.552129][ T8960] ERROR: Out of memory at tomoyo_realpath_from_path. [ 269.695482][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 269.712270][ T8960] bridge0: port 4(gretap0) entered blocking state [ 269.784161][ T8960] bridge0: port 4(gretap0) entered disabled state [ 269.792135][ T8960] gretap0: entered allmulticast mode [ 269.798777][ T8960] gretap0: entered promiscuous mode [ 269.804519][ T8960] bridge0: port 4(gretap0) entered blocking state [ 269.811091][ T8960] bridge0: port 4(gretap0) entered forwarding state [ 269.867599][ T10] usb 3-1: device descriptor read/8, error -71 [ 269.880957][ T30] audit: type=1400 audit(1755073898.780:353): avc: denied { listen } for pid=8963 comm="syz.0.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 269.915276][ T30] audit: type=1400 audit(1755073898.780:354): avc: denied { accept } for pid=8963 comm="syz.0.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 270.220631][ T10] usb usb3-port1: unable to enumerate USB device [ 270.251900][ T8968] autofs: Unknown parameter 'fd0x0000000000000004' [ 271.066793][ T5960] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 271.545477][ T5960] usb 1-1: device descriptor read/64, error -71 [ 271.721640][ T8998] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 271.886838][ T5960] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 272.026764][ T5960] usb 1-1: device descriptor read/64, error -71 [ 272.397003][ T5960] usb usb1-port1: attempt power cycle [ 273.078753][ T5960] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 273.108060][ T5960] usb 1-1: device descriptor read/8, error -71 [ 273.412824][ T5960] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 273.416308][ T9010] FAULT_INJECTION: forcing a failure. [ 273.416308][ T9010] name failslab, interval 1, probability 0, space 0, times 0 [ 273.433172][ T9010] CPU: 0 UID: 0 PID: 9010 Comm: syz.5.753 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 273.433188][ T9010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.433194][ T9010] Call Trace: [ 273.433198][ T9010] [ 273.433204][ T9010] dump_stack_lvl+0x16c/0x1f0 [ 273.433228][ T9010] should_fail_ex+0x512/0x640 [ 273.433243][ T9010] ? fs_reclaim_acquire+0xae/0x150 [ 273.433259][ T9010] ? tomoyo_encode2+0x100/0x3e0 [ 273.433274][ T9010] should_failslab+0xc2/0x120 [ 273.433288][ T9010] __kmalloc_noprof+0xd2/0x510 [ 273.433302][ T9010] tomoyo_encode2+0x100/0x3e0 [ 273.433319][ T9010] tomoyo_encode+0x29/0x50 [ 273.433333][ T9010] tomoyo_realpath_from_path+0x18f/0x6e0 [ 273.433350][ T9010] ? tomoyo_profile+0x47/0x60 [ 273.433362][ T9010] tomoyo_path_number_perm+0x245/0x580 [ 273.433375][ T9010] ? tomoyo_path_number_perm+0x237/0x580 [ 273.433389][ T9010] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 273.433403][ T9010] ? find_held_lock+0x2b/0x80 [ 273.433429][ T9010] ? find_held_lock+0x2b/0x80 [ 273.433441][ T9010] ? hook_file_ioctl_common+0x145/0x410 [ 273.433455][ T9010] ? __fget_files+0x20e/0x3c0 [ 273.433469][ T9010] security_file_ioctl+0x9b/0x240 [ 273.433485][ T9010] __x64_sys_ioctl+0xb7/0x210 [ 273.433502][ T9010] do_syscall_64+0xcd/0x4c0 [ 273.433514][ T9010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.433525][ T9010] RIP: 0033:0x7f8966f8ebe9 [ 273.433534][ T9010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.433545][ T9010] RSP: 002b:00007f8967ed9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.433555][ T9010] RAX: ffffffffffffffda RBX: 00007f89671b5fa0 RCX: 00007f8966f8ebe9 [ 273.433562][ T9010] RDX: 0000200000000180 RSI: 00000000c028aa05 RDI: 0000000000000005 [ 273.433568][ T9010] RBP: 00007f8967ed9090 R08: 0000000000000000 R09: 0000000000000000 [ 273.433574][ T9010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.433580][ T9010] R13: 00007f89671b6038 R14: 00007f89671b5fa0 R15: 00007ffece22d0f8 [ 273.433594][ T9010] [ 273.433606][ T9010] ERROR: Out of memory at tomoyo_realpath_from_path. [ 273.728395][ T5960] usb 1-1: device descriptor read/8, error -71 [ 273.910474][ T5960] usb usb1-port1: unable to enumerate USB device [ 273.990771][ T10] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 274.147554][ T10] usb 3-1: device descriptor read/64, error -71 [ 274.387094][ T10] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 274.867288][ T10] usb 3-1: device descriptor read/64, error -71 [ 274.952259][ T9043] 9pnet_fd: Insufficient options for proto=fd [ 274.986903][ T10] usb usb3-port1: attempt power cycle [ 274.999232][ T9045] FAULT_INJECTION: forcing a failure. [ 274.999232][ T9045] name failslab, interval 1, probability 0, space 0, times 0 [ 275.015113][ T9045] CPU: 1 UID: 0 PID: 9045 Comm: syz.5.763 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 275.015137][ T9045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.015147][ T9045] Call Trace: [ 275.015154][ T9045] [ 275.015160][ T9045] dump_stack_lvl+0x16c/0x1f0 [ 275.015184][ T9045] should_fail_ex+0x512/0x640 [ 275.015207][ T9045] ? fs_reclaim_acquire+0xae/0x150 [ 275.015232][ T9045] ? tomoyo_encode2+0x100/0x3e0 [ 275.015256][ T9045] should_failslab+0xc2/0x120 [ 275.015283][ T9045] __kmalloc_noprof+0xd2/0x510 [ 275.015301][ T9045] ? d_absolute_path+0x136/0x1a0 [ 275.015331][ T9045] tomoyo_encode2+0x100/0x3e0 [ 275.015359][ T9045] tomoyo_encode+0x29/0x50 [ 275.015384][ T9045] tomoyo_realpath_from_path+0x18f/0x6e0 [ 275.015417][ T9045] tomoyo_path_number_perm+0x245/0x580 [ 275.015437][ T9045] ? tomoyo_path_number_perm+0x237/0x580 [ 275.015460][ T9045] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 275.015508][ T9045] ? find_held_lock+0x2b/0x80 [ 275.015530][ T9045] ? hook_file_ioctl_common+0x145/0x410 [ 275.015553][ T9045] ? __fget_files+0x20e/0x3c0 [ 275.015577][ T9045] security_file_ioctl+0x9b/0x240 [ 275.015604][ T9045] __x64_sys_ioctl+0xb7/0x210 [ 275.015634][ T9045] do_syscall_64+0xcd/0x4c0 [ 275.015655][ T9045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.015673][ T9045] RIP: 0033:0x7f8966f8ebe9 [ 275.015687][ T9045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.015704][ T9045] RSP: 002b:00007f8967ed9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.015721][ T9045] RAX: ffffffffffffffda RBX: 00007f89671b5fa0 RCX: 00007f8966f8ebe9 [ 275.015732][ T9045] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000007 [ 275.015742][ T9045] RBP: 00007f8967ed9090 R08: 0000000000000000 R09: 0000000000000000 [ 275.015752][ T9045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.015762][ T9045] R13: 00007f89671b6038 R14: 00007f89671b5fa0 R15: 00007ffece22d0f8 [ 275.015787][ T9045] [ 275.015825][ T9045] ERROR: Out of memory at tomoyo_realpath_from_path. [ 275.379478][ T10] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 275.409133][ T10] usb 3-1: device descriptor read/8, error -71 [ 276.294118][ T9057] bridge0: port 3(team0) entered blocking state [ 276.300839][ T9057] bridge0: port 3(team0) entered disabled state [ 276.308141][ T9057] team0: entered allmulticast mode [ 276.313331][ T9057] team_slave_0: entered allmulticast mode [ 276.319180][ T9057] team_slave_1: entered allmulticast mode [ 276.334195][ T9057] team0: entered promiscuous mode [ 276.339382][ T9057] team_slave_0: entered promiscuous mode [ 276.346396][ T9057] team_slave_1: entered promiscuous mode [ 276.354732][ T9057] bridge0: port 3(team0) entered blocking state [ 276.361096][ T9057] bridge0: port 3(team0) entered forwarding state [ 276.582661][ T10] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 276.659002][ T10] usb 3-1: device descriptor read/8, error -71 [ 276.688181][ T9063] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 276.787227][ T10] usb usb3-port1: unable to enumerate USB device [ 277.206707][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 277.476681][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 277.565359][ T5991] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 277.600746][ T10] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 277.711307][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.732716][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.750431][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.773019][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.785525][ T5991] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 277.799508][ T5991] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.820699][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.949577][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.996637][ T5991] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.007051][ T5991] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 278.016322][ T5991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.031692][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.056731][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.067705][ T5991] usb 7-1: config 0 descriptor?? [ 278.093142][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 278.105813][ T9088] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 278.115109][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 278.144402][ T10] usb 3-1: SerialNumber: syz [ 278.153569][ T10] usb 3-1: config 0 descriptor?? [ 278.179742][ T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 278.501356][ T5991] sony 0003:054C:024B.000D: unexpected long global item [ 278.518432][ T5991] sony 0003:054C:024B.000D: parse failed [ 278.524334][ T5991] sony 0003:054C:024B.000D: probe with driver sony failed with error -22 [ 278.761904][ T9091] input: syz1 as /devices/virtual/input/input15 [ 279.826772][ T5991] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 279.996641][ T5991] usb 4-1: Using ep0 maxpacket: 16 [ 280.051115][ T979] usb 7-1: USB disconnect, device number 3 [ 280.077968][ T5991] usb 4-1: config 5 has an invalid interface number: 239 but max is 3 [ 280.086288][ T5991] usb 4-1: config 5 has an invalid interface number: 15 but max is 3 [ 280.096777][ T9102] binder: BINDER_SET_CONTEXT_MGR already set [ 280.102797][ T9102] binder: 9101:9102 ioctl 4018620d 200000000040 returned -16 [ 280.143794][ T5991] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 280.171796][ T5991] usb 4-1: config 5 has 2 interfaces, different from the descriptor's value: 4 [ 280.207476][ T5991] usb 4-1: config 5 has no interface number 0 [ 280.225329][ T5991] usb 4-1: config 5 has no interface number 1 [ 281.475694][ T5991] usb 4-1: config 5 interface 239 altsetting 255 bulk endpoint 0x7 has invalid maxpacket 8 [ 281.820387][ T9108] syz.5.782 (9108): drop_caches: 2 [ 281.881089][ T5203] bcm5974 3-1:0.0: could not read from device [ 281.888483][ T5991] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0xF has invalid maxpacket 528, setting to 64 [ 281.960154][ T5991] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 281.988712][ T5991] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 282.028034][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.783'. [ 282.036596][ T5991] usb 4-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 282.066616][ T5991] usb 4-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 282.086728][ T5991] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 282.108069][ T5991] usb 4-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 282.130888][ T5991] usb 4-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0xC, skipping [ 282.144002][ T5203] bcm5974 3-1:0.0: could not read from device [ 282.151942][ T5991] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 282.183348][ T5991] usb 4-1: config 5 interface 15 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 282.249900][ T5991] usb 4-1: config 5 interface 239 has no altsetting 0 [ 282.276951][ T5991] usb 4-1: config 5 interface 15 has no altsetting 0 [ 282.331064][ T5203] bcm5974 3-1:0.0: could not read from device [ 282.363010][ T5203] bcm5974 3-1:0.0: could not read from device [ 282.563893][ T10] usb 3-1: USB disconnect, device number 19 [ 282.600153][ T5991] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1072, bcdDevice=bf.62 [ 282.609521][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.618183][ T5991] usb 4-1: Product: syz [ 282.637094][ T5991] usb 4-1: can't set config #5, error -71 [ 282.702513][ T5991] usb 4-1: USB disconnect, device number 10 [ 283.086131][ T9129] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 283.170683][ T30] audit: type=1400 audit(1755073912.060:355): avc: denied { write } for pid=9123 comm="syz.3.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 283.326752][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 283.471698][ T9138] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.790'. [ 283.677252][ T9137] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.790'. [ 283.966667][ T9144] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 284.585957][ T30] audit: type=1800 audit(1755073913.270:356): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.795" name="file1" dev="overlay" ino=711 res=0 errno=0 [ 285.395966][ T9164] syz.0.799 (9164): drop_caches: 2 [ 285.829646][ T9167] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.797'. [ 286.022327][ T9161] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.797'. [ 286.486654][ T5919] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 287.048284][ T30] audit: type=1400 audit(1755073915.590:357): avc: denied { connect } for pid=9174 comm="syz.6.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 287.276684][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 287.285776][ T5919] usb 4-1: config 5 has an invalid interface number: 239 but max is 3 [ 287.304280][ T5919] usb 4-1: config 5 has an invalid interface number: 15 but max is 3 [ 287.396782][ T5919] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 287.436685][ T30] audit: type=1400 audit(1755073916.320:358): avc: denied { read } for pid=9181 comm="syz.0.