last executing test programs:

29m5.282978184s ago: executing program 3 (id=1614):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)

29m5.156066321s ago: executing program 3 (id=1618):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000ac0)="11170c5bd1252e7d7cf5abbf2fe4d22b59fce1da46018e6d9c300477edaa5a4179a660cd336bb010b43fce8151c3c9000700fb6bdd64974b15d4a92da334112a9458053fc56fa3704a8bd0d90353b1b2f412ab3ec6f7c1c247a799a9328e6279e9b88b8632cb683b1cad238ee4541c95d20211724ebbe5bbb20c066a4a2f0068cf190076b3340b746ea6905f747c3f530e9829d3abb5589b6b1b1bd9193e35c4911306d54db778b864e3c82263863874062a2d7b314d2ec6cb89d6d92f49f243bae5072f3ad343198d7d6cc23b776ced920daa35afdf8c3c2c644dbd3712bd78ff8d8465781cc3", 0xe7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)='2\x00', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0)
write(r2, &(0x7f0000000440), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000004c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/direction\x00', 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0)
write(r3, &(0x7f0000000600)='2\x00', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0)
write(r4, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_num_groups\x00', 0x1, 0x0)
write(r5, &(0x7f0000000840)='6', 0x1)
symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

29m4.988135373s ago: executing program 3 (id=1621):
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x5, &(0x7f0000000280)={0x28, 0x8, 0xfffffb82})

29m4.823640841s ago: executing program 3 (id=1625):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x0)

29m4.709962199s ago: executing program 3 (id=1628):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="40e309"], 0x6e)

29m3.550400362s ago: executing program 3 (id=1641):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

29m2.491471044s ago: executing program 32 (id=1641):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

29m0.517383134s ago: executing program 4 (id=1649):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

28m59.832016921s ago: executing program 4 (id=1653):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10)

28m59.589932623s ago: executing program 4 (id=1655):
r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=<r3=>r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='\a'], 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

28m59.277104555s ago: executing program 4 (id=1658):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0/file0\x00', 0x0, 0x2a530d1, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0)
umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x2)

28m59.038266286s ago: executing program 4 (id=1661):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffe8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

28m57.563514307s ago: executing program 4 (id=1676):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
readv(r0, &(0x7f0000001a80)=[{&(0x7f00000007c0)=""/132, 0x84}], 0x1)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e21, 0xe7e, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
r2 = getpgid(0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
r4 = dup2(r0, r1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000880)={0x0, 0x3, 0x7, 0x1})
r5 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000010000000000000000000500000a20000000090a01040000000000000000060000040900010073797a3100000000140000001100010000000000000000000100000accc329fa21e3947c8dd992e6af0cdfd9af2f0b9791633b118dccdc659035389fe88d37af253ef5fa203c6d7f33d5a0bfcbc16d491156c2be2b6ed9"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000090000010080000001000005d6"], 0x50)
socket(0x11, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
r8 = syz_open_procfs(0x0, &(0x7f0000000840)='net/packet\x00')
pread64(r8, &(0x7f0000000100)=""/212, 0xd4, 0x83)
mkdir(&(0x7f0000000300)='./file0\x00', 0x18)
fchdir(r3)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r9, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x1, 0x8, 0x4, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x815)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=[0x52000000], 0x0, 0xf, 0x1, 0x0, r2}}, 0x40)

28m57.080351882s ago: executing program 33 (id=1676):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
readv(r0, &(0x7f0000001a80)=[{&(0x7f00000007c0)=""/132, 0x84}], 0x1)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e21, 0xe7e, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
r2 = getpgid(0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
r4 = dup2(r0, r1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000880)={0x0, 0x3, 0x7, 0x1})
r5 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000010000000000000000000500000a20000000090a01040000000000000000060000040900010073797a3100000000140000001100010000000000000000000100000accc329fa21e3947c8dd992e6af0cdfd9af2f0b9791633b118dccdc659035389fe88d37af253ef5fa203c6d7f33d5a0bfcbc16d491156c2be2b6ed9"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000090000010080000001000005d6"], 0x50)
socket(0x11, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
r8 = syz_open_procfs(0x0, &(0x7f0000000840)='net/packet\x00')
pread64(r8, &(0x7f0000000100)=""/212, 0xd4, 0x83)
mkdir(&(0x7f0000000300)='./file0\x00', 0x18)
fchdir(r3)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r9, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x1, 0x8, 0x4, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x815)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=[0x52000000], 0x0, 0xf, 0x1, 0x0, r2}}, 0x40)

16m8.835158112s ago: executing program 5 (id=6650):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000340)=@setlink={0x30, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r1, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @IFLA_VF_PORTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)

16m8.23622265s ago: executing program 5 (id=6654):
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff0300000009058203"], 0x0) (async)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x1, 0x20, 0x81, {0x8, 0xb, 0x1, 0x0, 0x1, 0x2, 0x20, 0xf8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x99a, 0x3, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xfd, 0x4, 0x7, {0x8, 0x25, 0x1, 0x80, 0x0, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x9d0bc375783412bd, 0x6, 0x7, 0x6, {0x8, 0x25, 0x1, 0x81, 0x1b, 0x80, 0x5}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x9, 0x0, 0x0, 0x40, 0x8}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xf4ff}}, {0xce, &(0x7f0000000180)=@string={0xce, 0x3, "e0913eb9ab23a948c178c8b83e896bc53455da901c2c4c3f1ece9a4f18dce72069e039961ab869e9dc1e7e3fed584cf44226df7f141e2c9ffbfb4709d372b5648d7648b9e5e080b12018da1673e4116438325921a9650eaf09899341c6f517fa7bb5187fe57b976a7d8ae0dd16c5b8c7218c88bffce56e75d4e8b8f204c827d994e607d11fe8713e3828773bc4a39f9195d8c169ef9224326c016f4bbafb11973d79b4060ba0772e56329f6b2ef5d067e01f631080f9055c97abb25a3c7577c802b6e491fccb5c9110bbf4db"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x427}}, {0x89, &(0x7f0000000340)=@string={0x89, 0x3, "e9eef18b57cfd4011c4f5f10a3ea5925720f4a2500fb1f80713140620edb9664fd8872962977b877f6fee7935a9c9247c514ba972edaad2a2be03121a643fd9791043065a30f6a04a48b40ee68d84216f5ef38b8d0748d1604ffff4bf0f57ec6180ac6829dbec11365448dfcb69d07a164f1e0e50b5d3d582cd5567897074802a3b1c6c7880224"}}, {0x21, &(0x7f0000000400)=@string={0x21, 0x3, "8a94ca8470a8dbe9cae2720bdb66174f3a4251e3aa5d4eab23687ff977d1f5"}}, {0x33, &(0x7f0000000440)=@string={0x33, 0x3, "321f178cc33d6efe46694bf8be3624c13ac347c5eaf83ee4e656805cd826ea0e5cdbb293d95a27fa51ec39edcc285fdd98"}}, {0x68, &(0x7f00000005c0)=ANY=[@ANYBLOB="6803af95d1eeedd402fa7d5e44975d0c30ebd8df6b007786fab81ff215f17c47b005dea179a6d713a8106ffccf58f091a9455f90003799ae6383a9c62257af2acc5c5a54b6175ec25351393560a2baeba0bb598c0edc88df6e9bae768e231625381af2c656f0b8f11b715772b0d216981471c5c74c2ee97991a4d5d74d6531875f74d2230713df5bfd7460141b21f7e53e"]}]})

16m6.423377503s ago: executing program 5 (id=6670):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48)
r1 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r1}, 0x20)

16m5.933208539s ago: executing program 5 (id=6671):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$XFS_IOC_GETBMAPA(0xffffffffffffffff, 0xc020582c, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './mnt\x00'})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0xe4, 0x6, 0x2, {0x3, @sdr={0x38416761, 0x5a}}, 0x4})
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001ac141442000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010102000000000000000000000000000004d46c0000007f00000100000000000000000000000000000000000010000f000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000004)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000100))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r6 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x87b, 0x8, 0x4c09, 0x8, 0xd1b}, 0x14)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r8)
sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000010000000080007000000020018000180140002006e657464657673696d300000000000000800060000020000080008"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

16m4.271632443s ago: executing program 5 (id=6675):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xf, 0x7a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x8da35825f1467a59)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1)
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20280, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae03, 0xd0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000000c00)={0x20, r6, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000100}, 0x20000000)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010300000000ffdbdf25170000000e0001006e657464657673696d0000000f0002006e657464654a73696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x4c010}, 0xd000)
syz_io_uring_setup(0x1a28, &(0x7f0000000400)={0x0, 0x7f77, 0x1000, 0x2003, 0x15f}, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000000))
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00')
preadv(r9, &(0x7f0000001200)=[{&(0x7f0000001d40)=""/4098, 0x1002}], 0x1, 0x9, 0x6a76)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
r11 = getpid()
r12 = syz_pidfd_open(r11, 0x0)
setns(r12, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r10, 0xc0184d03, &(0x7f0000000240))
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r8, 0x8, 0x1, 0x25dfdbf6, {0x52}}, 0x14}, 0x1, 0x0, 0x0, 0x10000001}, 0x0)

16m3.240594818s ago: executing program 5 (id=6685):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0)
r3 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8106}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x20000000)
syz_usb_control_io$cdc_ncm(r3, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r2])

15m47.501449318s ago: executing program 34 (id=6685):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0)
r3 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8106}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x20000000)
syz_usb_control_io$cdc_ncm(r3, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r2])

12m56.590467338s ago: executing program 0 (id=7789):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x1000006)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x42101)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r6, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r6, 0x408c5333, 0x0)

12m52.976315951s ago: executing program 0 (id=7793):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000380)={0x228, 0x29, 0x2, {0xfff, [{{0x2, 0x2, 0x2}, 0x5, 0x9f, 0x48, './my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups'}, {{0x0, 0x3}, 0x100000000, 0x1, 0xd, './my_configfs'}, {{0x8, 0x3, 0x3}, 0x9, 0xa4, 0x48, './my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups'}, {{0x0, 0x2, 0x6}, 0x20e0da64, 0x2, 0xd, './my_configfs'}, {{0x2, 0x4, 0x2}, 0x9, 0xc, 0xd, './my_configfs'}, {{0x80, 0x1, 0x4}, 0x0, 0x4, 0x48, './my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups'}, {{0x0, 0x1, 0x3}, 0x5b4d, 0x7, 0xd, './my_configfs'}, {{0x2, 0x1, 0x6}, 0x5, 0xac, 0xd, './my_configfs'}, {{0x4, 0x3, 0x2}, 0x5212c09c, 0x1, 0x7, './file0'}, {{0x8, 0x4, 0x7}, 0xa, 0x9, 0xd, './my_configfs'}]}}, 0x228)

12m47.768258761s ago: executing program 0 (id=7809):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0xfff0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd6c, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x4c6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008084}, 0x4004080)

12m47.336661127s ago: executing program 0 (id=7810):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x3, 0xffffffff, 0x2, 0x80})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xb, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xd}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r5, 0x1, 0x70bd28, 0x2ddfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffd1}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4085}, 0x4c040)
sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x20}, 0x5)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xe)
ioctl$TIOCSLCKTRMIOS(r7, 0x80047437, &(0x7f00000010c0))
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x23}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x40}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0xffffffff}]}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x8002)

12m46.987048937s ago: executing program 0 (id=7813):
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x4000000)
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
readahead(r1, 0x8, 0x9c9)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x49940, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
close(r2)
r3 = socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x28, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@loopback, 0x4d5, 0x33}, @in=@multicast1, {0x3, 0x0, 0x0, 0x8}, {}, {0x0, 0x22}, 0x70bd27, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0)

12m44.623208395s ago: executing program 0 (id=7826):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000280)='./file0\x00', 0x52000029)
syz_open_dev$loop(0x0, 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="4673c875ca4d9c6067", 0x9}], 0x1)

12m43.971160906s ago: executing program 35 (id=7826):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000280)='./file0\x00', 0x52000029)
syz_open_dev$loop(0x0, 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="4673c875ca4d9c6067", 0x9}], 0x1)

13.331300319s ago: executing program 8 (id=13095):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be)
pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250200000014000180060005"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x14)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB=' \r\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB='\rv(='])
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000040), 0x4000000000000, 0x2)
ioctl$LOOP_SET_FD(r4, 0x4c00, r0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0xb5f0, 0x0, 0xa, 0x1e, 0x11, "17a270a77a6ddefe33a5b7a6952d3e914e4bf439abc279cfa7b27639690848e555c92c0c8ea1b614f5556cf3c2624880b2bf06ebccab1277b4edceeac02c7d46", "2d74c26b1057eaa33d326deb9ce50c1992b384ed6794101dbebe0e3c03e0f518f3e9e98385b6abda9e3af493db5f833425d532c2c9617b2c01fbd18ad2f50078", "c3f19b3978d98eb0be37eadaf350ebbc44e678b791b573590cb519c2a2f74be6", [0xd3a, 0xfffffffffffffffa]})
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x1fff, 0x0)
ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000040)=""/95)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000)
r9 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10)
clock_adjtime(0x1, &(0x7f0000000040)={0x7, 0x1cb, 0x5, 0x100000001, 0x8, 0x7, 0x5, 0x8, 0x4, 0x8, 0x9, 0x7, 0x6, 0x0, 0x3, 0x400, 0xc, 0x4, 0xa37, 0x4, 0x7, 0x1, 0x7f, 0x7d9, 0xfffffffffffffffe, 0x400})
finit_module(r9, 0x0, 0x2)
r10 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x7, 0x280000)
ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r10, 0x40044104, &(0x7f0000000140)=0xfffffffe)
r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x220240, 0x0)
r12 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x5, 0x80000)
r13 = eventfd2(0x4, 0x0)
ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000200)={r12, 0x7, 0x2, r13})

11.959605595s ago: executing program 7 (id=13110):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', r2, 0x25, r0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x2, @void}, 0x10)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x300080c1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000000a0a050000000100000000000a0000090900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r5)
socket$kcm(0x2, 0x200000000000001, 0x106)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000001880)={0x1, @pix_mp={0x81, 0x0, 0x50323234, 0x3, 0x3, [{0x9, 0x7}, {0x670, 0x64b0a44e}, {0x1, 0x3ff}, {0x0, 0x9}, {0x56, 0x10000}, {0x1000, 0xffffffff}, {0x7}, {0x6, 0x2}], 0xf2, 0x8, 0x1}})
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000040)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8", 0x2e}, {&(0x7f0000000800)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000880)="088d85d1f427cc11b21caca442b2a4af8e69b0c132387b8de793ab327e16f27134fe420c1f7a1589836c736d2341f792240fecfd95e2206e7eaa54d08feafc4e009b7ad23f7c18a49c875b5b7266fc799ed90a099cedfe0c57000000000000000000000000000000003c4627b2367d6c49fc1dd9a9139362968da8e19f9886862c9e2841033c91633d5f77d6a6e3b589c7", 0x91}, {&(0x7f0000000100)="d83b06000000fd03ce3e01df4c", 0xd}, {&(0x7f0000000940)="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", 0xe18}, {&(0x7f0000000280)="c2f6aac64f849ece2d0d299cf2b00229025a081ec12dd5a7128ad08f18c9f01625", 0x21}], 0x6}, 0x40080)

10.378332812s ago: executing program 7 (id=13114):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
fanotify_init(0x8, 0x400)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000280)={0x2, 0x2, 0x7fffffffffffffff, 0x10000000009})
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x3000004, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x38, 0x70]}}]})

9.595669876s ago: executing program 8 (id=13116):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r2=>0x0}) (async)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0057df2500"/15], 0x10}, 0x1, 0x0, 0x0, 0x24048041}, 0x20000000) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xbccc}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044815}, 0x4004080) (async)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket(0xa, 0x3, 0x0) (async)
ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f00000001c0)={0x3c, 0xffffffff, 0x2, 0xc, 0x43})

9.064799257s ago: executing program 8 (id=13121):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="584cca09b66a2b7fc413000000020603000000000000000000000000070900020073797a320000000005000100070000000c00078008001240000008000500050002000000050004000000000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000030403000000fedbdf2500000000", @ANYRESOCT=r1, @ANYRESHEX=r0], 0x50}}, 0x40)
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x81901)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000040)={'syz0\x00', {0x1, 0x1, 0x1, 0x1}, 0x1, [0x2, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xa1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7fff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xe]}, 0x45c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="f94f1cf31537b83867a720000000"], 0x14}}, 0x4000000)

7.368932512s ago: executing program 2 (id=13128):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0xfeffffff00000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0201"], 0x33fe0}}, 0x800)

7.309272448s ago: executing program 6 (id=13129):
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0)
syz_emit_ethernet(0x38, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x2000, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x4e20, 0x16, 0x0, @opaque="043363e8167e675a7b4957478df8"}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

6.551068727s ago: executing program 2 (id=13132):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, r3, 0x401, 0x70bd24, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}], @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac14, 0xfac0c, 0xfac02]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x10c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x25}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5143475876a8d17e"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6bb8068a03539bc3f0b21d5fb274073a86b8f40bd84e8a1e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f4bd628911031997"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x465e}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="43b3a087f26aa602f016eb76cc767645"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffe}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="337358e2a4a1734e7fb487d9c44c6522"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5b465c7277ccfaca0e7fda37d19dfb978fccf04ec9e60f51a9e5a24a522ead40"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d39251752c8bfa4fd3abea24714c13c8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x50)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0x7]}, &(0x7f00000000c0), 0x8)

6.139797425s ago: executing program 7 (id=13136):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040025"}, 0x38)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x3ff, @private0, 0x9}, 0x1c, 0x0}}], 0x1, 0x931766f6319eed40)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x5, @loopback}, 0x1c)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7720, 0x16, 0x0, 0x0)

5.962331466s ago: executing program 6 (id=13138):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', r2, 0x25, r0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x2, @void}, 0x10)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x300080c1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000000a0a050000000100000000000a0000090900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r5)
socket$kcm(0x2, 0x200000000000001, 0x106)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000001880)={0x1, @pix_mp={0x81, 0x0, 0x50323234, 0x3, 0x3, [{0x9, 0x7}, {0x670, 0x64b0a44e}, {0x1, 0x3ff}, {0x0, 0x9}, {0x56, 0x10000}, {0x1000, 0xffffffff}, {0x7}, {0x6, 0x2}], 0xf2, 0x8, 0x1}})
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000040)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8", 0x2e}, {&(0x7f0000000800)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000880)="088d85d1f427cc11b21caca442b2a4af8e69b0c132387b8de793ab327e16f27134fe420c1f7a1589836c736d2341f792240fecfd95e2206e7eaa54d08feafc4e009b7ad23f7c18a49c875b5b7266fc799ed90a099cedfe0c57000000000000000000000000000000003c4627b2367d6c49fc1dd9a9139362968da8e19f9886862c9e2841033c91633d5f77d6a6e3b589c7", 0x91}, {&(0x7f0000000100)="d83b06000000fd03ce3e01df4c000000009e7af9", 0x14}, {&(0x7f0000000940)="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", 0xe18}, {&(0x7f0000000280)="c2f6aac64f849ece2d0d299cf2b00229025a081ec12dd5a7128ad08f18c9f01625", 0x21}], 0x6}, 0x40080)

5.636863396s ago: executing program 8 (id=13140):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002800800110001000000140003"], 0x50}}, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f00000006c0)=<r5=>0x0, &(0x7f0000000580)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r9, 0x7a4, &(0x7f00000000c0)={{@any, 0x5}, 0x5, 0x9, 0x3, 0x8})
ioctl$SNDRV_PCM_IOCTL_DRAIN(r9, 0x4144, 0x0)
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000040)={0x0, 0x6})
r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r10, 0x4020aed2, &(0x7f0000000300)={0x0, 0x1000, 0x8})
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x7, 0xfffffffa, @mcast1}, 0x1c)
syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000220edf104c05c10687c2010203010902240001000000000904"], 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r11)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="4d7e00000000000000002a00506eb7704f7deef44800000800ff077c0000000c2005000203aaaa"], 0x34}, 0x4, 0x700000000000000}, 0x0)

4.322152254s ago: executing program 7 (id=13142):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r1 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000800)={'veth1_to_team\x00', &(0x7f0000000080)=@ethtool_cmd={0x50, 0x8, 0x1, 0x5, 0x2, 0x7, 0x72, 0x1, 0x8, 0x7f, 0x34b4, 0x6, 0xc871, 0x5, 0xe, 0x0, [0x7, 0x100]}})
sendmmsg(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000140)=@caif=@dgm={0x25, 0x9, 0x1}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000240)="fba4d3714b009b86af56b8b8654163042507216d25258557c078d98ae2c3ab9d60d3b66d89ad69e59e18eaf7ccabd0949e6b10e936946d89113b9d8f63bc51e74b4c78a5b253bdd9253b59fc86d03b739604060f6d9c3a514db2d9d7f03031f523f401748bc27ab75cefc77bd3a95a5da6c92f91d9a33cc57cc111de93165b3dc39dd608b272ef4cdc03134d6f3e748372cffc302dd3f2", 0x97}, {&(0x7f0000000500)="519ffa11e488de784fc8b19217cdbe8b36a15144f6751b7dfd867231edbdebfabbde2af96dd0d5747796c509facb4e5990f1d3e23f7fc1e45215fe7d972a38392210215644ec60cf75db836b6d9844fb70a05d1c219ed3cd42ab40abe3e173a3417dd3f8d357525c2b46f79dc915fe40ad9e81f6d2b1c9fb9785e2f98d", 0x7d}, {&(0x7f0000000580)="de181e3ead619a3cbdf4dd8fa18da6711ff992dd19c7ffdb12ee16accc73c86e2d54ddb7bb7c92ca657219bf68f9a1f6ddee1f9500c5f92f43d77d5940108cade85011e4", 0x44}], 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x450}}], 0x1, 0x20000091)
r2 = getpid()
socket$inet6(0xa, 0x2, 0x3a)
capset(0x0, &(0x7f0000001280)={0x200002, 0x200003, 0xa, 0x46, 0x7})
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4})
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r5, &(0x7f0000000800)='1', 0x1)
write(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000040)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', &(0x7f0000000080))
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)=ANY=[@ANYBLOB="74000000110001000000000003000000180000000c0000001f00000000000000080041"], 0x74}], 0x1, 0x0, 0x0, 0xb305e06d8ab48237}, 0x0)
ioprio_get$pid(0x2, r2)
r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0xc1105511, &(0x7f0000000040)={0x7, 0x3, 0x40, 0x10000, 'syz1\x00', 0x4000041})
openat$dsp(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r8 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a100df00008032080b00020903000009040000000e0100000d240100092700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_control_io(r8, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="000330000000e7fbe707ba18069465c3ecac041dfc8dc4e2e1afc4a5b2a4d49682c00fa1de61b146cac53f5ff726783fbaa84346862c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r8, 0x0, 0x0)
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)

