last executing test programs: 12m36.074065522s ago: executing program 4 (id=1674): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xeb7a352d, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) 12m35.916034286s ago: executing program 4 (id=1675): socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x3ff, &(0x7f0000000640)=0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0008c398ffa5964383b29a12062bb74f001a007da81c20000000000000000000002ccf449013719ab31f1d9183b46d41bd208933bc77a8d462afcec16e5063b1ecf79d96b6bb5fee908a8d91de911fcefefb8370ec414567c4de01cdcf9781f51ac2fe8c314543de2358f97e0db39a3ab6a116e855f660665294ab477d96564e3a91552ae05e881a163b61aeba4c97ff3c4a"], 0x1c}}, 0x0) io_destroy(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r2, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) memfd_secret(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0xc4}}, 0x8001) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) mknodat(0xffffffffffffffff, 0x0, 0xc000, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x24000081}, 0x88d0) 12m35.147883655s ago: executing program 4 (id=1676): r0 = socket(0x2, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000004000000040000000800000020", @ANYRES32, @ANYBLOB="040000000000000000002731a379a911b885713b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000000000000a00"/24, @ANYRES32, @ANYBLOB], 0x50) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @remote}, &(0x7f0000000280)=0xc) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000000000000000003000000000200000004000000faffffff00005f5f0055b0e4b1766e2b74bf50bd2289b7aea25d727da2b6c8407f218fe58606db73987ede14112efa90d1d649adabeb251e2b47a065bcc60f965f2253d850ab060f6f516335eae3344145fbc4ea50fcfd810b6a03306b40a286acf51433e3c7fe"], &(0x7f0000000440)=""/221, 0x35, 0xdd, 0x1, 0x1, 0x10000}, 0x28) syz_io_uring_complete(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400fdffffff02000000000e830000000000000000", @ANYRES32=r5, @ANYBLOB="1100"/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="01000000040000000100"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$inet(r3, 0x0, 0x10) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000f7dbdf2501000000100007800c00018008000100", @ANYRES32=r8, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) syz_open_procfs(0x0, 0x0) 12m34.428775092s ago: executing program 4 (id=1679): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10eba9fdb4cbab48929e1af15100"/28, 0x1c}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) write$snapshot(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@getchain={0x24, 0x66, 0x300, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff3}, {0x4, 0xd}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x41) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}]}, 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x14, r5, 0xe23, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x4080) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003140)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) 12m32.728015586s ago: executing program 4 (id=1682): statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x98}, 0x0) 12m31.794404228s ago: executing program 4 (id=1685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x378, &(0x7f00000001c0)=ANY=[@ANYBLOB="b000004e461bf8513f642b7378947430d76d192e4c158412921bbbd958a738c424ea4db191374bafa88a638fe3d432a6fc39226d299134b3cb1f456ec4ce6836e5952c8bfd9425788af7656f4feeebf86446a6b9315d597cc2c16749d0d81dc722c442e9bd2e1c8bf68a0b50ef997cc71926bb4caf98a46dc709fa4be2813044aa4686d3921fe412da50987a87770f0b80ca528f834208e99c58884e97c191f2c94807e3f9b4b2a53d48a36944adf03ed04bd8c231ff004efe"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) socket(0x28, 0x4, 0x4) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 12m16.302969568s ago: executing program 32 (id=1685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x378, &(0x7f00000001c0)=ANY=[@ANYBLOB="b000004e461bf8513f642b7378947430d76d192e4c158412921bbbd958a738c424ea4db191374bafa88a638fe3d432a6fc39226d299134b3cb1f456ec4ce6836e5952c8bfd9425788af7656f4feeebf86446a6b9315d597cc2c16749d0d81dc722c442e9bd2e1c8bf68a0b50ef997cc71926bb4caf98a46dc709fa4be2813044aa4686d3921fe412da50987a87770f0b80ca528f834208e99c58884e97c191f2c94807e3f9b4b2a53d48a36944adf03ed04bd8c231ff004efe"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) socket(0x28, 0x4, 0x4) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 11.028070711s ago: executing program 1 (id=4164): r0 = socket(0x10, 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000d00)={{@any, 0x4}, 0x0, 0x8, 0x23, 0x5}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0xfff6, 0x3, 0xbfff, 0x0, "ec28a144f13d7607"}) r3 = socket(0x10, 0xa, 0x4) recvmsg(r3, &(0x7f0000000b80)={&(0x7f00000001c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000300)=""/178, 0xb2}, {0x0}, {0x0}, {&(0x7f0000000480)=""/29, 0x1d}, {&(0x7f0000000880)=""/35, 0x23}, {&(0x7f00000008c0)=""/181, 0xb5}], 0x7, &(0x7f0000000b00)=""/66, 0x42}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) unshare(0x20000400) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x6}, 0x94) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r6}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r7, 0x58}, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) 10.250058789s ago: executing program 1 (id=4168): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) write(r1, &(0x7f0000000080)="09000000010001", 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010001fff29bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10040000003f00002c0012800b00010067726574617000001c00028008000100", @ANYRES32, @ANYBLOB="06000e00030000000800070064"], 0x54}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x4, {{@in6=@loopback, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x200000, 0x20000000, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x820000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) socket$nl_rdma(0x10, 0x3, 0x14) signalfd4(r6, &(0x7f0000000080)={[0x1]}, 0x8, 0x80800) 8.408705056s ago: executing program 1 (id=4171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x880, 0xb0) 8.036838711s ago: executing program 5 (id=4174): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x3, 0x8, r0, 0x0, 0x0, 0x3, 0x0, 0x2}]) openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) socket(0x10, 0x80002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140)=0x7, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000009500000000000000705daddecdb0cd5726096068bd89d90a100538a1a0e4d8e4a50df8e93250e45132f7abc8d5811a4db4f22e9f933deaa23fbaa5e57f68401b83d6b09b02ba9e6c20e086a6db51bbd7dcb843fbef0b4b15a49994770b370c7b70933d4debaa8508da601d1b5c"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 7.662500472s ago: executing program 5 (id=4175): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000180)=""/246, 0xf6}, {&(0x7f0000000040)=""/139, 0x8b}, {&(0x7f00000002c0)=""/155, 0x9b}], 0x3, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0xa, "fa25a7a7"}, @main=@item_012={0x2, 0x0, 0x9, '\am'}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_012={0x2, 0x2, 0x7, "0377"}]}}, 0x0}, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90}) 6.322617182s ago: executing program 2 (id=4179): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@enum={0x2, 0x4, 0x0, 0x6, 0x4, [{0x80000004, 0x2}, {0xa, 0x6}, {0x1, 0xc0000000}, {0xc, 0x1}]}, @float={0xc, 0x0, 0x0, 0x10, 0x8}, @volatile={0x7fff}, @enum={0xb, 0x1, 0x0, 0x6, 0x4, [{0xf, 0x76}]}, @volatile={0x7}]}, {0x0, [0x61, 0x99f469a90d6e8c8]}}, &(0x7f0000000040)=""/16, 0x80, 0x10, 0x1, 0x2}, 0x28) 6.056969012s ago: executing program 2 (id=4180): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="18000000010003", 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) socket(0x840000000002, 0x3, 0xff) io_uring_setup(0x0, 0x0) r1 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect(0x4, 0x9d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xa1, 0xba, 0x14, 0x10, 0xb3c, 0xc002, 0xa39b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x90, 0x0, 0x6, 0xee, 0x23, 0x3e, 0x0, [], [{{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x9, 0x68, 0x80}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x2, 0x2, 0x63}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x0, 0x6, 0x1}}, {{0x9, 0x5, 0xf5ee16fb96974caa, 0x11, 0x400, 0x40, 0x0, 0xb3}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x8, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x45d5}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x82, 0x6, 0x3, [@generic={0x3c, 0xc, "598c305f17a7f9f540d141c4a79533b54438d0ac02e76bc54debbd15a974ef9483fbb09f0c4ceeae738984e76259ad706a4a9e9bc4fbc16c859e"}]}}]}}]}}]}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xb8}}, 0x20050800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) bind$rose(r4, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xe1, 0xf7, 0x8, 0x20, 0x3275, 0x85, 0xf769, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x1, 0x40, 0x2, [{{0x9, 0x4, 0xbe, 0xc, 0x0, 0x7c, 0x56, 0x76, 0x80}}]}}]}}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, 0x0}, {0x30, &(0x7f0000000c40)=ANY=[@ANYBLOB="30039dd9d7dfe8"]}]}) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90}) 5.721506719s ago: executing program 0 (id=4181): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x17, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) socket(0xa, 0x1, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) getpid() ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) 5.64598325s ago: executing program 1 (id=4182): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x75, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x7, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0x5}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x4, 0x6, 0x6, 0x8, 0xbe}, 0xce, &(0x7f0000000200)={0x5, 0xf, 0xce, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "c54d3668d4b64115de92b3e3170e43a8"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x6, 0x5, 0x1}, @ssp_cap={0x20, 0x10, 0xa, 0x7f, 0x5, 0x2, 0xf, 0xa48, [0x30, 0x0, 0xff000f, 0xc000, 0xc037]}, @generic={0x8b, 0x10, 0x1, "afacf5705c671f3cdc20c9e7a86b5d850db5644de5ccfdaf9ca95da369f25569b46bb84ae9bedd2928a02d36269e3f901d632cc3d1d756287293064c904ba774732bf54710faf1502fcd9971f85415218f2c8c1c3fa001e60c9830711c3f760ca487cef5adff7ddcaea18735551e11ce34c00b1d51dfa2c1159b8d013e5e42e912560e5b7460fbb0"}]}}) (async) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') (async) unlinkat(r2, &(0x7f0000000180)='./file0\x00', 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) 4.775840422s ago: executing program 0 (id=4183): getresgid(0x0, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xffffffffffffff25) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x9, 0xa}, {0x0, 0xb}, {0x4, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2, 0xfff1}}}, 0x24}}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004084) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x80000001}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x9) shutdown(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 4.524048407s ago: executing program 0 (id=4184): socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) userfaultfd(0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930", @ANYRES64=r0], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)="77bd9cc2", 0x4}], 0x2}, 0x41) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000001640)=ANY=[@ANYBLOB="010000000000000006010040"]) 3.986476844s ago: executing program 0 (id=4186): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000090024206d041cc340009100000109022400010000b00009040000010301010009210008000122010009058103"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000280)={0x0, @pix_mp={0x6, 0x93cf, 0x32315559, 0x4, 0x8, [{0x6, 0x1}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x2, 0xb68a}, {0x7fff, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0xff, 0x2, 0x2, 0x3}}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r4}) 3.780086284s ago: executing program 5 (id=4187): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e21, 0x5, 0x0, @wg=@cookie={0x3, 0x2, "0e91e2c4d3c04941b4039c930eacb3b368aa64e21a78b1fb", "b30fe3b44e34b39f19e7d0e6e8c47b16a9353431f4703df362f4b2a4c6dc37a3"}}}}}}, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x309081, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="6fa293fe8a9b8858af07996ba92321465ba440d26cff8215671c032c6cf19b47de14c919155a6ee8da18d962cbce01757019dd6027750a2fb53d8f03fe6a5472a8734d52649b12551b00d8c326a2603a62adc5445ecd108855c4ad1f6cea784de476e0e6838d8bb3b87eda64566dbb234e74a674678ab28f890fada231ae930de2fd9601b7cffa52b85e8d293371", 0x8e}, {0x0}, {&(0x7f0000000440)="83174206bd9b356ea8127e27cb21df7b8c58d7ccdaeb4480c12e692395fefbd1dd043c7ab4f325033856ba417cd42e21119179d7074f88a4b79cc17e07b4633c69ad8f751606555461eabbff1d8d397f33961f469b0de2f335d0ae350d32b81cb5fe177a7a3c88bb68c05b0f8e15c97474f70239ad582200f0249d04f2687ed1c0ac06fc502f6c0cbc699a4b67a0c13e4b544bee5db510814d6d808e0066f1ba78", 0xa1}, {&(0x7f0000000540)="57d152b45abf3370a133b0f2813e9747056e1f4e1e370107bd09dd6cdb1568a04a44fb4f7cb766ceb5dc692d74958c2394bbea042caf2c63512b8e0ed2683292b0a2ae79dc0342955b9384d3578b3e49b2a523e3c141b3ba076eed98", 0x5c}], 0x4}}], 0x1, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2100000000000000, 0x42031, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x2, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000500)={0x1, 0x40000000000000cb, &(0x7f0000000500), &(0x7f0000000500), &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680), 0x0, 0xfffffffe}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) 3.34399561s ago: executing program 5 (id=4188): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f00"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000002060108000000000000000000000000050004000200000009000200ffff7a3100000000050005000a20000005000100060000000c000300"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) write$P9_RVERSION(r2, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0xffffff77, 0x6, '9P2000'}, 0x13) 3.170045159s ago: executing program 3 (id=4189): r0 = socket(0x10, 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000d00)={{@any, 0x4}, 0x0, 0x8, 0x23, 0x5}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0xfff6, 0x3, 0xbfff, 0x0, "ec28a144f13d7607"}) r3 = socket(0x10, 0xa, 0x4) recvmsg(r3, &(0x7f0000000b80)={&(0x7f00000001c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000300)=""/178, 0xb2}, {0x0}, {0x0}, {&(0x7f0000000480)=""/29, 0x1d}, {&(0x7f0000000880)=""/35, 0x23}, {&(0x7f00000008c0)=""/181, 0xb5}], 0x7, &(0x7f0000000b00)=""/66, 0x42}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) unshare(0x20000400) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x6}, 0x94) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r6}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r7, 0x58}, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) 3.077774082s ago: executing program 3 (id=4190): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2.964143945s ago: executing program 3 (id=4191): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2ded, 0x9b1f, 0x8, 0x0, 0xd) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000000c0)={0x3, r0, 0x2, {0x26, 0xba7b}, 0x2}, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r7, 0x6ae3e61d32b8160b, 0x0, 0x0, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="85bc5071b4ce8c01bc3b", @ANYRES16=r7, @ANYRES64], 0x18c}}, 0x40004) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x3}, 0x0) close(r5) 2.962348589s ago: executing program 2 (id=4192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="24000000190001002dbd7000fcdbdf250a2014000000fe09000eef0008001e0005000000"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x44000) setresuid(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r5, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4004, r8, 0x2}) lseek(r10, 0x289e0cb9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) 1.560668653s ago: executing program 5 (id=4193): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) write$binfmt_aout(r1, 0x0, 0xffffffdb) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2e8) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setuid(0xee00) shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setrlimit(0x0, &(0x7f0000000000)={0x3, 0xc}) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x3, 0x2}, 0x10) bind$tipc(r2, 0x0, 0x0) 1.534041954s ago: executing program 3 (id=4194): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x20, 0x8, 0x8, 0xffffffff, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (fail_nth: 9) 1.483160708s ago: executing program 2 (id=4195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000840000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 1.237232053s ago: executing program 1 (id=4196): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) readv(r0, &(0x7f0000002680)=[{&(0x7f0000000000)=""/101, 0x65}, {0x0}], 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000080)={0x1, 0xfffffffe, 0x40026, 0x6, 0x32, 0x1}) 1.090351424s ago: executing program 3 (id=4197): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.055267454s ago: executing program 2 (id=4198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x6c}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x60, 0x80800) sendmmsg(r1, &(0x7f0000003e80)=[{{&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast1}, 0x1, 0x1, 0x4}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="969502077d467629900d2f13fab38407282c9df982f4c832467c3477abf2562117d9a27e98d306f387e4ccb1c8c5dbe0c0caaad266ed5bbcb0cda3c3336dbe340fd93b0a1572e22e1a7d50762fc4714d247516716b3936bec3099bdc35752ee4a237aa6a1f8940869957920b9a389456e11882e623237b796cfd90443d947d506a0bc94320a929cd46506866401e09a184a49279fc193527a1b36157c96ceb266df4ea2d4aa3207682542b3fc4ebbe", 0xaf}, {&(0x7f00000003c0)="81d2b8089c344218aa2dfbc89a9162273efe9a97db79f6499d1a77d30fe2878fbc4f4062e22745d363bdbd6b666d64cf77f1be06f708453898cc56f4b0cf811464074f77d26b822f0b9b81d28833f4dd09a205b99c668936359abf1416fbe59e4b112d95089db778c9137f345edb056f7f6007e49b183de9ff60dc07d2a5af13de801560b6bd5d80493a023da787e6f542ad64ea9606cec3bb29c56397", 0x9d}, {&(0x7f0000000480)="f58533e13087f60382483cd6d1fa260bb32cf6b008785668da130021ad0c49532ef4d0536d60d3ea164b612cc84ab4c74f7311eed0aacbbd180ca181802fe1086bb03b133aabdec44420ef3b7c27b1e62e97cc27ad98", 0x56}, {&(0x7f0000000500)="540c10f6ad1ebcb287a5f3b288f0ab130dde24afbef75790889c17de4cfcd07717202fc24cef90df6fe3a8750e04752e65074e403f2928a8e82fbe6cbb2ed2fba7bb2078eb5b3842e653c56e075ee645c14566bcb86d792bd6cd5bd648784a8f90dc434d880da782519cb4a79f610b51581608178d62d61ad1ca0e286e1ad411232c9b789f64ad462f86b85b8956793dec783c94967307c8ea331ce35a159e9aa48ae2bafa12c33582e33f6c73097ec38fde11122e359d5e72cca90bc09425177dfcc0defa26c3053521bf", 0xcb}], 0x4, &(0x7f0000000600)=[{0x28, 0x102, 0x5d50, "3d0d88145e99b6616caa80776f804b7a5f"}, {0x68, 0x1, 0x7, "292f3a74e46188a19dc85799d002e570a1756c01ca3af599e4c826d111e5794be083b6ae46737a91d6793db4ac17914a4a8c15b5ab9d802c58b8d3ff190c76bb5f6cdb6f8310f0c5e4bba1a50165e50d6f902ac5"}, {0x108, 0x115, 0x8001, "5b89260aad03d48056ee4be4df6a8f196023778b5976d4b0af4ba51de9782e9de8fe25c82c25ea9f1c1e255a33ac366d427d92ce8e9308dd6edc9f05357ec1a1c2ef4693e1290b16aad80e17620687658a21391b771316afd71b653a3c7fa5f6aa3f1882a3f50cf8cc81ae8b08d447c2395e3996b15a9be36aa5230d1abdd82038f4eabb8dd9fcf1d8c46ce7277d94a5758fd99f1cb9c5f37e570cfea0f7737944329845af12ff4fe6fea2466253a43758ac77774ab65bafac50f44e4ad87b3bd97c896c2278473eec13bcf6257e464c36f6cf18db0ebd2e5826ed4fa27dc25d076298b6362bcd6134c4680f1353b85480"}, {0xc0, 0x111, 