last executing test programs: 2m21.161860984s ago: executing program 4 (id=4696): r0 = syz_io_uring_setup(0x3a01, &(0x7f0000000080)={0x0, 0x3c42, 0x100, 0x1, 0x1ca}, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="576bb5b78000200000000900", 0x10) close_range(r1, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x141a82, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000480)=@assoc_value, &(0x7f00000004c0)=0x8) write$P9_RLERROR(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="09001b00f9000100001e9d5f9634ea765693e28590805159f88df13072854f9ed9cce80c95babf5f3b06a3edf40ba4873362d117e014cf02d097e4c377744b5f9de4c0622d367b39ed4468ab02b2f38f97f28e76ff5a3c527871510eb1358f5f03b3ae6c60eac051c2309847"], 0x9) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x3}]}, 0x40}}, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f00000003c0)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r3, 0x3ba0, &(0x7f0000000240)={0x1d9f87bc8087852b, 0x16, r6, 0x0, 0xf, 0x0, 0x0}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) sendto$l2tp(r3, &(0x7f0000000180), 0x0, 0x4000, &(0x7f0000000200)={0x2, 0x0, @multicast1, 0x2}, 0x10) 2m21.052331137s ago: executing program 4 (id=4697): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) dup(0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000000c0)={0x2, 0x200, 0x1ff, 0x8, 0x0, 0x7}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m18.632887563s ago: executing program 4 (id=4704): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0xd8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2m18.469966138s ago: executing program 4 (id=4709): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @empty}], 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) io_setup(0x6, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x2, r6, 0x0}]) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x9, @SEQ_NOTEON=@note=0x16}) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_get$uid(0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') socket$nl_generic(0x10, 0x3, 0x10) 2m16.913208992s ago: executing program 4 (id=4714): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) unshare(0x2a020400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x2, {0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}}}, 0x32) 2m16.783197944s ago: executing program 4 (id=4716): unshare(0x600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280)) (fail_nth: 1) 2m16.592391761s ago: executing program 32 (id=4716): unshare(0x600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280)) (fail_nth: 1) 2m7.895979406s ago: executing program 5 (id=4753): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000082, 0x0, 0x8002}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)) syz_genetlink_get_family_id$batadv(0x0, r6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) fsopen(&(0x7f0000000280)='autofs\x00', 0x1) 2m6.311644045s ago: executing program 5 (id=4762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000003580)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003540)={&(0x7f00000035c0)={0x48, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x40c0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x66, 0x0, 0x46, 0x8, 0x84f, 0x1, 0xf6fb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x4, 0x30, 0x7, "", [{{0x9, 0x4, 0x2a, 0x5, 0x0, 0x3a, 0x65, 0xee, 0x2}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_loaded', 0x103080, 0x103) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_PHYS(r9, 0x4008556c, &(0x7f0000000140)='syz1\x00') syz_emit_ethernet(0x86, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x5, [{@remote, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2, 0x3}, {@rand_addr=0x64010100}, {@dev, 0x4}]}]}}}}}}}, 0x0) read$FUSE(r7, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3, 0x6, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x9, 0x3, 0x8}}) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000002340)=ANY=[@ANYBLOB="381100001200000228bd7000ffdbdf25020602054e2138c000000000000003000000070000000000000000080000020000002a00000008000000", @ANYRES32=r10, @ANYBLOB="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"], 0x1138}, 0x1, 0x0, 0x0, 0x8050}, 0x804) recvmmsg(0xffffffffffffffff, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/1, 0xb}], 0x1}, 0x11001}, {{0x0, 0x0, 0x0}}], 0x56, 0x0, 0x0) 2m4.834931558s ago: executing program 5 (id=4773): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="27c3", 0x2}], 0x1}, 0x4) (fail_nth: 1) 2m4.336844709s ago: executing program 5 (id=4776): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet6(0xa, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x5, 0x0, [{0x3, 0x6, 0x3, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0xfe, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x7f, '\x00', 0xff}, {0x6, 0x5a, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0x8, '\x00', 0xfa}, {0x1, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x7}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x86, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0xb, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x0, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x6, 0x95, 0x7}}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0x4000000b, 0x101, 0x1, 0x8, 0x8, 0x5, 0x4}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9001) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(r5, 0x4b31, &(0x7f0000000300)) 2m1.652720336s ago: executing program 5 (id=4781): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r3, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (fail_nth: 1) 2m0.912390789s ago: executing program 5 (id=4785): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newtfilter={0xf80, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x41}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @filter_kind_options=@f_u32={{0x8}, {0xf1c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffef, 0xfff1}}, @TCA_U32_LINK={0x8, 0x3, 0x2c0000}, @TCA_U32_DIVISOR={0x8, 0x4, 0xfe}, @TCA_U32_ACT={0xf00, 0x7, [@m_ctinfo={0x6c, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x3d, 0x6, "0d76738cc19cb2b5081b6f8319738a116bf96408f7dd158d84fe7037e3b8ea13082f958c9213d9247c3f998e23606584f40ab0e8ce552cb168"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x40, 0x7, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x88}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x81}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0xfffffbff, 0x10000000, 0x2, 0x8}, 0x80, 0xd}, [{0xc9, 0x2, 0x1, 0x400, 0x8, 0x1}, {0x0, 0x6, 0x47ecf86e, 0x0, 0x1, 0x6}, {0x2, 0x2072, 0x425, 0x7fff, 0x1, 0x77}, {0x1, 0x8, 0x10001, 0x1, 0x4, 0x10}, {0x5, 0x1000, 0x2, 0x83, 0x3, 0x8}, {0xfffffffc, 0x8, 0x1, 0x1, 0x80000000}, {0x5d, 0x1000, 0x1ff, 0xe849, 0x8, 0x4}, {0x7, 0x2, 0x28, 0x4, 0x7, 0x7}, {0x8, 0x1, 0x9b, 0x6, 0x4, 0x8000}, {0x80, 0x2, 0x7, 0x5, 0x7ff, 0x893}, {0x2, 0x2, 0x5, 0x3, 0x65, 0x9}, {0x1, 0x4, 0x4, 0x9, 0x6, 0xe}, {0xffff, 0x100, 0x3, 0x7, 0x6, 0x7}, {0x4, 0x7ff, 0x5, 0x7, 0x5, 0x1}, {0x7, 0x7fff, 0x0, 0x4004, 0x9, 0x80}, {0x5, 0x48, 0xa94, 0x6, 0xffffffff, 0xff}, {0x7, 0xff00, 0x4, 0x7, 0x9, 0xb}, {0x5, 0xa3, 0xb, 0x9, 0x4800, 0x6b}, {0x9, 0x1, 0x2, 0x1, 0x8, 0x2f1}, {0xd32, 0x1000, 0x80, 0x81, 0x9, 0x1}, {0xf5, 0x9, 0x3, 0xb000000, 0x4, 0x5}, {0x4, 0x400, 0x1, 0x7ff, 0x36, 0x7}, {0xfffffffe, 0x80000000, 0x3, 0x0, 0xc, 0x1}, {0x10, 0x3, 0x3, 0x7, 0x2, 0xfffffffa}, {0xfffffff7, 0x4, 0x1, 0x6c88, 0x5, 0x10000}, {0x9, 0xec35, 0x2, 0x9, 0x6, 0x9}, {0x2, 0x0, 0x3, 0x8, 0x6, 0x1000}, {0xfffffffb, 0x200, 0x2, 0x5, 0xfffffffc, 0x7}, {0x3, 0x401, 0x1, 0xf3, 0xef0, 0xfffffffa}, {0x3, 0x0, 0x8, 0xe32, 0x400, 0x8}, {0x7f, 0x4, 0xfffffffe, 0xfffffffb, 0x1, 0x80}, {0x4, 0x8, 0x6, 0x99, 0x6, 0x1000}, {0x593, 0x8, 0x6, 0x7, 0xd2df, 0x4}, {0x0, 0x7, 0x1, 0xaf96, 0x10, 0xfffffff7}, {0x0, 0x5, 0x1ff, 0x7, 0x1ff, 0x4}, {0x3, 0x3ff, 0x3, 0x3, 0x19, 0xb5}, {0x2, 0x3, 0xf0, 0xff, 0xfffffffe, 0x8b}, {0x10000, 0x1ff, 0x2, 0x97cf, 0x45b}, {0x9, 0x3, 0x80000000, 0x80000000, 0x0, 0xb}, {0x9, 0xd9f5, 0xe3, 0xb, 0x5, 0x4}, {0x7, 0xf, 0x2, 0x3, 0x10000, 0xfffff001}, {0x8, 0xfffffffb, 0xfff, 0x4, 0x731b482, 0x8}, {0x1, 0xc738, 0x9, 0x2, 0x8, 0x7}, {0x7, 0x7ff, 0x8, 0xffffffd8, 0x0, 0xfffffffb}, {0x200, 0x3, 0x3, 0xfff, 0x2, 0x2}, {0x0, 0x1, 0xff, 0xffffd21c, 0x4, 0x3}, {0xe2, 0x0, 0x9, 0x4, 0xfffff001, 0x400}, {0x0, 0x1000, 0x80, 0x4, 0x4f, 0xfffffffe}, {0x7e, 0x400, 0x8, 0x5, 0x7, 0x8}, {0x8, 0x0, 0x6, 0x2, 0x5, 0xffffff81}, {0x8, 0x100, 0xff, 0x1ff, 0x964, 0x8000}, {0x80, 0x0, 0x3, 0x4, 0x1, 0x18}, {0x5, 0xcc7, 0x8, 0x80, 0x0, 0x1}, {0x3, 0x4, 0x5, 0x7e, 0x8, 0xfffffff5}, {0x2, 0x9, 0x8, 0x9, 0x1}, {0x7, 0x1, 0x8, 0x3ff, 0x2df, 0x6}, {0xc, 0x20c05, 0xb, 0x101, 0x2}, {0x3, 0x56, 0x6, 0x3, 0x7, 0x9}, {0x5, 0x6, 0x8, 0x7, 0x7, 0x1}, {0x5, 0x7, 0x9, 0xd3, 0x8, 0x1}, {0x3, 0x1, 0x455, 0xc9000000, 0x9, 0x10000}, {0x9, 0x8, 0x8, 0x0, 0x1, 0x9}, {0xb47, 0x1, 0x2, 0x852, 0xf, 0xff}, {0xe, 0x3, 0x401, 0x3, 0x9, 0xffffa36b}, {0x4, 0x80000001, 0x2, 0x9f0, 0x2, 0x6}, {0xfffffffc, 0x80000000, 0x0, 0x0, 0xd, 0x4}, {0x5, 0x4, 0x401, 0x0, 0x9, 0x1}, {0x1, 0x5, 0x8, 0x0, 0x7, 0x1000}, {0xa, 0x80, 0x6, 0x9, 0x5852, 0x1}, {0x2, 0x0, 0x7fffffff, 0xa4c8, 0x5, 0x4}, {0x9, 0x12, 0x101, 0x1000, 0x2, 0x1}, {0x6, 0x10001, 0x100, 0x3, 0xff}, {0x7d, 0x4, 0x7, 0x0, 0x81, 0x7}, {0x80000000, 0x4f, 0x101, 0x8, 0xe, 0x6}, {0x187, 0x5, 0x6, 0x1, 0x6, 0x1000}, {0x0, 0xf, 0x1, 0x8e, 0x4, 0x8}, {0x1, 0x2, 0x9, 0xffffffb5, 0x17a, 0x1}, {0x81, 0x0, 0x7ff, 0x8, 0x8001, 0x1}, {0x81, 0x2, 0x1, 0x1, 0x5, 0x6}, {0x10000, 0x2, 0x1000, 0x81, 0x4, 0x7}, {0x1, 0x1, 0x80000001, 0x6, 0x7fff, 0xfffffff8}, {0x5, 0x5, 0xad, 0x2, 0x400, 0x3}, {0x9, 0x9, 0x6, 0x2, 0x8, 0x94a}, {0x2, 0x1, 0x6, 0x10000, 0x9366, 0x5}, {0xff, 0x3, 0x4, 0x2, 0x4, 0x2}, {0x1ff, 0x7f, 0x0, 0x4, 0x6, 0x5}, {0x4, 0x9, 0x6, 0x100000, 0xfa1, 0xfffffff5}, {0x7, 0x101, 0x93d0, 0xf3, 0x3, 0x9}, {0x8000, 0x2, 0x0, 0xfb7, 0x8, 0x1000}, {0x7fff, 0x0, 0x3, 0x0, 0xff, 0x8}, {0x1a4e, 0x9, 0x6, 0x7, 0x7, 0x9}, {0x7, 0x7, 0x0, 0xf, 0x0, 0x4}, {0x9, 0x9, 0x8, 0xbc5, 0x81, 0x100}, {0x40, 0x4, 0x7, 0x800, 0x4, 0x7}, {0xb12a, 0x9, 0xa9, 0x1ff, 0x6, 0x7}, {0x100, 0x1b00, 0x1ff, 0x5, 0x1, 0x8}, {0x5df, 0x7fff, 0xc000, 0x8, 0x5, 0xca4}, {0xf, 0xa, 0x6, 0x3, 0x10000, 0x6}, {0x7, 0x200, 0x5, 0x510, 0x8, 0x7}, {0x5cc0e9e5, 0x3, 0x0, 0x7fff, 0x7fffffff, 0x5}, {0x10, 0xfff, 0xffffffff, 0x3ff, 0x1, 0x8}, {0x1, 0x1, 0xd, 0xfff, 0x2, 0x35d}, {0x6, 0x8, 0x6, 0x8, 0x8, 0x3ff}, {0x7, 0x7, 0x5, 0x6, 0x2, 0xcdf}, {0x9, 0x7, 0xa92c, 0x9, 0xa8, 0x4}, {0x1, 0x9, 0x10001, 0xfa6, 0x3, 0x8}, {0x5, 0xdad, 0x1, 0xe2f, 0xd, 0x6}, {0x3, 0x4, 0x2, 0x6, 0x1, 0x8001}, {0xb, 0x439d3188, 0xffff, 0x5, 0x1ff, 0x1}, {0xe2a0, 0x54, 0xffffffff, 0x6, 0x3, 0x80000000}, {0x1000, 0x4, 0xd3, 0x4, 0xdc, 0x2}, {0x6, 0x2, 0x8, 0x4, 0xfe3, 0x4}, {0x6, 0x4, 0x8, 0x9, 0x7f, 0x8}, {0x9, 0x2, 0x5, 0xfffffff8, 0xffffffff, 0x10001}, {0x0, 0x4, 0x30d, 0x2, 0x3e5, 0x7}, {0x8, 0xfff, 0x9, 0x2, 0x1, 0x8}, {0x8, 0x80000000, 0x2, 0x6, 0x5, 0x7fffffff}, {0x80000001, 0x5, 0x80000001, 0xdc, 0x2}, {0x80, 0x4, 0x0, 0x7, 0x1, 0x8}, {0x2, 0x200, 0x5be, 0xfffffff3, 0x7, 0x800}, {0x1000, 0x1, 0x3, 0x9, 0xa, 0x5}, {0xc, 0x4000000, 0x5ea, 0x10, 0x8, 0x80000000}, {0xf, 0x2, 0x80000001, 0x5, 0x2a59, 0x1}, {0x3e87, 0x3, 0x5, 0x9, 0x1, 0x9}, {0xffffff64, 0x0, 0x7, 0x3, 0xae85, 0x25c98821}, {0x0, 0x7, 0xd, 0x400, 0x6, 0xe6c}, {0xffffffff, 0x2, 0x0, 0x100, 0x4, 0x5855}, {0x6528, 0x5, 0x96, 0x8001, 0xe246, 0x6}], [{0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x7}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x6, 0x1}, {}, {}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2}, {0xe2e05a6e9f46ef72, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x9a2799bccd0b4636, 0x1}, {0x1}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xf80}, 0x1, 0x0, 0x0, 0x4050}, 0x20000040) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 1) 2m0.54460726s ago: executing program 33 (id=4785): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newtfilter={0xf80, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x41}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @filter_kind_options=@f_u32={{0x8}, {0xf1c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffef, 0xfff1}}, @TCA_U32_LINK={0x8, 0x3, 0x2c0000}, @TCA_U32_DIVISOR={0x8, 0x4, 0xfe}, @TCA_U32_ACT={0xf00, 0x7, [@m_ctinfo={0x6c, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x3d, 0x6, "0d76738cc19cb2b5081b6f8319738a116bf96408f7dd158d84fe7037e3b8ea13082f958c9213d9247c3f998e23606584f40ab0e8ce552cb168"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x40, 0x7, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x88}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x81}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0xfffffbff, 0x10000000, 0x2, 0x8}, 0x80, 0xd}, [{0xc9, 0x2, 0x1, 0x400, 0x8, 0x1}, {0x0, 0x6, 0x47ecf86e, 0x0, 0x1, 0x6}, {0x2, 0x2072, 0x425, 0x7fff, 0x1, 0x77}, {0x1, 0x8, 0x10001, 0x1, 0x4, 0x10}, {0x5, 0x1000, 0x2, 0x83, 0x3, 0x8}, {0xfffffffc, 0x8, 0x1, 0x1, 0x80000000}, {0x5d, 0x1000, 0x1ff, 0xe849, 0x8, 0x4}, {0x7, 0x2, 0x28, 0x4, 0x7, 0x7}, {0x8, 0x1, 0x9b, 0x6, 0x4, 0x8000}, {0x80, 0x2, 0x7, 0x5, 0x7ff, 0x893}, {0x2, 0x2, 0x5, 0x3, 0x65, 0x9}, {0x1, 0x4, 0x4, 0x9, 0x6, 0xe}, {0xffff, 0x100, 0x3, 0x7, 0x6, 0x7}, {0x4, 0x7ff, 0x5, 0x7, 0x5, 0x1}, {0x7, 0x7fff, 0x0, 0x4004, 0x9, 0x80}, {0x5, 0x48, 0xa94, 0x6, 0xffffffff, 0xff}, {0x7, 0xff00, 0x4, 0x7, 0x9, 0xb}, {0x5, 0xa3, 0xb, 0x9, 0x4800, 0x6b}, {0x9, 0x1, 0x2, 0x1, 0x8, 0x2f1}, {0xd32, 0x1000, 0x80, 0x81, 0x9, 0x1}, {0xf5, 0x9, 0x3, 0xb000000, 0x4, 0x5}, {0x4, 0x400, 0x1, 0x7ff, 0x36, 0x7}, {0xfffffffe, 0x80000000, 0x3, 0x0, 0xc, 0x1}, {0x10, 0x3, 0x3, 0x7, 0x2, 0xfffffffa}, {0xfffffff7, 0x4, 0x1, 0x6c88, 0x5, 0x10000}, {0x9, 0xec35, 0x2, 0x9, 0x6, 0x9}, {0x2, 0x0, 0x3, 0x8, 0x6, 0x1000}, {0xfffffffb, 0x200, 0x2, 0x5, 0xfffffffc, 0x7}, {0x3, 0x401, 0x1, 0xf3, 0xef0, 0xfffffffa}, {0x3, 0x0, 0x8, 0xe32, 0x400, 0x8}, {0x7f, 0x4, 0xfffffffe, 0xfffffffb, 0x1, 0x80}, {0x4, 0x8, 0x6, 0x99, 0x6, 0x1000}, {0x593, 0x8, 0x6, 0x7, 0xd2df, 0x4}, {0x0, 0x7, 0x1, 0xaf96, 0x10, 0xfffffff7}, {0x0, 0x5, 0x1ff, 0x7, 0x1ff, 0x4}, {0x3, 0x3ff, 0x3, 0x3, 0x19, 0xb5}, {0x2, 0x3, 0xf0, 0xff, 0xfffffffe, 0x8b}, {0x10000, 0x1ff, 0x2, 0x97cf, 0x45b}, {0x9, 0x3, 0x80000000, 0x80000000, 0x0, 0xb}, {0x9, 0xd9f5, 0xe3, 0xb, 0x5, 0x4}, {0x7, 0xf, 0x2, 0x3, 0x10000, 0xfffff001}, {0x8, 0xfffffffb, 0xfff, 0x4, 0x731b482, 0x8}, {0x1, 0xc738, 0x9, 0x2, 0x8, 0x7}, {0x7, 0x7ff, 0x8, 0xffffffd8, 0x0, 0xfffffffb}, {0x200, 0x3, 0x3, 0xfff, 0x2, 0x2}, {0x0, 0x1, 0xff, 0xffffd21c, 0x4, 0x3}, {0xe2, 0x0, 0x9, 0x4, 0xfffff001, 0x400}, {0x0, 0x1000, 0x80, 0x4, 0x4f, 0xfffffffe}, {0x7e, 0x400, 0x8, 0x5, 0x7, 0x8}, {0x8, 0x0, 0x6, 0x2, 0x5, 0xffffff81}, {0x8, 0x100, 0xff, 0x1ff, 0x964, 0x8000}, {0x80, 0x0, 0x3, 0x4, 0x1, 0x18}, {0x5, 0xcc7, 0x8, 0x80, 0x0, 0x1}, {0x3, 0x4, 0x5, 0x7e, 0x8, 0xfffffff5}, {0x2, 0x9, 0x8, 0x9, 0x1}, {0x7, 0x1, 0x8, 0x3ff, 0x2df, 0x6}, {0xc, 0x20c05, 0xb, 0x101, 0x2}, {0x3, 0x56, 0x6, 0x3, 0x7, 0x9}, {0x5, 0x6, 0x8, 0x7, 0x7, 0x1}, {0x5, 0x7, 0x9, 0xd3, 0x8, 0x1}, {0x3, 0x1, 0x455, 0xc9000000, 0x9, 0x10000}, {0x9, 0x8, 0x8, 0x0, 0x1, 0x9}, {0xb47, 0x1, 0x2, 0x852, 0xf, 0xff}, {0xe, 0x3, 0x401, 0x3, 0x9, 0xffffa36b}, {0x4, 0x80000001, 0x2, 0x9f0, 0x2, 0x6}, {0xfffffffc, 0x80000000, 0x0, 0x0, 0xd, 0x4}, {0x5, 0x4, 0x401, 0x0, 0x9, 0x1}, {0x1, 0x5, 0x8, 0x0, 0x7, 0x1000}, {0xa, 0x80, 0x6, 0x9, 0x5852, 0x1}, {0x2, 0x0, 0x7fffffff, 0xa4c8, 0x5, 0x4}, {0x9, 0x12, 0x101, 0x1000, 0x2, 0x1}, {0x6, 0x10001, 0x100, 0x3, 0xff}, {0x7d, 0x4, 0x7, 0x0, 0x81, 0x7}, {0x80000000, 0x4f, 0x101, 0x8, 0xe, 0x6}, {0x187, 0x5, 0x6, 0x1, 0x6, 0x1000}, {0x0, 0xf, 0x1, 0x8e, 0x4, 0x8}, {0x1, 0x2, 0x9, 0xffffffb5, 0x17a, 0x1}, {0x81, 0x0, 0x7ff, 0x8, 0x8001, 0x1}, {0x81, 0x2, 0x1, 0x1, 0x5, 0x6}, {0x10000, 0x2, 0x1000, 0x81, 0x4, 0x7}, {0x1, 0x1, 0x80000001, 0x6, 0x7fff, 0xfffffff8}, {0x5, 0x5, 0xad, 0x2, 0x400, 0x3}, {0x9, 0x9, 0x6, 0x2, 0x8, 0x94a}, {0x2, 0x1, 0x6, 0x10000, 0x9366, 0x5}, {0xff, 0x3, 0x4, 0x2, 0x4, 0x2}, {0x1ff, 0x7f, 0x0, 0x4, 0x6, 0x5}, {0x4, 0x9, 0x6, 0x100000, 0xfa1, 0xfffffff5}, {0x7, 0x101, 0x93d0, 0xf3, 0x3, 0x9}, {0x8000, 0x2, 0x0, 0xfb7, 0x8, 0x1000}, {0x7fff, 0x0, 0x3, 0x0, 0xff, 0x8}, {0x1a4e, 0x9, 0x6, 0x7, 0x7, 0x9}, {0x7, 0x7, 0x0, 0xf, 0x0, 0x4}, {0x9, 0x9, 0x8, 0xbc5, 0x81, 0x100}, {0x40, 0x4, 0x7, 0x800, 0x4, 0x7}, {0xb12a, 0x9, 0xa9, 0x1ff, 0x6, 0x7}, {0x100, 0x1b00, 0x1ff, 0x5, 0x1, 0x8}, {0x5df, 0x7fff, 0xc000, 0x8, 0x5, 0xca4}, {0xf, 0xa, 0x6, 0x3, 0x10000, 0x6}, {0x7, 0x200, 0x5, 0x510, 0x8, 0x7}, {0x5cc0e9e5, 0x3, 0x0, 0x7fff, 0x7fffffff, 0x5}, {0x10, 0xfff, 0xffffffff, 0x3ff, 0x1, 0x8}, {0x1, 0x1, 0xd, 0xfff, 0x2, 0x35d}, {0x6, 0x8, 0x6, 0x8, 0x8, 0x3ff}, {0x7, 0x7, 0x5, 0x6, 0x2, 0xcdf}, {0x9, 0x7, 0xa92c, 0x9, 0xa8, 0x4}, {0x1, 0x9, 0x10001, 0xfa6, 0x3, 0x8}, {0x5, 0xdad, 0x1, 0xe2f, 0xd, 0x6}, {0x3, 0x4, 0x2, 0x6, 0x1, 0x8001}, {0xb, 0x439d3188, 0xffff, 0x5, 0x1ff, 0x1}, {0xe2a0, 0x54, 0xffffffff, 0x6, 0x3, 0x80000000}, {0x1000, 0x4, 0xd3, 0x4, 0xdc, 0x2}, {0x6, 0x2, 0x8, 0x4, 0xfe3, 0x4}, {0x6, 0x4, 0x8, 0x9, 0x7f, 0x8}, {0x9, 0x2, 0x5, 0xfffffff8, 0xffffffff, 0x10001}, {0x0, 0x4, 0x30d, 0x2, 0x3e5, 0x7}, {0x8, 0xfff, 0x9, 0x2, 0x1, 0x8}, {0x8, 0x80000000, 0x2, 0x6, 0x5, 0x7fffffff}, {0x80000001, 0x5, 0x80000001, 0xdc, 0x2}, {0x80, 0x4, 0x0, 0x7, 0x1, 0x8}, {0x2, 0x200, 0x5be, 0xfffffff3, 0x7, 0x800}, {0x1000, 0x1, 0x3, 0x9, 0xa, 0x5}, {0xc, 0x4000000, 0x5ea, 0x10, 0x8, 0x80000000}, {0xf, 0x2, 0x80000001, 0x5, 0x2a59, 0x1}, {0x3e87, 0x3, 0x5, 0x9, 0x1, 0x9}, {0xffffff64, 0x0, 0x7, 0x3, 0xae85, 0x25c98821}, {0x0, 0x7, 0xd, 0x400, 0x6, 0xe6c}, {0xffffffff, 0x2, 0x0, 0x100, 0x4, 0x5855}, {0x6528, 0x5, 0x96, 0x8001, 0xe246, 0x6}], [{0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x7}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x6, 0x1}, {}, {}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2}, {0xe2e05a6e9f46ef72, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x9a2799bccd0b4636, 0x1}, {0x1}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xf80}, 0x1, 0x0, 0x0, 0x4050}, 0x20000040) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 1) 12.313509289s ago: executing program 0 (id=5248): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x0, 0x80, 0xfa11, 0xffffffff}, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xe032, 0xffffffffffffffff, 0x80000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000f41000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) syz_usb_connect(0x7, 0x9dd, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000001780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x7e, 0xff, 0x88, 0x10, 0xfd}, 0x19, &(0x7f0000000400)=ANY=[@ANYRES8=r1], 0x9, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4001}}, {0x51, &(0x7f0000000880)=ANY=[@ANYRES8]}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x0, 0x0}, {0x2, &(0x7f0000000680)=ANY=[]}, {0x11, &(0x7f0000000140)=ANY=[]}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x44a}}, {0xc8, &(0x7f0000003280)=ANY=[@ANYBLOB="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"]}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f0000001240)={0x2020}, 0x2020) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000011b800)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xad, "ae3e85e5f4839f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000011c800)={0xa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x1, "c81cb784bcf80d"}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000004280)={0x0, 0x8}) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 8.07375648s ago: executing program 3 (id=5268): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f2110", @ANYBLOB="cda107197499b9dc64a4b0dfcdcb7dbf74b875613c5e18554e8670de4b02f511eb8f5549f43c31733871e576774c257860bd15f51aae3ccce85008dfe5974627e2f1d659b383ddaf0b869e7d47aae44c04efedff4e331bbef6f978a23a22e3ae777459e326b3f7e273707397fc069fbd89412098213c09a991cbd1371f865601f282d17364a92e39f143f58f1f5300d8325cfef5b7c0ebd8113c4aba467ad498", @ANYRESOCT=r0], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x198, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x784ac2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000001c0)={'pimreg\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000200)=0x21, 0x48) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f00000002c0)="28d366") r6 = syz_usb_connect$cdc_ecm(0x6, 0x69, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x10, 0x80, 0x10, "", [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x806}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x400, 0x7f}, [@mbim={0xc, 0x24, 0x1b, 0xa472, 0x5, 0x5, 0xe1, 0x6, 0x4}, @dmm={0x7, 