4.290001461s ago: executing program 6 (id=13143):
unshare(0x22020600)
r0 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$ublk_chdev(&(0x7f0000000000), r0, 0x80002)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0)

4.111614417s ago: executing program 6 (id=13144):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000580)=ANY=[])
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fspick(r1, &(0x7f00000000c0)='.\x00', 0x0)
eventfd(0x8c66)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x600, 0x1}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
socket$key(0xf, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x80, 0x0)
pread64(r4, &(0x7f0000000140)=""/6, 0x6, 0x1)
recvmmsg(r4, &(0x7f0000000b00)=[{{&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000680)=""/234, 0xea}, {&(0x7f0000000780)=""/77, 0x4d}, {&(0x7f0000000800)=""/17, 0x11}, {&(0x7f0000000840)=""/63, 0x3f}, {&(0x7f0000000940)=""/154, 0x9a}], 0x5, &(0x7f0000000a80)=""/109, 0x6d}, 0x40}], 0x1, 0x10061, &(0x7f0000000b40)={0x0, 0x3938700})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1, 0x81, 0x800, {0x0, 0xea60}, {}, {}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "5e3dba8ae862e81c"}}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000000300)={0x2, 0x80, 0x87, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x2, 0x0, 0x1, 0x1}, 0x22, 0x1, 0x0, 0x0, "50e21b8ddaa5579ece2910c17ee5a14af80cc5c37f24a28d10f8f053b145373d5a360ae17375608369faa3fd662c321f10ff6fb0bf748d3712973a4481bf321a"}}, 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0xc084)

3.712565396s ago: executing program 2 (id=13145):
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x4480, &(0x7f00000000c0)={[{@size={'size', 0x3d, [0x6d]}}]})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x118, 0x7, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0xb8, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xa832}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x9e}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x7e}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x46}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x25}]}}}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, 0x118}, 0x1, 0x0, 0x0, 0x8001}, 0x800)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4080)

3.498457074s ago: executing program 2 (id=13146):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
fanotify_init(0x8, 0x400)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000280)={0x2, 0x2, 0x7fffffffffffffff, 0x10000000009})
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x3000004, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x38, 0x70]}}]})

2.29933398s ago: executing program 2 (id=13147):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
memfd_create(0x0, 0x4)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0xfffffffffffffdde, 0x0}, 0xe07e872420dfefca)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000003000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x40804)
io_uring_setup(0x250b, &(0x7f0000000180)={0x0, 0x39b6, 0xc0, 0x2, 0xab})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000940), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff070400", @ANYRES16=r3, @ANYBLOB="010027bd7000f7dbdf2504000000080002000100000008000700ac141423"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x400404c)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={<r7=>r6, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000000)={r7}, 0x8)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r8 = gettid()
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000200)=r8)
recvfrom(r4, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045503, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r9)
syz_clone(0xac4778f0cb0c38e7, 0x0, 0x46, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r9)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)

2.078320465s ago: executing program 6 (id=13148):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x7, 0x0, 0x5, 0x2, 0x5775d27c, 0x154, 0x100}, 0x20)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb)
kexec_load(0x2, 0x1, &(0x7f0000001900)=[{0x0, 0x0, 0xff600000}], 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000002340)={<r4=>0x0, 0x9}, 0x0)
r5 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0x10, &(0x7f0000000000), 0xc)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000023c0)={r4, 0xaf, "0528713f2869cbc8b83f1f128adb47ccb18963091cd90d07aa4556f0e0ab52b25c8e962ab2de40c227cab421987afb5a9a781baa38986cb75df6df659e21705f545da9c97c357544abb49933045dee6c6061d5a1710b30c017e1293f3bb1ead9b042307a27cd0d9a36e10829cd64574510c40b82de843b4df8e0c6db4734bd35e59654d0e040fa48086a98d6c28698e59a78292e6c4a3e3bebf08f282c05631ea0bdd76591a30a63b20a68a877a9df"}, &(0x7f0000002480)=0xb7)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000200)=0x10000)
kexec_load(0x7, 0x6, &(0x7f0000002840)=[{&(0x7f00000024c0)="a7463bfef23aa466db3e9a0ff58caf31b05b91347164863964d12ee6f875819ffa778f3227802e309ca218e0c30e827b9f52d0234d173a15738aba3b083be47b71461f3b41c95c19ec779ff0ce26ac879c42fd0b130d63b0f1b879c1264a9a0bf4fbdf216eae25bf79d4c660a7eda6c8bb538cee740d35b5b2bab4061d22d8eef4e9fbb0a99e67baa7329479dbf90a9ef5b3197f9a5c8431531f8bb9dc118af3a300140b367e833dc677fcafd00e", 0xae, 0x4, 0x2}, {&(0x7f0000002740)="0e1a2e889d318d3acbc3", 0xa, 0x80000000, 0x1}, {&(0x7f00000025c0)="29591bb75c0942ab62f0830cf602eabab621aee5adca1dcbdbe55f95d670d94f743657e07297b0b54e0e6de90295e0e9f98ed9aceb18c37be633e75eacd7ba6ae08d8b922f7e14508794b4c46f691cbb26d0fc70ba8ec9d96cf1e0edb56307f14dbbba23ca69d0f34983ce8215b77695781f859789c34ce00923b221be36254a6fb0d87b16cd439e9ffe086026d40f98cf226b846ab486d27fca0fac59df24472eb11f94b4c4b2b367c0b3c9214bb34b667d9529f12e8f22987f1e3af14cf5f28a3c4aa6052b43597b9533213f7ce9baa31e2458a804284dea933f9e43b75857a42d641e28108b8b", 0xe8, 0xffff, 0x7}, {&(0x7f00000026c0)="47302f7dd4c23cc703998b28b3e76d4c9a7a6896dc6c460d80e3ea3c8702e534927e86571789b71154f0561b18f64f57b9fbdee3bc0f9fd1885ab2ffb666d10740a44beb301697b766ed26fabd995b8b6f541074c7f9c2a5e094ef4f77e15b7370785c59f12c8a", 0x67, 0xfffffffffffffff6}, {&(0x7f0000002940)="81081abac626920b9220b56e7333a654ec76fabe96afc0f32f58c8113ebd229571a652bde4cd91abaecab6ba341edd390dfdedd606bff46157dde8f1eeeba3adb00821db7f1ebfbee44714e2f54f5580a176d7a4c7539e37a1e3412c", 0x5c, 0x453, 0x8000000000000000}, {&(0x7f00000027c0)="452fd01a850148eb0385fca12938660bb41905635566e8dec34d53844ed2cd4dcf0560ae6c76da36431d024970ac489dfce2e932dbe05e9ff28e742463900cb354219a2b564740171fd99e56069c41b8c3d1a6e2d065c89b4794562f232dcedaf7", 0x61, 0x1, 0x2}], 0x150000)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f00000005c0), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$igmp6(0xa, 0x3, 0x3a)
getsockopt$MRT6(r8, 0x29, 0xce, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffffffffffccc)
syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffff020080c200000086dd602d2d9200283afffe8000000400000000000000000000bbff020000000000000000000218000001890290000000000025270c3a7666bf360bf420a1de8500000000000000000100000000000000ffffffffff9270adc1439497414fc518e62c6934f36813fc"], 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
getsockopt$MRT6(r8, 0x29, 0xd0, &(0x7f0000000100), &(0x7f0000000140)=0x4)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000002900)={0x6, 'batadv0\x00', {0x9511}, 0xfff7})
write(r3, &(0x7f0000000080)="01010101", 0x4)
read(r3, &(0x7f00000000c0), 0x0)
close(r3)

1.920797585s ago: executing program 8 (id=13150):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="584cca09b66a2b7fc413000000020603000000000000000000000000070900020073797a320000000005000100070000000c00078008001240000008000500050002000000050004000000000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000030403000000fedbdf2500000000", @ANYRESOCT=r1, @ANYRESHEX=r0], 0x50}}, 0x40)
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x81901)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000040)={'syz0\x00', {0x1, 0x1, 0x1, 0x1}, 0x1, [0x2, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xa1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7fff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xe]}, 0x45c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000540)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="f94f1cf31537b83867a720000000"], 0x14}}, 0x4000000)

1.68383065s ago: executing program 1 (id=13152):
r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x12, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)

1.626156968s ago: executing program 1 (id=13153):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', r2, 0x25, r0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x2, @void}, 0x10)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x300080c1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000000a0a050000000100000000000a0000090900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r5)
socket$kcm(0x2, 0x200000000000001, 0x106)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000001880)={0x1, @pix_mp={0x81, 0x0, 0x50323234, 0x3, 0x3, [{0x9, 0x7}, {0x670, 0x64b0a44e}, {0x1, 0x3ff}, {0x0, 0x9}, {0x56, 0x10000}, {0x1000, 0xffffffff}, {0x7}, {0x6, 0x2}], 0xf2, 0x8, 0x1}})
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000040)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8", 0x2e}, {&(0x7f0000000800)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000880)="088d85d1f427cc11b21caca442b2a4af8e69b0c132387b8de793ab327e16f27134fe420c1f7a1589836c736d2341f792240fecfd95e2206e7eaa54d08feafc4e009b7ad23f7c18a49c875b5b7266fc799ed90a099cedfe0c57000000000000000000000000000000003c4627b2367d6c49fc1dd9a9139362968da8e19f9886862c9e2841033c91633d5f77d6a6e3b589c7", 0x91}, {&(0x7f0000000100)="d83b06000000fd03ce3e01df4c000000009e7af9", 0x14}, {&(0x7f0000000940)="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", 0xe18}, {&(0x7f0000000280)="c2f6aac64f849ece2d0d299cf2b00229025a081ec12dd5a7128ad08f18c9f01625", 0x21}], 0x6}, 0x40080)

1.565346456s ago: executing program 1 (id=13154):
unshare(0x22020600)
r0 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$ublk_chdev(&(0x7f0000000000), r0, 0x80002)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0)

1.455560253s ago: executing program 1 (id=13155):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x808d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x24c202a3})
r2 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5)
sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fedbdf250600000008000d008800000008000100", @ANYRES32=0x0, @ANYBLOB="2fbadca81f81029a0789168e341021fb4aa963235c027428b6892a6fe7730e59c0b3f8003f2a68eaa5437f4d9f204f48c7734733df4ea1273a77ad96cc22c8e48d9f4d36d1ebaa4dcf3db864ea6ccd180ad580f623a744025af353df694374ad1a3a484752864c5a967852de66908f52d44a4ac6267a992a5b342fda7e87080d7cc3c9b240ca4f445eef975bcc32f4ec2f3da5b6d894c26a5159d400000000bd4c8ee8b0451c0fbb5586537c"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40)
read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000079d000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000280)="b9800000c00f3235000100000f30b805000000b9003800000f01d9b9c00900000f320f23d50f200226640f22510f01c366ba4000b000ee0f06c7442400f4ffffffc74424021cfdaf6dc7442406000000000f011424", 0x55}], 0x1, 0x4, &(0x7f0000000340)=[@cr4={0x1, 0x6010}, @flags={0x3, 0x40}], 0x2)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f00000015c0), 0xffffe2d, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000080)={0xcd0, 0xfa, 0x8, 0x1, 0x7, 0x7fffffffffffffff})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f4929}], 0x1c)
listen(r9, 0x100)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r10, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0xffe0}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000007000000ac"], 0x18, 0x48d5}, 0x8050)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES16=r8], 0x18}}, 0x0)
r11 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS(r11, 0x4b72, &(0x7f0000000240)={0x1, 0x3, 0x9, 0x76a, 0x3, "00af02ffffe400009d0700010100"})

464.012613ms ago: executing program 7 (id=13156):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x15, &(0x7f0000000700)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000004040000", @ANYRES32=r0], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0d0000000490baffffffff1133b30fa9a4cf3eee000047f510fcd49f838731419404985b6a224e8ff8122f8742e6", @ANYRES32=r1], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0e00000000000000a900000000020000000000000000000043000000000000000000000000000000ffffffffffffffff0000000000bd030000000000000000000000000000000000000a000000000000fd8c00000000000002000000000000080000000000000000000000000000000044000500ac14142400000000000000000000000000000000000000000000000000000000000000010200000004010000020000000000000000000000e207ba588cbe50d55c9b9e16dbd0f9b23448a4e020045d5035dbf677218e659b64bb461229"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="400000001f00040027bd7000fbdbdf25fc000000000000000080000000000000000004d50200d400ac1414aa0000000000000000000000000106000007350000"], 0x40}, 0x1, 0x0, 0x0, 0x40804}, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x698d, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket$inet6(0xa, 0x400000000001, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0xffff, 0x2005, 0x4, 0xc1, 0xffffffffffffffff, 0x5}, 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000240)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000700)={r7, &(0x7f00000005c0), 0x0}, 0x20)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000140)={{0x8, 0x0, 0x81, 0xfffffffe, 'syz0\x00', 0xf5}, 0x3, 0x200, 0x3e, 0x0, 0x1, 0xfff, 'syz1\x00', &(0x7f0000000640)=['syz0\x00\x9cB\xd1}\xb7\xe2\xde\xb0\xc0\xab\x18]\xe5\xa1\x1anK\xadL\xe0\x00\xfd\xbc\xf2\x89\x8f\xe5)\xa8\xdeuYD\x14\x84\x01\xd3e?\xde/\x80y]\xa6\xb4^\xa66_\xb2RR\r\xc2\xa6\xb2\xa23\x1e\x880$\x87\xcdb\xa1\xf1\x19\x00d\xf1}\"\x9f#\x9a\xd2T\xfc\x84\xce\x8cW[AQ\xc4R\xec\xef7o\x03\x90\x8c\x01O\x89\xb7\r\x90\xd1\xde\xa6`\xbe\x93\xe96\xeei8\x8b~b+\x02\xbfy\x96\xb3\xc2E{=8\b\b\xc5\v\xeac\x98\xd8\x95\xd3\x1f\x03\x00\x9d\x8f\xeb\x16 \xa0u\xad\xc2\xd4UH\x82\xbb\xe5\xd9\x19\xb7P\xfc\xf2\x02{\xba&\x0f/\xb2d\aC\xd0Q\x9e\xb2\x16\xea\xfe\x06\x92`\xda:\xe3\xb0'], 0xbe})

432.509937ms ago: executing program 8 (id=13157):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x1, 0x1, 0x8, 0x4})
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2)
ftruncate(r5, 0xffff)
fcntl$addseals(r5, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000})
mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93)
r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0xff, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405668, &(0x7f00000004c0)={0x0, 0x0, 0x1})
renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2)

405.558535ms ago: executing program 6 (id=13158):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, [@jmp={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x10}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe91}, 0x94)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900010000000000000000001d011f0005000d"], 0x34}}, 0x0)

352.368987ms ago: executing program 1 (id=13159):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xa, 0x1, 0x804}}}, 0x7)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x1a0c099, 0x0)

323.1996ms ago: executing program 1 (id=13160):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002800800110001000000140003"], 0x50}}, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f00000006c0)=<r5=>0x0, &(0x7f0000000580)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r9, 0x7a4, &(0x7f00000000c0)={{@any, 0x5}, 0x5, 0x9, 0x3, 0x8})
ioctl$SNDRV_PCM_IOCTL_DRAIN(r9, 0x4144, 0x0)
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000040)={0x0, 0x6})
r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r10, 0x4020aed2, &(0x7f0000000300)={0x0, 0x1000, 0x8})
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x7, 0xfffffffa, @mcast1}, 0x1c)
syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000220edf104c05c10687c2010203010902240001000000000904"], 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r11)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="4d7e00000000000000002a00506eb7704f7deef44800000800ff077c0000000c2005000203aaaa"], 0x34}, 0x4, 0x700000000000000}, 0x0)

294.380723ms ago: executing program 2 (id=13161):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe)
pwrite64(r0, &(0x7f0000000100)='\x00', 0x1, 0x1e8133)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250200000014000180060005"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x14)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB=' \r\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB='\rv(='])
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000040), 0x4000000000000, 0x2)
ioctl$LOOP_SET_FD(r4, 0x4c00, r0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0xb5f0, 0x0, 0xa, 0x1e, 0x11, "17a270a77a6ddefe33a5b7a6952d3e914e4bf439abc279cfa7b27639690848e555c92c0c8ea1b614f5556cf3c2624880b2bf06ebccab1277b4edceeac02c7d46", "2d74c26b1057eaa33d326deb9ce50c1992b384ed6794101dbebe0e3c03e0f518f3e9e98385b6abda9e3af493db5f833425d532c2c9617b2c01fbd18ad2f50078", "c3f19b3978d98eb0be37eadaf350ebbc44e678b791b573590cb519c2a2f74be6", [0xd3a, 0xfffffffffffffffa]})
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x1fff, 0x0)
ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000040)=""/95)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000)
r9 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10)
clock_adjtime(0x1, &(0x7f0000000040)={0x7, 0x1cb, 0x5, 0x100000001, 0x8, 0x7, 0x5, 0x8, 0x4, 0x8, 0x9, 0x7, 0x6, 0x0, 0x3, 0x400, 0xc, 0x4, 0xa37, 0x4, 0x7, 0x1, 0x7f, 0x7d9, 0xfffffffffffffffe, 0x400})
finit_module(r9, 0x0, 0x2)
r10 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x7, 0x280000)
ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r10, 0x40044104, &(0x7f0000000140)=0xfffffffe)
r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x220240, 0x0)
r12 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x5, 0x80000)
r13 = eventfd2(0x4, 0x0)
ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000200)={r12, 0x7, 0x2, r13})

0s ago: executing program 7 (id=13162):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0xff00, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)

kernel console output (not intermixed with test programs):

