last executing test programs: 29m24.93651803s ago: executing program 32 (id=3675): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x82200, 0x102) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 25m2.629670378s ago: executing program 33 (id=4710): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x4, 0x80) getdents64(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x10, 0x0, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000001ac0)='dir0\x00', 0x80) mount(0x0, &(0x7f0000001b00)='dir0\x00', &(0x7f0000001b40)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001b80)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x150, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80, 0x11}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x5e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x90, 0x80, '1234567890123456dc'}}]}, 0x150}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 23m41.255096905s ago: executing program 34 (id=4828): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000480)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, 0x0) unshare(0x40000000) unshare(0x40000000) unshare(0x40000000) nanosleep(0x0, 0x0) 22m24.612984201s ago: executing program 35 (id=4987): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000180)=0x3, 0x7fff) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f00000006c0)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000019700)={0x0, 0x0, &(0x7f0000019740)={&(0x7f0000019780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) close(r4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000019880)={0x3, 0x40}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000198c0)={0x0, 0x0, &(0x7f0000019900)={&(0x7f0000019940)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) 21m7.401428303s ago: executing program 36 (id=5101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x80000001, 0x3, 0x1000045, 0xfffc, 0x9, 0xf, 0x6, 0x0, 0xab], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20m47.254772116s ago: executing program 37 (id=5172): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xc85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x101041, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg$can_raw(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)}, 0x40000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) 19m4.711182817s ago: executing program 38 (id=5369): syz_open_procfs(0x0, &(0x7f0000000340)='net/protocols\x00') socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xc85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x101041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg$can_raw(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)}, 0x40000000) unshare(0x28000600) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc}}, 0x0) 10m39.995676468s ago: executing program 39 (id=6621): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)) timer_create(0x5, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbf8, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20009805}, 0x40010) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000000050004000000000009"], 0x5c}}, 0x0) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="1c00"/12, 0xc, 0xfffffffffffffffe) 8m37.464817999s ago: executing program 40 (id=6859): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0xc}, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000000440), 0x800, 0x1000) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x9b, 0xa9, 0x1d, 0x40, 0x2c42, 0x1709, 0xb3a4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xff, 0x0, 0x10, 0x6, "", [{{0x9, 0x4, 0x7a, 0x9, 0x1, 0x26, 0x89, 0xa7, 0x0, [], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0x4, 0x4, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000012c0)={0x2c, &(0x7f00000010c0)={0x0, 0x3, 0x3, "85e152"}, 0x0, 0x0, 0x0, &(0x7f0000001280)}) r2 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x240000) r3 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000003100)={0x1c, 0x0, 0x0, 0x0}) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) r4 = syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 8m16.42441672s ago: executing program 41 (id=6908): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x8, 0x7fc00002}]}) dup3(r1, r0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x4000087, 0x2, 0x0) eventfd(0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @multicast2, @multicast1}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000400)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x5c}, @generic={0x44, 0x4, "d483"}]}}}], 0x18}}], 0x1, 0x50008000) write$binfmt_misc(r5, &(0x7f0000000500), 0xfdef) openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/stat\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5m57.400613116s ago: executing program 42 (id=7232): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1c3) mount(0x0, &(0x7f0000000040)='./dev\x00', 0x0, 0x4010, 0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/ttyUSB0\x00', 0x12df00, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xc, 0x0) 5m53.019790954s ago: executing program 43 (id=7240): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000640)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000680)=0x1, 0x4) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)="f2e659", 0x3}, {&(0x7f0000000b80)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)="e1", 0x1}, {&(0x7f0000000c80)="fa", 0x1}, {&(0x7f0000000cc0)="d8", 0x1}, {0x0}, {&(0x7f0000000d40)="b8a2f6", 0x3}, {0x0}, {&(0x7f0000000e40)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="87", 0x1}], 0x1}}], 0x3, 0x4000000) 5m48.76910938s ago: executing program 44 (id=7254): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4004800) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) 5m30.47663715s ago: executing program 9 (id=7281): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xdb, 0xe4, 0x13, 0x20, 0xccd, 0x5e, 0x12de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x4d, 0x30, 0x5f, "", [{{0x9, 0x4, 0xfd, 0x0, 0x1, 0x69, 0xad, 0x29, 0x9, [], [{{0x9, 0x5, 0x8a, 0x8, 0x40, 0x8, 0x9, 0x80}}]}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000f80)={0x14, 0x0, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000003cc0)={0x1c, &(0x7f0000003bc0)={0x40, 0x18}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000044c0)={0x44, &(0x7f0000004200)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 5m26.848783518s ago: executing program 9 (id=7288): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r1 = fanotify_init(0x200, 0x2) fanotify_mark(r1, 0x8, 0x40000021, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000580)) timer_settime(0x0, 0x0, &(0x7f00000005c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fanotify_mark(r1, 0x441, 0x8000001, 0xffffffffffffffff, 0x0) membarrier(0x10, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000740)={0xc}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)=0x1000, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000840)={0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r2, 0x3, r3, 0x43, 0x80000}) 5m25.95871876s ago: executing program 9 (id=7293): syz_usb_connect(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000b40)='L', 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x800) read$char_usb(r0, 0x0, 0x0) 5m24.550912798s ago: executing program 9 (id=7297): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$9p_fd(0x0, 0x0, 0x0, 0xa0080a, 0x0) chdir(&(0x7f00000002c0)='./bus\x00') mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='27', 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff) 5m24.477251127s ago: executing program 9 (id=7298): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x5, 0x12, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xffff, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x16, 0xd8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0"], 0x0}, 0x0) 5m24.119564038s ago: executing program 9 (id=7299): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @wr_drn={0x68, 0x20, {0x6, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x36, @unmapped=0xdddd0000}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0x120}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m23.628667131s ago: executing program 45 (id=7299): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @wr_drn={0x68, 0x20, {0x6, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x3, 0x36, @unmapped=0xdddd0000}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0x120}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m49.87866063s ago: executing program 6 (id=7382): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000006480)="000000000000000000000000000000000000000001") mkdirat(0xffffffffffffff9c, &(0x7f00000064c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000006500)='./dev\x00', &(0x7f0000006540)='devtmpfs\x00', 0x0, 0x0) r1 = syz_create_resource$futex(&(0x7f00000004c0)) futex(r1, 0xc, 0x1, 0x0, 0x0, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000000580)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000005c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = syz_create_resource$futex(&(0x7f0000000640)=0x1) r5 = syz_create_resource$futex(&(0x7f0000000680)=0x1) futex(r5, 0xb, 0x1, 0x0, r4, 0x403) futex(r5, 0xc, 0x1, 0x0, r4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) close(0x3) 4m49.611725154s ago: executing program 6 (id=7384): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000006480)='\x00'/16) mkdirat(0xffffffffffffff9c, &(0x7f00000064c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000006500)='./dev\x00', &(0x7f0000006540)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000006580)='./dev/rfcomm0\x00', 0x802, 0x0) r1 = syz_create_resource$futex(&(0x7f00000004c0)) futex(r1, 0xc, 0x1, 0x0, 0x0, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000000580)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000005c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = syz_create_resource$futex(&(0x7f0000000640)=0x1) r5 = syz_create_resource$futex(&(0x7f0000000680)=0x1) futex(r5, 0xb, 0x1, 0x0, r4, 0x403) futex(r5, 0xc, 0x1, 0x0, r4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) close(0x3) 4m49.36799648s ago: executing program 6 (id=7385): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000800)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000080)={0x1, 0x1, 0x0, 0x0, 0x0, 0x5000}) ioctl$VT_ACTIVATE(r3, 0x4b4b, 0x10000000000004) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x4000040) 4m47.788898079s ago: executing program 6 (id=7389): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000002c0)='./bus\x00') mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='27', 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000004c0)={0x100028, 0x100000, 0x100000, {r0}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff) 4m47.371850122s ago: executing program 6 (id=7390): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) futex(0x0, 0x6, 0x3d, 0x0, 0x0, 0x2) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000200)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmmsg(r0, &(0x7f00000005c0), 0x5b, 0x40, 0x0) futex(0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000280), 0x12) r6 = fsopen(&(0x7f00000002c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x8) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x17, 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d}, 0x94) 4m45.244146032s ago: executing program 6 (id=7393): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b00000009040000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f00000000c0)='L', 0x1) syz_usb_disconnect(r0) 4m44.917120684s ago: executing program 46 (id=7393): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b00000009040000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f00000000c0)='L', 0x1) syz_usb_disconnect(r0) 3m32.420837181s ago: executing program 5 (id=7573): syz_usb_connect(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000b40)='L', 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 3m30.603677747s ago: executing program 5 (id=7578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) shmget(0x2, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="390242000200000005f8000000000000000000000000000000000000000000000000000000000300000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007d351f5bde054000000000187b8200b500fb2a595fcb14034354b9", @ANYRES32=0x0, @ANYRES32=0x0], 0x239) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000098a8a808879ff55ec4f719d9b5d99c2b16b84515bf925b4418fd62e18dff7463664edf5729cd9437f3d8928b6ce2fbfcabc6c34b9df5317b535e9b8017d14721bb7f103693af87937f852d314cb9f5bd61e207f78516df7bef8e8013def0d2e2c723302ee60"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) (fail_nth: 1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x2000000000000) 3m29.473181248s ago: executing program 5 (id=7581): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 3m26.055482157s ago: executing program 5 (id=7591): socket$inet6(0xa, 0x3, 0xff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x549, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000100)=0x79, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240467bc, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) write(r2, &(0x7f0000000240)="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", 0x2d0) sendto$inet(r2, &(0x7f00000005c0)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000680)=0x474c, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000700), 0x800001d, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000780)={0x2, 0x0, @local}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x28008841) 3m23.517409678s ago: executing program 5 (id=7595): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000640)='100', 0x3) socket$inet(0x2, 0x1, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write(r3, &(0x7f00000006c0)="6e716e3d746573742c7472616e73706f72743d7463702c817261", 0x1a) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000700), 0x40000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000740)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000780)={0x48, 0x2, r5}) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x84042, 0x0) r9 = syz_open_dev$loop(&(0x7f00000002c0), 0x45ffffb, 0x122c42) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000300)={r8, 0x800, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x2, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded147e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd2bf35239d2", "4f000000dd9d9ac2f63a7ad700", [0x5]}}) 3m21.534954769s ago: executing program 5 (id=7600): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000400)={{0x84, @multicast2, 0x4e22, 0x3, 'lc\x00', 0x5, 0x5, 0x77}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e23, 0xdac098b1337ed02a, 0xcd, 0x4}}, 0x44) (fail_nth: 1) 3m6.126247809s ago: executing program 47 (id=7600): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000400)={{0x84, @multicast2, 0x4e22, 0x3, 'lc\x00', 0x5, 0x5, 0x77}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e23, 0xdac098b1337ed02a, 0xcd, 0x4}}, 0x44) (fail_nth: 1) 1m51.974586213s ago: executing program 4 (id=7825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) shmget(0x2, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="390242000200000005f8000000000000000000000000000000000000000000000000000000000300000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007d351f5bde054000000000187b8200b500fb2a595fcb14034354b9", @ANYRES32=0x0, @ANYRES32=0x0], 0x239) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000098a8a808879ff55ec4f719d9b5d99c2b16b84515bf925b4418fd62e18dff7463664edf5729cd9437f3d8928b6ce2fbfcabc6c34b9df5317b535e9b8017d14721bb7f103693af87937f852d314cb9f5bd61e207f78516df7bef8e8013def0d2e2c723302ee60"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x3, &(0x7f0000000080)=[{0x3, 0x2, 0xfe, 0x10}, {0x7, 0xff, 0x39, 0xd}, {0x2, 0xe, 0xa, 0xc}]}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x2000000000000) 1m51.07780395s ago: executing program 4 (id=7827): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001800)={0x84, &(0x7f00000018c0)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001900)={0x44, &(0x7f0000001980)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000019c0)={0x44, &(0x7f0000001a40)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001a80)={0x1c, &(0x7f0000001ac0)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001b00)={0x2c, &(0x7f0000001b40)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001c00)={0x34, &(0x7f0000001c40)=ANY=[@ANYBLOB="400f13"], 0x0, 0x0, 0x0, 0x0, 0x0}) 1m46.098894908s ago: executing program 4 (id=7835): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r1, 0x20, &(0x7f0000000340)={&(0x7f0000000380)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000640)=@generic={0x0, 0x2}) 1m45.637964452s ago: executing program 4 (id=7837): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000002c0)='./bus\x00') mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f00000003c0)='27', 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000004c0)={0x100028, 0x100000, 0x100000, {r0}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff) 1m45.548680866s ago: executing program 4 (id=7838): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000002c0)='./bus\x00') mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f00000003c0)='27', 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000004c0)={0x100028, 0x100000, 0x100000, {r0}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff) 1m45.221112485s ago: executing program 4 (id=7839): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000004b7ccae79de6a8bf6307a46a60ce3e5b0000000000000000000000000002000000"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1], 0x0, 0x34}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, 0x12, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}}, 0x14}}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r3, &(0x7f00000005c0), 0x10106, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000600), 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x5, &(0x7f0000000800)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4, 0x0, 0x0, 0xc}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map, r7, 0x7, 0x0, r7, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000008c0)={r6, &(0x7f0000000900), &(0x7f0000000940)=@tcp=r5}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f00000006c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000700)={@multicast2, @remote, 0x0, 0x1, [@local]}, 0x14) 1m44.812271142s ago: executing program 48 (id=7839): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000004b7ccae79de6a8bf6307a46a60ce3e5b0000000000000000000000000002000000"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1], 0x0, 0x34}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, 0x12, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}}, 0x14}}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r3, &(0x7f00000005c0), 0x10106, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000600), 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x5, &(0x7f0000000800)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4, 0x0, 0x0, 0xc}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map, r7, 0x7, 0x0, r7, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000008c0)={r6, &(0x7f0000000900), &(0x7f0000000940)=@tcp=r5}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f00000006c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000700)={@multicast2, @remote, 0x0, 0x1, [@local]}, 0x14) 1m9.913612055s ago: executing program 7 (id=7933): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x6, 0x1, &(0x7f0000000180)="b0", 0x9, 0x74, 0x10cf, 0x5500, 0x43, 0x0, 0x8, 'syz0\x00'}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_setup(0x3454, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) preadv2(r3, &(0x7f0000000380)=[{0x0}, {&(0x7f00000003c0)=""/129, 0x7ffff000}], 0x2, 0x0, 0x1f000000, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240), 0x560c89bb) io_setup(0x1, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}]) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x8004, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x400}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x2}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1m8.963260411s ago: executing program 7 (id=7937): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x1d0, 0x228, 0x25a, 0x1d0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xe0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x2, 0x1}, {0x2, 0x1}, {0x1, 0x6}, 0x2}}}, {{@ipv6={@dev, @mcast1, [0xffffffff], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4a39, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="03", 0x1}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x700, 0x2, 0x0) 1m8.813749165s ago: executing program 7 (id=7938): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf6}}}}}]}}]}}, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000480)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(0x0, 0x82, 0x2) r1 = syz_open_dev$hidraw(&(0x7f00000007c0), 0x82, 0x2) syz_usb_connect(0x5, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xa9, 0xb8, 0x2a, 0x40, 0x2001, 0x3310, 0xc91f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0xb0, 0x10, 0xc, "", [{{0x9, 0x4, 0x92, 0x3, 0x0, 0xff, 0xff, 0xff, 0x70}}]}}]}}, 0x0) write$hidraw(r1, &(0x7f0000000800)="5bfd", 0x2) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0}, 0x0) 1m5.531599229s ago: executing program 7 (id=7948): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000002c0)='./bus\x00') mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='2', 0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f00000004c0)={0x100028, 0x100000, 0x100000, {r0}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff) 1m4.863866529s ago: executing program 7 (id=7949): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000640)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000680)={0x4804, 0x4, 0x0, 0x400, 0x1, 0x1}, 0x30, 0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000700)={0x0, 0x0, 0x2, 0x0, 0x4, 0x10, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000780)=[0x0], 0x1, 0x0}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r5, &(0x7f0000000840)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019840)=0x7) syz_open_dev$loop(0x0, 0x2, 0x2001) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000019880)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f00000198c0)=0x9, 0x8, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000019900)={0x0, 0x0, &(0x7f0000019940)={0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1m3.683513727s ago: executing program 7 (id=7954): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x2340, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000004c0)=0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x1f7) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/3\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000680)=""/118, 0x76}], 0x1, 0x5c, 0x3) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000740)=""/245, 0xf5}], 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000840)=0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x4, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x70bd2d, 0x3508, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x6b8f, 0x2, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x890) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a40)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000ac0)="44bc2426b20d35412475b1af391d28b68f2eb9fab9faa04cf681dc5ac8569b35a1971bc03f902ce8101e737b3d8e86ea91684e2134c09b382921a6fbb77cd34f8f291cfa596d7f6e04d5744c2b2f2ba13cf73958e5c222216f0d584b02df8270c47d94fcbf5821f3062d12a707aebeb539a65065b036d5e4c28a29c3956c43be8f21a0fd598916ce348168a1849b30a50a1930a03ff28414d5b0", 0x9a, r0}, 0x68) sendmsg$nl_xfrm(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="0c0100001a0007002abd700000000000fe80000000000000000000000000001b00000000000000000000000000000000000300004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a000000000000008f6b000000000000020000000000000004000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000002000060000000700000000000000fdffffffffffffff0180000000000000e80a000000000000000000000a000200700000000000000014000e00ac1414bb00000000000000000000000008001d0005000000"], 0x10c}}, 