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.455700][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.482078][ T5919] usb 4-1: config 5 has 2 interfaces, different from the descriptor's value: 4 [ 287.501762][ T5919] usb 4-1: config 5 has no interface number 0 [ 287.508121][ T30] audit: type=1400 audit(1755073916.320:359): avc: denied { map } for pid=9181 comm="syz.0.803" path="socket:[22805]" dev="sockfs" ino=22805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.531356][ T5919] usb 4-1: config 5 has no interface number 1 [ 287.533723][ T30] audit: type=1400 audit(1755073916.320:360): avc: denied { connect } for pid=9181 comm="syz.0.803" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 287.537742][ T5919] usb 4-1: config 5 interface 239 altsetting 255 bulk endpoint 0x7 has invalid maxpacket 8 [ 287.561285][ T30] audit: type=1400 audit(1755073916.320:361): avc: denied { write } for pid=9181 comm="syz.0.803" laddr=fe80::16 lport=60 faddr=fe80::bb fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 287.613551][ T5919] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0xF has invalid maxpacket 528, setting to 64 [ 287.738572][ T9189] binder: BINDER_SET_CONTEXT_MGR already set [ 287.744636][ T9189] binder: 9185:9189 ioctl 4018620d 200000000040 returned -16 [ 287.797151][ T9193] FAULT_INJECTION: forcing a failure. [ 287.797151][ T9193] name failslab, interval 1, probability 0, space 0, times 0 [ 287.809964][ T9193] CPU: 1 UID: 0 PID: 9193 Comm: syz.6.804 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 287.809986][ T9193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.810004][ T9193] Call Trace: [ 287.810015][ T9193] [ 287.810022][ T9193] dump_stack_lvl+0x16c/0x1f0 [ 287.810046][ T9193] should_fail_ex+0x512/0x640 [ 287.810066][ T9193] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 287.810096][ T9193] should_failslab+0xc2/0x120 [ 287.810117][ T9193] __kmalloc_cache_noprof+0x6a/0x3e0 [ 287.810143][ T9193] ? __lock_acquire+0xb97/0x1ce0 [ 287.810169][ T9193] ? alloc_pipe_info+0x10e/0x590 [ 287.810202][ T9193] alloc_pipe_info+0x10e/0x590 [ 287.810226][ T9193] splice_direct_to_actor+0x77d/0xa30 [ 287.810248][ T9193] ? __lock_acquire+0x62e/0x1ce0 [ 287.810272][ T9193] ? __pfx_direct_splice_actor+0x10/0x10 [ 287.810296][ T9193] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 287.810323][ T9193] do_splice_direct+0x174/0x240 [ 287.810342][ T9193] ? __pfx_do_splice_direct+0x10/0x10 [ 287.810360][ T9193] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 287.810383][ T9193] ? rw_verify_area+0xcf/0x6c0 [ 287.810412][ T9193] do_sendfile+0xb06/0xe50 [ 287.810434][ T9193] ? __pfx_do_sendfile+0x10/0x10 [ 287.810461][ T9193] __x64_sys_sendfile64+0x154/0x220 [ 287.810485][ T9193] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 287.810516][ T9193] do_syscall_64+0xcd/0x4c0 [ 287.810537][ T9193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.810554][ T9193] RIP: 0033:0x7f905978ebe9 [ 287.810569][ T9193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.810586][ T9193] RSP: 002b:00007f905a5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 287.810604][ T9193] RAX: ffffffffffffffda RBX: 00007f90599b6090 RCX: 00007f905978ebe9 [ 287.810615][ T9193] RDX: 0000200000002080 RSI: 0000000000000007 RDI: 0000000000000008 [ 287.810625][ T9193] RBP: 00007f905a5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 287.810646][ T9193] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 287.810657][ T9193] R13: 00007f90599b6128 R14: 00007f90599b6090 R15: 00007ffc20fea6e8 [ 287.810682][ T9193] [ 288.031552][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.350579][ T5919] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 288.588264][ T5919] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 288.636424][ T5919] usb 4-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 288.767952][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'. [ 288.785801][ T9201] bpq0: entered promiscuous mode [ 289.499865][ T30] audit: type=1400 audit(1755073917.690:362): avc: denied { connect } for pid=9196 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 289.519348][ T5919] usb 4-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 289.519377][ T5919] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 289.519399][ T5919] usb 4-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 289.519417][ T5919] usb 4-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0xC, skipping [ 289.519437][ T5919] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 289.519468][ T5919] usb 4-1: config 5 interface 15 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 289.686352][ T5919] usb 4-1: config 5 interface 239 has no altsetting 0 [ 289.695733][ T5919] usb 4-1: config 5 interface 15 has no altsetting 0 [ 289.712499][ T5919] usb 4-1: string descriptor 0 read error: -71 [ 289.713266][ T9200] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.809'. [ 289.719134][ T5919] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1072, bcdDevice=bf.62 [ 289.737438][ T9202] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.809'. [ 289.753009][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.820808][ T5919] usb 4-1: can't set config #5, error -71 [ 289.871363][ T9208] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.811'. [ 289.890115][ T9207] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.811'. [ 289.905851][ T5919] usb 4-1: USB disconnect, device number 11 [ 290.206833][ T9219] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.814'. [ 290.878001][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 291.047971][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 291.061298][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.072416][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.083894][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 291.116181][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.135599][ T10] usb 4-1: config 0 descriptor?? [ 291.548838][ T10] sony 0003:054C:024B.000E: unexpected long global item [ 291.559572][ T10] sony 0003:054C:024B.000E: parse failed [ 291.566137][ T10] sony 0003:054C:024B.000E: probe with driver sony failed with error -22 [ 291.633517][ T9233] 9pnet_fd: Insufficient options for proto=fd [ 291.686718][ T5919] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 291.842522][ T5919] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 291.852165][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.876981][ T5919] usb 6-1: Product: syz [ 291.881187][ T5919] usb 6-1: Manufacturer: syz [ 291.885817][ T5919] usb 6-1: SerialNumber: syz [ 291.923351][ T5919] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 291.941443][ T30] audit: type=1400 audit(1755073920.840:363): avc: denied { firmware_load } for pid=5960 comm="kworker/1:7" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 292.003280][ T5960] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 292.056802][ T5920] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 292.191553][ T9245] FAULT_INJECTION: forcing a failure. [ 292.191553][ T9245] name failslab, interval 1, probability 0, space 0, times 0 [ 292.204406][ T9245] CPU: 1 UID: 0 PID: 9245 Comm: syz.6.822 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 292.204431][ T9245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.204441][ T9245] Call Trace: [ 292.204447][ T9245] [ 292.204454][ T9245] dump_stack_lvl+0x16c/0x1f0 [ 292.204476][ T9245] should_fail_ex+0x512/0x640 [ 292.204496][ T9245] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 292.204531][ T9245] should_failslab+0xc2/0x120 [ 292.204551][ T9245] __kmalloc_cache_noprof+0x6a/0x3e0 [ 292.204579][ T9245] ? alloc_pipe_info+0x10e/0x590 [ 292.204606][ T9245] alloc_pipe_info+0x10e/0x590 [ 292.204630][ T9245] splice_direct_to_actor+0x77d/0xa30 [ 292.204651][ T9245] ? __lock_acquire+0x62e/0x1ce0 [ 292.204677][ T9245] ? __pfx_direct_splice_actor+0x10/0x10 [ 292.204701][ T9245] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 292.204728][ T9245] do_splice_direct+0x174/0x240 [ 292.204747][ T9245] ? __pfx_do_splice_direct+0x10/0x10 [ 292.204766][ T9245] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 292.204789][ T9245] ? rw_verify_area+0xcf/0x6c0 [ 292.204818][ T9245] do_sendfile+0xb06/0xe50 [ 292.204840][ T9245] ? __pfx_do_sendfile+0x10/0x10 [ 292.204866][ T9245] __x64_sys_sendfile64+0x154/0x220 [ 292.204888][ T9245] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 292.204917][ T9245] do_syscall_64+0xcd/0x4c0 [ 292.204940][ T9245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.204957][ T9245] RIP: 0033:0x7f905978ebe9 [ 292.204972][ T9245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.204989][ T9245] RSP: 002b:00007f905a5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 292.205006][ T9245] RAX: ffffffffffffffda RBX: 00007f90599b6090 RCX: 00007f905978ebe9 [ 292.205018][ T9245] RDX: 0000200000002080 RSI: 0000000000000005 RDI: 0000000000000006 [ 292.205028][ T9245] RBP: 00007f905a5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 292.205038][ T9245] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 292.205048][ T9245] R13: 00007f90599b6128 R14: 00007f90599b6090 R15: 00007ffc20fea6e8 [ 292.205073][ T9245] [ 292.419412][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 292.434247][ T5920] usb 1-1: config 5 has an invalid interface number: 239 but max is 3 [ 292.442796][ T5920] usb 1-1: config 5 has an invalid interface number: 15 but max is 3 [ 292.451684][ T5920] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 292.462021][ T5920] usb 1-1: config 5 has 2 interfaces, different from the descriptor's value: 4 [ 292.471351][ T5920] usb 1-1: config 5 has no interface number 0 [ 292.477603][ T5920] usb 1-1: config 5 has no interface number 1 [ 292.484278][ T5920] usb 1-1: config 5 interface 239 altsetting 255 bulk endpoint 0x7 has invalid maxpacket 8 [ 292.494560][ T5920] usb 1-1: config 5 interface 239 altsetting 255 endpoint 0xF has invalid maxpacket 528, setting to 64 [ 292.505796][ T5920] usb 1-1: config 5 interface 239 altsetting 255 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 292.517287][ T5920] usb 1-1: config 5 interface 239 altsetting 255 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 292.528836][ T5920] usb 1-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 292.540240][ T5920] usb 1-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 292.551564][ T5920] usb 1-1: config 5 interface 239 altsetting 255 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 292.563324][ T5920] usb 1-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 292.574654][ T5920] usb 1-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0xC, skipping [ 292.586084][ T5920] usb 1-1: config 5 interface 239 altsetting 255 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 292.597634][ T5920] usb 1-1: config 5 interface 15 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 292.610987][ T5920] usb 1-1: config 5 interface 239 has no altsetting 0 [ 292.617842][ T5920] usb 1-1: config 5 interface 15 has no altsetting 0 [ 292.659773][ T5920] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1072, bcdDevice=bf.62 [ 292.677171][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.685486][ T5920] usb 1-1: Product: syz [ 292.691526][ T5920] usb 1-1: Manufacturer: syz [ 292.696383][ T5920] usb 1-1: SerialNumber: syz [ 292.979920][ T10] usb 4-1: USB disconnect, device number 12 [ 292.980186][ T9236] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 293.095372][ T5960] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 293.121436][ T5960] ath9k_htc: Failed to initialize the device [ 293.218696][ T5960] usb 6-1: ath9k_htc: USB layer deinitialized [ 293.874728][ T5919] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 294.076628][ T5919] usb 7-1: Using ep0 maxpacket: 8 [ 294.083664][ T5919] usb 7-1: unable to get BOS descriptor or descriptor too short [ 294.097524][ T5919] usb 7-1: config 4 interface 0 has no altsetting 0 [ 294.106437][ T5919] usb 7-1: string descriptor 0 read error: -22 [ 294.114471][ T5919] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 294.133710][ T5919] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 294.176242][ T5919] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 294.231731][ T5919] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 294.257475][ T5919] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 294.283023][ T5919] usb 7-1: media controller created [ 294.588608][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 294.690026][ T5919] zl10353_read_register: readreg error (reg=127, ret==0) [ 294.723956][ T9264] fuse: Bad value for 'fd' [ 294.921394][ T5919] usb 7-1: USB disconnect, device number 4 [ 294.970475][ T5920] option 1-1:5.239: GSM modem (1-port) converter detected [ 295.033118][ T5920] option 1-1:5.15: GSM modem (1-port) converter detected [ 295.163951][ T5920] usb 1-1: USB disconnect, device number 21 [ 295.231064][ T9270] binder: BINDER_SET_CONTEXT_MGR already set [ 295.249351][ T9270] binder: 9269:9270 ioctl 4018620d 200000000040 returned -16 [ 295.294374][ T5920] option 1-1:5.239: device disconnected [ 295.421539][ T5920] option 1-1:5.15: device disconnected [ 295.506027][ T5919] usb 6-1: USB disconnect, device number 9 [ 295.562590][ T9274] 9pnet_fd: Insufficient options for proto=fd [ 297.026871][ T9289] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.829'. [ 297.400216][ T9296] tipc: Started in network mode [ 297.426617][ T9296] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 297.451465][ T9296] tipc: Enabled bearer , priority 0 [ 298.116688][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 298.230485][ T5991] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 298.310094][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 298.333998][ T9] usb 4-1: config 5 has an invalid interface number: 239 but max is 3 [ 298.369822][ T9] usb 