: USB WDM device
[ 1967.253020][ T5695] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1967.442494][ T5598] usb 9-1: new high-speed USB device number 50 using dummy_hcd
[ 1967.463194][ T5598] usb 9-1: device descriptor read/8, error -71
[ 1967.573027][ T5598] usb usb9-port1: unable to enumerate USB device
[ 1968.844098][ T5526] 
[ 1969.173086][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12080'.
[ 1969.175015][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12080'.
[ 1969.175703][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12080'.
[ 1969.175831][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12080'.
[ 1969.175963][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12080'.
[ 1969.176082][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12080'.
[ 1969.178035][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12080'.
[ 1969.462095][ T5540] FAULT_INJECTION: forcing a failure.
[ 1969.462095][ T5540] name failslab, interval 1, probability 0, space 0, times 0
[ 1969.462132][ T5540] CPU: 0 UID: 0 PID: 5540 Comm: syz.1.12081 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1969.462159][ T5540] Tainted: [L]=SOFTLOCKUP
[ 1969.462166][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1969.462176][ T5540] Call Trace:
[ 1969.462184][ T5540]  <TASK>
[ 1969.462193][ T5540]  dump_stack_lvl+0xe8/0x150
[ 1969.462225][ T5540]  should_fail_ex+0x46b/0x600
[ 1969.462261][ T5540]  should_failslab+0xa8/0x100
[ 1969.462282][ T5540]  __kvmalloc_node_noprof+0x17a/0x8a0
[ 1969.462306][ T5540]  ? __kvm_mmu_topup_memory_cache+0x461/0x600
[ 1969.462371][ T5540]  ? __kvm_mmu_topup_memory_cache+0x461/0x600
[ 1969.462403][ T5540]  __kvm_mmu_topup_memory_cache+0x461/0x600
[ 1969.462428][ T5540]  ? kvm_msr_allowed+0x9a/0x490
[ 1969.462459][ T5540]  ? kvm_msr_allowed+0x9a/0x490
[ 1969.462480][ T5540]  mmu_topup_memory_caches+0x21/0x170
[ 1969.462516][ T5540]  kvm_mmu_load+0x9d/0x22c0
[ 1969.462535][ T5540]  ? kvm_msr_allowed+0x9a/0x490
[ 1969.462554][ T5540]  ? kvm_msr_allowed+0x9a/0x490
[ 1969.462576][ T5540]  ? kvm_msr_allowed+0x3f4/0x490
[ 1969.462596][ T5540]  ? kvm_msr_allowed+0x9a/0x490
[ 1969.462616][ T5540]  ? kvm_apic_has_interrupt+0x740/0x770
[ 1969.462649][ T5540]  vcpu_run+0x4e34/0x7950
[ 1969.462750][ T5540]  ? __pfx_vcpu_run+0x10/0x10
[ 1969.462771][ T5540]  ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010
[ 1969.462796][ T5540]  ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010
[ 1969.462831][ T5540]  kvm_arch_vcpu_ioctl_run+0x13ed/0x2010
[ 1969.462868][ T5540]  ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010
[ 1969.462891][ T5540]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 1969.462913][ T5540]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1969.462953][ T5540]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1969.462980][ T5540]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1969.463002][ T5540]  ? rt_mutex_slowunlock+0x4ee/0xa30
[ 1969.463021][ T5540]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1969.463045][ T5540]  ? lock_acquire+0x106/0x350
[ 1969.463065][ T5540]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1969.463092][ T5540]  ? rt_write_unlock+0x19e/0x360
[ 1969.463116][ T5540]  ? rt_write_unlock+0x1aa/0x360
[ 1969.463138][ T5540]  kvm_vcpu_ioctl+0xa64/0xfe0
[ 1969.463164][ T5540]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1969.463182][ T5540]  ? hook_file_ioctl+0x1f5/0x610
[ 1969.463208][ T5540]  ? __asan_memset+0x22/0x50
[ 1969.463234][ T5540]  ? smack_file_ioctl+0x335/0x370
[ 1969.463261][ T5540]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1969.463295][ T5540]  ? __fget_files+0x2a/0x420
[ 1969.463324][ T5540]  ? __fget_files+0x3a8/0x420
[ 1969.463344][ T5540]  ? __fget_files+0x2a/0x420
[ 1969.463368][ T5540]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1969.463391][ T5540]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1969.463411][ T5540]  __se_sys_ioctl+0xff/0x170
[ 1969.463431][ T5540]  do_syscall_64+0x166/0x520
[ 1969.463453][ T5540]  ? trace_irq_disable+0x3b/0x140
[ 1969.463472][ T5540]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1969.463488][ T5540]  ? clear_bhb_loop+0x70/0xc0
[ 1969.463510][ T5540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1969.463527][ T5540] RIP: 0033:0x7f339320e0d9
[ 1969.463544][ T5540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1969.463559][ T5540] RSP: 002b:00007f3391466028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1969.463578][ T5540] RAX: ffffffffffffffda RBX: 00007f3393495fa0 RCX: 00007f339320e0d9
[ 1969.463591][ T5540] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[ 1969.463601][ T5540] RBP: 00007f3391466090 R08: 0000000000000000 R09: 0000000000000000
[ 1969.463612][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1969.463622][ T5540] R13: 00007f3393496038 R14: 00007f3393495fa0 R15: 00007ffd686cc2a8
[ 1969.463652][ T5540]  </TASK>
[ 1969.966959][ T5695] usb 3-1: USB disconnect, device number 9
[ 1970.024695][ T5554] FAULT_INJECTION: forcing a failure.
[ 1970.024695][ T5554] name failslab, interval 1, probability 0, space 0, times 0
[ 1970.024729][ T5554] CPU: 0 UID: 0 PID: 5554 Comm: syz.2.12086 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1970.024752][ T5554] Tainted: [L]=SOFTLOCKUP
[ 1970.024758][ T5554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1970.024771][ T5554] Call Trace:
[ 1970.024779][ T5554]  <TASK>
[ 1970.024787][ T5554]  dump_stack_lvl+0xe8/0x150
[ 1970.024815][ T5554]  should_fail_ex+0x46b/0x600
[ 1970.024842][ T5554]  should_failslab+0xa8/0x100
[ 1970.024864][ T5554]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1970.024884][ T5554]  ? __alloc_skb+0x1db/0x7a0
[ 1970.024909][ T5554]  ? __alloc_skb+0x1db/0x7a0
[ 1970.024939][ T5554]  __alloc_skb+0x1db/0x7a0
[ 1970.024967][ T5554]  netlink_ack+0x136/0xb30
[ 1970.024986][ T5554]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1970.025011][ T5554]  ? ref_tracker_free+0x668/0x820
[ 1970.025031][ T5554]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1970.025049][ T5554]  ? __asan_memcpy+0x40/0x70
[ 1970.025080][ T5554]  netlink_rcv_skb+0x2a4/0x4a0
[ 1970.025100][ T5554]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1970.025127][ T5554]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1970.025159][ T5554]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1970.025177][ T5554]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1970.025203][ T5554]  netlink_unicast+0x7f5/0x990
[ 1970.025238][ T5554]  netlink_sendmsg+0x813/0xb40
[ 1970.025266][ T5554]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1970.025296][ T5554]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1970.025319][ T5554]  ? __kernel_text_address+0xd/0x30
[ 1970.025336][ T5554]  ? unwind_get_return_address+0x4d/0x90
[ 1970.025358][ T5554]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1970.025376][ T5554]  sock_sendmsg_nosec+0x13a/0x180
[ 1970.025401][ T5554]  ____sys_sendmsg+0x565/0x870
[ 1970.025419][ T5554]  ? __might_fault+0xaf/0x130
[ 1970.025447][ T5554]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1970.025475][ T5554]  ? import_iovec+0x73/0xa0
[ 1970.025498][ T5554]  ___sys_sendmsg+0x2a5/0x360
[ 1970.025516][ T5554]  ? __lock_acquire+0x683/0x2ce0
[ 1970.025538][ T5554]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1970.025588][ T5554]  ? __fget_files+0x2a/0x420
[ 1970.025607][ T5554]  ? __fget_files+0x3a8/0x420
[ 1970.025637][ T5554]  __x64_sys_sendmsg+0x1b7/0x290
[ 1970.025658][ T5554]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1970.025698][ T5554]  do_syscall_64+0x166/0x520
[ 1970.025720][ T5554]  ? trace_irq_disable+0x3b/0x140
[ 1970.025744][ T5554]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1970.025762][ T5554]  ? clear_bhb_loop+0x70/0xc0
[ 1970.025783][ T5554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1970.025801][ T5554] RIP: 0033:0x7f8293abe0d9
[ 1970.025819][ T5554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1970.025835][ T5554] RSP: 002b:00007f8291d16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1970.025854][ T5554] RAX: ffffffffffffffda RBX: 00007f8293d45fa0 RCX: 00007f8293abe0d9
[ 1970.025868][ T5554] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1970.025880][ T5554] RBP: 00007f8291d16090 R08: 0000000000000000 R09: 0000000000000000
[ 1970.025892][ T5554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1970.025902][ T5554] R13: 00007f8293d46038 R14: 00007f8293d45fa0 R15: 00007ffd82c94388
[ 1970.025933][ T5554]  </TASK>
[ 1970.486799][ T5563] bond0: (slave gretap0): Opening slave failed
[ 1970.787626][ T5581] ipvlan0: entered promiscuous mode
[ 1970.787756][ T5581] ipvlan0: entered allmulticast mode
[ 1970.787774][ T5581] veth0_vlan: entered allmulticast mode
[ 1971.602420][ T5598] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[ 1971.753314][ T5598] usb 9-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00
[ 1971.755117][ T5598] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1971.755168][ T5598] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1971.759767][ T5598] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1971.759792][ T5598] usb 9-1: Product: syz
[ 1971.759807][ T5598] usb 9-1: Manufacturer: syz
[ 1971.759821][ T5598] usb 9-1: SerialNumber: syz
[ 1971.879324][ T5617] CIFS: VFS: bad security option: krb5iý	
[ 1971.913944][ T5617] __nla_validate_parse: 8 callbacks suppressed
[ 1971.913962][ T5617] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12106'.
[ 1972.040240][ T5598] usb 9-1: USB disconnect, device number 51
[ 1972.231881][ T5617] vlan0: entered promiscuous mode
[ 1972.231902][ T5617] syz_tun: entered promiscuous mode
[ 1972.243340][ T5617] vlan0: entered allmulticast mode
[ 1972.243365][ T5617] syz_tun: entered allmulticast mode
[ 1973.498487][ T5639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12116'.
[ 1973.498508][ T5639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12116'.
[ 1973.501240][ T5641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12116'.
[ 1973.501257][ T5641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12116'.
[ 1973.592538][ T5695] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1973.782596][ T5695] usb 3-1: Using ep0 maxpacket: 8
[ 1973.784320][ T5695] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1973.787244][ T5695] usb 3-1: config 0 has an invalid descriptor of length 84, skipping remainder of the config
[ 1973.787361][ T5695] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1973.787388][ T5695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 193, changing to 11
[ 1973.787414][ T5695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 25667, setting to 1024
[ 1973.787441][ T5695] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1973.804386][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1973.804504][ T5695] usb 3-1: Product: syz
[ 1973.804519][ T5695] usb 3-1: Manufacturer: syz
[ 1973.804533][ T5695] usb 3-1: SerialNumber: syz
[ 1973.841353][ T5695] usb 3-1: config 0 descriptor??
[ 1973.860171][ T5633] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1974.086500][ T5633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1974.088944][ T5633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1974.150764][ T5695] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71
[ 1974.153436][ T5695] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5
[ 1974.186627][ T5695] usb 3-1: USB disconnect, device number 10
[ 1974.390113][ T5671] FAULT_INJECTION: forcing a failure.
[ 1974.390113][ T5671] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1974.390150][ T5671] CPU: 0 UID: 0 PID: 5671 Comm: syz.1.12124 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1974.390177][ T5671] Tainted: [L]=SOFTLOCKUP
[ 1974.390183][ T5671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1974.390194][ T5671] Call Trace:
[ 1974.390202][ T5671]  <TASK>
[ 1974.390211][ T5671]  dump_stack_lvl+0xe8/0x150
[ 1974.390243][ T5671]  should_fail_ex+0x46b/0x600
[ 1974.390275][ T5671]  _copy_from_user+0x2d/0xb0
[ 1974.390296][ T5671]  do_sock_getsockopt+0x200/0x7e0
[ 1974.390322][ T5671]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 1974.390359][ T5671]  ? __fget_files+0x3a8/0x420
[ 1974.390382][ T5671]  ? __fget_files+0x2a/0x420
[ 1974.390411][ T5671]  __x64_sys_getsockopt+0x1aa/0x250
[ 1974.390440][ T5671]  do_syscall_64+0x166/0x520
[ 1974.390464][ T5671]  ? trace_irq_disable+0x3b/0x140
[ 1974.390483][ T5671]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1974.390506][ T5671]  ? clear_bhb_loop+0x70/0xc0
[ 1974.390529][ T5671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1974.390548][ T5671] RIP: 0033:0x7f339320e0d9
[ 1974.390565][ T5671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1974.390580][ T5671] RSP: 002b:00007f3391466028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 1974.390601][ T5671] RAX: ffffffffffffffda RBX: 00007f3393495fa0 RCX: 00007f339320e0d9
[ 1974.390615][ T5671] RDX: 000000000000004b RSI: 0000000000000001 RDI: 0000000000000003
[ 1974.390626][ T5671] RBP: 00007f3391466090 R08: 0000200000000180 R09: 0000000000000000
[ 1974.390638][ T5671] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[ 1974.390651][ T5671] R13: 00007f3393496038 R14: 00007f3393495fa0 R15: 00007ffd686cc2a8
[ 1974.390683][ T5671]  </TASK>
[ 1974.810447][ T5682] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12128'.
[ 1975.122421][ T5695] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1975.145567][ T5704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12133'.
[ 1975.279913][ T5695] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1975.382848][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1975.382875][ T5695] usb 3-1: Product: syz
[ 1975.382889][ T5695] usb 3-1: SerialNumber: syz
[ 1975.407167][ T5695] usb 3-1: config 0 descriptor??
[ 1975.622244][ T5695] hso 3-1:0.0: Failed to find BULK eps
[ 1976.056064][ T1329] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.056132][ T1329] ieee802154 phy1 wpan1: encryption failed: -22
[ 1976.334567][ T5573] usb 3-1: USB disconnect, device number 11
[ 1976.500302][ T5750] FAULT_INJECTION: forcing a failure.
[ 1976.500302][ T5750] name failslab, interval 1, probability 0, space 0, times 0
[ 1976.500337][ T5750] CPU: 0 UID: 0 PID: 5750 Comm: syz.1.12152 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1976.500362][ T5750] Tainted: [L]=SOFTLOCKUP
[ 1976.500369][ T5750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1976.500379][ T5750] Call Trace:
[ 1976.500387][ T5750]  <TASK>
[ 1976.500395][ T5750]  dump_stack_lvl+0xe8/0x150
[ 1976.500425][ T5750]  should_fail_ex+0x46b/0x600
[ 1976.500458][ T5750]  should_failslab+0xa8/0x100
[ 1976.500482][ T5750]  kmem_cache_alloc_node_noprof+0xae/0x670
[ 1976.500503][ T5750]  ? __alloc_skb+0x1db/0x7a0
[ 1976.500527][ T5750]  ? __alloc_skb+0x1db/0x7a0
[ 1976.500558][ T5750]  __alloc_skb+0x1db/0x7a0
[ 1976.500586][ T5750]  netlink_sendmsg+0x5d4/0xb40
[ 1976.500617][ T5750]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1976.500639][ T5750]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1976.500663][ T5750]  ? __kernel_text_address+0xd/0x30
[ 1976.500682][ T5750]  ? unwind_get_return_address+0x4d/0x90
[ 1976.500705][ T5750]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1976.500725][ T5750]  sock_sendmsg_nosec+0x13a/0x180
[ 1976.500752][ T5750]  ____sys_sendmsg+0x565/0x870
[ 1976.500771][ T5750]  ? __might_fault+0xaf/0x130
[ 1976.500796][ T5750]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1976.500824][ T5750]  ? import_iovec+0x73/0xa0
[ 1976.500847][ T5750]  ___sys_sendmsg+0x2a5/0x360
[ 1976.500873][ T5750]  ? __lock_acquire+0x683/0x2ce0
[ 1976.500898][ T5750]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1976.500953][ T5750]  ? __fget_files+0x2a/0x420
[ 1976.500975][ T5750]  ? __fget_files+0x3a8/0x420
[ 1976.501007][ T5750]  __x64_sys_sendmsg+0x1b7/0x290
[ 1976.501030][ T5750]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1976.501074][ T5750]  do_syscall_64+0x166/0x520
[ 1976.501096][ T5750]  ? trace_irq_disable+0x3b/0x140
[ 1976.501115][ T5750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1976.501135][ T5750]  ? clear_bhb_loop+0x70/0xc0
[ 1976.501157][ T5750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1976.501176][ T5750] RIP: 0033:0x7f339320e0d9
[ 1976.501194][ T5750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1976.501209][ T5750] RSP: 002b:00007f3391466028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1976.501229][ T5750] RAX: ffffffffffffffda RBX: 00007f3393495fa0 RCX: 00007f339320e0d9
[ 1976.501242][ T5750] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[ 1976.501254][ T5750] RBP: 00007f3391466090 R08: 0000000000000000 R09: 0000000000000000
[ 1976.501266][ T5750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1976.501277][ T5750] R13: 00007f3393496038 R14: 00007f3393495fa0 R15: 00007ffd686cc2a8
[ 1976.501306][ T5750]  </TASK>
[ 1977.071084][ T5758] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12155'.
[ 1977.071111][ T5758] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12155'.
[ 1977.071128][ T5758] netlink: 4100 bytes leftover after parsing attributes in process `syz.7.12155'.
[ 1977.071143][ T5758] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12155'.
[ 1977.236999][ T5765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12158'.
[ 1979.684896][ T5810] siw: device registration error -23
[ 1980.177454][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12180'.
[ 1980.177488][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12180'.
[ 1981.683913][ T5861] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12198'.
[ 1983.597137][ T5887] netlink: NAT attribute has 4 unknown bytes
[ 1983.597174][ T5887] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1983.796468][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12212'.
[ 1983.796511][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12212'.
[ 1983.797887][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12212'.
[ 1983.797920][ T5895] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12212'.
[ 1984.467157][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12221'.
[ 1984.486184][ T5695] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1984.633410][ T5695] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[ 1984.635068][ T5695] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1984.640349][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1984.640373][ T5695] usb 3-1: Product: syz
[ 1984.640387][ T5695] usb 3-1: Manufacturer: syz
[ 1984.640401][ T5695] usb 3-1: SerialNumber: syz
[ 1984.746940][ T5932] netlink: NAT attribute has 4 unknown bytes
[ 1984.747032][ T5932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1984.941775][ T5695] snd-usb-6fire 3-1:1.0: unknown device firmware state received from device:
[ 1984.941796][ T5695] eb aa 00 00 00 00 00 00 
[ 1984.941871][ T5695] snd-usb-6fire 3-1:1.0: probe with driver snd-usb-6fire failed with error -5
[ 1985.150156][ T5695] usb 3-1: USB disconnect, device number 12
[ 1985.622473][ T5695] usb 9-1: new low-speed USB device number 52 using dummy_hcd
[ 1985.778705][ T5695] usb 9-1: No LPM exit latency info found, disabling LPM.
[ 1985.778753][ T5695] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[ 1985.785418][ T5695] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0
[ 1985.785464][ T5695] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[ 1985.785489][ T5695] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0
[ 1985.795221][ T5970] siw: device registration error -23
[ 1985.864398][ T5695] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1985.864426][ T5695] usb 9-1: Product: 答�ݩ���ﻑ왈ग़�㹡�浙࣡잊鈭��祩㛇刔풚跶㛫嗅ꪄ䎧匒ퟌ淺鲄ｪ㈂➖䠡ߋ눂꾩呃庨��ｨ彥肉⡆ᔕꈰ⫞嗱샆�ﬖ活�붿ẟ俺짮칇ዙ뙘铡완ጿ峫떊嵄넥�ꮙ篻潕Ềퟞ᫊㙫鑺﾿Ӓ逵뵅쑿籠ⱈ顿층࿣ਚ뤑䋵๢飚�⇙湽�ୈ賳툃㼚〙ꩿᦗ깈痛䑥㠮쮣
[ 1985.864457][ T5695] usb 9-1: Manufacturer: 釾窷骸羗쌷驞ᮺ�᪊鴘⿩粯ⲧ櫳媙찉��ᾔ蕬�∓뢻�亲���跿扣릯䋚ꋀ봼䦚॰攔潡馌�ᑆ礸࿯橼䈞正�觧ເ頕홲㣦㓙⹨縤啢䛓샟램
[ 1985.864480][ T5695] usb 9-1: SerialNumber: �♾묑臻㾠烾�㯻觡�놣핊ἅ嘦㇋㰹ನ跮뀿柖㺨챰𧻓봹�颺࿦沠〧섘欀�ꊀ톑�⭰�남ㇹ쓖쾊ꒇ��뇒
[ 1986.281236][ T5695] usb 9-1: Audio class v2/v3 interfaces need an interface association
[ 1986.689150][ T5695] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1986.736802][ T5695] usb 9-1: USB disconnect, device number 52
[ 1986.812430][ T5573] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1986.871405][T27834] udevd[27834]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1986.982582][ T5573] usb 3-1: Using ep0 maxpacket: 16
[ 1986.983737][ T5573] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[ 1986.985537][ T5573] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1987.012469][ T5573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1987.012498][ T5573] usb 3-1: Product: syz
[ 1987.012512][ T5573] usb 3-1: Manufacturer: syz
[ 1987.012526][ T5573] usb 3-1: SerialNumber: syz
[ 1987.051675][ T5573] usb 3-1: config 0 descriptor??
[ 1987.082473][ T5573] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[ 1987.581131][ T6009] FAULT_INJECTION: forcing a failure.
[ 1987.581131][ T6009] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1987.581168][ T6009] CPU: 1 UID: 0 PID: 6009 Comm: syz.1.12251 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1987.581193][ T6009] Tainted: [L]=SOFTLOCKUP