0x806, "fdbf9d3ae536d6095464a292cd0b7f3bfc2c9c6f97052f5dc2cbd7e677e8fcbdb68bead83a97ba1bc3c4418fbb88c65e86321317632c176c6413c7c5075518a068653f3d244eee077f6415b1c2f2caa485208707b08bfa9de17890d6aedc73394e00b019b1155ec59b23565a6c02eee31e0602fb972f8abb826ecfe753789a304261964a8166322afa0091b0d5aac675472f9975e063f822706ff8a0afa0030ad7a9430f336381d7b3d8b6b3d9ef"}, {0x80, 0x1a, 0x3, "13395d6f29743828b18272b285160e2c2770c6b80290c3643d2c2abed983cd6d738bebd2d5e056e897d18df2dd4fbc4dfd39cc88ae1316ecbbd67e47458b2c54a8e284bb17712c34a0d46a04ac2270b21f9f350a3bb071cba3392dc964def0f987dcaf521edd78a9ee9845159b"}, {0x28, 0x11, 0x9, "8ed4953c19e69eef86e63d083249cf686b08bafdae"}, {0xc0, 0x137, 0xd, "ad125d8fcf1e3767dcbb8d460352af2327a50b8c33754b6efb77557a1c80070528c3c354755a9f8df5418725d19d85de291910fa3b0869dc30b60b298816091ee008c18d03391a4707b811a68a7062ca7d2aaa7697868bf31ced156ee30414bc108a666c63bb0db79bcf784337304d979706dacfd40c1b2896c09fd3e74c5f64b174906ac05516f197a501016112e81ac572f19a1bdb152899f07e462fc6426c65cd5d26163ca1d420"}, {0x78, 0x117, 0x5, "2788e34d255f52f6fbebeef81bbe765d28b809904ceac08a5d3746bdd37e6bf9ec36d846bf33653da1c2eb0f63b0b7c511039c7cdfe524a2274d91998a2bba31e675abde5b21d638b7b8bd4b12dba1d9414a998ff27886bd876232325041b241ba52"}], 0x438}}, {{&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000ac0)="3db4014f941e6855db30b9882165954a5a278e36ddc202770717799f1d1a9e2281afafa89d11cf6c025f6e7cc9f1f6e32c4af48b207b7c92896f12bbdde5601fdcf98dea0610543f1521efd28af40a146aa88698c69718fd3805c9d49dcbfd4187141a17e6d445156cb3da2f4eb7a137a90bd90b55f74e29f4c84df492c802892d8bb1ad", 0x84}, {&(0x7f0000000b80)="dd241f664b29e5458f7d16f20aea6fb7706a8bd90a5600aa766123235bb4b11e4f3ac266e5344e266e8df7d0c232", 0x2e}, {&(0x7f0000000bc0)="c1e1830866389c82218a9ffcb89711c4cdb2ccd91ac4257051f6d0301555a29ce765864a15e2084447ead658f2554e8b12a4e483c758565777b70e3fe2856e1e2beba8ebe00bb903c54653fea63e1643f5996e6b74cb69fe1979cee8ed83a4", 0x5f}, {&(0x7f0000000c40)="6202588ad09d0558d5662c47c6396c3c04d8499858ea88874590524b232cfcd17da5e3a5ad842a2f9da3af4820871ebde55e29d85cb699f97a95ef2ed317948a7c8e5f7f3691393b450b76efb029f7730d33b0cd82096a0f2b2435c7dd07a270ecf577556fb3dd347c3bd6d222f8a08b4fd9e7aeb618f8118fc66aced4954a87db7403c5b5bdd2b4463fa28176923f3f98f433ecc04a4a497082c06526aeb9fb177cd7cbf4276fef0ab9ddf7029af9ddbd9830ff281ac95151e1681d656eeae3ee6ead3b52ce4f2283d0be118705c46f48d46f7535fe4032d8cf74b1ccacb4cbae74d0b118e0b4aefdcc1361f0680b61c3efaa1470f6a48832636157f5dc55f836eb4a59ef0b26670a6872193dd635078e415e79610854bd15217908e8a07ab6d693cac21f1671ebb977e094fd65e74e6c73c4c36a65cf27bedb2b0c0880ae6eb59b38535d9a6a9b480eb35784af484d139ef4f4ca90b8c77123ce7966b84071132b4d4ef003b81ab8c8350533df6710ecb6e66e399cfdd2bf9cb75265ab68b3472cbe48cd931285fb96d6be0ee9b7395965690dd91f66584d0dd7ba7eae97091335c0302e485f64605757057b9361932b663378039d3348fa5fb12b21f66347d14f61338956a67bfe0f2a97fb898e512f1853f2cacfe4422d6e407681f2909d7a9ed41aeb9622638e8d819200076e1ab0e3c3f61fa6d885702f5cbcc0b2498e692a27479792814384eafb721cc28e21d150af70ca4002f69720bd15b6253bbc52a42466bea8f32b150777c894fb445e3a9dec211996cd802a9cfd4fb3285090394d7f7dc630ab232565194250fd1a1dd92967a25276133884369258a71692ab506b28c492cfe88e2e9e6a94b3d3f545495dc4a639788afeaa0b14583130b1e4b6d05c93f263cb9b756ee5d8da84684d1170051bfe678c8c1beac5aad6a27433c8b9e59f9e125aac63c4fc88e47622a53cc303423999578a89961e340c1d034e88a2bca32be0d1af83d032d324c282b320b9fe184c8167364169deff2c451069c632dd09b09c842a82cfefb608c0312892ad8b956435df92e54ef3a741ba02869687afb71e8e95e23e4e275f56ba8f07279a29506160e3d224ed0860e107a67d907f8c013e1a6386c65631441a7b948490c11a5965fedbccfb89b8447448c6f3d30a4e0402cd44ca4c3efdedb7be8a147fe461ef746ab8dd8687bd0f1ea5f65008248357ae78dd1ea0f74fcf2edc1e21ecaee58acde78cfeafa7a653342e89ccd9141fe3bcaa6444768a9f12bd197e1e587a93c6f8c28b8a77a17bed5889f21de94ac462b56903d49bce4249591ef087d1bdaeaf3057dacccf323d634124e736d08a12f345f2b31053be9b5214732df0046f10f53f29b3914b3b23987f8d76c9dfdf01cbab5e0762cc1727ece8e37f6acf2f3fb62917f5d137598a6e65a0ca445e52debaddc49a40ea3c546e3aa34d2decc900b25551d78f42f0794856ba01615789ceb3a707dbe2e14f8403e96f58d696e47156d1225c90f407ccb237ab190f2365db05f0886169597c1cb94be36377d696016eabdb53b5f9a8fabd9f014cf33ea72bf981f6ae3cc781f9d9d2adc7c7a1b8944d98b06e753e5d0c06f56a9970c61015a333c013a20527703b4f798dc469c5363879892a8fe073da523a0ea9b86bd7f859f7a4e5b1f091e4cbea73a6cc4751ec17d9c9a1870b2d27e95fecc940f3fa81407f18e5096b3ac6f137366a319394304b6cd0f05d1b6716cc82c558e4c0600303590bc529ff3013fe1de7da873ae5fb003338eb224d91c2fd8f5c174823b5cfdec983c3599534e26ee58846060861941853354e23d60871618b3df1d6d0a86d2b9327005b6075c39d0bd96d221a55a11a340e3e1d4bbf4eb149fad91f0873ed22f3554dde5fe4bdd57368d3abbcaffa403bd01b47b74d235d734e69faff854e20fc40bd9103200751782f08738e68f78d5965c8d229cfe1dae0782a57472db9d368fb3735cb70a2268189ef2a31e06a7ba20e8d0e2cbe6be484156d60ceb8ca3806be5376cddd609110c522289dcdc76dc4af816b38ada00370e0c3aff0caa89a8fb6e8427e5afd55c67e0db6efd8844f280b1695b1128dfb1fc0024346b277ecf6d01466e8ba79d4e500e3b15f5427fcc5e5963cca7a1e6c880f05c4d1ff48b069360c86f18fdb1b1b7fe4e805d164ff35a450938bd3982392ccbe16911b55da0a0745a2e1715a85d4b92df646e19eac5546b84c96840e422a81a34d021c214d793b710a3572ac3795c864a94e482a1639e8268538e95223763dad32fd9b69d804d61005830cbb5e00c17c56c4ff37a371d4d000827d695e0b7a905ffc5c1b9e953547aa22aed3cb4a394ec13bb9838af5c48c2b3c9822d9d19a98128f0de55a030377e68b4878b6c7e78d43f6d026751359734d1fc79b00925cb960cfc8c6496372eb49ed328672b038a864678518414bfe2c27a08a61f2c05feed3c6057cb7103bae1cbc214ddc75ac846c097cebf175215ff5dac20cb4e28fb94f8857ae1ea0aa9786cdae4608df2edc4d16be16217a0abd17b318783a07e5c0d7e38712e4181aadbbcd52c4cf5afdfe51aac167c1aafb65600af83ddc4a2d9dee564ae5f8b81a6fb87da9832b2a0508de32fd1c5485645ebf9cf7703b94ad11885e1d26f49afc41bbba1a5738abbc44b69392b3bd0d53f9e60df56d479cf2984dff312acbcb722f3175451b7437799caab59e764fadd352926a70601cc62358573429db76e043a3eb10fa6e9642a54655c28a4e212a1e4a2f33afa5eb0531e18cc945f023b6d1eb776d2718142f9ad047c8c75620ae2b451519ce0c67ebdb8fef922058803d8233f79743b1e27baf8920b431801ec59d4adadb2705d1f2e20c5324d3b5f1afc9972cd33a531d7a05b7561c50c572ce2116cf336eb2b7e9a2ddcc17bf58a6d8624d3c72b06e3eb9159bb0b067d63bef2faf5ecd5a4de3905c40450422ad5d92be624d1b83cd23dd2edefc427e46aadd4e563a339b160b3b30cadadd7aae858a92ea4f4e77138cba78951659c31d5b98ea90cd8f533eea056ad3d5d1e96cbec552f5db57687a4100c9e8df2f9ddd7f1183bec6b5848846f6dac69fc7d6ebef8b1fde870516a8f6e52bcda7a05f3f145f06c8dcd5631ee4d3efd844f02c6253f73b23ce3bef0da6ad8287a58b01e962f786d16df4d785248ec0facda3e366eb56f5d667c4ec9a56a13a9ccba915ab4d45c9ae7090ba1c837d14c2182e9a8b83223d84d62353decdb97f2603244b49c94a2316b6f46f3be6793365871fe39928e5b96b0301bae162ef920744513000a4a4048aedc7d3a22e9da7e962b52d1fe6769e4b6c801a37c38f15c949c1ef14237ef1b43c102838b0b2967d6754f09de65574d424e979a4f53a177de098f49b299048aa9d67c7b21b717b50789e6ca7357646a65d1f532298e703bc7e9638aa17b92ab3ffd49544c56f9eb83f291495959a813b3c7038afb34bffb8f99ce32a7154e9de7a7f76523ca3f6b32bc5c653da11a1c283f62d9bc9a118a66cd7a3e96fa6f12131c4a836a99845cf86d6b6ccb4d427b747b30f4cbc9d2b6bb06c1a3314bfa88840d82409617afa92d1f4848c8c91e9b5be6bfe505f29c46a84a27cbbb6a26d6cb785c83fe4fe9a0bef48146fff9a369a84de0d836b814a7a2e4e760447542acf84d20e22cc3e7e829965a9b13d26d7fc213078b61ede27c89d93364ce584c178279485ec2aa59b69ee1d77e1c4ed161e87776445b2b56aed9ab819636b086c4407929b308e9817e495a0f19b748cde851d4ed5056b300d2b01e074a7976425a473b86d36b3f52848c0a044963cd61c77ce83a1b922f34e9bfabe6fbe73e4f0bb6ed78644eae316d996734b69b5033e382df292020cb4380d0deee221ebc5a26e51d63417a03374ed77554462aec19ccc79993eea36738124fe24b436dd3893ed6dcb3b55429764ca32865709bf339d308e57801aee8c47a132303399eb925ac58a2289e2244f01085ab104d0b3f1c63ca8a7926fec66854097f0327767866ca38f5b6331112b7c171d12b4615a3d2a9293716d65c307da492baf11f7f606d5488cdb4dfc3433a13ff7371fba6f2308979b7b7253a5a9cb9f8d3a66402ce703cd12f6b34abee61bf10d7d51424825737045c173fd20209f5c35c5a0953f7816cc4cf1f004a3131a6fe12e005b1e35b092258ef030c5c8be710ab0b568152e8a5988f6bc526bb971b6f0eb5b5614e7b815a4e87c7b7e0161f7728b0f74f9feaddc9ff4a4ad738805b1ab79961797316bff8da4f9cdffa4eff284b0ff5b1bd9759ca10ede035ad52bc04d12b94ad05f74cf5da67befa141505d6615b1c95da81217af04a9bcbde43f7366f8830eab8d55ddbcb7bd53843cf56ddffe9b7476a412f70050dd3c0832350c164dbce64c8e3db4579ea720cf3c972c843746c82003c66a6bb87acedfbd99ab3eaf3c9d89e0bc94b38a2cad25f89d26e274f3d55cdc8fc01c64ba575140b5bbe8a2a966da628288ab1f791ecc09604a408381999673f4f84254e4403b9fa239c2df76debc177438fdc5a70ee3cadcb803177be6e0e0aed826aa7b1ad66131ad8f829179552c4d12d0ed3c6f08d6a70b6e0a4ec65e812bc0a73f190a1396e6f69763268300d783cb2a75f910de80b4069220212d7bbdd6dfb8fadbacc227edb093c9473c313851432043c701f7a870267ebdd12d2ec11ae2a7e3ea65d2b81be6d1b17e67cc9ce040094106b571f6f24d62481a6fd34dfba7b4f1cf5e86f8296dc223604a3513718b913e3b14af89573430cb839a1fdf7caa8092f4eab73306c9b3db4105fcbe3354c1ebd3685b275fccdc72492830e3a546b63c6d50fc2601f8d7e744a6c622193867afd4a7bdd7804cab1a1910ec470612e30f518b4a48217e5df4e5dcd6c0068869b0b9a74816e9cee9d4d76de4915f01134ac1dc41840ad3ef22d1ea09e8774a5399fe21c3a200bfe7f6c2bd6159f95f098437fa5524c7b489bf4c97ecd2f171821b3d392bb3f21bbb38f965fc16a3d0bc1a799d23f8f09535937b40632c50fb6ea82ba0748199f86048315d6bbc91d93adc9533ba685e6012da13e614e7d6becb245e686734af8e72e02578667a788034aeef7a3e76a89dc7f860b2a13e4d884cadbece0276ebae1dc27e7c23aab0129a704295e9db4aa547ea1654f993afd951fb82952c08906ddf64a49fad0fd5e3596aa8914d9b9bc5c46080f4b586c161fe748ff18df194e0f6725bbb4ad91a198944ecdcdaf3e3979a6801659f2afb5db08b2f20c7e174a5b6a3bd06df9c2a7141e37e9965e2c2277e2571604da126138b40f8e6d4dfaaec47e2f72ec799a894ae0ef05061785de961905c9d20e4e1a57f83a20404b56e07370b59e20be0ca33c6665c79d9ceecb5fb3216b57d714ea09563295c67ffb0f3adb0795b20110476a6e9c20102a62e287af2c28789b8ce62c6764c9e096173cd6a61a1726740a77efee42f72fe4d2a47f298642650ea45a2f62ebecdfbf27d3bbde826dc70771e0583275981f6f0277e7765ffb0b574eed0556271393e5a02c96219174415147657bd3b61544d48ee621e5ecc713b8e4fdf25602019883fe8fd0edfcf5342b02d7552cdd216eab75e560457bc91cebb65ab58c4599c66312814621e0320451bd57bf0a575e754ceab2781f7a9bac412f1ec5d144bd9c1c4ae9e99c74da244f2e7dc50f990f40dd5d781d38b89be50e0d10f4483b6ae27e1c509037aa149e426f6c4b4d10eed4c2534ccfc", 0x1000}], 0x4, &(0x7f0000001c80)=[{0xe8, 0x114, 0xffff, "89d39ffb47dc7262eb56406be172d3a0157f9b8244985b5710a40a86a40265151f3cb023e08318d7e6fe71a1c2d115fd8db7f98d4558b2299a3b1e5a25f169e67febfe613cf4ba01bd6fcbe2c5eb88b2ce39298908c0738caeaec8ce028fe888c7a9c26a6c464d29adeb952ba29cbb14a376ff2b2cecd2417b1ca4c889fdd6604344d632ecb40f848e14da5e9030ddaff66e9271928f397a22119bd58dd5657c1983d4df3c7eceff1b9b5a4277b1d66ffe7872fdb4f4f52676723aa2efe43b8a8c269756ca9af54a5706a699755c8a73ff19bc0228"}, {0xc8, 0x10b, 0x6, "cef32e46d3976bf95a54306090a10b785f7205e04073e084a650e4f1d5cfc0cbea6fba23c6cccd84ab176218738751e91afafb34ec9c6deffea2e33d144b8b5e1a830dad621cec2c0a6601f56cff01ecc6a67bdad007c128985a8902765731d94d08e699056e108c788ff6b4f72911a7651895a17bd28b954f65e7cc33e176df35624895499b0c371a7570b0ca7431b8627a89304b223aa914a0f9899f8d166a267544e8676cd36ad026ab8ea216b345c9f9a76a271c"}, {0x80, 0x102, 0x5, "9a981c4a02e9b095bca27b9291c5b454dde1183489532a4f24628cd4989d7a7a398815bd88122a4cb361d7c788eade4759e85897d2e51a7a1aab77202ed95d599853cf6dffb2567aa6b323f6d5d545f8bb25b0c0158ffd16521fadccc6c2ca20db7d7625255c485b754cc6cc"}, {0xd0, 0x10b, 0xc, "e1c0633cda3736f083e2489d78de834a40f733d84aea220d32a60ccbfe42eefc718e1caf1d4dc40bef4147c5bff7fd86dd6968764f9b8bfdd56aef153c17d7446ff79d9c44bac5e73038b790e95844ed81a6a553ada5b516f5b4fecbd9e1f66448bf80f754cdda47d79f2bac11ce3a128f13129b4b71a313f7dd6fd12dbf1efc040c4506b4948099c4b5f709a71bd73315757e2ea7c1d9bf3bd4c1a653c35c3c436b6a499521ad3d1b86a482a0d0a154fc10f7b87735588f1eaf"}, {0x98, 0x10c, 0xd4, "c13f8a9ebf8b8487f59e082e85d6b05fb60d5007e540ff8fecd09cb84ef884ab3ac1113ffa8ffc935efd32ed79f0447899391e54f074da1a526ed2e88768bc2adf057572786f3f81ce0811e766fdb136c2a9ef9c9e4ac57d32699a1fe251beeba1f00061ecdf63693c4851a1eead5128c6247df42288389f7ca4d7c25b3e451067756d908db5"}, {0xf0, 0x10e, 0x38, "e22c6da32d5648429064e3ba9e3904cf99026260e7c60e01ca49b4ecf656b9a1ed5379fbb4d3f7d26c181688f27d4af01bdd76743f3d4b968cfbc03d2fc63be5b15a5673db32b12799fd42b2101da00f2283690b415ffb76b2b41c35bec6d910b7a5b7f0a5db79b6f4f69997458d9f7e056398efaebddeb592735ea8b704cb8a393209e7a8b5defa5154105c28becb50a66c51e829b024a872184ae0bd380017a3297383e326e2825fbec2128dbef2d2c234127886046705d0aaaf0f529b7138edcd0a4b5559fbe9b3880794d60e905afcbf0a9dfd1cf8d91cbe16b82603e45c"}, {0x110, 0xff, 0x1, "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"}, {0x30, 0x6, 0x1, "95cd5eb27be2efb22d085568f79268f46238efcdd977054ccbc1c56d26"}], 0x5c8}}, {{&(0x7f0000002280)=@nl=@unspec, 0x80, &(0x7f0000002400)=[{&(0x7f0000002300)="bcc0210a0376c361748f63b51a3ca71c15fb1946b14798628631cadf1e14207e944bfa01e0df9e05be50d86f5630979713d5758bf3e7b1e9c1d4bd279bde8d9f3abb9a9bd68f998b0c18961362b096b1f9ef295d95cd9826813609fa398e8dea20a2c6bc39fc0429de069bb6b25921df8f846253d9bc73d2e87504fa6346de8215a8d8791c50eb96a316e2b4a682f0b28293d4be11a08a8e725304a7fd9f1d301220a7dc7b2dc1553851", 0xaa}, {&(0x7f00000023c0)="70d52deebcc6e76452741b3924b9cb2003a2347e0205629e142ee0940144b145485828958776bfdcc24db3ca28ba51925facdc4c74d36478691f", 0x3a}], 0x2, &(0x7f0000002440)=[{0xf0, 0xe7304e786350935c, 0x80000001, "179c090aeef9c93dbf78898758e83dfab33b311b4b9ef1475b5e6c3f92cfb1650035ceff72ab5b8f37fabed53cfffea3c7f8b964f5924a6d87138e33036743a381d3b94da3d1d36047ce2738f6956e3e4a6db65e4f7382a4de9d9c8a831421c299ba62718fc9379b9c73d3df9eb070940a736687240ccd7ac97587bc5a5e28651c311c62d1b9f58bef2fb145b302dd7435c76686738d86b5f26f76870d9e86e53bb9d6d66f3602e673c141a3da580854d6c1d9d15f8bc8eb33d2c9a114b8b58d2b10131df731dcd504776712f7a4677ebfc6aae1e8f173aee2dc1c"}, {0xb8, 0x3a, 0xc1c, "b518dbe0b38af4c6012a605877afa7baa73c0ebc4edf498017b1cc22e7a8bf57e314e8773c62be315e621305f75969f91395c38a1e6dc339d26094bfee9595f55f95be25331eeb92c7e235d82c5b98ef21a2b058399dc4f33fd739d7fac3f1fce9690240600cbcab9a143baeb0dbc1a03abfd47304b75adc651a63fb55ad1b5709895a5cab8d189785fb2ff2d444e47343b989cff9e561b72c6dfa9851032be19a4809d2"}, {0x58, 0x117, 0x10001, "86ba3ef5c4251e883b439a28644391aa3121a874167fc7c6ef6d8298b27d25bb30cd37edd6edfd4210db5ac557791df26c67d1f2b19254ef1ab9ade436f7e306ec75"}, {0xa0, 0x108, 0x23, "64f1c5203456f3dd74e97f734c26b095689b6eb4729c9550909db45d1eac46d7d74e2f632b5a77416ce91d11b4e3302d1003a43d24c610a6799b38bfc27a6d9c4813c58f800bd867b2f595049fdade4d882a469bf2fbade07aad5e927eeef89cfdee242b9d162d134e6b5d1b7214ae6d275e7eb181e8d448a41e2aa77a198019c3472c5c42b20d179636ae9947"}, {0x28, 0x113, 0x6, "cd53fba19e2fd31b6e018ec5cef78829b0e6d2ef2b9b71b2"}, {0xa8, 0x0, 0x1, "3f0da057f44bbf391c287d4032db7dd8afc53f0701e01b2d46436a0dd0e23855b9a51d352650045ae13dcbf84a5384661ca8d48fcd00d94dca90370fe3afb6c0d4ae39d365a828baee53bfb2ec581822ac6b98472904ecff63a61a91acb44b58b675329a72d70b75c7bdc672562961fc3f260adf19a17863e719b98588558ae04eed8ae7a79523fb49a5a286d7505a832a3371"}, {0xc8, 0x1e, 0x8000, "fdd740d3240d39399534abba3d03751d2ddedf705206dbcaf8c3569e9ae06fb246365caa158411732d16dc4d659a1f7b846eac5625432f3c530c749bfb0b17f0bafb022c27fd371ff4bd1e59c76392ebc800e9bdccb31c985b1bf76adc19f6a59ad4166b1f6f00adda17c8bfc3f17604e35b95d7d386cb1d49905b3dc7bb5edbf00800d40c999d1960eeb020fd3f42f5f86644ecd66a478a6fd7d7d290a909973b31d21cf001e4d45d59a82fe3f9e418e4d175935cbdd4cf"}, {0xc8, 0x100, 0xffff, "94b37099393d56057e83fd0c0de034daca4bda7770438e322481cbae819947c7ca9418866f40667fecffc13b7daf045626515f0751b7d93ce3daf892971d506c25098d74f43043b97f106d83da1d685eec5f99c8fd8207e90bf808c7fbdcbea78059c0d19469d8ff7e0f752aa2dde6a5f7e33764415ac51e0e8adc37bb37ed07c4d035a960bea6ec2fbbf2ac43856479c0ff166b46d93ec7cb068279761b5d01caee3ff341139a8981c69e5ef51b05a3841c7991"}], 0x500}}, {{&(0x7f0000002940)=@x25, 0x80, &(0x7f0000003d40)=[{&(0x7f00000029c0)="25ae77a84403a2733b6db887617c75eef5c86ba5de38341872dbfa809853e50c8aa9c972f8a0665bfda23cc9a919e14b0c77244ac04f4d4222fddcd1bcf5017c5112e58d7b91c85c5ef7844e00c387e91679adde07f50056e52b954b83d759d8706be9adfa903844", 0x68}, {&(0x7f0000002a40)="892af46970ec", 0x6}, {&(0x7f0000002a80)="ec31a91cabfec71603ad3ae1561fe8d305aa5f072d0cd655b104085edb17de7c33ef7134564d9999b2e5e7c23721e474b523a94c7091d1b38d2cc34482602d58a91a55be9d4a5bc8c805f9a210599015b57bf2578d0aae05b345168bc7a6059c1008ce6df7df816467acea47fa82a79fdf86be4cb509bf8f5c2114578a1048004ae908c6240db797a3ecc48f3a8128f3c8cfb787a057ce4f495b535380156973ab702ba0ab5a6276a6bb43d981e0906c8e9c04e7350a", 0xb6}, {&(0x7f0000002b40)="022ffe0230439e8964c0d65bab7d539268dcd2c2115a7fe09722d30d40466c2df9bdbddb2c02ee8e509d62f9775872fe20c1c72c0b711323f4cb6a9e709a6c23566703e208a71b8017813a29c6265f3259d8625405eb4b2b808e67f17bdaa1ea39bbe2b913b84145a9633a5655bb9683baddb5136fcb4e", 0x77}, {&(0x7f0000002bc0)="c839d4d196a5bfc61c9d016dbeec2666377f94139d620fc60a0b4cf446df195bbc3e8a491d0346b5fdf836ab", 0x2c}, {&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000003c00)="5a714e04af63164e9f5b6ed8ced9a7e8b07a17eaa97d8606563f1c9a4975c403dfad5e349bdc8c887eefcb47baf017df575f6a7999e0b576c6e877590d9d34f465f65a5b09a63671d7010c00070993dac5e0614665c137905955b8edd13fb6a7b6eb2395c95e41d733092dcde3491a10f87f629d04172ff08ca407dcdd7969cd54be0cc3556542a119902d99265b7c8d7155a1464a951b9eff758496999347bb488ce103640e09132ebb1dcd52fa31dafa94004d5607c1bb06", 0xb9}, {&(0x7f0000003cc0)="156ca18105532554d7fc58c660bae5bd5f9af50e5e3dd7bdbfbd537bffebf0b288d2b9de0c3eb597f7dc6e572a8a5e8c6ba7cbb308c060029e0e74afe20258275074ec4b8c9bdc03514f7ca6298eb475bf331439ff21666be12eb2b58484fe0737af17385bfb40e361dfdc8db5ca34e192c0", 0x72}], 0x8, &(0x7f0000003dc0)=[{0x88, 0x101, 0xc, "0f39def35dca924ffff2d9089c9c7cce82da20b3896e392e918c79360ca9315257b95b4c7095792e5c7e8202fcd4bb401739fd09ed2c04c7e58ab47810ef6c1fc728ba90d40b1cd9f1a9f1f874cceed7fac5df42c6f251f4842ee67753d43237c56a658dc96e79d42469f98f641d0b6fbafaad549b"}], 0x88}}], 0x4, 0x4008850) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000400)={0x3a22a8400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x3, 0x2f, &(0x7f00000008c0)=""/47, 0x41000, 0x64, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x5, 0x6, 0x2}, 0x10, 0x1307c, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[r3], &(0x7f00000008c0), 0x10, 0xffffffff}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000004040)={'ip_vti0\x00', &(0x7f0000003fc0)={'gretap0\x00', 0x0, 0x80, 0x8, 0xacba000, 0xa, {{0x12, 0x4, 0x3, 0x4, 0x48, 0x66, 0x0, 0xf, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x78, 0x0, 0xf, [0x40000000, 0x0, 0x4]}, @lsrr={0x83, 0x7, 0xc5, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @cipso={0x86, 0xa, 0x0, [{0x0, 0x4, 'vO'}]}, @generic={0x86, 0xd, "88e28025b5ce7ef376f1f7"}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000004140)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004100)={&(0x7f0000004080)=@delqdisc={0x48, 0x25, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x10, 0x5}, {0x9, 0xc}, {0xd, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xd7, 0x7, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) 1.012204591s ago: executing program 5 (id=4199): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x80000) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x1a3080, 0x0) splice(r0, &(0x7f00000000c0)=0x2, r1, &(0x7f0000000200)=0x5, 0x6dfbd3f4, 0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x12, {"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", 0x1000}}, 0x1006) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f0000000240)={0x10, 0x1000000}) 532.252951ms ago: executing program 2 (id=4200): r0 = socket(0x10, 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000d00)={{@any, 0x4}, 0x0, 0x8, 0x23, 0x5}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0xfff6, 0x3, 0xbfff, 0x0, "ec28a144f13d7607"}) r3 = socket(0x10, 0xa, 0x4) recvmsg(r3, &(0x7f0000000b80)={&(0x7f00000001c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000300)=""/178, 0xb2}, {0x0}, {0x0}, {&(0x7f0000000480)=""/29, 0x1d}, {&(0x7f0000000880)=""/35, 0x23}, {&(0x7f00000008c0)=""/181, 0xb5}], 0x7, &(0x7f0000000b00)=""/66, 0x42}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) unshare(0x20000400) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x6}, 