0x24, 0x14, 0x7, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0xf}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x80, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xfa, 0x7, 0xa}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x12, 0x3, 0x10, 0x40, 0x2}, 0x87, &(0x7f0000000600)={0x5, 0xf, 0x87, 0x4, [@generic={0x50, 0x10, 0x4, "7e2b9a187e56afee946d5aef720b62ee8e43ce92ed431e33e82558d54cf9908ad66c8e935193debf3d47deca4296b0a94ea29dca1deab730b4da54dbafe0ede597f4370a952c17c09de092e643"}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "c425c7db6bdbf7ca5550a49513f125aa"}, @ss_cap={0xa, 0x10, 0x3, 0xba18fe3b642d952f, 0x1, 0xa, 0xdb, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "da41a0392a5a3b54ea9a805861611711"}]}, 0x3, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x97, &(0x7f0000000700)=@string={0x97, 0x3, "9a4e553be4936568b18bd1e1eb184374f5c25aad8cee149dc1b791dd23f3fe0e4f4c177886b60f6a7f759135f645ecbc98fe263dad145f5748aec96c71ca9ea5df60b3b1ba074f4251e2beccee7af0842b2221239e9b8ebd80e21b3e060bbdf3dabae6495982bff2ced5cbefecafa5178a0b417b048968efa59037b077aed1f885a8fc1bee6602ced85047cbcc41a70de264d45301"}}, {0x3e, &(0x7f00000007c0)=@string={0x3e, 0x3, "bdaa0885fc15067d0dbde8b093d6f2169265719d763429b589624ec0e4e1a8a6713f2483313e64764235759376907086284c68a27dd5296fc4f0fa0b"}}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f00000008c0)={0x14, &(0x7f0000000840)={0x40, 0x21, 0x38, {0x38, 0x5, "396ed543027ea3ef348e737a49184a9e2b5369b324f8faf275d8849c35d3cc1b1f6111981cb1a67586d3457117abc70afaf465b67d26"}}, &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x1c, &(0x7f0000000900)={0x40, 0x17, 0xcd, "46fea747db7a2d4ee8868fab04292b970e752e4fcd95ac23b61cab98f149df651ed4fdf84139e917978855f08070b77b2f314c1c919271bef9a3b282bcb10b412666955b30c4b5fe3dfd399fba38c4fa0523665a43898e37c8a62474c83228137ad95ab008b95d8341156db92f322eb979255be70511e045515e01adead04c5ef0c8114da80c3851e22d3ed01ab1d42eb3c700d052b961685db9ce66bd80b8d63f0e0c697a03a3b03753f78e3037e0d33fd4b7d18a81d115624f1607a231616664280231b2469550e8aa85ee85"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0xa}}) read$char_usb(r4, &(0x7f0000000300)=""/215, 0xd7) 7.895332179s ago: executing program 6 (id=5271): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) inotify_init() renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000340)={@mcast2, 0x32}) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x18}) fanotify_mark(r5, 0x40, 0x40000000, 0xffffffffffffffff, &(0x7f0000000180)='./file1\x00') r7 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060b0000000000240012800b0001006970766c616e000014000280060002000005008855b954a24c8d687da9f38fe29f6bb54e5b78b37252e9a7c92dd5315bccb69c30f527b2445e5383570226b5498b3f58d6cc2e2a81", @ANYRES32=r9, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 6.981103124s ago: executing program 1 (id=5272): r0 = socket$packet(0x11, 0x3, 0x300) (async) setpriority(0x2, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)=""/4096, 0x1000}]}, 0x9}], 0x1, 0x20, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e22, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x34, 0x1000, 0x4}, 0x9c) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x110540, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000180)={0x28}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00'}) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) unshare(0x4020400) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x11e, 0x23, 0x0, 0x0) (async) bind$can_raw(r7, &(0x7f0000000240)={0x1d, r8}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$FUSE_INIT(r10, &(0x7f0000000140)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0x0, 0x10082c0c, 0x4, 0x80, 0x5, 0x7, 0x0, 0x0, 0x10, 0x8000002}}, 0x3a) sendfile(r7, r10, &(0x7f0000000040), 0x20000048) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000280)={0x3, 0x7}) 6.786582664s ago: executing program 0 (id=5273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) (fail_nth: 2) 6.618938096s ago: executing program 1 (id=5274): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)=ANY=[@ANYBLOB="34000000000801010000000000c300000300"], 0x34}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001800010027bd050005fef50415000300030000200403000013f907000000000004000000"], 0x34}, 0x1, 0x0, 0x0, 0x805936d41ec618b7}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x8c200, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a010200"], 0xe4}}, 0x0) io_uring_setup(0x243f, &(0x7f0000000200)={0x0, 0xfffffffb, 0x1000, 0x2, 0x2b}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x300, 0x0, 0x0, 0x1a0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [0x0, 0x0, 0x0, 0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) 6.203647187s ago: executing program 6 (id=5275): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x28, 0x19, 0x7, 0x5, 0x30, 0x10, 0xaa, 0x8, 0xfd, 0x8, 0x6, 0x40, 0x0, 0x7b}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r1, 0x43, 0x1, 'J'}, 0x9) (fail_nth: 2) 5.776114849s ago: executing program 6 (id=5276): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0xffffffff, 0x4) sendto$inet6(r1, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0xe4c}) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000002c0)={"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"}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@wrmsr={0x65, 0x20, {0x6e0, 0x5}}], 0x20}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.775923653s ago: executing program 0 (id=5277): getdents64(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xb1, 0xe0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000"], 0xc) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000099dc320d112f37e6854010203010902240001000010100904590002ff063d"], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) close_range(r2, 0xffffffffffffffff, 0x0) 5.447015481s ago: executing program 6 (id=5278): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x20, 0x7fff0000}]}) utimes(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) sysinfo(0x0) socket(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r7 = socket$kcm(0x10, 0x100000000002, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="0d0304000000feffffff130000000c0009800800020000000000"], 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="20002cbd7000ffdbdf25170000a31df85b180c002400038008000300555d00000800010001000000010000000000000008000200020000001c000980080001000034a80108000200001000000800"], 0x54}, 0x1, 0x0, 0x0, 0xc800}, 0x4) 5.128509032s ago: executing program 3 (id=5279): ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x101a42, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x1, 0x2, 0x4, 0x0, 0x6}) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x7, 0x4, 0x2}}) (fail_nth: 2) 4.493832127s ago: executing program 2 (id=5280): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x194, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xfc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x84, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 4.381976771s ago: executing program 1 (id=5281): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x288000, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r1}, 0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r3, 0x7, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x34}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000780)={0xe4, r3, 0x10, 0x7, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0xe4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) 4.380403406s ago: executing program 2 (id=5282): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @fwd={0xf}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xf, 0x3}, {0x0, 0x3}]}, @volatile={0xd, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000000200)=""/156, 0x5c, 0x9c, 0x1, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x10, 0x6, 0x4, 0x110, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x2, 0x3, 0x1, 0xa}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c000200010000000600000008"], 0x2c}}, 0x4000) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x912, 0x4) sendmmsg$inet6(r0, &(0x7f0000006400)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c, 0x0}}], 0x1, 0x64040084) 4.245426631s ago: executing program 3 (id=5283): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x800, 0xf0cb2f4a0c2cfc5d, 0x0) (fail_nth: 2) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x8fa}}, 0x50) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r2}, 0x10) 4.243200191s ago: executing program 1 (id=5284): socket$alg(0x26, 0x5, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x4, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x1a, 0x0, r6, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x1}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x47ba, 0x100, 0x5, 0x0, 0x0) (async) timerfd_create(0x0, 0x80000) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1) 4.203465125s ago: executing program 1 (id=5285): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_usb_disconnect(r4) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/115, 0x73}], 0x1) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) unshare(0x24000400) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0xe5e3e000) ioctl$BLKDISCARDZEROES(r7, 0x127c, 0x0) 3.796059576s ago: executing program 6 (id=5286): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @fwd={0xf}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xf, 0x3}, {0x0, 0x3}]}, @volatile={0xd, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000000200)=""/156, 0x5c, 0x9c, 0x1, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x10, 0x6, 0x4, 0x110, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x2, 0x3, 0x1, 0xa}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c000200010000000600000008"], 0x2c}}, 0x4000) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) (fail_nth: 2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x912, 0x4) sendmmsg$inet6(r0, &(0x7f0000006400)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c, 0x0}}], 0x1, 0x64040084) 3.470064191s ago: executing program 2 (id=5287): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @fwd={0xf}, @struct={0xe, 0x1, 0x0, 0x4, 0x1, 0x1, [{0x2, 0x2, 0xb91}]}, @volatile={0xd, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000000200)=""/156, 0x58, 0x9c, 0x1, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x10, 0x6, 0x4, 0x110, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x2, 0x3, 0x1, 0xa}, 0x50) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000004c0)="d75790ee60241c90f4c58369fbc8ee795475c02d88d85929824d4e3f11e30fec0d737cb44309aa2bf1d5f3343ccb368f32c760210d9ab0c87b0ef9f25c729f615b2c2decbb6932f86bf0aaae6d9d8c90ecba09e399cc2d4bdc881427b72e28779af06526c8cfecd861b2e6fd4f4c44b8cab7d13f536eb4ffdecf559bf6daa5e6d9b120deb54e90ec30f6790a67ef6c3d029ca01b077913252b60d0515c25b6d5e5f61c38e9c74b408fdac3038c21a74ea0a1f232", 0xb4}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0xc8, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000700)=[{&(0x7f00000005c0)='<', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$tipc(r4, &(0x7f0000000140)=@id, &(0x7f0000000440)=0x10) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c000200010000000600000008"], 0x2c}}, 0x4000) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x912, 0x4) sendmmsg$inet6(r0, &(0x7f0000006400)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c, 0x0}}], 0x1, 0x64040084) 3.361531987s ago: executing program 3 (id=5288): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0xfffffffc, 0x3}}]}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) eventfd2(0x8, 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x40) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x45, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x400, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r6, 0x8923, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x838, &(0x7f00000000c0)={0x0, 0x1998, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4) r10 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r10, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000240)=0xfff0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r10, 0x40026f34, &(0x7f0000000040)=0x808c) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x18, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0xb1}}]}, 0x28}}, 0x0) r12 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r12, 0x80086303, &(0x7f0000000180)) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.13532858s ago: executing program 0 (id=5289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486970284ed923431d400001f000000a9201be943f06f2f4000", r4, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000002c0)=0x800) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000240)={"8c5d2ddcdba01c2b0e062db91ec2209d789c4dcce0ab20c5fa0b8a204e3b856a", r5}) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd2d3a}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x14, 0x3}}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0x5}, [@typed={0x4, 0x3, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x200448d3}, 0x48030) 2.846994776s ago: executing program 6 (id=5290): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = io_uring_setup(0x69ae, &(0x7f0000000140)={0x0, 0x12fc, 0x0, 0x0, 0x36a}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b14, 0x0) io_uring_enter(r2, 0x6972, 0xefd7, 0x2, &(0x7f0000000080)={[0x669e]}, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1b35, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000400)={0x13, 0x1, 0x2, "18e889cb5bfb8276529323b392b837e339070000000000000000008000", 0x38416761}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000000000000000705"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e5782) socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 2.393354224s ago: executing program 2 (id=5291): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r3 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r5 = openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, r5, 0x1c, 0x0, @void}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0, r6], 0x2, 0x0, 0x0, 0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r3, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[]) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3) sendto$inet(r0, &(0x7f0000000180)="89", 0x1, 0x4c041, 0x0, 0x0) 2.255733445s ago: executing program 0 (id=5292): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)=ANY=[@ANYBLOB="34000000000801010000000000c300000300"], 0x34}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001800010027bd050005fef50415000300030000200403000013f907000000000004000000"], 0x34}, 0x1, 0x0, 0x0, 0x805936d41ec618b7}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x8c200, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a010200"], 0xe4}}, 0x0) io_uring_setup(0x243f, &(0x7f0000000200)={0x0, 0xfffffffb, 0x1000, 0x2, 0x2b}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x300, 0x0, 0x0, 0x1a0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [0x0, 0x0, 0x0, 0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) 2.096454552s ago: executing program 3 (id=5293): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)='%pB \x00'}, 0x20) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000050000000f0000000400000000100000", @ANYRES32=r3, @ANYBLOB='|G\x00\x00\x00', @ANYRES32, @ANYRES32=r4, @ANYBLOB="0300000002000000030000000f00"/24], 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x10000, 0x8822d55593a2179}, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00', 0x2}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000240)="0c751b1be0cf23e95ad6aff4c390aba479231e5b245ef634647cff41371d1017c52399ea4cf5c535e05757a1f45481d8e5b4", 0x32}, {&(0x7f0000000300)="67806084626e887b0cca52d08c5467d548a7b09e1fd618be34204444c3041480ea04258c3fe7c5b188774ee2adce2f9f2e6ee554e4202749ea0db5d4a81eb9385d5487f1be00220c3e782c2c2059fdd90ad79b1357d2901e36afe211e706dd976bd749eb1b0c906e4575978b8a4648aed6343e745202d2a90a91ee512ee6995259cb5fda33a9ecaa8b6a98d2edf38dfd4cba51b8099768", 0x97}, {&(0x7f0000000640)="10871419e2ea983acac039a8c9d2b8fcadbf2885ee741f4ff6679feacf53e55ecb61d23ffbdb8a7ca350434b0056537d7fbd1b3d0db9a0b3f09973da9bdbb0947d4b64ed5ec23020e41f3e52ef4ae793f3c829b789874830b4c31d56a26e5d039e4ed1da2dcb7cfcb9e0c628de41226dd53525366bb3725c6159ef542e326448ff3d7537cbd20b6ee890722fe22c0cc3a954d53ad68bdc3dd0d2a8f84ae0141237c39a68d33e2363e3708b3b2c7b835f59b187e19d", 0xb5}, {&(0x7f0000000700)="449c87f6c23b17a2f66a8945086b87808dcd4971e56860dd6d989ed2f60ca6352198b575c2833ed36eb8470ab5ec60bb838575a875e89233efa382adebf9524f09447ed3a1be70bc8885f7608050dac61b09f70fee74e00314cea310c6ceb90ab57c1e1e569416db58e734311191a61a42a7c1e2f201ed14ef6e1c59950cac6f81c21266dda56e094e95dffb1bb8b9361740ad5c3b870d599949553516d97af59ec3ee50a04ba378735d6c42ac89415787918aeb6369ec444568b53f689323cbb15e37d1ef1922f383e342e3423fe435d1c302ba4abad09754755991189bf5f5", 0xe0}, {&(0x7f00000003c0)="67f373d7b03ccd73315f348210a14dd1e93067f02cd85a5c85b4c80358433ac82c2f80fc5c440da41479041e9a64a70a0f72ce05697282bef01a5112371faca3", 0x40}, {&(0x7f0000000440)="89a421319db353e111ccc260807b274bfa8db61b8676aae45a45", 0x1a}, {&(0x7f0000000800)="9df160f5480897c23be5484eda41c744a0dfe0379ce8a8dff43a8a2776d972dc882d2524c214fbd480a831a503f5d088ae8d9c0aae67e32d7cdfe8c6e48f94a9948cfd92dc651d54b5abefd80c4ab46bfe10691007dc3b896cf967730bee21d815577f3d1de1ad623720ae1445b5d86cb822584751379ce35ab7ccd838be267b593f49c8b8a617a7b11bf210c71cf4a938274296a2b09e204f9de3f3d5cf459e9e96fa4f4e", 0xa5}, {&(0x7f0000000940)="b85448bbd914071130b2db06cb796585fcb9a76536d3bea373588e6b8e7aaa358a5031c4bc390a63a66e51edd1916a440fc8eb6180f354fb3842d71705a7e8ba8ac225c0fbc892dc868e3cdd33f9f76c743f2f1ee19e6a59ca5b3b5d3250518459b4", 0x62}], 0x8}}], 0x2, 0x4c040) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x622900, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r10, 0x400, 0x0) fcntl$setlease(r10, 0x400, 0x1) connect$qrtr(r10, &(0x7f00000008c0)={0x2a, 0xffffffff00000001, 0x7fff}, 0xc) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x6, 0x4, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x0, '\x00', @p_u32=0x0}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 829.214048ms ago: executing program 1 (id=5294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x0) 485.033998ms ago: executing program 0 (id=5295): r0 = syz_clone(0x2200200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x7, r0, 0xffffffffffffffff, 0x9c) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbf9, {{@in6=@dev, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {@in6=@private1, 0x0, 0x32}, @in=@private=0xa010101, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x3}, {0x0, 0xffffffff}, 0x70bd2a, 0x0, 0x2, 0x2, 0x0, 0x62}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) r3 = socket$alg(0x26, 0x5, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0x4000}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x0) 242.137752ms ago: executing program 3 (id=5296): r0 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x91}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000841}, 0x800) r4 = socket(0x2, 0x3, 0xf8) sendto$unix(r4, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) lsetxattr$trusted_overlay_upper(&(0x7f0000001200)='./file0\x00', &(0x7f0000001240), &(0x7f0000001280)={0x0, 0xfb, 0x1a, 0x7, 0x1, "da0c8beafe5969fda72e43faac40b58d", "ef78a4851b"}, 0x1a, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 146.170864ms ago: executing program 2 (id=5297): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xe8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x8c, 0x1, [@m_vlan={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x58, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x21, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 2 (id=5298): r0 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x91}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000841}, 0x800) r4 = socket(0x2, 0x3, 0xf8) sendto$unix(r4, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) lsetxattr$trusted_overlay_upper(&(0x7f0000001200)='./file0\x00', &(0x7f0000001240), &(0x7f0000001280)={0x0, 0xfb, 0x1a, 0x7, 0x1, "da0c8beafe5969fda72e43faac40b58d", "ef78a4851b"}, 0x1a, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r8 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r8, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r10, 0x6, 0x8, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$vga_arbiter(r9, &(0x7f00000000c0), 0xf) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000380)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) kernel