[ 1987.581201][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1987.581211][ T6009] Call Trace:
[ 1987.581220][ T6009]  <TASK>
[ 1987.581228][ T6009]  dump_stack_lvl+0xe8/0x150
[ 1987.581263][ T6009]  should_fail_ex+0x46b/0x600
[ 1987.581296][ T6009]  _copy_from_user+0x2d/0xb0
[ 1987.581327][ T6009]  do_sock_getsockopt+0x200/0x7e0
[ 1987.581354][ T6009]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 1987.581389][ T6009]  ? __fget_files+0x3a8/0x420
[ 1987.581412][ T6009]  ? __fget_files+0x2a/0x420
[ 1987.581442][ T6009]  __x64_sys_getsockopt+0x1aa/0x250
[ 1987.581470][ T6009]  do_syscall_64+0x166/0x520
[ 1987.581492][ T6009]  ? trace_irq_disable+0x3b/0x140
[ 1987.581511][ T6009]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1987.581529][ T6009]  ? clear_bhb_loop+0x70/0xc0
[ 1987.581550][ T6009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1987.581567][ T6009] RIP: 0033:0x7f339320e0d9
[ 1987.581585][ T6009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1987.581600][ T6009] RSP: 002b:00007f3391466028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 1987.581620][ T6009] RAX: ffffffffffffffda RBX: 00007f3393495fa0 RCX: 00007f339320e0d9
[ 1987.581634][ T6009] RDX: 000000000000004b RSI: 0000000000000001 RDI: 0000000000000003
[ 1987.581645][ T6009] RBP: 00007f3391466090 R08: 0000200000000180 R09: 0000000000000000
[ 1987.581657][ T6009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1987.581668][ T6009] R13: 00007f3393496038 R14: 00007f3393495fa0 R15: 00007ffd686cc2a8
[ 1987.581700][ T6009]  </TASK>
[ 1987.939046][ T6014] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.12253'.
[ 1988.476138][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12260'.
[ 1988.501481][ T5573] usb 3-1: USB disconnect, device number 13
[ 1988.799757][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12265'.
[ 1989.936536][ T5716] usb 9-1: new high-speed USB device number 53 using dummy_hcd
[ 1990.183407][ T5716] usb 9-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[ 1990.188130][ T5716] usb 9-1: config index 0 descriptor too short (expected 7768, got 18)
[ 1990.188187][ T5716] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1990.247027][ T5716] usb 9-1: config 0 descriptor??
[ 1990.563276][ T6068] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.12273'.
[ 1990.564498][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1990.565053][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1990.609227][   T37] kauditd_printk_skb: 30 callbacks suppressed
[ 1990.609245][   T37] audit: type=1326 audit(1787380523.118:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6030 comm="syz.8.12260" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9fa510e0d9 code=0x0
[ 1991.905144][ T6113] netlink: 121460 bytes leftover after parsing attributes in process `syz.7.12292'.
[ 1992.097644][ T5716] usb 9-1: USB disconnect, device number 53
[ 1992.469005][ T6136] FAULT_INJECTION: forcing a failure.
[ 1992.469005][ T6136] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1992.469052][ T6136] CPU: 1 UID: 0 PID: 6136 Comm: syz.1.12302 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1992.469077][ T6136] Tainted: [L]=SOFTLOCKUP
[ 1992.469083][ T6136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1992.469093][ T6136] Call Trace:
[ 1992.469101][ T6136]  <TASK>
[ 1992.469109][ T6136]  dump_stack_lvl+0xe8/0x150
[ 1992.469141][ T6136]  should_fail_ex+0x46b/0x600
[ 1992.469174][ T6136]  _copy_from_iter+0x1d3/0x1660
[ 1992.469203][ T6136]  ? rcu_is_watching+0x16/0xb0
[ 1992.469227][ T6136]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 1992.469260][ T6136]  ? __pfx__copy_from_iter+0x10/0x10
[ 1992.469285][ T6136]  ? __alloc_skb+0x27a/0x7a0
[ 1992.469308][ T6136]  ? __alloc_skb+0x27a/0x7a0
[ 1992.469336][ T6136]  ? netlink_sendmsg+0x650/0xb40
[ 1992.469356][ T6136]  ? skb_put+0x112/0x210
[ 1992.469384][ T6136]  netlink_sendmsg+0x6c0/0xb40
[ 1992.469421][ T6136]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1992.469444][ T6136]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1992.469468][ T6136]  ? __kernel_text_address+0xd/0x30
[ 1992.469486][ T6136]  ? unwind_get_return_address+0x4d/0x90
[ 1992.469508][ T6136]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1992.469528][ T6136]  sock_sendmsg_nosec+0x13a/0x180
[ 1992.469554][ T6136]  ____sys_sendmsg+0x565/0x870
[ 1992.469573][ T6136]  ? __might_fault+0xaf/0x130
[ 1992.469598][ T6136]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1992.469626][ T6136]  ? import_iovec+0x73/0xa0
[ 1992.469648][ T6136]  ___sys_sendmsg+0x2a5/0x360
[ 1992.469667][ T6136]  ? __lock_acquire+0x683/0x2ce0
[ 1992.469691][ T6136]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1992.469745][ T6136]  ? __fget_files+0x2a/0x420
[ 1992.469767][ T6136]  ? __fget_files+0x3a8/0x420
[ 1992.469799][ T6136]  __x64_sys_sendmsg+0x1b7/0x290
[ 1992.469821][ T6136]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1992.469862][ T6136]  do_syscall_64+0x166/0x520
[ 1992.469884][ T6136]  ? trace_irq_disable+0x3b/0x140
[ 1992.469903][ T6136]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1992.469921][ T6136]  ? clear_bhb_loop+0x70/0xc0
[ 1992.469944][ T6136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1992.469962][ T6136] RIP: 0033:0x7f339320e0d9
[ 1992.469979][ T6136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1992.469995][ T6136] RSP: 002b:00007f3391466028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1992.470015][ T6136] RAX: ffffffffffffffda RBX: 00007f3393495fa0 RCX: 00007f339320e0d9
[ 1992.470028][ T6136] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[ 1992.470039][ T6136] RBP: 00007f3391466090 R08: 0000000000000000 R09: 0000000000000000
[ 1992.470051][ T6136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1992.470062][ T6136] R13: 00007f3393496038 R14: 00007f3393495fa0 R15: 00007ffd686cc2a8
[ 1992.470093][ T6136]  </TASK>
[ 1992.722476][ T5716] usb 9-1: new high-speed USB device number 54 using dummy_hcd
[ 1992.787131][ T6145] FAULT_INJECTION: forcing a failure.
[ 1992.787131][ T6145] name failslab, interval 1, probability 0, space 0, times 0
[ 1992.787168][ T6145] CPU: 0 UID: 0 PID: 6145 Comm: syz.1.12307 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1992.787193][ T6145] Tainted: [L]=SOFTLOCKUP
[ 1992.787200][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1992.787211][ T6145] Call Trace:
[ 1992.787218][ T6145]  <TASK>
[ 1992.787226][ T6145]  dump_stack_lvl+0xe8/0x150
[ 1992.787256][ T6145]  should_fail_ex+0x46b/0x600
[ 1992.787290][ T6145]  should_failslab+0xa8/0x100
[ 1992.787314][ T6145]  __kmalloc_noprof+0xfe/0x780
[ 1992.787332][ T6145]  ? tomoyo_encode+0x2ad/0x570
[ 1992.787351][ T6145]  ? tomoyo_encode+0x2ad/0x570
[ 1992.787377][ T6145]  tomoyo_encode+0x2ad/0x570
[ 1992.787403][ T6145]  tomoyo_realpath_from_path+0x5fa/0x640
[ 1992.787434][ T6145]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1992.787462][ T6145]  tomoyo_path_number_perm+0x246/0x5f0
[ 1992.787490][ T6145]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1992.787523][ T6145]  ? __lock_acquire+0x683/0x2ce0
[ 1992.787560][ T6145]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1992.787583][ T6145]  ? hook_file_ioctl+0x1f5/0x610
[ 1992.787625][ T6145]  ? __fget_files+0x2a/0x420
[ 1992.787651][ T6145]  ? __fget_files+0x2a/0x420
[ 1992.787672][ T6145]  ? __fget_files+0x3a8/0x420
[ 1992.787693][ T6145]  ? __fget_files+0x2a/0x420
[ 1992.787720][ T6145]  security_file_ioctl+0xc3/0x2a0
[ 1992.787749][ T6145]  __se_sys_ioctl+0x47/0x170
[ 1992.787771][ T6145]  do_syscall_64+0x166/0x520
[ 1992.787793][ T6145]  ? trace_irq_disable+0x3b/0x140
[ 1992.787811][ T6145]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1992.787831][ T6145]  ? clear_bhb_loop+0x70/0xc0
[ 1992.787854][ T6145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1992.787872][ T6145] RIP: 0033:0x7f339320e0d9
[ 1992.787891][ T6145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1992.787906][ T6145] RSP: 002b:00007f3391466028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1992.787926][ T6145] RAX: ffffffffffffffda RBX: 00007f3393495fa0 RCX: 00007f339320e0d9
[ 1992.787940][ T6145] RDX: 00002000000005c0 RSI: 0000000000008946 RDI: 0000000000000003
[ 1992.787953][ T6145] RBP: 00007f3391466090 R08: 0000000000000000 R09: 0000000000000000
[ 1992.787964][ T6145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1992.787976][ T6145] R13: 00007f3393496038 R14: 00007f3393495fa0 R15: 00007ffd686cc2a8
[ 1992.788009][ T6145]  </TASK>
[ 1992.789677][ T6145] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1992.874087][ T5716] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[ 1992.886667][ T5716] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1992.886693][ T5716] usb 9-1: Product: syz
[ 1992.886707][ T5716] usb 9-1: Manufacturer: syz
[ 1992.886720][ T5716] usb 9-1: SerialNumber: syz
[ 1992.914804][ T5716] usb 9-1: config 0 descriptor??
[ 1994.585088][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12313'.
[ 1994.648100][ T5716] usb 9-1: f81604_read: reg: 105 failed: -EREMOTEIO
[ 1994.648128][ T5716] f81604 9-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO
[ 1994.648169][ T5716] f81604 9-1:0.0: probe with driver f81604 failed with error -121
[ 1996.468246][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12321'.
[ 1996.522409][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12325'.
[ 1996.522431][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12325'.
[ 1996.522443][ T6194] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22)
[ 1996.876006][ T2503] usb 9-1: USB disconnect, device number 54
[ 1997.822582][ T5695] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1997.974061][ T5695] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[ 1997.981374][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1997.981403][ T5695] usb 3-1: Product: syz
[ 1997.981417][ T5695] usb 3-1: Manufacturer: syz
[ 1997.981432][ T5695] usb 3-1: SerialNumber: syz
[ 1997.996688][ T5695] usb 3-1: config 0 descriptor??
[ 1998.003509][ T1001] usb 9-1: new high-speed USB device number 55 using dummy_hcd
[ 1998.153661][ T1001] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1998.157344][ T1001] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1998.157396][ T1001] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1998.157467][ T1001] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1998.157488][ T1001] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1998.157532][ T1001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1998.396962][ T6255] FAULT_INJECTION: forcing a failure.
[ 1998.396962][ T6255] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1998.396986][ T6255] CPU: 1 UID: 0 PID: 6255 Comm: syz.1.12350 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1998.397003][ T6255] Tainted: [L]=SOFTLOCKUP
[ 1998.397007][ T6255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1998.397014][ T6255] Call Trace:
[ 1998.397019][ T6255]  <TASK>
[ 1998.397026][ T6255]  dump_stack_lvl+0xe8/0x150
[ 1998.397046][ T6255]  should_fail_ex+0x46b/0x600
[ 1998.397065][ T6255]  _copy_to_user+0x31/0xb0
[ 1998.397077][ T6255]  simple_read_from_buffer+0xe1/0x170
[ 1998.397094][ T6255]  proc_fail_nth_read+0x1be/0x230
[ 1998.397111][ T6255]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1998.397127][ T6255]  ? rw_verify_area+0x250/0x4d0
[ 1998.397142][ T6255]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1998.397155][ T6255]  vfs_read+0x219/0xa90
[ 1998.397173][ T6255]  ? __pfx_vfs_read+0x10/0x10
[ 1998.397187][ T6255]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1998.397204][ T6255]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1998.397216][ T6255]  ? mutex_lock_nested+0x152/0x1d0
[ 1998.397225][ T6255]  ? fdget_pos+0x252/0x320
[ 1998.397242][ T6255]  ksys_read+0x156/0x270
[ 1998.397257][ T6255]  ? __pfx_ksys_read+0x10/0x10
[ 1998.397276][ T6255]  do_syscall_64+0x166/0x520
[ 1998.397289][ T6255]  ? trace_irq_disable+0x3b/0x140
[ 1998.397300][ T6255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1998.397310][ T6255]  ? clear_bhb_loop+0x70/0xc0
[ 1998.397322][ T6255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1998.397333][ T6255] RIP: 0033:0x7f33931ce90e
[ 1998.397344][ T6255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1998.397353][ T6255] RSP: 002b:00007f3391465fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1998.397364][ T6255] RAX: ffffffffffffffda RBX: 00007f33914666c0 RCX: 00007f33931ce90e
[ 1998.397372][ T6255] RDX: 000000000000000f RSI: 00007f33914660a0 RDI: 0000000000000004
[ 1998.397378][ T6255] RBP: 00007f3391466090 R08: 0000000000000000 R09: 0000000000000000
[ 1998.397384][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1998.397390][ T6255] R13: 00007f3393496038 R14: 00007f3393495fa0 R15: 00007ffd686cc2a8
[ 1998.397408][ T6255]  </TASK>
[ 1998.664935][ T1001] gud 9-1:1.0: probe with driver gud failed with error -95
[ 1998.682775][ T5695] usb 3-1: f81604_read: reg: 105 failed: -EREMOTEIO
[ 1998.682802][ T5695] f81604 3-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO
[ 1998.682840][ T5695] f81604 3-1:0.0: probe with driver f81604 failed with error -121
[ 1998.872492][ T1001] usb 9-1: USB disconnect, device number 55
[ 1999.739879][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12374'.
[ 2000.901036][ T2503] usb 3-1: USB disconnect, device number 14
[ 2001.179918][ T6356] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12391'.
[ 2001.522461][ T5716] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 2001.673256][ T5716] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 2001.679725][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 2001.679752][ T5716] usb 3-1: Product: syz
[ 2001.679765][ T5716] usb 3-1: SerialNumber: syz
[ 2001.717486][ T5716] usb 3-1: config 0 descriptor??
[ 2002.042178][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12399'.
[ 2002.121923][ T6379] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.12400'.
[ 2002.240502][ T1001] usb 3-1: USB disconnect, device number 15
[ 2003.434892][ T6388] netlink: 121460 bytes leftover after parsing attributes in process `syz.7.12403'.
[ 2006.834408][ T6409] netlink: 128 bytes leftover after parsing attributes in process `syz.8.12413'.
[ 2007.010461][ T6413] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12414'.
[ 2008.797126][ T6438] overlayfs: failed to clone lowerpath
[ 2008.826782][ T6438] overlayfs: failed to clone lowerpath
[ 2008.832756][ T5315] usb 9-1: new high-speed USB device number 56 using dummy_hcd
[ 2008.972667][ T5315] usb 9-1: device descriptor read/64, error -71
[ 2008.992505][ T5573] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 2009.162403][ T5573] usb 2-1: Using ep0 maxpacket: 32
[ 2009.163226][ T5573] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 2009.166989][ T5573] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2009.167020][ T5573] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2009.167059][ T5573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2009.174625][ T5573] usb 2-1: config 0 descriptor??
[ 2009.222746][ T5315] usb 9-1: new high-speed USB device number 57 using dummy_hcd
[ 2009.310895][ T6445] netlink: NAT attribute has 4 unknown bytes
[ 2009.310930][ T6445] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2009.352514][ T5315] usb 9-1: device descriptor read/64, error -71
[ 2009.467333][ T5315] usb usb9-port1: attempt power cycle
[ 2010.033640][ T5315] usb 9-1: new high-speed USB device number 58 using dummy_hcd
[ 2010.580559][ T5315] usb 9-1: device descriptor read/8, error -71
[ 2010.866147][ T5315] usb 9-1: new high-speed USB device number 59 using dummy_hcd
[ 2011.668930][ T5315] usb 9-1: device descriptor read/8, error -71
[ 2011.773409][ T5315] usb usb9-port1: unable to enumerate USB device
[ 2011.889798][ T6460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12430'.
[ 2012.013247][ T6463] netlink: 56 bytes leftover after parsing attributes in process `syz.6.12431'.
[ 2013.265376][ T5573] usbhid 2-1:0.0: can't add hid device: -71
[ 2013.265595][ T5573] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 2013.276337][ T5573] usb 2-1: USB disconnect, device number 20
[ 2017.431101][ T6511] siw: device registration error -23
[ 2018.995627][   T37] audit: type=1326 audit(1787380551.508:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6528 comm="syz.8.12455" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa510e0d9 code=0x7ffc0000
[ 2018.995689][   T37] audit: type=1326 audit(1787380551.508:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6528 comm="syz.8.12455" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa510e0d9 code=0x7ffc0000
[ 2019.028510][   T37] audit: type=1326 audit(1787380551.538:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6528 comm="syz.8.12455" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f9fa510e0d9 code=0x7ffc0000
[ 2019.028559][   T37] audit: type=1326 audit(1787380551.538:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6528 comm="syz.8.12455" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa510e0d9 code=0x7ffc0000
[ 2019.028597][   T37] audit: type=1326 audit(1787380551.538:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6528 comm="syz.8.12455" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa510e0d9 code=0x7ffc0000
[ 2019.036650][   T37] audit: type=1326 audit(1787380551.548:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6528 comm="syz.8.12455" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9fa510e0d9 code=0x7ffc0000
[ 2019.036699][   T37] audit: type=1326 audit(1787380551.548:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6528 comm="syz.8.12455" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa510e0d9 code=0x7ffc0000
[ 2019.036737][   T37] audit: type=1326 audit(1787380551.548:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6528 comm="syz.8.12455" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa510e0d9 code=0x7ffc0000
[ 2019.040321][   T37] audit: type=1326 audit(1787380551.548:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6528 comm="syz.8.12455" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fa510e0d9 code=0x7ffc0000
[ 2019.042717][   T37] audit: type=1326 audit(1787380551.548:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6528 comm="syz.8.12455" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fa510e0d9 code=0x7ffc0000
[ 2020.501978][ T6570] fuse: fd is not a fuse device
[ 2023.454357][ T1001] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 2023.862900][ T6618] tmpfs: Unknown parameter 'grpquota_block_har'
[ 2024.535542][ T1001] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 2024.556872][ T1001] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 2024.556905][ T1001] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 2024.556932][ T1001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 2024.556954][ T1001] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[ 2024.605555][ T1001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2024.605584][ T1001] usb 3-1: Product: syz
[ 2024.605597][ T1001] usb 3-1: Manufacturer: syz
[ 2024.605610][ T1001] usb 3-1: SerialNumber: syz
[ 2024.679435][ T1001] usb 3-1: config 0 descriptor??
[ 2024.683159][ T6600] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 2024.700428][ T1001] usb 3-1: ucan: probing device on interface #0
[ 2024.700455][ T1001] usb 3-1: ucan: invalid in_ep MaxPacketSize
[ 2024.700468][ T1001] usb 3-1: ucan: probe failed; try to update the device firmware
[ 2025.535385][ T6653] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12502'.
[ 2026.504666][ T1001] usb 3-1: USB disconnect, device number 16
[ 2026.925778][T31692] Bluetooth: hci0: unexpected event for opcode 0x0804
[ 2027.923968][ T6689] netlink: 121460 bytes leftover after parsing attributes in process `syz.8.12517'.
[ 2027.933251][ T6692] program syz.2.12518 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2027.996700][ T6695] netlink: 56 bytes leftover after parsing attributes in process `syz.6.12520'.
[ 2028.212565][ T5716] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 2028.363470][ T5716] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[ 2028.365253][ T5716] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2028.371151][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2028.371177][ T5716] usb 3-1: Product: syz
[ 2028.371192][ T5716] usb 3-1: Manufacturer: syz
[ 2028.371215][ T5716] usb 3-1: SerialNumber: syz
[ 2028.604966][ T5716] snd-usb-6fire 3-1:1.0: invalid firmware version in device: 00 00 00 00. please reconnect to power. if this failure still happens, check your firmware installation.
[ 2028.605018][ T5716] snd-usb-6fire 3-1:1.0: probe with driver snd-usb-6fire failed with error -22
[ 2028.820506][ T5716] usb 3-1: USB disconnect, device number 17
[ 2029.288583][ T6735] tmpfs: Unknown parameter 'grpquota_block_har'
[ 2030.184957][T31692] Bluetooth: hci3: unexpected event for opcode 0x0804
[ 2030.194647][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12542'.
[ 2030.194672][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12542'.
[ 2030.432496][ T2503] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 2030.468611][ T6750] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.12544'.