0x94) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r6}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r7, 0x58}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) 434.388837ms ago: executing program 0 (id=4201): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 80.547689ms ago: executing program 1 (id=4202): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x6202}}, [], {{0x4, 0x1, 0xb, 0x1, 0x9, 0x10}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x4, 0x70}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000008802"]) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='personality\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611014000000000063030eff000000009500008c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x22) lseek(r4, 0x3, 0x0) 56.073594ms ago: executing program 3 (id=4203): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f00"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000002060108000000000000000000000000050004000200000009000200ffff7a3100000000050005000a20000005000100060000000c000300"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) write$P9_RVERSION(r2, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0xffffff77, 0x6, '9P2000'}, 0x13) 0s ago: executing program 0 (id=4204): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000400000004000000070000000007ff00", @ANYRES32=0x1, @ANYBLOB="00000000c5ec77905629b6b40000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) kernel console output (not intermixed with test programs): T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1098.350931][ T43] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1098.490458][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1098.553880][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1098.606298][ T43] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1098.713272][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1098.766878][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1098.831557][ T43] usb 6-1: SerialNumber: syz [ 1098.944453][T16078] usb 2-1: new low-speed USB device number 103 using dummy_hcd [ 1099.473818][T16078] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1099.502068][T16078] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 1099.511564][ T43] usb 6-1: USB disconnect, device number 49 [ 1099.518711][T16078] usb 2-1: config 0 has no interface number 0 [ 1099.534947][T16078] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1099.551345][T16078] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1099.562584][T16078] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1099.572934][T16078] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1099.582405][T16078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.603365][T16078] usb 2-1: config 0 descriptor?? [ 1100.873255][T16078] usb 2-1: USB disconnect, device number 103 [ 1100.954294][ T43] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1101.134439][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 1101.150425][ T43] usb 3-1: too many configurations: 251, using maximum allowed: 8 [ 1101.175563][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.205451][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.244852][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.308972][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.322477][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.345155][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.363260][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.383077][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.399144][ T43] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1101.411716][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.519512][ T43] usb 3-1: config 0 descriptor?? [ 1101.539108][T17319] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1102.260898][ T43] sunplus 0003:04FC:05D8.0029: reserved main item tag 0xd [ 1102.304411][ T43] sunplus 0003:04FC:05D8.0029: unexpected long global item [ 1102.328902][ T43] sunplus 0003:04FC:05D8.0029: probe with driver sunplus failed with error -22 [ 1102.701643][T17328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3355'. [ 1102.710838][T17328] nbd: must specify a size in bytes for the device [ 1102.923635][T17327] xt_cgroup: invalid path, errno=-2 [ 1103.093959][T17334] loop6: detected capacity change from 0 to 524287487 [ 1103.113229][T17334] Buffer I/O error on dev loop6, logical block 0, async page read [ 1103.121461][T17334] Buffer I/O error on dev loop6, logical block 0, async page read [ 1103.132889][T17334] Buffer I/O error on dev loop6, logical block 0, async page read [ 1103.141111][T17334] Buffer I/O error on dev loop6, logical block 0, async page read [ 1103.184377][T17337] loop6: detected capacity change from 524287487 to 0 [ 1103.185027][T17334] Buffer I/O error on dev loop6, logical block 0, async page read [ 1103.199380][T16078] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1103.222349][T17334] ldm_validate_partition_table(): Disk read failed. [ 1103.229143][T17334] Dev loop6: unable to read RDB block 0 [ 1103.235088][T17334] loop6: unable to read partition table [ 1103.245056][T17334] loop6: partition table beyond EOD, truncated [ 1103.251572][T17334] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1103.806847][T16078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1103.819354][T16078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.819588][ T5919] usb 3-1: USB disconnect, device number 97 [ 1103.833321][T16078] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1103.855147][T16078] usb 2-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 1103.863462][T16078] usb 2-1: Manufacturer: syz [ 1103.904071][T16078] usb 2-1: config 0 descriptor?? [ 1103.989588][T16078] hub 2-1:0.0: USB hub found [ 1104.700334][T17347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1104.746074][T16078] hub 2-1:0.0: 6 ports detected [ 1104.771366][T16078] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1105.561175][T17357] SET target dimension over the limit! [ 1105.692846][T17355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3364'. [ 1106.262001][T16078] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 1106.289054][T16078] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 1106.443452][T17355] vlan2: entered promiscuous mode [ 1106.470517][T16078] usbhid 2-1:0.0: can't add hid device: -71 [ 1106.481395][T17355] bond0: entered promiscuous mode [ 1106.603576][T16078] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1106.615108][T17355] bond_slave_0: entered promiscuous mode [ 1106.648392][T17355] bond_slave_1: entered promiscuous mode [ 1107.186051][T16078] usb 2-1: USB disconnect, device number 104 [ 1107.262602][T17372] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1108.196926][ T43] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1108.211456][T17383] overlay: filesystem on ./file1 not supported [ 1108.394247][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 1108.664930][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1108.728222][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1108.817622][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1109.068618][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1109.184612][T17389] binder: 17385:17389 unknown command 1075633448 [ 1109.226640][T17389] binder: 17385:17389 ioctl c0306201 200000000640 returned -22 [ 1109.503352][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1109.513488][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1109.523491][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.552564][ T43] usb 4-1: config 0 descriptor?? [ 1109.565981][T17376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1110.610367][T16726] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 1110.614265][ T43] usb 4-1: USB disconnect, device number 70 [ 1111.355368][T17414] ubi: mtd0 is already attached to ubi31 [ 1111.390259][T17414] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1112.661268][T17428] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1113.025989][T17436] program syz.0.3388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1113.336293][T17441] FAULT_INJECTION: forcing a failure. [ 1113.336293][T17441] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.349370][T17441] CPU: 0 UID: 0 PID: 17441 Comm: syz.5.3389 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1113.349394][T17441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1113.349406][T17441] Call Trace: [ 1113.349415][T17441] [ 1113.349424][T17441] dump_stack_lvl+0x189/0x250 [ 1113.349453][T17441] ? __pfx____ratelimit+0x10/0x10 [ 1113.349477][T17441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1113.349500][T17441] ? __pfx__printk+0x10/0x10 [ 1113.349520][T17441] ? __pfx___might_resched+0x10/0x10 [ 1113.349543][T17441] ? fs_reclaim_acquire+0x7d/0x100 [ 1113.349570][T17441] should_fail_ex+0x414/0x560 [ 1113.349596][T17441] should_failslab+0xa8/0x100 [ 1113.349619][T17441] __kmalloc_noprof+0xcb/0x4f0 [ 1113.349637][T17441] ? sock_kmalloc+0xd6/0x160 [ 1113.349663][T17441] sock_kmalloc+0xd6/0x160 [ 1113.349685][T17441] ____sys_sendmsg+0x1b5/0x830 [ 1113.349717][T17441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1113.349746][T17441] ? import_iovec+0x74/0xa0 [ 1113.349773][T17441] ___sys_sendmsg+0x21f/0x2a0 [ 1113.349796][T17441] ? __pfx____sys_sendmsg+0x10/0x10 [ 1113.349851][T17441] ? __fget_files+0x2a/0x420 [ 1113.349872][T17441] ? __fget_files+0x3a0/0x420 [ 1113.349903][T17441] __x64_sys_sendmsg+0x19b/0x260 [ 1113.349925][T17441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1113.349967][T17441] do_syscall_64+0xfa/0x3b0 [ 1113.349989][T17441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.350006][T17441] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1113.350019][T17441] ? clear_bhb_loop+0x60/0xb0 [ 1113.350039][T17441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.350055][T17441] RIP: 0033:0x7fdb1bf8e929 [ 1113.350071][T17441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1113.350084][T17441] RSP: 002b:00007fdb1ce74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1113.350102][T17441] RAX: ffffffffffffffda RBX: 00007fdb1c1b6160 RCX: 00007fdb1bf8e929 [ 1113.350116][T17441] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 1113.350127][T17441] RBP: 00007fdb1ce74090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.350137][T17441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.350148][T17441] R13: 0000000000000000 R14: 00007fdb1c1b6160 R15: 00007fff96d75288 [ 1113.350177][T17441] [ 1113.580431][ T43] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1113.749281][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.893309][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1113.949029][ T43] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1114.589822][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1114.653039][ T43] usb 1-1: SerialNumber: syz [ 1114.978888][T17454] [U] [ 1115.846186][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.867506][ T43] usb 1-1: 0:2 : does not exist [ 1115.896570][ T43] usb 1-1: USB disconnect, device number 83 [ 1121.145506][T17515] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1123.834710][T17564] netfs: Couldn't get user pages (rc=-14) [ 1125.236804][T17582] tipc: Started in network mode [ 1125.282371][T17582] tipc: Node identity 722efd70b608, cluster identity 4711 [ 1125.356961][T17582] tipc: Enabled bearer , priority 0 [ 1125.440412][T17580] tipc: Resetting bearer [ 1125.664488][T17584] syzkaller0: entered promiscuous mode [ 1125.670004][T17584] syzkaller0: entered allmulticast mode [ 1125.707864][T17574] tipc: Resetting bearer [ 1125.771024][T17574] tipc: Disabling bearer [ 1125.933295][T11768] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1126.379329][T11768] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1126.389410][T11768] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.446645][T11768] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1126.477041][T11768] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1126.524417][T11768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.554294][T11768] usb 2-1: Product: syz [ 1126.558505][T11768] usb 2-1: Manufacturer: syz [ 1126.601407][T11768] usb 2-1: SerialNumber: syz [ 1126.947034][T17616] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1127.338812][T17615] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1127.366165][T17620] loop6: detected capacity change from 0 to 524287487 [ 1127.389789][T17620] Buffer I/O error on dev loop6, logical block 0, async page read [ 1127.417661][T17620] Buffer I/O error on dev loop6, logical block 0, async page read [ 1127.545132][T17623] loop6: detected capacity change from 524287487 to 0 [ 1127.545761][T17620] Buffer I/O error on dev loop6, logical block 0, async page read [ 1128.037357][T17620] ldm_validate_partition_table(): Disk read failed. [ 1128.080305][T17620] Dev loop6: unable to read RDB block 0 [ 1128.099822][T17620] loop6: unable to read partition table [ 1128.109600][T17620] loop6: partition table beyond EOD, truncated [ 1128.129898][T17620] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1128.203770][T17629] loop6: detected capacity change from 0 to 524287487 [ 1128.214248][T16726] Bluetooth: hci2: command 0x0406 tx timeout [ 1128.237444][T17629] Buffer I/O error on dev loop6, logical block 0, async page read [ 1129.215419][T11768] usb 2-1: 0:2 : does not exist [ 1129.335992][T17634] loop6: detected capacity change from 524287487 to 0 [ 1129.367467][T17629] Buffer I/O error on dev loop6, logical block 0, async page read [ 1129.383784][T11768] usb 2-1: USB disconnect, device number 105 [ 1129.390071][T17629] ldm_validate_partition_table(): Disk read failed. [ 1129.411717][T17629] Dev loop6: unable to read RDB block 0 [ 1129.417515][T17629] loop6: unable to read partition table [ 1129.714961][T17629] loop6: partition table beyond EOD, truncated [ 1129.856362][T17629] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1129.876702][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3436'. [ 1132.432687][T17674] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1133.288349][T17687] loop6: detected capacity change from 0 to 524287487 [ 1133.369917][T17687] Buffer I/O error on dev loop6, logical block 0, async page read [ 1133.478107][T17687] Buffer I/O error on dev loop6, logical block 0, async page read [ 1133.577724][T17687] Buffer I/O error on dev loop6, logical block 0, async page read [ 1133.723591][T17687] Buffer I/O error on dev loop6, logical block 0, async page read [ 1133.934318][T17688] loop6: detected capacity change from 524287487 to 0 [ 1133.938595][T17687] Buffer I/O error on dev loop6, logical block 0, async page read [ 1133.979357][T17687] ldm_validate_partition_table(): Disk read failed. [ 1133.987878][T17687] Dev loop6: unable to read RDB block 0 [ 1133.994145][T17687] loop6: unable to read partition table [ 1134.007001][T17687] loop6: partition table beyond EOD, truncated [ 1134.013527][T17687] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1134.836736][ T5886] libceph: connect (1)[c::]:6789 error -101 [ 1134.900766][ T5886] libceph: mon0 (1)[c::]:6789 connect error [ 1134.928724][T11768] libceph: connect (1)[c::]:6789 error -101 [ 1134.934878][T11768] libceph: mon0 (1)[c::]:6789 connect error [ 1135.201138][T17710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3450'. [ 1136.104343][T11768] libceph: connect (1)[c::]:6789 error -101 [ 1136.110441][T11768] libceph: mon0 (1)[c::]:6789 connect error [ 1136.130119][T17703] ceph: No mds server is up or the cluster is laggy [ 1137.239235][T17720] pimreg: left allmulticast mode [ 1137.814726][T11768] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1138.191776][T17745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1138.252520][T11768] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.265602][T11768] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1138.287091][T11768] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1138.297694][T11768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.306411][T11768] usb 3-1: Product: syz [ 1138.317152][T11768] usb 3-1: Manufacturer: syz [ 1138.322030][T11768] usb 3-1: SerialNumber: syz [ 1139.148174][T17759] program syz.0.3462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1139.414173][ T24] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1139.566099][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1139.582980][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.608786][ T24] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1139.631696][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.640620][ T24] usb 1-1: Product: syz [ 1139.646446][ T24] usb 1-1: Manufacturer: syz [ 1139.652025][ T24] usb 1-1: SerialNumber: syz [ 1139.663925][ T24] usb 1-1: config 0 descriptor?? [ 1139.832632][ T24] usb 1-1: bad CDC descriptors [ 1139.838869][ T24] usb 1-1: unsupported MDLM descriptors [ 1139.909905][ T24] usb 1-1: USB disconnect, device number 84 [ 1140.666579][T11768] usb 3-1: 0:2 : does not exist [ 1141.496426][T11768] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1141.608954][T11768] usb 3-1: USB disconnect, device number 98 [ 1141.822360][T17782] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1141.830409][T17782] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1143.184339][ T24] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1143.404379][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1143.488150][ T24] usb 1-1: config 0 has no interfaces? [ 1143.508902][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice=da.9a [ 1143.548397][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.566862][ T24] usb 1-1: Product: syz [ 1143.571229][ T24] usb 1-1: Manufacturer: syz [ 1143.580029][ T24] usb 1-1: SerialNumber: syz [ 1143.590403][ T24] usb 1-1: config 0 descriptor?? [ 1143.639193][T17816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3476'. [ 1143.691912][T17817] netlink: 'syz.2.3478': attribute type 3 has an invalid length. [ 1143.757374][T17820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3479'. [ 1144.128698][ T43] usb 1-1: USB disconnect, device number 85 [ 1145.454170][ T24] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1145.781644][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1146.351113][ T24] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1146.408132][ T24] usb 3-1: config 0 has no interface number 0 [ 1146.449314][ T24] usb 3-1: config 0 interface 12 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 1147.271879][ T24] usb 3-1: string descriptor 0 read error: -71 [ 1147.356165][ T24] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=83.b3 [ 1147.394042][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3492'. [ 1147.423404][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.257228][ T24] usb 3-1: config 0 descriptor?? [ 1148.262766][ T24] usb 3-1: can't set config #0, error -71 [ 1148.272486][ T24] usb 3-1: USB disconnect, device number 99 [ 1149.094162][ T5908] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1149.117554][T17892] loop6: detected capacity change from 0 to 63 [ 1149.134618][T17889] Buffer I/O error on dev loop6, logical block 0, async page read [ 1149.143046][T17889] Buffer I/O error on dev loop6, logical block 1, async page read [ 1149.160764][T17889] Buffer I/O error on dev loop6, logical block 2, async page read [ 1149.170022][T17889] Buffer I/O error on dev loop6, logical block 3, async page read [ 1149.181151][T17889] Buffer I/O error on dev loop6, logical block 0, async page read [ 1149.196035][T17889] Buffer I/O error on dev loop6, logical block 1, async page read [ 1149.215597][T17889] Buffer I/O error on dev loop6, logical block 2, async page read [ 1149.233000][T17889] Buffer I/O error on