4-1: config 5 has an invalid interface number: 15 but max is 3 [ 298.396619][ T9] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 298.415744][ T9311] program syz.5.841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.438744][ T5991] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.465795][ T5991] usb 7-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 298.482401][ T9] usb 4-1: config 5 has 2 interfaces, different from the descriptor's value: 4 [ 298.503969][ T5991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.520330][ T9] usb 4-1: config 5 has no interface number 0 [ 298.528273][ T30] audit: type=1400 audit(1755073927.330:364): avc: denied { read write } for pid=9308 comm="syz.5.841" name="mouse0" dev="devtmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 298.562583][ T5991] usb 7-1: Product: syz [ 298.577745][ T5919] tipc: Node number set to 11578026 [ 298.583106][ T9] usb 4-1: config 5 has no interface number 1 [ 298.583154][ T9] usb 4-1: config 5 interface 239 altsetting 255 bulk endpoint 0x7 has invalid maxpacket 8 [ 298.623125][ T5991] usb 7-1: Manufacturer: syz [ 298.729585][ T5991] usb 7-1: SerialNumber: syz [ 298.740607][ T30] audit: type=1400 audit(1755073927.330:365): avc: denied { open } for pid=9308 comm="syz.5.841" path="/dev/input/mouse0" dev="devtmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 298.743927][ T5991] usb 7-1: config 0 descriptor?? [ 298.775200][ T9] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0xF has invalid maxpacket 528, setting to 64 [ 298.813895][ T9] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 298.828731][ T9] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 298.841242][ T9] usb 4-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 298.860206][ T9] usb 4-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 298.881107][ T9] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 298.893211][ T9] usb 4-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 298.917266][ T9] usb 4-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0xC, skipping [ 298.936358][ T9] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 298.951347][ T9] usb 4-1: config 5 interface 15 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 298.980976][ T9] usb 4-1: config 5 interface 239 has no altsetting 0 [ 299.001661][ T9] usb 4-1: config 5 interface 15 has no altsetting 0 [ 299.114681][ T5991] f81534a_ctrl 7-1:0.0: failed to set register 0x116: -5 [ 299.147088][ T9] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1072, bcdDevice=bf.62 [ 299.162647][ T5991] f81534a_ctrl 7-1:0.0: failed to enable ports: -5 [ 299.170176][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.178690][ T5991] f81534a_ctrl 7-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 299.190319][ T9] usb 4-1: Product: syz [ 299.194574][ T9] usb 4-1: Manufacturer: syz [ 299.210977][ T9] usb 4-1: SerialNumber: syz [ 299.231124][ T9305] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 299.238931][ T5991] usb 7-1: USB disconnect, device number 5 [ 299.406979][ T9320] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 299.476433][ T9] option 4-1:5.239: GSM modem (1-port) converter detected [ 299.626523][ T9] option 4-1:5.15: GSM modem (1-port) converter detected [ 299.668794][ T9] usb 4-1: USB disconnect, device number 13 [ 299.707063][ T9] option 4-1:5.239: device disconnected [ 299.724068][ T9] option 4-1:5.15: device disconnected [ 300.008002][ T9329] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 300.294318][ T9335] program syz.3.850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.313913][ T30] audit: type=1400 audit(1755073929.190:366): avc: denied { append } for pid=9334 comm="syz.3.850" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 300.647328][ T9336] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 301.358736][ T9344] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 301.520349][ T30] audit: type=1400 audit(1755073930.420:367): avc: denied { setopt } for pid=9345 comm="syz.2.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 301.754143][ T30] audit: type=1400 audit(1755073930.440:368): avc: denied { connect } for pid=9345 comm="syz.2.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 302.009390][ T9351] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.854'. [ 304.990510][ T976] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 305.549349][ T5920] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 305.627398][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 305.642915][ T976] usb 1-1: config 5 has an invalid interface number: 239 but max is 3 [ 305.664634][ T976] usb 1-1: config 5 has an invalid interface number: 15 but max is 3 [ 305.694673][ T976] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 305.810166][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 305.811131][ T976] usb 1-1: config 5 has 2 interfaces, different from the descriptor's value: 4 [ 305.930486][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 305.951883][ T5920] usb 3-1: config 4 interface 0 has no altsetting 0 [ 306.539000][ T5920] usb 3-1: string descriptor 0 read error: -22 [ 306.547380][ T5920] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 306.559933][ T5920] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 306.849615][ T5920] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 306.850318][ T976] usb 1-1: config 5 has no interface number 0 [ 306.925487][ T5920] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 306.954489][ T976] usb 1-1: config 5 has no interface number 1 [ 306.979064][ T976] usb 1-1: config 5 interface 239 altsetting 255 bulk endpoint 0x7 has invalid maxpacket 8 [ 306.985287][ T5920] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 307.006751][ T976] usb 1-1: config 5 interface 239 altsetting 255 endpoint 0xF has invalid maxpacket 528, setting to 64 [ 307.116838][ T5920] usb 3-1: media controller created [ 307.143544][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 307.165651][ T5920] zl10353_read_register: readreg error (reg=127, ret==0) [ 308.118571][ T976] usb 1-1: config 5 interface 239 altsetting 255 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 308.156134][ T5920] usb 3-1: USB disconnect, device number 20 [ 308.386588][ T976] usb 1-1: config 5 interface 239 altsetting 255 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 308.655316][ T976] usb 1-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 308.716843][ T976] usb 1-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 308.765363][ T976] usb 1-1: config 5 interface 239 altsetting 255 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 308.777660][ T976] usb 1-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 308.789337][ T976] usb 1-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0xC, skipping [ 308.801368][ T976] usb 1-1: config 5 interface 239 altsetting 255 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 308.813753][ T976] usb 1-1: config 5 interface 15 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 308.834393][ T976] usb 1-1: config 5 interface 239 has no altsetting 0 [ 308.841451][ T976] usb 1-1: config 5 interface 15 has no altsetting 0 [ 309.027920][ T976] usb 1-1: string descriptor 0 read error: -71 [ 309.049265][ T976] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1072, bcdDevice=bf.62 [ 309.088258][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.146591][ T976] usb 1-1: can't set config #5, error -71 [ 309.196753][ T976] usb 1-1: USB disconnect, device number 22 [ 312.249704][ T9453] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 312.425301][ T9456] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 312.904250][ T30] audit: type=1326 audit(1755073941.800:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16158ebe9 code=0x7ffc0000 [ 312.984296][ T30] audit: type=1326 audit(1755073941.800:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16158ebe9 code=0x7ffc0000 [ 313.231642][ T9467] FAULT_INJECTION: forcing a failure. [ 313.231642][ T9467] name failslab, interval 1, probability 0, space 0, times 0 [ 313.316750][ T9467] CPU: 0 UID: 0 PID: 9467 Comm: syz.5.882 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 313.316773][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.316779][ T9467] Call Trace: [ 313.316784][ T9467] [ 313.316788][ T9467] dump_stack_lvl+0x16c/0x1f0 [ 313.316803][ T9467] should_fail_ex+0x512/0x640 [ 313.316815][ T9467] ? fs_reclaim_acquire+0xae/0x150 [ 313.316831][ T9467] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 313.316847][ T9467] should_failslab+0xc2/0x120 [ 313.316860][ T9467] __kmalloc_noprof+0xd2/0x510 [ 313.316874][ T9467] tomoyo_realpath_from_path+0xc2/0x6e0 [ 313.316891][ T9467] ? tomoyo_profile+0x47/0x60 [ 313.316903][ T9467] tomoyo_path_number_perm+0x245/0x580 [ 313.316915][ T9467] ? tomoyo_path_number_perm+0x237/0x580 [ 313.316930][ T9467] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 313.316959][ T9467] ? find_held_lock+0x2b/0x80 [ 313.316973][ T9467] ? hook_file_ioctl_common+0x145/0x410 [ 313.316987][ T9467] ? __fget_files+0x20e/0x3c0 [ 313.317001][ T9467] security_file_ioctl+0x9b/0x240 [ 313.317019][ T9467] __x64_sys_ioctl+0xb7/0x210 [ 313.317037][ T9467] do_syscall_64+0xcd/0x4c0 [ 313.317049][ T9467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.317060][ T9467] RIP: 0033:0x7f8966f8ebe9 [ 313.317069][ T9467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.317079][ T9467] RSP: 002b:00007f8967ed9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.317090][ T9467] RAX: ffffffffffffffda RBX: 00007f89671b5fa0 RCX: 00007f8966f8ebe9 [ 313.317096][ T9467] RDX: 0000000000000000 RSI: 0000000000006411 RDI: 0000000000000003 [ 313.317102][ T9467] RBP: 00007f8967ed9090 R08: 0000000000000000 R09: 0000000000000000 [ 313.317108][ T9467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.317114][ T9467] R13: 00007f89671b6038 R14: 00007f89671b5fa0 R15: 00007ffece22d0f8 [ 313.317128][ T9467] [ 313.317133][ T9467] ERROR: Out of memory at tomoyo_realpath_from_path. [ 315.347628][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 315.536739][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 315.543261][ T9] usb 6-1: config 5 has an invalid interface number: 239 but max is 3 [ 315.555246][ T9] usb 6-1: config 5 has an invalid interface number: 15 but max is 3 [ 315.589275][ T9] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 315.675150][ T9] usb 6-1: config 5 has 2 interfaces, different from the descriptor's value: 4 [ 315.836054][ T9] usb 6-1: config 5 has no interface number 0 [ 316.260979][ T9] usb 6-1: config 5 has no interface number 1 [ 316.268101][ T9] usb 6-1: config 5 interface 239 altsetting 255 bulk endpoint 0x7 has invalid maxpacket 8 [ 316.280433][ T9] usb 6-1: config 5 interface 239 altsetting 255 endpoint 0xF has invalid maxpacket 528, setting to 64 [ 316.308517][ T9] usb 6-1: config 5 interface 239 altsetting 255 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 316.365101][ T9] usb 6-1: config 5 interface 239 altsetting 255 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 316.398527][ T9] usb 6-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 316.426837][ T9] usb 6-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 316.446806][ T9] usb 6-1: config 5 interface 239 altsetting 255 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 316.467514][ T9] usb 6-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 316.502027][ T9] usb 6-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0xC, skipping [ 316.536725][ T9] usb 6-1: config 5 interface 239 altsetting 255 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 316.606798][ T9] usb 6-1: config 5 interface 15 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 316.770762][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.777175][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.965036][ T9] usb 6-1: config 5 interface 239 has no altsetting 0 [ 316.986622][ T9] usb 6-1: config 5 interface 15 has no altsetting 0 [ 317.100546][ T9] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1072, bcdDevice=bf.62 [ 317.149173][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.186922][ T9] usb 6-1: Product: syz [ 317.191103][ T9] usb 6-1: Manufacturer: syz [ 317.238026][ T9] usb 6-1: SerialNumber: syz [ 317.262240][ T9482] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 317.351059][ T9520] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 317.795190][ T9] option 6-1:5.239: GSM modem (1-port) converter detected [ 317.872624][ T9] option 6-1:5.15: GSM modem (1-port) converter detected [ 317.900385][ T9532] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 317.946852][ T9] usb 6-1: USB disconnect, device number 10 [ 317.964409][ T9] option 6-1:5.239: device disconnected [ 318.021940][ T9] option 6-1:5.15: device disconnected [ 320.984062][ T9579] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 321.081394][ T9581] FAULT_INJECTION: forcing a failure. [ 321.081394][ T9581] name failslab, interval 1, probability 0, space 0, times 0 [ 321.163980][ T9581] CPU: 0 UID: 0 PID: 9581 Comm: syz.0.907 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 321.164006][ T9581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.164017][ T9581] Call Trace: [ 321.164023][ T9581] [ 321.164030][ T9581] dump_stack_lvl+0x16c/0x1f0 [ 321.164053][ T9581] should_fail_ex+0x512/0x640 [ 321.164072][ T9581] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 321.164093][ T9581] should_failslab+0xc2/0x120 [ 321.164113][ T9581] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 321.164129][ T9581] ? __alloc_skb+0x2b2/0x380 [ 321.164157][ T9581] __alloc_skb+0x2b2/0x380 [ 321.164182][ T9581] ? __pfx___alloc_skb+0x10/0x10 [ 321.164209][ T9581] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 321.164233][ T9581] netlink_alloc_large_skb+0x69/0x130 [ 321.164252][ T9581] netlink_sendmsg+0x6a1/0xdd0 [ 321.164275][ T9581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.164303][ T9581] ____sys_sendmsg+0xa98/0xc70 [ 321.164325][ T9581] ? copy_msghdr_from_user+0x10a/0x160 [ 321.164343][ T9581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.164376][ T9581] ___sys_sendmsg+0x134/0x1d0 [ 321.164395][ T9581] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.164434][ T9581] ? __mutex_unlock_slowpath+0x100/0x800 [ 321.164459][ T9581] __sys_sendmsg+0x16d/0x220 [ 321.164478][ T9581] ? __pfx___sys_sendmsg+0x10/0x10 [ 321.164510][ T9581] do_syscall_64+0xcd/0x4c0 [ 321.164529][ T9581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.164546][ T9581] RIP: 0033:0x7fd16158ebe9 [ 321.164559][ T9581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.164574][ T9581] RSP: 002b:00007fd162495038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.164591][ T9581] RAX: ffffffffffffffda RBX: 00007fd1617b5fa0 RCX: 00007fd16158ebe9 [ 321.164602][ T9581] RDX: 0000000004000814 RSI: 0000200000000b00 RDI: 0000000000000003 [ 321.164612][ T9581] RBP: 00007fd162495090 R08: 0000000000000000 R09: 0000000000000000 [ 321.164622][ T9581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.164631][ T9581] R13: 00007fd1617b6038 R14: 00007fd1617b5fa0 R15: 00007fff2a951e18 [ 321.164655][ T9581] [ 322.106587][ T30] audit: type=1400 audit(1755073950.790:371): avc: denied { setattr } for pid=9583 comm="syz.3.908" name="midiC2D0" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 322.657115][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 322.837097][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 322.898405][ T9] usb 6-1: config 5 has an invalid interface number: 239 but max is 3 [ 322.910383][ T9] usb 6-1: config 5 has an invalid interface number: 15 but max is 3 [ 322.937137][ T9] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 323.122863][ T9] usb 6-1: config 5 has 2 interfaces, different from the descriptor's value: 4 [ 323.132188][ T9] usb 6-1: config 5 has no interface number 0 [ 323.138464][ T9] usb 6-1: config 5 has no interface number 1 [ 323.145230][ T9] usb 6-1: config 5 interface 239 altsetting 255 bulk endpoint 0x7 has invalid maxpacket 8 [ 323.156414][ T9] usb 6-1: config 5 interface 239 altsetting 255 endpoint 0xF has invalid maxpacket 528, setting to 64 [ 323.196690][ T9] usb 6-1: config 5 interface 239 altsetting 255 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 323.220639][ T9] usb 6-1: config 5 interface 239 altsetting 255 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 323.235505][ T9] usb 6-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 323.247392][ T9] usb 6-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 323.259062][ T9] usb 6-1: config 5 interface 239 altsetting 255 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 323.381302][ T9] usb 6-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 323.397339][ T9] usb 6-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0xC, skipping [ 323.411556][ T9] usb 6-1: config 5 interface 239 altsetting 255 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 323.424378][ T9] usb 6-1: config 5 interface 15 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 323.475508][ T9] usb 6-1: config 5 interface 239 has no altsetting 0 [ 323.511746][ T9] usb 6-1: config 5 interface 15 has no altsetting 0 [ 323.518118][ T9625] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 323.574508][ T9] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1072, bcdDevice=bf.62 [ 323.587184][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.595320][ T9] usb 6-1: Product: syz [ 323.690790][ T9] usb 6-1: Manufacturer: syz [ 323.716857][ T9] usb 6-1: SerialNumber: syz [ 323.727445][ T9605] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 324.114850][ T9634] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 325.487589][ T9] option 6-1:5.239: GSM modem (1-port) converter detected [ 325.544468][ T9] option 6-1:5.15: GSM modem (1-port) converter detected [ 325.903198][ T9] usb 6-1: USB disconnect, device number 11 [ 326.308510][ T9] option 6-1:5.239: device disconnected [ 326.345994][ T9] option 6-1:5.15: device disconnected [ 326.635611][ T9671] netlink: 16 bytes leftover after parsing attributes in process `syz.3.924'. [ 326.706336][ T9676] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 326.898362][ T5920] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 327.123129][ T5920] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 327.149278][ T5920] usb 6-1: config 0 has no interface number 0 [ 327.234421][ T5920] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 327.250692][ T5920] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 327.263435][ T5920] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 327.275485][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.290152][ T5920] usb 6-1: config 0 descriptor?? [ 327.296636][ T9675] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 327.312109][ T5920] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 327.746695][ T5920] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 327.795440][ T9712] netlink: 16 bytes leftover after parsing attributes in process `syz.5.926'. [ 327.818655][ T9710] block nbd5: shutting down sockets [ 328.027276][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 328.093317][ T5920] usb 7-1: config 5 has an invalid interface number: 239 but max is 3 [ 328.190639][ T5920] usb 7-1: config 5 has an invalid interface number: 15 but max is 3 [ 328.245116][ T5920] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 328.272395][ T5920] usb 7-1: config 5 has 2 interfaces, different from the descriptor's value: 4 [ 328.295856][ T5920] usb 7-1: config 5 has no interface number 0 [ 328.417686][ T5920] usb 7-1: config 5 has no interface number 1 [ 328.478253][ T5920] usb 7-1: config 5 interface 239 altsetting 255 bulk endpoint 0x7 has invalid maxpacket 8 [ 328.825385][ T5920] usb 7-1: config 5 interface 239 altsetting 255 endpoint 0xF has invalid maxpacket 528, setting to 64 [ 328.854569][ T5920] usb 7-1: config 5 interface 239 altsetting 255 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 328.877541][ T979] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 328.894835][ T5920] usb 7-1: config 5 interface 239 altsetting 255 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 328.923144][ T5920] usb 7-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 328.958789][ T5920] usb 7-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 328.984224][ T5920] usb 7-1: config 5 interface 239 altsetting 255 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 328.995602][ T5920] usb 7-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 329.007726][ T5920] usb 7-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0xC, skipping [ 329.023114][ T5920] usb 7-1: config 5 interface 239 altsetting 255 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 329.034424][ T5920] usb 7-1: config 5 interface 15 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 329.050984][ T5920] usb 7-1: config 5 interface 239 has no altsetting 0 [ 329.058051][ T5920] usb 7-1: config 5 interface 15 has no altsetting 0 [ 329.066918][ T5920] usb 7-1: New USB device found, idVendor=1bc7, idProduct=1072, bcdDevice=bf.62 [ 329.076927][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.087325][ T979] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 329.101085][ T5920] usb 7-1: Product: syz [ 329.106141][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.119513][ T5920] usb 7-1: Manufacturer: syz [ 329.124320][ T5920] usb 7-1: SerialNumber: syz [ 329.130742][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 329.145677][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.177461][ T979] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 329.187693][ T9698] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 329.273104][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.328553][ T979] usb 4-1: config 0 descriptor?? [ 329.712818][ T9] usb 6-1: USB disconnect, device number 12 [ 329.766933][ T9737] FAULT_INJECTION: forcing a failure. [ 329.766933][ T9737] name failslab, interval 1, probability 0, space 0, times 0 [ 329.782929][ T9737] CPU: 1 UID: 0 PID: 9737 Comm: syz.2.941 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 329.782952][ T9737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.782961][ T9737] Call Trace: [ 329.782967][ T9737] [ 329.782972][ T9737] dump_stack_lvl+0x16c/0x1f0 [ 329.782997][ T9737] should_fail_ex+0x512/0x640 [ 329.783017][ T9737] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 329.783037][ T9737] should_failslab+0xc2/0x120 [ 329.783057][ T9737] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 329.783073][ T9737] ? __alloc_skb+0x2b2/0x380 [ 329.783099][ T9737] ? avc_has_perm+0x144/0x1f0 [ 329.783118][ T9737] __alloc_skb+0x2b2/0x380 [ 329.783144][ T9737] ? __pfx___alloc_skb+0x10/0x10 [ 329.783169][ T9737] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 329.783190][ T9737] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 329.783218][ T9737] netlink_alloc_large_skb+0x69/0x130 [ 329.783238][ T9737] netlink_sendmsg+0x6a1/0xdd0 [ 329.783261][ T9737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.783290][ T9737] ____sys_sendmsg+0xa98/0xc70 [ 329.783312][ T9737] ? copy_msghdr_from_user+0x10a/0x160 [ 329.783328][ T9737] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.783361][ T9737] ___sys_sendmsg+0x134/0x1d0 [ 329.783379][ T9737] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.783420][ T9737] ? __mutex_unlock_slowpath+0x100/0x800 [ 329.783445][ T9737] __sys_sendmsg+0x16d/0x220 [ 329.783461][ T9737] ? __pfx___sys_sendmsg+0x10/0x10 [ 329.783496][ T9737] do_syscall_64+0xcd/0x4c0 [ 329.783516][ T9737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.783533][ T9737] RIP: 0033:0x7fdf5e38ebe9 [ 329.783547][ T9737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.783562][ T9737] RSP: 002b:00007fdf5f1ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.783577][ T9737] RAX: ffffffffffffffda RBX: 00007fdf5e5b5fa0 RCX: 00007fdf5e38ebe9 [ 329.783588][ T9737] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 329.783597][ T9737] RBP: 00007fdf5f1ec090 R08: 0000000000000000 R09: 0000000000000000 [ 329.783607][ T9737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.783617][ T9737] R13: 00007fdf5e5b6038 R14: 00007fdf5e5b5fa0 R15: 00007ffd78153c58 [ 329.783641][ T9737] [ 330.011700][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.112848][ T9739] 9pnet_fd: Insufficient options for proto=fd [ 331.622232][ T979] usbhid 4-1:0.0: can't add hid device: -71 [ 331.663980][ T979] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 331.674323][ T5920] option 7-1:5.239: GSM modem (1-port) converter detected [ 331.891458][ T979] usb 4-1: USB disconnect, device number 14 [ 331.901875][ T5920] option 7-1:5.15: GSM modem (1-port) converter detected [ 332.901779][ T5920] usb 7-1: USB disconnect, device number 6 [ 333.170024][ T5920] option 7-1:5.239: device disconnected [ 333.191510][ T5920] option 7-1:5.15: device disconnected [ 333.488918][ T9773] 9pnet_fd: Insufficient options for proto=fd [ 334.199465][ T9786] bridge0: port 3(team0) entered blocking state [ 334.206879][ T9786] bridge0: port 3(team0) entered disabled state [ 334.213866][ T9786] team0: entered allmulticast mode [ 334.219050][ T9786] team_slave_0: entered allmulticast mode [ 334.224849][ T9786] team_slave_1: entered allmulticast mode [ 334.239583][ T9786] team0: entered promiscuous mode [ 334.244686][ T9786] team_slave_0: entered promiscuous mode [ 334.251295][ T9786] team_slave_1: entered promiscuous mode [ 334.259593][ T9786] bridge0: port 3(team0) entered blocking state [ 334.265939][ T9786] bridge0: port 3(team0) entered forwarding state [ 334.608841][ T9787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.958'. [ 334.674577][ T30] audit: type=1400 audit(1755073963.570:372): avc: denied { create } for pid=9785 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 334.714483][ T30] audit: type=1400 audit(1755073963.570:373): avc: denied { write } for pid=9785 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 335.136867][ T5920] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 335.577014][ T5920] usb 7-1: Using ep0 maxpacket: 32 [ 335.722926][ T5920] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 335.756044][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.771167][ T5920] usb 7-1: Product: syz [ 335.775808][ T5920] usb 7-1: Manufacturer: syz [ 335.782390][ T5920] usb 7-1: SerialNumber: syz [ 335.792536][ T5920] usb 7-1: config 0 descriptor?? [ 335.929435][ T9820] 9pnet_fd: Insufficient options for proto=fd [ 335.948009][ T5920] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 336.521552][ T5920] gspca_topro: reg_w err -71 [ 336.628345][ T5920] gspca_topro: Sensor soi763a [ 336.657734][ T5920] usb 7-1: USB disconnect, device number 7 [ 337.497798][ T9843] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 337.791226][ T30] audit: type=1400 audit(1755073966.541:374): avc: denied { write } for pid=9848 comm="syz.6.977" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 338.047036][ T9849] FAULT_INJECTION: forcing a failure. [ 338.047036][ T9849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.130520][ T9849] CPU: 1 UID: 0 PID: 9849 Comm: syz.6.977 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 338.130545][ T9849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.130555][ T9849] Call Trace: [ 338.130561][ T9849] [ 338.130568][ T9849] dump_stack_lvl+0x16c/0x1f0 [ 338.130589][ T9849] should_fail_ex+0x512/0x640 [ 338.130611][ T9849] _copy_from_user+0x2e/0xd0 [ 338.130633][ T9849] sctp_setsockopt+0x2045/0xb870 [ 338.130655][ T9849] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 338.130687][ T9849] ? __pfx_sctp_setsockopt+0x10/0x10 [ 338.130706][ T9849] ? find_held_lock+0x2b/0x80 [ 338.130730][ T9849] ? selinux_socket_setsockopt+0x6a/0x80 [ 338.130751][ T9849] ? sock_common_setsockopt+0x2e/0xf0 [ 338.130771][ T9849] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 338.130795][ T9849] do_sock_setsockopt+0xf3/0x1d0 [ 338.130828][ T9849] __sys_setsockopt+0x1a0/0x230 [ 338.130858][ T9849] __x64_sys_setsockopt+0xbd/0x160 [ 338.130871][ T9849] ? do_syscall_64+0x91/0x4c0 [ 338.130888][ T9849] ? lockdep_hardirqs_on+0x7c/0x110 [ 338.130904][ T9849] do_syscall_64+0xcd/0x4c0 [ 338.130922][ T9849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.130939][ T9849] RIP: 0033:0x7f905978ebe9 [ 338.130952][ T9849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.130969][ T9849] RSP: 002b:00007f905a60f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 338.130984][ T9849] RAX: ffffffffffffffda RBX: 00007f90599b5fa0 RCX: 00007f905978ebe9 [ 338.130996][ T9849] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 338.131006][ T9849] RBP: 00007f905a60f090 R08: 000000000000009c R09: 0000000000000000 [ 338.131016][ T9849] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 338.131026][ T9849] R13: 00007f90599b6038 R14: 00007f90599b5fa0 R15: 00007ffc20fea6e8 [ 338.131049][ T9849] [ 338.868236][ T5920] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 339.488201][ T5920] usb 7-1: device descriptor read/64, error -71 [ 340.450412][ T5920] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 340.636208][ T5920] usb 7-1: device descriptor read/64, error -71 [ 340.760739][ T5920] usb usb7-port1: attempt power cycle [ 340.889758][ T9886] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 341.252271][ T5920] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 341.284057][ T5920] usb 7-1: device descriptor read/8, error -71 [ 341.551490][ T5920] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 341.586211][ T5920] usb 7-1: device descriptor read/8, error -71 [ 341.631501][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.987'. [ 341.714601][ T5920] usb usb7-port1: unable to enumerate USB device [ 343.309737][ T9914] FAULT_INJECTION: forcing a failure. [ 343.309737][ T9914] name failslab, interval 1, probability 0, space 0, times 0 [ 343.379599][ T9914] CPU: 1 UID: 0 PID: 9914 Comm: syz.2.995 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 343.379622][ T9914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.379632][ T9914] Call Trace: [ 343.379638][ T9914] [ 343.379645][ T9914] dump_stack_lvl+0x16c/0x1f0 [ 343.379668][ T9914] should_fail_ex+0x512/0x640 [ 343.379687][ T9914] ? __kmalloc_noprof+0xbf/0x510 [ 343.379704][ T9914] ? __do_sys_futex_waitv+0x127/0x2c0 [ 343.379729][ T9914] should_failslab+0xc2/0x120 [ 343.379748][ T9914] __kmalloc_noprof+0xd2/0x510 [ 343.379763][ T9914] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 343.379793][ T9914] __do_sys_futex_waitv+0x127/0x2c0 [ 343.379818][ T9914] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 343.379848][ T9914] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 343.379876][ T9914] do_syscall_64+0xcd/0x4c0 [ 343.379896][ T9914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.379912][ T9914] RIP: 0033:0x7fdf5e38ebe9 [ 343.379926][ T9914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.379942][ T9914] RSP: 002b:00007fdf5f1ec038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 343.379958][ T9914] RAX: ffffffffffffffda RBX: 00007fdf5e5b5fa0 RCX: 00007fdf5e38ebe9 [ 343.379969][ T9914] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 343.379979][ T9914] RBP: 00007fdf5f1ec090 R08: 0000000000000001 R09: 0000000000000000 [ 343.379989][ T9914] R10: 0000200000001100 R11: 0000000000000246 R12: 0000000000000001 [ 343.380000][ T9914] R13: 00007fdf5e5b6038 R14: 00007fdf5e5b5fa0 R15: 00007ffd78153c58 [ 343.380023][ T9914] [ 343.554453][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.773737][ T9925] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.997'. [ 343.784621][ T9924] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.997'. [ 343.870105][ T9927] FAULT_INJECTION: forcing a failure. [ 343.870105][ T9927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.982057][ T9927] CPU: 0 UID: 0 PID: 9927 Comm: syz.6.998 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 343.982075][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.982081][ T9927] Call Trace: [ 343.982087][ T9927] [ 343.982094][ T9927] dump_stack_lvl+0x16c/0x1f0 [ 343.982115][ T9927] should_fail_ex+0x512/0x640 [ 343.982131][ T9927] _copy_from_user+0x2e/0xd0 [ 343.982146][ T9927] sctp_setsockopt+0x2045/0xb870 [ 343.982159][ T9927] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 343.982178][ T9927] ? __pfx_sctp_setsockopt+0x10/0x10 [ 343.982190][ T9927] ? find_held_lock+0x2b/0x80 [ 343.982206][ T9927] ? selinux_socket_setsockopt+0x6a/0x80 [ 343.982219][ T9927] ? sock_common_setsockopt+0x2e/0xf0 [ 343.982232][ T9927] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 343.982246][ T9927] do_sock_setsockopt+0xf3/0x1d0 [ 343.982260][ T9927] __sys_setsockopt+0x1a0/0x230 [ 343.982280][ T9927] __x64_sys_setsockopt+0xbd/0x160 [ 343.982289][ T9927] ? do_syscall_64+0x91/0x4c0 [ 343.982299][ T9927] ? lockdep_hardirqs_on+0x7c/0x110 [ 343.982309][ T9927] do_syscall_64+0xcd/0x4c0 [ 343.982320][ T9927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.982331][ T9927] RIP: 0033:0x7f905978ebe9 [ 343.982340][ T9927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.982350][ T9927] RSP: 002b:00007f905a60f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 343.982360][ T9927] RAX: ffffffffffffffda RBX: 00007f90599b5fa0 RCX: 00007f905978ebe9 [ 343.982366][ T9927] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 343.982372][ T9927] RBP: 00007f905a60f090 R08: 000000000000009c R09: 0000000000000000 [ 343.982378][ T9927] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 343.982384][ T9927] R13: 00007f90599b6038 R14: 00007f90599b5fa0 R15: 00007ffc20fea6e8 [ 343.982398][ T9927] [ 347.135971][ T9955] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1008'. [ 347.914993][ T9975] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 348.036883][ T9975] overlayfs: failed to resolve './bus': -2 [ 348.230096][ T5920] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 348.397866][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 348.486307][ T9986] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 348.589196][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.629644][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.655136][ T5920] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 348.790064][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.255084][ T5920] usb 6-1: config 0 descriptor?? [ 349.841662][ T30] audit: type=1326 audit(1755073977.804:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9992 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf5e385ba7 code=0x7ffc0000 [ 349.981726][ T5920] usbhid 6-1:0.0: can't add hid device: -71 [ 350.047112][ T5920] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 350.105349][T10002] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1017'. [ 350.117150][ T9997] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1017'. [ 350.156240][ T5920] usb 6-1: USB disconnect, device number 13 [ 350.171803][ T30] audit: type=1326 audit(1755073977.804:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9992 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf5e32add9 code=0x7ffc0000 [ 350.291863][ T30] audit: type=1326 audit(1755073977.804:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9992 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf5e385ba7 code=0x7ffc0000 [ 350.396403][ T30] audit: type=1326 audit(1755073977.804:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9992 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf5e32add9 code=0x7ffc0000 [ 350.493312][ T30] audit: type=1326 audit(1755073977.804:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9992 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf5e385ba7 code=0x7ffc0000 [ 350.502382][ T5855] Bluetooth: hci3: command 0x0405 tx timeout [ 350.527910][ T30] audit: type=1326 audit(1755073977.804:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9992 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf5e32add9 code=0x7ffc0000 [ 350.657561][ T30] audit: type=1326 audit(1755073977.804:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9992 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf5e385ba7 code=0x7ffc0000 [ 350.680910][ T30] audit: type=1326 audit(1755073977.804:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9992 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf5e32add9 code=0x7ffc0000 [ 350.844637][T10006] FAULT_INJECTION: forcing a failure. [ 350.844637][T10006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.903560][ T30] audit: type=1326 audit(1755073977.804:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9992 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf5e385ba7 code=0x7ffc0000 [ 350.937745][T10006] CPU: 1 UID: 0 PID: 10006 Comm: syz.5.1019 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 350.937776][T10006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.937786][T10006] Call Trace: [ 350.937792][T10006] [ 350.937799][T10006] dump_stack_lvl+0x16c/0x1f0 [ 350.937826][T10006] should_fail_ex+0x512/0x640 [ 350.937850][T10006] _copy_from_user+0x2e/0xd0 [ 350.937874][T10006] core_sys_select+0x35b/0xc10 [ 350.937899][T10006] ? __pfx_core_sys_select+0x10/0x10 [ 350.937945][T10006] ? set_user_sigmask+0x21b/0x2b0 [ 350.937965][T10006] ? __pfx_set_user_sigmask+0x10/0x10 [ 350.937991][T10006] do_pselect.constprop.0+0x19f/0x1e0 [ 350.938011][T10006] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 350.938039][T10006] __x64_sys_pselect6+0x182/0x240 [ 350.938056][T10006] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 350.938081][T10006] do_syscall_64+0xcd/0x4c0 [ 350.938100][T10006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.938118][T10006] RIP: 0033:0x7f8966f8ebe9 [ 350.938132][T10006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.938148][T10006] RSP: 002b:00007f8967eb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 350.938163][T10006] RAX: ffffffffffffffda RBX: 00007f89671b6090 RCX: 00007f8966f8ebe9 [ 350.938174][T10006] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 350.938184][T10006] RBP: 00007f8967eb8090 R08: 0000000000000000 R09: 0000000000000000 [ 350.938194][T10006] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 350.938204][T10006] R13: 00007f89671b6128 R14: 00007f89671b6090 R15: 00007ffece22d0f8 [ 350.938229][T10006] [ 351.107800][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.203103][T10005] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 351.209852][T10005] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 351.216351][ T9993] netlink: 'syz.2.1016': attribute type 21 has an invalid length. [ 351.225385][ T9993] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1016'. [ 351.306137][ T30] audit: type=1326 audit(1755073977.804:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9992 comm="syz.2.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf5e32add9 code=0x7ffc0000 [ 351.475779][T10005] vhci_hcd vhci_hcd.0: Device attached [ 351.504739][T10007] vhci_hcd: connection closed [ 351.507625][ T194] vhci_hcd: stop threads [ 351.585072][ T194] vhci_hcd: release socket [ 351.611896][ T9] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 351.776765][ T194] vhci_hcd: disconnect device [ 351.888116][ T9993] netlink: 'syz.2.1016': attribute type 21 has an invalid length. [ 351.896157][ T9993] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1016'. [ 352.236076][T10017] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1022'. [ 355.361156][T10040] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 355.429096][T10043] 9pnet_fd: Insufficient options for proto=fd [ 355.436445][T10040] overlayfs: failed to resolve './bus': -2 [ 355.809825][T10050] bridge0: port 3(team0) entered blocking state [ 355.816549][T10050] bridge0: port 3(team0) entered disabled state [ 355.823739][T10050] team0: entered allmulticast mode [ 355.828919][T10050] team_slave_0: entered allmulticast mode [ 355.834789][T10050] team_slave_1: entered allmulticast mode [ 355.849880][T10050] team0: entered promiscuous mode [ 355.854977][T10050] team_slave_0: entered promiscuous mode [ 355.861941][T10050] team_slave_1: entered promiscuous mode [ 355.870343][T10050] bridge0: port 3(team0) entered blocking state [ 355.876691][T10050] bridge0: port 3(team0) entered forwarding state [ 356.133488][ T976] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 356.304535][ T976] usb 7-1: Using ep0 maxpacket: 8 [ 356.312623][ T976] usb 7-1: unable to get BOS descriptor or descriptor too short [ 356.333096][ T976] usb 7-1: config 4 interface 0 has no altsetting 0 [ 356.344375][ T976] usb 7-1: string descriptor 0 read error: -22 [ 356.362118][ T976] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 356.378305][ T976] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 356.481053][ T976] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 356.502230][ T976] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 356.518504][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 356.530458][ T976] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 356.537758][ T976] usb 7-1: media controller created [ 356.549054][T10057] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1034'. [ 356.561788][T10056] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1034'. [ 356.578921][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.616102][ T30] kauditd_printk_skb: 553 callbacks suppressed [ 356.616116][ T30] audit: type=1400 audit(1755073984.192:938): avc: denied { setopt } for pid=10060 comm="syz.5.