[ 2030.500978][ T6752] netlink: 56 bytes leftover after parsing attributes in process `syz.8.12543'.
[ 2030.592390][ T2503] usb 3-1: Using ep0 maxpacket: 32
[ 2030.593301][ T2503] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 2030.594988][ T2503] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[ 2030.595012][ T2503] usb 3-1: config 0 has no interface number 0
[ 2030.595056][ T2503] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2030.595083][ T2503] usb 3-1: config 0 interface 85 has no altsetting 0
[ 2030.598422][ T2503] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2030.598447][ T2503] usb 3-1: Product: syz
[ 2030.598460][ T2503] usb 3-1: Manufacturer: syz
[ 2030.598471][ T2503] usb 3-1: SerialNumber: syz
[ 2030.681609][ T2503] usb 3-1: config 0 descriptor??
[ 2030.812532][ T5573] usb 9-1: new high-speed USB device number 60 using dummy_hcd
[ 2030.973466][ T5573] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 2030.980676][ T5573] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 2030.980704][ T5573] usb 9-1: Product: syz
[ 2030.980775][ T5573] usb 9-1: SerialNumber: syz
[ 2031.020754][ T5573] usb 9-1: config 0 descriptor??
[ 2031.674790][ T5695] usb 9-1: USB disconnect, device number 60
[ 2032.219433][ T2503] appletouch 3-1:0.85: Geyser mode initialized.
[ 2032.309500][ T2503] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input48
[ 2032.521767][ T2503] usb 3-1: USB disconnect, device number 18
[ 2033.647089][ T2503] appletouch 3-1:0.85: input: appletouch disconnected
[ 2033.672198][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12567'.
[ 2033.950552][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12570'.
[ 2033.969628][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12570'.
[ 2033.969913][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12570'.
[ 2033.970119][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12570'.
[ 2033.970333][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12570'.
[ 2033.970541][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12570'.
[ 2035.163811][T31692] Bluetooth: hci0: unexpected event for opcode 0x202d
[ 2036.413380][ T6834] sock: sock_timestamping_bind_phc: sock not bind to device
[ 2036.414526][ T6834] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12581'.
[ 2036.432386][T19232] usb 9-1: new high-speed USB device number 61 using dummy_hcd
[ 2036.483154][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12577'.
[ 2037.505141][ T1329] ieee802154 phy0 wpan0: encryption failed: -22
[ 2037.505206][ T1329] ieee802154 phy1 wpan1: encryption failed: -22
[ 2037.532349][T19232] usb 9-1: Using ep0 maxpacket: 16
[ 2037.533286][T19232] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2037.534867][T19232] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2037.534895][T19232] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2037.566404][T19232] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2037.566432][T19232] usb 9-1: Product: syz
[ 2037.566445][T19232] usb 9-1: Manufacturer: syz
[ 2037.566459][T19232] usb 9-1: SerialNumber: syz
[ 2037.628898][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12586'.
[ 2037.635946][T19232] usb 9-1: 0:2 : does not exist
[ 2037.827539][T19232] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[ 2038.022246][T19232] usb 9-1: USB disconnect, device number 61
[ 2038.091882][T31692] Bluetooth: hci3: unexpected event for opcode 0x0804
[ 2038.133066][T27834] udevd[27834]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2040.011177][ T6872] __nla_validate_parse: 6 callbacks suppressed
[ 2040.011208][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12598'.
[ 2040.023604][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12598'.
[ 2040.023860][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12598'.
[ 2040.024055][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12598'.
[ 2040.024339][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12598'.
[ 2040.024560][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12598'.
[ 2041.477222][ T6923] FAULT_INJECTION: forcing a failure.
[ 2041.477222][ T6923] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2041.477259][ T6923] CPU: 0 UID: 0 PID: 6923 Comm: syz.2.12620 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2041.477285][ T6923] Tainted: [L]=SOFTLOCKUP
[ 2041.477291][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2041.477303][ T6923] Call Trace:
[ 2041.477311][ T6923]  <TASK>
[ 2041.477319][ T6923]  dump_stack_lvl+0xe8/0x150
[ 2041.477354][ T6923]  should_fail_ex+0x46b/0x600
[ 2041.477388][ T6923]  _copy_to_user+0x31/0xb0
[ 2041.477411][ T6923]  simple_read_from_buffer+0xe1/0x170
[ 2041.477441][ T6923]  proc_fail_nth_read+0x1be/0x230
[ 2041.477468][ T6923]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2041.477495][ T6923]  ? rw_verify_area+0x250/0x4d0
[ 2041.477518][ T6923]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2041.477542][ T6923]  vfs_read+0x219/0xa90
[ 2041.477574][ T6923]  ? __pfx_vfs_read+0x10/0x10
[ 2041.477600][ T6923]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2041.477630][ T6923]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2041.477653][ T6923]  ? mutex_lock_nested+0x152/0x1d0
[ 2041.477670][ T6923]  ? fdget_pos+0x252/0x320
[ 2041.477703][ T6923]  ksys_read+0x156/0x270
[ 2041.477731][ T6923]  ? __pfx_ksys_read+0x10/0x10
[ 2041.477768][ T6923]  do_syscall_64+0x166/0x520
[ 2041.477791][ T6923]  ? trace_irq_disable+0x3b/0x140
[ 2041.477811][ T6923]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2041.477831][ T6923]  ? clear_bhb_loop+0x70/0xc0
[ 2041.477855][ T6923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2041.477872][ T6923] RIP: 0033:0x7f8293a7e90e
[ 2041.477891][ T6923] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2041.477907][ T6923] RSP: 002b:00007f8291d15fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2041.477927][ T6923] RAX: ffffffffffffffda RBX: 00007f8291d166c0 RCX: 00007f8293a7e90e
[ 2041.477940][ T6923] RDX: 000000000000000f RSI: 00007f8291d160a0 RDI: 0000000000000004
[ 2041.477952][ T6923] RBP: 00007f8291d16090 R08: 0000000000000000 R09: 0000000000000000
[ 2041.477964][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2041.477975][ T6923] R13: 00007f8293d46038 R14: 00007f8293d45fa0 R15: 00007ffd82c94388
[ 2041.478016][ T6923]  </TASK>
[ 2041.782476][ T5315] usb 9-1: new high-speed USB device number 62 using dummy_hcd
[ 2041.933394][ T5315] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[ 2041.937815][ T5315] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2041.937841][ T5315] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[ 2041.940812][ T5315] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2041.940839][ T5315] usb 9-1: Product: syz
[ 2041.940853][ T5315] usb 9-1: Manufacturer: syz
[ 2041.940867][ T5315] usb 9-1: SerialNumber: syz
[ 2042.513383][ T5315] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 2042.664386][ T5315] usb 2-1: Using ep0 maxpacket: 32
[ 2042.666470][ T5315] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 2042.668399][ T5315] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[ 2042.668424][ T5315] usb 2-1: config 0 has no interface number 0
[ 2042.668456][ T5315] usb 2-1: config 0 interface 184 has no altsetting 0
[ 2042.670799][ T5315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2042.670821][ T5315] usb 2-1: Product: syz
[ 2042.670828][ T5315] usb 2-1: Manufacturer: syz
[ 2042.670836][ T5315] usb 2-1: SerialNumber: syz
[ 2042.759434][ T5315] usb 2-1: config 0 descriptor??
[ 2043.218589][ T6956] FAULT_INJECTION: forcing a failure.
[ 2043.218589][ T6956] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2043.218622][ T6956] CPU: 0 UID: 0 PID: 6956 Comm: syz.2.12630 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2043.218644][ T6956] Tainted: [L]=SOFTLOCKUP
[ 2043.218650][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2043.218658][ T6956] Call Trace:
[ 2043.218666][ T6956]  <TASK>
[ 2043.218673][ T6956]  dump_stack_lvl+0xe8/0x150
[ 2043.218700][ T6956]  should_fail_ex+0x46b/0x600
[ 2043.218727][ T6956]  _copy_from_user+0x2d/0xb0
[ 2043.218747][ T6956]  do_ipv6_setsockopt+0x249/0x3180
[ 2043.218772][ T6956]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[ 2043.218787][ T6956]  ? get_pid_task+0x20/0x1f0
[ 2043.218815][ T6956]  ? __lock_acquire+0x683/0x2ce0
[ 2043.218852][ T6956]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2043.218876][ T6956]  ? __fget_files+0x2a/0x420
[ 2043.218901][ T6956]  ? __fget_files+0x2a/0x420
[ 2043.218921][ T6956]  ipv6_setsockopt+0x59/0x170
[ 2043.218935][ T6956]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 2043.218957][ T6956]  do_sock_setsockopt+0x17c/0x1b0
[ 2043.218978][ T6956]  __x64_sys_setsockopt+0x143/0x1b0
[ 2043.218997][ T6956]  do_syscall_64+0x166/0x520
[ 2043.219015][ T6956]  ? trace_irq_disable+0x3b/0x140
[ 2043.219030][ T6956]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2043.219046][ T6956]  ? clear_bhb_loop+0x70/0xc0
[ 2043.219065][ T6956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2043.219080][ T6956] RIP: 0033:0x7f8293abe0d9
[ 2043.219098][ T6956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2043.219111][ T6956] RSP: 002b:00007f8291cf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 2043.219128][ T6956] RAX: ffffffffffffffda RBX: 00007f8293d46090 RCX: 00007f8293abe0d9
[ 2043.219138][ T6956] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000008
[ 2043.219147][ T6956] RBP: 00007f8291cf5090 R08: 0000000000000108 R09: 0000000000000000
[ 2043.219156][ T6956] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[ 2043.219166][ T6956] R13: 00007f8293d46128 R14: 00007f8293d46090 R15: 00007ffd82c94388
[ 2043.219193][ T6956]  </TASK>
[ 2044.048661][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12633'.
[ 2044.050491][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12633'.
[ 2044.051109][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12633'.
[ 2044.051600][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12633'.
[ 2044.230821][   T37] kauditd_printk_skb: 25 callbacks suppressed
[ 2044.230839][   T37] audit: type=1326 audit(1787380576.738:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz.2.12635" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8293abe0d9 code=0x7ffc0000
[ 2044.231254][   T37] audit: type=1326 audit(1787380576.738:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz.2.12635" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8293abe0d9 code=0x7ffc0000
[ 2044.231883][   T37] audit: type=1326 audit(1787380576.738:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz.2.12635" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8293abe0d9 code=0x7ffc0000
[ 2044.263822][   T37] audit: type=1326 audit(1787380576.738:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz.2.12635" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8293abe0d9 code=0x7ffc0000
[ 2044.263869][   T37] audit: type=1326 audit(1787380576.778:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz.2.12635" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8293abe0d9 code=0x7ffc0000
[ 2044.266043][   T37] audit: type=1326 audit(1787380576.778:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz.2.12635" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8293abe0d9 code=0x7ffc0000
[ 2044.266088][   T37] audit: type=1326 audit(1787380576.778:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz.2.12635" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8293abe0d9 code=0x7ffc0000
[ 2044.266126][   T37] audit: type=1326 audit(1787380576.778:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz.2.12635" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8293abe0d9 code=0x7ffc0000
[ 2044.267024][   T37] audit: type=1326 audit(1787380576.778:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz.2.12635" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8293abe0d9 code=0x7ffc0000
[ 2044.267068][   T37] audit: type=1326 audit(1787380576.778:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz.2.12635" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8293abe0d9 code=0x7ffc0000
[ 2044.302816][ T5315] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[ 2044.302845][ T5315] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2044.304459][ T5315] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 2044.304487][ T5315] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 2044.304507][ T5315] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 2044.304526][ T5315] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 2044.304839][ T5315] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[ 2044.350406][ T5598] usb 9-1: USB disconnect, device number 62
[ 2044.578826][ T5315] usb 2-1: USB disconnect, device number 21
[ 2046.184143][ T7026] siw: device registration error -23
[ 2046.342464][ T5315] usb 9-1: new high-speed USB device number 63 using dummy_hcd
[ 2046.375755][ T7040] FAULT_INJECTION: forcing a failure.
[ 2046.375755][ T7040] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2046.375777][ T7040] CPU: 1 UID: 0 PID: 7040 Comm: syz.1.12663 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2046.375792][ T7040] Tainted: [L]=SOFTLOCKUP
[ 2046.375796][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2046.375802][ T7040] Call Trace:
[ 2046.375807][ T7040]  <TASK>
[ 2046.375812][ T7040]  dump_stack_lvl+0xe8/0x150
[ 2046.375832][ T7040]  should_fail_ex+0x46b/0x600
[ 2046.375852][ T7040]  _copy_to_user+0x31/0xb0
[ 2046.375865][ T7040]  simple_read_from_buffer+0xe1/0x170
[ 2046.375882][ T7040]  proc_fail_nth_read+0x1be/0x230
[ 2046.375896][ T7040]  ? __local_bh_enable+0x1e3/0x2f0
[ 2046.375910][ T7040]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2046.375925][ T7040]  ? rw_verify_area+0x250/0x4d0
[ 2046.375941][ T7040]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2046.375954][ T7040]  vfs_read+0x219/0xa90
[ 2046.375972][ T7040]  ? __pfx_vfs_read+0x10/0x10
[ 2046.375986][ T7040]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2046.376002][ T7040]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2046.376014][ T7040]  ? mutex_lock_nested+0x152/0x1d0
[ 2046.376023][ T7040]  ? fdget_pos+0x252/0x320
[ 2046.376041][ T7040]  ksys_read+0x156/0x270
[ 2046.376055][ T7040]  ? __pfx_ksys_read+0x10/0x10
[ 2046.376074][ T7040]  do_syscall_64+0x166/0x520
[ 2046.376086][ T7040]  ? trace_irq_disable+0x3b/0x140
[ 2046.376097][ T7040]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2046.376108][ T7040]  ? clear_bhb_loop+0x70/0xc0
[ 2046.376120][ T7040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2046.376130][ T7040] RIP: 0033:0x7f33931ce90e
[ 2046.376140][ T7040] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2046.376149][ T7040] RSP: 002b:00007f3391465fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2046.376167][ T7040] RAX: ffffffffffffffda RBX: 00007f33914666c0 RCX: 00007f33931ce90e
[ 2046.376175][ T7040] RDX: 000000000000000f RSI: 00007f33914660a0 RDI: 0000000000000004
[ 2046.376181][ T7040] RBP: 00007f3391466090 R08: 0000000000000000 R09: 0000000000000000
[ 2046.376187][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2046.376193][ T7040] R13: 00007f3393496038 R14: 00007f3393495fa0 R15: 00007ffd686cc2a8
[ 2046.376210][ T7040]  </TASK>
[ 2046.597420][ T5315] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2046.626368][ T5315] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2046.626426][ T5315] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2046.626449][ T5315] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2046.626471][ T5315] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2046.626514][ T5315] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2047.191779][ T5315] gud 9-1:1.0: probe with driver gud failed with error -95
[ 2047.413367][ T1001] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 2047.433802][ T5573] usb 9-1: USB disconnect, device number 63
[ 2047.451287][ T7065] netlink: NAT attribute has 4 unknown bytes
[ 2047.451319][ T7065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2047.584512][ T1001] usb 3-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06
[ 2047.586992][ T1001] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2047.587046][ T1001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2047.612927][ T1001] usb 3-1: config 0 descriptor??
[ 2047.628627][ T1001] gspca_main: kinect-2.14.0 probing 045e:02bf
[ 2050.516855][T31692] Bluetooth: hci3: unexpected event for opcode 0x202d
[ 2050.589442][ T5598] usb 3-1: USB disconnect, device number 19
[ 2050.695669][ T7111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2051.128557][ T7125] tmpfs: Unknown parameter 'grpquota_block_har'
[ 2053.742535][ T5695] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[ 2053.785460][ T1001] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 2054.052931][ T5695] usb 2-1: device descriptor read/64, error -71
[ 2054.295564][ T1001] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 2054.387942][ T5695] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[ 2054.700448][ T1001] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 2054.700480][ T1001] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 2054.700577][ T1001] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 2054.785714][ T1001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2054.785811][ T1001] usb 3-1: Product: syz
[ 2054.785897][ T1001] usb 3-1: Manufacturer: syz
[ 2054.785988][ T1001] usb 3-1: SerialNumber: syz
[ 2054.909877][ T1001] usb 3-1: config 0 descriptor??
[ 2054.911745][ T7154] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 2054.912540][ T7154] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 2054.940623][ T5695] usb 2-1: device descriptor read/64, error -71
[ 2054.968021][ T1001] usb 3-1: ucan: probing device on interface #0
[ 2055.061943][ T5695] usb usb2-port1: attempt power cycle
[ 2055.562465][ T5695] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[ 2055.960739][ T1001] usb 3-1: ucan: could not read protocol version, ret=0
[ 2055.960765][ T1001] usb 3-1: ucan: probe failed; try to update the device firmware
[ 2055.961368][ T5695] usb 2-1: device descriptor read/8, error -71
[ 2056.192679][ T5695] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[ 2056.198887][ T2503] usb 3-1: USB disconnect, device number 20
[ 2056.222132][ T5695] usb 2-1: device descriptor read/8, error -71
[ 2056.323649][ T5695] usb usb2-port1: unable to enumerate USB device
[ 2056.346127][ T7173] __nla_validate_parse: 3 callbacks suppressed
[ 2056.346145][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12714'.
[ 2057.866015][ T7187] loop8: detected capacity change from 0 to 8
[ 2057.901685][ T7187] Dev loop8: unable to read RDB block 8
[ 2057.901732][ T7187]  loop8: unable to read partition table
[ 2057.901938][ T7187] loop8: partition table beyond EOD, truncated
[ 2057.901978][ T7187] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 2058.467567][ T7199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12725'.
[ 2058.508864][T31692] Bluetooth: hci2: unexpected event for opcode 0x202d
[ 2058.821489][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12734'.
[ 2058.925184][ T7224] FAULT_INJECTION: forcing a failure.
[ 2058.925184][ T7224] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2058.925218][ T7224] CPU: 1 UID: 0 PID: 7224 Comm: syz.7.12736 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2058.925265][ T7224] Tainted: [L]=SOFTLOCKUP
[ 2058.925272][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2058.925282][ T7224] Call Trace:
[ 2058.925290][ T7224]  <TASK>
[ 2058.925298][ T7224]  dump_stack_lvl+0xe8/0x150
[ 2058.925331][ T7224]  should_fail_ex+0x46b/0x600
[ 2058.925364][ T7224]  _copy_to_user+0x31/0xb0
[ 2058.925387][ T7224]  simple_read_from_buffer+0xe1/0x170
[ 2058.925417][ T7224]  proc_fail_nth_read+0x1be/0x230
[ 2058.925446][ T7224]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2058.925475][ T7224]  ? rw_verify_area+0x250/0x4d0
[ 2058.925502][ T7224]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2058.925532][ T7224]  vfs_read+0x219/0xa90
[ 2058.925566][ T7224]  ? __pfx_vfs_read+0x10/0x10
[ 2058.925592][ T7224]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2058.925619][ T7224]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2058.925642][ T7224]  ? mutex_lock_nested+0x152/0x1d0
[ 2058.925659][ T7224]  ? fdget_pos+0x252/0x320
[ 2058.925691][ T7224]  ksys_read+0x156/0x270
[ 2058.925718][ T7224]  ? __pfx_ksys_read+0x10/0x10
[ 2058.925740][ T7224]  ? __pfx_rtc_dev_ioctl+0x10/0x10
[ 2058.925903][ T7224]  do_syscall_64+0x166/0x520
[ 2058.925925][ T7224]  ? trace_irq_disable+0x3b/0x140
[ 2058.925944][ T7224]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2058.925963][ T7224]  ? clear_bhb_loop+0x70/0xc0
[ 2058.925986][ T7224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2058.926005][ T7224] RIP: 0033:0x7f9f71a0e90e
[ 2058.926023][ T7224] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2058.926038][ T7224] RSP: 002b:00007f9f6fc84fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2058.926057][ T7224] RAX: ffffffffffffffda RBX: 00007f9f6fc856c0 RCX: 00007f9f71a0e90e
[ 2058.926071][ T7224] RDX: 000000000000000f RSI: 00007f9f6fc850a0 RDI: 0000000000000006