0x8000) syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x2000413, &(0x7f0000000380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r5, &(0x7f0000000e40)="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", 0x2000, &(0x7f0000002e40)={&(0x7f0000002f00)={0x50, 0xfffffffffffffff5, 0x208000000000203, {0x7, 0x29, 0xdb56, 0x4040008, 0xfffd, 0x1a7a, 0x2, 0x1801, 0x0, 0x0, 0x20, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000040)={0x5, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xfa, 0x5}) preadv(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1, 0x1, 0x7fff) 1m3.152587034s ago: executing program 49 (id=7954): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x2340, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000004c0)=0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x1f7) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/3\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000680)=""/118, 0x76}], 0x1, 0x5c, 0x3) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000740)=""/245, 0xf5}], 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000840)=0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x4, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x70bd2d, 0x3508, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x6b8f, 0x2, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x890) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a40)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000ac0)="44bc2426b20d35412475b1af391d28b68f2eb9fab9faa04cf681dc5ac8569b35a1971bc03f902ce8101e737b3d8e86ea91684e2134c09b382921a6fbb77cd34f8f291cfa596d7f6e04d5744c2b2f2ba13cf73958e5c222216f0d584b02df8270c47d94fcbf5821f3062d12a707aebeb539a65065b036d5e4c28a29c3956c43be8f21a0fd598916ce348168a1849b30a50a1930a03ff28414d5b0", 0x9a, r0}, 0x68) sendmsg$nl_xfrm(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="0c0100001a0007002abd700000000000fe80000000000000000000000000001b00000000000000000000000000000000000300004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a000000000000008f6b000000000000020000000000000004000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000002000060000000700000000000000fdffffffffffffff0180000000000000e80a000000000000000000000a000200700000000000000014000e00ac1414bb00000000000000000000000008001d0005000000"], 0x10c}}, 0x8000) syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x2000413, &(0x7f0000000380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r5, &(0x7f0000000e40)="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", 0x2000, &(0x7f0000002e40)={&(0x7f0000002f00)={0x50, 0xfffffffffffffff5, 0x208000000000203, {0x7, 0x29, 0xdb56, 0x4040008, 0xfffd, 0x1a7a, 0x2, 0x1801, 0x0, 0x0, 0x20, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000040)={0x5, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xfa, 0x5}) preadv(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1, 0x1, 0x7fff) 13.658418473s ago: executing program 8 (id=8102): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@arena={0x21, 0x0, 0x0, 0x100018, 0x20400, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000fc0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001000)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001040)=0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x6, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="01", 0x1}, {0x0, 0x5b}], 0x2}, 0x4004080) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001080)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001180), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001200)=0x100000000e2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/diskstats\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001280)=[{&(0x7f00000012c0)=""/221, 0xdd}], 0x1, 0x804, 0x0) 10.871180845s ago: executing program 8 (id=8111): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) (fail_nth: 1) 10.321871351s ago: executing program 0 (id=8114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$packet(0x11, 0x3, 0x300) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000dc0), 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r5, r4, r3, 0x0) 10.17475181s ago: executing program 1 (id=8116): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0x2, 0xa, 0x300) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x28, 0x81, 0xfffff034}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) fsmount(0xffffffffffffffff, 0x0, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f00000000c0)) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000dc0)="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", 0x564, r4) keyctl$KEYCTL_MOVE(0x1e, r5, r4, r3, 0x0) 9.457457853s ago: executing program 8 (id=8117): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="390242000200000005f8000000000000000000000000000000000000000000000000000000000300000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007d351f5bde054000000000187b8200b500fb2a595fcb14034354b9", @ANYRES32=0x0, @ANYRES32=0x0], 0x239) 9.317531368s ago: executing program 0 (id=8118): syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902610002010484080000000001020d000005240600010524020006000606"], 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff1107010300"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9.239515205s ago: executing program 1 (id=8119): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000004b7ccae79de6a8bf6307a46a60ce3e5b0000000000000000000000000002000000"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1], 0x0, 0x34}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, 0x12, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}}, 0x14}}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r3, &(0x7f00000005c0), 0x10106, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000600), 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x5, &(0x7f0000000800)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4, 0x0, 0x0, 0xc}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map, r6, 0x7, 0x0, r6, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000008c0)={0xffffffffffffffff, &(0x7f0000000900), &(0x7f0000000940)=@tcp=r5}, 0x20) sendto(r5, &(0x7f0000000980)="01", 0x1, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f00000006c0)={@multicast2, @loopback}, 0xc) 8.215397299s ago: executing program 1 (id=8120): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000640)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000680)={0x4804, 0x4, 0x0, 0x400, 0x1, 0x1}, 0x30, 0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000700)={0x0, 0x0, 0x2, 0x0, 0x4, 0x10, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000780)=[0x0], 0x1, 0x0}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r5, &(0x7f0000000840)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019840)=0x7) syz_open_dev$loop(0x0, 0x2, 0x2001) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000019880)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f00000198c0)=0x9, 0x8, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000019900)={0x0, 0x0, &(0x7f0000019940)={0x0}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f00000000c0)={0x0, 0x0}, 0x0) 7.073583163s ago: executing program 1 (id=8121): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@arena={0x21, 0x0, 0x0, 0x100018, 0x20400, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000fc0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001000)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001040)=0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x6, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="01", 0x1}, {0x0, 0x5b}], 0x2}, 0x4004080) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001080)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001200)=0x100000000e2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/diskstats\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001280)=[{&(0x7f00000012c0)=""/221, 0xdd}], 0x1, 0x804, 0x0) 7.003920676s ago: executing program 2 (id=8122): unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00') prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) r0 = fsopen(&(0x7f0000000040)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000007c0)='test_dummy_encryption', &(0x7f0000000800)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000002c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000380)) setxattr$trusted_overlay_origin(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000000b40), 0x2, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x3951d, 0x4b7bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004854}, 0x8000002) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000c00)=ANY=[@ANYBLOB="3c0000001000ffff28bd7000bbdbdf250000000085d206b09c9e1a8f784a0663953a5a623312940e9611f1caa4da95de49fb4303766903ccf29d9c7926accfe8927e3efc56bbb5a01895852570be68fed518d52c4eaa837dbd88a33eda70f985626b", @ANYRES32=0x0, @ANYBLOB="715a0300231a05001c0012800b00010069703667726500000c000280050008007f000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x804) dup(r9) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$RTC_UIE_ON(r11, 0x7003) ioctl$RTC_AIE_ON(r11, 0x7001) 6.879695691s ago: executing program 3 (id=8123): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xc, 0x8, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000001000000850000000d000000b70000000000000095"], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r0, 0x3e8, 0xe, 0x0, &(0x7f0000001280)="c1df07000000d30a298ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (fail_nth: 1) 6.679553355s ago: executing program 3 (id=8124): r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x1, 0x400000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)={0x28, r2, 0x831b97362602f4f3, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x28}}, 0x4000044) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x58, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x58}, {0x5}}]}, 0x58}}, 0x80) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000400)={{0x2, 0x2, 0x6, 0x10001, 0x4, 0xb}, 0x39, [0x7, 0x4, 0x1ff, 0x10000, 0x10, 0x8, 0x7, 0xfff, 0x5, 0x7, 0x5, 0x2, 0xc09, 0x7f, 0x0, 0x4, 0x1, 0xc1d, 0x9, 0xce, 0x2, 0x4, 0x800, 0xbe60, 0x5, 0x3, 0x1, 0xc, 0x4ef0, 0xffffffff, 0x3, 0xc8, 0x7, 0x6, 0x7, 0x4, 0xfffff40d, 0x8, 0x5, 0xffff53a2, 0x2, 0x2, 0x9, 0x1, 0x5, 0xf6, 0x9, 0x7, 0x7, 0x0, 0x2, 0x830, 0x7f, 0x7fffffff, 0x35, 0xffff, 0x0, 0x80000000, 0x47c7, 0x9, 0x3, 0xffff0001, 0xa, 0x5, 0x8, 0x0, 0xffffffff, 0x0, 0xe, 0x5, 0xf4, 0x5, 0x401, 0x2, 0xf, 0x1, 0x10, 0x1, 0xed, 0x6, 0x7c, 0x4, 0xfffffff4, 0x6, 0x74c, 0x100, 0x1, 0x3, 0x0, 0x3, 0x1f, 0xffffffff, 0x4, 0x7fc0000, 0x0, 0x6, 0x2, 0x3, 0x80, 0xf, 0x0, 0x3, 0x0, 0x9, 0x305, 0x1, 0x400, 0x8, 0xecb, 0xfff, 0x6, 0xda1d, 0x4, 0x7, 0xc382, 0x3, 0x0, 0x0, 0x6, 0xe, 0x8, 0xffff74cc, 0x1, 0x5886, 0xd, 0x9, 0x2, 0x0, 0x6, 0x1, 0x0, 0xc, 0x81, 0x8, 0x7, 0xb7, 0xc67b, 0x8, 0x1, 0xa, 0x7fff, 0x9951, 0x8000, 0x4, 0x7, 0x8, 0x80000001, 0x0, 0x4, 0xeb7, 0x9, 0x6, 0x6, 0x100, 0x6, 0x4, 0xfffffffb, 0xd, 0x5, 0x3, 0xffffffff, 0x1, 0xd, 0x401, 0x3dc, 0x0, 0x7f, 0x2, 0x43000, 0x8, 0x9, 0xfff, 0x3, 0x8, 0xf5, 0x789, 0x1, 0x4, 0x59, 0x8, 0x9, 0xfffffffe, 0x1, 0x17e, 0xe5, 0x2, 0x100, 0x6, 0xf4a, 0xd, 0x3ff, 0x101, 0x10000, 0x2, 0xd, 0xe, 0x7, 0x81, 0x3, 0x9, 0x2065, 0xe70, 0xc, 0x1, 0x9, 0x6, 0x3, 0xfffffffc, 0xe081, 0xfffff801, 0x3, 0x1, 0x1800000, 0x4, 0x0, 0x599, 0xfff, 0x7, 0x40, 0xa6, 0x5, 0x100, 0x1, 0x4, 0x0, 0x0, 0x0, 0x4, 0x2, 0x9, 0x2, 0x1, 0x6, 0x0, 0x7, 0x100, 0x0, 0xfffffff9, 0x5, 0xa, 0x80000001, 0x0, 0x0, 0x8, 0xd694, 0x73, 0x7ff, 0x5, 0x8, 0x1, 0x4, 0x0, 0x5d, 0x3, 0x7, 0xffffffff, 0x37, 0x8, 0x10000, 0x7, 0x3, 0xc28, 0x8, 0x7fff, 0x6, 0x4, 0x2, 0x80, 0xf1b, 0x6cb, 0x1ff, 0x8001, 0xdc52, 0x8, 0xfff, 0x1, 0x6, 0x400, 0x101, 0x4, 0x1000, 0x2, 0x7, 0x0, 0x7ff, 0x7, 0x200, 0x81, 0x5, 0x2, 0xb2, 0x1, 0x667, 0xfff, 0x3, 0x10001, 0x7, 0x9, 0x80, 0x3, 0x1, 0x8, 0x1, 0x80, 0x7, 0x8, 0x240000, 0x800, 0x401, 0x8, 0xa5, 0x3, 0xd, 0x1200, 0x0, 0x6, 0x6, 0x5, 0x4, 0x3, 0x40, 0x6, 0x5, 0x5, 0x7, 0x4d87, 0x1, 0x7ff, 0x6, 0x3, 0x8, 0x7, 0x8f, 0x100, 0xff, 0xa, 0xffff, 0x1, 0xfff, 0x2, 0x9, 0x0, 0x6, 0x400, 0x2, 0x7, 0x1, 0x9000, 0x3, 0x7, 0xc4b, 0x81, 0x9, 0x10, 0x800, 0x4e7, 0x9, 0x3, 0x7, 0xfffffffa, 0x526, 0xc7b9, 0xd, 0xaea9, 0x3, 0x3, 0x483d947e, 0x7, 0x3, 0x6, 0x35d, 0x3, 0x4, 0xfffffff8, 0x5, 0x33ab, 0x7fff, 0x8, 0x5, 0x7000000, 0xe45, 0x1, 0x6, 0x5, 0xf5, 0xd891, 0x1, 0x8, 0x9, 0x0, 0x60000000, 0xd7, 0x2, 0x2, 0x59a4, 0x7fffffff, 0xc6, 0x386, 0x9, 0x2, 0x9, 0xb, 0x4, 0xfffffffe, 0x1ff, 0x80d6, 0x60, 0x0, 0x5, 0x87, 0x6, 0x8, 0x9, 0x5, 0x11, 0x6, 0x5, 0x68, 0x2, 0xd7f9, 0x0, 0x6, 0x6, 0x0, 0x7f, 0x7, 0x7, 0x9, 0xf, 0x3, 0x4, 0xc, 0xffffffff, 0x3, 0x6, 0x6, 0x3, 0x8, 0x1, 0x2, 0x118, 0x4, 0x80, 0xfffffff5, 0x784f, 0x5, 0x80, 0x6, 0xa9, 0x7, 0x4, 0xffff, 0x6, 0x8, 0xecfd, 0xfffffe01, 0x13cc, 0xa9, 0xbe49, 0x3, 0x2, 0x9, 0xfffffffc, 0x9, 0xff, 0x4, 0xfffffffc, 0x7, 0x9, 0x81, 0xffffffff, 0x7, 0x0, 0x8, 0x0, 0x6860, 0x4, 0x5, 0x80000000, 0x1b560000, 0x2, 0x2, 0x1, 0x7f, 0x3ff, 0x362, 0x5, 0xd1e, 0x4, 0x0, 0x9, 0xfffffffd, 0x2, 0x3ff, 0x7, 0x2, 0x0, 0x1b6, 0xfffff6e6, 0xc4, 0x33f, 0x39c004de, 0x7f, 0xfe000000, 0x10000, 0x9, 0x8, 0x7, 0x200, 0xd, 0xbf, 0x0, 0x9, 0x401, 0x40000000, 0xf8000000, 0x1, 0x3a12bfbb, 0x8, 0x0, 0x5, 0xff, 0x3, 0x9, 0x2, 0x75, 0xfffffff7, 0x8001, 0x80, 0x7, 0x4, 0x1, 0x1, 0xc000, 0x1a, 0x2, 0x6, 0x1, 0xb, 0x5, 0x200, 0x5, 0x1, 0x8, 0x4, 0x8, 0x7, 0x1, 0x9, 0x7, 0x1000, 0x3, 0xfff, 0x0, 0x5, 0xffffffc0, 0x1, 0x8000, 0xc, 0x5, 0x8001, 0x401, 0x71, 0x100000, 0x7f, 0x8, 0xb, 0xc, 0x1, 0x401, 0xff, 0x3, 0xfff, 0xffff, 0x8, 0x6, 0x9, 0x400, 0x1, 0x8, 0x1, 0xfff, 0xb, 0x1, 0x3, 0x3, 0x6, 0x9, 0x1, 0x0, 0xfffffffb, 0x3ff, 0x5d8, 0xc, 0x10000, 0x10, 0x1, 0x1, 0x89a, 0x1ff, 0x7, 0x2, 0x9, 0x1, 0x3, 0x2, 0x3, 0x1, 0x3, 0x5, 0x446d, 0x6, 0x5, 0x3, 0xbac, 0x0, 0x6, 0xfffffff8, 0x9, 0x4, 0xb9, 0x9, 0x7, 0x200, 0x100, 0x80000001, 0x6, 0x6, 0x8, 0x4, 0x2, 0x0, 0xd, 0x82b, 0xffff893a, 0x21, 0x8, 0x9, 0x23e, 0x5, 0x6a, 0x6, 0xd0a, 0x80000000, 0x7, 0x663, 0x3, 0x4, 0x8, 0x8, 0x7, 0xfffff001, 0xb256, 0x36bc, 0x3, 0x8, 0x9, 0x0, 0x9, 0x9, 0x9f, 0x1ff, 0x0, 0xd, 0x80000000, 0x3, 0x9, 0x10000, 0x3, 0xe92f, 0x9, 0x200, 0x4275, 0xfff, 0x1d20b0b, 0x3, 0x10001, 0x4, 0x51b, 0x6, 0x8, 0x6, 0x32, 0x0, 0x2, 0xffffffff, 0x6, 0x0, 0x5, 0xb, 0xbc, 0xdb, 0x1, 0x2, 0x10000, 0x8, 0x9, 0x9, 0x5, 0x3ff, 0x1, 0x2, 0x9c0b, 0x9b, 0xb9, 0x7, 0x7, 0x0, 0x5, 0x1, 0x3, 0x5, 0x31961414, 0x8, 0x7fff, 0x7ff, 0x6, 0x1, 0x6, 0x16, 0x939, 0x7, 0x96f, 0x7fff, 0x6, 0x3, 0x2, 0x7, 0x7, 0x1, 0x10001, 0x8, 0x1, 0x7, 0x8, 0xf, 0x8001, 0x7ed3, 0x11cc, 0x7, 0x4eb8, 0x2ab8, 0x9, 0x0, 0x9, 0x5, 0x8, 0x200, 0x56, 0x7, 0x2, 0x7, 0x0, 0x9, 0x3, 0xfffffffc, 0x3, 0xbe49, 0x1000, 0x2, 0x4, 0x8001, 0xb93a, 0x0, 0x0, 0x4, 0x8, 0x5, 0xfff, 0x8001, 0x7f, 0xd, 0x3, 0x4, 0xb480, 0xffffffc0, 0x95, 0x1, 0xf9, 0x10, 0x1, 0x5, 0x100, 0x2, 0x4, 0xffffffff, 0x8, 0x788f, 0x3, 0x2, 0x1, 0x8000, 0xbe6, 0xffff, 0x8000, 0xa, 0x10000, 0x3, 0x946, 0x1000, 0x2, 0x9, 0x100, 0xfffffff8, 0x2, 0xc, 0x0, 0x4, 0x58, 0x5, 0xfffffffa, 0x8, 0x4, 0x401, 0x8, 0x7, 0x9, 0x80, 0x9, 0xfff, 0x4b, 0x9, 0xc7a, 0x7, 0x0, 0x0, 0x3, 0x5, 0x8d, 0x401, 0xdb, 0x0, 0x0, 0x3, 0x0, 0x2, 0x80000000, 0x0, 0xe, 0x3, 0x7, 0x1, 0xa0, 0x4e, 0xfde7, 0x5, 0x6, 0x6, 0x2, 0xd346, 0xee, 0x81, 0x1, 0xc, 0x10000, 0xfffffffc, 0x5, 0x1, 0x900000, 0x0, 0x101, 0x2, 0x200, 0x9ec9, 0xffffffff, 0xfffffffc, 0x8, 0x4, 0x3, 0x1, 0x3a, 0x3, 0x3, 0x2, 0xa656, 0x8, 0x9, 0xc, 0x400, 0x9, 0x893, 0x100, 0x6, 0x0, 0xffffffff, 0x4, 0x2, 0x4, 0x1, 0x400, 0x3, 0x6, 0x80000001, 0x0, 0xd, 0x4, 0xffff, 0x81, 0x844, 0x9, 0xe9, 0xfffffff8, 0x0, 0x101, 0x1726, 0x1000, 0x49c0ee15, 0x1, 0x6, 0x5, 0x9, 0x2, 0x1, 0x81, 0x7, 0x2, 0x200, 0x1, 0x0, 0x2, 0x81, 0xe, 0x8, 0xfffffff9, 0x8, 0x3, 0x6, 0x81, 0x6, 0x2, 0xfffffffb, 0x5, 0x6, 0x1, 0x9, 0x100, 0x6, 0x5, 0x6, 0x5, 0x842, 0x10001, 0x1, 0x8, 0x80000000, 0x10, 0x5, 0x0, 0xa, 0x7, 0x68a, 0x2, 0x4, 0x3, 0x2, 0x0, 0x9, 0x6, 0x8, 0x11, 0x0, 0x7, 0xffffffff, 0x4, 0xffffffff, 0x6, 0x6, 0x80000001, 0x6, 0xe, 0x7, 0x7, 0x3, 0x763f, 0x8, 0xff, 0xa9ba, 0x484cda05, 0x1, 0x1, 0x1, 0x101, 0x66, 0x0, 0x800, 0x9, 0x35, 0x1ff, 0x401, 0x2, 0x7, 0x5, 0x8001, 0xc, 0x9, 0x7, 0x0, 0x7ff, 0x7ff, 0x0, 0xff, 0x2, 0x1, 0x136, 0x81, 0x3, 0x8, 0x6, 0xfffffffe, 0x46, 0x3ff, 0x6, 0xfff, 0x2, 0xa, 0x0, 0x5, 0x80, 0x2, 0x3, 0xb894, 0x5, 0x1, 0x80]}) r5 = socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) write(r7, &(0x7f0000001500)='0', 0x1) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r7, 0x40184150, &(0x7f0000001640)={0x0, &(0x7f0000001540)="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", 0xfb}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB='%\x00'], 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x4) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl(r10, 0xc048aeca, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000ffff26bd7000f0dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c0400000000001c0012800b00014b551588bcc0569f000c00028005000b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24028001}, 0x4008800) 5.966264571s ago: executing program 2 (id=8125): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000100001", @ANYBLOB="0380000000000000", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) (async) setns(0xc9, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x14, 0x1f, 0x402, 0x3ff, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="fffffffffffffff6b702040001"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='devices.list\x00', 0x26e1, 0x0) close(r2) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f00000004c0)={'wlan1\x00', @random="000500000020"}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2b, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040800}, 0x44000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000980)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0xfffff001, 0x6, 0x6361, 0x7, 0xffffffff, 0xb13}, [@TCA_NETEM_DELAY_DIST={0x8, 0x2, "1b514c85"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newchain={0x29d0, 0x64, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xf, 0xd}, {0x9, 0x5}, {0xb, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44c, 0x2, [@TCA_CGROUP_ACT={0x448, 0x1, [@m_bpf={0x90, 0x9, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}]}, {0x4f, 0x6, "36a00f1ed533261d83aed4505b2ad79bb2baef44c927c025a914f02d0e1c4ed54daf79e99e230eba7033005912751c877aaf467650d1fc72e4b9f50acfe7fc0a85f4a0f39ebd1b3e7923fe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0xd4, 0x1a, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x93, 0x6, "94008ece131b261e2b268dd37d0f157aa2b6697cf66b0616b35504b749ce16c9a3e6b6c6c9c441056cdcf7f9609a93d9cac297ed9ac69caa5d7ac2e2b489ecfcd3dc6d1fb6890bdf31e93bb5a47bee468aa2aa5dd26b196f010c372c86a1a92555740d7a2c6e39b3cc39e4314638e57b0e6b14b46a9f16ebeb67c45d46651d0c6b19ea821f3a2f866ae7096b3d137f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x68, 0xe, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x1, 0xffffffff}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x23, 0x0, 0x4, 0x6, 0x10}, 0x60}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0xf4, 0x12, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0xbd, 0x6, "a643760128a5df2122aa3e6f5e28540f2efc497b79e0bbf5c508e02b1800f59fc4e2d9b146aed3457dffb2882b043f0a615058238ce85cae2c61856a8c50050e5686885502b1b3961ccf83931734a67204b46a02316b2990aa6c95d47503f9d9623388298c9da1f3bd226644659d5cc927d937d4f4c8bbed5bc12b873211bd5ae0651b6346df5099f2a062d9ebc6c40769d9457eaefeac29fcb73ed7787d45c209ee157c28e71330b7cae918679dc6af6ef147c819e0191714"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x150, 0x1d, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5, 0x3, 0x8, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x3, 0x8, 0x8, 0x101}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x2, 0x8, 0xffffffff, 0xfffffff9}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0x5, 0x1, 0x6, 0x200}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x563f, 0x6, 0xc, 0x1ff}, 0x3, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x4f1, 0xffffffffffffffff, 0xc, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x80000001, 0x5, 0x5}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x0, 0x20000000, 0x1, 0x8}, 0x1}}]}, {0x24, 0x6, "9916f89881020cef08c243bfb654d9912cbd6b06c6e52110fbc98a694361c3d7"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x34, 0x8, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x7f}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x309}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0x2508, 0x2, [@TCA_CGROUP_ACT={0x7f0, 0x1, [@m_mpls={0x104, 0x5, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6007}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x80000001, 0x3, 0x1, 0x7, 0xfca}, 0x2}}]}, {0xb3, 0x6, "cff084b5d214c8ac18d64abc24a8e07e1fa999e249a4823efff54025317618975bc761fc5055d915c2eb369fe9eafa5dee3c9ce34d5839ddf3d3184a7119c5ffe3133ff77a997691192550f5d76f4e55e5e6768a93b0e748652353d1481866a0c824a23e4ad7b3c79ac8d95d9465b9c6e9cf2810ff7efd5900b0e2b26658709608640c861676878e58131bdf3bfb36b8df88984137a4ea7840349e339533381d2ad4780ba76ec397e3ce76e7c82971"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x8c, 0x3, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7c, 0x5, 0x0, 0x3ef, 0x1}, 0x2}}]}, {0x41, 0x6, "47ddef9b72b6c09c6858e6094cf92937dcbfdfdc153a6bbe5c12e44a8325ab2998c7a63dbacc66fd5dc6b4196f322ed076cea50a6be9cb5ad4ba6dbe92"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x1e4, 0x19, 0x0, 0x0, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x800, 0xb75, 0x4, 0x6, 0xcfe}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x451a0dcddcec03af}}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x3, 0xffffffffffffffff, 0x9, 0x3b1}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x9129}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xfffffffd, 0x2, 0x1, 0x6726}}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x12c, 0xb, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}]}, {0xf7, 0x6, "8f748c9c55039de1549172a6a1dcdfc8765e3f22e20c7c162ef656a5dc22067f033e23ce881cbb50c364737c59ebb0bcc89dfbb97e1bdf39d0014b8ae7388d736f213fd4c7c341b542b61a5656d8cbf6388342455a5f3387f084148a406410aa3e8e1d4cb839b2893d64364d73fbaa1bb6acd11f35f9990e1e6e5c1e1a39af0f3c5255662c652a3cfde9dc1304e028cb06642c2ec2a7674b6a02e7d87ca8278960cf220c6b11e874cb3a1d98d377e87b9514df658c2f5a5d074e349d0f72d2503289ddf563b31c493f945e159cb58f10a96866876c906a9537c597f03584edce9b55c9021ff67370010acb7a6b264adb2f2247"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0xc0, 0xd, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0xac, 0x7, 0xfff, {0x8, 0x2, 0x7cd, 0x1ff, 0xffff, 0x9}, {0x6, 0x2, 0x2, 0x4, 0x0, 0x8}, 0x9, 0xfffffffb, 0x7ff}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf25f}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]]}, {0x44, 0x6, "f05b5763612551af25b1f05d5b7cd25af9ae226042533589b42ef6c5cf02e53374e60d9e23cf8af7749b814964430b02930f5a24a134b00c01fda6f50a6fcb99"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x20c, 0xb, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x9, 0x0, 0x2}, @loopback, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x8, 0x5, 0x0, 0x5}, @multicast2, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x6, 0x0, 0x1, 0x5}, @broadcast, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x9, 0x7, 0x7, 0x6f}, @multicast1, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x6, 0x2, 0x0, 0xb6}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x3ff, 0xffffffffffffffff, 0x5, 0x3}, @multicast2, @broadcast, 0xff}}]}, {0xf1, 0x6, "2c3d8fb9778c5912bfee3716c4c69fafdf6b89ce26fa4bdc71e6ff756efe2c3b12c25f545d1fc7951d5d2d39dd30bd812991457821dd1ec4aeaeec0bb70049b58eda208cbfd5157a1b0fa32d35bc6a4bc788a1915c3cb17bc209ae77a1c7123170c4d34738bd94b06d2abffddcbd650b3bda9e8c16064b40e102c6d174693fbaaecd141d1bd0a73bd50c7d3ea2685a2b172ac2652a2f418c827c87dc0702af0387ade49a1d40606b139d73fc52e08726b38f1134c4d1eeb757fd6bc360c063c74b861c86f8a15acd83631cdd053ed8ad02cb68800c2111e5669018851b59ddd9766fab94772f570a8cf9e07cdf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x80, 0x17, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x800, 0x1, 0xbf, 0x81}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x2, 0xffffffffffffffff, 0x1ff, 0xfffffff8}}, @TCA_DEF_DATA={0x7, 0x3, '[$\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x12, 0x6, "bd9652479b6454ef1196a6523604"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x84, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xdce4}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x76f, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x1}, {0x101, 