console output (not intermixed with test programs): 723.619219][T20015] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 723.619252][T20015] ? ref_tracker_free+0x693/0x840 [ 723.619323][T20015] ? __netlink_deliver_tap+0x807/0x850 [ 723.619399][T20015] ? netlink_deliver_tap+0x2e/0x1b0 [ 723.619434][T20015] netlink_unicast+0x80f/0x9b0 [ 723.619469][T20015] ? __pfx_netlink_unicast+0x10/0x10 [ 723.619489][T20015] ? netlink_sendmsg+0x650/0xb40 [ 723.619509][T20015] ? skb_put+0x11b/0x210 [ 723.619555][T20015] netlink_sendmsg+0x813/0xb40 [ 723.619584][T20015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.619608][T20015] ? aa_sock_msg_perm+0xf1/0x1b0 [ 723.619631][T20015] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 723.619652][T20015] ____sys_sendmsg+0x972/0x9f0 [ 723.619679][T20015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 723.619704][T20015] ? import_iovec+0x73/0xa0 [ 723.619750][T20015] ___sys_sendmsg+0x2a5/0x360 [ 723.619779][T20015] ? __pfx____sys_sendmsg+0x10/0x10 [ 723.619826][T20015] ? __fget_files+0x2a/0x420 [ 723.619847][T20015] ? __fget_files+0x3a0/0x420 [ 723.619875][T20015] __x64_sys_sendmsg+0x1bd/0x2a0 [ 723.619895][T20015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 723.619920][T20015] ? __pfx_ksys_write+0x10/0x10 [ 723.619946][T20015] do_syscall_64+0x14d/0xf80 [ 723.619964][T20015] ? trace_irq_disable+0x3b/0x150 [ 723.619983][T20015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.619999][T20015] ? clear_bhb_loop+0x40/0x90 [ 723.620017][T20015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.620032][T20015] RIP: 0033:0x7f30aa79c799 [ 723.620048][T20015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.620061][T20015] RSP: 002b:00007f30ab730028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.620078][T20015] RAX: ffffffffffffffda RBX: 00007f30aaa15fa0 RCX: 00007f30aa79c799 [ 723.620090][T20015] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 723.620099][T20015] RBP: 00007f30ab730090 R08: 0000000000000000 R09: 0000000000000000 [ 723.620109][T20015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.620118][T20015] R13: 00007f30aaa16038 R14: 00007f30aaa15fa0 R15: 00007f30aab3fa48 [ 723.620142][T20015] [ 723.927846][T15166] apple 0003:05AC:027D.002F: unknown main item tag 0x0 [ 723.935325][T15166] apple 0003:05AC:027D.002F: unknown main item tag 0x0 [ 723.943487][T15166] apple 0003:05AC:027D.002F: unknown main item tag 0x0 [ 723.952864][T15166] apple 0003:05AC:027D.002F: unknown main item tag 0x0 [ 723.961708][T15166] apple 0003:05AC:027D.002F: unknown main item tag 0x0 [ 723.993305][T15166] apple 0003:05AC:027D.002F: unknown main item tag 0x2 [ 724.061903][T15166] apple 0003:05AC:027D.002F: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.6-1/input0 [ 724.081576][T20017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5012'. [ 724.140732][T20017] syz_tun: entered promiscuous mode [ 724.146448][T15166] usb 7-1: USB disconnect, device number 7 [ 724.192649][T20017] syz_tun: left promiscuous mode [ 724.221569][T20018] fido_id[20018]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 724.638080][T20028] fuse: Unknown parameter '0xffffffffffffffff' [ 724.685101][T15166] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 724.819023][T20031] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5016'. [ 724.828247][T15166] usb 2-1: device descriptor read/64, error -71 [ 724.866068][ T5828] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 725.065402][T15166] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 725.211066][ T5878] usb 1-1: USB disconnect, device number 110 [ 725.218386][T15166] usb 2-1: device descriptor read/64, error -71 [ 725.380811][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 725.391404][T15166] usb usb2-port1: attempt power cycle [ 725.407721][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 725.427811][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 725.440996][T20035] netlink: 2896 bytes leftover after parsing attributes in process `syz.6.5017'. [ 725.460729][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 725.476510][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 725.491038][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 725.515039][ T5828] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 725.524409][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.533255][ T5828] usb 3-1: Product: syz [ 725.537858][ T5828] usb 3-1: Manufacturer: syz [ 725.542521][ T5828] usb 3-1: SerialNumber: syz [ 725.555714][ T5828] usb 3-1: config 0 descriptor?? [ 725.569582][ T5828] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 725.590719][ T5828] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 725.775348][T15166] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 725.846534][T15166] usb 2-1: device descriptor read/8, error -71 [ 726.085051][T15166] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 726.125656][T15166] usb 2-1: device descriptor read/8, error -71 [ 726.145566][ T5892] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 726.248586][T15166] usb usb2-port1: unable to enumerate USB device [ 726.305012][T20043] binder: 20042:20043 ioctl 40044591 0 returned -22 [ 726.305059][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 726.324684][T20043] binder: 20042:20043 ioctl c0306201 200000000640 returned -22 [ 726.330004][ T5892] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 726.343775][T20043] binder: 20042:20043 ioctl 4048587b 200000000740 returned -22 [ 726.352027][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.353756][T20043] binder: 20042:20043 ioctl c05c6104 2000000007c0 returned -22 [ 726.387891][ T5892] usb 7-1: Product: syz [ 726.400639][ T5892] usb 7-1: Manufacturer: syz [ 726.410511][ T5892] usb 7-1: SerialNumber: syz [ 726.427054][ T5892] usb 7-1: config 0 descriptor?? [ 726.478214][ T5892] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 726.492445][ T5892] pctv452e: pctv452e_power_ctrl: 1 [ 726.492445][ T5892] [ 726.512158][ T5892] usb 7-1: selecting invalid altsetting 3 [ 726.521263][ T5892] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 726.521263][ T5892] [ 726.535083][ T5892] dvb-usb: bulk message failed: -22 (5/0) [ 726.550613][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 726.571950][ T5892] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 726.585241][ T5892] usb 7-1: media controller created [ 726.595108][ T5892] dvb-usb: bulk message failed: -22 (8/0) [ 726.602575][ T5892] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 726.623555][ T5892] dvb-usb: MAC address reading failed. [ 726.733886][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 726.746069][T20035] dvb-usb: bulk message failed: -22 (7/0) [ 726.752786][T20035] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 726.782460][T20036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.791267][T20036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.810511][ T5892] DVB: Unable to find symbol stb0899_attach() [ 726.817691][ T5892] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 726.875074][ T5892] rc_core: IR keymap rc-tt-1500 not found [ 726.881086][ T5892] Registered IR keymap rc-empty [ 726.887135][ T5892] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 726.898699][ T5892] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input47 [ 726.911940][ T5892] dvb-usb: schedule remote query interval to 100 msecs. [ 726.919168][ T5892] pctv452e: pctv452e_power_ctrl: 0 [ 726.919168][ T5892] [ 726.926825][ T5892] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 726.965088][T15166] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 727.025072][ T5892] dvb-usb: bulk message failed: -22 (4/0) [ 727.031048][ T5892] dvb-usb: error -22 while querying for an remote control event. [ 727.125102][T15166] usb 1-1: Using ep0 maxpacket: 16 [ 727.133398][T15166] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 727.142608][T15166] usb 1-1: config 0 has no interface number 0 [ 727.151138][T15166] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.156885][ T5892] dvb-usb: bulk message failed: -22 (4/0) [ 727.162586][T15166] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.178410][T15166] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 727.191234][T15166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.200138][ T5892] dvb-usb: error -22 while querying for an remote control event. [ 727.205281][T15166] usb 1-1: config 0 descriptor?? [ 727.325132][ T5892] dvb-usb: bulk message failed: -22 (4/0) [ 727.330914][ T5892] dvb-usb: error -22 while querying for an remote control event. [ 727.339226][ T1129] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 727.455475][ T5892] dvb-usb: bulk message failed: -22 (4/0) [ 727.462064][T15166] usbhid 1-1:0.4: can't add hid device: -71 [ 727.464682][ T5892] dvb-usb: error -22 while querying for an remote control event. [ 727.478547][T15166] usbhid 1-1:0.4: probe with driver usbhid failed with error -71 [ 727.520680][T15166] usb 1-1: USB disconnect, device number 111 [ 727.539278][T20061] FAULT_INJECTION: forcing a failure. [ 727.539278][T20061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.577537][T20061] CPU: 1 UID: 0 PID: 20061 Comm: syz.0.5024 Tainted: G L syzkaller #0 PREEMPT(full) [ 727.577566][T20061] Tainted: [L]=SOFTLOCKUP [ 727.577571][T20061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 727.577581][T20061] Call Trace: [ 727.577589][T20061] [ 727.577597][T20061] dump_stack_lvl+0xe8/0x150 [ 727.577625][T20061] should_fail_ex+0x412/0x560 [ 727.577658][T20061] _copy_from_user+0x2d/0xb0 [ 727.577677][T20061] kstrtouint_from_user+0xd6/0x180 [ 727.577701][T20061] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 727.577737][T20061] proc_fail_nth_write+0x8e/0x210 [ 727.577759][T20061] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 727.577785][T20061] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 727.577808][T20061] vfs_write+0x29a/0xb90 [ 727.577833][T20061] ? __pfx_vfs_write+0x10/0x10 [ 727.577852][T20061] ? __fget_files+0x2a/0x420 [ 727.577883][T20061] ? __fget_files+0x3a0/0x420 [ 727.577906][T20061] ? __fget_files+0x2a/0x420 [ 727.577932][T20061] ksys_write+0x150/0x270 [ 727.577952][T20061] ? __pfx_ksys_write+0x10/0x10 [ 727.577974][T20061] do_syscall_64+0x14d/0xf80 [ 727.577984][T20061] ? trace_irq_disable+0x3b/0x150 [ 727.577998][T20061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.578008][T20061] ? clear_bhb_loop+0x40/0x90 [ 727.578019][T20061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.578028][T20061] RIP: 0033:0x7f2bf7b5cfce [ 727.578039][T20061] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 727.578047][T20061] RSP: 002b:00007f2bf8b0ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 727.578058][T20061] RAX: ffffffffffffffda RBX: 00007f2bf8b106c0 RCX: 00007f2bf7b5cfce [ 727.578065][T20061] RDX: 0000000000000001 RSI: 00007f2bf8b100a0 RDI: 0000000000000004 [ 727.578071][T20061] RBP: 00007f2bf8b10090 R08: 0000000000000000 R09: 0000000000000000 [ 727.578076][T20061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.578082][T20061] R13: 00007f2bf7e16038 R14: 00007f2bf7e15fa0 R15: 00007f2bf7f3fa48 [ 727.578097][T20061] [ 727.891047][ T5892] dvb-usb: bulk message failed: -22 (4/0) [ 727.896935][ T5892] dvb-usb: error -22 while querying for an remote control event. [ 727.908721][T20065] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5023'. [ 728.005244][ T5892] dvb-usb: bulk message failed: -22 (4/0) [ 728.011043][ T5892] dvb-usb: error -22 while querying for an remote control event. [ 728.125057][ T5892] dvb-usb: bulk message failed: -22 (4/0) [ 728.148940][ T5892] dvb-usb: error -22 while querying for an remote control event. [ 728.286819][ T5878] dvb-usb: bulk message failed: -22 (4/0) [ 728.292760][ T5878] dvb-usb: error -22 while querying for an remote control event. [ 728.386541][ T5892] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 728.410241][ T5878] dvb-usb: bulk message failed: -22 (4/0) [ 728.425366][ T5878] dvb-usb: error -22 while querying for an remote control event. [ 728.535194][ T5878] dvb-usb: bulk message failed: -22 (4/0) [ 728.541076][ T5878] dvb-usb: error -22 while querying for an remote control event. [ 728.595086][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 728.602359][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.614088][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.636297][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 728.665246][ T5878] dvb-usb: bulk message failed: -22 (4/0) [ 728.683866][ T5878] dvb-usb: error -22 while querying for an remote control event. [ 728.692329][ T5892] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 728.706030][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.720766][ T5892] usb 1-1: config 0 descriptor?? [ 728.726015][T20073] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 728.766809][ T5878] usb 7-1: USB disconnect, device number 8 [ 728.946823][T20083] fuse: Unknown parameter '0xffffffffffffffff' [ 729.085027][ T5828] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 729.216559][ T5892] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0030/input/input48 [ 729.269753][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 729.299939][ T5828] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 729.309245][ T5828] usb 2-1: config 179 has no interface number 0 [ 729.319446][ T5828] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 729.338428][ T5828] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 729.351183][ T5828] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 729.372471][ T5828] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 729.395100][ T5828] usb 2-1: config 179 interface 65 has no altsetting 0 [ 729.403674][ T5828] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 729.418327][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.473140][T20089] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5026'. [ 729.492317][T20089] 0ªX¹¦À: renamed from 61ªX¹¦À [ 729.522789][ T5892] microsoft 0003:045E:07DA.0030: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 729.610449][ T5878] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 729.700678][T20081] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5028'. [ 730.095802][T20089] net_ratelimit: 333 callbacks suppressed [ 730.095893][T20089] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 730.192661][ T5892] usb 1-1: USB disconnect, device number 112 [ 730.236039][T20091] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 730.778254][ T5892] usb 3-1: USB disconnect, device number 119 [ 730.903541][T20101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5034'. [ 731.064844][T20113] nft_compat: unsupported protocol 44 [ 731.147520][T20112] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 731.468333][T20121] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 731.629008][T20125] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5037'. [ 732.195141][T20131] fuse: Unknown parameter '0xffffffffffffffff' [ 732.424189][T20134] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5042'. [ 732.445611][T20136] loop5: detected capacity change from 0 to 7 [ 732.720435][T13371] Dev loop5: unable to read RDB block 7 [ 732.745111][T13371] loop5: unable to read partition table [ 732.761624][T13371] loop5: partition table beyond EOD, truncated [ 732.775115][T15166] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 732.946491][T15166] usb 1-1: config 0 has no interfaces? [ 732.964806][T15166] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 732.999656][T15166] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.054350][T20136] Dev loop5: unable to read RDB block 7 [ 733.060259][T20136] loop5: unable to read partition table [ 733.068776][T20136] loop5: partition table beyond EOD, truncated [ 733.081833][T15166] usb 1-1: Product: syz [ 733.090399][T20136] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 733.105733][T15166] usb 1-1: Manufacturer: syz [ 733.110368][T15166] usb 1-1: SerialNumber: syz [ 733.148282][T15166] usb 1-1: config 0 descriptor?? [ 733.155057][ T5878] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 733.265133][ T5892] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 733.374562][T20136] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 733.405016][T20136] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 733.426191][T14378] usb 1-1: USB disconnect, device number 113 [ 733.445173][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 733.535388][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.560842][ T5878] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 733.605086][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.618311][ T5878] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 733.660466][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 733.679310][ T5878] usb 7-1: config 8 has no interface number 0 [ 733.698163][ T5878] usb 7-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 733.722757][ T5892] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 733.742350][ T5878] usb 7-1: config 8 interface 177 has no altsetting 0 [ 733.751428][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.765285][ T5878] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 733.783129][ T5892] usb 4-1: config 0 descriptor?? [ 733.790556][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.834491][ T5878] ir_toy 7-1:8.177: required endpoints not found [ 733.935179][T15166] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 733.975176][T15152] usb 2-1: USB disconnect, device number 96 [ 734.106125][T15166] usb 3-1: Using ep0 maxpacket: 8 [ 734.114901][T15166] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 734.128367][T15166] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.144755][T15166] usb 3-1: Product: syz [ 734.153398][T15166] usb 3-1: Manufacturer: syz [ 734.164355][T15166] usb 3-1: SerialNumber: syz [ 734.178004][T15166] usb 3-1: config 0 descriptor?? [ 734.191100][T15166] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 734.251377][ T5892] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0031/input/input49 [ 734.339056][ T5892] microsoft 0003:045E:07DA.0031: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 734.358834][T20150] FAULT_INJECTION: forcing a failure. [ 734.358834][T20150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.413347][T20145] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5046'. [ 734.429531][T20150] CPU: 1 UID: 0 PID: 20150 Comm: syz.1.5048 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.429561][T20150] Tainted: [L]=SOFTLOCKUP [ 734.429568][T20150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 734.429578][T20150] Call Trace: [ 734.429586][T20150] [ 734.429594][T20150] dump_stack_lvl+0xe8/0x150 [ 734.429621][T20150] should_fail_ex+0x412/0x560 [ 734.429640][T20150] _copy_to_user+0x31/0xb0 [ 734.429653][T20150] simple_read_from_buffer+0xe1/0x170 [ 734.429675][T20150] proc_fail_nth_read+0x1bb/0x230 [ 734.429696][T20150] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 734.429720][T20150] ? rw_verify_area+0x2a6/0x4d0 [ 734.429737][T20150] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 734.429759][T20150] vfs_read+0x20c/0xa70 [ 734.429773][T20150] ? fdget_pos+0x246/0x320 [ 734.429790][T20150] ? __pfx___mutex_lock+0x10/0x10 [ 734.429802][T20150] ? __pfx_vfs_read+0x10/0x10 [ 734.429812][T20150] ? __fget_files+0x2a/0x420 [ 734.429827][T20150] ? __fget_files+0x3a0/0x420 [ 734.429843][T20150] ? __fget_files+0x2a/0x420 [ 734.429871][T20150] ksys_read+0x150/0x270 [ 734.429890][T20150] ? __pfx_ksys_read+0x10/0x10 [ 734.429917][T20150] do_syscall_64+0x14d/0xf80 [ 734.429930][T20150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.429940][T20150] ? clear_bhb_loop+0x40/0x90 [ 734.429951][T20150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.429960][T20150] RIP: 0033:0x7f9e5515cfce [ 734.429970][T20150] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 734.429978][T20150] RSP: 002b:00007f9e56113fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 734.429994][T20150] RAX: ffffffffffffffda RBX: 00007f9e561146c0 RCX: 00007f9e5515cfce [ 734.430005][T20150] RDX: 000000000000000f RSI: 00007f9e561140a0 RDI: 0000000000000005 [ 734.430016][T20150] RBP: 00007f9e56114090 R08: 0000000000000000 R09: 0000000000000000 [ 734.430026][T20150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.430035][T20150] R13: 00007f9e55416038 R14: 00007f9e55415fa0 R15: 00007f9e5553fa48 [ 734.430061][T20150] [ 734.762189][T20145] 1ªX¹¦À: renamed from 60ªX¹¦À [ 734.798438][T20145] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 