[ 2058.926082][ T7224] RBP: 00007f9f6fc85090 R08: 0000000000000000 R09: 0000000000000000
[ 2058.926094][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2058.926105][ T7224] R13: 00007f9f71cd6128 R14: 00007f9f71cd6090 R15: 00007ffd7172b1f8
[ 2058.926137][ T7224]  </TASK>
[ 2059.935067][T19232] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 2060.104747][T19232] usb 3-1: Using ep0 maxpacket: 8
[ 2060.105621][T19232] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 2060.108595][T19232] usb 3-1: config 0 has an invalid descriptor of length 84, skipping remainder of the config
[ 2060.108649][T19232] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 2060.108675][T19232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 193, changing to 11
[ 2060.108701][T19232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 25667, setting to 1024
[ 2060.108727][T19232] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 2060.255293][T19232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 2060.255321][T19232] usb 3-1: Product: syz
[ 2060.255335][T19232] usb 3-1: Manufacturer: syz
[ 2060.255348][T19232] usb 3-1: SerialNumber: syz
[ 2060.273298][T19232] usb 3-1: config 0 descriptor??
[ 2060.274681][ T7213] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2060.530390][T31692] Bluetooth: hci3: unexpected event for opcode 0x202d
[ 2060.548286][T19232] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000
[ 2060.548312][T19232] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[ 2060.831352][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12742'.
[ 2061.062672][T19232] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -110
[ 2061.062700][T19232] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -110
[ 2061.063036][T19232] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5
[ 2061.217706][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12749'.
[ 2062.581298][T19232] usb 3-1: USB disconnect, device number 21
[ 2062.970243][ T7301] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.12762'.
[ 2063.002628][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12757'.
[ 2063.468313][ T7321] netlink: 48 bytes leftover after parsing attributes in process `syz.8.12766'.
[ 2065.109843][ T7336] FAULT_INJECTION: forcing a failure.
[ 2065.109843][ T7336] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2065.109878][ T7336] CPU: 1 UID: 0 PID: 7336 Comm: syz.1.12772 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2065.109904][ T7336] Tainted: [L]=SOFTLOCKUP
[ 2065.109912][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2065.109923][ T7336] Call Trace:
[ 2065.109931][ T7336]  <TASK>
[ 2065.109939][ T7336]  dump_stack_lvl+0xe8/0x150
[ 2065.109971][ T7336]  should_fail_ex+0x46b/0x600
[ 2065.110014][ T7336]  _copy_to_user+0x31/0xb0
[ 2065.110037][ T7336]  simple_read_from_buffer+0xe1/0x170
[ 2065.110067][ T7336]  proc_fail_nth_read+0x1be/0x230
[ 2065.110098][ T7336]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2065.110127][ T7336]  ? rw_verify_area+0x250/0x4d0
[ 2065.110154][ T7336]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2065.110180][ T7336]  vfs_read+0x219/0xa90
[ 2065.110213][ T7336]  ? __pfx_vfs_read+0x10/0x10
[ 2065.110240][ T7336]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2065.110271][ T7336]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2065.110294][ T7336]  ? mutex_lock_nested+0x152/0x1d0
[ 2065.110311][ T7336]  ? fdget_pos+0x252/0x320
[ 2065.110343][ T7336]  ksys_read+0x156/0x270
[ 2065.110371][ T7336]  ? __pfx_ksys_read+0x10/0x10
[ 2065.110393][ T7336]  ? fput+0xa0/0xd0
[ 2065.110424][ T7336]  do_syscall_64+0x166/0x520
[ 2065.110447][ T7336]  ? trace_irq_disable+0x3b/0x140
[ 2065.110466][ T7336]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2065.110485][ T7336]  ? clear_bhb_loop+0x70/0xc0
[ 2065.110508][ T7336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2065.110527][ T7336] RIP: 0033:0x7f33931ce90e
[ 2065.110545][ T7336] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2065.110562][ T7336] RSP: 002b:00007f3391465fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2065.110582][ T7336] RAX: ffffffffffffffda RBX: 00007f33914666c0 RCX: 00007f33931ce90e
[ 2065.110597][ T7336] RDX: 000000000000000f RSI: 00007f33914660a0 RDI: 0000000000000005
[ 2065.110608][ T7336] RBP: 00007f3391466090 R08: 0000000000000000 R09: 0000000000000000
[ 2065.110620][ T7336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2065.110631][ T7336] R13: 00007f3393496038 R14: 00007f3393495fa0 R15: 00007ffd686cc2a8
[ 2065.110664][ T7336]  </TASK>
[ 2066.002732][ T1001] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 2066.234134][ T1001] usb 3-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=ca.8e
[ 2066.241090][ T1001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2066.340808][ T1001] pwc: Logitech QuickCam Zoom USB webcam detected.
[ 2067.782057][ T1001] pwc: Failed to set LED on/off time (-71)
[ 2067.833392][ T1001] pwc: send_video_command error -71
[ 2067.833413][ T1001] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 2067.833530][ T1001] Philips webcam 3-1:127.0: probe with driver Philips webcam failed with error -71
[ 2067.836881][ T1001] usb 3-1: USB disconnect, device number 22
[ 2069.881365][ T7375] 
[ 2070.041549][ T7402] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12794'.
[ 2070.096902][ T7406] FAULT_INJECTION: forcing a failure.
[ 2070.096902][ T7406] name failslab, interval 1, probability 0, space 0, times 0
[ 2070.096937][ T7406] CPU: 1 UID: 0 PID: 7406 Comm: syz.8.12795 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2070.096964][ T7406] Tainted: [L]=SOFTLOCKUP
[ 2070.096971][ T7406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2070.096981][ T7406] Call Trace:
[ 2070.096989][ T7406]  <TASK>
[ 2070.096997][ T7406]  dump_stack_lvl+0xe8/0x150
[ 2070.097030][ T7406]  should_fail_ex+0x46b/0x600
[ 2070.097063][ T7406]  should_failslab+0xa8/0x100
[ 2070.097088][ T7406]  __kmalloc_noprof+0xfe/0x780
[ 2070.097110][ T7406]  ? tomoyo_encode+0x2ad/0x570
[ 2070.097129][ T7406]  ? tomoyo_encode+0x2ad/0x570
[ 2070.097164][ T7406]  tomoyo_encode+0x2ad/0x570
[ 2070.097190][ T7406]  tomoyo_realpath_from_path+0x5fa/0x640
[ 2070.097221][ T7406]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 2070.097248][ T7406]  tomoyo_path_number_perm+0x246/0x5f0
[ 2070.097279][ T7406]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2070.097303][ T7406]  ? __lock_acquire+0x683/0x2ce0
[ 2070.097338][ T7406]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2070.097361][ T7406]  ? hook_file_ioctl+0x1f5/0x610
[ 2070.097406][ T7406]  ? __fget_files+0x2a/0x420
[ 2070.097431][ T7406]  ? __fget_files+0x2a/0x420
[ 2070.097452][ T7406]  ? __fget_files+0x3a8/0x420
[ 2070.097473][ T7406]  ? __fget_files+0x2a/0x420
[ 2070.097499][ T7406]  security_file_ioctl+0xc3/0x2a0
[ 2070.097529][ T7406]  __se_sys_ioctl+0x47/0x170
[ 2070.097550][ T7406]  do_syscall_64+0x166/0x520
[ 2070.097572][ T7406]  ? trace_irq_disable+0x3b/0x140
[ 2070.097591][ T7406]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2070.097610][ T7406]  ? clear_bhb_loop+0x70/0xc0
[ 2070.097632][ T7406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2070.097649][ T7406] RIP: 0033:0x7f9fa510e0d9
[ 2070.097666][ T7406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2070.097681][ T7406] RSP: 002b:00007f9fa3366028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2070.097700][ T7406] RAX: ffffffffffffffda RBX: 00007f9fa5395fa0 RCX: 00007f9fa510e0d9
[ 2070.097713][ T7406] RDX: 0000200000000140 RSI: 00000000c1105517 RDI: 0000000000000003
[ 2070.097724][ T7406] RBP: 00007f9fa3366090 R08: 0000000000000000 R09: 0000000000000000
[ 2070.097735][ T7406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2070.097746][ T7406] R13: 00007f9fa5396038 R14: 00007f9fa5395fa0 R15: 00007ffcdd8529d8
[ 2070.097776][ T7406]  </TASK>
[ 2070.097869][ T7406] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2070.337685][ T7406] snd_aloop snd_aloop.0: control 0:129:-2:syz0:245 is already present
[ 2071.774663][ T7434] netlink: 48 bytes leftover after parsing attributes in process `syz.7.12806'.
[ 2072.098157][ T7443] netlink: 76 bytes leftover after parsing attributes in process `syz.8.12808'.
[ 2072.384794][ T7447] FAULT_INJECTION: forcing a failure.
[ 2072.384794][ T7447] name failslab, interval 1, probability 0, space 0, times 0
[ 2072.384816][ T7447] CPU: 0 UID: 0 PID: 7447 Comm: syz.1.12812 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2072.384831][ T7447] Tainted: [L]=SOFTLOCKUP
[ 2072.384835][ T7447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2072.384841][ T7447] Call Trace:
[ 2072.384846][ T7447]  <TASK>
[ 2072.384850][ T7447]  dump_stack_lvl+0xe8/0x150
[ 2072.384870][ T7447]  should_fail_ex+0x46b/0x600
[ 2072.384889][ T7447]  should_failslab+0xa8/0x100
[ 2072.384903][ T7447]  __kmalloc_noprof+0xfe/0x780
[ 2072.384914][ T7447]  ? tomoyo_encode+0x2ad/0x570
[ 2072.384924][ T7447]  ? tomoyo_encode+0x2ad/0x570
[ 2072.384946][ T7447]  tomoyo_encode+0x2ad/0x570
[ 2072.384978][ T7447]  tomoyo_realpath_from_path+0x5fa/0x640
[ 2072.385008][ T7447]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 2072.385026][ T7447]  tomoyo_path_number_perm+0x246/0x5f0
[ 2072.385042][ T7447]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2072.385055][ T7447]  ? __lock_acquire+0x683/0x2ce0
[ 2072.385075][ T7447]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2072.385088][ T7447]  ? hook_file_ioctl+0x1f5/0x610
[ 2072.385112][ T7447]  ? __fget_files+0x2a/0x420
[ 2072.385126][ T7447]  ? __fget_files+0x2a/0x420
[ 2072.385138][ T7447]  ? __fget_files+0x3a8/0x420
[ 2072.385149][ T7447]  ? __fget_files+0x2a/0x420
[ 2072.385163][ T7447]  security_file_ioctl+0xc3/0x2a0
[ 2072.385179][ T7447]  __se_sys_ioctl+0x47/0x170
[ 2072.385190][ T7447]  do_syscall_64+0x166/0x520
[ 2072.385202][ T7447]  ? trace_irq_disable+0x3b/0x140
[ 2072.385213][ T7447]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2072.385223][ T7447]  ? clear_bhb_loop+0x70/0xc0
[ 2072.385236][ T7447]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2072.385245][ T7447] RIP: 0033:0x7f339320e0d9
[ 2072.385256][ T7447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2072.385270][ T7447] RSP: 002b:00007f3391466028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2072.385290][ T7447] RAX: ffffffffffffffda RBX: 00007f3393495fa0 RCX: 00007f339320e0d9
[ 2072.385303][ T7447] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[ 2072.385316][ T7447] RBP: 00007f3391466090 R08: 0000000000000000 R09: 0000000000000000
[ 2072.385328][ T7447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2072.385339][ T7447] R13: 00007f3393496038 R14: 00007f3393495fa0 R15: 00007ffd686cc2a8
[ 2072.385360][ T7447]  </TASK>
[ 2072.385435][ T7447] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2072.873092][T31692] Bluetooth: hci0: unexpected event for opcode 0x0804
[ 2074.087267][ T7462] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12815'.
[ 2074.322882][ T7470] FAULT_INJECTION: forcing a failure.
[ 2074.322882][ T7470] name failslab, interval 1, probability 0, space 0, times 0
[ 2074.322918][ T7470] CPU: 1 UID: 0 PID: 7470 Comm: syz.7.12816 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2074.322945][ T7470] Tainted: [L]=SOFTLOCKUP
[ 2074.322960][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2074.322970][ T7470] Call Trace:
[ 2074.322978][ T7470]  <TASK>
[ 2074.322985][ T7470]  dump_stack_lvl+0xe8/0x150
[ 2074.323020][ T7470]  should_fail_ex+0x46b/0x600
[ 2074.323058][ T7470]  should_failslab+0xa8/0x100
[ 2074.323083][ T7470]  kmem_cache_alloc_noprof+0xa4/0x660
[ 2074.323111][ T7470]  ? ptlock_alloc+0x20/0x70
[ 2074.323128][ T7470]  ? ptlock_alloc+0x20/0x70
[ 2074.323153][ T7470]  ptlock_alloc+0x20/0x70
[ 2074.323172][ T7470]  pte_alloc_one+0x7e/0x380
[ 2074.323196][ T7470]  __pte_alloc+0x25/0x1a0
[ 2074.323223][ T7470]  copy_pmd_range+0x4eff/0x57f0
[ 2074.323248][ T7470]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2074.323313][ T7470]  ? __pfx_copy_pmd_range+0x10/0x10
[ 2074.323340][ T7470]  ? rt_spin_unlock+0x159/0x200
[ 2074.323366][ T7470]  ? rt_spin_unlock+0x165/0x200
[ 2074.323386][ T7470]  ? __pud_alloc+0x348/0x460
[ 2074.323410][ T7470]  copy_page_range+0xb40/0x1170
[ 2074.323452][ T7470]  ? __pfx_copy_page_range+0x10/0x10
[ 2074.323493][ T7470]  dup_mmap+0xf83/0x1d80
[ 2074.323533][ T7470]  ? __pfx_dup_mmap+0x10/0x10
[ 2074.323552][ T7470]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2074.323569][ T7470]  ? rt_spin_lock+0x1e2/0x400
[ 2074.323602][ T7470]  ? copy_mm+0x10f/0x480
[ 2074.323625][ T7470]  ? copy_mm+0x10f/0x480
[ 2074.323663][ T7470]  copy_mm+0x11a/0x480
[ 2074.323685][ T7470]  ? copy_process+0xd3c/0x43f0
[ 2074.323705][ T7470]  copy_process+0x1e7d/0x43f0
[ 2074.323737][ T7470]  ? copy_process+0xd3c/0x43f0
[ 2074.323779][ T7470]  ? __pfx_copy_process+0x10/0x10
[ 2074.323816][ T7470]  kernel_clone+0x2d2/0x8d0
[ 2074.323842][ T7470]  ? __pfx_kernel_clone+0x10/0x10
[ 2074.323875][ T7470]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2074.323908][ T7470]  __x64_sys_clone+0x1b6/0x230
[ 2074.323934][ T7470]  ? __pfx___x64_sys_clone+0x10/0x10
[ 2074.323998][ T7470]  ? __pfx_ksys_write+0x10/0x10
[ 2074.324037][ T7470]  do_syscall_64+0x166/0x520
[ 2074.324058][ T7470]  ? trace_irq_disable+0x3b/0x140
[ 2074.324076][ T7470]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2074.324094][ T7470]  ? clear_bhb_loop+0x70/0xc0
[ 2074.324116][ T7470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2074.324135][ T7470] RIP: 0033:0x7f9f71a4e0d9
[ 2074.324153][ T7470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2074.324168][ T7470] RSP: 002b:00007f9f6fca5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 2074.324188][ T7470] RAX: ffffffffffffffda RBX: 00007f9f71cd5fa0 RCX: 00007f9f71a4e0d9
[ 2074.324201][ T7470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000c200
[ 2074.324213][ T7470] RBP: 00007f9f6fca6090 R08: 0000000000000000 R09: 0000000000000000
[ 2074.324224][ T7470] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002
[ 2074.324235][ T7470] R13: 00007f9f71cd6038 R14: 00007f9f71cd5fa0 R15: 00007ffd7172b1f8
[ 2074.324269][ T7470]  </TASK>
[ 2074.843292][ T7471] binder: 7468:7471 ioctl c0306201 2000000003c0 returned -14
[ 2077.241173][ T7499] binder: 7496:7499 ioctl c0306201 0 returned -14
[ 2077.860820][ T7498] sock: sock_timestamping_bind_phc: sock not bind to device
[ 2077.990163][ T7498] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12826'.
[ 2080.304424][T31692] Bluetooth: hci1: unexpected event for opcode 0x0804
[ 2080.680490][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12836'.
[ 2080.680514][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12836'.
[ 2080.865874][ T7528] sock: sock_timestamping_bind_phc: sock not bind to device
[ 2080.877637][ T7528] netlink: 32 bytes leftover after parsing attributes in process `syz.7.12838'.
[ 2080.887131][ T7528] snd_aloop snd_aloop.0: control 0:129:-2:syz0:245 is already present
[ 2080.952469][ T5315] usb 9-1: new high-speed USB device number 64 using dummy_hcd
[ 2080.958800][ T7535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2081.102559][ T5315] usb 9-1: Using ep0 maxpacket: 32
[ 2081.104179][ T5315] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 2081.105766][ T5315] usb 9-1: config 0 has an invalid interface number: 85 but max is 0
[ 2081.105790][ T5315] usb 9-1: config 0 has no interface number 0
[ 2081.105835][ T5315] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2081.105862][ T5315] usb 9-1: config 0 interface 85 has no altsetting 0
[ 2081.108825][ T5315] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2081.108846][ T5315] usb 9-1: Product: syz
[ 2081.108860][ T5315] usb 9-1: Manufacturer: syz
[ 2081.108873][ T5315] usb 9-1: SerialNumber: syz
[ 2081.224536][ T5315] usb 9-1: config 0 descriptor??
[ 2081.639938][ T5315] appletouch 9-1:0.85: Failed to read mode from device.
[ 2081.640172][ T5315] appletouch 9-1:0.85: probe with driver appletouch failed with error -5
[ 2081.736973][ T7539] kvm: kvm [7537]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800000000
[ 2081.763924][ T7539] kvm: kvm [7537]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3900000000
[ 2081.788147][ T5315] usb 9-1: USB disconnect, device number 64
[ 2082.765594][ T7585] netlink: 48 bytes leftover after parsing attributes in process `syz.7.12858'.
[ 2083.805447][ T7605] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.12870'.
[ 2084.440056][ T7631] FAULT_INJECTION: forcing a failure.
[ 2084.440056][ T7631] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2084.440094][ T7631] CPU: 1 UID: 0 PID: 7631 Comm: syz.2.12877 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2084.440120][ T7631] Tainted: [L]=SOFTLOCKUP
[ 2084.440127][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2084.440138][ T7631] Call Trace:
[ 2084.440146][ T7631]  <TASK>
[ 2084.440154][ T7631]  dump_stack_lvl+0xe8/0x150
[ 2084.440185][ T7631]  should_fail_ex+0x46b/0x600
[ 2084.440219][ T7631]  _copy_from_user+0x2d/0xb0
[ 2084.440238][ T7631]  __se_sys_io_uring_setup+0x1b4/0x2c0
[ 2084.440264][ T7631]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2084.440286][ T7631]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[ 2084.440324][ T7631]  ? __pfx_ksys_write+0x10/0x10
[ 2084.440360][ T7631]  do_syscall_64+0x166/0x520
[ 2084.440382][ T7631]  ? trace_irq_disable+0x3b/0x140
[ 2084.440401][ T7631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2084.440420][ T7631]  ? clear_bhb_loop+0x70/0xc0
[ 2084.440443][ T7631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2084.440461][ T7631] RIP: 0033:0x7f8293abe0d9
[ 2084.440479][ T7631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2084.440494][ T7631] RSP: 002b:00007f8291d15ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2084.440514][ T7631] RAX: ffffffffffffffda RBX: 0000200000000508 RCX: 00007f8293abe0d9
[ 2084.440527][ T7631] RDX: 0000200000000588 RSI: 0000200000000508 RDI: 0000000000000e26
[ 2084.440539][ T7631] RBP: 0000200000000500 R08: 0000200000000780 R09: 0000000000000000
[ 2084.440552][ T7631] R10: 0000200000000590 R11: 0000000000000206 R12: 0000200000000588
[ 2084.440563][ T7631] R13: 0000200000000590 R14: 00007f8291d15fd8 R15: 0000000000000000
[ 2084.440592][ T7631]  </TASK>
[ 2085.178396][ T7665] FAULT_INJECTION: forcing a failure.
[ 2085.178396][ T7665] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2085.178433][ T7665] CPU: 0 UID: 0 PID: 7665 Comm: syz.1.12892 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2085.178458][ T7665] Tainted: [L]=SOFTLOCKUP
[ 2085.178465][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2085.178476][ T7665] Call Trace:
[ 2085.178484][ T7665]  <TASK>
[ 2085.178492][ T7665]  dump_stack_lvl+0xe8/0x150
[ 2085.178522][ T7665]  should_fail_ex+0x46b/0x600
[ 2085.178555][ T7665]  _copy_to_user+0x31/0xb0
[ 2085.178577][ T7665]  sk_getsockopt+0x223c/0x2760
[ 2085.178606][ T7665]  ? __pfx_sk_getsockopt+0x10/0x10
[ 2085.178642][ T7665]  ? __lock_acquire+0x683/0x2ce0
[ 2085.178670][ T7665]  ? __might_fault+0xaf/0x130
[ 2085.178690][ T7665]  ? __might_fault+0xaf/0x130
[ 2085.178728][ T7665]  do_sock_getsockopt+0x2bd/0x7e0
[ 2085.178755][ T7665]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 2085.178789][ T7665]  ? __fget_files+0x3a8/0x420
[ 2085.178811][ T7665]  ? __fget_files+0x2a/0x420
[ 2085.178841][ T7665]  __x64_sys_getsockopt+0x1aa/0x250
[ 2085.178869][ T7665]  do_syscall_64+0x166/0x520
[ 2085.178891][ T7665]  ? trace_irq_disable+0x3b/0x140
[ 2085.178911][ T7665]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2085.178930][ T7665]  ? clear_bhb_loop+0x70/0xc0
[ 2085.178952][ T7665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2085.178970][ T7665] RIP: 0033:0x7f339320e0d9
[ 2085.178991][ T7665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2085.179007][ T7665] RSP: 002b:00007f3391466028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 2085.179035][ T7665] RAX: ffffffffffffffda RBX: 00007f3393495fa0 RCX: 00007f339320e0d9
[ 2085.179048][ T7665] RDX: 000000000000004b RSI: 0000000000000001 RDI: 0000000000000003
[ 2085.179061][ T7665] RBP: 00007f3391466090 R08: 0000200000000180 R09: 0000000000000000
[ 2085.179073][ T7665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2085.179085][ T7665] R13: 00007f3393496038 R14: 00007f3393495fa0 R15: 00007ffd686cc2a8
[ 2085.179116][ T7665]  </TASK>
[ 2085.612193][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12897'.
[ 2085.612220][ T7675] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12897'.
[ 2085.701611][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12897'.
[ 2085.722876][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12897'.
[ 2085.722901][ T7676] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12897'.
[ 2085.792100][ T7682] FAULT_INJECTION: forcing a failure.
[ 2085.792100][ T7682] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2085.792137][ T7682] CPU: 0 UID: 0 PID: 7682 Comm: syz.2.12899 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2085.792163][ T7682] Tainted: [L]=SOFTLOCKUP
[ 2085.792170][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2085.792181][ T7682] Call Trace:
[ 2085.792189][ T7682]  <TASK>
[ 2085.792197][ T7682]  dump_stack_lvl+0xe8/0x150