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 356.964854][ T976] zl10353_read_register: readreg error (reg=127, ret==0) [ 356.998697][ T10] usb 1-1: config 60 has an invalid descriptor of length 97, skipping remainder of the config [ 357.015170][ T10] usb 1-1: config 60 has 0 interfaces, different from the descriptor's value: 1 [ 357.030556][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 357.040115][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.077682][ T976] usb 7-1: USB disconnect, device number 12 [ 357.085176][ T9] vhci_hcd: vhci_device speed not set [ 358.552118][T10087] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1043'. [ 358.972094][T10100] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1048'. [ 359.017081][T10099] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1048'. [ 360.020610][T10112] FAULT_INJECTION: forcing a failure. [ 360.020610][T10112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.033792][T10112] CPU: 1 UID: 0 PID: 10112 Comm: syz.5.1051 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 360.033816][T10112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.033827][T10112] Call Trace: [ 360.033834][T10112] [ 360.033841][T10112] dump_stack_lvl+0x16c/0x1f0 [ 360.033863][T10112] should_fail_ex+0x512/0x640 [ 360.033888][T10112] strncpy_from_user+0x3b/0x2e0 [ 360.033908][T10112] getname_flags.part.0+0x8f/0x550 [ 360.033936][T10112] __x64_sys_rmdir+0xb0/0x110 [ 360.033956][T10112] do_syscall_64+0xcd/0x4c0 [ 360.033976][T10112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.033993][T10112] RIP: 0033:0x7f8966f8ebe9 [ 360.034008][T10112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.034028][T10112] RSP: 002b:00007f8967e97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 360.034045][T10112] RAX: ffffffffffffffda RBX: 00007f89671b6180 RCX: 00007f8966f8ebe9 [ 360.034056][T10112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 360.034065][T10112] RBP: 00007f8967e97090 R08: 0000000000000000 R09: 0000000000000000 [ 360.034074][T10112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.034084][T10112] R13: 00007f89671b6218 R14: 00007f89671b6180 R15: 00007ffece22d0f8 [ 360.034108][T10112] [ 360.312372][T10113] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 361.252238][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1055'. [ 362.740470][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 362.750001][ T10] usb 1-1: string descriptor 0 read error: -32 [ 363.392871][ T30] audit: type=1400 audit(1755073990.534:939): avc: denied { listen } for pid=10154 comm="syz.6.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 363.416472][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 363.423493][ T30] audit: type=1400 audit(1755073990.534:940): avc: denied { setopt } for pid=10154 comm="syz.6.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 363.559505][ T9] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 363.568704][ T9] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 363.576909][ T9] usb 6-1: Product: syz [ 363.581049][ T9] usb 6-1: Manufacturer: syz [ 363.592918][ T9] usb 6-1: SerialNumber: syz [ 363.626817][ T9] usb 6-1: config 0 descriptor?? [ 363.938097][T10133] FAULT_INJECTION: forcing a failure. [ 363.938097][T10133] name failslab, interval 1, probability 0, space 0, times 0 [ 364.186320][T10133] CPU: 1 UID: 0 PID: 10133 Comm: syz.5.1057 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 364.186346][T10133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.186355][T10133] Call Trace: [ 364.186360][T10133] [ 364.186366][T10133] dump_stack_lvl+0x16c/0x1f0 [ 364.186386][T10133] should_fail_ex+0x512/0x640 [ 364.186403][T10133] ? fs_reclaim_acquire+0xae/0x150 [ 364.186425][T10133] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 364.186447][T10133] should_failslab+0xc2/0x120 [ 364.186465][T10133] __kmalloc_noprof+0xd2/0x510 [ 364.186486][T10133] tomoyo_realpath_from_path+0xc2/0x6e0 [ 364.186511][T10133] ? tomoyo_profile+0x47/0x60 [ 364.186528][T10133] tomoyo_path_number_perm+0x245/0x580 [ 364.186545][T10133] ? tomoyo_path_number_perm+0x237/0x580 [ 364.186564][T10133] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 364.186583][T10133] ? find_held_lock+0x2b/0x80 [ 364.186621][T10133] ? find_held_lock+0x2b/0x80 [ 364.186645][T10133] ? hook_file_ioctl_common+0x145/0x410 [ 364.186666][T10133] ? __fget_files+0x20e/0x3c0 [ 364.186689][T10133] security_file_ioctl+0x9b/0x240 [ 364.186713][T10133] __x64_sys_ioctl+0xb7/0x210 [ 364.186739][T10133] do_syscall_64+0xcd/0x4c0 [ 364.186758][T10133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.186774][T10133] RIP: 0033:0x7f8966f8ebe9 [ 364.186787][T10133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.186802][T10133] RSP: 002b:00007f8967ed9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.186817][T10133] RAX: ffffffffffffffda RBX: 00007f89671b5fa0 RCX: 00007f8966f8ebe9 [ 364.186827][T10133] RDX: 00002000000001c0 RSI: 0000000080dc5521 RDI: 0000000000000009 [ 364.186837][T10133] RBP: 00007f8967ed9090 R08: 0000000000000000 R09: 0000000000000000 [ 364.186847][T10133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.186856][T10133] R13: 00007f89671b6038 R14: 00007f89671b5fa0 R15: 00007ffece22d0f8 [ 364.186878][T10133] [ 364.186949][T10133] ERROR: Out of memory at tomoyo_realpath_from_path. [ 364.187298][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1057'. [ 364.447327][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1057'. [ 364.487708][T10161] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1065'. [ 364.499274][T10165] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1065'. [ 364.824967][T10169] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 365.218588][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1067'. [ 365.633351][ T979] usb 6-1: USB disconnect, device number 14 [ 365.809853][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 366.122551][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 366.158605][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.170844][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.181112][ T24] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 366.193627][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.204734][ T24] usb 7-1: config 0 descriptor?? [ 366.213987][ T30] audit: type=1400 audit(1755073993.154:941): avc: denied { listen } for pid=10184 comm="syz.3.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 366.648658][ T24] sony 0003:054C:024B.000F: unexpected long global item [ 366.659869][ T24] sony 0003:054C:024B.000F: parse failed [ 366.677573][ T24] sony 0003:054C:024B.000F: probe with driver sony failed with error -22 [ 366.900270][T10191] 9pnet_fd: Insufficient options for proto=fd [ 368.027131][T10152] Set syz1 is full, maxelem 65536 reached [ 368.587324][ T5920] usb 7-1: USB disconnect, device number 13 [ 368.622472][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1078'. [ 369.344694][T10221] FAULT_INJECTION: forcing a failure. [ 369.344694][T10221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.359096][T10221] CPU: 0 UID: 0 PID: 10221 Comm: syz.6.1082 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 369.359122][T10221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.359133][T10221] Call Trace: [ 369.359138][T10221] [ 369.359145][T10221] dump_stack_lvl+0x16c/0x1f0 [ 369.359168][T10221] should_fail_ex+0x512/0x640 [ 369.359191][T10221] _copy_from_user+0x2e/0xd0 [ 369.359215][T10221] copy_msghdr_from_user+0x98/0x160 [ 369.359233][T10221] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 369.359255][T10221] ? __lock_acquire+0xb97/0x1ce0 [ 369.359291][T10221] ___sys_sendmsg+0xfe/0x1d0 [ 369.359309][T10221] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.359360][T10221] __sys_sendmsg+0x16d/0x220 [ 369.359378][T10221] ? __pfx___sys_sendmsg+0x10/0x10 [ 369.359417][T10221] do_syscall_64+0xcd/0x4c0 [ 369.359438][T10221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.359455][T10221] RIP: 0033:0x7f905978ebe9 [ 369.359469][T10221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.359486][T10221] RSP: 002b:00007f905a5cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.359504][T10221] RAX: ffffffffffffffda RBX: 00007f90599b6180 RCX: 00007f905978ebe9 [ 369.359516][T10221] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 369.359526][T10221] RBP: 00007f905a5cd090 R08: 0000000000000000 R09: 0000000000000000 [ 369.359537][T10221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.359547][T10221] R13: 00007f90599b6218 R14: 00007f90599b6180 R15: 00007ffc20fea6e8 [ 369.359571][T10221] [ 370.152443][T10236] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 370.160211][T10236] audit: out of memory in audit_log_start [ 371.794138][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1093'. [ 371.921382][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 371.940637][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 371.957578][T10258] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1095'. [ 371.971283][T10256] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1095'. [ 371.982840][ T30] audit: type=1400 audit(1755073998.569:942): avc: denied { map } for pid=10254 comm="syz.3.1096" path="socket:[26817]" dev="sockfs" ino=26817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 372.010401][ T30] audit: type=1400 audit(1755073998.569:943): avc: denied { read } for pid=10254 comm="syz.3.1096" path="socket:[26817]" dev="sockfs" ino=26817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 372.089846][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1097'. [ 372.105464][T10260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.123866][ T30] audit: type=1400 audit(1755073998.691:944): avc: denied { accept } for pid=10259 comm="syz.3.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 373.690917][ T5855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 373.700059][ T5855] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 373.711396][ T5855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 373.719865][ T5855] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 373.727264][ T5855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 373.760060][T10282] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 373.789567][T10283] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 374.618226][T10279] chnl_net:caif_netlink_parms(): no params data found [ 374.869727][T10279] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.887340][T10279] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.896007][T10279] bridge_slave_0: entered allmulticast mode [ 374.903113][T10279] bridge_slave_0: entered promiscuous mode [ 374.913274][T10279] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.923109][T10279] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.931249][T10279] bridge_slave_1: entered allmulticast mode [ 374.940814][T10279] bridge_slave_1: entered promiscuous mode [ 374.995367][T10279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.084413][T10279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.488663][T10279] team0: Port device team_slave_0 added [ 375.507154][T10279] team0: Port device team_slave_1 added [ 375.688182][T10279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.695143][T10279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.721457][T10279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.735163][T10279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.744343][T10279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.789258][T10279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.846745][ T30] audit: type=1400 audit(1755074002.171:945): avc: denied { bind } for pid=10313 comm="syz.3.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 375.883679][ T30] audit: type=1400 audit(1755074002.171:946): avc: denied { listen } for pid=10313 comm="syz.3.