734.829117][T20158] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 734.853284][T20159] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 734.919588][ T5878] usb 4-1: USB disconnect, device number 103 [ 735.201729][T20162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.405175][T15166] gspca_sonixj: reg_r err -110 [ 735.410065][T15166] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 735.599023][T20170] fuse: Unknown parameter '0xffffffffffffffff' [ 735.896946][ T5892] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 736.085267][ T5892] usb 4-1: unable to get BOS descriptor or descriptor too short [ 736.112554][ T5892] usb 4-1: config 208 has an invalid interface number: 119 but max is 0 [ 736.121231][ T5878] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 736.149579][ T5892] usb 4-1: config 208 has no interface number 0 [ 736.165087][ T5892] usb 4-1: config 208 interface 119 has no altsetting 0 [ 736.287960][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.318983][ T5892] usb 4-1: New USB device found, idVendor=0584, idProduct=00ae, bcdDevice= 1.02 [ 736.334162][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 736.361235][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.380719][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 736.404406][ T5892] usb 4-1: Product: syz [ 736.425040][ T5892] usb 4-1: Manufacturer: syz [ 736.436535][ T5892] usb 4-1: SerialNumber: syz [ 736.444677][ T5878] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 736.489713][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.501751][ T5878] usb 2-1: Product: syz [ 736.506086][ T5878] usb 2-1: Manufacturer: syz [ 736.510896][ T5878] usb 2-1: SerialNumber: syz [ 736.528898][ T5878] usb 2-1: config 0 descriptor?? [ 736.548951][ T5878] radioshark2 2-1:0.0: Invalid radioSHARK2 device [ 736.578243][ T5878] radioshark2 2-1:0.0: probe with driver radioshark2 failed with error -22 [ 736.607184][ T5878] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 737.090303][T15152] usb 2-1: USB disconnect, device number 97 [ 737.339580][T14378] usb 7-1: USB disconnect, device number 9 [ 737.392107][T20186] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5056'. [ 737.662726][T20192] fuse: Unknown parameter '0xffffffffffffffff' [ 739.215256][T14378] usb 3-1: USB disconnect, device number 120 [ 739.310892][T20215] FAULT_INJECTION: forcing a failure. [ 739.310892][T20215] name failslab, interval 1, probability 0, space 0, times 0 [ 739.336500][T20215] CPU: 0 UID: 0 PID: 20215 Comm: syz.2.5064 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.336527][T20215] Tainted: [L]=SOFTLOCKUP [ 739.336533][T20215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 739.336543][T20215] Call Trace: [ 739.336550][T20215] [ 739.336558][T20215] dump_stack_lvl+0xe8/0x150 [ 739.336576][T20215] should_fail_ex+0x412/0x560 [ 739.336594][T20215] should_failslab+0xa8/0x100 [ 739.336607][T20215] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 739.336624][T20215] ? __alloc_skb+0x1d0/0x7d0 [ 739.336638][T20215] ? __local_bh_enable_ip+0xd0/0x130 [ 739.336663][T20215] __alloc_skb+0x1d0/0x7d0 [ 739.336683][T20215] sock_wmalloc+0xb2/0x130 [ 739.336703][T20215] pppoe_sendmsg+0x2b4/0x7c0 [ 739.336832][T20215] ? __pfx_aa_sk_perm+0x10/0x10 [ 739.336855][T20215] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 739.336871][T20215] ? aa_sock_msg_perm+0xf1/0x1b0 [ 739.336885][T20215] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 739.336898][T20215] ____sys_sendmsg+0x972/0x9f0 [ 739.336908][T20215] ? __lock_acquire+0x6b5/0x2cf0 [ 739.336929][T20215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 739.336954][T20215] ? import_iovec+0x73/0xa0 [ 739.336975][T20215] ___sys_sendmsg+0x2a5/0x360 [ 739.336998][T20215] ? __pfx____sys_sendmsg+0x10/0x10 [ 739.337015][T20215] ? kstrtouint+0x6e/0xe0 [ 739.337039][T20215] ? __fget_files+0x2a/0x420 [ 739.337052][T20215] ? __fget_files+0x3a0/0x420 [ 739.337071][T20215] __sys_sendmmsg+0x27c/0x4e0 [ 739.337093][T20215] ? __pfx___sys_sendmmsg+0x10/0x10 [ 739.337109][T20215] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 739.337149][T20215] ? ksys_write+0x242/0x270 [ 739.337164][T20215] ? __pfx_ksys_write+0x10/0x10 [ 739.337177][T20215] __x64_sys_sendmmsg+0xa0/0xc0 [ 739.337188][T20215] do_syscall_64+0x14d/0xf80 [ 739.337198][T20215] ? trace_irq_disable+0x3b/0x150 [ 739.337220][T20215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.337235][T20215] ? clear_bhb_loop+0x40/0x90 [ 739.337254][T20215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.337270][T20215] RIP: 0033:0x7f30aa79c799 [ 739.337285][T20215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.337298][T20215] RSP: 002b:00007f30ab730028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 739.337311][T20215] RAX: ffffffffffffffda RBX: 00007f30aaa15fa0 RCX: 00007f30aa79c799 [ 739.337319][T20215] RDX: 0000000000000001 RSI: 0000200000001e80 RDI: 0000000000000003 [ 739.337329][T20215] RBP: 00007f30ab730090 R08: 0000000000000000 R09: 0000000000000000 [ 739.337338][T20215] R10: 0000000024008015 R11: 0000000000000246 R12: 0000000000000001 [ 739.337346][T20215] R13: 00007f30aaa16038 R14: 00007f30aaa15fa0 R15: 00007f30aab3fa48 [ 739.337370][T20215] [ 739.703241][ T5892] usb 4-1: USB disconnect, device number 104 [ 739.811274][T20223] FAULT_INJECTION: forcing a failure. [ 739.811274][T20223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.863293][T20223] CPU: 1 UID: 0 PID: 20223 Comm: syz.1.5068 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.863310][T20223] Tainted: [L]=SOFTLOCKUP [ 739.863316][T20223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 739.863326][T20223] Call Trace: [ 739.863333][T20223] [ 739.863340][T20223] dump_stack_lvl+0xe8/0x150 [ 739.863366][T20223] should_fail_ex+0x412/0x560 [ 739.863391][T20223] _copy_from_iter+0x1d3/0x1670 [ 739.863513][T20223] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 739.863528][T20223] ? __pfx_policy_nodemask+0x10/0x10 [ 739.863541][T20223] ? __pfx__copy_from_iter+0x10/0x10 [ 739.863558][T20223] ? set_page_refcounted+0xa0/0x1e0 [ 739.863569][T20223] ? page_copy_sane+0x4e/0x270 [ 739.863590][T20223] copy_page_from_iter+0xdd/0x170 [ 739.863613][T20223] tun_get_user+0x1d4b/0x3dd0 [ 739.863673][T20223] ? tun_get_user+0x6ff/0x3dd0 [ 739.863702][T20223] ? aa_file_perm+0x50e/0x15e0 [ 739.863718][T20223] ? __pfx_tun_get_user+0x10/0x10 [ 739.863726][T20223] ? aa_file_perm+0x192/0x15e0 [ 739.863754][T20223] ? ref_tracker_alloc+0x35c/0x4c0 [ 739.863770][T20223] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 739.863786][T20223] ? tun_get+0x1c/0x2f0 [ 739.863797][T20223] ? tun_get+0x1c/0x2f0 [ 739.863805][T20223] ? tun_get+0x1c/0x2f0 [ 739.863816][T20223] tun_chr_write_iter+0x113/0x200 [ 739.863826][T20223] vfs_write+0x61d/0xb90 [ 739.863841][T20223] ? __pfx_vfs_write+0x10/0x10 [ 739.863854][T20223] ? __fget_files+0x2a/0x420 [ 739.863872][T20223] ksys_write+0x150/0x270 [ 739.863883][T20223] ? __pfx_ksys_write+0x10/0x10 [ 739.863897][T20223] do_syscall_64+0x14d/0xf80 [ 739.863908][T20223] ? trace_irq_disable+0x3b/0x150 [ 739.863922][T20223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.863931][T20223] ? clear_bhb_loop+0x40/0x90 [ 739.863942][T20223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.863951][T20223] RIP: 0033:0x7f9e5515cfce [ 739.863961][T20223] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 739.863969][T20223] RSP: 002b:00007f9e56113fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 739.863980][T20223] RAX: ffffffffffffffda RBX: 00007f9e561146c0 RCX: 00007f9e5515cfce [ 739.863987][T20223] RDX: 0000000000000128 RSI: 0000200000002bc0 RDI: 00000000000000c8 [ 739.863993][T20223] RBP: 00007f9e56114090 R08: 0000000000000000 R09: 0000000000000000 [ 739.863999][T20223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.864004][T20223] R13: 00007f9e55416038 R14: 00007f9e55415fa0 R15: 00007f9e5553fa48 [ 739.864018][T20223] [ 740.225268][T14378] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 740.288334][T20230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5071'. [ 740.396326][T14378] usb 3-1: Using ep0 maxpacket: 16 [ 740.403172][T14378] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 740.415140][T14378] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 740.435141][T14378] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 740.461784][T14378] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 740.473479][T14378] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 740.505265][T14378] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 740.538631][T14378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.562935][T14378] usb 3-1: config 0 descriptor?? [ 740.585726][T20217] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 740.612098][T14378] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input50 [ 740.695170][ T5892] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 740.722845][T20225] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5069'. [ 740.853538][T15166] usb 3-1: USB disconnect, device number 121 [ 740.872329][ T5892] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 740.988079][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.079059][ T5892] usb 1-1: Product: syz [ 741.115232][ T5892] usb 1-1: Manufacturer: syz [ 741.119874][ T5892] usb 1-1: SerialNumber: syz [ 741.198060][T20247] FAULT_INJECTION: forcing a failure. [ 741.198060][T20247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.226445][ T5892] usb 1-1: config 0 descriptor?? [ 741.242193][T20247] CPU: 1 UID: 0 PID: 20247 Comm: syz.6.5075 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.242219][T20247] Tainted: [L]=SOFTLOCKUP [ 741.242225][T20247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 741.242235][T20247] Call Trace: [ 741.242242][T20247] [ 741.242249][T20247] dump_stack_lvl+0xe8/0x150 [ 741.242276][T20247] should_fail_ex+0x412/0x560 [ 741.242303][T20247] _copy_from_user+0x2d/0xb0 [ 741.242321][T20247] __copy_msghdr+0x3c5/0x5b0 [ 741.242343][T20247] ___sys_sendmsg+0x213/0x360 [ 741.242365][T20247] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.242411][T20247] ? __fget_files+0x2a/0x420 [ 741.242431][T20247] ? __fget_files+0x3a0/0x420 [ 741.242459][T20247] __x64_sys_sendmsg+0x1bd/0x2a0 [ 741.242478][T20247] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 741.242502][T20247] ? __pfx_ksys_write+0x10/0x10 [ 741.242529][T20247] do_syscall_64+0x14d/0xf80 [ 741.242546][T20247] ? trace_irq_disable+0x3b/0x150 [ 741.242566][T20247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.242583][T20247] ? clear_bhb_loop+0x40/0x90 [ 741.242601][T20247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.242625][T20247] RIP: 0033:0x7f2d5eb9c799 [ 741.242642][T20247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.242655][T20247] RSP: 002b:00007f2d5fa8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.242673][T20247] RAX: ffffffffffffffda RBX: 00007f2d5ee15fa0 RCX: 00007f2d5eb9c799 [ 741.242684][T20247] RDX: 000000002000c08d RSI: 0000200000000240 RDI: 0000000000000003 [ 741.242695][T20247] RBP: 00007f2d5fa8c090 R08: 0000000000000000 R09: 0000000000000000 [ 741.242705][T20247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.242715][T20247] R13: 00007f2d5ee16038 R14: 00007f2d5ee15fa0 R15: 00007f2d5ef3fa48 [ 741.242739][T20247] [ 741.493882][T20249] trusted_key: encrypted_key: insufficient parameters specified [ 741.615499][ T5892] usb 1-1: USB disconnect, device number 114 [ 741.687125][T13363] udevd[13363]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 741.780719][T20264] FAULT_INJECTION: forcing a failure. [ 741.780719][T20264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.819171][T20265] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5078'. [ 741.892762][T20264] CPU: 1 UID: 0 PID: 20264 Comm: syz.3.5081 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.892788][T20264] Tainted: [L]=SOFTLOCKUP [ 741.892794][T20264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 741.892803][T20264] Call Trace: [ 741.892810][T20264] [ 741.892817][T20264] dump_stack_lvl+0xe8/0x150 [ 741.892849][T20264] should_fail_ex+0x412/0x560 [ 741.892875][T20264] _copy_to_user+0x31/0xb0 [ 741.892895][T20264] simple_read_from_buffer+0xe1/0x170 [ 741.892921][T20264] proc_fail_nth_read+0x1bb/0x230 [ 741.892946][T20264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 741.892970][T20264] ? rw_verify_area+0x2a6/0x4d0 [ 741.892986][T20264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 741.893008][T20264] vfs_read+0x20c/0xa70 [ 741.893023][T20264] ? ipv6_setsockopt+0xe7/0x170 [ 741.893048][T20264] ? fdget_pos+0x246/0x320 [ 741.893073][T20264] ? __pfx___mutex_lock+0x10/0x10 [ 741.893092][T20264] ? __pfx_vfs_read+0x10/0x10 [ 741.893110][T20264] ? __fget_files+0x2a/0x420 [ 741.893134][T20264] ? __fget_files+0x3a0/0x420 [ 741.893153][T20264] ? __fget_files+0x2a/0x420 [ 741.893181][T20264] ksys_read+0x150/0x270 [ 741.893200][T20264] ? __pfx_ksys_read+0x10/0x10 [ 741.893226][T20264] do_syscall_64+0x14d/0xf80 [ 741.893242][T20264] ? trace_irq_disable+0x3b/0x150 [ 741.893263][T20264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.893279][T20264] ? clear_bhb_loop+0x40/0x90 [ 741.893297][T20264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.893312][T20264] RIP: 0033:0x7f1ae9f5cfce [ 741.893327][T20264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 741.893340][T20264] RSP: 002b:00007f1aeaddffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 741.893357][T20264] RAX: ffffffffffffffda RBX: 00007f1aeade06c0 RCX: 00007f1ae9f5cfce [ 741.893368][T20264] RDX: 000000000000000f RSI: 00007f1aeade00a0 RDI: 0000000000000004 [ 741.893378][T20264] RBP: 00007f1aeade0090 R08: 0000000000000000 R09: 0000000000000000 [ 741.893388][T20264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.893398][T20264] R13: 00007f1aea216038 R14: 00007f1aea215fa0 R15: 00007f1aea33fa48 [ 741.893424][T20264] [ 742.317476][T20269] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 742.614746][T20277] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5083'. [ 742.643991][T20282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.655701][T20282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.999804][T20295] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5087'. [ 744.439959][T20307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5092'. [ 744.450076][T20307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5092'. [ 744.635624][T20310] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 744.703817][T20318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5096'. [ 744.895083][ T5878] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 745.057826][T20323] FAULT_INJECTION: forcing a failure. [ 745.057826][T20323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.081800][ T5878] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 745.092813][T20323] CPU: 1 UID: 0 PID: 20323 Comm: syz.3.5098 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.092839][T20323] Tainted: [L]=SOFTLOCKUP [ 745.092845][T20323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 745.092854][T20323] Call Trace: [ 745.092861][T20323] [ 745.092868][T20323] dump_stack_lvl+0xe8/0x150 [ 745.092892][T20323] should_fail_ex+0x412/0x560 [ 745.092915][T20323] strncpy_from_user+0x36/0x2b0 [ 745.092937][T20323] do_getname+0x77/0x250 [ 745.092957][T20323] __se_sys_rename+0x2b/0x2c0 [ 745.092978][T20323] do_syscall_64+0x14d/0xf80 [ 745.092994][T20323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.093009][T20323] ? clear_bhb_loop+0x40/0x90 [ 745.093027][T20323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.093041][T20323] RIP: 0033:0x7f1ae9f9c799 [ 745.093056][T20323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.093069][T20323] RSP: 002b:00007f1aeade0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 745.093086][T20323] RAX: ffffffffffffffda RBX: 00007f1aea215fa0 RCX: 00007f1ae9f9c799 [ 745.093096][T20323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 745.093104][T20323] RBP: 00007f1aeade0090 R08: 0000000000000000 R09: 0000000000000000 [ 745.093113][T20323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.093122][T20323] R13: 00007f1aea216038 R14: 00007f1aea215fa0 R15: 00007f1aea33fa48 [ 745.093142][T20323] [ 745.395751][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.403845][ T5878] usb 7-1: Product: syz [ 745.408251][ T5878] usb 7-1: Manufacturer: syz [ 745.493082][ T5878] usb 7-1: SerialNumber: syz [ 745.503852][ T5878] usb 7-1: config 0 descriptor?? [ 745.513841][T20332] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5100'. [ 745.741100][ T5878] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 745.835573][T15152] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 745.971819][T20342] syzkaller0: entered promiscuous mode [ 745.989341][T20342] syzkaller0: entered allmulticast mode [ 746.037926][T15152] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 746.047339][T15152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.077982][T15152] usb 4-1: Product: syz [ 746.086818][T20342] tipc: Enabled bearer , priority 0 [ 746.104049][T15152] usb 4-1: Manufacturer: syz [ 746.139231][T15152] usb 4-1: SerialNumber: syz [ 746.163450][T15152] usb 4-1: config 0 descriptor?? [ 746.218519][T20344] bond11: option downdelay: invalid value (18446744073709551615) [ 746.246297][T20344] bond11: option downdelay: allowed values 0 - 2147483647 [ 746.268842][T20344] bond11 (unregistering): Released all slaves [ 746.318638][T20341] tipc: Resetting bearer [ 746.338518][T20341] tipc: Disabling bearer [ 746.392794][T15152] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 746.695133][T15166] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 746.758584][ T5878] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 746.790322][ T5878] usb 7-1: USB disconnect, device number 10 [ 746.866067][T15166] usb 2-1: Using ep0 maxpacket: 32 [ 746.873629][T15166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.905120][T15166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.936319][T15166] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 746.965305][T15166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.989574][T15166] usb 2-1: config 0 descriptor?? [ 747.196733][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.203633][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.236079][T15166] usbhid 2-1:0.0: can't add hid device: -71 [ 747.247825][T15166] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 747.273027][T15166] usb 2-1: USB disconnect, device number 98 [ 747.785045][T15166] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 747.945043][T15166] usb 2-1: Using ep0 maxpacket: 32 [ 747.952091][T15166] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 747.974851][T15166] usb 2-1: config 0 has no interface number 0 [ 747.993240][T15166] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 748.015768][T15166] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 748.038633][T15166] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 748.060400][T15152] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 748.075897][T15166] usb 2-1: config 0 interface 196 has no altsetting 0 [ 748.099973][T15166] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 748.123074][T15166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.140967][T15166] usb 2-1: Product: syz [ 748.150835][T15166] usb 2-1: Manufacturer: syz [ 748.155814][T15166] usb 2-1: SerialNumber: syz [ 748.168561][T15166] usb 2-1: config 0 descriptor?? [ 748.181718][T20381] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 748.263937][T20387] FAULT_INJECTION: forcing a failure. [ 748.263937][T20387] name failslab, interval 1, probability 0, space 0, times 0 [ 748.293933][T20387] CPU: 1 UID: 0 PID: 20387 Comm: syz.0.5118 Tainted: G L syzkaller #0 PREEMPT(full) [ 748.293961][T20387] Tainted: [L]=SOFTLOCKUP [ 748.293967][T20387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 748.293976][T20387] Call Trace: [ 748.293983][T20387] [ 748.293992][T20387] dump_stack_lvl+0xe8/0x150 [ 748.294017][T20387] should_fail_ex+0x412/0x560 [ 748.294045][T20387] should_failslab+0xa8/0x100 [ 748.294066][T20387] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 748.294084][T20387] ? __alloc_skb+0x186/0x7d0 [ 748.294099][T20387] ? __alloc_skb+0x1d0/0x7d0 [ 748.294112][T20387] ? __local_bh_enable_ip+0xd0/0x130 [ 748.294136][T20387] __alloc_skb+0x1d0/0x7d0 [ 748.294155][T20387] netlink_sendmsg+0x5d4/0xb40 [ 748.294186][T20387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.294210][T20387] ? aa_sock_msg_perm+0xf1/0x1b0 [ 