dev loop6, logical block 3, async page read [ 1149.244813][ T5908] usb 6-1: Using ep0 maxpacket: 16 [ 1149.250481][T17890] Buffer I/O error on dev loop6, logical block 0, async page read [ 1149.274480][T17890] Buffer I/O error on dev loop6, logical block 1, async page read [ 1149.374572][ T5908] usb 6-1: too many configurations: 251, using maximum allowed: 8 [ 1149.462685][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.482858][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.495546][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.945918][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.971945][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.992842][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.221723][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.241774][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.253451][ T5908] usb 6-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1150.263063][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.277290][ T5908] usb 6-1: config 0 descriptor?? [ 1150.771543][ T5908] sunplus 0003:04FC:05D8.002A: reserved main item tag 0xd [ 1150.823359][ T5908] sunplus 0003:04FC:05D8.002A: unexpected long global item [ 1150.841290][ T5908] sunplus 0003:04FC:05D8.002A: probe with driver sunplus failed with error -22 [ 1150.991625][T17912] dvmrp0: entered allmulticast mode [ 1151.589550][T17909] dvmrp0: left allmulticast mode [ 1151.595663][T17919] tmpfs: Bad value for 'mpol' [ 1151.612940][T17919] input: syz1 as /devices/virtual/input/input41 [ 1151.654971][T17920] netlink: 'syz.1.3509': attribute type 2 has an invalid length. [ 1151.715780][T15565] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1152.785671][ T5908] usb 6-1: USB disconnect, device number 50 [ 1152.850305][T15565] usb 3-1: Using ep0 maxpacket: 32 [ 1152.879478][T15565] usb 3-1: config 2 has an invalid interface number: 190 but max is 0 [ 1152.919264][T15565] usb 3-1: config 2 has no interface number 0 [ 1152.926595][T15565] usb 3-1: config 2 interface 190 has no altsetting 0 [ 1152.942915][T15565] usb 3-1: language id specifier not provided by device, defaulting to English [ 1153.518294][T15565] usb 3-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=f7.69 [ 1153.530549][T15565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.538811][T15565] usb 3-1: Product: syz [ 1153.548513][T15565] usb 3-1: Manufacturer: 񷟗è [ 1153.561146][T15565] usb 3-1: SerialNumber: syz [ 1153.669535][T17946] xt_cgroup: invalid path, errno=-2 [ 1153.728903][T13210] Bluetooth: hci0: command 0x0406 tx timeout [ 1154.570428][T12994] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 1155.011994][T17948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3514'. [ 1156.050644][T15565] usb 3-1: USB disconnect, device number 100 [ 1156.325298][T17980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3527'. [ 1156.335331][T17980] netlink: 'syz.0.3527': attribute type 7 has an invalid length. [ 1156.343716][T17980] netlink: 'syz.0.3527': attribute type 8 has an invalid length. [ 1156.360572][T17980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3527'. [ 1156.882117][T15565] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1157.310599][T15565] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1157.391323][T15565] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.526411][T15565] usb 6-1: config 0 descriptor?? [ 1157.561912][T15565] cp210x 6-1:0.0: cp210x converter detected [ 1158.054406][ T5919] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1158.062351][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 1159.684180][ T5919] usb 2-1: device descriptor read/64, error -32 [ 1160.643205][T15565] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1161.342686][T15565] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1161.359819][T15565] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 1161.371298][T15565] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1161.734408][T15565] usb 6-1: USB disconnect, device number 51 [ 1161.743866][T15565] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1161.760494][T15565] cp210x 6-1:0.0: device disconnected [ 1162.544300][T11768] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1163.284585][T11768] usb 4-1: Using ep0 maxpacket: 32 [ 1163.364650][T11768] usb 4-1: config 2 has an invalid interface number: 190 but max is 0 [ 1163.382025][T11768] usb 4-1: config 2 has no interface number 0 [ 1163.449496][T11768] usb 4-1: config 2 interface 190 has no altsetting 0 [ 1163.647933][T11768] usb 4-1: language id specifier not provided by device, defaulting to English [ 1163.660896][T11768] usb 4-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=f7.69 [ 1163.670606][T11768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.962904][T11768] usb 4-1: Product: syz [ 1164.016870][T11768] usb 4-1: Manufacturer: 񷟗è [ 1164.022109][T11768] usb 4-1: SerialNumber: syz [ 1165.137870][T18047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.221453][T18047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1165.260401][T18052] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1165.275027][ T5919] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1165.305138][T11768] usb 4-1: USB disconnect, device number 71 [ 1165.434340][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 1165.446296][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1165.497311][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1165.545032][ T5919] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 1165.589236][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.613669][ T5919] usb 1-1: config 0 descriptor?? [ 1165.744350][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1165.744368][ T30] audit: type=1326 audit(1751303915.584:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18060 comm="syz.5.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb1bf2ab19 code=0x7ffc0000 [ 1165.802301][ T30] audit: type=1326 audit(1751303915.614:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18060 comm="syz.5.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb1bf2ab19 code=0x7ffc0000 [ 1165.832023][ T30] audit: type=1326 audit(1751303915.614:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18060 comm="syz.5.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb1bf2ab19 code=0x7ffc0000 [ 1165.861692][ T30] audit: type=1326 audit(1751303915.614:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18060 comm="syz.5.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb1bf2ab19 code=0x7ffc0000 [ 1165.888839][ T30] audit: type=1326 audit(1751303915.614:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18060 comm="syz.5.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb1bf2ab19 code=0x7ffc0000 [ 1165.913499][ T30] audit: type=1326 audit(1751303915.614:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18060 comm="syz.5.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1bf8e929 code=0x7ffc0000 [ 1165.939728][ T30] audit: type=1326 audit(1751303915.614:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18060 comm="syz.5.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb1bf2ab19 code=0x7ffc0000 [ 1165.966632][ T30] audit: type=1326 audit(1751303915.614:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18060 comm="syz.5.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1bf8e929 code=0x7ffc0000 [ 1166.019078][ T30] audit: type=1326 audit(1751303915.614:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18060 comm="syz.5.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb1bf2ab19 code=0x7ffc0000 [ 1166.073987][ T30] audit: type=1326 audit(1751303915.614:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18060 comm="syz.5.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb1bf2ab19 code=0x7ffc0000 [ 1166.120334][ T5919] smartjoyplus 0003:0925:8866.002B: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.0-1/input0 [ 1166.154369][ T5919] smartjoyplus 0003:0925:8866.002B: no output reports found [ 1166.301775][ T5908] usb 1-1: USB disconnect, device number 86 [ 1166.959601][T18083] binder: 18081:18083 ioctl c018620c 200000000380 returned -22 [ 1166.995306][T18083] binder: 18081:18083 ioctl f50f 0 returned -22 [ 1167.043591][T18083] binder: 18081:18083 ioctl 50009402 0 returned -22 [ 1168.486665][T18097] ieee802154 phy0 wpan0: encryption failed: -22 [ 1169.486446][ T5919] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1170.182854][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 1170.454640][ T5919] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1170.554168][ T5919] usb 4-1: config 6 has an invalid interface number: 216 but max is 0 [ 1170.582925][ T5919] usb 4-1: config 6 has no interface number 0 [ 1170.594278][ T5919] usb 4-1: config 6 interface 216 has no altsetting 0 [ 1170.616998][ T5919] usb 4-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=c2.2a [ 1170.627055][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.754366][ T5919] usb 4-1: Product: syz [ 1170.758547][ T5919] usb 4-1: Manufacturer: syz [ 1170.792046][ T5919] usb 4-1: SerialNumber: syz [ 1171.034202][ T24] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1171.050176][T18130] io-wq is not configured for unbound workers [ 1171.205219][ T5919] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.216/input/input42 [ 1171.251517][ T5175] bcm5974 4-1:6.216: could not read from device [ 1171.281633][ T5175] bcm5974 4-1:6.216: could not read from device [ 1171.297894][ T5919] usb 4-1: USB disconnect, device number 72 [ 1171.305574][ T5175] bcm5974 4-1:6.216: could not read from device [ 1171.420161][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1171.428240][ T24] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1171.443859][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.479443][ T24] usb 6-1: config 0 has no interface number 0 [ 1171.506015][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1171.530991][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.589041][ T24] usb 6-1: Product: syz [ 1171.618719][ T24] usb 6-1: Manufacturer: syz [ 1171.623357][ T24] usb 6-1: SerialNumber: syz [ 1171.658927][ T24] usb 6-1: config 0 descriptor?? [ 1171.670650][ T24] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 1171.682364][ T24] usb 6-1: No valid video chain found. [ 1171.901949][T15565] usb 6-1: USB disconnect, device number 52 [ 1173.864401][ T24] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1174.589331][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1174.604002][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.633478][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.664211][ T24] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 1174.681300][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.693344][ T24] usb 4-1: config 0 descriptor?? [ 1174.944496][ T43] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 1175.346277][ T24] saitek 0003:06A3:0CCB.002C: item fetching failed at offset 0/2 [ 1175.379192][ T24] saitek 0003:06A3:0CCB.002C: parse failed [ 1175.398877][ T24] saitek 0003:06A3:0CCB.002C: probe with driver saitek failed with error -22 [ 1176.324209][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 1176.523334][ T43] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 1176.636253][T18192] overlayfs: failed to clone upperpath [ 1176.784169][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 1176.794670][ T43] usb usb2-port1: attempt power cycle [ 1177.294947][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.523418][ T43] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 1177.556596][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 1177.684343][ T43] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 1177.886254][ T5919] usb 4-1: USB disconnect, device number 73 [ 1177.929086][ T43] usb 2-1: device not accepting address 111, error -71 [ 1177.964227][ T43] usb usb2-port1: unable to enumerate USB device [ 1178.561647][T18220] i2c i2c-0: Invalid block write size 35 [ 1179.168814][T18222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3602'. [ 1179.688013][ T5919] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1180.360988][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 1180.379598][T18234] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3604'. [ 1180.407923][T11768] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1180.417119][T18226] xt_CT: No such helper "snmp" [ 1180.444298][ T5919] usb 4-1: config 53 has an invalid interface number: 5 but max is 0 [ 1180.500090][ T5919] usb 4-1: config 53 has an invalid interface number: 5 but max is 0 [ 1180.542070][ T5919] usb 4-1: config 53 has no interface number 0 [ 1180.584593][ T5919] usb 4-1: config 53 interface 5 altsetting 119 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1180.649200][ T5919] usb 4-1: config 53 interface 5 altsetting 119 has a duplicate endpoint with address 0xD, skipping [ 1180.660508][T11768] usb 1-1: Using ep0 maxpacket: 32 [ 1180.686993][T11768] usb 1-1: config 2 has an invalid interface number: 190 but max is 0 [ 1180.702066][ T5919] usb 4-1: config 53 interface 5 altsetting 119 endpoint 0x1 has invalid maxpacket 1015, setting to 64 [ 1180.754404][T11768] usb 1-1: config 2 has no interface number 0 [ 1180.807377][T11768] usb 1-1: config 2 interface 190 has no altsetting 0 [ 1180.820142][ T5919] usb 4-1: config 53 interface 5 altsetting 119 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1180.931282][T11768] usb 1-1: language id specifier not provided by device, defaulting to English [ 1180.977705][ T5919] usb 4-1: config 53 interface 5 altsetting 119 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 1182.295122][T11768] usb 1-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=f7.69 [ 1182.320913][ T5919] usb 4-1: too many endpoints for config 53 interface 5 altsetting 117: 222, using maximum allowed: 30 [ 1182.339402][T11768] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.652145][T11768] usb 1-1: Product: syz [ 1182.656499][ T5919] usb 4-1: config 53 interface 5 altsetting 117 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1182.938599][T11768] usb 1-1: Manufacturer: 񷟗è [ 1182.957360][T11768] usb 1-1: SerialNumber: syz [ 1182.965333][ T5919] usb 4-1: config 53 interface 5 altsetting 117 bulk endpoint 0xD has invalid maxpacket 1023 [ 1182.984190][T11768] usb 1-1: can't set config #2, error -71 [ 1183.003872][ T5919] usb 4-1: config 53 interface 5 altsetting 117 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1183.024857][T11768] usb 1-1: USB disconnect, device number 87 [ 1183.048532][ T5919] usb 4-1: config 53 interface 5 altsetting 117 has a duplicate endpoint with address 0xA, skipping [ 1183.072986][ T5919] usb 4-1: config 53 interface 5 altsetting 117 endpoint 0xB has an invalid bInterval 251, changing to 7 [ 1183.099213][ T5919] usb 4-1: config 53 interface 5 altsetting 117 has 6 endpoint descriptors, different from the interface descriptor's value: 222 [ 1183.292043][T18250] xt_cgroup: invalid path, errno=-2 [ 1183.335273][ T5919] usb 4-1: config 53 interface 5 has no altsetting 0 [ 1183.421877][ T5919] usb 4-1: config 53 interface 5 has no altsetting 1 [ 1183.437536][ T5919] usb 4-1: string descriptor 0 read error: -71 [ 1183.445222][ T5919] usb 4-1: Dual-Role OTG device on HNP port [ 1183.452212][ T5919] usb 4-1: can't set HNP mode: -71 [ 1183.673870][T18263] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3614'. [ 1183.869050][T18266] hugetlbfs: syz.0.3615 (18266): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1184.115903][T18265] tipc: Failed to remove unknown binding: 66,3,3/0:2466695562/2466695563 [ 1184.138978][T18274] loop6: detected capacity change from 0 to 524287487 [ 1184.157936][T18274] buffer_io_error: 3942 callbacks suppressed [ 1184.157954][T18274] Buffer I/O error on dev loop6, logical block 0, async page read [ 1184.187423][T18274] Buffer I/O error on dev loop6, logical block 0, async page read [ 1184.244439][T18279] loop6: detected capacity change from 524287487 to 0 [ 1184.255701][T18274] Buffer I/O error on dev loop6, logical block 0, async page read [ 1184.264431][T18274] ldm_validate_partition_table(): Disk read failed. [ 1184.271642][T18274] Dev loop6: unable to read RDB block 0 [ 1184.280140][T18274] loop6: unable to read partition table [ 1184.287498][T18274] loop6: partition table beyond EOD, truncated [ 1184.293799][T18274] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1185.367476][T18298] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3627'. [ 1185.619110][T18302] xt_cgroup: invalid path, errno=-2 [ 1187.928036][T18342] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3638'. [ 1189.055064][T18355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3639'. [ 1189.479469][T18359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3640'. [ 1190.031631][T18363] netlink: 'syz.3.3644': attribute type 7 has an invalid length. [ 1190.040282][T18363] netlink: 'syz.3.3644': attribute type 8 has an invalid length. [ 1190.699924][T18372] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3647'. [ 1190.838249][T18376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3648'. [ 1190.848471][T18376] nbd: must specify a size in bytes for the device [ 1191.067624][T18378] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1192.380726][T18394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3652'. [ 1192.608780][T18399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3655'. [ 1195.934691][T18413] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3660'. [ 1197.223839][T18434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3665'. [ 1197.233083][T18434] nbd: must specify a size in bytes for the device [ 1199.470316][T18463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3674'. [ 1199.482658][T18463] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1199.785579][ T5908] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1199.804497][T11768] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1199.954129][ T5908] usb 6-1: Using ep0 maxpacket: 16 [ 1199.970590][T11768] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1199.982316][ T5908] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1200.002566][T11768] usb 2-1: config 1 has an invalid interface number: 88 but max is 1 [ 1200.004349][ T5908] usb 6-1: config 0 has no interface number 0 [ 1200.013899][T11768] usb 2-1: config 1 has no interface number 1 [ 1200.046259][ T5908] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1200.055618][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.055656][T11768] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1200.063600][ T5908] usb 6-1: Product: syz [ 1200.063619][ T5908] usb 6-1: Manufacturer: syz [ 1200.063633][ T5908] usb 6-1: SerialNumber: syz [ 1200.097881][T11768] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1200.300484][T11768] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1200.300521][ T5908] usb 6-1: config 0 descriptor?? [ 1200.347216][ T5908] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1200.370753][T11768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.412911][T11768] usb 2-1: Product: syz [ 1200.418047][T11768] usb 2-1: Manufacturer: syz [ 1200.422814][T11768] usb 2-1: SerialNumber: syz [ 1200.634363][ T5919] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1200.651685][T11768] smsusb:smsusb_probe: board id=8, interface number 0 [ 1200.678953][T11768] smsusb:smsusb_probe: board id=8, interface number 88 [ 1200.704670][T11768] usb 2-1: USB disconnect, device number 112 [ 1200.753101][T18495] bridge0: port 3(netdevsim0) entered blocking state [ 1200.774150][T18495] bridge0: port 3(netdevsim0) entered disabled state [ 1200.792738][T18495] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1200.815754][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 