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 375.915772][ T5861] Bluetooth: hci6: command tx timeout [ 375.928000][T10279] hsr_slave_0: entered promiscuous mode [ 375.941814][T10279] hsr_slave_1: entered promiscuous mode [ 375.965472][T10279] debugfs: 'hsr0' already exists in 'hsr' [ 375.974943][T10279] Cannot create hsr debugfs directory [ 376.574586][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 376.620303][T10279] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 376.632117][T10279] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 376.645072][T10279] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 376.657715][T10279] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 376.756024][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 376.783823][ T10] usb 6-1: config 5 has an invalid interface number: 239 but max is 3 [ 376.806805][ T10] usb 6-1: config 5 has an invalid interface number: 15 but max is 3 [ 376.830545][ T10] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 376.890452][T10279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.031848][ T10] usb 6-1: config 5 has 2 interfaces, different from the descriptor's value: 4 [ 377.052364][ T10] usb 6-1: config 5 has no interface number 0 [ 377.065847][ T10] usb 6-1: config 5 has no interface number 1 [ 377.076851][ T10] usb 6-1: config 5 interface 239 altsetting 255 bulk endpoint 0x7 has invalid maxpacket 8 [ 377.089918][ T10] usb 6-1: config 5 interface 239 altsetting 255 endpoint 0xF has invalid maxpacket 528, setting to 64 [ 377.102907][ T10] usb 6-1: config 5 interface 239 altsetting 255 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 377.114175][ T10] usb 6-1: config 5 interface 239 altsetting 255 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 377.117032][T10279] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.125392][ T10] usb 6-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 377.125419][ T10] usb 6-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 377.125438][ T10] usb 6-1: config 5 interface 239 altsetting 255 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 377.125463][ T10] usb 6-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 377.125481][ T10] usb 6-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0xC, skipping [ 377.125500][ T10] usb 6-1: config 5 interface 239 altsetting 255 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 377.125533][ T10] usb 6-1: config 5 interface 15 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 377.125554][ T10] usb 6-1: config 5 interface 239 has no altsetting 0 [ 377.125571][ T10] usb 6-1: config 5 interface 15 has no altsetting 0 [ 377.144860][ T10] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1072, bcdDevice=bf.62 [ 377.144886][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.144905][ T10] usb 6-1: Product: syz [ 377.144919][ T10] usb 6-1: Manufacturer: syz [ 377.144933][ T10] usb 6-1: SerialNumber: syz [ 377.156410][T10325] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 377.315788][ T9837] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.322911][ T9837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.370679][ T9828] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.377819][ T9828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.573480][ T30] audit: type=1400 audit(1755074003.733:947): avc: denied { watch watch_reads } for pid=10347 comm="syz.3.1119" path="/239" dev="tmpfs" ino=1353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 377.909428][ T5861] Bluetooth: hci5: command 0x041b tx timeout [ 378.382797][ T5861] Bluetooth: hci6: command tx timeout [ 378.436606][ T30] audit: type=1400 audit(1755074004.593:948): avc: denied { ioctl } for pid=10352 comm="syz.6.1120" path="socket:[28347]" dev="sockfs" ino=28347 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 378.635711][T10359] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1118'. [ 378.750243][T10357] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1118'. [ 378.951054][T10362] FAULT_INJECTION: forcing a failure. [ 378.951054][T10362] name failslab, interval 1, probability 0, space 0, times 0 [ 378.965276][T10362] CPU: 1 UID: 0 PID: 10362 Comm: syz.6.1121 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 378.965299][T10362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.965306][T10362] Call Trace: [ 378.965310][T10362] [ 378.965315][T10362] dump_stack_lvl+0x16c/0x1f0 [ 378.965332][T10362] should_fail_ex+0x512/0x640 [ 378.965349][T10362] ? __kvmalloc_node_noprof+0x124/0x620 [ 378.965377][T10362] should_failslab+0xc2/0x120 [ 378.965396][T10362] __kvmalloc_node_noprof+0x137/0x620 [ 378.965419][T10362] ? xp_create_and_assign_umem+0xb3/0xe20 [ 378.965434][T10362] ? xp_create_and_assign_umem+0xb3/0xe20 [ 378.965444][T10362] xp_create_and_assign_umem+0xb3/0xe20 [ 378.965455][T10362] ? dev_get_by_index+0x17c/0x380 [ 378.965470][T10362] xsk_bind+0x4c6/0x1570 [ 378.965491][T10362] ? __pfx_xsk_bind+0x10/0x10 [ 378.965519][T10362] __sys_bind+0x1a7/0x260 [ 378.965543][T10362] ? __pfx___sys_bind+0x10/0x10 [ 378.965561][T10362] ? __fget_files+0x20e/0x3c0 [ 378.965579][T10362] ? __pfx_ksys_write+0x10/0x10 [ 378.965592][T10362] __x64_sys_bind+0x72/0xb0 [ 378.965606][T10362] ? lockdep_hardirqs_on+0x7c/0x110 [ 378.965617][T10362] do_syscall_64+0xcd/0x4c0 [ 378.965633][T10362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.965650][T10362] RIP: 0033:0x7f905978ebe9 [ 378.965664][T10362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.965679][T10362] RSP: 002b:00007f905a60f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 378.965695][T10362] RAX: ffffffffffffffda RBX: 00007f90599b5fa0 RCX: 00007f905978ebe9 [ 378.965704][T10362] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 378.965710][T10362] RBP: 00007f905a60f090 R08: 0000000000000000 R09: 0000000000000000 [ 378.965716][T10362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.965721][T10362] R13: 00007f90599b6038 R14: 00007f90599b5fa0 R15: 00007ffc20fea6e8 [ 378.965735][T10362] [ 378.982439][T10279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.224851][T10368] netlink: 26 bytes leftover after parsing attributes in process `syz.6.1122'. [ 379.403958][ T10] option 6-1:5.239: GSM modem (1-port) converter detected [ 379.417505][ T10] option 6-1:5.15: GSM modem (1-port) converter detected [ 379.468696][ T10] usb 6-1: USB disconnect, device number 15 [ 379.500247][ T10] option 6-1:5.239: device disconnected [ 379.621289][T10279] veth0_vlan: entered promiscuous mode [ 379.637883][T10279] veth1_vlan: entered promiscuous mode [ 379.656356][ T10] option 6-1:5.15: device disconnected [ 379.738802][T10279] veth0_macvtap: entered promiscuous mode [ 379.754388][T10279] veth1_macvtap: entered promiscuous mode [ 379.804011][T10279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.829197][T10279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.855120][ T194] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.870287][ T194] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.884102][ T194] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.893328][ T194] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.918120][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 379.966595][ T9837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.974795][ T9837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.996987][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.005071][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.605846][ T5855] Bluetooth: hci6: command tx timeout [ 381.179648][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.405687][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.569846][T10411] block device autoloading is deprecated and will be removed. [ 381.830993][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1136'. [ 381.841865][T10420] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1135'. [ 381.967904][T10417] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1135'. [ 382.475574][T10431] 9pnet_fd: Insufficient options for proto=fd [ 382.831164][ T5855] Bluetooth: hci6: command tx timeout [ 384.379462][T10457] FAULT_INJECTION: forcing a failure. [ 384.379462][T10457] name failslab, interval 1, probability 0, space 0, times 0 [ 384.407043][T10457] CPU: 1 UID: 0 PID: 10457 Comm: syz.7.1147 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 384.407070][T10457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.407079][T10457] Call Trace: [ 384.407084][T10457] [ 384.407091][T10457] dump_stack_lvl+0x16c/0x1f0 [ 384.407112][T10457] should_fail_ex+0x512/0x640 [ 384.407129][T10457] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 384.407150][T10457] should_failslab+0xc2/0x120 [ 384.407168][T10457] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 384.407181][T10457] ? __alloc_skb+0x2b2/0x380 [ 384.407199][T10457] __alloc_skb+0x2b2/0x380 [ 384.407215][T10457] ? __pfx___alloc_skb+0x10/0x10 [ 384.407241][T10457] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 384.407258][T10457] netlink_alloc_large_skb+0x69/0x130 [ 384.407270][T10457] netlink_sendmsg+0x6a1/0xdd0 [ 384.407283][T10457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.407300][T10457] ____sys_sendmsg+0xa98/0xc70 [ 384.407314][T10457] ? copy_msghdr_from_user+0x10a/0x160 [ 384.407325][T10457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.407344][T10457] ___sys_sendmsg+0x134/0x1d0 [ 384.407355][T10457] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.407378][T10457] ? __mutex_unlock_slowpath+0x100/0x800 [ 384.407394][T10457] __sys_sendmsg+0x16d/0x220 [ 384.407404][T10457] ? __pfx___sys_sendmsg+0x10/0x10 [ 384.407423][T10457] do_syscall_64+0xcd/0x4c0 [ 384.407435][T10457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.407446][T10457] RIP: 0033:0x7eff3638ebe9 [ 384.407456][T10457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.407466][T10457] RSP: 002b:00007eff3720f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.407477][T10457] RAX: ffffffffffffffda RBX: 00007eff365b5fa0 RCX: 00007eff3638ebe9 [ 384.407484][T10457] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 384.407490][T10457] RBP: 00007eff3720f090 R08: 0000000000000000 R09: 0000000000000000 [ 384.407495][T10457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.407505][T10457] R13: 00007eff365b6038 R14: 00007eff365b5fa0 R15: 00007ffd7218e608 [ 384.407518][T10457] [ 384.408037][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1149'. [ 385.169196][ T979] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 385.170978][T10472] FAULT_INJECTION: forcing a failure. [ 385.170978][T10472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.193557][T10472] CPU: 0 UID: 0 PID: 10472 Comm: syz.7.1152 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 385.193585][T10472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 385.193595][T10472] Call Trace: [ 385.193601][T10472] [ 385.193608][T10472] dump_stack_lvl+0x16c/0x1f0 [ 385.193631][T10472] should_fail_ex+0x512/0x640 [ 385.193654][T10472] _copy_from_iter+0x29f/0x16f0 [ 385.193682][T10472] ? __pfx__copy_from_iter+0x10/0x10 [ 385.193704][T10472] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 385.193736][T10472] copy_page_from_iter+0xde/0x180 [ 385.193761][T10472] tun_build_skb.constprop.0+0x2e8/0x1500 [ 385.193794][T10472] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 385.193816][T10472] ? unwind_get_return_address+0x59/0xa0 [ 385.193836][T10472] ? arch_stack_walk+0xa6/0x100 [ 385.193859][T10472] ? __lock_acquire+0x62e/0x1ce0 [ 385.193896][T10472] ? _kstrtoull+0x145/0x200 [ 385.193921][T10472] ? __pfx__kstrtoull+0x10/0x10 [ 385.193951][T10472] tun_get_user+0x14ae/0x3ce0 [ 385.193985][T10472] ? __pfx_tun_get_user+0x10/0x10 [ 385.194011][T10472] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 385.194040][T10472] ? find_held_lock+0x2b/0x80 [ 385.194062][T10472] ? tun_get+0x191/0x370 [ 385.194089][T10472] tun_chr_write_iter+0xdc/0x210 [ 385.194114][T10472] vfs_write+0x7d3/0x11d0 [ 385.194132][T10472] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 385.194159][T10472] ? __pfx_vfs_write+0x10/0x10 [ 385.194174][T10472] ? find_held_lock+0x2b/0x80 [ 385.194211][T10472] ksys_write+0x12a/0x250 [ 385.194228][T10472] ? __pfx_ksys_write+0x10/0x10 [ 385.194252][T10472] do_syscall_64+0xcd/0x4c0 [ 385.194273][T10472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.194290][T10472] RIP: 0033:0x7eff3638d69f [ 385.194305][T10472] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 385.194321][T10472] RSP: 002b:00007eff3720f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 385.194338][T10472] RAX: ffffffffffffffda RBX: 00007eff365b5fa0 RCX: 00007eff3638d69f [ 385.194349][T10472] RDX: 0000000000000036 RSI: 0000200000000440 RDI: 00000000000000c8 [ 385.194360][T10472] RBP: 00007eff3720f090 R08: 0000000000000000 R09: 0000000000000000 [ 385.194370][T10472] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 385.194379][T10472] R13: 00007eff365b6038 R14: 00007eff365b5fa0 R15: 00007ffd7218e608 [ 385.194403][T10472] [ 385.492508][ T30] audit: type=1400 audit(1755074011.169:949): avc: denied { map } for pid=10475 comm="syz.2.1154" path="/243/file0" dev="tmpfs" ino=1361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 385.630622][ T979] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 385.659717][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.688850][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.164559][ T979] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 386.173626][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.189075][ T979] usb 4-1: config 0 descriptor?? [ 386.783275][T10493] 9pnet_fd: Insufficient options for proto=fd [ 387.127175][ T5920] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 387.135656][ T979] sony 0003:054C:024B.0010: unexpected long global item [ 387.150480][ T979] sony 0003:054C:024B.0010: parse failed [ 387.186569][ T979] sony 0003:054C:024B.0010: probe with driver sony failed with error -22 [ 387.307351][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 387.321052][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.331783][ T5920] usb 3-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 387.340985][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.386095][ T5920] usb 3-1: config 0 descriptor?? [ 387.490490][ T30] audit: type=1400 audit(1755074013.068:950): avc: denied { unmount } for pid=10279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 388.671782][ T9] usb 4-1: USB disconnect, device number 15 [ 388.724445][ T5920] a4tech 0003:09DA:000A.0011: unknown main item tag 0x5 [ 388.765308][ T5920] a4tech 0003:09DA:000A.0011: collection stack underflow [ 388.821149][ T30] audit: type=1400 audit(1755074014.294:951): avc: denied { read } for pid=10521 comm="syz.3.1166" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 388.842496][ T5920] a4tech 0003:09DA:000A.0011: item 0 2 0 12 parsing failed [ 388.850443][ T5920] a4tech 0003:09DA:000A.0011: parse failed [ 388.867022][ T5920] a4tech 0003:09DA:000A.0011: probe with driver a4tech failed with error -22 [ 388.902602][ T30] audit: type=1400 audit(1755074014.396:952): avc: denied { connect } for pid=10521 comm="syz.3.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 388.946420][T10515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.957980][T10515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.966169][ T30] audit: type=1400 audit(1755074014.396:953): avc: denied { write } for pid=10521 comm="syz.3.