0x0, 0x10000, 0x254}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x240, 0x9, 0x8}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}, @TCA_CGROUP_POLICE={0xb8, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x2, 0x3, 0x1000, 0x0, {0x9, 0x0, 0x0, 0x9, 0x0, 0x7}, {0x5, 0x2, 0x10, 0x4, 0xc6, 0x4}, 0x6, 0x1ff, 0xcac}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0xfffffffa, 0x0, 0x7, {0x2, 0x2, 0x7, 0x6, 0x9, 0x4}, {0x3, 0x0, 0x4, 0x1, 0xfff1, 0x80000001}, 0x1, 0xfffffff8, 0x3ff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x2, 0x33c, 0x3, 0xb6a6, {0x8, 0x2, 0x5, 0x0, 0x1}, {0x7, 0x1, 0x23, 0x8, 0x2, 0x5}, 0x8001, 0x2400, 0x9}}]}, @TCA_CGROUP_POLICE={0x20, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_CGROUP_EMATCHES={0x1c0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x58}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xbe}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_LIST={0x19c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x8001}, {0x4, 0x6, 0x1, 0x7}}}, @TCF_EM_META={0x60, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="ca09b37f5a97d59ae931", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="3b3002cd212b", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0xb, 0x2}, {0x1, 0x8, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xb, 0x5, 0x1}, {0x6, 0x0, 0x1}}}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xf8a, 0x3, 0xa}, {0x1, 0x1, 0xaf, 0x3}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x7f}, {0x1, 0x6, 0x1, "62804e2556a3"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x7}, {0x80000001, 0x7, 0x4, 0x1, 0x3}}}, @TCF_EM_CONTAINER={0xd0, 0x1, 0x0, 0x0, {{0xa, 0x0, 0x6}, "dcac9b355ac6a34dcf3861148126e8beee2eebbe8d43498933404989f5c37363a6e9ae0c0bffd2a0ace9530c78257da5b34a92e5ac5fbba64b019f2a1feb67477fdc934d7d454cf6600a1f03e6b9bf57d12a169d685be6c3e037c0212553ed2783f6dbaed157c956dce233ed98332d3921933277b1cd9e74a3a090a59694fc6cd23b0d96e1088129e536b52eddaa6b988a486a648eeb49da206b3611fe698afa3baeb2afb266a6829c6225bc2d47468c1c51e47ce6b75be4d7c1643efdf4dff0b093"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_ACT={0xfb0, 0x1, [@m_nat={0xa4, 0x18, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x1, 0x8, 0x1, 0x1}, @broadcast, @empty, 0xff000000}}]}, {0x51, 0x6, "80b7ba8ce77cc597ed1ca439e6212bb8084c90d8d6c0d948a00886c4f9508cc9dc542b44eae1130fafd48cea500d3a24cec82c6d9ef03bb0f4d36f9a472344db872762d8402f4e204e0683abe8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_pedit={0xf08, 0x1a, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x9, 0xffff, 0x0, 0x1, 0x3}, 0x34, 0xff, [{0x838, 0x7, 0x10001, 0x0, 0x3, 0x2}, {0x7fff, 0xffff, 0x100, 0x200, 0x9, 0x2c6}]}, [{0x1358, 0x10000, 0xb72, 0x10, 0xffffff00, 0x7ff}, {0x8, 0x7fffffff, 0x5, 0x6b, 0x0, 0xffffff81}, {0x6cd, 0x4, 0x3, 0x8001, 0x8001, 0x4}, {0x8000, 0x0, 0x9, 0x80000001, 0x3, 0x8001}, {0x1000, 0x2, 0x1876, 0x40, 0x81, 0x7a27}, {0xc, 0x1, 0x0, 0x8, 0x7, 0x4ca650a}, {0x1dfead47, 0x5, 0x3, 0x9, 0x4, 0x7f}, {0x6, 0x7, 0xffff, 0xfff, 0xe0, 0x232}, {0x2, 0x3, 0x4, 0x6, 0x4, 0x101}, {0x57, 0x7, 0xff, 0x8, 0x2, 0x5}, {0x10001, 0x1, 0x4, 0x420000, 0x6, 0x7}, {0x80000000, 0x6, 0x61, 0x8, 0x65}, {0xffff, 0x2, 0x3d8, 0x4, 0x3, 0xfffffffd}, {0x3, 0x4, 0x2, 0x3, 0x0, 0x2}, {0x4, 0x5, 0x4ade, 0xaf0, 0x4, 0xfffffffe}, {0xff, 0x2, 0x4, 0x2, 0x2, 0x1}, {0x8, 0x5, 0xee67, 0x6, 0x1, 0x601c}, {0x2dd, 0x3, 0x0, 0x1, 0x6, 0xfffffff9}, {0x80000001, 0x5b83, 0x10001, 0x9, 0x5}, {0x5d3, 0x1, 0x7, 0x7, 0x2, 0x6}, {0x5, 0xad0, 0x4, 0xc, 0x0, 0x401}, {0x8, 0xff, 0x7, 0x9, 0x4, 0x1ff}, {0x8, 0x7, 0x29, 0x1, 0x2, 0xfffffff7}, {0x8, 0x8000, 0x7, 0x0, 0x4}, {0x401, 0x3000000, 0x6, 0x2, 0x8, 0x3}, {0x5, 0x2, 0x5, 0x4, 0x0, 0x2}, {0x3, 0x6, 0x3, 0x29b0, 0x2e, 0x10000}, {0xff, 0x2, 0x4, 0x0, 0xa, 0x3}, {0xffff7610, 0x9, 0x5, 0x101, 0x10, 0xffffffff}, {0x800, 0x6, 0x8a, 0x2, 0x10, 0x5b2}, {0x5, 0x1, 0x9, 0xe, 0xa0, 0x28000}, {0x6, 0x4800, 0x5, 0x6, 0x48, 0x6d}, {0x8, 0x1, 0x4601, 0x53, 0x7ff, 0x1}, {0x4, 0xd4, 0x6, 0x8, 0x9, 0x9}, {0x8, 0xc0, 0x8, 0x2, 0x9f2, 0x7ff}, {0x6, 0x25, 0x7, 0x2, 0x0, 0xf9dd}, {0xff, 0x2, 0x0, 0x80000000, 0x7, 0x8}, {0x8, 0xf, 0x200040, 0x6, 0x6, 0xbec}, {0x0, 0x6, 0x2, 0xffffffff, 0x2, 0x2}, {0x3, 0x6, 0x2, 0x9, 0x9, 0x6}, {0x101, 0x3, 0x5, 0x60000, 0x7f, 0x2}, {0x9, 0x8, 0xb6b5, 0x7fff, 0x5, 0x4}, {0xb, 0xcb2, 0xf2d, 0x100, 0x1, 0x5}, {0x0, 0x0, 0x8, 0x1000, 0x0, 0x7}, {0xffff, 0x6, 0x0, 0xffff, 0x9693, 0x4}, {0x7, 0x4, 0x8, 0x10001, 0x7fffffff, 0x3b}, {0x8, 0xa95, 0x400, 0x3, 0xa4e, 0x6}, {0x4, 0x10002000, 0x1, 0x5, 0x5, 0x7}, {0x5, 0x7ff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x5, 0x4, 0x7, 0x1000}, {0x7fff, 0x5a7b9177, 0x10, 0x1, 0x5ae4, 0x3}, {0x80000001, 0x264, 0x5, 0x6, 0x7, 0xffffff01}, {0x4, 0x9, 0x5f, 0x2, 0x6, 0x7}, {0x2, 0x2d, 0x4, 0x9, 0xf7fc4ec, 0x101}, {0x10001, 0x7f, 0x1ff, 0x7ff, 0xfffffeff, 0x1}, {0x6, 0x40, 0x2, 0xfffe0000, 0xffffffc0, 0x62cb0a6c}, {0x86d, 0x65, 0x80000000, 0x0, 0x2, 0x6}, {0x4, 0x6, 0x30a, 0x8, 0x7ff}, {0x71, 0x5, 0xffffff37, 0x6, 0xfffffeff, 0x7}, {0x5, 0x5926, 0x6, 0x2, 0x1cc, 0x4}, {0x8, 0x8, 0x9, 0x0, 0x3, 0x8}, {0x1, 0x6, 0x7, 0x5, 0x1, 0x7}, {0x842, 0x6, 0x8, 0x0, 0x18f, 0x3}, {0x2, 0xffffffe7, 0x4b, 0x1, 0xbe7b, 0xbe34}, {0x7ff, 0x1, 0x3, 0x9, 0x3, 0x9}, {0x3, 0x100, 0x9, 0x0, 0xd1, 0x3}, {0xffff, 0x1, 0x0, 0x1, 0xfffffffc, 0x9}, {0x9, 0x1, 0x5, 0x9, 0xb, 0x80000001}, {0x297d, 0x8000, 0xa, 0xa2, 0x8, 0x5}, {0x10001, 0x1b9c, 0x4fd, 0x6, 0x6, 0xfffffff8}, {0x8, 0x1, 0x75, 0x8, 0xffff, 0x800}, {0x8, 0x80000001, 0x3, 0x1, 0x72, 0x2}, {0x2, 0x10, 0x40, 0x2, 0x3, 0x8e}, {0x52bc9c57, 0x7, 0x6, 0x2, 0x6, 0x2}, {0xc, 0x7fffffff, 0x7, 0x0, 0x8000, 0x8}, {0xc, 0x8, 0x10002000, 0x0, 0x8, 0x4}, {0x8, 0xa, 0x0, 0x5, 0x7, 0x2}, {0xfffffff8, 0x1, 0xf, 0x4976, 0x0, 0x6}, {0x0, 0xff, 0x3, 0x8, 0x183, 0x360}, {0xcf5, 0x100, 0xc656, 0x3, 0x1, 0xfd03}, {0x2, 0x1, 0x6, 0x5, 0xa00000}, {0x5c0, 0x9077, 0x1, 0x8, 0x5, 0x5}, {0x5, 0x101, 0x1, 0xd, 0x9, 0x9}, {0x10000, 0xfffffff7, 0x81, 0x8, 0x800}, {0xdb, 0x63, 0xe, 0x2, 0x40, 0x7f}, {0x96, 0x8, 0xd9de, 0x1000, 0x7, 0x6}, {0x5eac, 0x6, 0x4, 0xfffffffc, 0x1c00, 0x7fffffff}, {0x4, 0xffff, 0x6, 0x8, 0x3, 0x5}, {0x3, 0xc, 0x6, 0x8, 0x1, 0x6}, {0x81, 0x8, 0x9, 0x1, 0x1, 0x3}, {0x1000, 0x0, 0x3, 0x1, 0x9, 0x6}, {0xdcdb, 0x5, 0x4, 0xe, 0x3, 0x3c27}, {0x0, 0x0, 0x6, 0x1, 0x2, 0x4}, {0x200, 0x8, 0x4, 0x4, 0x4}, {0x3, 0x5, 0x40, 0x6, 0x3, 0x9}, {0x1, 0x80000001, 0x6, 0x4, 0x8, 0x2}, {0x4, 0x6, 0x4, 0x6, 0x5}, {0x9, 0x1d6, 0x0, 0x400, 0xed, 0xffff}, {0x7, 0x2, 0x0, 0x5, 0x6d34, 0x2}, {0xfffffffe, 0x80000000, 0xd7, 0x1, 0x200, 0x7}, {0x5f1f, 0x7, 0x5, 0xfffffffc, 0x1, 0x10000}, {0x1ff, 0x3, 0x1, 0x25a3, 0x9, 0x1098}, {0x9, 0x2, 0x6, 0x79, 0x7, 0x4}, {0xfffffffa, 0x6f, 0x3, 0x2, 0xf, 0xfffffe01}, {0xfffffff8, 0x2, 0xe983, 0x1, 0x2, 0xcd50}, {0x9, 0x4, 0x0, 0x8, 0x31ff}, {0x200, 0x80, 0xecd9, 0x5, 0xe}, {0x7f, 0xfffffbff, 0x3, 0xffff071d, 0x9, 0x6}, {0x5, 0x6, 0x400, 0xa3, 0xfffffffd, 0x5}, {0x100, 0xf5df, 0x4, 0x5, 0x1000, 0x1}, {0x7, 0x2, 0xac, 0x9, 0x6735b468, 0x2}, {0x8, 0x7, 0x5, 0x2, 0x7b, 0x6}, {0x0, 0x7fffffff, 0x2, 0x4, 0x0, 0x7}, {0x5, 0x7f, 0x0, 0x8, 0x4, 0x4}, {0xfff, 0x8, 0x200, 0x8, 0x2, 0x6}, {0x7, 0x1d, 0x0, 0x20000000, 0x60, 0x9}, {0x2, 0x6, 0x9, 0x8, 0x6, 0x5}, {0x22, 0x5, 0x7, 0x3ff, 0x5, 0x5}, {0x2, 0x3, 0x0, 0xfffffc00, 0x10001}, {0x111, 0x6, 0x1, 0x401, 0x5, 0x50000000}, {0x8, 0x8, 0x9, 0x6, 0x4, 0xff}, {0x7ff, 0x5, 0x0, 0x8, 0x8, 0x7f}, {0x400, 0x3f06, 0x7, 0x5, 0x8, 0x1}, {0xfffffffa, 0xffff, 0x2, 0x8, 0x8, 0x7}, {0x4, 0x9, 0x731, 0x8, 0x1, 0x8}, {0x5, 0xffff, 0x81, 0x9, 0x6098, 0x8}, {0x8, 0xfe, 0x4, 0x5, 0x58a8, 0x8}, {0x4, 0x40bcd235, 0x0, 0x9b39, 0x8, 0x7}], [{0x5}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x7, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x1}, {0x6}, {}, {}, {0x3}, {0x4}, {0x2, 0x1}, {0x4}, {0x3}, {}, {0x5}, {0x2}, {}, {0x1, 0x1}, {0x2}, {0x2, 0x9710d3f8d7bc7be5}, {0x0, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x7, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x89, 0x6, "afcba2d5457d0a5e29d289db9b40a425e1f5cd4196b7d42c5b6e319036fbe86195eeed62df55ea43cad73400a6046c98dd250021f366442d35da9513b05669462d86347d7868769b963a7e79be2c8a15e536c8ce7431afd2d1d315862125d3797f2364a66d29994c430b9dbcf172bcfb44a50341097ca904048b3704b68040a88e636019a4"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x410, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xb8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x6, 0x1, 0x1, 0x8, 0x4, 0xffff, 0x5, 0xa, 0x8, 0x3, 0x1, 0x1, 0x5, 0xa49e, 0x5, 0xb, 0x8, 0x7, 0x1, 0x8, 0x8001, 0x7, 0xff, 0x80000001, 0xffff, 0x7, 0x0, 0x1, 0x4, 0x0, 0x9, 0x6, 0x7, 0xa00000, 0x7fff, 0x6, 0x0, 0x7, 0x8, 0x1be8, 0x6, 0x101, 0xe, 0x79, 0x4, 0x8, 0x1, 0x2, 0x9, 0x9, 0x1ff, 0x248, 0x2, 0xad3c, 0x53, 0x2, 0xfffff001, 0x8000, 0x8, 0x1, 0xfffffffd, 0x5, 0x1, 0x4, 0x3b9, 0x7fff, 0x5, 0x3, 0x879ba70, 0x3, 0x7ff, 0x9, 0x8, 0xd1, 0x8, 0x0, 0x4, 0x5, 0xd, 0xffff, 0x10001, 0x6, 0xaf3, 0x7, 0x6, 0x7ff, 0x1, 0x7, 0x9, 0x9, 0x2, 0x6, 0x5, 0x7, 0x2, 0xfffffffc, 0x5, 0x5, 0x4, 0x3, 0x8, 0x0, 0xbb1, 0x8, 0xfffffff7, 0xffffffff, 0x5, 0x1, 0x7, 0x6, 0x5, 0x9, 0x8, 0x8, 0x6, 0x9, 0x4, 0xe, 0x2d, 0xdc4, 0xa76, 0x1, 0xe0b, 0x5, 0x700, 0xffff, 0x3597, 0xb11, 0x0, 0xfffffff9, 0x8, 0x5, 0x5, 0x3, 0xfffffffe, 0xa7e7, 0x2, 0x9, 0x9, 0x7, 0x3, 0xe169, 0x80, 0x80000000, 0x6, 0x0, 0x53f1, 0xc8e, 0x7fff, 0xddb, 0x6, 0xfffffe01, 0x5, 0x256, 0x800, 0x6, 0x1, 0x8, 0x6, 0x1, 0xc2, 0xe, 0x81, 0x44, 0x0, 0x43f, 0x1000, 0x9, 0xb, 0x7, 0x91, 0xe0a, 0x3, 0x0, 0x43, 0x64b, 0xffffffff, 0x5, 0x8, 0x6, 0x800, 0x1, 0x5c4, 0x225, 0x3ff, 0xd280, 0x324, 0x1, 0x4, 0x5, 0x0, 0x66e3, 0xffff, 0x9, 0xffffffff, 0x6, 0x97b3, 0x10001, 0x6a83, 0x1680, 0x100, 0xc, 0x0, 0x7fff, 0x7fff, 0x75d3, 0x7, 0x9, 0x5, 0x5, 0x77, 0x1, 0x3, 0x81, 0x1, 0x8001, 0x3, 0x6, 0x5, 0x9b, 0x7, 0x0, 0x5, 0x17e00000, 0x6, 0x1ff, 0x1, 0x81, 0x4, 0x1, 0xc8f, 0xe0, 0xfffffffb, 0x10001, 0xe, 0x0, 0x89d, 0xb, 0x7, 0xd, 0x200, 0x7, 0x82b, 0xfffffffa, 0x8000, 0x5, 0x6, 0x4, 0x6, 0x2, 0x0, 0x7, 0xafc0, 0x4, 0x8]}]}, @TCA_CGROUP_EMATCHES={0x634, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae}}, @TCA_EMATCH_TREE_LIST={0x248, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xd, 0x7, 0xc}, {{0x4}, {0x4, 0x1}}}}, @TCF_EM_IPT={0x110, 0x3, 0x0, 0x0, {{0x3, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x53, 0x5, "8c2b6af2adea44d6f1ce184871f047912a0bb332cd3857d26f05edb044d4996d57621ceff125bb3955be4a682db491018ef16413796294e146e75f5cf7dc4c104c51f749c256cfaaa677de4bd0a41e"}, @TCA_EM_IPT_MATCH_DATA={0x93, 0x5, "8cf55a4e8eeaf1e3b68c658c5ce09e1e590ac69a83338bbda5c9868de4c2b68f48449fd05b784641137d8c4c33cafb3a5a77b3ef6f582e9fc8cd246e0930144b36caa2baaf9febe1e2fdca4958f1fa386026c75c0dc971d6bcbbaa886ebc8c05264bba61734d645bf8badf82bae5b494ef90753241c08295bea3a7af189bcbb5960bc6a077625a9fa90da6482409fe"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x8}, {0x4, 0x8, 0x5, 0x7, 0x8, 0x1}}}, @TCF_EM_IPT={0xdc, 0x1, 0x0, 0x0, {{0x0, 0x9, 0xe}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xb8, 0x5, "df56d66cd3caf1d4ad8d1a075453308ef564a4ea20e99c551cb08c3912e9d31437b5abdc1f0e04608c0b15ac67f3d004c5ea39a5b2de9d642c69bbbfa39061cbaea7de858daef63d56775dd2079c02b63c796c765d91daf6c8b8ea26f0d254c27476a3e25b686142c0a6d5e75663fa0ba89e67b514ebbf813cbaa494dd2f6d9d332f63c154c7189b45cfdc6d86468ae70b6940760f5a4affc921d46d3a223b5c28ba36a4db8fb0fa3b8f94f4d4acb4251f21ee02"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8000, 0x2, 0x9}, {0x1, 0x5, 0x1, "4d62ab6e1d"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xffff, 0x7, 0xb995}, {{}, {0x1, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x3c8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0x6}, {{0x4, 0x1, 0x1, 0x1}, {0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0xfff}, {0x2, 0x1}}}, @TCF_EM_CONTAINER={0x30, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x40}, "a681c96cdc830c25041d59f2048f95d6c7102102eba1be458370e0c9aa5cbef71ac15f"}}, @TCF_EM_CONTAINER={0x9c, 0x2, 0x0, 0x0, {{0xff, 0x0, 0x7}, "cb1a89b3e604f48f3c86c77ff934f76f51b7423886e2856d7e3298df6aebddcaeca5cbc3ab02e3b15f16a6f9ef292d87c12a75886c49f1ff1affca5ef83792025afb872ec923ac1879252345eb96d4aa8b2cc3195f86be48e86ee8f6bb8c5a894bf1c21c217b909eaa762042c986c491065801afdc5ce0cdc5b486de4db46795ee2ac6fa6fab1eda27087229e0e2"}}, @TCF_EM_IPT={0x104, 0x2, 0x0, 0x0, {{0x1, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_DATA={0xef, 0x5, "e7e68a0ed4dd2a152fa671819a2e906eef1f28f9460a45828d59ea71cac7e8c86a23cb21a635da81196e39b392cc5661e77894fdd45ff7f61888b7f6e94205b9512b0f487fbe477e79567c0469ad4b4d38682df3b0abfcde957f86034bde4504531e2ece4229e3fee5ce1664a9c0e9bb555cb1a6f693d1e9801d1502730645938f0affb8ef10e05ebf1b515af24d7efec4390102a1701b4f02b116bcd3e84865e35bfc737316d68c4e99916796c4b9934d4142c8bab491a6c00546b0b1a1869feaa1c0620dd42df06d114df310cf0257e6880f2ea401f0671eee07d471ff1130b4e79678ef018c724bc4a3"}]}}, @TCF_EM_CONTAINER={0xbc, 0x1, 0x0, 0x0, {{0x0, 0x0, 0x3}, "310ef075d926372a786e707dac0339dda3811428b42224b92e17ad07dd1b29c3e1b6cf9b5908467b1a556f3ff7ef3c567cfbe80690412ca4ae0c6c365396fd98597db1660ff84f04252559255a3a94f789c2863f31070476d1bcce5328a98a3bfbfe51a977464f11932c56084e0617e94d897faf3af2e7b6e6edd8af4fb5358b6999f9a11f01a3324cc80470d4a915ae08fa201ef02176d3e8b2fb54275736676a5506298f6fba4d555b2a722616fc26"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7f, 0x8, 0xffff}, {0x3, 0x4, 0x6}}}, @TCF_EM_CONTAINER={0x6c, 0x3, 0x0, 0x0, {{0x4, 0x0, 0x8}, "43bd1c7a6a319a1e013e69ea15ef849024d1ad9f8f1f50467af3ff3202830505e9baff62e2ee69a90307e27f43f508e223338dd5a9c2627a6f5cfcb87ab9b73341a31938fe7fec5b8e88a4fa2d2f0ab80c5fb39176c942a19cf00d0ce334"}}, @TCF_EM_META={0x98, 0x2, 0x0, 0x0, {{0x6, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="4f222af43cf26b67f7"]}, @TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="b0970943a9eb9d", @TCF_META_TYPE_VAR="675c2c81", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="1a2948d702324500d4", @TCF_META_TYPE_VAR="ff51a9", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x824}, {0x8, 0x8, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xc, 0x1}, {0x6, 0x7, 0x1}}}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="0573fdcb", @TCF_META_TYPE_VAR="c11ae23ca4"]}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="3ebeec"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3ff, 0x7, 0x1}, {0x8000, 0x2, 0x2}}}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="e314cafdc56165348a70"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xeb}, {0x5, 0x80}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x29d0}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.894506646s ago: executing program 0 (id=8126): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xc, 0x8, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000001000000850000000d000000b70000000000000095"], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r0, 0x3e8, 0xe, 0x0, &(0x7f0000001280)="c1df07000000d30a298ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5.851147092s ago: executing program 0 (id=8127): syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902610002010484080000000001020d000005240600010524020006000606"], 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000740)=ANY=[], 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) 5.760032983s ago: executing program 3 (id=8128): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') rmdir(&(0x7f0000000040)='./file1\x00') r0 = creat(&(0x7f0000000440)='./bus\x00', 0xf2) open_by_handle_at(r0, &(0x7f0000000000)=@OVL_FILEID_V1={0x18, 0xf8, {'\x00', {0x0, 0xfb, 0x15, 0x0, 0x5, "a8371f2efe088557001f00"}}}, 0x5f1502) 5.711193498s ago: executing program 3 (id=8129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$packet(0x11, 0x3, 0x300) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000dc0), 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r5, r4, r3, 0x0) 5.669579207s ago: executing program 8 (id=8130): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x20, 0x1411, 0x105, 0x70bd2a, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x40000000000009f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x39000, 0x0) read$FUSE(r7, &(0x7f0000000b00)={0x2020}, 0x2020) pipe(&(0x7f0000002b40)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000002b80)={0x20000000}) read$FUSE(r7, &(0x7f0000002bc0)={0x2020}, 0x2020) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000004c00), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000004c40)={0x8, 0x100008b}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r8, 0x8004f50c, &(0x7f0000004c80)) sched_setscheduler(0x0, 0x1, &(0x7f0000004cc0)=0x7) r10 = syz_open_dev$sndmidi(&(0x7f0000004d00), 0x2, 0x4a102) writev(r10, &(0x7f0000004d40)=[{&(0x7f0000004d80)="94", 0xf000}, {0x0}], 0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004dc0)="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", 0x2000, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000006dc0)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000006e00)={0x0, 0x0, &(0x7f0000006e40), &(0x7f0000006e80), 0xacb, r11}, 0x38) write$binfmt_elf64(r6, &(0x7f0000006ec0)=ANY=[], 0xfffffe3e) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) mq_open(&(0x7f0000006f00)='!selinuxw\x00\x00\x1f\xd0m\xc3\x7f9\xc9\x8f\xbc\xdeY\x0f\x8f\xa3\x1as\xed\v\xe5}(p\xc9-QZ#\xd2\x14\xa5\xef{\x84\xbf@G\x00\xd9\xe9\xbb\x9a\xffC\xf6\xfe\xdc\xe3o\rC?t\xa6\xedR\xdc\x84\x9f@\x02,>\xb1\x94\xae\nB\x9d#\x1dL|G\x02\x0e\x81\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00^6\xc8~\xfdR\xb2\xd2\xa6r~\xf2QL\xd2\x99k\x10J\nP\xf06\x85\xb4\xd5\xaf\xb9K-\xc9\\\xee\xf7\xccn\xffxo\x8dn\xb9c*\xf5Q\x8a\xf1\xd8<\n\x7f\xd2R8\xae\x9d\x88\xa5\xa3\xa5\xe7\x7f\xa2\x83\x9b@2\x94\x7f\x94\x8d\xfc\x8d\xfb\xfb\xc1\xe3\xbaH\xa3\xcd-E_\x8b\x95\xfc\xb1.\xbf\xf8\xca\x15\xcd\x9bT\xc2nR\xb3\x19\xaeTb&\x02d\xd6P\x83!E\xe4${\xa1\x9aI\xb3\xe5E\xe0av}\xf4\xe3\xa1v}\x00\xb2\xe0\x8bo\xea\x15A\x10; \x8c\xa8\xef\xe6$\x1dmU\xe8>\xab0\x9e\xb2\x05\xe1\x86\xc4\xa3\xd3=\x83ZG\x91x}\xe8\x88\x10\x96%\xc2\xe5\x93>\tM\x180\xd7\x8d$@\'\xbap\xc5\xa6\x01Y\xafz\xd6\x04|&\x11\xa2\x7fa\x8d>\xb3\x9b\xc2\x1c\xf8L\xc6\xb0x\x04E\xd5\x1a\x8d\xefD\xaf\x00\x1cAp\x95%U\xec\x0e\x94\va\xf9J,A\xe2\xdff\"d\x8c\xb5\x18\xc9\x96QJ<\xfc\xf92K!G\xbf\xbf', 0x840, 0x224, 0x0) ioctl$TCSETS(r12, 0x4b72, &(0x7f0000007080)={0x5, 0x1ff, 0x10001, 0x20, 0x17, "16ee0500000000000000c000"}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x590, r3, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x554, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x3, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0xd3, "95b7ecfeae6a6de0ff6740468394a69b1d074fd993346e7815820a3a65167aad07636698c1707d973f2fab5b5545d875dbface2d511998df9426306409f7c1d6802b45b492919434942e4ad6c2574d49cd99c185704bfb64bbccd4f54a9cd552ed24f6c53dd6b924c1f7f41690ceaf5642e39d3a96e2e1ffa1de9f3df81216483e38a4d6ee3094c8c28f215eb28a47a1bbfd4c27ffb990f0c92f110bca7b835791aa0c51fa3f0aa2316c5b4eb4421d9f37ced923d6e3d001fa3e245d37c35d8ffb1193836440b11e0403e90767e12aa4a43344"}, {0xdd, 0xf3, "81040087ac3354bcd18be40795015735a27b492e8285ac5c395f258efd6939786811e0b0d683404787f7bffa54ec2d8a263457b072e548ecb5d574bf27dd42916c4e02cd56bc8ab1d8fd6565ab5ec535a1d3307c468a0aaf37794ca58f4a6a6310c529959bc4d64bbd8e934486dc0525016e47cd3132da3c10f9d10d12630dafc8872b24decd1bbd8ed12d739987d9847c8c95c62e530982f9403becd6ace352678f13320444a08a5416dd0c6c5d4c93f8470d6832025be1a9155fc36d026883fa3c0618404ebba47176bb103d1b46ad99beb0aacde3fe3ca14d085fdaaae008417649542b38bf3f0203151b4bbe2375f8bdf0"}, {0xdd, 0xc1, "ae4c8f58776c947784b9e08840290a9ecfbba509a53b2d3b8b767a515c6b88cc6b69a768a6441e79ffa04590fd3004b877a17b5d6c5a98b38ad493f524017a0fa5ab8d134caffd092bda315764d655123906a33f479438896d755524bcfedec6c4cc37b6d1248e313c0b43bfecc4dd33e6edacf610ffd21fa10c3f9882a6bcd5ff7af2716cec41a201b596b0b917758b30b2d3a5b1bd0bc1ce7b90c8ee6c6b6262c158abd87d4c2dbb48fd920fa0009369832f00a3a185981c60e9a7bfbe8d5a8a"}, {0xdd, 0xd7, "11ab39be76e4728d6d3dcd3cfa1db72940a5770094fcb88f6b50ef02a508ee3f0f7d96ae674112558b859f187fd38e8f71ff251780992d026e3d6abb076f9644e6b255e2a004759a9b8f085548c594ce901c4283a71981a2186287bd28165c6007f1622df41b6744816e765247eec13812b29619b9094377fd587eb9fb9441b32c467d6f975ad58d33485fb2d3033a8925df326249ddf9355b4dddbcf464aa47728c61f366ee7955ab6831328395571bbd6725e567df868cee6e4a8990204dd2850d680c980a1e2048592afc1d8672b16bc0d96f2d27ea"}, {0xdd, 0xd7, "fdbe77e5884765d99b4e533bc993954429f6133abfbe1084dc12625d1c2d0e552b0b43a0fc7ca633eceffb2c26123c5b8264a54707947498883fe47852ba5a9f70a7790b168937530985b05d83e4b4491e0abf34da1bb2a9046f32e4cea71bb9d8a89a7814c97c48ab086ae829403472810b465b867351530fa275984c8202ce926337f1dbf492fe1faa06a25687bb58b14261998d1771440da9db8eda18ee4f51748ee93cc998ed5c7622fa808ccb28913ef8fd9856cf7804a1e59017c559907d0efe625bb2f5b957b71b2a653a5e66ebad78996d5083"}, {0xdd, 0x10, "6ae040d6c033359d9c2afdfe60dce024"}, {0xdd, 0xd9, "84bdf227c12a0b7dba2c1ec1f3e02bff4221c268cfa7aa99be6169ca054a5e7f4ec4b63e36c41a24cfdc9e6208c3a85f8591740bedc24bf090e29fb6191da61d08f2ec8911f9ef970c7b78538efc3bc4a8b9f83081df98b87380b63a89f57a280cd2cf2aa05a4cb1c8474315d8004125725020ab80cb18dfb399ffd7c0b73076dd481c4d412bca78b76b01e0c769548fe8fec2cc0b84468b971e8b128686e826bac0cf0b8d80ee1b1c9a0afeb3a7be32c1d8aa5b574b4fd89c9407f275ebede3669e8e67d1481d78aec8be05dd104ffceec935e498ae8e427f"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x5, 0x91, 'n'}]]}, 0x590}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 5.44764887s ago: executing program 2 (id=8131): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0xffff789e, 0x3, 0x3, 0x7, 0x5, "0c4194371b7aa8033a5e000000000000000080", 0xb, 0x2}) 5.446055973s ago: executing program 2 (id=8132): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0x2, 0xa, 0x300) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x28, 0x81, 0xfffff034}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) fsmount(0xffffffffffffffff, 0x0, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f00000000c0)) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000dc0)="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", 0x564, r4) keyctl$KEYCTL_MOVE(0x1e, r5, r4, r3, 0x0) 4.716389077s ago: executing program 3 (id=8133): mremap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff1000/0x4000)=nil) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.29908616s ago: executing program 2 (id=8134): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0x2, 0xa, 0x300) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x28, 0x81, 0xfffff034}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) fsmount(0xffffffffffffffff, 0x0, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f00000000c0)) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000dc0)="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", 0x564, r4) keyctl$KEYCTL_MOVE(0x1e, r5, r4, r3, 0x0) 3.789233483s ago: executing program 3 (id=8135): socket$inet6(0xa, 0x3, 0xff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x549, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000100)=0x79, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240467bc, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) write(r2, &(0x7f0000000240)="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", 0x2e7) sendto$inet(r2, &(0x7f00000005c0)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d", 0x96, 0x10000485, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000680)=0x474c, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000700), 0x800001d, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000780)={0x2, 0x0, @local}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x28008841) 2.697257466s ago: executing program 2 (id=8136): syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902610002010484080000000001020d000005240600010524020006000606"], 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff1107010300"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.67555106s ago: executing program 0 (id=8137): r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x48}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), 0xffffffffffffffff) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)={'/dev/md', @num=0x0}, 0x4000, 0x0) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000000c0)={0x9, {0x1, 0x1}, 0x0, 0x40000}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xbb9cbcd1c488718a}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x9, 0x7, 0x1ff, 