1200.833815][T18495] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1200.860593][T18495] bridge0: port 3(netdevsim0) entered blocking state [ 1200.868383][T18495] bridge0: port 3(netdevsim0) entered forwarding state [ 1200.880573][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.922958][ T5919] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1201.038472][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.059448][ T5919] usb 1-1: config 0 descriptor?? [ 1201.234871][T18500] tipc: Started in network mode [ 1201.256062][ T5908] gspca_spca1528: reg_w err -110 [ 1201.256440][T18500] tipc: Node identity 06fe34829e2a, cluster identity 4711 [ 1201.284327][ T5908] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 1201.303457][T18500] tipc: Enabled bearer , priority 0 [ 1201.320537][T18501] syzkaller0: entered promiscuous mode [ 1201.355431][T18501] syzkaller0: entered allmulticast mode [ 1201.601529][T18505] tipc: Started in network mode [ 1201.611914][T18505] tipc: Node identity ac141425, cluster identity 4711 [ 1201.619177][T18505] tipc: Enabling of bearer rejected, failed to enable media [ 1201.942417][T18499] tipc: Resetting bearer [ 1201.956158][ T5908] usb 6-1: USB disconnect, device number 53 [ 1202.030391][T18499] tipc: Disabling bearer [ 1202.293703][T18512] 9pnet_fd: Insufficient options for proto=fd [ 1202.464378][ T5919] usbhid 1-1:0.0: can't add hid device: -71 [ 1202.474034][ T5919] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1202.854024][ T5919] usb 1-1: USB disconnect, device number 88 [ 1203.808634][T18528] futex_wake_op: syz.1.3696 tries to shift op by 144; fix this program [ 1205.493065][T18547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3701'. [ 1205.576827][T18551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3701'. [ 1205.729033][T18554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3702'. [ 1205.738237][T18554] nbd: must specify a size in bytes for the device [ 1207.572331][T18584] kAFS: No cell specified [ 1208.270975][T18598] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3719'. [ 1208.281641][T18598] nbd: must specify a size in bytes for the device [ 1208.986905][T18607] xt_cgroup: invalid path, errno=-2 [ 1210.884529][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3728'. [ 1212.139821][T18642] xt_cgroup: invalid path, errno=-2 [ 1212.991723][T18646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3734'. [ 1213.001189][T18646] nbd: must specify a size in bytes for the device [ 1213.160867][T18648] afs: Unknown parameter '' [ 1213.492689][T18654] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1215.021593][T18676] FAULT_INJECTION: forcing a failure. [ 1215.021593][T18676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1215.035623][T18676] CPU: 1 UID: 0 PID: 18676 Comm: syz.5.3742 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1215.035653][T18676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1215.035665][T18676] Call Trace: [ 1215.035674][T18676] [ 1215.035682][T18676] dump_stack_lvl+0x189/0x250 [ 1215.035711][T18676] ? __pfx____ratelimit+0x10/0x10 [ 1215.035735][T18676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1215.035758][T18676] ? __pfx__printk+0x10/0x10 [ 1215.035789][T18676] should_fail_ex+0x414/0x560 [ 1215.035816][T18676] _copy_to_user+0x31/0xb0 [ 1215.035841][T18676] simple_read_from_buffer+0xe1/0x170 [ 1215.035868][T18676] proc_fail_nth_read+0x1df/0x250 [ 1215.035894][T18676] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1215.035920][T18676] ? rw_verify_area+0x258/0x650 [ 1215.035939][T18676] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1215.035963][T18676] vfs_read+0x1fd/0x980 [ 1215.035987][T18676] ? __pfx___mutex_lock+0x10/0x10 [ 1215.036012][T18676] ? __pfx_vfs_read+0x10/0x10 [ 1215.036032][T18676] ? __fget_files+0x2a/0x420 [ 1215.036058][T18676] ? __fget_files+0x3a0/0x420 [ 1215.036077][T18676] ? __fget_files+0x2a/0x420 [ 1215.036108][T18676] ksys_read+0x145/0x250 [ 1215.036130][T18676] ? __pfx_ksys_read+0x10/0x10 [ 1215.036161][T18676] do_syscall_64+0xfa/0x3b0 [ 1215.036185][T18676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.036202][T18676] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1215.036218][T18676] ? clear_bhb_loop+0x60/0xb0 [ 1215.036240][T18676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.036257][T18676] RIP: 0033:0x7fdb1bf8d33c [ 1215.036273][T18676] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1215.036288][T18676] RSP: 002b:00007fdb1ce95030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1215.036307][T18676] RAX: ffffffffffffffda RBX: 00007fdb1c1b6080 RCX: 00007fdb1bf8d33c [ 1215.036320][T18676] RDX: 000000000000000f RSI: 00007fdb1ce950a0 RDI: 0000000000000006 [ 1215.036332][T18676] RBP: 00007fdb1ce95090 R08: 0000000000000000 R09: 0000000000000000 [ 1215.036341][T18676] R10: 0000200000007000 R11: 0000000000000246 R12: 0000000000000001 [ 1215.036352][T18676] R13: 0000000000000000 R14: 00007fdb1c1b6080 R15: 00007fff96d75288 [ 1215.036382][T18676] [ 1215.366850][T13210] Bluetooth: hci3: command 0x0405 tx timeout [ 1215.896852][T18684] xt_cgroup: invalid path, errno=-2 [ 1216.163386][T18685] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3743'. [ 1218.154092][T18702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3747'. [ 1218.163611][T18702] nbd: must specify a size in bytes for the device [ 1218.563637][T18705] netlink: 'syz.2.3750': attribute type 10 has an invalid length. [ 1218.715819][T18705] team0: Device veth1_macvtap failed to register rx_handler [ 1220.152916][T18727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3758'. [ 1220.280758][T18729] xt_cgroup: invalid path, errno=-2 [ 1220.491057][T18730] tipc: Failed to remove unknown binding: 66,3,3/0:2330292521/2330292522 [ 1220.636978][T18737] loop6: detected capacity change from 0 to 524287487 [ 1220.657030][T18737] Buffer I/O error on dev loop6, logical block 0, async page read [ 1220.758343][T18737] Buffer I/O error on dev loop6, logical block 0, async page read [ 1221.164376][T18740] loop6: detected capacity change from 524287487 to 0 [ 1221.164465][T18737] Buffer I/O error on dev loop6, logical block 0, async page read [ 1221.199181][T18737] ldm_validate_partition_table(): Disk read failed. [ 1221.210211][T18737] Dev loop6: unable to read RDB block 0 [ 1221.220411][T18737] loop6: unable to read partition table [ 1221.275236][T18737] loop6: partition table beyond EOD, truncated [ 1221.284526][T18737] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1221.754570][T15565] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1222.469972][T18751] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1222.614437][T15565] usb 6-1: Using ep0 maxpacket: 32 [ 1222.670798][T15565] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1222.695017][T15565] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.730770][T15565] usb 6-1: config 0 descriptor?? [ 1222.738883][T15565] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1223.019527][T18758] xt_cgroup: invalid path, errno=-2 [ 1223.374932][T18765] tipc: Failed to remove unknown binding: 66,3,3/0:2810069939/2810069940 [ 1223.877699][T15565] gspca_sq930x: ucbus_write failed -71 [ 1223.896313][T15565] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 1223.931088][T15565] usb 6-1: USB disconnect, device number 54 [ 1226.119252][T18801] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3780'. [ 1226.238160][T18802] xt_cgroup: invalid path, errno=-2 [ 1226.790632][T18817] netlink: 'syz.3.3785': attribute type 7 has an invalid length. [ 1226.799027][T18817] netlink: 'syz.3.3785': attribute type 8 has an invalid length. [ 1226.972725][T18813] tipc: Failed to remove unknown binding: 66,3,3/0:4175400298/4175400299 [ 1227.635780][T18830] overlayfs: missing 'lowerdir' [ 1227.835961][T18835] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1228.153630][T18843] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3794'. [ 1228.172960][T18843] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3794'. [ 1228.294161][ T5907] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1228.504520][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 1228.562319][ T5907] usb 1-1: config 2 has an invalid interface number: 190 but max is 0 [ 1228.607545][ T5907] usb 1-1: config 2 has no interface number 0 [ 1228.674628][ T5907] usb 1-1: config 2 interface 190 has no altsetting 0 [ 1228.707483][ T5907] usb 1-1: language id specifier not provided by device, defaulting to English [ 1228.747678][ T5907] usb 1-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=f7.69 [ 1228.760708][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.771622][ T5907] usb 1-1: Product: syz [ 1228.776166][ T5907] usb 1-1: Manufacturer: 񷟗è [ 1228.781348][ T5907] usb 1-1: SerialNumber: syz [ 1229.430973][T18862] netlink: 'syz.5.3800': attribute type 1 has an invalid length. [ 1229.501018][T18863] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3800'. [ 1229.979045][T18865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3801'. [ 1230.164953][T18869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3802'. [ 1230.174212][T18869] nbd: must specify a size in bytes for the device [ 1230.635256][T18876] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 1230.646894][T18876] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 1230.786443][T18880] loop6: detected capacity change from 0 to 524287487 [ 1230.798825][T18880] Buffer I/O error on dev loop6, logical block 0, async page read [ 1230.812708][T18880] Buffer I/O error on dev loop6, logical block 0, async page read [ 1230.822634][T18880] Buffer I/O error on dev loop6, logical block 0, async page read [ 1230.903395][T18881] loop6: detected capacity change from 524287487 to 0 [ 1230.912896][T18880] Buffer I/O error on dev loop6, logical block 0, async page read [ 1230.923262][T18880] ldm_validate_partition_table(): Disk read failed. [ 1230.937032][T18880] Dev loop6: unable to read RDB block 0 [ 1230.942924][T18880] loop6: unable to read partition table [ 1230.952168][T18880] loop6: partition table beyond EOD, truncated [ 1230.997426][T18880] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1231.583664][ T5907] usb 1-1: USB disconnect, device number 89 [ 1232.953679][T18908] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3814'. [ 1233.964133][T18918] hub 8-0:1.0: USB hub found [ 1233.974951][T18918] hub 8-0:1.0: 1 port detected [ 1234.173966][T18915] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3815'. [ 1234.317020][T11768] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 1234.481942][T18922] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3818'. [ 1234.555956][T11768] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1234.582495][T11768] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.612260][T11768] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1234.638238][T11768] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1234.667319][T11768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.707361][T11768] usb 1-1: config 0 descriptor?? [ 1235.155673][T11768] hid-steam 0003:28DE:1102.002D: unknown main item tag 0x0 [ 1235.183587][T11768] hid-steam 0003:28DE:1102.002D: unknown main item tag 0x0 [ 1235.231106][T11768] hid-steam 0003:28DE:1102.002D: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 1235.326607][T11768] hid-steam 0003:28DE:1102.002D: Steam Controller 'XXXXXXXXXX' connected [ 1235.386228][T11768] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.002D/input/input43 [ 1235.451604][T11768] hid-steam 0003:28DE:1102.002E: unknown main item tag 0x0 [ 1235.478465][T11768] hid-steam 0003:28DE:1102.002E: unknown main item tag 0x0 [ 1235.552422][T11768] hid-steam 0003:28DE:1102.002E: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 1235.956874][T11768] usb 1-1: USB disconnect, device number 90 [ 1236.018620][T11768] hid-steam 0003:28DE:1102.002D: Steam Controller 'XXXXXXXXXX' disconnected [ 1236.695082][T11768] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1236.874248][T11768] usb 1-1: Using ep0 maxpacket: 32 [ 1236.881791][T11768] usb 1-1: config 2 has an invalid interface number: 190 but max is 0 [ 1236.890834][T11768] usb 1-1: config 2 has no interface number 0 [ 1236.897099][T11768] usb 1-1: config 2 interface 190 has no altsetting 0 [ 1236.908872][T11768] usb 1-1: language id specifier not provided by device, defaulting to English [ 1236.920019][T11768] usb 1-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=f7.69 [ 1236.929395][T11768] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.939501][T11768] usb 1-1: Product: syz [ 1236.943753][T11768] usb 1-1: Manufacturer: 񷟗è [ 1236.951722][T11768] usb 1-1: SerialNumber: syz [ 1237.691699][T18956] cgroup: No subsys list or none specified [ 1238.384231][ T5907] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1238.491568][T11768] usb 1-1: USB disconnect, device number 91 [ 1238.564441][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 1238.581164][ T5907] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 1238.606465][ T5907] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1238.624482][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.642933][ T5907] usb 4-1: Product: syz [ 1238.649531][ T5907] usb 4-1: Manufacturer: syz [ 1238.660190][ T5907] usb 4-1: SerialNumber: syz [ 1238.676254][ T5907] usb 4-1: config 0 descriptor?? [ 1238.689025][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.699782][T18968] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1238.746085][ T5907] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1238.896230][T11768] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1238.977470][T18981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3837'. [ 1239.326799][ T5886] usb 4-1: USB disconnect, device number 76 [ 1239.365947][T11768] usb 1-1: Using ep0 maxpacket: 8 [ 1239.377350][T11768] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1239.404169][T11768] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1239.444441][T11768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.480092][T11768] usb 1-1: config 0 descriptor?? [ 1239.922451][T11768] lenovo 0003:17EF:6062.002F: item fetching failed at offset 4/5 [ 1239.944984][T11768] lenovo 0003:17EF:6062.002F: hid_parse failed [ 1239.961437][T11768] lenovo 0003:17EF:6062.002F: probe with driver lenovo failed with error -22 [ 1240.490449][ T5907] usb 1-1: USB disconnect, device number 92 [ 1241.133422][T19004] netfs: Couldn't get user pages (rc=-14) [ 1241.644077][T18997] program syz.5.3841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1241.701376][T19007] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3845'. [ 1241.720570][ T30] kauditd_printk_skb: 146 callbacks suppressed [ 1241.720587][ T30] audit: type=1326 audit(1751303991.554:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19009 comm="syz.2.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908e78e929 code=0x7ffc0000 [ 1241.846274][ T30] audit: type=1326 audit(1751303991.554:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19009 comm="syz.2.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908e78e929 code=0x7ffc0000 [ 1241.873122][ T30] audit: type=1326 audit(1751303991.564:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19009 comm="syz.2.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f908e78e929 code=0x7ffc0000 [ 1241.911115][ T30] audit: type=1326 audit(1751303991.564:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19009 comm="syz.2.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908e78e929 code=0x7ffc0000 [ 1241.954385][ T30] audit: type=1326 audit(1751303991.564:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19009 comm="syz.2.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908e78e929 code=0x7ffc0000 [ 1242.021207][ T30] audit: type=1326 audit(1751303991.564:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19009 comm="syz.2.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f908e78d290 code=0x7ffc0000 [ 1242.057901][ T30] audit: type=1326 audit(1751303991.564:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19009 comm="syz.2.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908e78e929 code=0x7ffc0000 [ 1242.081635][ T30] audit: type=1326 audit(1751303991.564:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19009 comm="syz.2.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908e78e929 code=0x7ffc0000 [ 1242.106078][ T30] audit: type=1326 audit(1751303991.564:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19009 comm="syz.2.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f908e78e929 code=0x7ffc0000 [ 1242.128445][ T30] audit: type=1326 audit(1751303991.564:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19009 comm="syz.2.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908e78e929 code=0x7ffc0000 [ 1242.313872][T19024] sp0: Synchronizing with TNC [ 1245.275472][T19083] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1246.473526][T19102] fuse: Unknown parameter '' [ 1246.716044][T19110] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3871'. [ 1246.744312][ T9] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1247.454523][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1247.467910][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1247.492475][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.512905][T19118] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1247.526304][ T9] usb 4-1: Product: syz [ 1247.530499][ T9] usb 4-1: Manufacturer: syz [ 1247.554596][ T9] usb 4-1: SerialNumber: syz [ 1247.681423][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1247.699297][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 1247.795900][T19121] netfs: Couldn't get user pages (rc=-14) [ 1248.439689][T11768] r8152-cfgselector 4-1: USB disconnect, device number 77 [ 1249.109564][T19137] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1249.139143][T19138] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3882'. [ 1249.523222][T19150] syz.0.3886: attempt to access beyond end of device [ 1249.523222][T19150] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1249.564436][ T5908] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1249.703123][T19150] (syz.0.3886,19150,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 1249.704167][ T5908] usb 4-1: device descriptor read/64, error -71 [ 1249.717417][T19150] (syz.0.3886,19150,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 1249.726636][T19150] (syz.0.3886,19150,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1249.901999][T19150] (syz.0.3886,19150,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 1250.116928][T19164] netfs: Couldn't get user pages (rc=-14) [ 1250.404250][ T5908] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1250.626229][ T5908] usb 4-1: device descriptor read/64, error -71 [ 1250.647330][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1250.647342][ T30] audit: type=1326 audit(1751304000.484:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908e78e929 code=0x7ffc0000 [ 1250.789204][ T30] audit: type=1326 audit(1751304000.574:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908e78e929 code=0x7ffc0000 [ 1250.854475][ T5908] usb usb4-port1: attempt power cycle [ 1250.874367][ T30] audit: type=1326 audit(1751304000.574:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f908e78d290 code=0x7ffc0000 [ 1250.919116][T19174] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1251.702293][T19175] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1251.714267][ T30] audit: type=1326 audit(1751304000.574:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908e78e929 code=0x7ffc0000 [ 1251.737107][ T30] audit: type=1326 audit(1751304000.574:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908e78e929 code=0x7ffc0000 [ 1251.764258][ T30] audit: type=1326 audit(1751304000.584:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f908e78e929 