748.294233][T20387] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 748.294254][T20387] ____sys_sendmsg+0x972/0x9f0 [ 748.294279][T20387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 748.294303][T20387] ? import_iovec+0x73/0xa0 [ 748.294322][T20387] ___sys_sendmsg+0x2a5/0x360 [ 748.294344][T20387] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.294387][T20387] ? __fget_files+0x2a/0x420 [ 748.294408][T20387] ? __fget_files+0x3a0/0x420 [ 748.294438][T20387] __x64_sys_sendmsg+0x1bd/0x2a0 [ 748.294477][T20387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 748.294502][T20387] ? rcu_is_watching+0x15/0xb0 [ 748.294533][T20387] do_syscall_64+0x14d/0xf80 [ 748.294549][T20387] ? trace_irq_disable+0x3b/0x150 [ 748.294570][T20387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.294587][T20387] ? clear_bhb_loop+0x40/0x90 [ 748.294606][T20387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.294622][T20387] RIP: 0033:0x7f2bf7b9c799 [ 748.294637][T20387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.294651][T20387] RSP: 002b:00007f2bf8b10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.294674][T20387] RAX: ffffffffffffffda RBX: 00007f2bf7e15fa0 RCX: 00007f2bf7b9c799 [ 748.294686][T20387] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 748.294696][T20387] RBP: 00007f2bf8b10090 R08: 0000000000000000 R09: 0000000000000000 [ 748.294706][T20387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.294715][T20387] R13: 00007f2bf7e16038 R14: 00007f2bf7e15fa0 R15: 00007f2bf7f3fa48 [ 748.294740][T20387] [ 748.598095][T15152] usb 4-1: USB disconnect, device number 105 [ 748.767340][T15166] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 748.785997][T15166] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 749.067936][T20412] FAULT_INJECTION: forcing a failure. [ 749.067936][T20412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.092530][T20412] CPU: 0 UID: 0 PID: 20412 Comm: syz.6.5124 Tainted: G L syzkaller #0 PREEMPT(full) [ 749.092558][T20412] Tainted: [L]=SOFTLOCKUP [ 749.092564][T20412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 749.092574][T20412] Call Trace: [ 749.092582][T20412] [ 749.092590][T20412] dump_stack_lvl+0xe8/0x150 [ 749.092618][T20412] should_fail_ex+0x412/0x560 [ 749.092644][T20412] _copy_to_user+0x31/0xb0 [ 749.092662][T20412] simple_read_from_buffer+0xe1/0x170 [ 749.092689][T20412] proc_fail_nth_read+0x1bb/0x230 [ 749.092713][T20412] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 749.092737][T20412] ? rw_verify_area+0x2a6/0x4d0 [ 749.092754][T20412] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 749.092776][T20412] vfs_read+0x20c/0xa70 [ 749.092792][T20412] ? fdget_pos+0x246/0x320 [ 749.092811][T20412] ? __pfx_do_recvmmsg+0x10/0x10 [ 749.092833][T20412] ? __pfx___mutex_lock+0x10/0x10 [ 749.092852][T20412] ? __pfx_vfs_read+0x10/0x10 [ 749.092868][T20412] ? __fget_files+0x2a/0x420 [ 749.092892][T20412] ? __fget_files+0x3a0/0x420 [ 749.092912][T20412] ? __fget_files+0x2a/0x420 [ 749.092937][T20412] ksys_read+0x150/0x270 [ 749.092954][T20412] ? __pfx_ksys_read+0x10/0x10 [ 749.092978][T20412] do_syscall_64+0x14d/0xf80 [ 749.092993][T20412] ? trace_irq_disable+0x3b/0x150 [ 749.093011][T20412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.093026][T20412] ? clear_bhb_loop+0x40/0x90 [ 749.093043][T20412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.093057][T20412] RIP: 0033:0x7f2d5eb5cfce [ 749.093072][T20412] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 749.093084][T20412] RSP: 002b:00007f2d5fa8bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 749.093100][T20412] RAX: ffffffffffffffda RBX: 00007f2d5fa8c6c0 RCX: 00007f2d5eb5cfce [ 749.093111][T20412] RDX: 000000000000000f RSI: 00007f2d5fa8c0a0 RDI: 0000000000000004 [ 749.093121][T20412] RBP: 00007f2d5fa8c090 R08: 0000000000000000 R09: 0000000000000000 [ 749.093131][T20412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.093140][T20412] R13: 00007f2d5ee16038 R14: 00007f2d5ee15fa0 R15: 00007f2d5ef3fa48 [ 749.093165][T20412] [ 749.407946][T14378] usb 2-1: USB disconnect, device number 99 [ 749.838598][T20425] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5126'. [ 749.899861][T20425] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.907422][T20425] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.125027][T15152] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 750.306656][T15152] usb 3-1: Using ep0 maxpacket: 32 [ 750.315296][ T5878] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 750.329268][T15152] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 750.358437][T15152] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 750.394043][T15152] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 750.423700][T15152] usb 3-1: Product: syz [ 750.432778][T15152] usb 3-1: Manufacturer: syz [ 750.461222][T15152] usb 3-1: SerialNumber: syz [ 750.507385][T15152] usb 3-1: config 0 descriptor?? [ 750.541210][T20431] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 750.857203][T15152] usb 3-1: USB disconnect, device number 123 [ 751.192625][ T5878] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 751.210933][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.225110][T15152] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 751.241766][ T5878] usb 1-1: config 0 has no interfaces? [ 751.251887][ T5878] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 751.315120][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.355973][ T5878] usb 1-1: config 0 descriptor?? [ 751.375270][T15152] usb 3-1: device descriptor read/64, error -71 [ 751.568544][T20453] ptrace attach of "./syz-executor exec"[14278] was attempted by "./syz-executor exec"[20453] [ 751.625052][T15152] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 751.742450][T20438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5130'. [ 751.879127][T15152] usb 3-1: device descriptor read/64, error -71 [ 751.893937][T20455] FAULT_INJECTION: forcing a failure. [ 751.893937][T20455] name failslab, interval 1, probability 0, space 0, times 0 [ 751.909560][T20455] CPU: 1 UID: 0 PID: 20455 Comm: syz.6.5135 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.909586][T20455] Tainted: [L]=SOFTLOCKUP [ 751.909592][T20455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 751.909602][T20455] Call Trace: [ 751.909609][T20455] [ 751.909618][T20455] dump_stack_lvl+0xe8/0x150 [ 751.909643][T20455] should_fail_ex+0x412/0x560 [ 751.909665][T20455] should_failslab+0xa8/0x100 [ 751.909685][T20455] __kmalloc_noprof+0xe8/0x760 [ 751.909701][T20455] ? tomoyo_encode+0x28b/0x550 [ 751.909725][T20455] tomoyo_encode+0x28b/0x550 [ 751.909751][T20455] tomoyo_realpath_from_path+0x58d/0x5d0 [ 751.909781][T20455] ? tomoyo_path_number_perm+0x219/0x630 [ 751.909800][T20455] tomoyo_path_number_perm+0x246/0x630 [ 751.909822][T20455] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 751.909844][T20455] ? __lock_acquire+0x6b5/0x2cf0 [ 751.909874][T20455] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 751.909909][T20455] ? __fget_files+0x2a/0x420 [ 751.909932][T20455] ? __fget_files+0x2a/0x420 [ 751.909950][T20455] ? __fget_files+0x3a0/0x420 [ 751.909969][T20455] ? __fget_files+0x2a/0x420 [ 751.909993][T20455] security_file_ioctl+0xc3/0x2a0 [ 751.910014][T20455] __se_sys_ioctl+0x47/0x170 [ 751.910035][T20455] do_syscall_64+0x14d/0xf80 [ 751.910051][T20455] ? trace_irq_disable+0x3b/0x150 [ 751.910072][T20455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.910088][T20455] ? clear_bhb_loop+0x40/0x90 [ 751.910107][T20455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.910122][T20455] RIP: 0033:0x7f2d5eb9c799 [ 751.910138][T20455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.910151][T20455] RSP: 002b:00007f2d5fa8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.910167][T20455] RAX: ffffffffffffffda RBX: 00007f2d5ee15fa0 RCX: 00007f2d5eb9c799 [ 751.910178][T20455] RDX: 0000200000000000 RSI: 00000000400454d9 RDI: 0000000000000003 [ 751.910188][T20455] RBP: 00007f2d5fa8c090 R08: 0000000000000000 R09: 0000000000000000 [ 751.910198][T20455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.910207][T20455] R13: 00007f2d5ee16038 R14: 00007f2d5ee15fa0 R15: 00007f2d5ef3fa48 [ 751.910239][T20455] [ 752.144120][T20455] ERROR: Out of memory at tomoyo_realpath_from_path. [ 752.144160][T15152] usb usb3-port1: attempt power cycle [ 752.255186][T20457] tipc: Enabling of bearer rejected, failed to enable media [ 752.365416][T20461] ipt_ECN: cannot use operation on non-tcp rule [ 752.385876][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5138'. [ 752.525096][T15152] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 752.549700][T20467] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5139'. [ 752.565698][T15152] usb 3-1: device descriptor read/8, error -71 [ 752.815041][T15152] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 752.855870][T15152] usb 3-1: device descriptor read/8, error -71 [ 752.997125][T15152] usb usb3-port1: unable to enumerate USB device [ 753.295209][T15152] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 753.304591][T15166] usb 1-1: USB disconnect, device number 115 [ 753.393977][T20472] openvswitch: netlink: IP tunnel dst address not specified [ 753.476206][T15152] usb 3-1: Using ep0 maxpacket: 16 [ 753.493021][T15152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.512065][T15152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.532288][T15152] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 753.557980][T15152] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 753.567810][T15152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.582333][T15152] usb 3-1: config 0 descriptor?? [ 753.693132][T20478] FAULT_INJECTION: forcing a failure. [ 753.693132][T20478] name failslab, interval 1, probability 0, space 0, times 0 [ 753.695349][T15166] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 753.714052][T20478] CPU: 1 UID: 0 PID: 20478 Comm: syz.0.5145 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.714088][T20478] Tainted: [L]=SOFTLOCKUP [ 753.714093][T20478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 753.714102][T20478] Call Trace: [ 753.714108][T20478] [ 753.714116][T20478] dump_stack_lvl+0xe8/0x150 [ 753.714150][T20478] should_fail_ex+0x412/0x560 [ 753.714176][T20478] should_failslab+0xa8/0x100 [ 753.714197][T20478] __kmalloc_noprof+0xe8/0x760 [ 753.714214][T20478] ? alloc_pipe_info+0x1fc/0x4d0 [ 753.714231][T20478] ? __kmalloc_cache_noprof+0x15b/0x660 [ 753.714252][T20478] alloc_pipe_info+0x1fc/0x4d0 [ 753.714272][T20478] splice_direct_to_actor+0xa08/0xc70 [ 753.714302][T20478] ? __pfx_direct_splice_actor+0x10/0x10 [ 753.714323][T20478] ? __pfx_aa_file_perm+0x10/0x10 [ 753.714348][T20478] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 753.714368][T20478] ? get_pid_task+0x20/0x1f0 [ 753.714390][T20478] do_splice_direct+0x195/0x290 [ 753.714413][T20478] ? __pfx_do_splice_direct+0x10/0x10 [ 753.714434][T20478] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 753.714451][T20478] ? bpf_lsm_file_permission+0x9/0x20 [ 753.714468][T20478] ? security_file_permission+0x75/0x260 [ 753.714488][T20478] ? rw_verify_area+0x255/0x4d0 [ 753.714509][T20478] do_sendfile+0x535/0x7d0 [ 753.714536][T20478] ? __pfx_do_sendfile+0x10/0x10 [ 753.714556][T20478] ? __fget_files+0x3a0/0x420 [ 753.714585][T20478] __se_sys_sendfile64+0x144/0x1a0 [ 753.714608][T20478] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 753.714637][T20478] do_syscall_64+0x14d/0xf80 [ 753.714653][T20478] ? trace_irq_disable+0x3b/0x150 [ 753.714673][T20478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.714689][T20478] ? clear_bhb_loop+0x40/0x90 [ 753.714707][T20478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.714722][T20478] RIP: 0033:0x7f2bf7b9c799 [ 753.714739][T20478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.714753][T20478] RSP: 002b:00007f2bf8b10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 753.714771][T20478] RAX: ffffffffffffffda RBX: 00007f2bf7e15fa0 RCX: 00007f2bf7b9c799 [ 753.714782][T20478] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 753.714792][T20478] RBP: 00007f2bf8b10090 R08: 0000000000000000 R09: 0000000000000000 [ 753.714802][T20478] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001 [ 753.714811][T20478] R13: 00007f2bf7e16038 R14: 00007f2bf7e15fa0 R15: 00007f2bf7f3fa48 [ 753.714836][T20478] [ 754.058080][T15152] microsoft 0003:045E:07DA.0032: reserved main item tag 0xd [ 754.068527][T15166] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.084414][T15166] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.111345][T15152] hid_parser_main: 5 callbacks suppressed [ 754.111425][T15152] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 754.134091][T15166] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 754.149894][T15152] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 754.168701][T15166] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.226006][T15152] microsoft 0003:045E:07DA.0032: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 754.243565][T15166] usb 7-1: config 0 descriptor?? [ 754.259314][T15152] microsoft 0003:045E:07DA.0032: no inputs found [ 754.284643][T15152] microsoft 0003:045E:07DA.0032: could not initialize ff, continuing anyway [ 754.350770][T15152] usb 3-1: USB disconnect, device number 2 [ 754.398679][T20485] fido_id[20485]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 754.757950][T15166] cm6533_jd 0003:0D8C:0022.0033: unknown main item tag 0x0 [ 754.807942][T15166] cm6533_jd 0003:0D8C:0022.0033: unknown main item tag 0x0 [ 754.984392][T15166] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.0033/input/input51 [ 755.125244][ T5878] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 755.174227][T15166] cm6533_jd 0003:0D8C:0022.0033: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 755.333031][T15166] usb 7-1: USB disconnect, device number 11 [ 755.340873][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 755.375768][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 755.393357][T20498] fido_id[20498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.0033/report_descriptor': No such file or directory [ 755.435279][ T5878] usb 2-1: config 1 has an invalid descriptor of length 188, skipping remainder of the config [ 755.480912][ T5878] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 755.519731][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.594640][ T5878] usb 2-1: Product: syz [ 755.634761][ T5878] usb 2-1: Manufacturer: syz [ 755.664838][ T5878] usb 2-1: SerialNumber: syz [ 755.839492][T20504] sctp: [Deprecated]: syz.6.5152 (pid 20504) Use of int in maxseg socket option. [ 755.839492][T20504] Use struct sctp_assoc_value instead [ 755.909970][ T5878] usb 2-1: selecting invalid altsetting 1 [ 756.030645][ T5878] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 756.083456][ T5878] usb 2-1: USB disconnect, device number 100 [ 756.121197][T13371] udevd[13371]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 756.237279][T20520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5159'. [ 756.286556][T20522] ptrace attach of "./syz-executor exec"[19153] was attempted by "./syz-executor exec"[20522] [ 756.643285][T20524] FAULT_INJECTION: forcing a failure. [ 756.643285][T20524] name failslab, interval 1, probability 0, space 0, times 0 [ 756.656415][T20524] CPU: 1 UID: 0 PID: 20524 Comm: syz.1.5160 Tainted: G L syzkaller #0 PREEMPT(full) [ 756.656433][T20524] Tainted: [L]=SOFTLOCKUP [ 756.656436][T20524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 756.656445][T20524] Call Trace: [ 756.656452][T20524] [ 756.656460][T20524] dump_stack_lvl+0xe8/0x150 [ 756.656478][T20524] should_fail_ex+0x412/0x560 [ 756.656496][T20524] should_failslab+0xa8/0x100 [ 756.656509][T20524] __kmalloc_noprof+0xe8/0x760 [ 756.656519][T20524] ? tomoyo_encode+0x28b/0x550 [ 756.656537][T20524] tomoyo_encode+0x28b/0x550 [ 756.656552][T20524] tomoyo_realpath_from_path+0x58d/0x5d0 [ 756.656571][T20524] ? tomoyo_path_number_perm+0x219/0x630 [ 756.656583][T20524] tomoyo_path_number_perm+0x246/0x630 [ 756.656596][T20524] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 756.656609][T20524] ? __lock_acquire+0x6b5/0x2cf0 [ 756.656626][T20524] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 756.656647][T20524] ? __fget_files+0x2a/0x420 [ 756.656662][T20524] ? __fget_files+0x2a/0x420 [ 756.656675][T20524] ? __fget_files+0x3a0/0x420 [ 756.656687][T20524] ? __fget_files+0x2a/0x420 [ 756.656702][T20524] security_file_ioctl+0xc3/0x2a0 [ 756.656715][T20524] __se_sys_ioctl+0x47/0x170 [ 756.656727][T20524] do_syscall_64+0x14d/0xf80 [ 756.656737][T20524] ? trace_irq_disable+0x3b/0x150 [ 756.656751][T20524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.656760][T20524] ? clear_bhb_loop+0x40/0x90 [ 756.656771][T20524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.656780][T20524] RIP: 0033:0x7f9e5519c799 [ 756.656791][T20524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.656799][T20524] RSP: 002b:00007f9e56114028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.656810][T20524] RAX: ffffffffffffffda RBX: 00007f9e55415fa0 RCX: 00007f9e5519c799 [ 756.656817][T20524] RDX: 00002000000001c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 756.656823][T20524] RBP: 00007f9e56114090 R08: 0000000000000000 R09: 0000000000000000 [ 756.656829][T20524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.656835][T20524] R13: 00007f9e55416038 R14: 00007f9e55415fa0 R15: 00007f9e5553fa48 [ 756.656849][T20524] [ 756.656862][T20524] ERROR: Out of memory at tomoyo_realpath_from_path. [ 757.032178][T20536] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5164'. [ 757.325059][ T5892] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 757.497209][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 757.505782][ T5892] usb 2-1: not running at top speed; connect to a high speed hub [ 757.538579][ T5892] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 757.548135][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.556665][ T5892] usb 2-1: Product: syz [ 757.561138][ T5892] usb 2-1: Manufacturer: syz [ 757.566127][ T5892] usb 2-1: SerialNumber: syz [ 757.738920][T14378] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 757.895121][T14378] usb 3-1: device descriptor read/64, error -71 [ 758.135711][T14378] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 758.214098][ T1145] bridge_slave_1: left allmulticast mode [ 758.247571][ T1145] bridge_slave_1: left promiscuous mode [ 758.276818][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.295236][T14378] usb 3-1: device descriptor read/64, error -71 [ 758.321951][ T5892] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 758.346502][ T1145] bridge_slave_0: left allmulticast mode [ 758.394021][ T1145] bridge_slave_0: left promiscuous mode [ 758.405451][ T5892] usb 2-1: failed to enable PITCH for EP 0x1 [ 758.414032][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.429728][T14378] usb usb3-port1: attempt power cycle [ 758.447988][ T5892] usb 2-1: unit 2 not found! [ 758.457990][ T1145] veth5: left allmulticast mode [ 758.472854][ T5892] usb 2-1: unit 8 not found! [ 758.481002][ T1145] veth5: left promiscuous mode [ 758.517491][ T1145] bridge1: port 2(veth5) entered disabled state [ 758.576031][ T1145] veth3: left allmulticast mode [ 758.600550][ T1145] veth3: left promiscuous mode [ 758.630420][ T1145] bridge1: port 1(veth3) entered disabled state [ 758.672244][ T1145] veth9: left allmulticast mode [ 758.721572][ T5892] usb 2-1: USB disconnect, device number 101 [ 758.733646][ T1145] veth9: left promiscuous mode [ 758.771300][ T1145] bridge2: port 2(veth9) entered disabled state [ 758.805784][T14378] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 758.816412][ T1145] veth7: left allmulticast mode [ 758.835802][ T1145] veth7: left promiscuous mode [ 758.858746][ T1145] bridge2: port 1(veth7) entered disabled state [ 758.869336][T14378] usb 3-1: device descriptor read/8, error -71 [ 758.914696][ T1145] veth13: left allmulticast mode [ 758.936628][ T1145] veth13: left promiscuous mode [ 758.965320][ T1145] bridge3: port 2(veth13) entered disabled state [ 759.027212][ T1145] veth11: left allmulticast mode [ 759.053042][ T1145] veth11: left promiscuous mode [ 759.095401][ T1145] bridge3: port 1(veth11) entered disabled state [ 759.135296][T14378] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 759.171609][T14378] usb 3-1: device descriptor read/8, error -71 [ 759.190505][T20567] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 759.305629][T14378] usb usb3-port1: unable to enumerate USB device [ 