0x9}}}, ["", "", "", "", "", "", "", ""]}, 0x30}}, 0x24044080) 2.640230725s ago: executing program 1 (id=8138): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ftruncate(r1, 0x7) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x40, &(0x7f0000000540)={[{@redirect_dir_off}, {@userxattr}]}) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/lo/dev_id\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000140)='./sys/class/net/lo/dev_id\x00', r2, 0x4000, r2}, 0x18) openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1000000000000244) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000142b0000000000000000000000ffffac1414bbfe80f2ffffff000000000000000000aa3a000200"], 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) listxattr(&(0x7f00000003c0)='./sys\x00', &(0x7f0000000580)=""/106, 0x6a) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r4, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f0000000180)='\f', 0x1}], 0x1) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) 2.613843414s ago: executing program 8 (id=8139): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ftruncate(r1, 0x7) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x40, &(0x7f0000000540)={[{@redirect_dir_off}, {@userxattr}]}) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/lo/dev_id\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000140)='./sys/class/net/lo/dev_id\x00', r2, 0x4000, r2}, 0x18) openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1000000000000244) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000142b0000000000000000000000ffffac1414bbfe80f2ffffff000000000000000000aa3a000200"], 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) listxattr(&(0x7f00000003c0)='./sys\x00', &(0x7f0000000580)=""/106, 0x6a) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r4, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) writev(r5, &(0x7f0000001940)=[{&(0x7f0000000180)='\f', 0x1}], 0x1) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) 70.543965ms ago: executing program 1 (id=8140): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="390242000200000005f8000000000000000000000000000000000000000000000000000000000300000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007d351f5bde054000000000187b8200b500fb2a595fcb14034354b9", @ANYRES32=0x0, @ANYRES32=0x0], 0x239) 65.054498ms ago: executing program 8 (id=8141): r0 = open(&(0x7f0000000000)='./file0\x00', 0x280, 0x90) ioctl$MEMGETOOBSEL(r0, 0x80c84d0a, &(0x7f0000019500)) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xc6902, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000850) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r3 = getpgrp(0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[]) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r6, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x47, &(0x7f0000019380)=0x7) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000193c0)={'netdevsim0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r10, &(0x7f0000019400)={0x0, 0x0, &(0x7f0000019440)={&(0x7f0000019480)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0100080000e8ffff130012800b0001006d61637365630000440008bea12c0500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x44}}, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x19, 0x0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x20000005) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 0s ago: executing program 0 (id=8142): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)={0x0, 0x6, 0x4, "2a61129d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): -allocate USB transfer buffers for DVB. [ 2987.138009][T27692] em28xx 3-1:7.253: Registering input extension [ 2987.138186][T17681] em28xx 3-1:7.253: Closing input extension [ 2988.179991][T27655] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 2988.194989][T17681] em28xx: Freeing device [ 2988.330386][T27655] usb 9-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 2988.331407][T27655] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2988.331456][T27655] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2988.331493][T27655] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2988.997699][ T2317] FAULT_INJECTION: forcing a failure. [ 2988.997699][ T2317] name failslab, interval 1, probability 0, space 0, times 0 [ 2988.997734][ T2317] CPU: 1 UID: 0 PID: 2317 Comm: syz.2.7934 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 2988.997775][ T2317] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 2988.997784][ T2317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2988.997795][ T2317] Call Trace: [ 2988.997802][ T2317] [ 2988.997814][ T2317] dump_stack_lvl+0x100/0x190 [ 2988.997846][ T2317] should_fail_ex.cold+0x5/0xa [ 2988.997874][ T2317] should_failslab+0xc2/0x120 [ 2988.997901][ T2317] __kmalloc_noprof+0xfc/0x840 [ 2988.997923][ T2317] ? rcu_is_watching+0x13/0xc0 [ 2988.997942][ T2317] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2988.997968][ T2317] tomoyo_realpath_from_path+0xb6/0x690 [ 2988.997995][ T2317] tomoyo_path_number_perm+0x23c/0x580 [ 2988.998021][ T2317] ? tomoyo_path_number_perm+0x22e/0x580 [ 2988.998050][ T2317] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2988.998088][ T2317] ? __lock_acquire+0x5c0/0x1f40 [ 2988.998122][ T2317] ? __fget_files+0x34/0x3d0 [ 2988.998150][ T2317] ? find_held_lock+0x2b/0x80 [ 2988.998167][ T2317] ? hook_file_ioctl_common+0x140/0x440 [ 2988.998196][ T2317] ? __fget_files+0x21f/0x3d0 [ 2988.998226][ T2317] security_file_ioctl+0xd3/0x230 [ 2988.998256][ T2317] __x64_sys_ioctl+0xb7/0x210 [ 2988.998281][ T2317] do_syscall_64+0x123/0x790 [ 2988.998309][ T2317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2988.998329][ T2317] RIP: 0033:0x7f489239f559 [ 2988.998345][ T2317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2988.998362][ T2317] RSP: 002b:00007f48932b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2988.998380][ T2317] RAX: ffffffffffffffda RBX: 00007f4892625fa0 RCX: 00007f489239f559 [ 2988.998393][ T2317] RDX: 0000200000000340 RSI: 00000000c048ae65 RDI: 0000000000000004 [ 2988.998404][ T2317] RBP: 00007f48932b3090 R08: 0000000000000000 R09: 0000000000000000 [ 2988.998416][ T2317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2988.998427][ T2317] R13: 00007f4892626038 R14: 00007f4892625fa0 R15: 00007fff6fa8eb78 [ 2988.998455][ T2317] [ 2989.089783][ T2317] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2989.559549][T17681] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2989.589829][ T629] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2989.715216][T17681] usb 4-1: Using ep0 maxpacket: 32 [ 2989.717413][T17681] usb 4-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2989.738894][T17681] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 2989.738923][T17681] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2989.738940][T17681] usb 4-1: config 0 has no interface number 0 [ 2989.738975][T17681] usb 4-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2989.739000][T17681] usb 4-1: config 0 interface 184 has no altsetting 0 [ 2989.741509][T17681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2989.741531][T17681] usb 4-1: Product: syz [ 2989.741544][T17681] usb 4-1: Manufacturer: syz [ 2989.741557][T17681] usb 4-1: SerialNumber: syz [ 2989.757205][T17681] usb 4-1: config 0 descriptor?? [ 2989.760691][T17681] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2989.760843][T17681] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 2989.807201][ T629] usb 3-1: New USB device found: idVendor=0a99, idProduct=0001, bcdDevice=0.00 [ 2989.843086][ T629] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2989.858534][ T629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 2989.858583][ T629] usb 3-1: Product: syz [ 2989.858599][ T629] usb 3-1: Manufacturer: syz [ 2989.884461][ T629] navman 3-1:1.0: navman converter detected [ 2989.887807][ T629] usb 3-1: navman converter now attached to ttyUSB0 [ 2990.002584][T27655] cxacru_cm: 238 callbacks suppressed [ 2990.002602][T27655] cxacru 9-1:1.0: send of cm 0x90 failed (-71) [ 2990.002629][T27655] cxacru 9-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 2990.002850][T27655] cxacru 9-1:1.0: probe with driver cxacru failed with error -22 [ 2990.037314][T27655] usb 9-1: USB disconnect, device number 90 [ 2990.394600][ T2332] FAULT_INJECTION: forcing a failure. [ 2990.394600][ T2332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2990.394624][ T2332] CPU: 1 UID: 0 PID: 2332 Comm: syz.8.7940 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 2990.394640][ T2332] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 2990.394645][ T2332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2990.394651][ T2332] Call Trace: [ 2990.394655][ T2332] [ 2990.394660][ T2332] dump_stack_lvl+0x100/0x190 [ 2990.394680][ T2332] should_fail_ex.cold+0x5/0xa [ 2990.394697][ T2332] _copy_from_user+0x2e/0xd0 [ 2990.394712][ T2332] copy_msghdr_from_user+0x9f/0x4c0 [ 2990.394728][ T2332] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2990.394746][ T2332] ? __lock_acquire+0x5c0/0x1f40 [ 2990.394763][ T2332] ___sys_recvmsg+0xdd/0x1a0 [ 2990.394778][ T2332] ? __pfx____sys_recvmsg+0x10/0x10 [ 2990.394792][ T2332] ? lock_acquire+0x1d1/0x380 [ 2990.394816][ T2332] do_recvmmsg+0x2f3/0x750 [ 2990.394837][ T2332] ? __pfx_do_recvmmsg+0x10/0x10 [ 2990.394852][ T2332] ? lock_acquire+0x1d1/0x380 [ 2990.394867][ T2332] ? __mutex_unlock_slowpath+0x35d/0x930 [ 2990.394887][ T2332] ? __fget_files+0x21f/0x3d0 [ 2990.394906][ T2332] __x64_sys_recvmmsg+0x22a/0x280 [ 2990.394919][ T2332] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2990.394934][ T2332] do_syscall_64+0x123/0x790 [ 2990.394951][ T2332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2990.394963][ T2332] RIP: 0033:0x7f7b15b9f559 [ 2990.394973][ T2332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2990.394983][ T2332] RSP: 002b:00007f7b16a96028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2990.394995][ T2332] RAX: ffffffffffffffda RBX: 00007f7b15e25fa0 RCX: 00007f7b15b9f559 [ 2990.395002][ T2332] RDX: 0000000000000700 RSI: 0000200000000740 RDI: 0000000000000004 [ 2990.395009][ T2332] RBP: 00007f7b16a96090 R08: 0000000000000000 R09: 0000000000000000 [ 2990.395015][ T2332] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 2990.395022][ T2332] R13: 00007f7b15e26038 R14: 00007f7b15e25fa0 R15: 00007ffebf082118 [ 2990.395037][ T2332] [ 2992.346881][ T2354] FAULT_INJECTION: forcing a failure. [ 2992.346881][ T2354] name failslab, interval 1, probability 0, space 0, times 0 [ 2992.346914][ T2354] CPU: 0 UID: 0 PID: 2354 Comm: syz.8.7945 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 2992.346940][ T2354] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 2992.346948][ T2354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2992.346959][ T2354] Call Trace: [ 2992.346966][ T2354] [ 2992.346974][ T2354] dump_stack_lvl+0x100/0x190 [ 2992.347005][ T2354] should_fail_ex.cold+0x5/0xa [ 2992.347033][ T2354] should_failslab+0xc2/0x120 [ 2992.347060][ T2354] __kmalloc_noprof+0xfc/0x840 [ 2992.347081][ T2354] ? rcu_is_watching+0x13/0xc0 [ 2992.347099][ T2354] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2992.347126][ T2354] tomoyo_realpath_from_path+0xb6/0x690 [ 2992.347152][ T2354] tomoyo_path_perm+0x276/0x460 [ 2992.347178][ T2354] ? tomoyo_path_perm+0x262/0x460 [ 2992.347206][ T2354] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 2992.347234][ T2354] ? filename_lookup+0x3bb/0x590 [ 2992.347283][ T2354] ? __might_fault+0xc5/0x140 [ 2992.347312][ T2354] ? find_held_lock+0x2b/0x80 [ 2992.347330][ T2354] ? __might_fault+0xc5/0x140 [ 2992.347356][ T2354] ? __might_fault+0xc5/0x140 [ 2992.347385][ T2354] security_inode_getattr+0x116/0x280 [ 2992.347414][ T2354] vfs_statx+0x11f/0x3f0 [ 2992.347434][ T2354] ? __pfx_vfs_statx+0x10/0x10 [ 2992.347454][ T2354] ? do_getname+0x191/0x390 [ 2992.347476][ T2354] vfs_fstatat+0x77/0xe0 [ 2992.347495][ T2354] __do_sys_newfstatat+0x9d/0x120 [ 2992.347514][ T2354] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 2992.347557][ T2354] do_syscall_64+0x123/0x790 [ 2992.347587][ T2354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2992.347606][ T2354] RIP: 0033:0x7f7b15b9f559 [ 2992.347621][ T2354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2992.347637][ T2354] RSP: 002b:00007f7b16a96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 2992.347654][ T2354] RAX: ffffffffffffffda RBX: 00007f7b15e25fa0 RCX: 00007f7b15b9f559 [ 2992.347665][ T2354] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 2992.347676][ T2354] RBP: 00007f7b15c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 2992.347686][ T2354] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 2992.347696][ T2354] R13: 00007f7b15e26038 R14: 00007f7b15e25fa0 R15: 00007ffebf082118 [ 2992.347721][ T2354] [ 2992.350520][ T2354] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2992.629678][T15949] usb 4-1: USB disconnect, device number 89 [ 2992.712862][T17681] usb 3-1: USB disconnect, device number 18 [ 2992.724935][T17681] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 2992.744197][T17681] navman 3-1:1.0: device disconnected [ 2993.042465][ T2366] FAULT_INJECTION: forcing a failure. [ 2993.042465][ T2366] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2993.042506][ T2366] CPU: 0 UID: 0 PID: 2366 Comm: syz.7.7948 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 2993.042537][ T2366] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 2993.042547][ T2366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2993.042559][ T2366] Call Trace: [ 2993.042567][ T2366] [ 2993.042576][ T2366] dump_stack_lvl+0x100/0x190 [ 2993.042610][ T2366] should_fail_ex.cold+0x5/0xa [ 2993.042640][ T2366] get_futex_key+0x1c9/0x13e0 [ 2993.042676][ T2366] ? __pfx_get_futex_key+0x10/0x10 [ 2993.042704][ T2366] ? wakeup_preempt_fair+0x4fc/0xf60 [ 2993.042735][ T2366] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 2993.042771][ T2366] futex_wait_setup+0x91/0x540 [ 2993.042802][ T2366] __futex_wait+0x19f/0x360 [ 2993.042829][ T2366] ? __pfx___futex_wait+0x10/0x10 [ 2993.042852][ T2366] ? __pfx_try_to_wake_up+0x10/0x10 [ 2993.042876][ T2366] ? futex_hash+0x311/0x400 [ 2993.042915][ T2366] ? __pfx_futex_wake_mark+0x10/0x10 [ 2993.042945][ T2366] ? find_held_lock+0x2b/0x80 [ 2993.042965][ T2366] ? futex_wake+0x4ea/0x5e0 [ 2993.042996][ T2366] futex_wait+0xe6/0x370 [ 2993.043023][ T2366] ? __pfx_futex_wait+0x10/0x10 [ 2993.043055][ T2366] ? rcu_read_lock_any_held+0x6a/0x90 [ 2993.043077][ T2366] ? find_held_lock+0x2b/0x80 [ 2993.043096][ T2366] ? ksys_write+0x190/0x250 [ 2993.043119][ T2366] ? ksys_write+0x190/0x250 [ 2993.043146][ T2366] do_futex+0x265/0x440 [ 2993.043167][ T2366] ? __pfx_do_futex+0x10/0x10 [ 2993.043189][ T2366] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2993.043223][ T2366] __x64_sys_futex+0x34f/0x4d0 [ 2993.043245][ T2366] ? fput+0x7c/0x100 [ 2993.043273][ T2366] ? __pfx___x64_sys_futex+0x10/0x10 [ 2993.043291][ T2366] ? ksys_write+0x1ac/0x250 [ 2993.043313][ T2366] ? __pfx_ksys_write+0x10/0x10 [ 2993.043344][ T2366] do_syscall_64+0x123/0x790 [ 2993.043375][ T2366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2993.043395][ T2366] RIP: 0033:0x7f4eb679f559 [ 2993.043412][ T2366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2993.043430][ T2366] RSP: 002b:00007f4eb49ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2993.043449][ T2366] RAX: ffffffffffffffda RBX: 00007f4eb6a25fa8 RCX: 00007f4eb679f559 [ 2993.043462][ T2366] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4eb6a25fa8 [ 2993.043474][ T2366] RBP: 00007f4eb6a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2993.043485][ T2366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2993.043497][ T2366] R13: 00007f4eb6a26038 R14: 00007ffd844733e0 R15: 00007ffd844734c8 [ 2993.043524][ T2366] [ 2993.074515][T15949] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2993.220983][T15949] usb 4-1: Using ep0 maxpacket: 32 [ 2993.250081][T15949] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2993.250121][T15949] usb 4-1: New USB device found: idVendor=0ccd, idProduct=005e, bcdDevice=12.de [ 2993.297400][T15949] usb 4-1: config 7 has an invalid interface number: 253 but max is 0 [ 2993.297426][T15949] usb 4-1: config 7 has no interface number 0 [ 2993.381360][T15949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2993.381377][T15949] usb 4-1: Product: syz [ 2993.381390][T15949] usb 4-1: Manufacturer: syz [ 2993.381398][T15949] usb 4-1: SerialNumber: syz [ 2993.446091][ T1222] overlayfs: failed lookup in lower (newroot/50, name='bus', err=-40): overlapping layers [ 2993.446195][ T1222] overlayfs: failed lookup in lower (newroot/50, name='bus', err=-40): overlapping layers [ 2993.572610][ T2371] lo speed is unknown, defaulting to 1000 [ 2993.572665][ T2371] lo speed is unknown, defaulting to 1000 [ 2993.573185][ T2371] lo speed is unknown, defaulting to 1000 [ 2993.573944][ T2371] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 2993.573977][ T2371] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 2993.574017][ T2371] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 2993.667462][ T2371] lo speed is unknown, defaulting to 1000 [ 2993.675845][ T2371] lo speed is unknown, defaulting to 1000 [ 2993.678681][ T2371] lo speed is unknown, defaulting to 1000 [ 2993.693520][ T2371] lo speed is unknown, defaulting to 1000 [ 2993.694792][ T2371] lo speed is unknown, defaulting to 1000 [ 2993.695938][ T2371] lo speed is unknown, defaulting to 1000 [ 2993.697689][ T2371] lo speed is unknown, defaulting to 1000 [ 2993.710954][ T2371] lo speed is unknown, defaulting to 1000 [ 2993.711923][ T2371] lo speed is unknown, defaulting to 1000 [ 2993.738067][ T2371] lo speed is unknown, defaulting to 1000 [ 2994.422452][T15949] em28xx 4-1:7.253: New device syz syz @ 480 Mbps (0ccd:005e, interface 253, class 253) [ 2994.422473][T15949] em28xx 4-1:7.253: Video interface 253 found: [ 2994.422483][T15949] em28xx 4-1:7.253: DVB interface 253 found: [ 2995.030612][T15949] em28xx 4-1:7.253: unknown em28xx chip ID (0) [ 2995.069784][T18227] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2995.347483][ T2385] FAULT_INJECTION: forcing a failure. [ 2995.347483][ T2385] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2995.347537][ T2385] CPU: 0 UID: 0 PID: 2385 Comm: syz.0.7956 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 2995.347563][ T2385] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 2995.347570][ T2385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2995.347580][ T2385] Call Trace: [ 2995.347588][ T2385] [ 2995.347596][ T2385] dump_stack_lvl+0x100/0x190 [ 2995.347629][ T2385] should_fail_ex.cold+0x5/0xa [ 2995.347656][ T2385] ? prepare_alloc_pages+0x16d/0x5b0 [ 2995.347684][ T2385] should_fail_alloc_page+0xeb/0x140 [ 2995.347712][ T2385] prepare_alloc_pages+0x1f0/0x5b0 [ 2995.347742][ T2385] __alloc_frozen_pages_noprof+0x1ee/0x3190 [ 2995.347765][ T2385] ? is_bpf_text_address+0x8a/0x1a0 [ 2995.347785][ T2385] ? is_bpf_text_address+0x8a/0x1a0 [ 2995.347804][ T2385] ? bpf_ksym_find+0x128/0x1c0 [ 2995.347836][ T2385] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2995.347862][ T2385] ? is_bpf_text_address+0x94/0x1a0 [ 2995.347881][ T2385] ? kernel_text_address+0x8d/0x100 [ 2995.347900][ T2385] ? __kernel_text_address+0xd/0x30 [ 2995.347918][ T2385] ? unwind_get_return_address+0x59/0xa0 [ 2995.347947][ T2385] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2995.347968][ T2385] ? __lock_acquire+0x5c0/0x1f40 [ 2995.347998][ T2385] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 2995.348030][ T2385] ? look_up_lock_class+0x64/0x120 [ 2995.348058][ T2385] ? register_lock_class+0x3f/0x7b0 [ 2995.348084][ T2385] ? ima_match_policy+0x8b8/0x23e0 [ 2995.348112][ T2385] ? __lock_acquire+0x5c0/0x1f40 [ 2995.348135][ T2385] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2995.348164][ T2385] ? policy_nodemask+0xed/0x4f0 [ 2995.348193][ T2385] alloc_pages_mpol+0x201/0x560 [ 2995.348221][ T2385] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2995.348257][ T2385] folio_alloc_mpol_noprof+0x36/0x260 [ 2995.348278][ T2385] shmem_alloc_folio+0x135/0x160 [ 2995.348303][ T2385] shmem_alloc_and_add_folio+0x371/0xd40 [ 2995.348335][ T2385] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2995.348364][ T2385] ? shmem_allowable_huge_orders+0x1d7/0x470 [ 2995.348397][ T2385] shmem_get_folio_gfp+0x758/0x1af0 [ 2995.348429][ T2385] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 2995.348458][ T2385] ? __lock_acquire+0x5c0/0x1f40 [ 2995.348482][ T2385] shmem_write_begin+0x1a4/0x420 [ 2995.348509][ T2385] ? __pfx_shmem_write_begin+0x10/0x10 [ 2995.348533][ T2385] ? reacquire_held_locks+0xdd/0x1f0 [ 2995.348556][ T2385] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 2995.348590][ T2385] generic_perform_write+0x292/0xa40 [ 2995.348612][ T2385] ? __mark_inode_dirty+0x557/0x16e0 [ 2995.348643][ T2385] ? __pfx_generic_perform_write+0x10/0x10 [ 2995.348667][ T2385] ? mnt_put_write_access_file+0x4e/0x100 [ 2995.348696][ T2385] ? file_update_time_flags+0x38c/0x520 [ 2995.348722][ T2385] shmem_file_write_iter+0x10e/0x140 [ 2995.348742][ T2385] do_iter_readv_writev+0x6f7/0x930 [ 2995.348767][ T2385] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2995.348788][ T2385] ? lock_acquire+0x1d1/0x380 [ 2995.348822][ T2385] vfs_writev+0x360/0xdd0 [ 2995.348851][ T2385] ? __lock_acquire+0x5c0/0x1f40 [ 2995.348877][ T2385] ? __pfx_vfs_writev+0x10/0x10 [ 2995.348897][ T2385] ? find_held_lock+0x2b/0x80 [ 2995.348920][ T2385] ? lock_acquire+0x1d1/0x380 [ 2995.348942][ T2385] ? __fget_files+0x34/0x3d0 [ 2995.348978][ T2385] ? __fget_files+0x21f/0x3d0 [ 2995.349012][ T2385] ? do_pwritev+0x1ac/0x270 [ 2995.349031][ T2385] do_pwritev+0x1ac/0x270 [ 2995.349051][ T2385] ? __pfx_do_pwritev+0x10/0x10 [ 2995.349071][ T2385] ? ksys_write+0x1ac/0x250 [ 2995.349089][ T2385] ? __pfx_ksys_write+0x10/0x10 [ 2995.349112][ T2385] __x64_sys_pwritev2+0xef/0x160 [ 2995.349138][ T2385] do_syscall_64+0x123/0x790 [ 2995.349164][ T2385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2995.349183][ T2385] RIP: 0033:0x7fe9a519f559 [ 2995.349199][ T2385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2995.349216][ T2385] RSP: 002b:00007fe9a5f83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 2995.349235][ T2385] RAX: ffffffffffffffda RBX: 00007fe9a5425fa0 RCX: 00007fe9a519f559 [ 2995.349248][ T2385] RDX: 0000000000000001 RSI: 0000200000000c40 RDI: 0000000000000003 [ 2995.349259][ T2385] RBP: 00007fe9a5f83090 R08: 0000000000000020 R09: 0000000000000020 [ 2995.349269][ T2385] R10: 0000000000007a00 R11: 0000000000000246 R12: 0000000000000001 [ 2995.349281][ T2385] R13: 00007fe9a5426038 R14: 00007fe9a5425fa0 R15: 00007fff96af1ad8 [ 2995.349308][ T2385] [ 2995.886563][T18227] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2995.993121][ T2388] FAULT_INJECTION: forcing a failure. [ 2995.993121][ T2388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2995.993153][ T2388] CPU: 0 UID: 0 PID: 2388 Comm: syz.2.7959 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 2995.993180][ T2388] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 2995.993191][ T2388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2995.993203][ T2388] Call Trace: [ 2995.993210][ T2388] [ 2995.993218][ T2388] dump_stack_lvl+0x100/0x190 [ 2995.993251][ T2388] should_fail_ex.cold+0x5/0xa [ 2995.993278][ T2388] _copy_from_user+0x2e/0xd0 [ 2995.993302][ T2388] __sys_bpf+0x2f5/0x4b60 [ 2995.993341][ T2388] ? __pfx___sys_bpf+0x10/0x10 [ 2995.993367][ T2388] ? find_held_lock+0x2b/0x80 [ 2995.993385][ T2388] ? get_pid_task+0xfc/0x250 [ 2995.993411][ T2388] ? get_pid_task+0xfc/0x250 [ 2995.993444][ T2388] ? find_held_lock+0x2b/0x80 [ 2995.993468][ T2388] ? rcu_read_lock_any_held+0x6a/0x90 [ 2995.993488][ T2388] ? find_held_lock+0x2b/0x80 [ 2995.993505][ T2388] ? ksys_write+0x190/0x250 [ 2995.993528][ T2388] ? ksys_write+0x190/0x250 [ 2995.993549][ T2388] ? lock_acquire+0x1d1/0x380 [ 2995.993589][ T2388] ? fput+0x7c/0x100 [ 2995.993616][ T2388] ? ksys_write+0x1ac/0x250 [ 2995.993641][ T2388] ? __x64_sys_bpf+0xce/0x140 [ 2995.993666][ T2388] __x64_sys_bpf+0xce/0x140 [ 2995.993693][ T2388] ? do_syscall_64+0xae/0x790 [ 2995.993721][ T2388] do_syscall_64+0x123/0x790 [ 2995.993750][ T2388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2995.993769][ T2388] RIP: 0033:0x7f489239f559 [ 2995.993785][ T2388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2995.993802][ T2388] RSP: 002b:00007f4893292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2995.993821][ T2388] RAX: ffffffffffffffda RBX: 00007f4892626090 RCX: 00007f489239f559 [ 2995.993832][ T2388] RDX: 00000000000000a5 RSI: 0000200000003900 RDI: 0000000000000005 [ 2995.993844][ T2388] RBP: 00007f4893292090 R08: 0000000000000000 R09: 0000000000000000 [ 2995.993855][ T2388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2995.993865][ T2388] R13: 00007f4892626128 R14: 00007f4892626090 R15: 00007fff6fa8eb78 [ 2995.993889][ T2388] [ 2996.268054][T31860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2996.294813][T31860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2996.295439][ T2391] FAULT_INJECTION: forcing a failure. [ 2996.295439][ T2391] name failslab, interval 1, probability 0, space 0, times 0 [ 2996.295463][ T2391] CPU: 1 UID: 0 PID: 2391 Comm: syz.0.7958 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 2996.295485][ T2391] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 2996.295490][ T2391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2996.295499][ T2391] Call Trace: [ 2996.295505][ T2391] [ 2996.295510][ T2391] dump_stack_lvl+0x100/0x190 [ 2996.295538][ T2391] should_fail_ex.cold+0x5/0xa [ 2996.295560][ T2391] should_failslab+0xc2/0x120 [ 2996.295581][ T2391] __kmalloc_noprof+0xfc/0x840 [ 2996.295598][ T2391] ? rcu_is_watching+0x13/0xc0 [ 2996.295613][ T2391] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2996.295634][ T2391] tomoyo_realpath_from_path+0xb6/0x690 [ 2996.295654][ T2391] tomoyo_path_number_perm+0x23c/0x580 [ 2996.295675][ T2391] ? tomoyo_path_number_perm+0x22e/0x580 [ 2996.295698][ T2391] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2996.295728][ T2391] ? __lock_acquire+0x5c0/0x1f40 [ 2996.295756][ T2391] ? __fget_files+0x34/0x3d0 [ 2996.295778][ T2391] ? find_held_lock+0x2b/0x80 [ 2996.295792][ T2391] ? hook_file_ioctl_common+0x140/0x440 [ 2996.295814][ T2391] ? __fget_files+0x21f/0x3d0 [ 2996.295847][ T2391] security_file_ioctl+0xd3/0x230 [ 2996.295871][ T2391] __x64_sys_ioctl+0xb7/0x210 [ 2996.295891][ T2391] do_syscall_64+0x123/0x790 [ 2996.295915][ T2391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2996.295932][ T2391] RIP: 0033:0x7fe9a519f559 [ 2996.295945][ T2391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2996.295958][ T2391] RSP: 002b:00007fe9a5f83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2996.295974][ T2391] RAX: ffffffffffffffda RBX: 00007fe9a5425fa0 RCX: 00007fe9a519f559 [ 2996.295984][ T2391] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000004 [ 2996.295993][ T2391] RBP: 00007fe9a5f83090 R08: 0000000000000000 R09: 0000000000000000 [ 2996.296002][ T2391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2996.296011][ T2391] R13: 00007fe9a5426038 R14: 00007fe9a5425fa0 R15: 00007fff96af1ad8 [ 2996.296033][ T2391] [ 2996.296039][ T2391] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2996.296729][T31860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2996.299442][T31860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2996.349633][T31860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2996.467597][T15949] em28xx 4-1:7.253: failed to get i2c transfer status from bridge register (error=-5) [ 2996.467626][T15949] em28xx 4-1:7.253: board has no eeprom [ 2996.496932][T18227] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2996.560452][T15949] em28xx 4-1:7.253: Identified as Terratec Cinergy Hybrid T USB XS (em2882) (card=55) [ 2996.560505][T15949] em28xx 4-1:7.253: analog set to bulk mode. [ 2996.560518][T15949] em28xx 4-1:7.253: dvb set to bulk mode. [ 2996.560944][T27692] em28xx 4-1:7.253: Registering V4L2 extension [ 2996.645180][T15949] usb 4-1: USB disconnect, device number 90 [ 2996.655801][T15949] em28xx 4-1:7.253: Disconnecting em28xx [ 2996.698151][ T2396] overlayfs: conflicting options: userxattr,redirect_dir=on [ 2997.727592][T18227] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2997.761022][T27692] em28xx 4-1:7.253: Config register raw data: 0xffffffed [ 2997.761039][T27692] em28xx 4-1:7.253: AC97 chip type couldn't be determined [ 2997.761047][T27692] em28xx 4-1:7.253: No AC97 audio processor [ 2997.761055][T27692] em28xx 4-1:7.253: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 2997.761084][T27692] em28xx 4-1:7.253: Binding DVB extension [ 2997.761097][T27692] em28xx 4-1:7.253: no endpoint for DVB mode and transfer type 1 [ 2997.761105][T27692] em28xx 4-1:7.253: failed to pre-allocate USB transfer buffers for DVB. [ 2997.761118][T27692] em28xx 4-1:7.253: Registering input extension [ 2997.764198][T15949] em28xx 4-1:7.253: Closing input extension [ 2997.881289][T15949] em28xx: Freeing device [ 2998.359509][ T2417] overlayfs: conflicting options: userxattr,redirect_dir=on [ 2998.491618][T29960] Bluetooth: hci3: command tx timeout [ 3001.085016][T29960] Bluetooth: hci3: command tx timeout [ 3001.275181][T18227] bridge_slave_1: left allmulticast mode [ 3001.275199][T18227] bridge_slave_1: left promiscuous mode [ 3001.275332][T18227] bridge0: port 2(bridge_slave_1) entered disabled state [ 3001.336375][T18227] bridge_slave_0: left allmulticast mode [ 3001.336394][T18227] bridge_slave_0: left promiscuous mode [ 3001.336510][T18227] bridge0: port 1(bridge_slave_0) entered disabled state [ 3002.051132][T18227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3002.058572][T18227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3002.086018][T18227] bond0 (unregistering): Released all slaves [ 3002.112392][ T2389] rxe_eth0 speed is unknown, defaulting to 1000 [ 3002.287413][ T2389] lo speed is unknown, defaulting to 1000 [ 3002.299715][ T2443] siw: device registration error -23 [ 3002.318861][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 81 (since boot) is 1031 jiffies old. [ 3002.563476][ T2452] FAULT_INJECTION: forcing a failure. [ 3002.563476][ T2452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3002.563506][ T2452] CPU: 1 UID: 0 PID: 2452 Comm: syz.2.7970 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 3002.563530][ T2452] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 3002.563538][ T2452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3002.563548][ T2452] Call Trace: [ 3002.563554][ T2452] [ 3002.563562][ T2452] dump_stack_lvl+0x100/0x190 [ 3002.563591][ T2452] should_fail_ex.cold+0x5/0xa [ 3002.563617][ T2452] _copy_to_user+0x32/0xd0 [ 3002.563639][ T2452] simple_read_from_buffer+0xcb/0x170 [ 3002.563667][ T2452] proc_fail_nth_read+0x1af/0x230 [ 3002.563695][ T2452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3002.563725][ T2452] ? rw_verify_area+0xce/0x6d0 [ 3002.563744][ T2452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3002.563770][ T2452] vfs_read+0x1e4/0xb40 [ 3002.563794][ T2452] ? lock_acquire+0x1d1/0x380 [ 3002.563816][ T2452] ? __fget_files+0x34/0x3d0 [ 3002.563841][ T2452] ? __pfx_vfs_read+0x10/0x10 [ 3002.563861][ T2452] ? find_held_lock+0x2b/0x80 [ 3002.563878][ T2452] ? __fget_files+0x215/0x3d0 [ 3002.563906][ T2452] ? __fget_files+0x21f/0x3d0 [ 3002.563940][ T2452] ksys_read+0x12a/0x250 [ 3002.563963][ T2452] ? __pfx_ksys_read+0x10/0x10 [ 3002.563993][ T2452] do_syscall_64+0x123/0x790 [ 3002.564021][ T2452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3002.564039][ T2452] RIP: 0033:0x7f489235fd8e [ 3002.564055][ T2452] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3002.564070][ T2452] RSP: 002b:00007f4893291fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3002.564090][ T2452] RAX: ffffffffffffffda RBX: 00007f48932926c0 RCX: 00007f489235fd8e [ 3002.564101][ T2452] RDX: 000000000000000f RSI: 00007f48932920a0 RDI: 0000000000000005 [ 3002.564112][ T2452] RBP: 00007f4893292090 R08: 0000000000000000 R09: 0000000000000000 [ 3002.564123][ T2452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3002.564133][ T2452] R13: 00007f4892626128 R14: 00007f4892626090 R15: 00007fff6fa8eb78 [ 3002.564158][ T2452] [ 3002.601120][ T30] audit: type=1400 audit(1700002894.873:2277): avc: denied { write } for pid=2453 comm="syz.8.7967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 3002.994536][ T2464] fuse: Bad value for 'fd' [ 3003.158923][T27655] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 3003.168757][T31860] Bluetooth: hci3: command tx timeout [ 3003.322246][T27655] usb 3-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 3003.346160][T27655] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3003.346294][T27655] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3003.390685][T27655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3003.390748][T27655] usb 3-1: Product: syz [ 3003.390791][T27655] usb 3-1: Manufacturer: syz [ 3003.390835][T27655] usb 3-1: SerialNumber: syz [ 3003.434653][T27655] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 3003.466592][T27655] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 3003.466592][T27655] Please send a copy of this message to and [ 3003.548641][T17681] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 3003.699324][T17681] usb 9-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3003.702002][T17681] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3003.753417][T17681] usb 9-1: config 0 descriptor?? [ 3003.758265][T17681] cp210x 9-1:0.0: cp210x converter detected [ 3003.785110][ T2474] FAULT_INJECTION: forcing a failure. [ 3003.785110][ T2474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3003.785142][ T2474] CPU: 0 UID: 0 PID: 2474 Comm: syz.3.7973 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 3003.785169][ T2474] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 3003.785177][ T2474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3003.785189][ T2474] Call Trace: [ 3003.785195][ T2474] [ 3003.785205][ T2474] dump_stack_lvl+0x100/0x190 [ 3003.785244][ T2474] should_fail_ex.cold+0x5/0xa [ 3003.785270][ T2474] _copy_from_user+0x2e/0xd0 [ 3003.785293][ T2474] __x64_sys_epoll_ctl+0x131/0x1e0 [ 3003.785318][ T2474] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 3003.785347][ T2474] do_syscall_64+0x123/0x790 [ 3003.785377][ T2474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3003.785397][ T2474] RIP: 0033:0x7f9d2f99f559 [ 3003.785413][ T2474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3003.785430][ T2474] RSP: 002b:00007f9d308d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 3003.785449][ T2474] RAX: ffffffffffffffda RBX: 00007f9d2fc25fa0 RCX: 00007f9d2f99f559 [ 3003.785461][ T2474] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 3003.785472][ T2474] RBP: 00007f9d308d9090 R08: 0000000000000000 R09: 0000000000000000 [ 3003.785482][ T2474] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3003.785494][ T2474] R13: 00007f9d2fc26038 R14: 00007f9d2fc25fa0 R15: 00007ffe936992e8 [ 3003.785518][ T2474] [ 3004.023717][T17681] usb 9-1: cp210x converter now attached to ttyUSB0 [ 3004.095533][T18227] hsr_slave_0: left promiscuous mode [ 3004.095960][T18227] hsr_slave_1: left promiscuous mode [ 3004.096786][T18227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3004.096803][T18227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3004.109245][T18227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3004.109265][T18227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3004.149606][T18227] veth1_macvtap: left promiscuous mode [ 3004.149642][T18227] veth0_macvtap: left promiscuous mode [ 3004.149732][T18227] veth1_vlan: left promiscuous mode [ 3004.170621][T18227] veth0_vlan: left promiscuous mode [ 3004.221057][T27655] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 3004.245484][T17681] usb 9-1: USB disconnect, device number 91 [ 3004.257995][T17681] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3004.258293][T17681] cp210x 9-1:0.0: device disconnected [ 3004.478094][ T2481] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7974'. [ 3004.516768][ T30] audit: type=1400 audit(1700002896.754:2278): avc: denied { remount } for pid=2477 comm="syz.3.7974" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 3005.205673][T18227] team0 (unregistering): Port device team_slave_1 removed [ 3005.218502][T31860] Bluetooth: hci3: command tx timeout [ 3005.231845][T18227] team0 (unregistering): Port device team_slave_0 removed [ 3005.336747][ T30] audit: type=1400 audit(1700002897.614:2279): avc: denied { open } for pid=2491 comm="syz.0.7976" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 3005.366280][ T30] audit: type=1400 audit(1700002897.644:2280): avc: denied { ioctl } for pid=2491 comm="syz.0.7976" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 3005.645480][ T2496] FAULT_INJECTION: forcing a failure. [ 3005.645480][ T2496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3005.645504][ T2496] CPU: 1 UID: 0 PID: 2496 Comm: syz.3.7977 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 3005.645521][ T2496] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 3005.645525][ T2496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3005.645532][ T2496] Call Trace: [ 3005.645536][ T2496] [ 3005.645540][ T2496] dump_stack_lvl+0x100/0x190 [ 3005.645561][ T2496] should_fail_ex.cold+0x5/0xa [ 3005.645577][ T2496] _copy_from_user+0x2e/0xd0 [ 3005.645592][ T2496] get_bitmap+0xde/0x1a0 [ 3005.645608][ T2496] get_nodes+0x1df/0x210 [ 3005.645623][ T2496] ? __pfx_get_nodes+0x10/0x10 [ 3005.645638][ T2496] ? __fget_files+0x21f/0x3d0 [ 3005.645657][ T2496] kernel_mbind+0xf8/0x200 [ 3005.645672][ T2496] ? __pfx_kernel_mbind+0x10/0x10 [ 3005.645687][ T2496] do_syscall_64+0x123/0x790 [ 3005.645707][ T2496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3005.645722][ T2496] RIP: 0033:0x7f9d2f99f559 [ 3005.645731][ T2496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3005.645743][ T2496] RSP: 002b:00007f9d308d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 3005.645754][ T2496] RAX: ffffffffffffffda RBX: 00007f9d2fc25fa0 RCX: 00007f9d2f99f559 [ 3005.645761][ T2496] RDX: 0000000000004000 RSI: 0000000000002000 RDI: 0000200000195000 [ 3005.645768][ T2496] RBP: 00007f9d308d9090 R08: 0000000000000008 R09: 0000000000000003 [ 3005.645775][ T2496] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000001 [ 3005.645782][ T2496] R13: 00007f9d2fc26038 R14: 00007f9d2fc25fa0 R15: 00007ffe936992e8 [ 3005.645797][ T2496] [ 3005.713393][ T2389] bridge0: port 1(bridge_slave_0) entered blocking state [ 3005.713527][ T2389] bridge0: port 1(bridge_slave_0) entered disabled state [ 3005.713634][ T2389] bridge_slave_0: entered allmulticast mode [ 3005.716564][ T2389] bridge_slave_0: entered promiscuous mode [ 3005.720632][ T2389] bridge0: port 2(bridge_slave_1) entered blocking state [ 3005.721022][ T2389] bridge0: port 2(bridge_slave_1) entered disabled state [ 3005.721118][ T2389] bridge_slave_1: entered allmulticast mode [ 3005.723758][ T2389] bridge_slave_1: entered promiscuous mode [ 3005.892212][ T2485] FAULT_INJECTION: forcing a failure. [ 3005.892212][ T2485] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3005.892246][ T2485] CPU: 0 UID: 0 PID: 2485 Comm: syz.8.7975 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 3005.892272][ T2485] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 3005.892279][ T2485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3005.892289][ T2485] Call Trace: [ 3005.892296][ T2485] [ 3005.892303][ T2485] dump_stack_lvl+0x100/0x190 [ 3005.892333][ T2485] should_fail_ex.cold+0x5/0xa [ 3005.892357][ T2485] get_futex_key+0x1c9/0x13e0 [ 3005.892389][ T2485] ? __pfx_get_futex_key+0x10/0x10 [ 3005.892416][ T2485] ? __mutex_unlock_slowpath+0x35d/0x930 [ 3005.892447][ T2485] futex_wake+0xf4/0x5e0 [ 3005.892468][ T2485] ? __pfx_futex_wake+0x10/0x10 [ 3005.892488][ T2485] ? lock_acquire+0x1d1/0x380 [ 3005.892506][ T2485] ? detach_task_ctx_data+0x83/0x490 [ 3005.892530][ T2485] do_futex+0x2b2/0x440 [ 3005.892546][ T2485] ? __pfx_do_futex+0x10/0x10 [ 3005.892559][ T2485] ? __might_fault+0xc5/0x140 [ 3005.892588][ T2485] mm_exit_exec_release+0x256/0x2f0 [ 3005.892605][ T2485] do_exit+0x6d8/0x2a00 [ 3005.892629][ T2485] ? __lock_acquire+0x5c0/0x1f40 [ 3005.892653][ T2485] ? __pfx_do_exit+0x10/0x10 [ 3005.892671][ T2485] ? do_raw_spin_lock+0x128/0x260 [ 3005.892691][ T2485] ? find_held_lock+0x2b/0x80 [ 3005.892704][ T2485] ? get_signal+0x7db/0x21d0 [ 3005.892726][ T2485] do_group_exit+0xd5/0x2a0 [ 3005.892746][ T2485] get_signal+0x1ebd/0x21d0 [ 3005.892760][ T2485] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 3005.892786][ T2485] ? __pfx_get_signal+0x10/0x10 [ 3005.892808][ T2485] arch_do_signal_or_restart+0x91/0x7e0 [ 3005.892831][ T2485] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 3005.892865][ T2485] exit_to_user_mode_loop+0x139/0x700 [ 3005.892886][ T2485] ? rcu_is_watching+0x13/0xc0 [ 3005.892902][ T2485] do_syscall_64+0x661/0x790 [ 3005.892925][ T2485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3005.892940][ T2485] RIP: 0033:0x7f7b15b9f559 [ 3005.892952][ T2485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3005.892966][ T2485] RSP: 002b:00007f7b16a960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3005.892981][ T2485] RAX: fffffffffffffe00 RBX: 00007f7b15e25fa8 RCX: 00007f7b15b9f559 [ 3005.892991][ T2485] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7b15e25fa8 [ 3005.893000][ T2485] RBP: 00007f7b15e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 3005.893008][ T2485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3005.893017][ T2485] R13: 00007f7b15e26038 R14: 00007ffebf082030 R15: 00007ffebf082118 [ 3005.893037][ T2485] [ 3005.895466][ T2389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3005.972476][ T2389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3006.368263][ T2389] team0: Port device team_slave_0 added [ 3006.398572][T23149] usb 3-1: USB disconnect, device number 19 [ 3006.975197][ T2389] team0: Port device team_slave_1 added [ 3007.136694][ T2510] overlayfs: conflicting options: userxattr,redirect_dir=on [ 3007.264388][ T2515] gadgetfs: bound to dummy_udc driver [ 3007.449427][T30313] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 3007.829402][T30313] usb 4-1: New USB device found: idVendor=0079, idProduct=1801, bcdDevice=0.00 [ 3007.833698][ T2389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3007.833725][ T2389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3007.834642][ T2389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3007.840722][T30313] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 3007.840761][T30313] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3007.840783][T30313] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3007.840805][T30313] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3007.840831][T30313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3007.994616][ T2517] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 3008.038454][T30313] usb 4-1: config 0 descriptor?? [ 3008.040567][ T2389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3008.040581][ T2389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3008.040602][ T2389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3008.043181][T30313] usbhid 4-1:0.0: can't add hid device: -22 [ 3008.043265][T30313] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 3008.047106][ T2512] netlink: 'syz.0.7982': attribute type 3 has an invalid length. [ 3008.047125][ T2512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7982'. [ 3008.183503][ T2521] kvm: pic: non byte read [ 3008.183796][ T2521] kvm: pic: non byte read [ 3008.184072][ T2521] kvm: pic: non byte read [ 3008.184379][ T2521] kvm: pic: non byte read [ 3008.188011][ T2521] kvm: pic: non byte read [ 3008.189822][ T2521] kvm: pic: non byte read [ 3008.190054][ T2521] kvm: pic: level sensitive irq not supported [ 3008.190104][ T2521] kvm: pic: non byte read [ 3008.190578][ T2521] kvm: pic: single mode not supported [ 3008.190635][ T2521] kvm: pic: non byte read [ 3008.192635][ T2521] kvm: pic: non byte read [ 3008.308034][ T2389] hsr_slave_0: entered promiscuous mode [ 3008.316950][ T2389] hsr_slave_1: entered promiscuous mode [ 3008.317446][ T2389] debugfs: 'hsr0' already exists in 'hsr' [ 3008.317463][ T2389] Cannot create hsr debugfs directory [ 3008.539146][T27692] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 3008.690326][T27692] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3008.690764][T27692] usb 3-1: not running at top speed; connect to a high speed hub [ 3008.690789][T27692] usb 3-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 3008.691631][T27692] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3008.691652][T27692] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3008.691694][T27692] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3008.692978][T27692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 3008.693000][T27692] usb 3-1: Product: syz [ 3008.693013][T27692] usb 3-1: Manufacturer: syz [ 3008.780675][T27692] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 3008.780734][T27692] uvcvideo 3-1:1.0: Entity type for entity Output 32770 was not initialized! [ 3008.780774][T27692] uvcvideo 3-1:1.0: Failed to create links for entity 32770 [ 3008.780788][T27692] uvcvideo 3-1:1.0: Failed to register entities (-22). [ 3008.964355][T30313] usb 3-1: USB disconnect, device number 20 [ 3009.009479][ T2389] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3009.012619][ T2389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3009.013410][ T2389] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3009.016043][ T2389] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3009.016846][ T2389] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3009.055391][ T2389] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3009.056161][ T2389] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3009.073458][ T2389] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3009.156857][ T2389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3009.174943][ T2389] 8021q: adding VLAN 0 to HW filter on device team0 [ 3009.189270][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 3009.189362][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3009.216412][T18227] bridge0: port 2(bridge_slave_1) entered blocking state [ 3009.216504][T18227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3009.680560][T23149] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 3009.705193][T27692] usb 4-1: USB disconnect, device number 91 [ 3009.745544][ T2389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3009.800359][ T2561] syzkaller0: entered promiscuous mode [ 3009.800385][ T2561] syzkaller0: entered allmulticast mode [ 3009.829597][T30313] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 3009.835131][ T2389] veth0_vlan: entered promiscuous mode [ 3009.844403][ T2389] veth1_vlan: entered promiscuous mode [ 3009.861003][ T5857] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3009.861514][ T5857] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3009.861547][ T5857] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3009.861576][ T5857] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3009.861688][T23149] usb 9-1: Using ep0 maxpacket: 16 [ 3009.862210][T23149] usb 9-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 3009.863091][T23149] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3009.863119][T23149] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3009.864832][T23149] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3009.864853][T23149] usb 9-1: Product: syz [ 3009.864867][T23149] usb 9-1: Manufacturer: syz [ 3009.864881][T23149] usb 9-1: SerialNumber: syz [ 3009.870815][T23149] usb 9-1: config 0 descriptor?? [ 3009.908101][ T2389] veth0_macvtap: entered promiscuous mode [ 3009.926788][ T2389] veth1_macvtap: entered promiscuous mode [ 3009.972481][ T2389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3009.994355][ T2389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3010.002702][T30313] usb 3-1: Using ep0 maxpacket: 32 [ 3010.006778][T30313] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3010.006816][T30313] usb 3-1: New USB device found: idVendor=0ccd, idProduct=005e, bcdDevice=12.de [ 3010.015076][T30313] usb 3-1: config 7 has an invalid interface number: 253 but max is 0 [ 3010.015101][T30313] usb 3-1: config 7 has no interface number 0 [ 3010.030470][T30313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3010.030493][T30313] usb 3-1: Product: syz [ 3010.030505][T30313] usb 