code=0x7ffc0000 [ 1251.830928][ T30] audit: type=1326 audit(1751304000.584:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908e78e929 code=0x7ffc0000 [ 1251.984683][ T30] audit: type=1326 audit(1751304000.584:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908e78e929 code=0x7ffc0000 [ 1252.031550][ T30] audit: type=1326 audit(1751304000.584:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f908e78e929 code=0x7ffc0000 [ 1252.034182][ T5908] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1252.058471][ T30] audit: type=1326 audit(1751304000.584:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908e78e929 code=0x7ffc0000 [ 1252.766703][ T5908] usb 4-1: device descriptor read/8, error -71 [ 1252.881481][T19199] loop7: detected capacity change from 0 to 524255232 [ 1253.314111][ T5919] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1253.384940][T19211] netfs: Couldn't get user pages (rc=-14) [ 1253.856293][T13210] Bluetooth: hci0: command 0x0406 tx timeout [ 1254.014211][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 1254.026066][ T5919] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1254.113612][T19213] veth1_macvtap: left promiscuous mode [ 1254.146413][ T5919] usb 2-1: config 0 has no interface number 0 [ 1254.214184][ T5919] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1254.493328][ T5919] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.1d [ 1254.657912][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.677265][ T5919] usb 2-1: Product: syz [ 1254.681485][ T5919] usb 2-1: Manufacturer: syz [ 1254.694098][ T5919] usb 2-1: SerialNumber: syz [ 1254.716561][ T5919] usb 2-1: config 0 descriptor?? [ 1254.777817][T19222] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1254.914185][ T5908] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1254.918919][T19226] loop6: detected capacity change from 0 to 524287487 [ 1254.931602][ T5919] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 1254.940848][T19226] Buffer I/O error on dev loop6, logical block 0, async page read [ 1254.959121][T19226] Buffer I/O error on dev loop6, logical block 0, async page read [ 1254.975081][T19226] Buffer I/O error on dev loop6, logical block 0, async page read [ 1254.984318][T19226] Buffer I/O error on dev loop6, logical block 0, async page read [ 1254.992270][T19226] Buffer I/O error on dev loop6, logical block 0, async page read [ 1255.014391][T19227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3911'. [ 1255.044237][T19229] loop6: detected capacity change from 524287487 to 0 [ 1255.051437][T19226] Buffer I/O error on dev loop6, logical block 0, async page read [ 1255.065334][T19226] ldm_validate_partition_table(): Disk read failed. [ 1255.072978][T19226] Dev loop6: unable to read RDB block 0 [ 1255.080443][T19226] loop6: unable to read partition table [ 1255.152124][ T5908] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1255.175091][T11768] usb 2-1: USB disconnect, device number 113 [ 1255.270728][ T5908] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1255.285644][T19226] loop6: partition table beyond EOD, truncated [ 1255.334472][T19226] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1255.444128][ T5908] usb 1-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40 [ 1255.508713][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.581952][ T5908] usb 1-1: Product: syz [ 1255.594214][ T5908] usb 1-1: Manufacturer: syz [ 1255.600667][ T5908] usb 1-1: SerialNumber: syz [ 1255.768674][T19235] syz.5.3914: attempt to access beyond end of device [ 1255.768674][T19235] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1255.782430][T19235] syz.5.3914: attempt to access beyond end of device [ 1255.782430][T19235] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1255.801943][T19235] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1255.828944][T19220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.832831][T19235] syz.5.3914: attempt to access beyond end of device [ 1255.832831][T19235] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1255.859512][T19220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.859851][T19235] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1255.877174][T19220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.877558][T19220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.901367][T19235] syz.5.3914: attempt to access beyond end of device [ 1255.901367][T19235] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1255.918591][T19235] syz.5.3914: attempt to access beyond end of device [ 1255.918591][T19235] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1256.595606][T19235] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1256.606586][T19235] syz.5.3914: attempt to access beyond end of device [ 1256.606586][T19235] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1256.620773][T19235] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1256.634109][T19235] syz.5.3914: attempt to access beyond end of device [ 1256.634109][T19235] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1256.651230][T19235] syz.5.3914: attempt to access beyond end of device [ 1256.651230][T19235] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1256.667690][T19235] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1256.681217][T19235] syz.5.3914: attempt to access beyond end of device [ 1256.681217][T19235] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1256.694886][T19235] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1256.715160][T19235] syz.5.3914: attempt to access beyond end of device [ 1256.715160][T19235] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1256.730714][T19235] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1256.743192][T19235] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1257.140702][T19235] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1257.282133][T19248] netlink: 264 bytes leftover after parsing attributes in process `syz.1.3917'. [ 1257.401579][T19250] loop6: detected capacity change from 0 to 524287487 [ 1257.421854][T19250] Buffer I/O error on dev loop6, logical block 0, async page read [ 1257.437523][T19250] Buffer I/O error on dev loop6, logical block 0, async page read [ 1257.451173][T19250] Buffer I/O error on dev loop6, logical block 0, async page read [ 1257.794139][ T5908] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input44 [ 1257.821448][ T5908] usb 1-1: USB disconnect, device number 93 [ 1257.825193][ T5175] bcm5974 1-1:1.0: could not read from device [ 1257.861901][T19251] loop6: detected capacity change from 524287487 to 0 [ 1257.869501][T19250] Buffer I/O error on dev loop6, logical block 0, async page read [ 1257.884322][T19250] ldm_validate_partition_table(): Disk read failed. [ 1257.891953][T19250] Dev loop6: unable to read RDB block 0 [ 1257.899587][T19250] loop6: unable to read partition table [ 1257.914155][T19250] loop6: partition table beyond EOD, truncated [ 1257.920471][T19250] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1258.541747][T19260] netfs: Couldn't get user pages (rc=-14) [ 1259.424312][T11768] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1259.438472][T19273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3924'. [ 1259.534155][ T24] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1259.584388][T11768] usb 6-1: Using ep0 maxpacket: 32 [ 1259.590990][T11768] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.602092][T11768] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1259.611871][T11768] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1259.635753][T11768] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1259.645085][T11768] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1259.653495][T11768] usb 6-1: Product: syz [ 1259.659408][T11768] usb 6-1: Manufacturer: syz [ 1259.664197][T11768] usb 6-1: SerialNumber: syz [ 1259.680932][T11768] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input45 [ 1259.707664][ T24] usb 4-1: config 0 has no interfaces? [ 1259.745614][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1259.764120][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.764229][ T5886] usb 1-1: new low-speed USB device number 94 using dummy_hcd [ 1259.772755][ T24] usb 4-1: Product: syz [ 1259.821551][ T24] usb 4-1: Manufacturer: syz [ 1259.839893][ T24] usb 4-1: SerialNumber: syz [ 1259.862879][ T24] usb 4-1: config 0 descriptor?? [ 1259.934150][ T5886] usb 1-1: device descriptor read/64, error -71 [ 1260.136045][T19268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.148090][T19268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.164990][T19268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.178186][T19268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.212675][ T5886] usb 1-1: new low-speed USB device number 95 using dummy_hcd [ 1260.326649][T11768] usb 4-1: USB disconnect, device number 82 [ 1260.354135][ T5886] usb 1-1: device descriptor read/64, error -71 [ 1260.427478][ T9] usb 6-1: USB disconnect, device number 55 [ 1260.464495][ T9] appletouch 6-1:1.0: input: appletouch disconnected [ 1260.471950][ T5886] usb usb1-port1: attempt power cycle [ 1260.844393][ T5886] usb 1-1: new low-speed USB device number 96 using dummy_hcd [ 1260.885018][ T5886] usb 1-1: device descriptor read/8, error -71 [ 1261.138528][ T5886] usb 1-1: new low-speed USB device number 97 using dummy_hcd [ 1261.184874][ T5886] usb 1-1: device descriptor read/8, error -71 [ 1261.305403][ T5886] usb usb1-port1: unable to enumerate USB device [ 1261.401310][T19313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3934'. [ 1261.413397][T19313] netfs: Couldn't get user pages (rc=-14) [ 1262.440882][T19321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3940'. [ 1264.245414][ T24] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1264.540228][ T24] usb 1-1: device descriptor read/64, error -71 [ 1264.936315][ T24] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1265.144395][ T24] usb 1-1: device descriptor read/64, error -71 [ 1265.266725][ T24] usb usb1-port1: attempt power cycle [ 1265.406217][T19348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3949'. [ 1265.519834][T19349] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1265.692069][ T24] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1265.829276][T19362] syz_tun: entered allmulticast mode [ 1265.837042][ T24] usb 1-1: device descriptor read/8, error -71 [ 1265.893037][T19357] syz_tun: left allmulticast mode [ 1265.941995][T19364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3951'. [ 1265.956020][T19364] netfs: Couldn't get user pages (rc=-14) [ 1266.116130][ T24] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1266.170156][ T24] usb 1-1: device descriptor read/8, error -71 [ 1266.386383][ T24] usb usb1-port1: unable to enumerate USB device [ 1268.471659][T19395] loop6: detected capacity change from 0 to 524287487 [ 1268.565023][T19398] loop6: detected capacity change from 524287487 to 0 [ 1268.596035][T19395] Buffer I/O error on dev loop6, logical block 0, async page read [ 1268.612700][T19395] ldm_validate_partition_table(): Disk read failed. [ 1268.619735][T19395] Dev loop6: unable to read RDB block 0 [ 1268.628905][T19395] loop6: unable to read partition table [ 1268.703147][T19395] loop6: partition table beyond EOD, truncated [ 1268.710125][T19395] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1268.852703][T19406] vlan3: entered allmulticast mode [ 1268.858060][T19406] vlan1: entered allmulticast mode [ 1268.863240][T19406] veth0_vlan: entered allmulticast mode [ 1269.315995][ T43] usb 2-1: new low-speed USB device number 114 using dummy_hcd [ 1269.646009][T19407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3964'. [ 1269.895085][ T43] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1269.968213][ T43] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 1270.048243][ T43] usb 2-1: config 0 has no interface number 0 [ 1270.059435][ T43] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1270.073728][ T43] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1270.097131][ T43] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1270.110729][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.128371][ T43] usb 2-1: config 0 descriptor?? [ 1270.541463][T19415] netfs: Couldn't get user pages (rc=-14) [ 1270.915915][ T5907] kernel read not supported for file /dsp (pid: 5907 comm: kworker/1:5) [ 1271.010364][ T43] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input47 [ 1271.096512][ T43] input: failed to attach handler kbd to device input47, error: -5 [ 1271.334423][ T5919] usb 2-1: USB disconnect, device number 114 [ 1274.267905][T13210] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1274.791552][T19455] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3978'. [ 1274.810436][T19455] netfs: Couldn't get user pages (rc=-14) [ 1274.984807][T19456] loop6: detected capacity change from 0 to 524287487 [ 1274.991947][T19456] Buffer I/O error on dev loop6, logical block 0, async page read [ 1275.000617][T19456] Buffer I/O error on dev loop6, logical block 0, async page read [ 1275.009515][T19456] Buffer I/O error on dev loop6, logical block 0, async page read [ 1275.514728][T19460] overlayfs: failed to clone upperpath [ 1276.024901][T19462] loop6: detected capacity change from 524287487 to 0 [ 1276.031845][T19456] Buffer I/O error on dev loop6, logical block 0, async page read [ 1276.041515][T19456] ldm_validate_partition_table(): Disk read failed. [ 1276.063329][T19456] Dev loop6: unable to read RDB block 0 [ 1276.282243][T19456] loop6: unable to read partition table [ 1276.848185][T19456] loop6: partition table beyond EOD, truncated [ 1276.870164][T19456] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1278.628119][T19504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3991'. [ 1278.642316][T19504] netfs: Couldn't get user pages (rc=-14) [ 1279.213086][T19509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3995'. [ 1279.234692][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3995'. [ 1279.244581][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3995'. [ 1279.264269][ T5907] IPVS: starting estimator thread 0... [ 1279.505058][T19510] IPVS: using max 25 ests per chain, 60000 per kthread [ 1279.892442][T19513] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 1279.901516][T19513] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 1279.947021][T19517] loop6: detected capacity change from 0 to 524287487 [ 1280.247305][T19520] loop6: detected capacity change from 524287487 to 0 [ 1280.256425][T19517] Buffer I/O error on dev loop6, logical block 0, async page read [ 1280.307427][T19517] ldm_validate_partition_table(): Disk read failed. [ 1280.308787][T19523] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 1280.332328][T19517] Dev loop6: unable to read RDB block 0 [ 1280.338052][T19517] loop6: unable to read partition table [ 1280.477727][T19517] loop6: partition table beyond EOD, truncated [ 1280.491471][T19517] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 1282.063126][T19543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4006'. [ 1282.072343][T19543] nbd: must specify a size in bytes for the device [ 1282.147087][T19557] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4007'. [ 1282.161015][T19557] netfs: Couldn't get user pages (rc=-14) [ 1282.906979][T19560] sp0: Synchronizing with TNC [ 1283.134742][T11768] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1283.314185][T11768] usb 2-1: device descriptor read/64, error -71 [ 1283.317324][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4014'. [ 1283.353714][T19566] loop6: detected capacity change from 0 to 524287487 [ 1283.383434][T19566] Buffer I/O error on dev loop6, logical block 0, async page read [ 1283.399341][T19566] Buffer I/O error on dev loop6, logical block 0, async page read [ 1283.421767][T19566] Buffer I/O error on dev loop6, logical block 0, async page read [ 1283.433428][T19572] afs: Unknown parameter '' [ 1283.442291][T19566] Buffer I/O error on dev loop6, logical block 0, async page read [ 1283.459992][T19566] Buffer I/O error on dev loop6, logical block 0, async page read [ 1283.469175][T19566] Buffer I/O error on dev loop6, logical block 0, async page read [ 1283.481736][T19566] Buffer I/O error on dev loop6, logical block 0, async page read [ 1283.493132][T19566] Buffer I/O error on dev loop6, logical block 0, async page read [ 1283.506915][T19566] ldm_validate_partition_table(): Disk read failed. [ 1283.522861][T19566] Buffer I/O error on dev loop6, logical block 0, async page read [ 1283.526153][T19573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1283.535818][T19566] Dev loop6: unable to read RDB block 0 [ 1283.551608][ T5919] IPVS: starting estimator thread 0... [ 1283.555676][T19566] loop6: unable to read partition table [ 1283.570049][T19566] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1283.590863][T11768] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1283.654215][T19574] IPVS: using max 32 ests per chain, 76800 per kthread [ 1284.429294][T11768] usb 2-1: device descriptor read/64, error -71 [ 1284.576802][T11768] usb usb2-port1: attempt power cycle [ 1285.528991][T11768] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1285.604837][T11768] usb 2-1: device descriptor read/8, error -71 [ 1286.104147][T11768] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1286.285925][T19607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4024'. [ 1286.295142][T19607] nbd: must specify a size in bytes for the device [ 1286.576756][T11768] usb 2-1: Using ep0 maxpacket: 16 [ 1286.591185][T11768] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.602276][T11768] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.613094][T19602] Can't find ip_set type [ 1286.785847][T11768] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1286.847345][T11768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.907968][T11768] usb 2-1: config 0 descriptor?? [ 1287.594258][T11768] hid (null): invalid report_size 43952 [ 1287.614336][ T5907] syzkaller1: tun_net_xmit 90 [ 1287.621858][T19619] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1287.638065][T11768] wacom 0003:056A:0084.0030: reserved main item tag 0xd [ 1287.659214][T11768] wacom 0003:056A:0084.0030: invalid report_size 43952 [ 1287.677784][T19619] syzkaller1: Linktype set failed because interface is up [ 1287.691535][T11768] wacom 0003:056A:0084.0030: item 0 2 1 7 parsing failed [ 1287.708118][T11768] wacom 0003:056A:0084.0030: parse failed [ 1287.734384][T11768] wacom 0003:056A:0084.0030: probe with driver wacom failed with error -22 [ 1289.041632][T19642] fuse: Bad value for 'group_id' [ 1289.060228][T19642] fuse: Bad value for 'group_id' [ 1289.109127][ T24] usb 2-1: USB disconnect, device number 118 [ 1289.741420][T19661] netfs: Couldn't get user pages (rc=-14) [ 1290.143454][T19660] Can't find ip_set type [ 1291.311263][T19667] tipc: Failed to remove unknown binding: 66,3,3/0:1178580820/1178580821 [ 1291.471551][T19679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4045'. [ 1291.545173][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4046'. [ 1291.594775][T19682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4046'. [ 1293.044395][T19698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4050'. [ 1293.058568][T19698] nbd: must specify a size in bytes for the device [ 1293.455949][T19711] netfs: Couldn't get user pages (rc=-14) [ 1293.959257][T19713] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1293.971624][T19710] Can't find ip_set type [ 1295.308849][T19731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4058'. [ 1295.318808][T19731] nbd: must specify a size in bytes for the device [ 1295.613831][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1295.620156][ T30] audit: type=1326 