759.335362][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 759.715154][T14378] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 759.741244][ T1145] bond4 (unregistering): (slave geneve2): Releasing active interface [ 759.878217][T14378] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.901597][T14378] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 759.952524][T14378] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 759.979005][T14378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.990623][T14378] usb 4-1: Product: syz [ 759.994879][T14378] usb 4-1: Manufacturer: syz [ 760.027573][T14378] usb 4-1: SerialNumber: syz [ 760.041498][T14378] usb 4-1: config 0 descriptor?? [ 761.566007][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.690742][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.836977][T15166] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 761.995185][T15166] usb 3-1: Using ep0 maxpacket: 32 [ 762.002064][T15166] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 762.023987][T15166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 762.045516][T15166] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 762.069262][T15166] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 762.091046][T15166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.115613][T15166] usb 3-1: config 0 descriptor?? [ 762.127517][T20599] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 762.145828][T15166] hub 3-1:0.0: USB hub found [ 762.338205][T15166] hub 3-1:0.0: 2 ports detected [ 762.465351][T14378] usb 4-1: USB disconnect, device number 106 [ 762.514152][ T1145] bond0 (unregistering): Released all slaves [ 762.538568][ T1145] bond1 (unregistering): Released all slaves [ 762.799875][ T1145] bond2 (unregistering): Released all slaves [ 762.846219][ T1145] bond3 (unregistering): Released all slaves [ 762.881110][ T1145] bond4 (unregistering): Released all slaves [ 762.895101][T14378] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 762.921921][ T1145] bond5 (unregistering): Released all slaves [ 762.959873][ T1145] bond6 (unregistering): Released all slaves [ 763.082693][ T1145] bond7 (unregistering): Released all slaves [ 763.083361][T14378] usb 4-1: Using ep0 maxpacket: 32 [ 763.102098][ T1145] bond8 (unregistering): Released all slaves [ 763.106308][T20604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.156283][T20604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.189938][T14378] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.265314][T15152] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 763.268344][T14378] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 763.305058][T14378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.336335][T14378] usb 4-1: Product: syz [ 763.340780][T14378] usb 4-1: Manufacturer: syz [ 763.368265][T14378] usb 4-1: SerialNumber: syz [ 763.393275][T14378] usb 4-1: config 0 descriptor?? [ 763.417715][T15152] usb 7-1: device descriptor read/64, error -71 [ 763.423347][T14378] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 763.510064][ T1145] tipc: Disabling bearer [ 763.532973][ T1145] tipc: Left network mode [ 763.548577][T20612] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 763.665166][T15152] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 763.674079][ T1145] batman_adv: batadv0: Removing interface: macvtap1 [ 763.758204][T14378] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 763.793661][T14378] quatech2 4-1:0.0: probe with driver quatech2 failed with error -8 [ 763.806285][T15152] usb 7-1: device descriptor read/64, error -71 [ 763.940640][T15152] usb usb7-port1: attempt power cycle [ 764.020245][ T797] usb 4-1: USB disconnect, device number 107 [ 764.083986][T14378] usb 3-1: USB disconnect, device number 7 [ 764.084578][T15166] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 764.169344][ T1145] hsr_slave_0: left promiscuous mode [ 764.187884][ T1145] hsr_slave_1: left promiscuous mode [ 764.213727][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.265260][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.288594][T15152] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 764.356635][T15152] usb 7-1: device descriptor read/8, error -71 [ 764.635490][T20637] FAULT_INJECTION: forcing a failure. [ 764.635490][T20637] name failslab, interval 1, probability 0, space 0, times 0 [ 764.635547][T15152] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 764.738642][T20637] CPU: 1 UID: 0 PID: 20637 Comm: syz.2.5183 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.738670][T20637] Tainted: [L]=SOFTLOCKUP [ 764.738676][T20637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 764.738686][T20637] Call Trace: [ 764.738693][T20637] [ 764.738701][T20637] dump_stack_lvl+0xe8/0x150 [ 764.738728][T20637] should_fail_ex+0x412/0x560 [ 764.738754][T20637] should_failslab+0xa8/0x100 [ 764.738773][T20637] ? do_getname+0x2e/0x250 [ 764.738793][T20637] kmem_cache_alloc_noprof+0x87/0x650 [ 764.738818][T20637] do_getname+0x2e/0x250 [ 764.738837][T20637] ? getname_flags+0x11/0x20 [ 764.738858][T20637] do_sys_openat2+0xca/0x200 [ 764.738890][T20637] ? __pfx_do_sys_openat2+0x10/0x10 [ 764.738922][T20637] __se_sys_openat2+0x223/0x2d0 [ 764.738946][T20637] ? __pfx___se_sys_openat2+0x10/0x10 [ 764.738980][T20637] do_syscall_64+0x14d/0xf80 [ 764.738997][T20637] ? trace_irq_disable+0x3b/0x150 [ 764.739018][T20637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.739033][T20637] ? clear_bhb_loop+0x40/0x90 [ 764.739053][T20637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.739069][T20637] RIP: 0033:0x7f30aa79c799 [ 764.739083][T20637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.739096][T20637] RSP: 002b:00007f30ab730028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 764.739113][T20637] RAX: ffffffffffffffda RBX: 00007f30aaa15fa0 RCX: 00007f30aa79c799 [ 764.739124][T20637] RDX: 0000200000000080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 764.739134][T20637] RBP: 00007f30ab730090 R08: 0000000000000000 R09: 0000000000000000 [ 764.739145][T20637] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 764.739158][T20637] R13: 00007f30aaa16038 R14: 00007f30aaa15fa0 R15: 00007f30aab3fa48 [ 764.739183][T20637] [ 764.815633][T15152] usb 7-1: device descriptor read/8, error -71 [ 764.961959][T20639] FAULT_INJECTION: forcing a failure. [ 764.961959][T20639] name failslab, interval 1, probability 0, space 0, times 0 [ 764.974805][T20639] CPU: 0 UID: 0 PID: 20639 Comm: syz.3.5184 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.974830][T20639] Tainted: [L]=SOFTLOCKUP [ 764.974835][T20639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 764.974840][T20639] Call Trace: [ 764.974847][T20639] [ 764.974854][T20639] dump_stack_lvl+0xe8/0x150 [ 764.974872][T20639] should_fail_ex+0x412/0x560 [ 764.974890][T20639] should_failslab+0xa8/0x100 [ 764.974903][T20639] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 764.974914][T20639] ? __alloc_skb+0x186/0x7d0 [ 764.974923][T20639] ? __alloc_skb+0x1d0/0x7d0 [ 764.974936][T20639] ? __local_bh_enable_ip+0xd0/0x130 [ 764.974959][T20639] __alloc_skb+0x1d0/0x7d0 [ 764.974972][T20639] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 764.974993][T20639] netlink_sendmsg+0x5d4/0xb40 [ 764.975023][T20639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.975040][T20639] ? aa_sock_msg_perm+0xf1/0x1b0 [ 764.975054][T20639] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 764.975066][T20639] ____sys_sendmsg+0x972/0x9f0 [ 764.975081][T20639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 764.975095][T20639] ? import_iovec+0x73/0xa0 [ 764.975107][T20639] ___sys_sendmsg+0x2a5/0x360 [ 764.975119][T20639] ? __pfx____sys_sendmsg+0x10/0x10 [ 764.975144][T20639] ? __fget_files+0x2a/0x420 [ 764.975158][T20639] ? __fget_files+0x3a0/0x420 [ 764.975175][T20639] __x64_sys_sendmsg+0x1bd/0x2a0 [ 764.975187][T20639] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 764.975201][T20639] ? __pfx_ksys_write+0x10/0x10 [ 764.975216][T20639] do_syscall_64+0x14d/0xf80 [ 764.975227][T20639] ? trace_irq_disable+0x3b/0x150 [ 764.975240][T20639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.975250][T20639] ? clear_bhb_loop+0x40/0x90 [ 764.975261][T20639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.975270][T20639] RIP: 0033:0x7f1ae9f9c799 [ 764.975281][T20639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.975289][T20639] RSP: 002b:00007f1aeade0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.975300][T20639] RAX: ffffffffffffffda RBX: 00007f1aea215fa0 RCX: 00007f1ae9f9c799 [ 764.975306][T20639] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 764.975313][T20639] RBP: 00007f1aeade0090 R08: 0000000000000000 R09: 0000000000000000 [ 764.975319][T20639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.975324][T20639] R13: 00007f1aea216038 R14: 00007f1aea215fa0 R15: 00007f1aea33fa48 [ 764.975338][T20639] [ 765.328200][T15152] usb usb7-port1: unable to enumerate USB device [ 765.583084][T20649] ptrace attach of "./syz-executor exec"[13652] was attempted by "./syz-executor exec"[20649] [ 766.292104][T20662] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 768.106145][T20693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5196'. [ 768.578492][T20703] syzkaller0: entered promiscuous mode [ 768.584007][T20703] syzkaller0: entered allmulticast mode [ 768.646530][T20703] FAULT_INJECTION: forcing a failure. [ 768.646530][T20703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.695135][T20703] CPU: 1 UID: 0 PID: 20703 Comm: syz.3.5199 Tainted: G L syzkaller #0 PREEMPT(full) [ 768.695163][T20703] Tainted: [L]=SOFTLOCKUP [ 768.695169][T20703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 768.695188][T20703] Call Trace: [ 768.695195][T20703] [ 768.695203][T20703] dump_stack_lvl+0xe8/0x150 [ 768.695230][T20703] should_fail_ex+0x412/0x560 [ 768.695257][T20703] _copy_from_user+0x2d/0xb0 [ 768.695275][T20703] __copy_msghdr+0x3c5/0x5b0 [ 768.695296][T20703] ___sys_sendmsg+0x213/0x360 [ 768.695317][T20703] ? __pfx____sys_sendmsg+0x10/0x10 [ 768.695362][T20703] ? __fget_files+0x2a/0x420 [ 768.695383][T20703] ? __fget_files+0x3a0/0x420 [ 768.695411][T20703] __x64_sys_sendmsg+0x1bd/0x2a0 [ 768.695435][T20703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 768.695459][T20703] ? __pfx_ksys_write+0x10/0x10 [ 768.695486][T20703] do_syscall_64+0x14d/0xf80 [ 768.695502][T20703] ? trace_irq_disable+0x3b/0x150 [ 768.695523][T20703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.695538][T20703] ? clear_bhb_loop+0x40/0x90 [ 768.695557][T20703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.695572][T20703] RIP: 0033:0x7f1ae9f9c799 [ 768.695588][T20703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.695601][T20703] RSP: 002b:00007f1aeade0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.695619][T20703] RAX: ffffffffffffffda RBX: 00007f1aea215fa0 RCX: 00007f1ae9f9c799 [ 768.695630][T20703] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 768.695640][T20703] RBP: 00007f1aeade0090 R08: 0000000000000000 R09: 0000000000000000 [ 768.695650][T20703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.695659][T20703] R13: 00007f1aea216038 R14: 00007f1aea215fa0 R15: 00007f1aea33fa48 [ 768.695683][T20703] [ 768.990461][T20709] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 769.150406][T20707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5200'. [ 770.548628][T20748] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5205'. [ 772.095912][T20764] netlink: 'syz.0.5207': attribute type 10 has an invalid length. [ 772.271661][T20764] team0: Port device netdevsim0 removed [ 772.370390][T20764] batman_adv: batadv0: Adding interface: netdevsim0 [ 772.381924][T20764] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.420015][T20764] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 772.715025][ T797] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 772.723688][T20778] ptrace attach of "./syz-executor exec"[13652] was attempted by "./syz-executor exec"[20778] [ 773.186715][T20783] syzkaller0: entered promiscuous mode [ 773.197329][T20783] syzkaller0: entered allmulticast mode [ 773.245030][ T797] usb 7-1: Using ep0 maxpacket: 8 [ 773.271603][ T797] usb 7-1: unable to get BOS descriptor or descriptor too short [ 773.307902][ T797] usb 7-1: config 1 has an invalid descriptor of length 188, skipping remainder of the config [ 773.363544][ T797] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 773.395030][ T797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.416181][ T797] usb 7-1: Product: syz [ 773.425464][ T797] usb 7-1: Manufacturer: syz [ 773.432227][ T797] usb 7-1: SerialNumber: syz [ 773.641039][T20785] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 773.677660][ T797] usb 7-1: selecting invalid altsetting 1 [ 773.823166][ T797] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 773.854377][ T797] usb 7-1: USB disconnect, device number 16 [ 773.870542][T13371] udevd[13371]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 774.016267][T20797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5217'. [ 774.066001][T20797] FAULT_INJECTION: forcing a failure. [ 774.066001][T20797] name failslab, interval 1, probability 0, space 0, times 0 [ 774.086657][T20797] CPU: 0 UID: 0 PID: 20797 Comm: syz.1.5217 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.086685][T20797] Tainted: [L]=SOFTLOCKUP [ 774.086691][T20797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 774.086701][T20797] Call Trace: [ 774.086709][T20797] [ 774.086717][T20797] dump_stack_lvl+0xe8/0x150 [ 774.086743][T20797] should_fail_ex+0x412/0x560 [ 774.086770][T20797] should_failslab+0xa8/0x100 [ 774.086791][T20797] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 774.086809][T20797] ? __alloc_skb+0x186/0x7d0 [ 774.086824][T20797] ? __alloc_skb+0x1d0/0x7d0 [ 774.086837][T20797] ? __local_bh_enable_ip+0xd0/0x130 [ 774.086861][T20797] __alloc_skb+0x1d0/0x7d0 [ 774.086881][T20797] netlink_sendmsg+0x5d4/0xb40 [ 774.086912][T20797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 774.086936][T20797] ? aa_sock_msg_perm+0xf1/0x1b0 [ 774.086959][T20797] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 774.086980][T20797] ____sys_sendmsg+0x972/0x9f0 [ 774.087005][T20797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 774.087031][T20797] ? import_iovec+0x73/0xa0 [ 774.087051][T20797] ___sys_sendmsg+0x2a5/0x360 [ 774.087073][T20797] ? __pfx____sys_sendmsg+0x10/0x10 [ 774.087119][T20797] ? __fget_files+0x2a/0x420 [ 774.087138][T20797] ? __fget_files+0x3a0/0x420 [ 774.087167][T20797] __x64_sys_sendmsg+0x1bd/0x2a0 [ 774.087189][T20797] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 774.087214][T20797] ? __pfx_ksys_write+0x10/0x10 [ 774.087241][T20797] do_syscall_64+0x14d/0xf80 [ 774.087258][T20797] ? trace_irq_disable+0x3b/0x150 [ 774.087279][T20797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.087293][T20797] ? clear_bhb_loop+0x40/0x90 [ 774.087312][T20797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.087326][T20797] RIP: 0033:0x7f9e5519c799 [ 774.087342][T20797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.087356][T20797] RSP: 002b:00007f9e56114028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 774.087374][T20797] RAX: ffffffffffffffda RBX: 00007f9e55415fa0 RCX: 00007f9e5519c799 [ 774.087386][T20797] RDX: 00000000000008d0 RSI: 0000200000005840 RDI: 0000000000000005 [ 774.087397][T20797] RBP: 00007f9e56114090 R08: 0000000000000000 R09: 0000000000000000 [ 774.087407][T20797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.087417][T20797] R13: 00007f9e55416038 R14: 00007f9e55415fa0 R15: 00007f9e5553fa48 [ 774.087443][T20797] [ 774.683488][T20803] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5218'. [ 774.845118][T14378] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 774.894684][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 774.894696][ T29] audit: type=1326 audit(1773747979.491:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20805 comm="syz.6.5220" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d5eb9c799 code=0x0 [ 774.995044][T14378] usb 2-1: Using ep0 maxpacket: 8 [ 775.001850][T14378] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 775.027620][T14378] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 775.052826][T14378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.072141][T14378] usb 2-1: config 0 descriptor?? [ 775.293029][T14378] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 775.493384][T14378] usb 2-1: USB disconnect, device number 102 [ 775.827210][T20814] FAULT_INJECTION: forcing a failure. [ 775.827210][T20814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.851670][T20814] CPU: 1 UID: 0 PID: 20814 Comm: syz.6.5222 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.851696][T20814] Tainted: [L]=SOFTLOCKUP [ 775.851703][T20814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 775.851712][T20814] Call Trace: [ 775.851719][T20814] [ 775.851727][T20814] dump_stack_lvl+0xe8/0x150 [ 775.851754][T20814] should_fail_ex+0x412/0x560 [ 775.851780][T20814] _copy_from_iter+0x1d3/0x1670 [ 775.851803][T20814] ? unwind_next_frame+0xa5/0x23c0 [ 775.851833][T20814] ? __lock_acquire+0x6b5/0x2cf0 [ 775.851852][T20814] ? __pfx__copy_from_iter+0x10/0x10 [ 775.851887][T20814] tun_get_user+0x516/0x3dd0 [ 775.851913][T20814] ? aa_file_perm+0x192/0x15e0 [ 775.851938][T20814] ? aa_file_perm+0x50e/0x15e0 [ 775.851958][T20814] ? __pfx_tun_get_user+0x10/0x10 [ 775.851971][T20814] ? aa_file_perm+0x192/0x15e0 [ 775.851997][T20814] ? __lock_acquire+0x6b5/0x2cf0 [ 775.852023][T20814] ? ref_tracker_alloc+0x35c/0x4c0 [ 775.852047][T20814] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 775.852073][T20814] ? tun_get+0x1c/0x2f0 [ 775.852089][T20814] ? tun_get+0x1c/0x2f0 [ 775.852102][T20814] ? tun_get+0x1c/0x2f0 [ 775.852120][T20814] tun_chr_write_iter+0x113/0x200 [ 775.852137][T20814] vfs_write+0x61d/0xb90 [ 775.852169][T20814] ? __pfx_vfs_write+0x10/0x10 [ 775.852193][T20814] ? __fget_files+0x2a/0x420 [ 775.852221][T20814] ksys_write+0x150/0x270 [ 775.852240][T20814] ? __pfx_ksys_write+0x10/0x10 [ 775.852266][T20814] do_syscall_64+0x14d/0xf80 [ 775.852283][T20814] ? trace_irq_disable+0x3b/0x150 [ 775.852303][T20814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.852320][T20814] ? clear_bhb_loop+0x40/0x90 [ 775.852339][T20814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.852354][T20814] RIP: 0033:0x7f2d5eb9c799 [ 775.852369][T20814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.852383][T20814] RSP: 002b:00007f2d5fa8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 775.852400][T20814] RAX: ffffffffffffffda RBX: 00007f2d5ee15fa0 RCX: 00007f2d5eb9c799 [ 775.852411][T20814] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000005 [ 775.852421][T20814] RBP: 00007f2d5fa8c090 R08: 0000000000000000 R09: 0000000000000000 [ 775.852429][T20814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.852438][T20814] R13: 00007f2d5ee16038 R14: 00007f2d5ee15fa0 R15: 00007f2d5ef3fa48 [ 775.852477][T20814] [ 775.915282][T15166] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 776.287822][T15166] usb 4-1: Using ep0 maxpacket: 16 [ 776.309834][T15166] usb 4-1: config 0 has no interfaces? [ 776.321650][T15166] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 776.331623][T15166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.341484][T15166] usb 4-1: Product: syz [ 776.346083][T15166] usb 4-1: Manufacturer: syz [ 776.350812][T15166] usb 4-1: SerialNumber: syz [ 776.373583][T15166] usb 4-1: config 0 descriptor?? [ 776.394289][T20826] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 776.619738][T15166] usb 4-1: USB disconnect, device number 108 [ 776.704730][T20830] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 776.732555][T20830] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 776.747949][T20830] kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 776.758550][T20833] fuse: Unknown parameter '0x0000000000000004' [ 776.808695][T20830] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 776.817454][T20830] bond1: option packets_per_slave: allowed values 0 - 65535 [ 776.833555][T20830] bond1 (unregistering): Released all slaves [ 777.115450][T20839] FAULT_INJECTION: forcing a failure. [ 777.115450][T20839] name failslab, interval 1, probability 0, space 0, times 0 [ 777.145371][T20839] CPU: 1 UID: 0 PID: 20839 Comm: syz.1.5229 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.145397][T20839] Tainted: [L]=SOFTLOCKUP [ 777.145403][T20839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 777.145412][T20839] Call Trace: [ 777.145419][T20839] [ 