[ 2085.792229][ T7682]  should_fail_ex+0x46b/0x600
[ 2085.792264][ T7682]  _copy_from_iter+0x1d3/0x1660
[ 2085.792290][ T7682]  ? rcu_is_watching+0x16/0xb0
[ 2085.792313][ T7682]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 2085.792342][ T7682]  ? __pfx__copy_from_iter+0x10/0x10
[ 2085.792366][ T7682]  ? __alloc_skb+0x27a/0x7a0
[ 2085.792392][ T7682]  ? __alloc_skb+0x27a/0x7a0
[ 2085.792422][ T7682]  ? netlink_sendmsg+0x650/0xb40
[ 2085.792444][ T7682]  ? skb_put+0x112/0x210
[ 2085.792473][ T7682]  netlink_sendmsg+0x6c0/0xb40
[ 2085.792502][ T7682]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2085.792525][ T7682]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 2085.792549][ T7682]  ? __kernel_text_address+0xd/0x30
[ 2085.792568][ T7682]  ? unwind_get_return_address+0x4d/0x90
[ 2085.792590][ T7682]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2085.792608][ T7682]  sock_sendmsg_nosec+0x13a/0x180
[ 2085.792633][ T7682]  ____sys_sendmsg+0x565/0x870
[ 2085.792652][ T7682]  ? __might_fault+0xaf/0x130
[ 2085.792676][ T7682]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2085.792703][ T7682]  ? import_iovec+0x73/0xa0
[ 2085.792725][ T7682]  ___sys_sendmsg+0x2a5/0x360
[ 2085.792741][ T7682]  ? __lock_acquire+0x683/0x2ce0
[ 2085.792766][ T7682]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2085.792822][ T7682]  ? __fget_files+0x2a/0x420
[ 2085.792845][ T7682]  ? __fget_files+0x3a8/0x420
[ 2085.792885][ T7682]  __x64_sys_sendmsg+0x1b7/0x290
[ 2085.792907][ T7682]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2085.792947][ T7682]  do_syscall_64+0x166/0x520
[ 2085.792970][ T7682]  ? trace_irq_disable+0x3b/0x140
[ 2085.792988][ T7682]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2085.793007][ T7682]  ? clear_bhb_loop+0x70/0xc0
[ 2085.793029][ T7682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2085.793048][ T7682] RIP: 0033:0x7f8293abe0d9
[ 2085.793067][ T7682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2085.793084][ T7682] RSP: 002b:00007f8291d16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2085.793104][ T7682] RAX: ffffffffffffffda RBX: 00007f8293d45fa0 RCX: 00007f8293abe0d9
[ 2085.793118][ T7682] RDX: 00000000200400d0 RSI: 0000200000009b40 RDI: 0000000000000003
[ 2085.793130][ T7682] RBP: 00007f8291d16090 R08: 0000000000000000 R09: 0000000000000000
[ 2085.793143][ T7682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2085.793154][ T7682] R13: 00007f8293d46038 R14: 00007f8293d45fa0 R15: 00007ffd82c94388
[ 2085.793186][ T7682]  </TASK>
[ 2085.951153][T31692] Bluetooth: hci3: unexpected event for opcode 0x0000
[ 2086.286800][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12905'.
[ 2088.562587][ T5315] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 2088.572591][ T2503] usb 9-1: new high-speed USB device number 65 using dummy_hcd
[ 2088.747763][ T5315] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2088.747818][ T5315] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[ 2088.749573][ T5315] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2088.749638][ T5315] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[ 2088.749662][ T5315] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 36
[ 2088.753447][ T2503] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[ 2088.756948][ T2503] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2088.756972][ T2503] usb 9-1: Product: syz
[ 2088.756986][ T2503] usb 9-1: Manufacturer: syz
[ 2088.756999][ T2503] usb 9-1: SerialNumber: syz
[ 2088.764917][ T2503] usb 9-1: config 0 descriptor??
[ 2088.842993][ T5315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2088.843022][ T5315] usb 3-1: Product: syz
[ 2088.843036][ T5315] usb 3-1: Manufacturer: syz
[ 2088.843051][ T5315] usb 3-1: SerialNumber: syz
[ 2088.852037][ T5315] usb 3-1: config 0 descriptor??
[ 2088.853454][ T7730] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 2088.853637][ T7730] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 2088.918719][    C1] usb 3-1: NFC: Urb failure (status -71)
[ 2088.936482][    C1] usb 3-1: NFC: Urb failure (status -71)
[ 2088.971665][ T5315] usb 3-1: NFC: Unable to get FW version
[ 2089.003746][ T5315] pn533_usb 3-1:0.0: probe with driver pn533_usb failed with error -71
[ 2089.401356][ T7757] sock: sock_timestamping_bind_phc: sock not bind to device
[ 2090.367702][T31692] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 2090.391359][T31692] Bluetooth: hci3: Injecting HCI hardware error event
[ 2090.410371][T31692] Bluetooth: hci3: hardware error 0x00
[ 2091.419616][ T2503] usb 9-1: f81604_read: reg: 105 failed: -EPROTO
[ 2091.419645][ T2503] f81604 9-1:0.0: Setting termination of CH#1 failed: -EPROTO
[ 2091.419681][ T2503] f81604 9-1:0.0: probe with driver f81604 failed with error -71
[ 2091.432512][ T2503] usb 9-1: USB disconnect, device number 65
[ 2091.474475][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12940'.
[ 2091.615291][ T7793] sock: sock_timestamping_bind_phc: sock not bind to device
[ 2091.617593][ T7793] snd_aloop snd_aloop.0: control 0:129:-2:syz0:245 is already present
[ 2091.619354][T25270] usb 3-1: USB disconnect, device number 23
[ 2091.853019][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12946'.
[ 2091.855489][ T7799] FAULT_INJECTION: forcing a failure.
[ 2091.855489][ T7799] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2091.855525][ T7799] CPU: 1 UID: 0 PID: 7799 Comm: syz.1.12946 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2091.855551][ T7799] Tainted: [L]=SOFTLOCKUP
[ 2091.855558][ T7799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2091.855569][ T7799] Call Trace:
[ 2091.855576][ T7799]  <TASK>
[ 2091.855585][ T7799]  dump_stack_lvl+0xe8/0x150
[ 2091.855618][ T7799]  should_fail_ex+0x46b/0x600
[ 2091.855651][ T7799]  _copy_from_user+0x2d/0xb0
[ 2091.855672][ T7799]  ___sys_recvmsg+0x173/0x5a0
[ 2091.855700][ T7799]  ? __pfx____sys_recvmsg+0x10/0x10
[ 2091.855731][ T7799]  ? __fget_files+0x2a/0x420
[ 2091.855772][ T7799]  ? __fget_files+0x3a8/0x420
[ 2091.855812][ T7799]  do_recvmmsg+0x320/0x7f0
[ 2091.855841][ T7799]  ? __pfx_do_recvmmsg+0x10/0x10
[ 2091.855862][ T7799]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2091.855896][ T7799]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2091.855930][ T7799]  __x64_sys_recvmmsg+0x198/0x250
[ 2091.855953][ T7799]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 2091.855987][ T7799]  do_syscall_64+0x166/0x520
[ 2091.856009][ T7799]  ? trace_irq_disable+0x3b/0x140
[ 2091.856028][ T7799]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2091.856048][ T7799]  ? clear_bhb_loop+0x70/0xc0
[ 2091.856070][ T7799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2091.856089][ T7799] RIP: 0033:0x7f339320e0d9
[ 2091.856107][ T7799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2091.856122][ T7799] RSP: 002b:00007f3391466028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 2091.856141][ T7799] RAX: ffffffffffffffda RBX: 00007f3393495fa0 RCX: 00007f339320e0d9
[ 2091.856153][ T7799] RDX: 0000000000000005 RSI: 0000200000006240 RDI: 0000000000000003
[ 2091.856164][ T7799] RBP: 00007f3391466090 R08: 0000000000000000 R09: 0000000000000000
[ 2091.856178][ T7799] R10: 0000000000002140 R11: 0000000000000246 R12: 0000000000000001
[ 2091.856190][ T7799] R13: 00007f3393496038 R14: 00007f3393495fa0 R15: 00007ffd686cc2a8
[ 2091.856221][ T7799]  </TASK>
[ 2092.627978][ T7812] FAULT_INJECTION: forcing a failure.
[ 2092.627978][ T7812] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2092.628014][ T7812] CPU: 1 UID: 0 PID: 7812 Comm: syz.8.12950 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2092.628041][ T7812] Tainted: [L]=SOFTLOCKUP
[ 2092.628048][ T7812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2092.628058][ T7812] Call Trace:
[ 2092.628066][ T7812]  <TASK>
[ 2092.628075][ T7812]  dump_stack_lvl+0xe8/0x150
[ 2092.628106][ T7812]  should_fail_ex+0x46b/0x600
[ 2092.628139][ T7812]  _copy_from_user+0x2d/0xb0
[ 2092.628161][ T7812]  kstrtouint_from_user+0xd6/0x180
[ 2092.628189][ T7812]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 2092.628212][ T7812]  ? __lock_acquire+0x683/0x2ce0
[ 2092.628250][ T7812]  proc_fail_nth_write+0x8e/0x210
[ 2092.628280][ T7812]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2092.628314][ T7812]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2092.628339][ T7812]  vfs_write+0x29f/0xbb0
[ 2092.628373][ T7812]  ? __pfx_vfs_write+0x10/0x10
[ 2092.628401][ T7812]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2092.628428][ T7812]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2092.628451][ T7812]  ? mutex_lock_nested+0x152/0x1d0
[ 2092.628467][ T7812]  ? fdget_pos+0x252/0x320
[ 2092.628500][ T7812]  ksys_write+0x156/0x270
[ 2092.628527][ T7812]  ? __pfx_ksys_write+0x10/0x10
[ 2092.628564][ T7812]  do_syscall_64+0x166/0x520
[ 2092.628586][ T7812]  ? trace_irq_disable+0x3b/0x140
[ 2092.628605][ T7812]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2092.628624][ T7812]  ? clear_bhb_loop+0x70/0xc0
[ 2092.628648][ T7812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2092.628666][ T7812] RIP: 0033:0x7f9fa50ce90e
[ 2092.628684][ T7812] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2092.628700][ T7812] RSP: 002b:00007f9fa3344fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2092.628720][ T7812] RAX: ffffffffffffffda RBX: 00007f9fa33456c0 RCX: 00007f9fa50ce90e
[ 2092.628734][ T7812] RDX: 0000000000000001 RSI: 00007f9fa33450a0 RDI: 0000000000000004
[ 2092.628746][ T7812] RBP: 00007f9fa3345090 R08: 0000000000000000 R09: 0000000000000000
[ 2092.628758][ T7812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2092.628769][ T7812] R13: 00007f9fa5396128 R14: 00007f9fa5396090 R15: 00007ffcdd8529d8
[ 2092.628803][ T7812]  </TASK>
[ 2092.842610][T31692] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 2093.443443][ T7825] sock: sock_timestamping_bind_phc: sock not bind to device
[ 2093.445596][ T7825] snd_aloop snd_aloop.0: control 0:129:-2:syz0:245 is already present
[ 2093.982544][T19232] usb 9-1: new high-speed USB device number 66 using dummy_hcd
[ 2094.143656][T19232] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2094.145196][T19232] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2094.145247][T19232] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2094.145269][T19232] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2094.145292][T19232] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2094.145333][T19232] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2095.019598][ T7888] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12984'.
[ 2096.245776][ T7944] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13009'.
[ 2097.719698][ T7970] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2097.769086][   T37] kauditd_printk_skb: 16 callbacks suppressed
[ 2097.769103][   T37] audit: type=1326 audit(1787380630.278:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.13022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcb6e0d9 code=0x7ffc0000
[ 2097.769949][   T37] audit: type=1326 audit(1787380630.278:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.13022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcb6e0d9 code=0x7ffc0000
[ 2097.769995][   T37] audit: type=1326 audit(1787380630.278:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.13022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcb6e0d9 code=0x7ffc0000
[ 2097.770553][   T37] audit: type=1326 audit(1787380630.278:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.13022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcb6e0d9 code=0x7ffc0000
[ 2097.770596][   T37] audit: type=1326 audit(1787380630.278:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.13022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f22bcb6e0d9 code=0x7ffc0000
[ 2097.771856][   T37] audit: type=1326 audit(1787380630.278:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.13022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcb6e0d9 code=0x7ffc0000
[ 2097.771901][   T37] audit: type=1326 audit(1787380630.278:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.13022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcb6e0d9 code=0x7ffc0000
[ 2097.771939][   T37] audit: type=1326 audit(1787380630.278:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.13022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22bcb6e0d9 code=0x7ffc0000
[ 2097.771976][   T37] audit: type=1326 audit(1787380630.278:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.13022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcb6e0d9 code=0x7ffc0000
[ 2097.772015][   T37] audit: type=1326 audit(1787380630.278:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.13022" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcb6e0d9 code=0x7ffc0000
[ 2097.777421][T25270] usb 9-1: USB disconnect, device number 66
[ 2097.925967][ T7973] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13022'.
[ 2098.086111][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13022'.
[ 2098.122929][ T7973] netlink: 'syz.6.13022': attribute type 29 has an invalid length.
[ 2098.122945][ T7973] netlink: 'syz.6.13022': attribute type 25 has an invalid length.
[ 2099.466848][ T1329] ieee802154 phy0 wpan0: encryption failed: -22
[ 2099.466913][ T1329] ieee802154 phy1 wpan1: encryption failed: -22
[ 2099.470735][ T8001] FAULT_INJECTION: forcing a failure.
[ 2099.470735][ T8001] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2099.470768][ T8001] CPU: 1 UID: 0 PID: 8001 Comm: syz.1.13030 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2099.470794][ T8001] Tainted: [L]=SOFTLOCKUP
[ 2099.470802][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2099.470814][ T8001] Call Trace:
[ 2099.470822][ T8001]  <TASK>
[ 2099.470830][ T8001]  dump_stack_lvl+0xe8/0x150
[ 2099.470863][ T8001]  should_fail_ex+0x46b/0x600
[ 2099.470896][ T8001]  _copy_from_user+0x2d/0xb0
[ 2099.470913][ T8001]  do_handle_open+0x573/0xae0
[ 2099.470939][ T8001]  ? __pfx_do_handle_open+0x10/0x10
[ 2099.470967][ T8001]  ? ksys_write+0x248/0x270
[ 2099.470995][ T8001]  ? __pfx_ksys_write+0x10/0x10
[ 2099.471031][ T8001]  do_syscall_64+0x166/0x520
[ 2099.471053][ T8001]  ? trace_irq_disable+0x3b/0x140
[ 2099.471069][ T8001]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2099.471087][ T8001]  ? clear_bhb_loop+0x70/0xc0
[ 2099.471111][ T8001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2099.471129][ T8001] RIP: 0033:0x7f339320e0d9
[ 2099.471147][ T8001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2099.471164][ T8001] RSP: 002b:00007f3391466028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[ 2099.471185][ T8001] RAX: ffffffffffffffda RBX: 00007f3393495fa0 RCX: 00007f339320e0d9
[ 2099.471199][ T8001] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000003
[ 2099.471212][ T8001] RBP: 00007f3391466090 R08: 0000000000000000 R09: 0000000000000000
[ 2099.471224][ T8001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2099.471243][ T8001] R13: 00007f3393496038 R14: 00007f3393495fa0 R15: 00007ffd686cc2a8
[ 2099.471276][ T8001]  </TASK>
[ 2100.771982][   T60] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2101.396055][ T5598] usb 9-1: new high-speed USB device number 67 using dummy_hcd
[ 2101.547983][ T5598] usb 9-1: Using ep0 maxpacket: 32
[ 2101.549441][ T5598] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 2101.550913][ T5598] usb 9-1: config 0 has an invalid interface number: 85 but max is 0
[ 2101.550935][ T5598] usb 9-1: config 0 has no interface number 0
[ 2101.550977][ T5598] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2101.551003][ T5598] usb 9-1: config 0 interface 85 has no altsetting 0
[ 2101.614700][ T5598] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2101.614726][ T5598] usb 9-1: Product: syz
[ 2101.614741][ T5598] usb 9-1: Manufacturer: syz
[ 2101.614754][ T5598] usb 9-1: SerialNumber: syz
[ 2101.663294][ T5598] usb 9-1: config 0 descriptor??
[ 2102.297864][ T5598] appletouch 9-1:0.85: Geyser mode initialized.
[ 2102.302872][T25270] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 2102.321669][ T5598] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input50
[ 2102.463452][T25270] usb 3-1: Using ep0 maxpacket: 16
[ 2102.474539][T25270] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[ 2102.480894][T25270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 99, changing to 10
[ 2102.484130][T25270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2102.530201][T25270] usb 3-1: config 0 descriptor??
[ 2102.686186][ T5598] usb 9-1: USB disconnect, device number 67
[ 2102.840584][ T8065] netlink: 34 bytes leftover after parsing attributes in process `syz.1.13054'.
[ 2102.860999][ T5598] appletouch 9-1:0.85: input: appletouch disconnected
[ 2103.015935][T25270] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[ 2103.015977][T25270] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[ 2103.016005][T25270] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[ 2103.016031][T25270] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[ 2103.016057][T25270] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[ 2103.016083][T25270] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[ 2103.016110][T25270] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[ 2103.016136][T25270] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[ 2103.016164][T25270] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[ 2103.016190][T25270] elo 0003:04E7:0009.000C: unknown main item tag 0x0
[ 2103.065469][T25270] elo 0003:04E7:0009.000C: hidraw0: USB HID v7e.ff Device [HID 04e7:0009] on usb-dummy_hcd.2-1/input0
[ 2104.484584][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13067'.
[ 2104.484610][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13067'.
[ 2104.860943][ T8106] FAULT_INJECTION: forcing a failure.
[ 2104.860943][ T8106] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2104.860979][ T8106] CPU: 1 UID: 0 PID: 8106 Comm: syz.1.13070 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2104.861006][ T8106] Tainted: [L]=SOFTLOCKUP
[ 2104.861013][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2104.861024][ T8106] Call Trace:
[ 2104.861032][ T8106]  <TASK>
[ 2104.861040][ T8106]  dump_stack_lvl+0xe8/0x150
[ 2104.861073][ T8106]  should_fail_ex+0x46b/0x600
[ 2104.861106][ T8106]  _copy_from_iter+0x1d3/0x1660
[ 2104.861137][ T8106]  ? rcu_is_watching+0x16/0xb0
[ 2104.861161][ T8106]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 2104.861193][ T8106]  ? __pfx__copy_from_iter+0x10/0x10
[ 2104.861219][ T8106]  ? __alloc_skb+0x27a/0x7a0
[ 2104.861243][ T8106]  ? __alloc_skb+0x27a/0x7a0
[ 2104.861277][ T8106]  ? netlink_sendmsg+0x650/0xb40
[ 2104.861298][ T8106]  ? skb_put+0x112/0x210
[ 2104.861327][ T8106]  netlink_sendmsg+0x6c0/0xb40
[ 2104.861357][ T8106]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2104.861380][ T8106]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 2104.861404][ T8106]  ? __kernel_text_address+0xd/0x30
[ 2104.861421][ T8106]  ? unwind_get_return_address+0x4d/0x90
[ 2104.861445][ T8106]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2104.861464][ T8106]  sock_sendmsg_nosec+0x13a/0x180
[ 2104.861513][ T8106]  ____sys_sendmsg+0x565/0x870
[ 2104.861532][ T8106]  ? __might_fault+0xaf/0x130
[ 2104.861557][ T8106]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2104.861584][ T8106]  ? import_iovec+0x73/0xa0
[ 2104.861608][ T8106]  ___sys_sendmsg+0x2a5/0x360
[ 2104.861626][ T8106]  ? __lock_acquire+0x683/0x2ce0
[ 2104.861650][ T8106]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2104.861706][ T8106]  ? __fget_files+0x2a/0x420
[ 2104.861729][ T8106]  ? __fget_files+0x3a8/0x420
[ 2104.861762][ T8106]  __x64_sys_sendmsg+0x1b7/0x290
[ 2104.861785][ T8106]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2104.861826][ T8106]  do_syscall_64+0x166/0x520
[ 2104.861849][ T8106]  ? trace_irq_disable+0x3b/0x140
[ 2104.861868][ T8106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2104.861888][ T8106]  ? clear_bhb_loop+0x70/0xc0
[ 2104.861918][ T8106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2104.861937][ T8106] RIP: 0033:0x7f339320e0d9
[ 2104.861955][ T8106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2104.861971][ T8106] RSP: 002b:00007f3391466028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2104.861992][ T8106] RAX: ffffffffffffffda RBX: 00007f3393495fa0 RCX: 00007f339320e0d9
[ 2104.862006][ T8106] RDX: 00000000200400d0 RSI: 0000200000009b40 RDI: 0000000000000003
[ 2104.862018][ T8106] RBP: 00007f3391466090 R08: 0000000000000000 R09: 0000000000000000
[ 2104.862030][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2104.862040][ T8106] R13: 00007f3393496038 R14: 00007f3393495fa0 R15: 00007ffd686cc2a8
[ 2104.862070][ T8106]  </TASK>
[ 2105.203318][ T2503] usb 3-1: USB disconnect, device number 24
[ 2105.535729][ T8124] netlink: 121460 bytes leftover after parsing attributes in process `syz.8.13078'.
[ 2108.865483][ T8156] FAULT_INJECTION: forcing a failure.
[ 2108.865483][ T8156] name failslab, interval 1, probability 0, space 0, times 0
[ 2108.865518][ T8156] CPU: 1 UID: 0 PID: 8156 Comm: syz.2.13088 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2108.865544][ T8156] Tainted: [L]=SOFTLOCKUP