audit(1751304045.444:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19735 comm="syz.5.4061" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb1bf8e929 code=0x0 [ 1295.680747][T19739] SET target dimension over the limit! [ 1295.796770][T19742] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1295.874778][T19746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4063'. [ 1297.037723][T19755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4066'. [ 1297.048494][T19755] nbd: must specify a size in bytes for the device [ 1298.373406][T19772] loop6: detected capacity change from 0 to 524287487 [ 1298.407118][T19772] buffer_io_error: 7 callbacks suppressed [ 1298.407136][T19772] Buffer I/O error on dev loop6, logical block 0, async page read [ 1298.804771][T19772] Buffer I/O error on dev loop6, logical block 0, async page read [ 1298.823901][T19772] Buffer I/O error on dev loop6, logical block 0, async page read [ 1298.832320][T19772] Buffer I/O error on dev loop6, logical block 0, async page read [ 1298.851233][T19772] Buffer I/O error on dev loop6, logical block 0, async page read [ 1298.867808][T19772] Buffer I/O error on dev loop6, logical block 0, async page read [ 1298.879023][T19772] Buffer I/O error on dev loop6, logical block 0, async page read [ 1298.890364][T19772] Buffer I/O error on dev loop6, logical block 0, async page read [ 1298.904611][T19772] ldm_validate_partition_table(): Disk read failed. [ 1298.923164][T19772] Buffer I/O error on dev loop6, logical block 0, async page read [ 1298.953169][T19772] Buffer I/O error on dev loop6, logical block 0, async page read [ 1298.997493][T19772] Dev loop6: unable to read RDB block 0 [ 1299.039866][T19772] loop6: unable to read partition table [ 1299.061243][T19772] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1299.447380][T19776] delete_channel: no stack [ 1299.690553][T19785] FAULT_INJECTION: forcing a failure. [ 1299.690553][T19785] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.729367][T19785] CPU: 1 UID: 0 PID: 19785 Comm: syz.1.4068 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1299.729394][T19785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1299.729405][T19785] Call Trace: [ 1299.729413][T19785] [ 1299.729422][T19785] dump_stack_lvl+0x189/0x250 [ 1299.729452][T19785] ? __pfx____ratelimit+0x10/0x10 [ 1299.729475][T19785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1299.729498][T19785] ? __pfx__printk+0x10/0x10 [ 1299.729522][T19785] ? __pfx___might_resched+0x10/0x10 [ 1299.729545][T19785] ? fs_reclaim_acquire+0x7d/0x100 [ 1299.729572][T19785] should_fail_ex+0x414/0x560 [ 1299.729597][T19785] should_failslab+0xa8/0x100 [ 1299.729620][T19785] __kmalloc_noprof+0xcb/0x4f0 [ 1299.729639][T19785] ? kfree+0x4d/0x440 [ 1299.729654][T19785] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1299.729683][T19785] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1299.729707][T19785] ? tomoyo_domain+0xda/0x130 [ 1299.729735][T19785] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1299.729756][T19785] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1299.729779][T19785] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1299.729817][T19785] ? __lock_acquire+0xab9/0xd20 [ 1299.729870][T19785] ? __fget_files+0x2a/0x420 [ 1299.729894][T19785] ? __fget_files+0x2a/0x420 [ 1299.729914][T19785] ? __fget_files+0x3a0/0x420 [ 1299.729933][T19785] ? __fget_files+0x2a/0x420 [ 1299.729959][T19785] security_file_ioctl+0xcb/0x2d0 [ 1299.729982][T19785] __se_sys_ioctl+0x47/0x170 [ 1299.730004][T19785] do_syscall_64+0xfa/0x3b0 [ 1299.730026][T19785] ? lockdep_hardirqs_on+0x9c/0x150 [ 1299.730047][T19785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.730065][T19785] ? clear_bhb_loop+0x60/0xb0 [ 1299.730087][T19785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.730103][T19785] RIP: 0033:0x7fe4c758e929 [ 1299.730121][T19785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1299.730136][T19785] RSP: 002b:00007fe4c53f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1299.730156][T19785] RAX: ffffffffffffffda RBX: 00007fe4c77b6160 RCX: 00007fe4c758e929 [ 1299.730170][T19785] RDX: 0000200000000200 RSI: 00000000c048aeca RDI: 000000000000000b [ 1299.730182][T19785] RBP: 00007fe4c53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1299.730194][T19785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1299.730205][T19785] R13: 0000000000000000 R14: 00007fe4c77b6160 R15: 00007ffcc8e93f58 [ 1299.730235][T19785] [ 1299.731900][T19785] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1300.137163][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1302.210511][T19802] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1302.221654][T19802] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1302.231075][T19802] FAULT_INJECTION: forcing a failure. [ 1302.231075][T19802] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.244197][T19802] CPU: 0 UID: 0 PID: 19802 Comm: syz.5.4078 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1302.244218][T19802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1302.244228][T19802] Call Trace: [ 1302.244235][T19802] [ 1302.244242][T19802] dump_stack_lvl+0x189/0x250 [ 1302.244271][T19802] ? __pfx____ratelimit+0x10/0x10 [ 1302.244295][T19802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1302.244331][T19802] ? __pfx__printk+0x10/0x10 [ 1302.244350][T19802] ? __pfx___might_resched+0x10/0x10 [ 1302.244369][T19802] ? fs_reclaim_acquire+0x7d/0x100 [ 1302.244395][T19802] should_fail_ex+0x414/0x560 [ 1302.244419][T19802] should_failslab+0xa8/0x100 [ 1302.244439][T19802] __kmalloc_noprof+0xcb/0x4f0 [ 1302.244452][T19802] ? kfree+0x4d/0x440 [ 1302.244461][T19802] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1302.244479][T19802] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1302.244501][T19802] tomoyo_check_open_permission+0x1c1/0x3b0 [ 1302.244512][T19802] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1302.244524][T19802] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 1302.244535][T19802] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1302.244546][T19802] ? ovl_iterate+0xdbd/0x1f40 [ 1302.244585][T19802] ? tomoyo_file_open+0x166/0x220 [ 1302.244602][T19802] security_file_open+0xb1/0x270 [ 1302.244616][T19802] do_dentry_open+0x35e/0x1970 [ 1302.244640][T19802] vfs_open+0x3b/0x340 [ 1302.244655][T19802] dentry_open+0x61/0xa0 [ 1302.244669][T19802] ovl_dir_read+0x85/0x5f0 [ 1302.244687][T19802] ? __pfx_ovl_dir_read+0x10/0x10 [ 1302.244698][T19802] ? ovl_path_upper+0x105/0x170 [ 1302.244711][T19802] ? ovl_path_next+0x23c/0x470 [ 1302.244724][T19802] ovl_dir_read_merged+0x286/0x360 [ 1302.244739][T19802] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 1302.244752][T19802] ? __pfx_ovl_fill_merge+0x10/0x10 [ 1302.244771][T19802] ? __kasan_kmalloc+0x93/0xb0 [ 1302.244784][T19802] ? ovl_iterate+0xcf6/0x1f40 [ 1302.244799][T19802] ovl_iterate+0xdbd/0x1f40 [ 1302.244819][T19802] ? register_lock_class+0x51/0x320 [ 1302.244834][T19802] ? __pfx_ovl_iterate+0x10/0x10 [ 1302.244846][T19802] ? __lock_acquire+0xab9/0xd20 [ 1302.244866][T19802] ? __lock_acquire+0xab9/0xd20 [ 1302.244884][T19802] ? wrap_directory_iterator+0x5a/0xe0 [ 1302.244904][T19802] ? down_write+0x162/0x1f0 [ 1302.244913][T19802] ? __pfx_down_write+0x10/0x10 [ 1302.244926][T19802] ? __pfx_ovl_iterate+0x10/0x10 [ 1302.244940][T19802] wrap_directory_iterator+0x96/0xe0 [ 1302.244953][T19802] iterate_dir+0x5af/0x770 [ 1302.244967][T19802] __se_sys_getdents+0xe4/0x250 [ 1302.244980][T19802] ? __pfx___se_sys_getdents+0x10/0x10 [ 1302.244989][T19802] ? ksys_write+0x22a/0x250 [ 1302.244999][T19802] ? __pfx_filldir+0x10/0x10 [ 1302.245011][T19802] ? __pfx_ksys_write+0x10/0x10 [ 1302.245020][T19802] ? rcu_is_watching+0x15/0xb0 [ 1302.245038][T19802] ? do_syscall_64+0xbe/0x3b0 [ 1302.245054][T19802] do_syscall_64+0xfa/0x3b0 [ 1302.245068][T19802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.245077][T19802] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1302.245087][T19802] ? clear_bhb_loop+0x60/0xb0 [ 1302.245099][T19802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.245109][T19802] RIP: 0033:0x7fdb1bf8e929 [ 1302.245120][T19802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1302.245129][T19802] RSP: 002b:00007fdb1ce74038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 1302.245141][T19802] RAX: ffffffffffffffda RBX: 00007fdb1c1b6160 RCX: 00007fdb1bf8e929 [ 1302.245149][T19802] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000009 [ 1302.245155][T19802] RBP: 00007fdb1ce74090 R08: 0000000000000000 R09: 0000000000000000 [ 1302.245162][T19802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1302.245168][T19802] R13: 0000000000000000 R14: 00007fdb1c1b6160 R15: 00007fff96d75288 [ 1302.245184][T19802] [ 1302.245190][T19802] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1303.524090][ T43] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1303.902805][ T43] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1304.153168][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.242670][ T43] usb 6-1: Product: syz [ 1304.274821][ T43] usb 6-1: Manufacturer: syz [ 1304.297895][ T43] usb 6-1: SerialNumber: syz [ 1304.335305][ T43] usb 6-1: config 0 descriptor?? [ 1304.554344][ T24] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1304.946293][ T43] usb 6-1: Firmware version (0.0) predates our first public release. [ 1304.957744][ T43] usb 6-1: Please update to version 0.2 or newer [ 1305.018691][ T43] usb 6-1: USB disconnect, device number 56 [ 1305.109643][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1305.125609][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1305.220455][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1305.240879][ T24] usb 1-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 1305.264140][ T24] usb 1-1: Manufacturer: syz [ 1305.289610][ T24] usb 1-1: config 0 descriptor?? [ 1305.329953][ T24] hub 1-1:0.0: USB hub found [ 1305.572685][T19836] sp0: Synchronizing with TNC [ 1306.757542][T19839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1307.397514][T19843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4088'. [ 1307.831019][ T24] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1308.714995][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 1308.721757][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1308.871080][ T24] usb 1-1: USB disconnect, device number 102 [ 1309.266033][T19862] FAULT_INJECTION: forcing a failure. [ 1309.266033][T19862] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.282348][T19862] CPU: 0 UID: 0 PID: 19862 Comm: syz.0.4094 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1309.282374][T19862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1309.282385][T19862] Call Trace: [ 1309.282394][T19862] [ 1309.282402][T19862] dump_stack_lvl+0x189/0x250 [ 1309.282430][T19862] ? __pfx____ratelimit+0x10/0x10 [ 1309.282453][T19862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1309.282475][T19862] ? __pfx__printk+0x10/0x10 [ 1309.282499][T19862] ? __pfx___might_resched+0x10/0x10 [ 1309.282520][T19862] ? fs_reclaim_acquire+0x7d/0x100 [ 1309.282546][T19862] should_fail_ex+0x414/0x560 [ 1309.282571][T19862] should_failslab+0xa8/0x100 [ 1309.282601][T19862] __kmalloc_noprof+0xcb/0x4f0 [ 1309.282619][T19862] ? kfree+0x4d/0x440 [ 1309.282635][T19862] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1309.282660][T19862] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1309.282684][T19862] ? tomoyo_domain+0xda/0x130 [ 1309.282713][T19862] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1309.282732][T19862] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1309.282755][T19862] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1309.282779][T19862] ? sb_end_write+0xe9/0x1c0 [ 1309.282803][T19862] ? vfs_write+0x8d8/0xa90 [ 1309.282858][T19862] ? ksys_write+0x1e1/0x250 [ 1309.282883][T19862] security_file_ioctl+0xcb/0x2d0 [ 1309.282905][T19862] __se_sys_ioctl+0x47/0x170 [ 1309.282926][T19862] do_syscall_64+0xfa/0x3b0 [ 1309.282948][T19862] ? lockdep_hardirqs_on+0x9c/0x150 [ 1309.282968][T19862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.282986][T19862] ? clear_bhb_loop+0x60/0xb0 [ 1309.283008][T19862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.283024][T19862] RIP: 0033:0x7fb91218e929 [ 1309.283041][T19862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1309.283056][T19862] RSP: 002b:00007fb91304c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1309.283075][T19862] RAX: ffffffffffffffda RBX: 00007fb9123b5fa0 RCX: 00007fb91218e929 [ 1309.283087][T19862] RDX: 0000200000000240 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1309.283099][T19862] RBP: 00007fb91304c090 R08: 0000000000000000 R09: 0000000000000000 [ 1309.283109][T19862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1309.283120][T19862] R13: 0000000000000000 R14: 00007fb9123b5fa0 R15: 00007ffd514e3068 [ 1309.283147][T19862] [ 1309.283176][T19862] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1309.949754][T19876] FAULT_INJECTION: forcing a failure. [ 1309.949754][T19876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1309.964116][T19876] CPU: 0 UID: 0 PID: 19876 Comm: syz.1.4097 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1309.964140][T19876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1309.964150][T19876] Call Trace: [ 1309.964158][T19876] [ 1309.964167][T19876] dump_stack_lvl+0x189/0x250 [ 1309.964194][T19876] ? __pfx____ratelimit+0x10/0x10 [ 1309.964217][T19876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1309.964235][T19876] ? __pfx__printk+0x10/0x10 [ 1309.964245][T19876] ? __might_fault+0xb0/0x130 [ 1309.964263][T19876] should_fail_ex+0x414/0x560 [ 1309.964277][T19876] _copy_from_user+0x2d/0xb0 [ 1309.964292][T19876] generic_map_update_batch+0x572/0x7f0 [ 1309.964309][T19876] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1309.964324][T19876] ? __fget_files+0x2a/0x420 [ 1309.964341][T19876] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1309.964356][T19876] bpf_map_do_batch+0x36c/0x5f0 [ 1309.964372][T19876] __sys_bpf+0x384/0x860 [ 1309.964384][T19876] ? __pfx___sys_bpf+0x10/0x10 [ 1309.964395][T19876] ? preempt_schedule_irq+0xde/0x150 [ 1309.964424][T19876] __x64_sys_bpf+0x7c/0x90 [ 1309.964435][T19876] do_syscall_64+0xfa/0x3b0 [ 1309.964449][T19876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.964459][T19876] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1309.964469][T19876] ? clear_bhb_loop+0x60/0xb0 [ 1309.964480][T19876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.964490][T19876] RIP: 0033:0x7fe4c758e929 [ 1309.964500][T19876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1309.964509][T19876] RSP: 002b:00007fe4c53f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1309.964521][T19876] RAX: ffffffffffffffda RBX: 00007fe4c77b6160 RCX: 00007fe4c758e929 [ 1309.964530][T19876] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1309.964537][T19876] RBP: 00007fe4c53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1309.964543][T19876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1309.964549][T19876] R13: 0000000000000000 R14: 00007fe4c77b6160 R15: 00007ffcc8e93f58 [ 1309.964565][T19876] [ 1310.714698][ T5907] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1310.774236][ T24] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 1310.876328][T19887] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4102'. [ 1310.965024][ T5907] usb 1-1: device descriptor read/64, error -71 [ 1310.987297][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1311.018454][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.047767][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1311.064984][ T24] usb 2-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 1311.084089][ T24] usb 2-1: Manufacturer: syz [ 1311.102173][ T24] usb 2-1: config 0 descriptor?? [ 1311.115318][ T24] hub 2-1:0.0: USB hub found [ 1311.204252][ T5907] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1311.647329][T19896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1312.484154][ T5907] usb 1-1: device descriptor read/64, error -71 [ 1312.599346][ T5907] usb usb1-port1: attempt power cycle [ 1313.045311][ T5886] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1313.084099][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1313.390403][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1313.400262][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1313.637025][ T24] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1313.671240][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1313.770450][T19908] ceph: No mds server is up or the cluster is laggy [ 1313.777531][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1313.788474][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 1313.795997][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1313.917375][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1313.935939][ T24] usb 2-1: USB disconnect, device number 119 [ 1313.943270][ T5886] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1314.153371][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.162266][ T9] usb 6-1: config 1 interface 0 has no altsetting 1 [ 1314.198134][ T5886] usb 4-1: Product: syz [ 1314.241182][ T5886] usb 4-1: Manufacturer: syz [ 1314.256269][ T9] usb 6-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40 [ 1314.289614][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.297797][ T5886] usb 4-1: SerialNumber: syz [ 1314.415928][ T9] usb 6-1: Product: syz [ 1314.420921][ T5886] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1314.431825][ T9] usb 6-1: Manufacturer: syz [ 1314.436536][ T9] usb 6-1: SerialNumber: syz [ 1314.463040][T11768] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1314.722129][T19900] 9pnet_fd: Insufficient options for proto=fd [ 1315.095533][ T9] usb 6-1: USB disconnect, device number 57 [ 1315.344208][ T5907] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1315.485071][T11768] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1315.503037][T11768] ath9k_htc: Failed to initialize the device [ 1315.520634][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.542389][T11768] usb 4-1: ath9k_htc: USB layer deinitialized [ 1315.552000][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.599989][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1315.629355][ T5907] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1315.667249][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.702313][ T5907] usb 2-1: config 0 descriptor?? [ 1315.914424][T15565] usb 4-1: USB disconnect, device number 83 [ 1315.932489][T19934] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4115'. [ 1315.986827][T19936] tmpfs: Bad value for 'mpol' [ 1316.096858][T19939] FAULT_INJECTION: forcing a failure. [ 1316.096858][T19939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1316.123537][T19939] CPU: 0 UID: 0 PID: 19939 Comm: syz.0.4117 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1316.123565][T19939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1316.123576][T19939] Call Trace: [ 1316.123585][T19939] [ 1316.123594][T19939] dump_stack_lvl+0x189/0x250 [ 1316.123622][T19939] ? __pfx____ratelimit+0x10/0x10 [ 1316.123645][T19939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1316.123668][T19939] ? __pfx__printk+0x10/0x10 [ 1316.123686][T19939] ? __might_fault+0xb0/0x130 [ 1316.123718][T19939] should_fail_ex+0x414/0x560 [ 1316.123743][T19939] _copy_from_user+0x2d/0xb0 [ 1316.123768][T19939] __sys_bpf+0x1ed/0x860 [ 1316.123791][T19939] ? __pfx___sys_bpf+0x10/0x10 [ 1316.123824][T19939] ? ksys_write+0x22a/0x250 [ 1316.123847][T19939] ? __pfx_ksys_write+0x10/0x10 [ 1316.123863][T19939] ? rcu_is_watching+0x15/0xb0 [ 1316.123900][T19939] __x64_sys_bpf+0x7c/0x90 [ 1316.123921][T19939] do_syscall_64+0xfa/0x3b0 [ 