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 389.520241][ T5960] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 389.744799][ T5960] usb 8-1: Using ep0 maxpacket: 8 [ 389.783295][ T5960] usb 8-1: unable to get BOS descriptor or descriptor too short [ 389.813176][ T5960] usb 8-1: config 4 interface 0 has no altsetting 0 [ 389.840339][ T5960] usb 8-1: string descriptor 0 read error: -22 [ 389.866339][ T5960] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 389.901061][ T5920] usb 3-1: USB disconnect, device number 21 [ 389.907415][ T5960] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 389.931819][ T5960] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 389.954016][ T5960] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 389.966874][ T5960] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 389.976878][ T5960] usb 8-1: media controller created [ 389.999913][ T5960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 390.129630][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 390.159810][ T5960] zl10353_read_register: readreg error (reg=127, ret==0) [ 390.231238][ T5960] usb 8-1: USB disconnect, device number 2 [ 390.262982][T10550] 9pnet_fd: Insufficient options for proto=fd [ 390.312482][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 390.414473][ T10] usb 4-1: config 5 has an invalid interface number: 239 but max is 3 [ 390.423178][ T10] usb 4-1: config 5 has an invalid interface number: 15 but max is 3 [ 390.433598][ T10] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 390.443720][ T10] usb 4-1: config 5 has 2 interfaces, different from the descriptor's value: 4 [ 390.453395][ T10] usb 4-1: config 5 has no interface number 0 [ 390.459459][ T10] usb 4-1: config 5 has no interface number 1 [ 390.465623][ T10] usb 4-1: config 5 interface 239 altsetting 255 bulk endpoint 0x7 has invalid maxpacket 8 [ 390.879057][ T10] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0xF has invalid maxpacket 528, setting to 64 [ 390.895878][ T10] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 390.907092][ T10] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 390.918279][ T10] usb 4-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 390.929220][ T10] usb 4-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 390.943273][ T10] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 390.955371][ T10] usb 4-1: config 5 interface 239 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 391.056774][ T10] usb 4-1: config 5 interface 239 altsetting 255 has a duplicate endpoint with address 0xC, skipping [ 391.071785][ T10] usb 4-1: config 5 interface 239 altsetting 255 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 391.085230][ T10] usb 4-1: config 5 interface 15 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 391.099204][ T10] usb 4-1: config 5 interface 239 has no altsetting 0 [ 391.106097][ T10] usb 4-1: config 5 interface 15 has no altsetting 0 [ 391.115539][ T10] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1072, bcdDevice=bf.62 [ 391.126786][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.136197][ T10] usb 4-1: Product: syz [ 391.141171][ T10] usb 4-1: Manufacturer: syz [ 391.145872][ T10] usb 4-1: SerialNumber: syz [ 391.292613][T10535] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 391.313965][T10565] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 391.683313][T10573] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 392.710349][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1183'. [ 392.974802][T10583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.784054][ T10] option 4-1:5.239: GSM modem (1-port) converter detected [ 393.897082][ T10] option 4-1:5.15: GSM modem (1-port) converter detected [ 393.907466][ T10] usb 4-1: USB disconnect, device number 16 [ 393.918740][ T10] option 4-1:5.239: device disconnected [ 393.929732][ T10] option 4-1:5.15: device disconnected [ 394.747023][ T30] audit: type=1326 audit(1755074019.850:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10590 comm="syz.6.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905978ebe9 code=0x7ffc0000 [ 394.839390][T10605] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 395.028062][T10606] genirq: Flags mismatch irq 9. 00200000 (pcmmio) vs. 00002080 (acpi) [ 395.040604][ T30] audit: type=1326 audit(1755074019.887:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10590 comm="syz.6.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f905978ebe9 code=0x7ffc0000 [ 395.148473][ T30] audit: type=1326 audit(1755074019.887:956): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10590 comm="syz.6.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905978ebe9 code=0x7ffc0000 [ 395.518331][ T30] audit: type=1326 audit(1755074019.906:957): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10590 comm="syz.6.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f905978ebe9 code=0x7ffc0000 [ 395.819419][ T30] audit: type=1326 audit(1755074019.906:958): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10590 comm="syz.6.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905978ebe9 code=0x7ffc0000 [ 395.846607][ T30] audit: type=1326 audit(1755074020.028:959): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10590 comm="syz.6.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f905978d550 code=0x7ffc0000 [ 395.939878][ T30] audit: type=1326 audit(1755074020.046:960): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10590 comm="syz.6.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905978ebe9 code=0x7ffc0000 [ 396.039926][ T30] audit: type=1326 audit(1755074020.065:961): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10590 comm="syz.6.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905978ebe9 code=0x7ffc0000 [ 396.334204][ T30] audit: type=1400 audit(1755074021.346:962): avc: denied { name_connect } for pid=10617 comm="syz.3.1190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 396.880625][ T31] INFO: task syz-executor:5850 blocked for more than 144 seconds. [ 397.067419][ T31] Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 [ 397.083967][ T30] audit: type=1400 audit(1755074021.599:963): avc: denied { listen } for pid=10617 comm="syz.3.1190" lport=48461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 397.114505][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.157428][ T31] task:syz-executor state:D stack:23096 pid:5850 tgid:5850 ppid:1 task_flags:0x400140 flags:0x00004004 [ 397.284535][T10620] sctp: failed to load transform for md5: -4 [ 397.306721][ T31] Call Trace: [ 397.338066][ T31] [ 397.344839][ T31] __schedule+0x1190/0x5de0 [ 397.352726][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 397.358298][ T31] ? __pfx___schedule+0x10/0x10 [ 397.363216][ T31] ? find_held_lock+0x2b/0x80 [ 397.370570][ T31] ? schedule+0x2d7/0x3a0 [ 397.374997][ T31] schedule+0xe7/0x3a0 [ 397.379636][ T31] v9fs_evict_inode+0x26f/0x300 [ 397.385418][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 397.446119][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 397.451829][ T31] ? evict+0x3a2/0x920 [ 397.458951][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 397.465982][ T31] evict+0x3e3/0x920 [ 397.472333][ T31] ? __pfx_evict+0x10/0x10 [ 397.477396][ T31] ? iput+0x519/0x880 [ 397.481460][ T31] iput+0x521/0x880 [ 397.487148][ T31] ? __pfx_v9fs_drop_inode+0x10/0x10 [ 397.498260][ T31] dentry_unlink_inode+0x29c/0x480 [ 397.509714][ T31] __dentry_kill+0x1d0/0x600 [ 397.515279][ T31] dput.part.0+0x4b1/0x9b0 [ 397.520103][ T31] shrink_dcache_for_umount+0x159/0x3e0 [ 397.525719][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.531058][ T31] generic_shutdown_super+0x6c/0x390 [ 397.536343][ T31] kill_anon_super+0x3a/0x60 [ 397.541474][ T31] v9fs_kill_super+0x3d/0xa0 [ 397.546060][ T31] deactivate_locked_super+0xc1/0x1a0 [ 397.551628][ T31] deactivate_super+0xde/0x100 [ 397.556386][ T31] cleanup_mnt+0x225/0x450 [ 397.562390][ T31] task_work_run+0x150/0x240 [ 397.567750][ T31] ? __pfx_task_work_run+0x10/0x10 [ 397.572928][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 397.578317][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 397.583664][ T31] do_syscall_64+0x3f6/0x4c0 [ 397.588250][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.594290][ T31] RIP: 0033:0x7fdafe58ff17 [ 397.598690][ T31] RSP: 002b:00007ffca29cb4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 397.607147][ T31] RAX: 0000000000000000 RBX: 00007fdafe611c05 RCX: 00007fdafe58ff17 [ 397.615164][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca29cb560 [ 397.623122][ T31] RBP: 00007ffca29cb560 R08: 0000000000000000 R09: 0000000000000000 [ 397.631106][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca29cc5f0 [ 397.639078][ T31] R13: 00007fdafe611c05 R14: 000000000003949f R15: 00007ffca29cc630 [ 397.647075][ T31] [ 397.650129][ T31] [ 397.650129][ T31] Showing all locks held in the system: [ 397.658140][ T31] 3 locks held by kworker/u8:0/12: [ 397.663240][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 397.673164][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 397.682677][ T31] #2: ffff888028458250 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xcf0 [ 397.693604][ T31] 1 lock held by khungtaskd/31: [ 397.698426][ T31] #0: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 397.708301][ T31] 2 locks held by getty/5605: [ 397.713126][ T31] #0: ffff8880323b90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 397.722918][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 397.733060][ T31] 1 lock held by syz-executor/5850: [ 397.738245][ T31] #0: ffff888075e180e0 (&type->s_umount_key#69){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 397.748529][ T31] 1 lock held by syz.0.1033/10052: [ 397.753633][ T31] #0: ffff888075e180e0 (&type->s_umount_key#69){++++}-{4:4}, at: super_lock+0x31c/0x3f0 [ 397.763483][ T31] [ 397.765788][ T31] ============================================= [ 397.765788][ T31] [ 397.774186][ T31] NMI backtrace for cpu 0 [ 397.774195][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 397.774208][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 397.774214][ T31] Call Trace: [ 397.774218][ T31] [ 397.774222][ T31] dump_stack_lvl+0x116/0x1f0 [ 397.774241][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 397.774256][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 397.774274][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 397.774290][ T31] watchdog+0xf0e/0x1260 [ 397.774305][ T31] ? __pfx_watchdog+0x10/0x10 [ 397.774315][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.774326][ T31] ? __kthread_parkme+0x19e/0x250 [ 397.774342][ T31] ? __pfx_watchdog+0x10/0x10 [ 397.774353][ T31] kthread+0x3c5/0x780 [ 397.774363][ T31] ? __pfx_kthread+0x10/0x10 [ 397.774373][ T31] ? rcu_is_watching+0x12/0xc0 [ 397.774392][ T31] ? __pfx_kthread+0x10/0x10 [ 397.774406][ T31] ret_from_fork+0x5d7/0x6f0 [ 397.774415][ T31] ? __pfx_kthread+0x10/0x10 [ 397.774425][ T31] ret_from_fork_asm+0x1a/0x30 [ 397.774447][ T31] [ 397.774452][ T31] Sending NMI from CPU 0 to CPUs 1: [ 397.892745][ C1] NMI backtrace for cpu 1 [ 397.892758][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 397.892774][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 397.892782][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 397.892800][ C1] Code: ac 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 c2 16 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 397.892813][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 397.892824][ C1] RAX: 00000000018bdcfb RBX: 0000000000000001 RCX: ffffffff8b934c29 [ 397.892833][ C1] RDX: 0000000000000000 RSI: ffffffff8de4f205 RDI: ffffffff8c162580 [ 397.892841][ C1] RBP: ffffed1003cd3488 R08: 0000000000000001 R09: ffffed10170a6655 [ 397.892850][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 397.892858][ C1] R13: ffff88801e69a440 R14: ffffffff90ab3690 R15: 0000000000000000 [ 397.892866][ C1] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 397.892880][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.892888][ C1] CR2: 0000555573c295c8 CR3: 000000007cc7d000 CR4: 00000000003526f0 [ 397.892897][ C1] Call Trace: [ 397.892901][ C1] [ 397.892906][ C1] default_idle+0x13/0x20 [ 397.892921][ C1] default_idle_call+0x6d/0xb0 [ 397.892935][ C1] do_idle+0x391/0x510 [ 397.892953][ C1] ? __pfx_do_idle+0x10/0x10 [ 397.892969][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 397.892985][ C1] cpu_startup_entry+0x4f/0x60 [ 397.893003][ C1] start_secondary+0x21d/0x2b0 [ 397.893022][ C1] ? __pfx_start_secondary+0x10/0x10 [ 397.893042][ C1] common_startup_64+0x13e/0x148 [ 397.893063][ C1] [ 397.894262][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 397.894275][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 397.894294][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 397.894303][ T31] Call Trace: [ 397.894308][ T31] [ 397.894314][ T31] dump_stack_lvl+0x3d/0x1f0 [ 397.894333][ T31] vpanic+0x6e8/0x7a0 [ 397.894357][ T31] ? __pfx_vpanic+0x10/0x10 [ 397.894380][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 397.894401][ T31] panic+0xca/0xd0 [ 397.894421][ T31] ? __pfx_panic+0x10/0x10 [ 397.894443][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 397.894465][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 397.894487][ T31] ? watchdog+0xd78/0x1260 [ 397.894502][ T31] ? watchdog+0xd6b/0x1260 [ 397.894519][ T31] watchdog+0xd89/0x1260 [ 397.894539][ T31] ? __pfx_watchdog+0x10/0x10 [ 397.894553][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.894569][ T31] ? __kthread_parkme+0x19e/0x250 [ 397.894591][ T31] ? __pfx_watchdog+0x10/0x10 [ 397.894607][ T31] kthread+0x3c5/0x780 [ 397.894621][ T31] ? __pfx_kthread+0x10/0x10 [ 397.894637][ T31] ? rcu_is_watching+0x12/0xc0 [ 397.894655][ T31] ? __pfx_kthread+0x10/0x10 [ 397.894671][ T31] ret_from_fork+0x5d7/0x6f0 [ 397.894684][ T31] ? __pfx_kthread+0x10/0x10 [ 397.894699][ T31] ret_from_fork_asm+0x1a/0x30 [ 397.894726][ T31] [ 398.205331][ T31] Kernel Offset: disabled [ 398.209626][ T31] Rebooting in 86400 seconds..