3-1: Manufacturer: syz [ 3010.030518][T30313] usb 3-1: SerialNumber: syz [ 3010.104972][ T5857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3010.107178][ T5917] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3010.107902][ T5917] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3010.136768][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 3010.144658][T23149] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input181 [ 3010.166616][T23149] imon:send_packet: packet tx failed (-71) [ 3010.189825][ T5857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3010.191546][T23149] imon 9-1:0.0: panel buttons/knobs setup failed [ 3010.329870][T31459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3010.329889][T31459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3010.380441][T23149] rc_core: IR keymap rc-imon-pad not found [ 3010.380460][T23149] Registered IR keymap rc-empty [ 3010.380522][T23149] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 3010.380541][T23149] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3010.380867][T23149] imon:send_packet: packet tx failed (-71) [ 3010.409338][T23149] imon 9-1:0.0: remote input dev register failed [ 3010.409481][T23149] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 3010.428856][ T5857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3010.428892][ T5857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3010.447023][T23149] imon 9-1:0.0: unable to initialize intf0, err 0 [ 3010.457260][T23149] usb 9-1: USB disconnect, device number 92 [ 3010.493091][T30313] em28xx 3-1:7.253: New device syz syz @ 480 Mbps (0ccd:005e, interface 253, class 253) [ 3010.493127][T30313] em28xx 3-1:7.253: Video interface 253 found: [ 3010.493145][T30313] em28xx 3-1:7.253: DVB interface 253 found: [ 3010.798358][T23149] usb 9-1: new full-speed USB device number 93 using dummy_hcd [ 3010.843845][ T2569] FAULT_INJECTION: forcing a failure. [ 3010.843845][ T2569] name failslab, interval 1, probability 0, space 0, times 0 [ 3010.843878][ T2569] CPU: 1 UID: 0 PID: 2569 Comm: syz.1.7990 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 3010.843908][ T2569] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 3010.843916][ T2569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3010.843927][ T2569] Call Trace: [ 3010.843934][ T2569] [ 3010.843942][ T2569] dump_stack_lvl+0x100/0x190 [ 3010.843974][ T2569] should_fail_ex.cold+0x5/0xa [ 3010.844002][ T2569] should_failslab+0xc2/0x120 [ 3010.844029][ T2569] __kmalloc_noprof+0xfc/0x840 [ 3010.844050][ T2569] ? rcu_is_watching+0x13/0xc0 [ 3010.844068][ T2569] ? tomoyo_realpath_from_path+0xb6/0x690 [ 3010.844096][ T2569] tomoyo_realpath_from_path+0xb6/0x690 [ 3010.844123][ T2569] tomoyo_path_number_perm+0x23c/0x580 [ 3010.844150][ T2569] ? tomoyo_path_number_perm+0x22e/0x580 [ 3010.844185][ T2569] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3010.844222][ T2569] ? __lock_acquire+0x5c0/0x1f40 [ 3010.844258][ T2569] ? __fget_files+0x34/0x3d0 [ 3010.844285][ T2569] ? find_held_lock+0x2b/0x80 [ 3010.844302][ T2569] ? hook_file_ioctl_common+0x140/0x440 [ 3010.844331][ T2569] ? __fget_files+0x21f/0x3d0 [ 3010.844362][ T2569] security_file_ioctl+0xd3/0x230 [ 3010.844391][ T2569] __x64_sys_ioctl+0xb7/0x210 [ 3010.844417][ T2569] do_syscall_64+0x123/0x790 [ 3010.844446][ T2569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3010.844466][ T2569] RIP: 0033:0x7f4dc3d9f559 [ 3010.844482][ T2569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3010.844499][ T2569] RSP: 002b:00007f4dc4d49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3010.844518][ T2569] RAX: ffffffffffffffda RBX: 00007f4dc4025fa0 RCX: 00007f4dc3d9f559 [ 3010.844530][ T2569] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 3010.844541][ T2569] RBP: 00007f4dc4d49090 R08: 0000000000000000 R09: 0000000000000000 [ 3010.844552][ T2569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3010.844563][ T2569] R13: 00007f4dc4026038 R14: 00007f4dc4025fa0 R15: 00007ffee07d9538 [ 3010.844589][ T2569] [ 3010.844615][ T2569] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3010.962956][T23149] usb 9-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 3010.964003][T23149] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3010.964027][T23149] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 3010.964048][T23149] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3010.969288][T23149] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3010.969312][T23149] usb 9-1: Product: syz [ 3010.969342][T23149] usb 9-1: Manufacturer: syz [ 3010.969355][T23149] usb 9-1: SerialNumber: syz [ 3010.975881][T23149] usb 9-1: config 0 descriptor?? [ 3010.976671][ T2548] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 3011.097574][T30313] em28xx 3-1:7.253: unknown em28xx chip ID (0) [ 3011.128135][ T629] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 3011.240803][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 3011.246827][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 3011.250509][T23149] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input183 [ 3011.257560][T23149] imon:send_packet: packet tx failed (-71) [ 3011.278597][T23149] imon 9-1:0.0: panel buttons/knobs setup failed [ 3011.290323][ T629] usb 4-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 3011.294326][ T629] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3011.294352][ T629] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3011.301245][ T629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3011.301269][ T629] usb 4-1: Product: syz [ 3011.301282][ T629] usb 4-1: Manufacturer: syz [ 3011.301294][ T629] usb 4-1: SerialNumber: syz [ 3011.318702][ T629] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 3011.354219][ T629] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 3011.354219][ T629] Please send a copy of this message to and [ 3011.428652][T23149] rc_core: IR keymap rc-imon-pad not found [ 3011.428670][T23149] Registered IR keymap rc-empty [ 3011.428726][T23149] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 3011.428768][T23149] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3011.430704][T23149] imon:send_packet: packet tx failed (-71) [ 3011.458258][T23149] imon 9-1:0.0: remote input dev register failed [ 3011.458374][T23149] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 3011.485011][T23149] imon 9-1:0.0: unable to initialize intf0, err 0 [ 3011.492518][T23149] usb 9-1: USB disconnect, device number 93 [ 3011.826977][ T2586] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7994'. [ 3011.984732][ T629] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 3012.139854][T30313] em28xx 3-1:7.253: failed to get i2c transfer status from bridge register (error=-5) [ 3012.139884][T30313] em28xx 3-1:7.253: board has no eeprom [ 3012.168246][ T1140] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 3012.198898][T30313] em28xx 3-1:7.253: Identified as Terratec Cinergy Hybrid T USB XS (em2882) (card=55) [ 3012.198931][T30313] em28xx 3-1:7.253: analog set to bulk mode. [ 3012.198945][T30313] em28xx 3-1:7.253: dvb set to bulk mode. [ 3012.200819][T23149] em28xx 3-1:7.253: Registering V4L2 extension [ 3012.212789][T30313] usb 3-1: USB disconnect, device number 21 [ 3012.213942][T30313] em28xx 3-1:7.253: Disconnecting em28xx [ 3012.314330][T23149] em28xx 3-1:7.253: Config register raw data: 0xffffffed [ 3012.314355][T23149] em28xx 3-1:7.253: AC97 chip type couldn't be determined [ 3012.314366][T23149] em28xx 3-1:7.253: No AC97 audio processor [ 3012.314380][T23149] em28xx 3-1:7.253: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 3012.314424][T23149] em28xx 3-1:7.253: Binding DVB extension [ 3012.334646][ T1140] usb 9-1: Using ep0 maxpacket: 32 [ 3012.342728][ T1140] usb 9-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3012.373583][ T1140] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 3012.373609][ T1140] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3012.373629][ T1140] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3012.373644][ T1140] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3012.373660][ T1140] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3012.376420][ T1140] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3012.376445][ T1140] usb 9-1: Product: syz [ 3012.376459][ T1140] usb 9-1: Manufacturer: syz [ 3012.376474][ T1140] usb 9-1: SerialNumber: syz [ 3012.411091][ T1140] usb 9-1: config 0 descriptor?? [ 3012.461782][ T1140] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3012.477607][ T1140] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3012.486235][T23149] em28xx 3-1:7.253: no endpoint for DVB mode and transfer type 1 [ 3012.486255][T23149] em28xx 3-1:7.253: failed to pre-allocate USB transfer buffers for DVB. [ 3012.486283][T23149] em28xx 3-1:7.253: Registering input extension [ 3012.486447][T30313] em28xx 3-1:7.253: Closing input extension [ 3012.564446][T30313] em28xx: Freeing device [ 3012.717492][T23149] usb 9-1: USB disconnect, device number 94 [ 3012.729720][T23149] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 3013.940033][T17681] usb 4-1: USB disconnect, device number 92 [ 3014.116388][ T30] audit: type=1400 audit(1700002906.394:2281): avc: denied { search } for pid=2612 comm="syz.3.8001" name="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3014.116842][ T30] audit: type=1400 audit(1700002906.394:2282): avc: denied { search } for pid=2612 comm="syz.3.8001" name="usb_gadget" dev="configfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3014.166609][ T30] audit: type=1400 audit(1700002906.424:2283): avc: denied { write search } for pid=2612 comm="syz.3.8001" name="usb_gadget" dev="configfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3014.212648][ T30] audit: type=1400 audit(1700002906.484:2284): avc: denied { remove_name } for pid=2612 comm="syz.3.8001" name="g1" dev="configfs" ino=75865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3014.252740][ T30] audit: type=1400 audit(1700002906.504:2285): avc: denied { mount } for pid=2612 comm="syz.3.8001" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 3014.252791][ T30] audit: type=1400 audit(1700002906.504:2286): avc: denied { search } for pid=2612 comm="syz.3.8001" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 3014.252826][ T30] audit: type=1400 audit(1700002906.504:2287): avc: denied { read write } for pid=2612 comm="syz.3.8001" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 3014.252863][ T30] audit: type=1400 audit(1700002906.504:2288): avc: denied { open } for pid=2612 comm="syz.3.8001" path="/560/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 3014.289853][T30313] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 3014.324798][ T30] audit: type=1400 audit(1700002906.614:2289): avc: denied { rmdir } for pid=2612 comm="syz.3.8001" name="g1" dev="configfs" ino=75865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3014.449170][T30313] usb 2-1: Using ep0 maxpacket: 8 [ 3014.449862][T30313] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3014.450771][T30313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3014.450821][T30313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3014.493943][T30313] usb 2-1: config 0 descriptor?? [ 3014.584467][ T2617] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8002'. [ 3014.730279][T30313] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3014.890145][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 3014.920531][ T2620] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8003'. [ 3015.075704][ T30] audit: type=1400 audit(1700002907.354:2290): avc: denied { unmount } for pid=24402 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 3015.541402][ T2637] xt_hashlimit: size too large, truncated to 1048576 [ 3016.114915][ T2648] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8006'. [ 3016.284276][ T2650] FAULT_INJECTION: forcing a failure. [ 3016.284276][ T2650] name failslab, interval 1, probability 0, space 0, times 0 [ 3016.284307][ T2650] CPU: 0 UID: 0 PID: 2650 Comm: syz.0.8007 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 3016.284333][ T2650] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 3016.284340][ T2650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3016.284350][ T2650] Call Trace: [ 3016.284357][ T2650] [ 3016.284364][ T2650] dump_stack_lvl+0x100/0x190 [ 3016.284396][ T2650] should_fail_ex.cold+0x5/0xa [ 3016.284423][ T2650] should_failslab+0xc2/0x120 [ 3016.284449][ T2650] __kvmalloc_node_noprof+0x113/0x9b0 [ 3016.284472][ T2650] ? _kstrtoull+0x144/0x200 [ 3016.284497][ T2650] ? __pfx__kstrtoull+0x10/0x10 [ 3016.284522][ T2650] ? seq_read_iter+0x819/0x1270 [ 3016.284553][ T2650] seq_read_iter+0x819/0x1270 [ 3016.284579][ T2650] ? register_lock_class+0x3f/0x7b0 [ 3016.284603][ T2650] ? __lock_acquire+0x5c0/0x1f40 [ 3016.284634][ T2650] seq_read+0x344/0x4d0 [ 3016.284665][ T2650] ? __pfx_seq_read+0x10/0x10 [ 3016.284686][ T2650] ? get_pid_task+0x2a/0x250 [ 3016.284713][ T2650] ? lock_acquire+0x1d1/0x380 [ 3016.284732][ T2650] ? fdget_pos+0x2aa/0x380 [ 3016.284754][ T2650] ? __pfx_seq_read+0x10/0x10 [ 3016.284778][ T2650] proc_reg_read+0x120/0x330 [ 3016.284799][ T2650] ? __pfx_proc_reg_read+0x10/0x10 [ 3016.284826][ T2650] vfs_read+0x1e4/0xb40 [ 3016.284846][ T2650] ? lock_acquire+0x1d1/0x380 [ 3016.284868][ T2650] ? __fget_files+0x34/0x3d0 [ 3016.284894][ T2650] ? __pfx_vfs_read+0x10/0x10 [ 3016.284914][ T2650] ? find_held_lock+0x2b/0x80 [ 3016.284932][ T2650] ? __fget_files+0x215/0x3d0 [ 3016.284963][ T2650] ? __fget_files+0x21f/0x3d0 [ 3016.284997][ T2650] ksys_read+0x12a/0x250 [ 3016.285019][ T2650] ? __pfx_ksys_read+0x10/0x10 [ 3016.285050][ T2650] do_syscall_64+0x123/0x790 [ 3016.285081][ T2650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3016.285101][ T2650] RIP: 0033:0x7fe9a519f559 [ 3016.285117][ T2650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3016.285134][ T2650] RSP: 002b:00007fe9a5f83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3016.285152][ T2650] RAX: ffffffffffffffda RBX: 00007fe9a5425fa0 RCX: 00007fe9a519f559 [ 3016.285164][ T2650] RDX: 0000000000002020 RSI: 0000200000003580 RDI: 0000000000000003 [ 3016.285176][ T2650] RBP: 00007fe9a5f83090 R08: 0000000000000000 R09: 0000000000000000 [ 3016.285187][ T2650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3016.285197][ T2650] R13: 00007fe9a5426038 R14: 00007fe9a5425fa0 R15: 00007fff96af1ad8 [ 3016.285224][ T2650] [ 3016.613758][ T2655] FAULT_INJECTION: forcing a failure. [ 3016.613758][ T2655] name failslab, interval 1, probability 0, space 0, times 0 [ 3016.613779][ T2655] CPU: 1 UID: 0 PID: 2655 Comm: syz.2.8008 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 3016.613796][ T2655] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 3016.613801][ T2655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3016.613808][ T2655] Call Trace: [ 3016.613812][ T2655] [ 3016.613816][ T2655] dump_stack_lvl+0x100/0x190 [ 3016.613837][ T2655] should_fail_ex.cold+0x5/0xa [ 3016.613862][ T2655] should_failslab+0xc2/0x120 [ 3016.613888][ T2655] __kmalloc_noprof+0xfc/0x840 [ 3016.613908][ T2655] ? rcu_is_watching+0x13/0xc0 [ 3016.613920][ T2655] ? tomoyo_realpath_from_path+0xb6/0x690 [ 3016.613936][ T2655] tomoyo_realpath_from_path+0xb6/0x690 [ 3016.613951][ T2655] tomoyo_path_number_perm+0x23c/0x580 [ 3016.613968][ T2655] ? tomoyo_path_number_perm+0x22e/0x580 [ 3016.613986][ T2655] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3016.614008][ T2655] ? __lock_acquire+0x5c0/0x1f40 [ 3016.614028][ T2655] ? __fget_files+0x34/0x3d0 [ 3016.614045][ T2655] ? find_held_lock+0x2b/0x80 [ 3016.614055][ T2655] ? hook_file_ioctl_common+0x140/0x440 [ 3016.614072][ T2655] ? __fget_files+0x21f/0x3d0 [ 3016.614090][ T2655] security_file_ioctl+0xd3/0x230 [ 3016.614115][ T2655] __x64_sys_ioctl+0xb7/0x210 [ 3016.614130][ T2655] do_syscall_64+0x123/0x790 [ 3016.614148][ T2655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3016.614160][ T2655] RIP: 0033:0x7f489239f559 [ 3016.614170][ T2655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3016.614181][ T2655] RSP: 002b:00007f48932b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3016.614193][ T2655] RAX: ffffffffffffffda RBX: 00007f4892625fa0 RCX: 00007f489239f559 [ 3016.614201][ T2655] RDX: 00002000000002c0 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 3016.614208][ T2655] RBP: 00007f48932b3090 R08: 0000000000000000 R09: 0000000000000000 [ 3016.614214][ T2655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3016.614221][ T2655] R13: 00007f4892626038 R14: 00007f4892625fa0 R15: 00007fff6fa8eb78 [ 3016.614236][ T2655] [ 3016.614240][ T2655] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3016.874912][ T2655] device-mapper: table: 248:9: thin-pool: Invalid block size (-EINVAL) [ 3016.874935][ T2655] device-mapper: ioctl: error adding target to table [ 3017.037481][ T2644] infiniband syz0: set down [ 3017.073300][ T2644] infiniband syz0: added ipvlan0 [ 3017.078059][T30313] usb 2-1: USB disconnect, device number 125 [ 3017.187163][ T2644] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 3017.187201][ T2644] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 3017.187239][ T2644] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 3017.389132][ T2644] RDS/IB: syz0: added [ 3017.389179][ T2644] smc: adding ib device syz0 with port count 1 [ 3017.389197][ T2644] smc: ib device syz0 port 1 has no pnetid [ 3017.746090][ T2687] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8017'. [ 3017.840490][T30313] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 3018.008958][T30313] usb 3-1: New USB device found: idVendor=0079, idProduct=1801, bcdDevice=0.00 [ 3018.011528][T30313] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 3018.011570][T30313] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3018.011594][T30313] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3018.011617][T30313] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3018.011652][T30313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3018.081453][T30313] usb 3-1: config 0 descriptor?? [ 3018.100063][T30313] usbhid 3-1:0.0: can't add hid device: -22 [ 3018.100146][T30313] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 3019.337606][ T629] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 3019.498123][ T629] usb 2-1: Using ep0 maxpacket: 8 [ 3019.499256][ T629] usb 2-1: New USB device found: idVendor=0499, idProduct=1013, bcdDevice=0.40 [ 3019.499996][ T629] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3019.500011][ T629] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 3019.500027][ T629] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 3019.500039][ T629] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1007, setting to 64 [ 3019.503873][ T629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3019.503889][ T629] usb 2-1: Manufacturer: 䑼 [ 3019.503897][ T629] usb 2-1: SerialNumber: 讄꽡癥蒨紴⠆鋬噹㖜±㽙⊆齴⋺ꀊ᭸㡴ꖔ혻ꈜ탿­郈෧糊噳脵 [ 3019.512209][ T2702] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 3019.744187][ T629] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 3020.573625][T23149] usb 3-1: USB disconnect, device number 22 [ 3020.595581][ T2713] FAULT_INJECTION: forcing a failure. [ 3020.595581][ T2713] name failslab, interval 1, probability 0, space 0, times 0 [ 3020.595610][ T2713] CPU: 0 UID: 0 PID: 2713 Comm: syz.0.8021 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 3020.595635][ T2713] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 3020.595642][ T2713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3020.595653][ T2713] Call Trace: [ 3020.595660][ T2713] [ 3020.595668][ T2713] dump_stack_lvl+0x100/0x190 [ 3020.595698][ T2713] should_fail_ex.cold+0x5/0xa [ 3020.595725][ T2713] should_failslab+0xc2/0x120 [ 3020.595751][ T2713] __kmalloc_noprof+0xfc/0x840 [ 3020.595770][ T2713] ? rcu_is_watching+0x13/0xc0 [ 3020.595789][ T2713] ? tomoyo_realpath_from_path+0xb6/0x690 [ 3020.595812][ T2713] tomoyo_realpath_from_path+0xb6/0x690 [ 3020.595837][ T2713] tomoyo_path_number_perm+0x23c/0x580 [ 3020.595864][ T2713] ? tomoyo_path_number_perm+0x22e/0x580 [ 3020.595893][ T2713] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3020.595929][ T2713] ? __lock_acquire+0x5c0/0x1f40 [ 3020.595965][ T2713] ? __fget_files+0x34/0x3d0 [ 3020.595993][ T2713] ? find_held_lock+0x2b/0x80 [ 3020.596010][ T2713] ? hook_file_ioctl_common+0x140/0x440 [ 3020.596039][ T2713] ? __fget_files+0x21f/0x3d0 [ 3020.596076][ T2713] security_file_ioctl+0xd3/0x230 [ 3020.596107][ T2713] __x64_sys_ioctl+0xb7/0x210 [ 3020.596134][ T2713] do_syscall_64+0x123/0x790 [ 3020.596163][ T2713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3020.596183][ T2713] RIP: 0033:0x7fe9a519f559 [ 3020.596199][ T2713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3020.596216][ T2713] RSP: 002b:00007fe9a5f83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3020.596235][ T2713] RAX: ffffffffffffffda RBX: 00007fe9a5425fa0 RCX: 00007fe9a519f559 [ 3020.596247][ T2713] RDX: ffffffffffffffff RSI: 0000000000005411 RDI: 0000000000000003 [ 3020.596258][ T2713] RBP: 00007fe9a5f83090 R08: 0000000000000000 R09: 0000000000000000 [ 3020.596269][ T2713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3020.596281][ T2713] R13: 00007fe9a5426038 R14: 00007fe9a5425fa0 R15: 00007fff96af1ad8 [ 3020.596306][ T2713] [ 3020.597773][ T2713] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3020.750901][T17681] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 3020.842498][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 3020.842513][ T30] audit: type=1400 audit(1700002913.125:2294): avc: denied { connect } for pid=2716 comm="syz.0.8024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3020.950047][ T629] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 3020.988852][T17681] usb 9-1: Using ep0 maxpacket: 16 [ 3020.989410][T17681] usb 9-1: New USB device found: idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 3020.990390][T17681] usb 9-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 3020.990428][T17681] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 3020.990451][T17681] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3020.990474][T17681] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3020.992474][T17681] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3020.992494][T17681] usb 9-1: Product: syz [ 3020.992507][T17681] usb 9-1: Manufacturer: syz [ 3020.992522][T17681] usb 9-1: SerialNumber: syz [ 3020.994597][ T2719] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8023'. [ 3021.016069][T17681] usb 9-1: config 0 descriptor?? [ 3021.173403][ T629] usb 2-1: USB disconnect, device number 126 [ 3021.237203][T17681] appledisplay 9-1:0.0: Error while getting initial brightness: -71 [ 3021.239282][T17681] appledisplay 9-1:0.0: probe with driver appledisplay failed with error -71 [ 3021.263624][T17681] usb 9-1: USB disconnect, device number 95 [ 3021.334145][ T2729] Dead loop on virtual device lo (net 1501), fix it urgently! [ 3021.334295][ T2729] Dead loop on virtual device lo (net 1501), fix it urgently! [ 3021.334409][ T2729] Dead loop on virtual device lo (net 1501), fix it urgently! [ 3021.334746][ T2729] Dead loop on virtual device lo (net 1501), fix it urgently! [ 3021.334852][ T2729] Dead loop on virtual device lo (net 1501), fix it urgently! [ 3021.334962][ T2729] Dead loop on virtual device lo (net 1501), fix it urgently! [ 3021.335238][ T2729] Dead loop on virtual device lo (net 1501), fix it urgently! [ 3021.335341][ T2729] Dead loop on virtual device lo (net 1501), fix it urgently! [ 3021.335450][ T2729] Dead loop on virtual device lo (net 1501), fix it urgently! [ 3021.335775][ T2729] Dead loop on virtual device lo (net 1501), fix it urgently! [ 3021.469673][ T2729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8025'. [ 3021.473417][ T2734] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8028'. [ 3022.070730][ T2743] syzkaller0: entered promiscuous mode [ 3022.070753][ T2743] syzkaller0: entered allmulticast mode [ 3022.196691][ T2747] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8034'. [ 3022.597790][ T2751] bridge1: entered promiscuous mode [ 3022.654453][ T2751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8033'. [ 3023.340837][ T2762] FAULT_INJECTION: forcing a failure. [ 3023.340837][ T2762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3023.340869][ T2762] CPU: 1 UID: 0 PID: 2762 Comm: syz.0.8037 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 3023.340894][ T2762] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 3023.340902][ T2762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3023.340913][ T2762] Call Trace: [ 3023.340920][ T2762] [ 3023.340927][ T2762] dump_stack_lvl+0x100/0x190 [ 3023.340960][ T2762] should_fail_ex.cold+0x5/0xa [ 3023.340987][ T2762] _copy_from_user+0x2e/0xd0 [ 3023.341011][ T2762] copy_msghdr_from_user+0x9f/0x4c0 [ 3023.341036][ T2762] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3023.341066][ T2762] ? lock_acquire+0x1d1/0x380 [ 3023.341089][ T2762] ? get_pid_task+0x2a/0x250 [ 3023.341117][ T2762] ___sys_sendmsg+0x106/0x1e0 [ 3023.341141][ T2762] ? __pfx____sys_sendmsg+0x10/0x10 [ 3023.341165][ T2762] ? get_pid_task+0x106/0x250 [ 3023.341200][ T2762] ? find_held_lock+0x2b/0x80 [ 3023.341234][ T2762] __sys_sendmsg+0x160/0x210 [ 3023.341252][ T2762] ? __pfx___sys_sendmsg+0x10/0x10 [ 3023.341287][ T2762] do_syscall_64+0x123/0x790 [ 3023.341315][ T2762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3023.341333][ T2762] RIP: 0033:0x7fe9a519f559 [ 3023.341348][ T2762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3023.341364][ T2762] RSP: 002b:00007fe9a5f83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3023.341382][ T2762] RAX: ffffffffffffffda RBX: 00007fe9a5425fa0 RCX: 00007fe9a519f559 [ 3023.341394][ T2762] RDX: 0000000000000080 RSI: 0000200000001cc0 RDI: 0000000000000003 [ 3023.341405][ T2762] RBP: 00007fe9a5f83090 R08: 0000000000000000 R09: 0000000000000000 [ 3023.341416][ T2762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3023.341428][ T2762] R13: 00007fe9a5426038 R14: 00007fe9a5425fa0 R15: 00007fff96af1ad8 [ 3023.341453][ T2762] [ 3023.491176][ T1140] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 3023.737304][ T1140] usb 4-1: Using ep0 maxpacket: 32 [ 3023.753059][ T1140] usb 4-1: New USB device found: idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 3023.753101][ T1140] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 3023.773239][ T1140] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 3023.773266][ T1140] usb 4-1: config 0 has no interface number 0 [ 3023.773398][ T1140] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3023.774795][ T1140] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 3023.774819][ T1140] usb 4-1: config 0 has no interface number 0 [ 3023.774855][ T1140] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3023.775671][ T1140] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 3023.775692][ T1140] usb 4-1: config 0 has no interface number 0 [ 3023.775724][ T1140] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3023.776552][ T1140] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 3023.776572][ T1140] usb 4-1: config 0 has no interface number 0 [ 3023.776604][ T1140] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3024.123750][ T1140] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 3024.123774][ T1140] usb 4-1: config 0 has no interface number 0 [ 3024.123809][ T1140] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3024.146369][ T1140] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 3024.146393][ T1140] usb 4-1: config 0 has no interface number 0 [ 3024.146426][ T1140] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3024.152933][ T1140] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 3024.152959][ T1140] usb 4-1: config 0 has no interface number 0 [ 3024.152990][ T1140] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3024.155330][ T1140] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 3024.155353][ T1140] usb 4-1: config 0 has no interface number 0 [ 3024.155384][ T1140] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3024.163144][ T1140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3024.163170][ T1140] usb 4-1: Product: syz [ 3024.163184][ T1140] usb 4-1: Manufacturer: syz [ 3024.163196][ T1140] usb 4-1: SerialNumber: syz [ 3024.175269][ T1140] usb 4-1: config 0 descriptor?? [ 3024.182231][ T1140] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 3024.269735][ T2783] device-mapper: ioctl: device name cannot contain '/' [ 3024.304514][ T2783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8041'. [ 3024.325111][ T30] audit: type=1400 audit(1700002916.605:2295): avc: denied { cmd } for pid=2782 comm="iou-wrk-2783" path="socket:[156668]" dev="sockfs" ino=156668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 3025.473334][ T2798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3025.473722][ T2798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3025.501362][ T2798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3025.501730][ T2798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3025.529512][ T2798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3025.531608][ T2798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3025.774003][ T2803] FAULT_INJECTION: forcing a failure. [ 3025.774003][ T2803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3025.774036][ T2803] CPU: 0 UID: 0 PID: 2803 Comm: syz.8.8045 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 3025.774064][ T2803] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 3025.774072][ T2803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3025.774083][ T2803] Call Trace: [ 3025.774090][ T2803] [ 3025.774097][ T2803] dump_stack_lvl+0x100/0x190 [ 3025.774130][ T2803] should_fail_ex.cold+0x5/0xa [ 3025.774157][ T2803] strncpy_from_user+0x3b/0x2d0 [ 3025.774187][ T2803] do_getname+0x78/0x390 [ 3025.774210][ T2803] do_sys_openat2+0xc3/0x1d0 [ 3025.774229][ T2803] ? __pfx_do_sys_openat2+0x10/0x10 [ 3025.774248][ T2803] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3025.774284][ T2803] __x64_sys_openat+0x12d/0x210 [ 3025.774302][ T2803] ? __pfx___x64_sys_openat+0x10/0x10 [ 3025.774330][ T2803] do_syscall_64+0x123/0x790 [ 3025.774359][ T2803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3025.774378][ T2803] RIP: 0033:0x7f7b15b5fd8e [ 3025.774393][ T2803] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3025.774411][ T2803] RSP: 002b:00007f7b16a95f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3025.774429][ T2803] RAX: ffffffffffffffda RBX: 00007f7b16a966c0 RCX: 00007f7b15b5fd8e [ 3025.774441][ T2803] RDX: 0000000000000002 RSI: 00007f7b15c3641a RDI: ffffffffffffff9c [ 3025.774453][ T2803] RBP: 00007f7b15c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 3025.774463][ T2803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3025.774474][ T2803] R13: 00007f7b15e26038 R14: 00007f7b15e25fa0 R15: 00007ffebf082118 [ 3025.774500][ T2803] [ 3027.210605][ T629] usb 4-1: USB disconnect, device number 93 [ 3027.580932][ T2822] FAULT_INJECTION: forcing a failure. [ 3027.580932][ T2822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3027.580964][ T2822] CPU: 0 UID: 0 PID: 2822 Comm: syz.3.8051 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 3027.580989][ T2822] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 3027.580995][ T2822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3027.581006][ T2822] Call Trace: [ 3027.581012][ T2822] [ 3027.581020][ T2822] dump_stack_lvl+0x100/0x190 [ 3027.581050][ T2822] should_fail_ex.cold+0x5/0xa [ 3027.581075][ T2822] _copy_from_user+0x2e/0xd0 [ 3027.581098][ T2822] move_addr_to_kernel+0x65/0x170 [ 3027.581122][ T2822] __sys_bind+0x11d/0x260 [ 3027.581144][ T2822] ? __pfx___sys_bind+0x10/0x10 [ 3027.581164][ T2822] ? __fget_files+0x21f/0x3d0 [ 3027.581196][ T2822] ? __pfx_ksys_write+0x10/0x10 [ 3027.581222][ T2822] __x64_sys_bind+0x72/0xb0 [ 3027.581247][ T2822] ? lockdep_hardirqs_on+0x7d/0x110 [ 3027.581273][ T2822] do_syscall_64+0x123/0x790 [ 3027.581302][ T2822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3027.581321][ T2822] RIP: 0033:0x7f9d2f99f559 [ 3027.581336][ T2822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3027.581353][ T2822] RSP: 002b:00007f9d308d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3027.581371][ T2822] RAX: ffffffffffffffda RBX: 00007f9d2fc25fa0 RCX: 00007f9d2f99f559 [ 3027.581384][ T2822] RDX: 000000000000000c RSI: 0000200000000100 RDI: 0000000000000003 [ 3027.581394][ T2822] RBP: 00007f9d308d9090 R08: 0000000000000000 R09: 0000000000000000 [ 3027.581406][ T2822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3027.581417][ T2822] R13: 00007f9d2fc26038 R14: 00007f9d2fc25fa0 R15: 00007ffe936992e8 [ 3027.581444][ T2822] [ 3027.840216][ T629] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 3027.864530][ T2825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8053'. [ 3027.864703][ T2807] netlink: 'syz.0.8046': attribute type 12 has an invalid length. [ 3027.864725][ T2807] netlink: 'syz.0.8046': attribute type 29 has an invalid length. [ 3027.864738][ T2807] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8046'. [ 3027.864753][ T2807] netlink: 59 bytes leftover after parsing attributes in process `syz.0.8046'. [ 3027.865505][ T2807] selinux_netlink_send: 14 callbacks suppressed [ 3027.865518][ T2807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=2807 comm=syz.0.8046 [ 3027.886498][ T2825] FAULT_INJECTION: forcing a failure. [ 3027.886498][ T2825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3027.886531][ T2825] CPU: 1 UID: 0 PID: 2825 Comm: syz.3.8053 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 3027.886557][ T2825] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 3027.886565][ T2825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3027.886575][ T2825] Call Trace: [ 3027.886582][ T2825] [ 3027.886590][ T2825] dump_stack_lvl+0x100/0x190 [ 3027.886619][ T2825] should_fail_ex.cold+0x5/0xa [ 3027.886644][ T2825] _copy_from_user+0x2e/0xd0 [ 3027.886666][ T2825] copy_msghdr_from_user+0x9f/0x4c0 [ 3027.886689][ T2825] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3027.886713][ T2825] ? futex_unqueue+0x133/0x2c0 [ 3027.886735][ T2825] ___sys_sendmsg+0x106/0x1e0 [ 3027.886759][ T2825] ? __pfx____sys_sendmsg+0x10/0x10 [ 3027.886781][ T2825] ? __pfx___futex_wait+0x10/0x10 [ 3027.886801][ T2825] ? __pfx_try_to_wake_up+0x10/0x10 [ 3027.886822][ T2825] ? futex_hash+0x311/0x400 [ 3027.886853][ T2825] ? __fget_files+0x34/0x3d0 [ 3027.886893][ T2825] __sys_sendmmsg+0x20c/0x440 [ 3027.886913][ T2825] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3027.886928][ T2825] ? __fget_files+0x215/0x3d0 [ 3027.886959][ T2825] ? __pfx_do_futex+0x10/0x10 [ 3027.886987][ T2825] ? xfd_validate_state+0x129/0x190 [ 3027.887011][ T2825] __x64_sys_sendmmsg+0x9c/0x100 [ 3027.887028][ T2825] ? lockdep_hardirqs_on+0x7d/0x110 [ 3027.887051][ T2825] do_syscall_64+0x123/0x790 [ 3027.887076][ T2825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3027.887093][ T2825] RIP: 0033:0x7f9d2f99f559 [ 3027.887107][ T2825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3027.887123][ T2825] RSP: 002b:00007f9d308d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3027.887139][ T2825] RAX: ffffffffffffffda RBX: 00007f9d2fc25fa0 RCX: 00007f9d2f99f559 [ 3027.887151][ T2825] RDX: 04924924924924d0 RSI: 0000200000000080 RDI: 0000000000000004 [ 3027.887161][ T2825] RBP: 00007f9d2fa36b20 R08: 0000000000000000 R09: 0000000000000000 [ 3027.887172][ T2825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3027.887184][ T2825] R13: 00007f9d2fc26038 R14: 00007f9d2fc25fa0 R15: 00007ffe936992e8 [ 3027.887210][ T2825] [ 3028.009709][ T629] usb 3-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3028.011084][ T629] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3028.011109][ T629] usb 3-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 3028.011129][ T629] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3028.014989][ T629] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3028.015012][ T629] usb 3-1: Product: syz [ 3028.015025][ T629] usb 3-1: Manufacturer: syz [ 3028.015038][ T629] usb 3-1: SerialNumber: syz [ 3028.966219][ T629] usb 3-1: config 0 descriptor?? [ 3028.967356][ T2821] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3028.995454][ T629] usb 3-1: selecting invalid altsetting 0 [ 3029.240149][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.240338][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.240502][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.240654][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.240823][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.256455][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.256746][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.259733][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.267114][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.267408][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.267639][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.267868][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.268110][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.268349][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.280357][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.280649][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.280877][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.281114][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.281357][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.281587][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.289231][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.289515][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.289771][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.290960][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.291240][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.291479][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.309677][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.309911][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.310145][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.310385][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.310610][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.310840][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.324740][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.324983][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.325233][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.325461][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.325690][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.325922][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.333945][ T2821] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3029.745931][ T2851] FAULT_INJECTION: forcing a failure. [ 3029.745931][ T2851] name failslab, interval 1, probability 0, space 0, times 0 [ 3029.745966][ T2851] CPU: 0 UID: 0 PID: 2851 Comm: syz.0.8058 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 3029.745997][ T2851] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 3029.746006][ T2851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3029.746026][ T2851] Call Trace: [ 3029.746033][ T2851] [ 3029.746041][ T2851] dump_stack_lvl+0x100/0x190 [ 3029.746077][ T2851] should_fail_ex.cold+0x5/0xa [ 3029.746105][ T2851] should_failslab+0xc2/0x120 [ 3029.746134][ T2851] __kmalloc_noprof+0xfc/0x840 [ 3029.746157][ T2851] ? fib_default_rule_add+0x4f/0x420 [ 3029.746192][ T2851] fib_default_rule_add+0x4f/0x420 [ 3029.746221][ T2851] fib4_rules_init+0xa6/0x1c0 [ 3029.746245][ T2851] fib_net_init+0x1fb/0x460 [ 3029.746276][ T2851] ? __pfx_fib_net_init+0x10/0x10 [ 3029.746304][ T2851] ? timer_init_key+0x150/0x310 [ 3029.746335][ T2851] ? devinet_init_net+0x56c/0x8d0 [ 3029.746365][ T2851] ? __pfx_arp_net_init+0x10/0x10 [ 3029.746389][ T2851] ? __pfx_fib_net_init+0x10/0x10 [ 3029.746416][ T2851] ops_init+0x1e2/0x5f0 [ 3029.746439][ T2851] setup_net+0x118/0x3a0 [ 3029.746460][ T2851] ? __pfx_setup_net+0x10/0x10 [ 3029.746481][ T2851] ? bpf_lsm_namespace_init+0x9/0x10 [ 3029.746515][ T2851] copy_net_ns+0x340/0x7a0 [ 3029.746538][ T2851] create_new_namespaces+0x3ea/0xac0 [ 3029.746569][ T2851] copy_namespaces+0x468/0x5e0 [ 3029.746594][ T2851] copy_process+0x39dc/0x84c0 [ 3029.746630][ T2851] ? __pfx_copy_process+0x10/0x10 [ 3029.746651][ T2851] ? futex_wake+0x4ea/0x5e0 [ 3029.746686][ T2851] kernel_clone+0x176/0x9d0 [ 3029.746710][ T2851] ? __pfx_kernel_clone+0x10/0x10 [ 3029.746747][ T2851] __do_sys_clone+0xd9/0x120 [ 3029.746768][ T2851] ? __pfx___do_sys_clone+0x10/0x10 [ 3029.746813][ T2851] do_syscall_64+0x123/0x790 [ 3029.746841][ T2851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3029.746859][ T2851] RIP: 0033:0x7fe9a519f559 [ 3029.746875][ T2851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3029.746893][ T2851] RSP: 002b:00007fe9a5f82fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3029.746912][ T2851] RAX: ffffffffffffffda RBX: 00007fe9a5425fa0 RCX: 00007fe9a519f559 [ 3029.746925][ T2851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f8024000 [ 3029.746937][ T2851] RBP: 00007fe9a5236b20 R08: 0000000000000000 R09: 0000000000000000 [ 3029.746948][ T2851] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3029.746960][ T2851] R13: 00007fe9a5426038 R14: 00007fe9a5425fa0 R15: 00007fff96af1ad8 [ 3029.746987][ T2851] [ 3030.598337][ T2841] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 3030.602177][ T629] usb 3-1: USB disconnect, device number 23 [ 3030.656929][T17681] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 3030.811105][T17681] usb 2-1: Using ep0 maxpacket: 32 [ 3030.813452][T17681] usb 2-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3030.815491][T17681] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 3030.815517][T17681] usb 2-1: config 0 has no interface number 0 [ 3030.815553][T17681] usb 2-1: config 0 interface 184 has no altsetting 0 [ 3030.861972][T17681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3030.862014][T17681] usb 2-1: Product: syz [ 3030.862023][T17681] usb 2-1: Manufacturer: syz [ 3030.862032][T17681] usb 2-1: SerialNumber: syz [ 3030.890639][T17681] usb 2-1: config 0 descriptor?? [ 3031.227010][ T629] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 3031.847072][ T629] usb 3-1: Using ep0 maxpacket: 32 [ 3031.848976][ T629] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3031.849023][ T629] usb 3-1: New USB device found: idVendor=0ccd, idProduct=005e, bcdDevice=12.de [ 3031.851554][ T629] usb 3-1: config 7 has an invalid interface number: 253 but max is 0 [ 3031.851580][ T629] usb 3-1: config 7 has no interface number 0 [ 3031.853415][ T629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3031.853435][ T629] usb 3-1: Product: syz [ 3031.853449][ T629] usb 3-1: Manufacturer: syz [ 3031.853464][ T629] usb 3-1: SerialNumber: syz [ 3031.940366][T17681] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 3031.940389][T17681] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3032.015446][ T2898] overlayfs: conflicting options: userxattr,redirect_dir=on [ 3032.047992][ T1140] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 3032.297621][ T1140] usb 9-1: Using ep0 maxpacket: 32 [ 3032.302776][ T1140] usb 9-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3032.338235][ T1140] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 3032.339959][ T1140] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3032.341367][ T1140] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3032.341648][ T1140] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3032.341985][ T1140] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3032.488742][ T1140] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3032.490338][ T1140] usb 9-1: Product: syz [ 3032.490400][ T1140] usb 9-1: Manufacturer: syz [ 3032.491829][ T1140] usb 9-1: SerialNumber: syz [ 3032.613050][ T1140] usb 9-1: config 0 descriptor?? [ 3032.749518][ T1140] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3032.858802][ T1140] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3032.991318][T17681] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 3032.991403][T17681] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 3032.991433][T17681] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 3032.992444][T17681] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 3033.166029][ T629] em28xx 3-1:7.253: New device syz syz @ 480 Mbps (0ccd:005e, interface 253, class 253) [ 3033.166065][ T629] em28xx 3-1:7.253: Video interface 253 found: [ 3033.166081][ T629] em28xx 3-1:7.253: DVB interface 253 found: [ 3033.200079][T30313] usb 9-1: USB disconnect, device number 96 [ 3033.203027][T30313] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 3033.314306][ T2905] syzkaller0: entered promiscuous mode [ 3033.314328][ T2905] syzkaller0: entered allmulticast mode [ 3033.606768][T23149] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 3033.624889][ T629] em28xx 3-1:7.253: unknown em28xx chip ID (0) [ 3033.756991][T23149] usb 4-1: Using ep0 maxpacket: 8 [ 3033.757642][T23149] usb 4-1: New USB device found: idVendor=0525, idProduct=d292, bcdDevice=0.07 [ 3033.760245][T23149] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 3033.760269][T23149] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 3033.760288][T23149] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 3033.760304][T23149] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 3033.760323][T23149] usb 4-1: config 250 has no interface number 0 [ 3033.760376][T23149] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 3033.760400][T23149] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 3033.760420][T23149] usb 4-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 3033.760443][T23149] usb 4-1: config 250 interface 228 has no altsetting 0 [ 3033.761803][T23149] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3033.761824][T23149] usb 4-1: Product: syz [ 3033.761839][T23149] usb 4-1: SerialNumber: syz [ 3033.890143][T23149] hub 4-1:250.228: bad descriptor, ignoring hub [ 3033.890170][T23149] hub 4-1:250.228: probe with driver hub failed with error -5 [ 3034.640152][T23149] usb 2-1: USB disconnect, device number 127 [ 3034.841145][T17681] usb 4-1: reset high-speed USB device number 94 using dummy_hcd [ 3034.994867][ T629] em28xx 3-1:7.253: reading from i2c device at 0xa0 failed (error=-5) [ 3034.994900][ T629] em28xx 3-1:7.253: board has no eeprom [ 3035.047615][ T629] em28xx 3-1:7.253: Identified as Terratec Cinergy Hybrid T USB XS (em2882) (card=55) [ 3035.047644][ T629] em28xx 3-1:7.253: analog set to bulk mode. [ 3035.047660][ T629] em28xx 3-1:7.253: dvb set to bulk mode. [ 3035.049751][T30313] em28xx 3-1:7.253: Registering V4L2 extension [ 3035.086966][ T629] usb 3-1: USB disconnect, device number 24 [ 3035.088132][ T629] em28xx 3-1:7.253: Disconnecting em28xx [ 3035.092556][ T2926] FAULT_INJECTION: forcing a failure. [ 3035.092556][ T2926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3035.092609][ T2926] CPU: 0 UID: 0 PID: 2926 Comm: syz.0.8076 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 3035.092636][ T2926] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 3035.092644][ T2926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3035.092654][ T2926] Call Trace: [ 3035.092660][ T2926] [ 3035.092666][ T2926] dump_stack_lvl+0x100/0x190 [ 3035.092693][ T2926] should_fail_ex.cold+0x5/0xa [ 3035.092720][ T2926] _copy_from_user+0x2e/0xd0 [ 3035.092743][ T2926] move_addr_to_kernel+0x65/0x170 [ 3035.092766][ T2926] __sys_bind+0x11d/0x260 [ 3035.092787][ T2926] ? __pfx___sys_bind+0x10/0x10 [ 3035.092808][ T2926] ? __fget_files+0x21f/0x3d0 [ 3035.092843][ T2926] ? __pfx_ksys_write+0x10/0x10 [ 3035.092871][ T2926] __x64_sys_bind+0x72/0xb0 [ 3035.092892][ T2926] ? lockdep_hardirqs_on+0x7d/0x110 [ 3035.092919][ T2926] do_syscall_64+0x123/0x790 [ 3035.092947][ T2926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3035.092965][ T2926] RIP: 0033:0x7fe9a519f559 [ 3035.092979][ T2926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3035.092996][ T2926] RSP: 002b:00007fe9a5f83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 3035.093012][ T2926] RAX: ffffffffffffffda RBX: 00007fe9a5425fa0 RCX: 00007fe9a519f559 [ 3035.093024][ T2926] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 0000000000000003 [ 3035.093035][ T2926] RBP: 00007fe9a5f83090 R08: 0000000000000000 R09: 0000000000000000 [ 3035.093045][ T2926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3035.093055][ T2926] R13: 00007fe9a5426038 R14: 00007fe9a5425fa0 R15: 00007fff96af1ad8 [ 3035.093081][ T2926] [ 3035.189257][T30313] em28xx 3-1:7.253: Config register raw data: 0xffffffed [ 3035.189280][T30313] em28xx 