777.145426][T20839] dump_stack_lvl+0xe8/0x150 [ 777.145452][T20839] should_fail_ex+0x412/0x560 [ 777.145476][T20839] should_failslab+0xa8/0x100 [ 777.145497][T20839] __kmalloc_noprof+0xe8/0x760 [ 777.145513][T20839] ? tomoyo_encode+0x28b/0x550 [ 777.145537][T20839] tomoyo_encode+0x28b/0x550 [ 777.145560][T20839] tomoyo_realpath_from_path+0x58d/0x5d0 [ 777.145595][T20839] ? tomoyo_path_number_perm+0x219/0x630 [ 777.145614][T20839] tomoyo_path_number_perm+0x246/0x630 [ 777.145635][T20839] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 777.145653][T20839] ? __lock_acquire+0x6b5/0x2cf0 [ 777.145682][T20839] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 777.145716][T20839] ? __fget_files+0x2a/0x420 [ 777.145736][T20839] ? __fget_files+0x2a/0x420 [ 777.145755][T20839] ? __fget_files+0x3a0/0x420 [ 777.145771][T20839] ? __fget_files+0x2a/0x420 [ 777.145794][T20839] security_file_ioctl+0xc3/0x2a0 [ 777.145815][T20839] __se_sys_ioctl+0x47/0x170 [ 777.145835][T20839] do_syscall_64+0x14d/0xf80 [ 777.145851][T20839] ? trace_irq_disable+0x3b/0x150 [ 777.145871][T20839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.145887][T20839] ? clear_bhb_loop+0x40/0x90 [ 777.145906][T20839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.145922][T20839] RIP: 0033:0x7f9e5519c799 [ 777.145938][T20839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.145951][T20839] RSP: 002b:00007f9e56114028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.145968][T20839] RAX: ffffffffffffffda RBX: 00007f9e55415fa0 RCX: 00007f9e5519c799 [ 777.145979][T20839] RDX: 00002000000000c0 RSI: 00000000c034564b RDI: 0000000000000003 [ 777.145989][T20839] RBP: 00007f9e56114090 R08: 0000000000000000 R09: 0000000000000000 [ 777.145999][T20839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.146009][T20839] R13: 00007f9e55416038 R14: 00007f9e55415fa0 R15: 00007f9e5553fa48 [ 777.146034][T20839] [ 777.146053][T20839] ERROR: Out of memory at tomoyo_realpath_from_path. [ 777.200975][T20842] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5230'. [ 777.538522][T20847] syzkaller0: entered promiscuous mode [ 777.544031][T20847] syzkaller0: entered allmulticast mode [ 777.592412][T20852] FAULT_INJECTION: forcing a failure. [ 777.592412][T20852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.675737][T20852] CPU: 0 UID: 0 PID: 20852 Comm: syz.0.5232 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.675756][T20852] Tainted: [L]=SOFTLOCKUP [ 777.675759][T20852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 777.675766][T20852] Call Trace: [ 777.675770][T20852] [ 777.675775][T20852] dump_stack_lvl+0xe8/0x150 [ 777.675793][T20852] should_fail_ex+0x412/0x560 [ 777.675810][T20852] _copy_from_user+0x2d/0xb0 [ 777.675821][T20852] __copy_msghdr+0x3c5/0x5b0 [ 777.675834][T20852] ___sys_sendmsg+0x213/0x360 [ 777.675854][T20852] ? __pfx____sys_sendmsg+0x10/0x10 [ 777.675880][T20852] ? __fget_files+0x2a/0x420 [ 777.675893][T20852] ? __fget_files+0x3a0/0x420 [ 777.675910][T20852] __x64_sys_sendmsg+0x1bd/0x2a0 [ 777.675922][T20852] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 777.675937][T20852] ? __pfx_ksys_write+0x10/0x10 [ 777.675952][T20852] do_syscall_64+0x14d/0xf80 [ 777.675962][T20852] ? trace_irq_disable+0x3b/0x150 [ 777.675976][T20852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.675985][T20852] ? clear_bhb_loop+0x40/0x90 [ 777.675996][T20852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.676005][T20852] RIP: 0033:0x7f2bf7b9c799 [ 777.676015][T20852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.676024][T20852] RSP: 002b:00007f2bf8aef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 777.676035][T20852] RAX: ffffffffffffffda RBX: 00007f2bf7e16090 RCX: 00007f2bf7b9c799 [ 777.676042][T20852] RDX: 0000000000000894 RSI: 00002000000000c0 RDI: 0000000000000005 [ 777.676048][T20852] RBP: 00007f2bf8aef090 R08: 0000000000000000 R09: 0000000000000000 [ 777.676054][T20852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.676059][T20852] R13: 00007f2bf7e16128 R14: 00007f2bf7e16090 R15: 00007f2bf7f3fa48 [ 777.676073][T20852] [ 777.929408][ T29] audit: type=1326 audit(1773747982.281:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20854 comm="syz.6.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5eb9c799 code=0x7ffc0000 [ 778.017671][ T29] audit: type=1326 audit(1773747982.281:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20854 comm="syz.6.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5eb9c799 code=0x7ffc0000 [ 778.137084][ T29] audit: type=1326 audit(1773747982.281:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20854 comm="syz.6.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2d5eb9c799 code=0x7ffc0000 [ 778.196955][ T29] audit: type=1326 audit(1773747982.281:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20854 comm="syz.6.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5eb9c799 code=0x7ffc0000 [ 778.357381][ T29] audit: type=1326 audit(1773747982.281:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20854 comm="syz.6.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f2d5eb9c799 code=0x7ffc0000 [ 778.451390][ T29] audit: type=1326 audit(1773747982.281:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20854 comm="syz.6.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5eb9c799 code=0x7ffc0000 [ 778.541937][ T29] audit: type=1326 audit(1773747982.481:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20854 comm="syz.6.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5eb9c799 code=0x7ffc0000 [ 778.630854][T20867] netlink: 'syz.2.5238': attribute type 3 has an invalid length. [ 778.738052][T20871] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5239'. [ 778.751172][T20868] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5236'. [ 778.764138][T20872] FAULT_INJECTION: forcing a failure. [ 778.764138][T20872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.814464][T20872] CPU: 0 UID: 0 PID: 20872 Comm: syz.2.5240 Tainted: G L syzkaller #0 PREEMPT(full) [ 778.814484][T20872] Tainted: [L]=SOFTLOCKUP [ 778.814487][T20872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 778.814494][T20872] Call Trace: [ 778.814498][T20872] [ 778.814503][T20872] dump_stack_lvl+0xe8/0x150 [ 778.814522][T20872] should_fail_ex+0x412/0x560 [ 778.814538][T20872] _copy_from_user+0x2d/0xb0 [ 778.814550][T20872] core_sys_select+0x6fd/0xc30 [ 778.814570][T20872] ? __pfx_core_sys_select+0x10/0x10 [ 778.814593][T20872] ? __pfx_set_user_sigmask+0x10/0x10 [ 778.814610][T20872] __se_sys_pselect6+0x267/0x320 [ 778.814626][T20872] ? __pfx___se_sys_pselect6+0x10/0x10 [ 778.814638][T20872] ? __pfx_ksys_write+0x10/0x10 [ 778.814651][T20872] ? __x64_sys_pselect6+0x21/0xf0 [ 778.814664][T20872] do_syscall_64+0x14d/0xf80 [ 778.814675][T20872] ? trace_irq_disable+0x3b/0x150 [ 778.814689][T20872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.814699][T20872] ? clear_bhb_loop+0x40/0x90 [ 778.814710][T20872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.814719][T20872] RIP: 0033:0x7f30aa79c799 [ 778.814729][T20872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.814736][T20872] RSP: 002b:00007f30ab730028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 778.814748][T20872] RAX: ffffffffffffffda RBX: 00007f30aaa15fa0 RCX: 00007f30aa79c799 [ 778.814755][T20872] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 778.814761][T20872] RBP: 00007f30ab730090 R08: 0000000000000000 R09: 0000000000000000 [ 778.814767][T20872] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 778.814773][T20872] R13: 00007f30aaa16038 R14: 00007f30aaa15fa0 R15: 00007f30aab3fa48 [ 778.814787][T20872] [ 780.268818][T20889] input: syz1 as /devices/virtual/input/input52 [ 780.393307][T20889] binder_alloc: 20888: binder_alloc_buf, no vma [ 780.425516][T20889] binder: 20888:20889 ioctl c0306201 0 returned -14 [ 780.811049][T20906] ptrace attach of "./syz-executor exec"[13370] was attempted by "./syz-executor exec"[20906] [ 780.826782][T20909] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.5250'. [ 781.796979][T20943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 782.445362][T15159] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 782.558838][T15159] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 782.602356][T20972] FAULT_INJECTION: forcing a failure. [ 782.602356][T20972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.623497][T20969] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5256'. [ 782.684825][T20972] CPU: 1 UID: 0 PID: 20972 Comm: syz.6.5261 Tainted: G L syzkaller #0 PREEMPT(full) [ 782.684853][T20972] Tainted: [L]=SOFTLOCKUP [ 782.684859][T20972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 782.684869][T20972] Call Trace: [ 782.684877][T20972] [ 782.684884][T20972] dump_stack_lvl+0xe8/0x150 [ 782.684911][T20972] should_fail_ex+0x412/0x560 [ 782.684938][T20972] _copy_from_user+0x2d/0xb0 [ 782.684955][T20972] __copy_msghdr+0x3c5/0x5b0 [ 782.684977][T20972] ___sys_sendmsg+0x213/0x360 [ 782.684998][T20972] ? __pfx____sys_sendmsg+0x10/0x10 [ 782.685043][T20972] ? __fget_files+0x2a/0x420 [ 782.685064][T20972] ? __fget_files+0x3a0/0x420 [ 782.685093][T20972] __x64_sys_sendmsg+0x1bd/0x2a0 [ 782.685113][T20972] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 782.685139][T20972] ? __pfx_ksys_write+0x10/0x10 [ 782.685166][T20972] do_syscall_64+0x14d/0xf80 [ 782.685182][T20972] ? trace_irq_disable+0x3b/0x150 [ 782.685202][T20972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.685218][T20972] ? clear_bhb_loop+0x40/0x90 [ 782.685238][T20972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.685253][T20972] RIP: 0033:0x7f2d5eb9c799 [ 782.685269][T20972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.685282][T20972] RSP: 002b:00007f2d5fa8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 782.685299][T20972] RAX: ffffffffffffffda RBX: 00007f2d5ee15fa0 RCX: 00007f2d5eb9c799 [ 782.685311][T20972] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 782.685321][T20972] RBP: 00007f2d5fa8c090 R08: 0000000000000000 R09: 0000000000000000 [ 782.685330][T20972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.685339][T20972] R13: 00007f2d5ee16038 R14: 00007f2d5ee15fa0 R15: 00007f2d5ef3fa48 [ 782.685365][T20972] [ 782.955048][T15166] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 783.185100][T15166] usb 2-1: Using ep0 maxpacket: 32 [ 783.197004][T15166] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 783.205620][T15166] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.251395][T15166] usb 2-1: config 0 has no interface number 0 [ 783.267845][T15166] usb 2-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 783.324089][T15166] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 783.351452][T15166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.372754][T15166] usb 2-1: Product: syz [ 783.395542][T20556] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 783.405050][T15166] usb 2-1: Manufacturer: syz [ 783.405072][T15166] usb 2-1: SerialNumber: syz [ 783.448697][T15166] usb 2-1: config 0 descriptor?? [ 783.466455][T15166] hub 2-1:0.89: bad descriptor, ignoring hub [ 783.522024][T15166] hub 2-1:0.89: probe with driver hub failed with error -5 [ 783.560199][T15166] option 2-1:0.89: GSM modem (1-port) converter detected [ 783.587888][T20556] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 783.604715][T20556] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 783.654891][T20556] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 783.693657][T20556] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.740909][T20980] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 783.760545][T20556] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 783.798015][T15159] usb 2-1: USB disconnect, device number 103 [ 783.805185][T15159] option 2-1:0.89: device disconnected [ 784.026557][T20980] tipc: Started in network mode [ 784.033491][T20980] tipc: Node identity 84e, cluster identity 4711 [ 784.040350][T20980] tipc: Node number set to 2126 [ 784.134418][T21002] FAULT_INJECTION: forcing a failure. [ 784.134418][T21002] name failslab, interval 1, probability 0, space 0, times 0 [ 784.182842][T21002] CPU: 1 UID: 0 PID: 21002 Comm: syz.2.5266 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.182868][T21002] Tainted: [L]=SOFTLOCKUP [ 784.182874][T21002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 784.182883][T21002] Call Trace: [ 784.182891][T21002] [ 784.182899][T21002] dump_stack_lvl+0xe8/0x150 [ 784.182931][T21002] should_fail_ex+0x412/0x560 [ 784.182955][T21002] should_failslab+0xa8/0x100 [ 784.182969][T21002] __kmalloc_noprof+0xe8/0x760 [ 784.182980][T21002] ? tomoyo_encode+0x28b/0x550 [ 784.182998][T21002] tomoyo_encode+0x28b/0x550 [ 784.183018][T21002] tomoyo_realpath_from_path+0x58d/0x5d0 [ 784.183050][T21002] ? tomoyo_path_number_perm+0x219/0x630 [ 784.183069][T21002] tomoyo_path_number_perm+0x246/0x630 [ 784.183090][T21002] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 784.183106][T21002] ? __lock_acquire+0x6b5/0x2cf0 [ 784.183124][T21002] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 784.183145][T21002] ? __fget_files+0x2a/0x420 [ 784.183161][T21002] ? __fget_files+0x2a/0x420 [ 784.183181][T21002] ? __fget_files+0x3a0/0x420 [ 784.183200][T21002] ? __fget_files+0x2a/0x420 [ 784.183225][T21002] security_file_ioctl+0xc3/0x2a0 [ 784.183245][T21002] __se_sys_ioctl+0x47/0x170 [ 784.183258][T21002] do_syscall_64+0x14d/0xf80 [ 784.183268][T21002] ? trace_irq_disable+0x3b/0x150 [ 784.183281][T21002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.183290][T21002] ? clear_bhb_loop+0x40/0x90 [ 784.183301][T21002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.183314][T21002] RIP: 0033:0x7f30aa79c799 [ 784.183330][T21002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.183343][T21002] RSP: 002b:00007f30ab730028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.183361][T21002] RAX: ffffffffffffffda RBX: 00007f30aaa15fa0 RCX: 00007f30aa79c799 [ 784.183372][T21002] RDX: 0000200000000040 RSI: 00000000c0044dff RDI: 0000000000000003 [ 784.183382][T21002] RBP: 00007f30ab730090 R08: 0000000000000000 R09: 0000000000000000 [ 784.183391][T21002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.183398][T21002] R13: 00007f30aaa16038 R14: 00007f30aaa15fa0 R15: 00007f30aab3fa48 [ 784.183415][T21002] [ 784.183442][T21002] ERROR: Out of memory at tomoyo_realpath_from_path. [ 784.317661][T15166] usb 7-1: USB disconnect, device number 17 [ 784.895621][ T5828] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 785.066321][ T5828] usb 2-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 785.078139][ T5828] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 785.090056][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.095091][T15159] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 785.102747][ T5828] usb 2-1: config 0 descriptor?? [ 785.115873][ T5828] usb 2-1: bad CDC descriptors [ 785.257281][T15159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.279678][T21034] netlink: 'syz.6.5271': attribute type 1 has an invalid length. [ 785.295056][T15159] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 785.317791][T15166] usb 2-1: USB disconnect, device number 104 [ 785.346942][T15159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.370044][T21034] bond1: entered promiscuous mode [ 785.375731][T21034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 785.393711][T15159] usb 4-1: config 0 descriptor?? [ 785.435070][ T5828] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 785.460877][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5271'. [ 785.483486][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5271'. [ 785.532215][T21034] bond1: (slave bridge1): making interface the new active one [ 785.564811][T21034] bridge1: entered promiscuous mode [ 785.627429][T21034] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 785.663781][T15159] usbhid 4-1:0.0: can't add hid device: -71 [ 785.675283][T15159] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 785.714269][T15159] usb 4-1: USB disconnect, device number 109 [ 785.725557][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 786.035014][ T5828] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 786.076531][ T5828] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 786.101102][ T5828] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 786.114139][ T5828] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 786.139321][ T5828] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 786.164813][ T5828] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 786.185070][T15159] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 786.185455][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.255793][T21043] syzkaller0: entered promiscuous mode [ 786.282125][T21043] syzkaller0: entered allmulticast mode [ 786.311055][T21043] FAULT_INJECTION: forcing a failure. [ 786.311055][T21043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.355021][T21043] CPU: 0 UID: 0 PID: 21043 Comm: syz.0.5273 Tainted: G L syzkaller #0 PREEMPT(full) [ 786.355048][T21043] Tainted: [L]=SOFTLOCKUP [ 786.355053][T21043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 786.355062][T21043] Call Trace: [ 786.355068][T21043] [ 786.355074][T21043] dump_stack_lvl+0xe8/0x150 [ 786.355101][T21043] should_fail_ex+0x412/0x560 [ 786.355129][T21043] _copy_from_user+0x2d/0xb0 [ 786.355147][T21043] __copy_msghdr+0x3c5/0x5b0 [ 786.355166][T21043] ___sys_sendmsg+0x213/0x360 [ 786.355185][T21043] ? __pfx____sys_sendmsg+0x10/0x10 [ 786.355225][T21043] ? __fget_files+0x2a/0x420 [ 786.355246][T21043] ? __fget_files+0x3a0/0x420 [ 786.355273][T21043] __x64_sys_sendmsg+0x1bd/0x2a0 [ 786.355291][T21043] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 786.355313][T21043] ? __pfx_ksys_write+0x10/0x10 [ 786.355338][T21043] do_syscall_64+0x14d/0xf80 [ 786.355354][T21043] ? trace_irq_disable+0x3b/0x150 [ 786.355383][T21043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.355398][T21043] ? clear_bhb_loop+0x40/0x90 [ 786.355415][T21043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.355430][T21043] RIP: 0033:0x7f2bf7b9c799 [ 786.355445][T21043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.355457][T21043] RSP: 002b:00007f2bf8b10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 786.355473][T21043] RAX: ffffffffffffffda RBX: 00007f2bf7e15fa0 RCX: 00007f2bf7b9c799 [ 786.355485][T21043] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000006 [ 786.355495][T21043] RBP: 00007f2bf8b10090 R08: 0000000000000000 R09: 0000000000000000 [ 786.355503][T21043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.355511][T21043] R13: 00007f2bf7e16038 R14: 00007f2bf7e15fa0 R15: 00007f2bf7f3fa48 [ 786.355534][T21043] [ 786.358564][T15159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 786.724806][T15159] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 786.725036][ T5828] usb 3-1: GET_CAPABILITIES returned 0 [ 786.734119][T15159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.765396][ T5828] usbtmc 3-1:16.0: can't read capabilities [ 786.783711][T15159] usb 4-1: config 0 descriptor?? [ 786.808510][T21048] FAULT_INJECTION: forcing a failure. [ 786.808510][T21048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.834886][T21048] CPU: 1 UID: 0 PID: 21048 Comm: syz.6.5275 Tainted: G L syzkaller #0 PREEMPT(full) [ 786.834912][T21048] Tainted: [L]=SOFTLOCKUP [ 786.834921][T21048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 786.834929][T21048] Call Trace: [ 786.834936][T21048] [ 786.834943][T21048] dump_stack_lvl+0xe8/0x150 [ 786.834970][T21048] should_fail_ex+0x412/0x560 [ 786.834992][T21048] _copy_from_user+0x2d/0xb0 [ 786.835009][T21048] sctp_setsockopt+0x1c4/0x12c0 [ 786.835119][T21048] ? sock_common_setsockopt+0x36/0xc0 [ 786.835140][T21048] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 786.835163][T21048] do_sock_setsockopt+0x17c/0x1b0 [ 786.835183][T21048] __x64_sys_setsockopt+0x13d/0x1b0 [ 786.835204][T21048] do_syscall_64+0x14d/0xf80 [ 786.835221][T21048] ? trace_irq_disable+0x3b/0x150 [ 786.835242][T21048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.835257][T21048] ? clear_bhb_loop+0x40/0x90 [ 786.835276][T21048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.835292][T21048] RIP: 0033:0x7f2d5eb9c799 [ 786.835308][T21048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.835322][T21048] RSP: 002b:00007f2d5fa8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 786.835349][T21048] RAX: ffffffffffffffda RBX: 00007f2d5ee15fa0 RCX: 00007f2d5eb9c799 [ 786.835360][T21048] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000003 [ 786.835370][T21048] RBP: 