[ 2108.865551][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2108.865561][ T8156] Call Trace:
[ 2108.865569][ T8156]  <TASK>
[ 2108.865577][ T8156]  dump_stack_lvl+0xe8/0x150
[ 2108.865608][ T8156]  should_fail_ex+0x46b/0x600
[ 2108.865641][ T8156]  should_failslab+0xa8/0x100
[ 2108.865665][ T8156]  __kmalloc_cache_noprof+0xa0/0x6b0
[ 2108.865685][ T8156]  ? __might_fault+0xaf/0x130
[ 2108.865701][ T8156]  ? io_ring_ctx_alloc+0x54/0xba0
[ 2108.865719][ T8156]  ? io_ring_ctx_alloc+0x54/0xba0
[ 2108.865749][ T8156]  io_ring_ctx_alloc+0x54/0xba0
[ 2108.865767][ T8156]  ? io_prepare_config+0x8c8/0xc70
[ 2108.865794][ T8156]  io_uring_create+0x50/0x990
[ 2108.865817][ T8156]  __se_sys_io_uring_setup+0x2a8/0x2c0
[ 2108.865839][ T8156]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2108.865863][ T8156]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[ 2108.865900][ T8156]  ? __pfx_ksys_write+0x10/0x10
[ 2108.865935][ T8156]  do_syscall_64+0x166/0x520
[ 2108.865957][ T8156]  ? trace_irq_disable+0x3b/0x140
[ 2108.865975][ T8156]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2108.865994][ T8156]  ? clear_bhb_loop+0x70/0xc0
[ 2108.866017][ T8156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2108.866036][ T8156] RIP: 0033:0x7f8293abe0d9
[ 2108.866054][ T8156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2108.866070][ T8156] RSP: 002b:00007f8291d15ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 2108.866091][ T8156] RAX: ffffffffffffffda RBX: 0000200000000508 RCX: 00007f8293abe0d9
[ 2108.866105][ T8156] RDX: 0000200000000588 RSI: 0000200000000508 RDI: 0000000000000e26
[ 2108.866118][ T8156] RBP: 0000200000000500 R08: 0000200000000780 R09: 0000000000000000
[ 2108.866131][ T8156] R10: 0000200000000590 R11: 0000000000000206 R12: 0000200000000588
[ 2108.866143][ T8156] R13: 0000200000000590 R14: 00007f8291d15fd8 R15: 0000000000000000
[ 2108.866174][ T8156]  </TASK>
[ 2108.947337][ T8161] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13089'.
[ 2110.288857][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13095'.
[ 2110.288884][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13095'.
[ 2110.532721][ T5315] usb 9-1: new high-speed USB device number 68 using dummy_hcd
[ 2110.682636][ T5315] usb 9-1: Using ep0 maxpacket: 32
[ 2110.684363][ T5315] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 2110.688681][ T5315] usb 9-1: config 0 has an invalid interface number: 85 but max is 0
[ 2110.688706][ T5315] usb 9-1: config 0 has no interface number 0
[ 2110.688750][ T5315] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2110.688776][ T5315] usb 9-1: config 0 interface 85 has no altsetting 0
[ 2110.751503][ T5315] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2110.751530][ T5315] usb 9-1: Product: syz
[ 2110.751545][ T5315] usb 9-1: Manufacturer: syz
[ 2110.751560][ T5315] usb 9-1: SerialNumber: syz
[ 2110.790146][ T5315] usb 9-1: config 0 descriptor??
[ 2111.322787][ T2503] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 2111.478164][ T5315] appletouch 9-1:0.85: Geyser mode initialized.
[ 2111.492604][ T5315] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input51
[ 2111.501002][ T2503] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 2111.502110][ T2503] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2111.502159][ T2503] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 2111.502185][ T2503] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2111.564061][ T2503] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2111.564089][ T2503] usb 3-1: Product: syz
[ 2111.564102][ T2503] usb 3-1: Manufacturer: syz
[ 2111.564116][ T2503] usb 3-1: SerialNumber: syz
[ 2111.636739][ T2503] usb 3-1: config 0 descriptor??
[ 2111.637816][ T8181] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2111.662558][ T2503] usb 3-1: ucan: probing device on interface #0
[ 2111.662581][ T2503] usb 3-1: ucan: invalid EP count (1)
[ 2111.662594][ T2503] usb 3-1: ucan: probe failed; try to update the device firmware
[ 2111.827886][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13110'.
[ 2112.005844][T25270] usb 3-1: USB disconnect, device number 25
[ 2112.109650][ T5315] usb 9-1: USB disconnect, device number 68
[ 2113.856088][ T5315] appletouch 9-1:0.85: input: appletouch disconnected
[ 2114.672698][ T8248] netlink: 48 bytes leftover after parsing attributes in process `syz.8.13121'.
[ 2114.787469][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13124'.
[ 2115.079457][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13107'.
[ 2115.079482][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13107'.
[ 2117.352492][T25270] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 2117.504142][T25270] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 2117.509387][T25270] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 2117.509418][T25270] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 2117.509444][T25270] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 2117.520216][T25270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2117.520242][T25270] usb 3-1: Product: syz
[ 2117.520255][T25270] usb 3-1: Manufacturer: syz
[ 2117.520328][T25270] usb 3-1: SerialNumber: syz
[ 2117.536684][T25270] usb 3-1: config 0 descriptor??
[ 2117.540702][ T8274] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2117.541698][ T8274] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2117.550886][T25270] usb 3-1: ucan: probing device on interface #0
[ 2117.745405][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13138'.
[ 2119.004227][T25270] usb 3-1: ucan: failed to retrieve device info
[ 2119.004250][T25270] usb 3-1: ucan: probe failed; try to update the device firmware
[ 2119.204754][T25270] usb 3-1: USB disconnect, device number 26
[ 2119.333377][ T5315] usb 9-1: new high-speed USB device number 69 using dummy_hcd
[ 2119.366989][   T37] kauditd_printk_skb: 134 callbacks suppressed
[ 2119.367008][   T37] audit: type=1326 audit(1787380651.868:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8303 comm="syz.7.13142" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f71a4e0d9 code=0x7ffc0000
[ 2119.368384][   T37] audit: type=1326 audit(1787380651.878:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8303 comm="syz.7.13142" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f71a4e0d9 code=0x7ffc0000
[ 2119.370332][   T37] audit: type=1326 audit(1787380651.878:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8303 comm="syz.7.13142" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f71a4e0d9 code=0x7ffc0000
[ 2119.370592][   T37] audit: type=1326 audit(1787380651.878:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8303 comm="syz.7.13142" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f71a4e0d9 code=0x7ffc0000
[ 2119.370905][   T37] audit: type=1326 audit(1787380651.878:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8303 comm="syz.7.13142" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f71a4e0d9 code=0x7ffc0000
[ 2119.371429][   T37] audit: type=1326 audit(1787380651.878:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8303 comm="syz.7.13142" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f71a4e0d9 code=0x7ffc0000
[ 2119.372992][   T37] audit: type=1326 audit(1787380651.878:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8303 comm="syz.7.13142" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f71a4e0d9 code=0x7ffc0000
[ 2119.373037][   T37] audit: type=1326 audit(1787380651.878:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8303 comm="syz.7.13142" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f71a4e0d9 code=0x7ffc0000
[ 2119.373075][   T37] audit: type=1326 audit(1787380651.878:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8303 comm="syz.7.13142" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f71a4e0d9 code=0x7ffc0000
[ 2119.387467][   T37] audit: type=1326 audit(1787380651.888:5040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8303 comm="syz.7.13142" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f71a4e0d9 code=0x7ffc0000
[ 2119.485850][ T5315] usb 9-1: Using ep0 maxpacket: 16
[ 2119.530731][ T5315] usb 9-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[ 2119.533635][ T5315] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2119.557912][ T5315] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2119.557938][ T5315] usb 9-1: Product: syz
[ 2119.557952][ T5315] usb 9-1: Manufacturer: syz
[ 2119.557965][ T5315] usb 9-1: SerialNumber: syz
[ 2119.593757][ T5315] usb 9-1: config 0 descriptor??
[ 2119.625920][ T5315] port100 9-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[ 2119.951738][ T8313] tmpfs: Bad value for 'size'
[ 2121.299028][T19232] usb 9-1: USB disconnect, device number 69
[ 2121.521377][ T8322] netlink: NAT attribute has 4 unknown bytes
[ 2121.521413][ T8322] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2121.810490][ T8330] netlink: 48 bytes leftover after parsing attributes in process `syz.8.13150'.
[ 2123.339636][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13161'.
[ 2123.339661][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13161'.
[ 2123.424511][ T8348] snd_aloop snd_aloop.0: control 0:129:-2:syz0:245 is already present
[ 2123.476714][ T8347] 
[ 2123.476727][ T8347] ======================================================
[ 2123.476736][ T8347] WARNING: possible circular locking dependency detected
[ 2123.476750][ T8347] syzkaller #0 Tainted: G             L     
[ 2123.476762][ T8347] ------------------------------------------------------
[ 2123.476771][ T8347] syz.6.13158/8347 is trying to acquire lock:
[ 2123.476782][ T8347] ffff888063c308f0 (&xs->mutex){+.+.}-{4:4}, at: xsk_diag_dump+0x533/0x1560
[ 2123.476919][ T8347] 
[ 2123.476919][ T8347] but task is already holding lock:
[ 2123.476926][ T8347] ffff888061732440 (&net->xdp.lock){+.+.}-{4:4}, at: xsk_diag_dump+0x184/0x1560
[ 2123.476976][ T8347] 
[ 2123.476976][ T8347] which lock already depends on the new lock.
[ 2123.476976][ T8347] 
[ 2123.476984][ T8347] 
[ 2123.476984][ T8347] the existing dependency chain (in reverse order) is:
[ 2123.476993][ T8347] 
[ 2123.476993][ T8347] -> #3 (&net->xdp.lock){+.+.}-{4:4}:
[ 2123.477019][ T8347]        mutex_lock_nested+0x5a/0x1d0
[ 2123.477036][ T8347]        xsk_notifier+0x89/0x230
[ 2123.477054][ T8347]        notifier_call_chain+0x1a5/0x3d0
[ 2123.477081][ T8347]        unregister_netdevice_many_notify+0x17fa/0x2130
[ 2123.477166][ T8347]        ipvlan_device_event+0xf1f/0xfb0
[ 2123.477231][ T8347]        notifier_call_chain+0x1a5/0x3d0
[ 2123.477255][ T8347]        unregister_netdevice_many_notify+0x17fa/0x2130
[ 2123.477287][ T8347]        rtnl_dellink+0x5be/0x810
[ 2123.477314][ T8347]        rtnetlink_rcv_msg+0x802/0xc00
[ 2123.477340][ T8347]        netlink_rcv_skb+0x226/0x4a0
[ 2123.477359][ T8347]        netlink_unicast+0x7f5/0x990
[ 2123.477373][ T8347]        netlink_sendmsg+0x813/0xb40
[ 2123.477392][ T8347]        sock_sendmsg_nosec+0x13a/0x180
[ 2123.477415][ T8347]        ____sys_sendmsg+0x565/0x870
[ 2123.477431][ T8347]        ___sys_sendmsg+0x2a5/0x360
[ 2123.477447][ T8347]        __x64_sys_sendmsg+0x1b7/0x290
[ 2123.477465][ T8347]        do_syscall_64+0x166/0x520
[ 2123.477488][ T8347]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2123.477506][ T8347] 
[ 2123.477506][ T8347] -> #2 (&port->pnodes_lock){+.+.}-{4:4}:
[ 2123.477534][ T8347]        mutex_lock_nested+0x5a/0x1d0
[ 2123.477551][ T8347]        ipvlan_device_event+0x489/0xfb0
[ 2123.477567][ T8347]        notifier_call_chain+0x1a5/0x3d0
[ 2123.477592][ T8347]        netdev_compute_master_upper_features+0x944/0xb30
[ 2123.477616][ T8347]        bond_netdev_event+0x7a3/0xf80
[ 2123.477674][ T8347]        notifier_call_chain+0x1a5/0x3d0
[ 2123.477700][ T8347]        __netdev_update_features+0xde7/0x1ef0
[ 2123.477719][ T8347]        netdev_compute_master_upper_features+0x90c/0xb30
[ 2123.477743][ T8347]        __bond_release_one+0x9db/0x11c0
[ 2123.477800][ T8347]        do_set_master+0x332/0x720
[ 2123.477818][ T8347]        do_setlink+0xe7b/0x4670
[ 2123.477834][ T8347]        rtnl_newlink+0x15a3/0x1c30
[ 2123.477861][ T8347]        rtnetlink_rcv_msg+0x802/0xc00
[ 2123.477889][ T8347]        netlink_rcv_skb+0x226/0x4a0
[ 2123.477907][ T8347]        netlink_unicast+0x7f5/0x990
[ 2123.477923][ T8347]        netlink_sendmsg+0x813/0xb40
[ 2123.477943][ T8347]        sock_sendmsg_nosec+0x13a/0x180
[ 2123.477966][ T8347]        ____sys_sendmsg+0x565/0x870
[ 2123.477983][ T8347]        ___sys_sendmsg+0x2a5/0x360
[ 2123.478000][ T8347]        __x64_sys_sendmsg+0x1b7/0x290
[ 2123.478018][ T8347]        do_syscall_64+0x166/0x520
[ 2123.478040][ T8347]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2123.478058][ T8347] 
[ 2123.478058][ T8347] -> #1 (&dev_instance_lock_key#23){+.+.}-{4:4}:
[ 2123.478090][ T8347]        mutex_lock_nested+0x5a/0x1d0
[ 2123.478106][ T8347]        xsk_bind+0x331/0x11d0
[ 2123.478125][ T8347]        __sys_bind+0x2e9/0x410
[ 2123.478148][ T8347]        __x64_sys_bind+0x7a/0x90
[ 2123.478171][ T8347]        do_syscall_64+0x166/0x520
[ 2123.478191][ T8347]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2123.478208][ T8347] 
[ 2123.478208][ T8347] -> #0 (&xs->mutex){+.+.}-{4:4}:
[ 2123.478232][ T8347]        __lock_acquire+0x1520/0x2ce0
[ 2123.478251][ T8347]        lock_acquire+0x106/0x350
[ 2123.478270][ T8347]        mutex_lock_nested+0x5a/0x1d0
[ 2123.478294][ T8347]        xsk_diag_dump+0x533/0x1560
[ 2123.478318][ T8347]        netlink_dump+0x711/0xee0
[ 2123.478335][ T8347]        __netlink_dump_start+0x589/0x7b0
[ 2123.478353][ T8347]        xsk_diag_handler_dump+0x1a0/0x250
[ 2123.478377][ T8347]        sock_diag_rcv_msg+0x4b0/0x5f0
[ 2123.478441][ T8347]        netlink_rcv_skb+0x226/0x4a0
[ 2123.478459][ T8347]        netlink_unicast+0x7f5/0x990
[ 2123.478475][ T8347]        netlink_sendmsg+0x813/0xb40
[ 2123.478495][ T8347]        sock_sendmsg_nosec+0x13a/0x180
[ 2123.478517][ T8347]        sock_write_iter+0x2e4/0x3f0
[ 2123.478538][ T8347]        do_iter_readv_writev+0x624/0x8d0
[ 2123.478565][ T8347]        vfs_writev+0x34c/0x990
[ 2123.478582][ T8347]        do_writev+0x15a/0x2e0
[ 2123.478600][ T8347]        do_syscall_64+0x166/0x520
[ 2123.478628][ T8347]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2123.478646][ T8347] 
[ 2123.478646][ T8347] other info that might help us debug this:
[ 2123.478646][ T8347] 
[ 2123.478654][ T8347] Chain exists of:
[ 2123.478654][ T8347]   &xs->mutex --> &port->pnodes_lock --> &net->xdp.lock
[ 2123.478654][ T8347] 
[ 2123.478686][ T8347]  Possible unsafe locking scenario:
[ 2123.478686][ T8347] 
[ 2123.478693][ T8347]        CPU0                    CPU1
[ 2123.478701][ T8347]        ----                    ----
[ 2123.478708][ T8347]   lock(&net->xdp.lock);
[ 2123.478724][ T8347]                                lock(&port->pnodes_lock);
[ 2123.478738][ T8347]                                lock(&net->xdp.lock);
[ 2123.478753][ T8347]   lock(&xs->mutex);
[ 2123.478765][ T8347] 
[ 2123.478765][ T8347]  *** DEADLOCK ***
[ 2123.478765][ T8347] 
[ 2123.478771][ T8347] locks held by syz.6.13158/8347: 2, last CPU#0:
[ 2123.478786][ T8347]  #0: ffff88803f078928 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0
[ 2123.478833][ T8347]  #1: ffff888061732440 (&net->xdp.lock){+.+.}-{4:4}, at: xsk_diag_dump+0x184/0x1560
[ 2123.478886][ T8347] 
[ 2123.478886][ T8347] stack backtrace:
[ 2123.478902][ T8347] CPU: 0 UID: 0 PID: 8347 Comm: syz.6.13158 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2123.478929][ T8347] Tainted: [L]=SOFTLOCKUP
[ 2123.478937][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2123.478950][ T8347] Call Trace:
[ 2123.478957][ T8347]  <TASK>
[ 2123.478966][ T8347]  dump_stack_lvl+0xe8/0x150
[ 2123.478996][ T8347]  print_circular_bug+0x2e1/0x300
[ 2123.479023][ T8347]  check_noncircular+0x12e/0x150
[ 2123.479051][ T8347]  __lock_acquire+0x1520/0x2ce0
[ 2123.479083][ T8347]  ? xsk_diag_dump+0x533/0x1560
[ 2123.479108][ T8347]  lock_acquire+0x106/0x350
[ 2123.479127][ T8347]  ? xsk_diag_dump+0x533/0x1560
[ 2123.479155][ T8347]  ? xsk_diag_dump+0x533/0x1560
[ 2123.479183][ T8347]  ? xsk_diag_dump+0x533/0x1560
[ 2123.479208][ T8347]  mutex_lock_nested+0x5a/0x1d0
[ 2123.479225][ T8347]  ? xsk_diag_dump+0x533/0x1560
[ 2123.479253][ T8347]  xsk_diag_dump+0x533/0x1560
[ 2123.479297][ T8347]  ? __pfx_xsk_diag_dump+0x10/0x10
[ 2123.479328][ T8347]  ? rcu_is_watching+0x16/0xb0
[ 2123.479353][ T8347]  ? trace_kmalloc+0x2a/0xf0
[ 2123.479373][ T8347]  ? __kmalloc_node_track_caller_noprof+0x5a5/0x7d0
[ 2123.479397][ T8347]  ? netlink_dump+0x1e7/0xee0
[ 2123.479415][ T8347]  ? netlink_dump+0x1e7/0xee0
[ 2123.479437][ T8347]  ? __alloc_skb+0x4d0/0x7a0
[ 2123.479466][ T8347]  netlink_dump+0x711/0xee0
[ 2123.479485][ T8347]  ? __netlink_lookup+0xc6/0x8b0
[ 2123.479512][ T8347]  ? __pfx_netlink_dump+0x10/0x10
[ 2123.479535][ T8347]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2123.479565][ T8347]  __netlink_dump_start+0x589/0x7b0
[ 2123.479588][ T8347]  xsk_diag_handler_dump+0x1a0/0x250
[ 2123.479616][ T8347]  ? sock_diag_lock_handler+0x19/0x290
[ 2123.479640][ T8347]  ? __pfx_xsk_diag_handler_dump+0x10/0x10
[ 2123.479667][ T8347]  ? __pfx_xsk_diag_dump+0x10/0x10
[ 2123.479694][ T8347]  ? sock_diag_lock_handler+0x19/0x290
[ 2123.479721][ T8347]  ? sock_diag_lock_handler+0x19/0x290
[ 2123.479749][ T8347]  sock_diag_rcv_msg+0x4b0/0x5f0
[ 2123.479777][ T8347]  netlink_rcv_skb+0x226/0x4a0
[ 2123.479797][ T8347]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[ 2123.479824][ T8347]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2123.479850][ T8347]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2123.479871][ T8347]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2123.479894][ T8347]  netlink_unicast+0x7f5/0x990
[ 2123.479917][ T8347]  netlink_sendmsg+0x813/0xb40
[ 2123.479938][ T8347]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2123.479961][ T8347]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2123.480004][ T8347]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 2123.480030][ T8347]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2123.480051][ T8347]  sock_sendmsg_nosec+0x13a/0x180
[ 2123.480078][ T8347]  sock_write_iter+0x2e4/0x3f0
[ 2123.480102][ T8347]  ? __pfx_sock_write_iter+0x10/0x10
[ 2123.480123][ T8347]  ? __futex_wait+0x35a/0x410
[ 2123.480160][ T8347]  do_iter_readv_writev+0x624/0x8d0
[ 2123.480191][ T8347]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2123.480221][ T8347]  ? bpf_lsm_file_permission+0x9/0x20
[ 2123.480249][ T8347]  ? security_file_permission+0x75/0x260
[ 2123.480284][ T8347]  ? rw_verify_area+0x209/0x4d0
[ 2123.480312][ T8347]  vfs_writev+0x34c/0x990
[ 2123.480335][ T8347]  ? __pfx_vfs_writev+0x10/0x10
[ 2123.480362][ T8347]  ? __fget_files+0x2a/0x420
[ 2123.480388][ T8347]  ? __fget_files+0x3a8/0x420
[ 2123.480411][ T8347]  ? __fget_files+0x2a/0x420
[ 2123.480438][ T8347]  do_writev+0x15a/0x2e0
[ 2123.480458][ T8347]  ? __pfx_do_writev+0x10/0x10
[ 2123.480482][ T8347]  do_syscall_64+0x166/0x520
[ 2123.480505][ T8347]  ? trace_irq_disable+0x3b/0x140
[ 2123.480524][ T8347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2123.480543][ T8347]  ? clear_bhb_loop+0x70/0xc0
[ 2123.480564][ T8347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2123.480584][ T8347] RIP: 0033:0x7f22bcb6e0d9
[ 2123.480602][ T8347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2123.480619][ T8347] RSP: 002b:00007f22badc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 2123.480639][ T8347] RAX: ffffffffffffffda RBX: 00007f22bcdf5fa0 RCX: 00007f22bcb6e0d9
[ 2123.480655][ T8347] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004
[ 2123.480668][ T8347] RBP: 00007f22bcc05024 R08: 0000000000000000 R09: 0000000000000000
[ 2123.480681][ T8347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2123.480693][ T8347] R13: 00007f22bcdf6038 R14: 00007f22bcdf5fa0 R15: 00007ffc199cb668
[ 2123.480717][ T8347]  </TASK>
[ 2123.491879][ T8347] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13158'.
[ 2123.744997][ T5315] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 2124.292391][ T5315] usb 3-1: Using ep0 maxpacket: 32
[ 2124.293323][ T5315] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 2124.301148][ T5315] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[ 2124.301163][ T5315] usb 3-1: config 0 has no interface number 0
[ 2124.301182][ T5315] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2124.301196][ T5315] usb 3-1: config 0 interface 85 has no altsetting 0
[ 2124.382391][ T5315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2124.382408][ T5315] usb 3-1: Product: syz
[ 2124.382416][ T5315] usb 3-1: Manufacturer: syz
[ 2124.382424][ T5315] usb 3-1: SerialNumber: syz
[ 2124.460124][ T5315] usb 3-1: config 0 descriptor??
[ 2125.132394][ T5315] appletouch 3-1:0.85: Geyser mode initialized.
[ 2125.134042][ T5315] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input52
[ 2125.363878][ T5315] usb 3-1: USB disconnect, device number 27
[ 2125.363988][    C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19
[ 2125.453171][ T5315] appletouch 3-1:0.85: input: appletouch disconnected