3-1:7.253: AC97 chip type couldn't be determined [ 3035.189292][T30313] em28xx 3-1:7.253: No AC97 audio processor [ 3035.189305][T30313] em28xx 3-1:7.253: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 3035.189347][T30313] em28xx 3-1:7.253: Binding DVB extension [ 3035.189369][T30313] em28xx 3-1:7.253: no endpoint for DVB mode and transfer type 1 [ 3035.189382][T30313] em28xx 3-1:7.253: failed to pre-allocate USB transfer buffers for DVB. [ 3035.189406][T30313] em28xx 3-1:7.253: Registering input extension [ 3035.199410][ T629] em28xx 3-1:7.253: Closing input extension [ 3035.255920][T23149] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 3035.266448][ T629] em28xx: Freeing device [ 3035.332708][T17681] usb 4-1: failed to restore interface 228 altsetting 255 (error=-71) [ 3035.390728][T17681] usb 4-1: USB disconnect, device number 94 [ 3036.087807][T23149] usb 2-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00 [ 3036.089092][T23149] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3036.089129][T23149] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 3036.097211][T23149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3036.097235][T23149] usb 2-1: Product: syz [ 3036.097248][T23149] usb 2-1: Manufacturer: syz [ 3036.097260][T23149] usb 2-1: SerialNumber: syz [ 3036.113839][T23149] usb 2-1: unsupported MDLM descriptors [ 3036.694165][ T2936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8080'. [ 3037.389658][T17681] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 3037.893104][T25510] usb 9-1: new full-speed USB device number 97 using dummy_hcd [ 3037.941494][ T1140] usb 2-1: USB disconnect, device number 2 [ 3037.966372][T17681] usb 4-1: Using ep0 maxpacket: 32 [ 3037.968407][T17681] usb 4-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3037.969681][T17681] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 3037.969713][T17681] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3037.969749][T17681] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3037.969773][T17681] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3037.969798][T17681] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3037.971485][T17681] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3037.971507][T17681] usb 4-1: Product: syz [ 3037.971521][T17681] usb 4-1: Manufacturer: syz [ 3037.971534][T17681] usb 4-1: SerialNumber: syz [ 3037.974717][T17681] usb 4-1: config 0 descriptor?? [ 3037.981215][T17681] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3037.988026][T17681] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3038.037271][T25510] usb 9-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 3038.038123][T25510] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 3038.038146][T25510] usb 9-1: config 0 has no interface number 0 [ 3038.038180][T25510] usb 9-1: config 0 interface 41 has no altsetting 0 [ 3038.040859][T25510] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3038.040882][T25510] usb 9-1: Product: syz [ 3038.040896][T25510] usb 9-1: Manufacturer: syz [ 3038.040911][T25510] usb 9-1: SerialNumber: syz [ 3038.044316][T25510] usb 9-1: config 0 descriptor?? [ 3038.209651][ T1140] usb 4-1: USB disconnect, device number 95 [ 3038.215788][ T1140] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 3038.262713][ T2943] net_ratelimit: 42 callbacks suppressed [ 3038.262731][ T2943] openvswitch: netlink: Flow key attribute not present in set flow. [ 3038.415045][ T2955] overlayfs: conflicting options: userxattr,redirect_dir=on [ 3038.580332][T25510] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 3038.580513][T25510] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 3038.826372][T17681] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 3039.116408][T17681] usb 3-1: Using ep0 maxpacket: 8 [ 3039.118767][T17681] usb 3-1: New USB device found: idVendor=0525, idProduct=d292, bcdDevice=0.07 [ 3039.134604][T17681] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 3039.134627][T17681] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 3039.134659][T17681] usb 3-1: config 250 has no interfaces? [ 3039.307045][T25510] usb 9-1: USB disconnect, device number 97 [ 3039.314795][T17681] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3039.314835][T17681] usb 3-1: Product: syz [ 3039.314850][T17681] usb 3-1: SerialNumber: syz [ 3039.436708][ T2962] tipc: Started in network mode [ 3039.436747][ T2962] tipc: Node identity 4, cluster identity 4711 [ 3039.436757][ T2962] tipc: Node number set to 4 [ 3039.440292][ T2962] tipc: Enabled bearer , priority 0 [ 3039.441605][ T30] audit: type=1400 audit(1700002931.726:2296): avc: denied { append } for pid=2959 comm="syz.0.8086" name="sg0" dev="devtmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 3041.274497][T17681] usb 3-1: USB disconnect, device number 25 [ 3041.320997][ T629] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 3041.476980][ T629] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3041.489602][ T629] usb 4-1: not running at top speed; connect to a high speed hub [ 3041.489636][ T629] usb 4-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 3041.516924][ T629] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3041.516950][ T629] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3041.516988][ T629] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3041.555668][ T629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 3041.555696][ T629] usb 4-1: Product: syz [ 3041.555712][ T629] usb 4-1: Manufacturer: syz [ 3041.586577][ T629] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 3041.586635][ T629] uvcvideo 4-1:1.0: Entity type for entity Output 32770 was not initialized! [ 3041.586681][ T629] uvcvideo 4-1:1.0: Failed to create links for entity 32770 [ 3041.586696][ T629] uvcvideo 4-1:1.0: Failed to register entities (-22). [ 3041.723988][ T2971] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8092'. [ 3041.998432][T17681] usb 4-1: USB disconnect, device number 96 [ 3042.853457][ T2990] overlayfs: conflicting options: userxattr,redirect_dir=on [ 3042.949681][ T2995] comedi comedi1: mpc624: I/O base address or length out of range [ 3045.827669][T25510] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 3045.986185][T25510] usb 3-1: Using ep0 maxpacket: 8 [ 3045.988145][T25510] usb 3-1: New USB device found: idVendor=0525, idProduct=d292, bcdDevice=0.07 [ 3045.989585][T25510] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 3045.989610][T25510] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 3045.989630][T25510] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 3045.989647][T25510] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 3045.989667][T25510] usb 3-1: config 250 has no interface number 0 [ 3045.989709][T25510] usb 3-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 3045.989733][T25510] usb 3-1: config 250 interface 228 has no altsetting 0 [ 3045.991111][T25510] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3045.991132][T25510] usb 3-1: Product: syz [ 3045.991146][T25510] usb 3-1: SerialNumber: syz [ 3046.098580][T25510] hub 3-1:250.228: bad descriptor, ignoring hub [ 3046.098607][T25510] hub 3-1:250.228: probe with driver hub failed with error -5 [ 3046.591712][ T1220] usb 3-1: USB disconnect, device number 26 [ 3046.937900][ T3030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8105'. [ 3047.168803][ T3037] FAULT_INJECTION: forcing a failure. [ 3047.168803][ T3037] name failslab, interval 1, probability 0, space 0, times 0 [ 3047.168837][ T3037] CPU: 1 UID: 0 PID: 3037 Comm: syz.3.8109 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 3047.168864][ T3037] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 3047.168871][ T3037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3047.168881][ T3037] Call Trace: [ 3047.168888][ T3037] [ 3047.168895][ T3037] dump_stack_lvl+0x100/0x190 [ 3047.168935][ T3037] should_fail_ex.cold+0x5/0xa [ 3047.168963][ T3037] should_failslab+0xc2/0x120 [ 3047.168988][ T3037] __kmalloc_noprof+0xfc/0x840 [ 3047.169009][ T3037] ? rcu_is_watching+0x13/0xc0 [ 3047.169026][ T3037] ? tomoyo_realpath_from_path+0xb6/0x690 [ 3047.169052][ T3037] tomoyo_realpath_from_path+0xb6/0x690 [ 3047.169079][ T3037] tomoyo_path_number_perm+0x23c/0x580 [ 3047.169105][ T3037] ? tomoyo_path_number_perm+0x22e/0x580 [ 3047.169133][ T3037] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3047.169170][ T3037] ? __lock_acquire+0x5c0/0x1f40 [ 3047.169207][ T3037] ? __fget_files+0x34/0x3d0 [ 3047.169234][ T3037] ? find_held_lock+0x2b/0x80 [ 3047.169251][ T3037] ? hook_file_ioctl_common+0x140/0x440 [ 3047.169279][ T3037] ? __fget_files+0x21f/0x3d0 [ 3047.169309][ T3037] security_file_ioctl+0xd3/0x230 [ 3047.169339][ T3037] __x64_sys_ioctl+0xb7/0x210 [ 3047.169364][ T3037] do_syscall_64+0x123/0x790 [ 3047.169394][ T3037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3047.169412][ T3037] RIP: 0033:0x7f9d2f99f559 [ 3047.169427][ T3037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3047.169445][ T3037] RSP: 002b:00007f9d308d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3047.169464][ T3037] RAX: ffffffffffffffda RBX: 00007f9d2fc25fa0 RCX: 00007f9d2f99f559 [ 3047.169476][ T3037] RDX: 0000000000000003 RSI: 0000000040480923 RDI: 0000000000000003 [ 3047.169488][ T3037] RBP: 00007f9d308d9090 R08: 0000000000000000 R09: 0000000000000000 [ 3047.169499][ T3037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3047.169510][ T3037] R13: 00007f9d2fc26038 R14: 00007f9d2fc25fa0 R15: 00007ffe936992e8 [ 3047.169536][ T3037] [ 3047.169544][ T3037] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3047.174934][ T3022] FAULT_INJECTION: forcing a failure. [ 3047.174934][ T3022] name failslab, interval 1, probability 0, space 0, times 0 [ 3047.174965][ T3022] CPU: 1 UID: 0 PID: 3022 Comm: syz.0.8106 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 3047.174993][ T3022] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 3047.175001][ T3022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3047.175012][ T3022] Call Trace: [ 3047.175019][ T3022] [ 3047.175025][ T3022] dump_stack_lvl+0x100/0x190 [ 3047.175056][ T3022] should_fail_ex.cold+0x5/0xa [ 3047.175081][ T3022] should_failslab+0xc2/0x120 [ 3047.175107][ T3022] kmem_cache_alloc_noprof+0x92/0x6a0 [ 3047.175128][ T3022] ? __kernfs_new_node+0xd2/0xa10 [ 3047.175153][ T3022] __kernfs_new_node+0xd2/0xa10 [ 3047.175176][ T3022] ? __pfx___kernfs_new_node+0x10/0x10 [ 3047.175199][ T3022] ? lock_acquire+0x1d1/0x380 [ 3047.175219][ T3022] ? kernfs_root+0x23/0x2a0 [ 3047.175236][ T3022] ? find_held_lock+0x2b/0x80 [ 3047.175252][ T3022] ? kernfs_root+0xee/0x2a0 [ 3047.175267][ T3022] ? kernfs_root+0xee/0x2a0 [ 3047.175290][ T3022] kernfs_new_node+0x194/0x200 [ 3047.175312][ T3022] ? __pfx_kernfs_new_node+0x10/0x10 [ 3047.175333][ T3022] ? kernfs_add_one+0x213/0xb40 [ 3047.175357][ T3022] __kernfs_create_file+0x53/0x350 [ 3047.175383][ T3022] sysfs_add_file_mode_ns+0x207/0x3c0 [ 3047.175407][ T3022] internal_create_group+0x593/0xfb0 [ 3047.175432][ T3022] ? __pfx_internal_create_group+0x10/0x10 [ 3047.175454][ T3022] ? kernfs_create_link+0x1f1/0x280 [ 3047.175484][ T3022] internal_create_groups+0x9d/0x150 [ 3047.175505][ T3022] device_add+0x71a/0x1970 [ 3047.175528][ T3022] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3047.175552][ T3022] ? __pfx_device_add+0x10/0x10 [ 3047.175573][ T3022] ? lockdep_init_map_type+0x5c/0x250 [ 3047.175594][ T3022] ? __init_waitqueue_head+0xca/0x150 [ 3047.175621][ T3022] netdev_register_kobject+0x1df/0x410 [ 3047.175648][ T3022] register_netdevice+0x1313/0x26b0 [ 3047.175671][ T3022] ? __pfx_register_netdevice+0x10/0x10 [ 3047.175692][ T3022] ? dev_addr_mod+0x14f/0x2c0 [ 3047.175717][ T3022] __tun_chr_ioctl+0x1e6e/0x4940 [ 3047.175735][ T3022] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3047.175754][ T3022] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 3047.175777][ T3022] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 3047.175795][ T3022] ? __fget_files+0x34/0x3d0 [ 3047.175829][ T3022] ? selinux_file_ioctl+0x1e0/0x290 [ 3047.175844][ T3022] ? selinux_file_ioctl+0x1e7/0x290 [ 3047.175862][ T3022] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 3047.175883][ T3022] __x64_sys_ioctl+0x18e/0x210 [ 3047.175910][ T3022] do_syscall_64+0x123/0x790 [ 3047.175936][ T3022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3047.175955][ T3022] RIP: 0033:0x7fe9a519f559 [ 3047.175971][ T3022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3047.175988][ T3022] RSP: 002b:00007fe9a5f83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3047.176008][ T3022] RAX: ffffffffffffffda RBX: 00007fe9a5425fa0 RCX: 00007fe9a519f559 [ 3047.176021][ T3022] RDX: 0000200000000180 RSI: 00000000400454ca RDI: 0000000000000007 [ 3047.176034][ T3022] RBP: 00007fe9a5236b20 R08: 0000000000000000 R09: 0000000000000000 [ 3047.176045][ T3022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3047.176057][ T3022] R13: 00007fe9a5426038 R14: 00007fe9a5425fa0 R15: 00007fff96af1ad8 [ 3047.176082][ T3022] [ 3048.062963][ T3058] netlink: 'syz.1.8113': attribute type 12 has an invalid length. [ 3048.062983][ T3058] netlink: 'syz.1.8113': attribute type 29 has an invalid length. [ 3048.062992][ T3058] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8113'. [ 3048.063005][ T3058] netlink: 59 bytes leftover after parsing attributes in process `syz.1.8113'. [ 3048.065626][ T3058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=3058 comm=syz.1.8113 [ 3048.082132][T25510] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 3048.807800][T25510] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 3048.809547][T25510] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 3048.809574][T25510] usb 4-1: config 1 has no interface number 0 [ 3048.811992][T25510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3048.812017][T25510] usb 4-1: Product: syz [ 3048.812032][T25510] usb 4-1: Manufacturer: syz [ 3048.812045][T25510] usb 4-1: SerialNumber: syz [ 3048.863194][ T1220] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 3049.072877][T25510] usb 4-1: 3:1 : does not exist [ 3049.072907][T25510] usb 4-1: 3:2 : does not exist [ 3049.091011][ T1220] usb 3-1: Using ep0 maxpacket: 32 [ 3049.091825][ T1220] usb 3-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3049.110748][ T1220] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 3049.110774][ T1220] usb 3-1: config 0 has no interface number 0 [ 3049.110812][ T1220] usb 3-1: config 0 interface 184 has no altsetting 0 [ 3049.114482][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3049.114508][ T1220] usb 3-1: Product: syz [ 3049.114522][ T1220] usb 3-1: Manufacturer: syz [ 3049.114537][ T1220] usb 3-1: SerialNumber: syz [ 3049.162059][ T1220] usb 3-1: config 0 descriptor?? [ 3050.039398][T23149] usb 4-1: USB disconnect, device number 97 [ 3051.305671][ T1220] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 3051.305728][ T1220] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3051.307041][ T1220] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 3051.307066][ T1220] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 3051.307083][ T1220] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 3051.307099][ T1220] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 3051.307270][ T1220] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 3051.319208][ T1220] usb 3-1: USB disconnect, device number 27 [ 3051.575277][ T3087] FAULT_INJECTION: forcing a failure. [ 3051.575277][ T3087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3051.575308][ T3087] CPU: 0 UID: 0 PID: 3087 Comm: syz.3.8123 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 3051.575333][ T3087] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 3051.575341][ T3087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3051.575351][ T3087] Call Trace: [ 3051.575357][ T3087] [ 3051.575364][ T3087] dump_stack_lvl+0x100/0x190 [ 3051.575393][ T3087] should_fail_ex.cold+0x5/0xa [ 3051.575418][ T3087] _copy_from_user+0x2e/0xd0 [ 3051.575442][ T3087] __sys_bpf+0x2f5/0x4b60 [ 3051.575471][ T3087] ? __pfx___sys_bpf+0x10/0x10 [ 3051.575493][ T3087] ? find_held_lock+0x2b/0x80 [ 3051.575509][ T3087] ? get_pid_task+0xfc/0x250 [ 3051.575532][ T3087] ? get_pid_task+0xfc/0x250 [ 3051.575563][ T3087] ? find_held_lock+0x2b/0x80 [ 3051.575584][ T3087] ? rcu_read_lock_any_held+0x6a/0x90 [ 3051.575602][ T3087] ? find_held_lock+0x2b/0x80 [ 3051.575617][ T3087] ? ksys_write+0x190/0x250 [ 3051.575638][ T3087] ? ksys_write+0x190/0x250 [ 3051.575658][ T3087] ? lock_acquire+0x1d1/0x380 [ 3051.575697][ T3087] ? fput+0x7c/0x100 [ 3051.575721][ T3087] ? ksys_write+0x1ac/0x250 [ 3051.575744][ T3087] ? __x64_sys_bpf+0xce/0x140 [ 3051.575766][ T3087] __x64_sys_bpf+0xce/0x140 [ 3051.575788][ T3087] ? do_syscall_64+0xae/0x790 [ 3051.575814][ T3087] do_syscall_64+0x123/0x790 [ 3051.575842][ T3087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3051.575859][ T3087] RIP: 0033:0x7f9d2f99f559 [ 3051.575874][ T3087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3051.575890][ T3087] RSP: 002b:00007f9d308d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3051.575908][ T3087] RAX: ffffffffffffffda RBX: 00007f9d2fc25fa0 RCX: 00007f9d2f99f559 [ 3051.575920][ T3087] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 000000000000000a [ 3051.575931][ T3087] RBP: 00007f9d308d9090 R08: 0000000000000000 R09: 0000000000000000 [ 3051.575942][ T3087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3051.575952][ T3087] R13: 00007f9d2fc26038 R14: 00007f9d2fc25fa0 R15: 00007ffe936992e8 [ 3051.575977][ T3087] [ 3051.682340][ T3089] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8124'. [ 3051.787818][ T3090] bridge2: entered promiscuous mode [ 3051.860911][ T3090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8122'. [ 3052.485265][ T3099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8125'. [ 3052.514055][ T3101] warning: `syz.2.8125' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 3052.514119][ T30] audit: type=1400 audit(1700002944.797:2297): avc: denied { ioctl } for pid=3098 comm="syz.2.8125" path="socket:[158455]" dev="sockfs" ino=158455 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3052.749989][ T30] audit: type=1400 audit(1700002945.037:2298): avc: denied { ioctl } for pid=3113 comm="syz.8.8130" path="socket:[157467]" dev="sockfs" ino=157467 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 3055.763472][ T3144] overlayfs: conflicting options: userxattr,redirect_dir=on [ 3055.784762][ T3146] overlayfs: conflicting options: userxattr,redirect_dir=on [ 3055.890626][ T3150] gadgetfs: bound to dummy_udc driver [ 3055.975649][T30313] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 3056.885839][T30313] usb 3-1: Using ep0 maxpacket: 8 [ 3057.003563][T30313] usb 3-1: New USB device found: idVendor=0525, idProduct=d292, bcdDevice=0.07 [ 3057.594332][T30313] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 3057.594972][T30313] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 3057.594999][T30313] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 3057.616195][T30313] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 3057.616372][T30313] usb 3-1: config 250 has no interface number 0 [ 3057.616815][T30313] usb 3-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 3057.616848][T30313] usb 3-1: config 250 interface 228 has no altsetting 0 [ 3058.121925][T30313] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3058.121943][T30313] usb 3-1: Product: syz [ 3058.121951][T30313] usb 3-1: SerialNumber: syz [ 3058.159425][T30313] hub 3-1:250.228: bad descriptor, ignoring hub [ 3058.159443][T30313] hub 3-1:250.228: probe with driver hub failed with error -5 [ 3058.841252][ T3163] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8141'. [ 3059.329011][ T3165] [ 3059.331359][ T3165] ============================================ [ 3059.337488][ T3165] WARNING: possible recursive locking detected [ 3059.343610][ T3165] syzkaller #0 Tainted: G L Y [ 3059.349641][ T3165] -------------------------------------------- [ 3059.355761][ T3165] syz.8.8141/3165 is trying to acquire lock: [ 3059.361724][ T3165] ffff888026161368 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0xd12/0x11d0 [ 3059.372129][ T3165] [ 3059.372129][ T3165] but task is already holding lock: [ 3059.379488][ T3165] ffff888026161368 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0xc5e/0x11d0 [ 3059.389923][ T3165] [ 3059.389923][ T3165] other info that might help us debug this: [ 3059.397956][ T3165] Possible unsafe locking scenario: [ 3059.397956][ T3165] [ 3059.405390][ T3165] CPU0 [ 3059.408644][ T3165] ---- [ 3059.411894][ T3165] lock(&sb->s_type->i_mutex_key#9); [ 3059.417241][ T3165] lock(&sb->s_type->i_mutex_key#9); [ 3059.422604][ T3165] [ 3059.422604][ T3165] *** DEADLOCK *** [ 3059.422604][ T3165] [ 3059.430807][ T3165] May be due to missing lock nesting notation [ 3059.430807][ T3165] [ 3059.439095][ T3165] locks held by syz.8.8141/3165: 1, last CPU#0: [ 3059.445313][ T3165] #0: ffff888026161368 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0xc5e/0x11d0 [ 3059.456158][ T3165] [ 3059.456158][ T3165] stack backtrace: [ 3059.462024][ T3165] CPU: 0 UID: 0 PID: 3165 Comm: syz.8.8141 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 3059.472935][ T3165] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 3059.478709][ T3165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 3059.488748][ T3165] Call Trace: [ 3059.492002][ T3165] [ 3059.494907][ T3165] dump_stack_lvl+0x100/0x190 [ 3059.499578][ T3165] print_deadlock_bug.cold+0xbd/0xca [ 3059.504840][ T3165] __lock_acquire+0x13f4/0x1f40 [ 3059.509669][ T3165] lock_acquire+0x1d1/0x380 [ 3059.514147][ T3165] ? blkdev_write_iter+0xd12/0x11d0 [ 3059.519335][ T3165] ? __pfx___might_resched+0x10/0x10 [ 3059.524595][ T3165] down_read+0x94/0x4c0 [ 3059.528739][ T3165] ? blkdev_write_iter+0xd12/0x11d0 [ 3059.533997][ T3165] ? __pfx_down_read+0x10/0x10 [ 3059.538734][ T3165] ? filemap_check_errors+0xa9/0x150 [ 3059.544009][ T3165] blkdev_write_iter+0xd12/0x11d0 [ 3059.549007][ T3165] iter_file_splice_write+0x830/0x10b0 [ 3059.554444][ T3165] ? copy_splice_read+0x739/0xbb0 [ 3059.559452][ T3165] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3059.565324][ T3165] ? irqentry_exit+0x202/0xab0 [ 3059.570066][ T3165] ? __pfx_copy_splice_read+0x10/0x10 [ 3059.575424][ T3165] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3059.581300][ T3165] direct_splice_actor+0x192/0x690 [ 3059.586398][ T3165] splice_direct_to_actor+0x341/0xa30 [ 3059.591756][ T3165] ? __pfx_direct_splice_actor+0x10/0x10 [ 3059.597372][ T3165] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3059.603238][ T3165] ? irqentry_exit+0x202/0xab0 [ 3059.607979][ T3165] ? lockdep_hardirqs_on+0x7d/0x110 [ 3059.613156][ T3165] do_splice_direct+0x174/0x240 [ 3059.617990][ T3165] ? __pfx_do_splice_direct+0x10/0x10 [ 3059.623336][ T3165] ? selinux_file_permission+0x30/0x6a0 [ 3059.628861][ T3165] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 3059.634733][ T3165] ? bpf_lsm_file_permission+0x9/0x10 [ 3059.640081][ T3165] ? security_file_permission+0x76/0x210 [ 3059.645701][ T3165] ? rw_verify_area+0xce/0x6d0 [ 3059.650442][ T3165] do_sendfile+0xadc/0xe20 [ 3059.654834][ T3165] ? __pfx_do_sendfile+0x10/0x10 [ 3059.659751][ T3165] ? irqentry_exit+0x202/0xab0 [ 3059.664521][ T3165] ? lockdep_hardirqs_on+0x7d/0x110 [ 3059.669701][ T3165] ? irqentry_exit+0x202/0xab0 [ 3059.674443][ T3165] __x64_sys_sendfile64+0x1d8/0x220 [ 3059.679625][ T3165] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3059.685337][ T3165] do_syscall_64+0x123/0x790 [ 3059.689935][ T3165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3059.695804][ T3165] RIP: 0033:0x7f7b15b9f559 [ 3059.700194][ T3165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3059.719797][ T3165] RSP: 002b:00007f7b16a54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3059.728192][ T3165] RAX: ffffffffffffffda RBX: 00007f7b15e26180 RCX: 00007f7b15b9f559 [ 3059.736138][ T3165] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 3059.744084][ T3165] RBP: 00007f7b15c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 3059.752030][ T3165] R10: 0000000020000005 R11: 0000000000000246 R12: 0000000000000000 [ 3059.759981][ T3165] R13: 00007f7b15e26218 R14: 00007f7b15e26180 R15: 00007ffebf082118 [ 3059.767940][ T3165] [ 3059.976702][T30916] usb 3-1: USB disconnect, device number 28