00007f2d5fa8c090 R08: 0000000000000009 R09: 0000000000000000 [ 786.835380][T21048] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 786.835390][T21048] R13: 00007f2d5ee16038 R14: 00007f2d5ee15fa0 R15: 00007f2d5ef3fa48 [ 786.835414][T21048] [ 787.141302][T21031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.152344][T21031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.249375][T21049] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5274'. [ 787.282528][T15159] usbhid 4-1:0.0: can't add hid device: -71 [ 787.289695][T15159] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 787.316637][T15159] usb 4-1: USB disconnect, device number 110 [ 787.324761][T21055] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5274'. [ 787.508427][ T5828] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 787.587400][ T5828] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 787.816078][ T5828] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 787.873668][T21065] FAULT_INJECTION: forcing a failure. [ 787.873668][T21065] name failslab, interval 1, probability 0, space 0, times 0 [ 787.913550][T21065] CPU: 1 UID: 0 PID: 21065 Comm: syz.3.5279 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.913579][T21065] Tainted: [L]=SOFTLOCKUP [ 787.913586][T21065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 787.913595][T21065] Call Trace: [ 787.913600][T21065] [ 787.913605][T21065] dump_stack_lvl+0xe8/0x150 [ 787.913629][T21065] should_fail_ex+0x412/0x560 [ 787.913646][T21065] should_failslab+0xa8/0x100 [ 787.913660][T21065] __kmalloc_noprof+0xe8/0x760 [ 787.913671][T21065] ? tomoyo_encode+0x28b/0x550 [ 787.913689][T21065] tomoyo_encode+0x28b/0x550 [ 787.913705][T21065] tomoyo_realpath_from_path+0x58d/0x5d0 [ 787.913723][T21065] ? tomoyo_path_number_perm+0x219/0x630 [ 787.913735][T21065] tomoyo_path_number_perm+0x246/0x630 [ 787.913748][T21065] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 787.913761][T21065] ? __lock_acquire+0x6b5/0x2cf0 [ 787.913778][T21065] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 787.913799][T21065] ? __fget_files+0x2a/0x420 [ 787.913814][T21065] ? __fget_files+0x2a/0x420 [ 787.913826][T21065] ? __fget_files+0x3a0/0x420 [ 787.913839][T21065] ? __fget_files+0x2a/0x420 [ 787.913853][T21065] security_file_ioctl+0xc3/0x2a0 [ 787.913866][T21065] __se_sys_ioctl+0x47/0x170 [ 787.913879][T21065] do_syscall_64+0x14d/0xf80 [ 787.913889][T21065] ? trace_irq_disable+0x3b/0x150 [ 787.913902][T21065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.913912][T21065] ? clear_bhb_loop+0x40/0x90 [ 787.913923][T21065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.913932][T21065] RIP: 0033:0x7f1ae9f9c799 [ 787.913942][T21065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.913950][T21065] RSP: 002b:00007f1aeade0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 787.913961][T21065] RAX: ffffffffffffffda RBX: 00007f1aea215fa0 RCX: 00007f1ae9f9c799 [ 787.913968][T21065] RDX: 0000200000000940 RSI: 00000000c040565f RDI: 0000000000000006 [ 787.913974][T21065] RBP: 00007f1aeade0090 R08: 0000000000000000 R09: 0000000000000000 [ 787.913980][T21065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.913986][T21065] R13: 00007f1aea216038 R14: 00007f1aea215fa0 R15: 00007f1aea33fa48 [ 787.914000][T21065] [ 787.914012][T21065] ERROR: Out of memory at tomoyo_realpath_from_path. [ 788.254442][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 788.440225][T15166] usb 3-1: USB disconnect, device number 8 [ 788.498653][ T5828] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 788.507113][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.554975][ T5828] usb 1-1: config 0 has no interface number 0 [ 788.579566][ T5828] usb 1-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 788.626805][ T5828] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 788.691038][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.728975][T21081] FAULT_INJECTION: forcing a failure. [ 788.728975][T21081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.752007][ T5828] usb 1-1: Product: syz [ 788.763169][ T5828] usb 1-1: Manufacturer: syz [ 788.784528][ T5828] usb 1-1: SerialNumber: syz [ 788.794405][T21081] CPU: 1 UID: 0 PID: 21081 Comm: syz.3.5283 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.794430][T21081] Tainted: [L]=SOFTLOCKUP [ 788.794435][T21081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 788.794444][T21081] Call Trace: [ 788.794451][T21081] [ 788.794459][T21081] dump_stack_lvl+0xe8/0x150 [ 788.794484][T21081] should_fail_ex+0x412/0x560 [ 788.794509][T21081] strncpy_from_user+0x36/0x2b0 [ 788.794530][T21081] do_getname+0x77/0x250 [ 788.794551][T21081] __se_sys_statx+0xd7/0x2a0 [ 788.794574][T21081] ? __pfx___se_sys_statx+0x10/0x10 [ 788.794595][T21081] ? __fget_files+0x3a0/0x420 [ 788.794619][T21081] ? fput+0xa0/0xd0 [ 788.794647][T21081] ? ksys_write+0x242/0x270 [ 788.794666][T21081] ? __pfx_ksys_write+0x10/0x10 [ 788.794687][T21081] ? __x64_sys_statx+0x20/0xc0 [ 788.794710][T21081] do_syscall_64+0x14d/0xf80 [ 788.794727][T21081] ? trace_irq_disable+0x3b/0x150 [ 788.794746][T21081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.794760][T21081] ? clear_bhb_loop+0x40/0x90 [ 788.794779][T21081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.794794][T21081] RIP: 0033:0x7f1ae9f9c799 [ 788.794810][T21081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.794823][T21081] RSP: 002b:00007f1aeade0028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 788.794840][T21081] RAX: ffffffffffffffda RBX: 00007f1aea215fa0 RCX: 00007f1ae9f9c799 [ 788.794851][T21081] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 788.794861][T21081] RBP: 00007f1aeade0090 R08: 0000000000000000 R09: 0000000000000000 [ 788.794871][T21081] R10: f0cb2f4a0c2cfc5d R11: 0000000000000246 R12: 0000000000000001 [ 788.794881][T21081] R13: 00007f1aea216038 R14: 00007f1aea215fa0 R15: 00007f1aea33fa48 [ 788.794903][T21081] [ 788.804034][ T5828] usb 1-1: config 0 descriptor?? [ 788.999656][ T5828] hub 1-1:0.89: bad descriptor, ignoring hub [ 789.006758][ T5828] hub 1-1:0.89: probe with driver hub failed with error -5 [ 789.015521][T20556] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 789.016419][ T5828] option 1-1:0.89: GSM modem (1-port) converter detected [ 789.168731][T20556] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 789.180465][T20556] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.188883][T20556] usb 2-1: Product: syz [ 789.195025][T20556] usb 2-1: Manufacturer: syz [ 789.199650][T20556] usb 2-1: SerialNumber: syz [ 789.217020][T20556] usb 2-1: config 0 descriptor?? [ 789.326577][ T5828] usb 1-1: USB disconnect, device number 117 [ 789.333682][ T5828] option 1-1:0.89: device disconnected [ 789.441625][ T5828] usb 2-1: USB disconnect, device number 105 [ 789.877239][T21100] netlink: 'syz.0.5289': attribute type 1 has an invalid length. [ 790.057433][T21098] batman_adv: batadv0: Adding interface: macvtap5 [ 790.165072][T21098] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.200490][T21098] batman_adv: batadv0: Not using interface macvtap5 (retrying later): interface not active [ 790.387963][T21100] 8021q: adding VLAN 0 to HW filter on device bond9 [ 790.480144][T21102] vlan2: entered promiscuous mode [ 790.510755][T21102] veth0_to_bond: entered promiscuous mode [ 790.534041][T21102] bond9: (slave vlan2): Opening slave failed [ 790.715038][T14378] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 790.866546][T14378] usb 7-1: Using ep0 maxpacket: 8 [ 790.900483][T14378] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 790.921138][T14378] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 790.955360][T14378] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 790.993614][T14378] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 791.031746][T14378] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 791.058297][T14378] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 791.069957][T14378] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.188768][T21124] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5292'. [ 791.305710][T14378] usb 7-1: GET_CAPABILITIES returned 0 [ 791.342158][T14378] usbtmc 7-1:16.0: can't read capabilities [ 791.348265][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 791.359970][T21125] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5292'. [ 791.553933][T21107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.621169][T21107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.755064][T15159] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 792.931637][T15159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 792.958893][T15159] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 792.991162][T15159] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 793.004455][T15159] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 793.018393][T15159] usb 1-1: Manufacturer: syz [ 793.036045][T15159] usb 1-1: config 0 descriptor?? [ 793.048165][T15159] smsusb:smsusb_probe: board id=9, interface number 0 [ 793.070367][T15159] smsusb:siano_media_device_register: media controller created [ 793.085749][T15159] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 793.095648][T15159] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 793.121174][T15159] ------------[ cut here ]------------ [ 793.126903][T15159] !PageLargeKmalloc(page) [ 793.126935][T15159] WARNING: mm/slub.c:6393 at free_large_kmalloc+0xa3/0x140, CPU#1: kworker/1:10/15159 [ 793.140945][T15159] Modules linked in: [ 793.145230][T15159] CPU: 1 UID: 0 PID: 15159 Comm: kworker/1:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.156397][T15159] Tainted: [L]=SOFTLOCKUP [ 793.160714][T15159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 793.170982][T15159] Workqueue: usb_hub_wq hub_event [ 793.177151][T15159] RIP: 0010:free_large_kmalloc+0xa3/0x140 [ 793.182905][T15159] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 1e c7 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 d9 19 f1 8d 5b 41 5e 5d e9 a7 de 03 ff [ 793.203615][T15159] RSP: 0018:ffffc900047d6b20 EFLAGS: 00010206 [ 793.209764][T15159] RAX: 00000000ff000000 RBX: ffffea0000f2d880 RCX: 0000000000100001 [ 793.217842][T15159] RDX: ffffc9001a47a000 RSI: ffff88803cb62000 RDI: ffffea0000f2d880 [ 793.225876][T15159] RBP: 0000000000000000 R08: ffff888021707e03 R09: 1ffff110042e0fc0 [ 793.233866][T15159] R10: dffffc0000000000 R11: ffffed10042e0fc1 R12: 1ffff11005171682 [ 793.241907][T15159] R13: 0000000000000000 R14: ffff888021707e60 R15: dffffc0000000000 [ 793.250247][T15159] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 793.259559][T15159] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 793.266209][T15159] CR2: 00007f2bf7be9e80 CR3: 000000005590a000 CR4: 00000000003526f0 [ 793.274195][T15159] Call Trace: [ 793.277528][T15159] [ 793.280451][T15159] usb_free_urb+0xd0/0x120 [ 793.284989][T15159] smsusb_term_device+0x1d7/0x3e0 [ 793.290310][T15159] smsusb_probe+0x1aba/0x2280 [ 793.295058][T15159] ? __pfx_smsusb_probe+0x10/0x10 [ 793.300072][T15159] ? do_raw_spin_lock+0x12b/0x2f0 [ 793.305261][T15159] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 793.310820][T15159] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 793.316673][T15159] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 793.322477][T15159] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 793.328232][T15159] usb_probe_interface+0x668/0xc90 [ 793.333389][T15159] ? __pfx_usb_probe_interface+0x10/0x10 [ 793.339109][T15159] really_probe+0x267/0xaf0 [ 793.343698][T15159] __driver_probe_device+0x18c/0x320 [ 793.349140][T15159] driver_probe_device+0x4f/0x240 [ 793.354244][T15159] __device_attach_driver+0x279/0x430 [ 793.359674][T15159] bus_for_each_drv+0x258/0x2f0 [ 793.364527][T15159] ? __pfx___device_attach_driver+0x10/0x10 [ 793.370481][T15159] ? __pfx_bus_for_each_drv+0x10/0x10 [ 793.375929][T15159] ? lockdep_hardirqs_on+0x7a/0x110 [ 793.381133][T15159] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 793.387002][T15159] __device_attach+0x2c5/0x450 [ 793.391905][T15159] ? __pfx___device_attach+0x10/0x10 [ 793.397286][T15159] ? _raw_spin_unlock+0x28/0x50 [ 793.402146][T15159] device_initial_probe+0xa1/0xd0 [ 793.407217][T15159] bus_probe_device+0x12a/0x220 [ 793.412063][T15159] ? device_add+0x726/0xb70 [ 793.416839][T15159] device_add+0x7b6/0xb70 [ 793.421172][T15159] usb_set_configuration+0x1a87/0x2110 [ 793.426706][T15159] usb_generic_driver_probe+0x8d/0x150 [ 793.432431][T15159] usb_probe_device+0x1c4/0x3b0 [ 793.437341][T15159] ? __pfx_usb_probe_device+0x10/0x10 [ 793.442730][T15159] really_probe+0x267/0xaf0 [ 793.447324][T15159] __driver_probe_device+0x18c/0x320 [ 793.452636][T15159] driver_probe_device+0x4f/0x240 [ 793.457710][T15159] __device_attach_driver+0x279/0x430 [ 793.463099][T15159] bus_for_each_drv+0x258/0x2f0 [ 793.468012][T15159] ? __pfx___device_attach_driver+0x10/0x10 [ 793.473906][T15159] ? __pfx_bus_for_each_drv+0x10/0x10 [ 793.479320][T15159] ? lockdep_hardirqs_on+0x7a/0x110 [ 793.484509][T15159] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 793.490499][T15159] __device_attach+0x2c5/0x450 [ 793.496007][T15159] ? __pfx___device_attach+0x10/0x10 [ 793.501303][T15159] ? _raw_spin_unlock+0x28/0x50 [ 793.506385][T15159] device_initial_probe+0xa1/0xd0 [ 793.511409][T15159] bus_probe_device+0x12a/0x220 [ 793.516321][T15159] ? device_add+0x726/0xb70 [ 793.520822][T15159] device_add+0x7b6/0xb70 [ 793.525186][T15159] usb_new_device+0xa08/0x16f0 [ 793.529978][T15159] ? __pfx_usb_new_device+0x10/0x10 [ 793.535249][T15159] ? _raw_spin_unlock_irq+0x23/0x50 [ 793.540440][T15159] hub_event+0x2a1c/0x4f30 [ 793.544841][T15159] ? __lock_acquire+0x6b5/0x2cf0 [ 793.549964][T15159] ? __pfx_hub_event+0x10/0x10 [ 793.554748][T15159] ? process_scheduled_works+0xa8d/0x18c0 [ 793.560573][T15159] ? process_scheduled_works+0xa8d/0x18c0 [ 793.566323][T15159] process_scheduled_works+0xb6e/0x18c0 [ 793.571875][T15159] ? __pfx_process_scheduled_works+0x10/0x10 [ 793.578045][T15159] ? assign_work+0x3d5/0x5e0 [ 793.582636][T15159] worker_thread+0xa53/0xfc0 [ 793.587318][T15159] kthread+0x388/0x470 [ 793.591405][T15159] ? __pfx_worker_thread+0x10/0x10 [ 793.596670][T15159] ? __pfx_kthread+0x10/0x10 [ 793.601272][T15159] ret_from_fork+0x51e/0xb90 [ 793.605960][T15159] ? __pfx_ret_from_fork+0x10/0x10 [ 793.611068][T15159] ? __switch_to+0xc7d/0x1450 [ 793.615806][T15159] ? __pfx_kthread+0x10/0x10 [ 793.620381][T15159] ret_from_fork_asm+0x1a/0x30 [ 793.625184][T15159] [ 793.628237][T15159] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 793.635632][T15159] CPU: 1 UID: 0 PID: 15159 Comm: kworker/1:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.646778][T15159] Tainted: [L]=SOFTLOCKUP [ 793.651087][T15159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 793.661210][T15159] Workqueue: usb_hub_wq hub_event [ 793.666246][T15159] Call Trace: [ 793.669527][T15159] [ 793.672548][T15159] vpanic+0x56c/0xa60 [ 793.676568][T15159] ? __pfx__printk+0x10/0x10 [ 793.681153][T15159] ? __pfx_vpanic+0x10/0x10 [ 793.685655][T15159] ? is_bpf_text_address+0x292/0x2b0 [ 793.691034][T15159] ? is_bpf_text_address+0x26/0x2b0 [ 793.696233][T15159] panic+0xc5/0xd0 [ 793.699946][T15159] ? __pfx_panic+0x10/0x10 [ 793.704356][T15159] ? ret_from_fork_asm+0x1a/0x30 [ 793.709290][T15159] __warn+0x315/0x4f0 [ 793.713257][T15159] ? free_large_kmalloc+0xa3/0x140 [ 793.718441][T15159] ? free_large_kmalloc+0xa3/0x140 [ 793.723583][T15159] __report_bug+0x29a/0x540 [ 793.728163][T15159] ? free_large_kmalloc+0xa3/0x140 [ 793.733269][T15159] ? __pfx___report_bug+0x10/0x10 [ 793.738328][T15159] ? lockdep_hardirqs_on+0x7a/0x110 [ 793.743532][T15159] ? irqentry_exit+0x59e/0x620 [ 793.748300][T15159] ? rcu_is_watching+0x15/0xb0 [ 793.753674][T15159] ? free_large_kmalloc+0xa5/0x140 [ 793.758861][T15159] ? free_large_kmalloc+0xa3/0x140 [ 793.763954][T15159] report_bug+0x16a/0x220 [ 793.768266][T15159] ? free_large_kmalloc+0xa3/0x140 [ 793.773370][T15159] ? free_large_kmalloc+0xa5/0x140 [ 793.778470][T15159] handle_bug+0x9c/0x200 [ 793.782738][T15159] exc_invalid_op+0x1a/0x50 [ 793.787236][T15159] asm_exc_invalid_op+0x1a/0x20 [ 793.792095][T15159] RIP: 0010:free_large_kmalloc+0xa3/0x140 [ 793.797810][T15159] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 1e c7 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 d9 19 f1 8d 5b 41 5e 5d e9 a7 de 03 ff [ 793.817442][T15159] RSP: 0018:ffffc900047d6b20 EFLAGS: 00010206 [ 793.823506][T15159] RAX: 00000000ff000000 RBX: ffffea0000f2d880 RCX: 0000000000100001 [ 793.831555][T15159] RDX: ffffc9001a47a000 RSI: ffff88803cb62000 RDI: ffffea0000f2d880 [ 793.839519][T15159] RBP: 0000000000000000 R08: ffff888021707e03 R09: 1ffff110042e0fc0 [ 793.847478][T15159] R10: dffffc0000000000 R11: ffffed10042e0fc1 R12: 1ffff11005171682 [ 793.855458][T15159] R13: 0000000000000000 R14: ffff888021707e60 R15: dffffc0000000000 [ 793.863435][T15159] usb_free_urb+0xd0/0x120 [ 793.867854][T15159] smsusb_term_device+0x1d7/0x3e0 [ 793.872899][T15159] smsusb_probe+0x1aba/0x2280 [ 793.877574][T15159] ? __pfx_smsusb_probe+0x10/0x10 [ 793.882585][T15159] ? do_raw_spin_lock+0x12b/0x2f0 [ 793.887600][T15159] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 793.893138][T15159] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 793.898934][T15159] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 793.904731][T15159] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 793.910359][T15159] usb_probe_interface+0x668/0xc90 [ 793.915463][T15159] ? __pfx_usb_probe_interface+0x10/0x10 [ 793.921110][T15159] really_probe+0x267/0xaf0 [ 793.925611][T15159] __driver_probe_device+0x18c/0x320 [ 793.931007][T15159] driver_probe_device+0x4f/0x240 [ 793.936129][T15159] __device_attach_driver+0x279/0x430 [ 793.941513][T15159] bus_for_each_drv+0x258/0x2f0 [ 793.946450][T15159] ? __pfx___device_attach_driver+0x10/0x10 [ 793.952362][T15159] ? __pfx_bus_for_each_drv+0x10/0x10 [ 793.957725][T15159] ? lockdep_hardirqs_on+0x7a/0x110 [ 793.962907][T15159] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 793.968707][T15159] __device_attach+0x2c5/0x450 [ 793.973496][T15159] ? __pfx___device_attach+0x10/0x10 [ 793.978768][T15159] ? _raw_spin_unlock+0x28/0x50 [ 793.983608][T15159] device_initial_probe+0xa1/0xd0 [ 793.988729][T15159] bus_probe_device+0x12a/0x220 [ 793.993566][T15159] ? device_add+0x726/0xb70 [ 793.998062][T15159] device_add+0x7b6/0xb70 [ 794.002381][T15159] usb_set_configuration+0x1a87/0x2110 [ 794.007893][T15159] usb_generic_driver_probe+0x8d/0x150 [ 794.013345][T15159] usb_probe_device+0x1c4/0x3b0 [ 794.018187][T15159] ? __pfx_usb_probe_device+0x10/0x10 [ 794.023543][T15159] really_probe+0x267/0xaf0 [ 794.028037][T15159] __driver_probe_device+0x18c/0x320 [ 794.033332][T15159] driver_probe_device+0x4f/0x240 [ 794.038345][T15159] __device_attach_driver+0x279/0x430 [ 794.043715][T15159] bus_for_each_drv+0x258/0x2f0 [ 794.048548][T15159] ? __pfx___device_attach_driver+0x10/0x10 [ 794.054426][T15159] ? __pfx_bus_for_each_drv+0x10/0x10 [ 794.059788][T15159] ? lockdep_hardirqs_on+0x7a/0x110 [ 794.064973][T15159] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 794.070774][T15159] __device_attach+0x2c5/0x450 [ 794.075525][T15159] ? __pfx___device_attach+0x10/0x10 [ 794.080799][T15159] ? _raw_spin_unlock+0x28/0x50 [ 794.085638][T15159] device_initial_probe+0xa1/0xd0 [ 794.090689][T15159] bus_probe_device+0x12a/0x220 [ 794.095552][T15159] ? device_add+0x726/0xb70 [ 794.100044][T15159] device_add+0x7b6/0xb70 [ 794.104362][T15159] usb_new_device+0xa08/0x16f0 [ 794.109121][T15159] ? __pfx_usb_new_device+0x10/0x10 [ 794.114307][T15159] ? _raw_spin_unlock_irq+0x23/0x50 [ 794.119489][T15159] hub_event+0x2a1c/0x4f30 [ 794.123891][T15159] ? __lock_acquire+0x6b5/0x2cf0 [ 794.128860][T15159] ? __pfx_hub_event+0x10/0x10 [ 794.133619][T15159] ? process_scheduled_works+0xa8d/0x18c0 [ 794.139327][T15159] ? process_scheduled_works+0xa8d/0x18c0 [ 794.145032][T15159] process_scheduled_works+0xb6e/0x18c0 [ 794.150575][T15159] ? __pfx_process_scheduled_works+0x10/0x10 [ 794.156541][T15159] ? assign_work+0x3d5/0x5e0 [ 794.161140][T15159] worker_thread+0xa53/0xfc0 [ 794.165766][T15159] kthread+0x388/0x470 [ 794.169814][T15159] ? __pfx_worker_thread+0x10/0x10 [ 794.174903][T15159] ? __pfx_kthread+0x10/0x10 [ 794.179519][T15159] ret_from_fork+0x51e/0xb90 [ 794.184090][T15159] ? __pfx_ret_from_fork+0x10/0x10 [ 794.189183][T15159] ? __switch_to+0xc7d/0x1450 [ 794.193842][T15159] ? __pfx_kthread+0x10/0x10 [ 794.198410][T15159] ret_from_fork_asm+0x1a/0x30 [ 794.203176][T15159] [ 794.206547][T15159] Kernel Offset: disabled [ 794.210881][T15159] Rebooting in 86400 seconds..