1316.123944][T19939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.123960][T19939] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1316.123977][T19939] ? clear_bhb_loop+0x60/0xb0 [ 1316.124000][T19939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.124015][T19939] RIP: 0033:0x7fb91218e929 [ 1316.124032][T19939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1316.124046][T19939] RSP: 002b:00007fb91304c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1316.124064][T19939] RAX: ffffffffffffffda RBX: 00007fb9123b5fa0 RCX: 00007fb91218e929 [ 1316.124077][T19939] RDX: 0000000000000020 RSI: 0000200000000740 RDI: 0000000000000008 [ 1316.124089][T19939] RBP: 00007fb91304c090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.124100][T19939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.124111][T19939] R13: 0000000000000000 R14: 00007fb9123b5fa0 R15: 00007ffd514e3068 [ 1316.124140][T19939] [ 1316.494106][T15565] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1316.696190][T15565] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1316.755731][T15565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.785230][T15565] usb 4-1: config 0 descriptor?? [ 1317.328680][T15565] elecom 0003:056E:00E6.0031: unknown main item tag 0x0 [ 1317.446821][T15565] elecom 0003:056E:00E6.0031: unknown main item tag 0x0 [ 1317.453831][T15565] elecom 0003:056E:00E6.0031: unknown main item tag 0x0 [ 1317.498204][T15565] elecom 0003:056E:00E6.0031: unknown main item tag 0x0 [ 1317.522346][ T5907] usbhid 2-1:0.0: can't add hid device: -71 [ 1317.538597][ T5907] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1317.539632][T15565] elecom 0003:056E:00E6.0031: unknown main item tag 0x0 [ 1317.591550][ T5907] usb 2-1: USB disconnect, device number 120 [ 1317.609013][T15565] elecom 0003:056E:00E6.0031: hidraw0: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.3-1/input0 [ 1317.633626][T15565] usb 4-1: USB disconnect, device number 84 [ 1318.029168][T19962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4123'. [ 1318.040519][T19962] nbd: must specify a size in bytes for the device [ 1318.322022][T19969] vlan2: entered allmulticast mode [ 1318.327305][T19969] vlan1: entered allmulticast mode [ 1318.332488][T19969] veth0_vlan: entered allmulticast mode [ 1318.478747][T19970] loop6: detected capacity change from 0 to 63 [ 1318.521407][T19970] buffer_io_error: 6 callbacks suppressed [ 1318.521467][T19970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1318.955645][T19970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1318.964150][T19970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1318.973412][T19970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1318.985870][T19970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1318.996634][T19970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1319.012177][T19970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1319.028055][T19970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1319.048832][T19970] ldm_validate_partition_table(): Disk read failed. [ 1319.057784][T19970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1319.067880][T19970] Buffer I/O error on dev loop6, logical block 0, async page read [ 1319.082829][T19970] Dev loop6: unable to read RDB block 0 [ 1319.167793][T19970] loop6: unable to read partition table [ 1319.178307][T19980] overlayfs: missing 'lowerdir' [ 1319.194658][T19970] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1319.234273][ T5907] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1319.404284][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 1319.413519][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1319.571256][ T5907] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1319.609577][T19985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4132'. [ 1319.694432][ T5907] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1319.702614][ T5907] usb 1-1: Product: syz [ 1319.714092][ T5907] usb 1-1: Manufacturer: syz [ 1319.724059][ T5907] usb 1-1: SerialNumber: syz [ 1320.325638][ T5907] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 1320.371120][ T5907] usb 1-1: Handspring Visor / Palm OS: port 177, is for unknown use [ 1320.625861][ T5907] usb 1-1: Handspring Visor / Palm OS: port 116, is for unknown use [ 1320.705218][T19995] sp0: Synchronizing with TNC [ 1320.984553][ T5907] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1321.013908][T20002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4136'. [ 1321.023548][T20002] nbd: must specify a size in bytes for the device [ 1321.709639][ T5907] usb 1-1: palm_os_3_probe - error -110 getting bytes available request [ 1321.758579][ T5907] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1321.935243][ T5907] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1322.708421][T20018] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4140'. [ 1322.718413][T20018] FAULT_INJECTION: forcing a failure. [ 1322.718413][T20018] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.731167][T20018] CPU: 0 UID: 0 PID: 20018 Comm: syz.1.4140 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1322.731191][T20018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1322.731198][T20018] Call Trace: [ 1322.731204][T20018] [ 1322.731209][T20018] dump_stack_lvl+0x189/0x250 [ 1322.731228][T20018] ? __pfx____ratelimit+0x10/0x10 [ 1322.731242][T20018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1322.731256][T20018] ? __pfx__printk+0x10/0x10 [ 1322.731270][T20018] ? __pfx___might_resched+0x10/0x10 [ 1322.731287][T20018] should_fail_ex+0x414/0x560 [ 1322.731302][T20018] should_failslab+0xa8/0x100 [ 1322.731316][T20018] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1322.731329][T20018] ? __alloc_skb+0x112/0x2d0 [ 1322.731342][T20018] __alloc_skb+0x112/0x2d0 [ 1322.731355][T20018] netlink_ack+0x146/0xa50 [ 1322.731364][T20018] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1322.731376][T20018] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1322.731395][T20018] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1322.731414][T20018] netlink_rcv_skb+0x28c/0x470 [ 1322.731425][T20018] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1322.731439][T20018] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1322.731448][T20018] ? irqentry_exit+0x74/0x90 [ 1322.731470][T20018] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1322.731485][T20018] genl_rcv+0x28/0x40 [ 1322.731497][T20018] netlink_unicast+0x758/0x8d0 [ 1322.731518][T20018] netlink_sendmsg+0x805/0xb30 [ 1322.731529][T20018] ? lockdep_hardirqs_on+0x9c/0x150 [ 1322.731546][T20018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1322.731555][T20018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1322.731568][T20018] ? netlink_sendmsg+0x10/0xb30 [ 1322.731579][T20018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1322.731590][T20018] __sock_sendmsg+0x219/0x270 [ 1322.731607][T20018] ____sys_sendmsg+0x505/0x830 [ 1322.731621][T20018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1322.731638][T20018] ? import_iovec+0x74/0xa0 [ 1322.731654][T20018] ___sys_sendmsg+0x21f/0x2a0 [ 1322.731666][T20018] ? __pfx____sys_sendmsg+0x10/0x10 [ 1322.731681][T20018] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 1322.731708][T20018] ? __fget_files+0x2a/0x420 [ 1322.731720][T20018] ? __fget_files+0x3a0/0x420 [ 1322.731738][T20018] __x64_sys_sendmsg+0x19b/0x260 [ 1322.731751][T20018] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1322.731776][T20018] do_syscall_64+0xfa/0x3b0 [ 1322.731791][T20018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.731800][T20018] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1322.731810][T20018] ? clear_bhb_loop+0x60/0xb0 [ 1322.731822][T20018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.731831][T20018] RIP: 0033:0x7fe4c758e929 [ 1322.731842][T20018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1322.731850][T20018] RSP: 002b:00007fe4c8318038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1322.731861][T20018] RAX: ffffffffffffffda RBX: 00007fe4c77b6080 RCX: 00007fe4c758e929 [ 1322.731868][T20018] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 1322.731875][T20018] RBP: 00007fe4c8318090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.731881][T20018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.731887][T20018] R13: 0000000000000000 R14: 00007fe4c77b6080 R15: 00007ffcc8e93f58 [ 1322.731903][T20018] [ 1323.183972][ T5907] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1323.646500][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4143'. [ 1323.915706][T20026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4142'. [ 1323.925050][T20026] nbd: must specify a size in bytes for the device [ 1324.388169][T20034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4146'. [ 1324.900432][ T24] usb 1-1: USB disconnect, device number 106 [ 1324.926891][ T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1324.945099][ T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1324.958495][ T24] visor 1-1:1.0: device disconnected [ 1325.715424][T20055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4150'. [ 1325.727117][T20055] nbd: must specify a size in bytes for the device [ 1326.235432][T20062] netlink: 'syz.0.4153': attribute type 25 has an invalid length. [ 1326.270182][T20062] netlink: 'syz.0.4153': attribute type 8 has an invalid length. [ 1326.299198][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4155'. [ 1326.308535][T20064] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4154'. [ 1326.517125][T20071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4157'. [ 1326.526262][T20071] nbd: must specify a size in bytes for the device [ 1328.555687][T20100] sp0: Synchronizing with TNC [ 1328.828617][T20098] bio_check_eod: 2 callbacks suppressed [ 1328.828630][T20098] syz.1.4164: attempt to access beyond end of device [ 1328.828630][T20098] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1328.847671][T20098] hfsplus: unable to find HFS+ superblock [ 1329.088638][T20110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4167'. [ 1329.098014][T20110] nbd: must specify a size in bytes for the device [ 1329.445751][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4168'. [ 1329.458130][T20113] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1331.296701][T20134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4172'. [ 1331.964313][ T43] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1332.354291][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 1332.559463][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1332.699248][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1332.707746][T20154] sp0: Synchronizing with TNC [ 1332.810952][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1332.839986][ T43] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1333.051616][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.236098][ T43] usb 6-1: config 0 descriptor?? [ 1333.732685][ T43] microsoft 0003:045E:07DA.0032: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1333.744366][ T43] microsoft 0003:045E:07DA.0032: no inputs found [ 1333.751040][ T43] microsoft 0003:045E:07DA.0032: could not initialize ff, continuing anyway [ 1333.823504][T20167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1333.974198][ T9] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1334.515847][ T9] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 1334.524704][ T9] usb 2-1: config 0 has no interface number 0 [ 1334.535404][ T9] usb 2-1: config 0 interface 98 has no altsetting 0 [ 1334.566834][ T9] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 1334.580939][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.601167][ T9] usb 2-1: Product: syz [ 1334.613059][ T9] usb 2-1: Manufacturer: syz [ 1334.627254][ T9] usb 2-1: SerialNumber: syz [ 1334.653434][ T9] usb 2-1: config 0 descriptor?? [ 1334.915714][T20178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1334.941876][ T9] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 1335.367560][ T43] usb 6-1: USB disconnect, device number 58 [ 1335.474463][T16827] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 1335.763518][ T9] usb 2-1: reset high-speed USB device number 121 using dummy_hcd [ 1336.004169][ T9] usb 2-1: device descriptor read/64, error -71 [ 1336.063501][T20190] syz.3.4189: attempt to access beyond end of device [ 1336.063501][T20190] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1336.077446][T20190] hfsplus: unable to find HFS+ superblock [ 1336.098893][T16827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1336.113545][T16827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1336.128296][T16827] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1336.142348][T16827] usb 1-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 1336.162348][T16827] usb 1-1: Manufacturer: syz [ 1336.191935][T16827] usb 1-1: config 0 descriptor?? [ 1336.245080][T16827] hub 1-1:0.0: USB hub found [ 1336.264418][ T9] usb 2-1: reset high-speed USB device number 121 using dummy_hcd [ 1336.404430][ T9] usb 2-1: device descriptor read/64, error -71 [ 1337.492039][T20204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1337.641139][ T9] usb 2-1: reset high-speed USB device number 121 using dummy_hcd [ 1337.701434][ T9] usb 2-1: device descriptor read/8, error -71 [ 1337.739799][T20209] FAULT_INJECTION: forcing a failure. [ 1337.739799][T20209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1337.758625][T20209] CPU: 1 UID: 0 PID: 20209 Comm: syz.3.4194 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1337.758651][T20209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1337.758661][T20209] Call Trace: [ 1337.758670][T20209] [ 1337.758679][T20209] dump_stack_lvl+0x189/0x250 [ 1337.758707][T20209] ? __pfx____ratelimit+0x10/0x10 [ 1337.758729][T20209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1337.758753][T20209] ? __pfx__printk+0x10/0x10 [ 1337.758771][T20209] ? __might_fault+0xb0/0x130 [ 1337.758803][T20209] should_fail_ex+0x414/0x560 [ 1337.758827][T20209] _copy_from_iter+0x1db/0x16f0 [ 1337.758861][T20209] ? __pfx__copy_from_iter+0x10/0x10 [ 1337.758886][T20209] ? sock_alloc_send_pskb+0x875/0x990 [ 1337.758911][T20209] ? __pfx__copy_from_iter+0x10/0x10 [ 1337.758934][T20209] ? page_copy_sane+0x16a/0x280 [ 1337.758956][T20209] copy_page_from_iter+0xdd/0x170 [ 1337.758982][T20209] skb_copy_datagram_from_iter+0x306/0x720 [ 1337.759015][T20209] packet_sendmsg+0x3abb/0x53f0 [ 1337.759059][T20209] ? kstrdup_quotable_cmdline+0x2f0/0x390 [ 1337.759090][T20209] ? smack_socket_sendmsg+0x1fa/0x520 [ 1337.759115][T20209] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1337.759139][T20209] ? __lock_acquire+0xab9/0xd20 [ 1337.759160][T20209] ? __pfx_packet_sendmsg+0x10/0x10 [ 1337.759188][T20209] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1337.759221][T20209] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1337.759240][T20209] ? __pfx_packet_sendmsg+0x10/0x10 [ 1337.759260][T20209] __sock_sendmsg+0x219/0x270 [ 1337.759286][T20209] __sys_sendto+0x3bd/0x520 [ 1337.759306][T20209] ? __pfx___sys_sendto+0x10/0x10 [ 1337.759320][T20209] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1337.759357][T20209] ? __fget_files+0x3a0/0x420 [ 1337.759388][T20209] ? ksys_write+0x22a/0x250 [ 1337.759410][T20209] ? __pfx_ksys_write+0x10/0x10 [ 1337.759433][T20209] __x64_sys_sendto+0xde/0x100 [ 1337.759454][T20209] do_syscall_64+0xfa/0x3b0 [ 1337.759477][T20209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.759493][T20209] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1337.759510][T20209] ? clear_bhb_loop+0x60/0xb0 [ 1337.759531][T20209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.759547][T20209] RIP: 0033:0x7f2afa78e929 [ 1337.759564][T20209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1337.759578][T20209] RSP: 002b:00007f2afb66e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1337.759597][T20209] RAX: ffffffffffffffda RBX: 00007f2afa9b5fa0 RCX: 00007f2afa78e929 [ 1337.759610][T20209] RDX: 000000000000fd35 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1337.759621][T20209] RBP: 00007f2afb66e090 R08: 0000200000000140 R09: 0000000000000014 [ 1337.759634][T20209] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1337.759644][T20209] R13: 0000000000000000 R14: 00007f2afa9b5fa0 R15: 00007ffdba63da38 [ 1337.759673][T20209] [ 1338.049639][T20208] tipc: Failed to remove unknown binding: 66,3,3/0:1195273733/1195273734 [ 1338.717944][T16827] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1338.997078][T16827] usbhid 1-1:0.0: can't add hid device: -71 [ 1339.088617][ T9] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1339.088660][T16827] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1339.112000][ T9] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1339.120702][T15565] usb 2-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 1339.176327][ T9] usb 2-1: USB disconnect, device number 121 [ 1339.184353][T16827] usb 1-1: USB disconnect, device number 107 [ 1339.191575][T15565] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 1339.249087][T15565] ------------[ cut here ]------------ [ 1339.254960][T15565] WARNING: CPU: 0 PID: 15565 at fs/kernfs/dir.c:537 kernfs_get+0x72/0x90 [ 1339.263395][T15565] Modules linked in: [ 1339.267596][T15565] CPU: 0 UID: 0 PID: 15565 Comm: kworker/0:4 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1339.278015][T15565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1339.288114][T15565] Workqueue: events request_firmware_work_func [ 1339.294299][T15565] RIP: 0010:kernfs_get+0x72/0x90 [ 1339.299228][T15565] Code: e8 13 f3 64 ff 48 89 df be 04 00 00 00 e8 b6 4d c6 ff f0 ff 03 eb 05 e8 fc f2 64 ff 5b 5d e9 c5 57 07 09 cc e8 ef f2 64 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 b5 [ 1339.318853][T15565] RSP: 0018:ffffc9000491f5e0 EFLAGS: 00010293 [ 1339.325040][T15565] RAX: ffffffff825b5aa1 RBX: ffff88806ec7e780 RCX: ffff8880356e3c00 [ 1339.333012][T15565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1339.341026][T15565] RBP: 0000000000000000 R08: ffff88806ec7e783 R09: 1ffff1100dd8fcf0 [ 1339.349396][T15565] R10: dffffc0000000000 R11: ffffed100dd8fcf1 R12: ffff888026853e28 [ 1339.357610][T15565] R13: 1ffff11004d0a7c6 R14: ffff888026853e30 R15: 1ffff11004d0a7c5 [ 1339.365679][T15565] FS: 0000000000000000(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 1339.374612][T15565] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1339.381183][T15565] CR2: 000000110c3c609d CR3: 000000006ac4c000 CR4: 00000000003526f0 [ 1339.389172][T15565] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1339.397151][T15565] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1339.405125][T15565] Call Trace: [ 1339.408395][T15565] [ 1339.411313][T15565] kobject_add_internal+0x632/0xb40 [ 1339.416521][T15565] kobject_add+0x155/0x220 [ 1339.420947][T15565] ? __pfx_kobject_add+0x10/0x10 [ 1339.425937][T15565] ? kobject_init+0x83/0x1e0 [ 1339.430527][T15565] get_device_parent+0x316/0x3a0 [ 1339.435495][T15565] device_add+0x2e1/0xb50 [ 1339.439825][T15565] firmware_fallback_sysfs+0x2e4/0x9b0 [ 1339.445339][T15565] _request_firmware+0xf83/0x15b0 [ 1339.450761][T15565] ? __pfx__request_firmware+0x10/0x10 [ 1339.456393][T15565] ? process_scheduled_works+0x9ef/0x17b0 [ 1339.462108][T15565] request_firmware_work_func+0xaf/0x1c0 [ 1339.467759][T15565] ? process_scheduled_works+0x9ef/0x17b0 [ 1339.473473][T15565] process_scheduled_works+0xae1/0x17b0 [ 1339.479039][T15565] ? __pfx_process_scheduled_works+0x10/0x10 [ 1339.485283][T15565] worker_thread+0x8a0/0xda0 [ 1339.489877][T15565] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1339.496222][T15565] ? __kthread_parkme+0x7b/0x200 [ 1339.501160][T15565] kthread+0x711/0x8a0 [ 1339.505268][T15565] ? __pfx_worker_thread+0x10/0x10 [ 1339.510379][T15565] ? __pfx_kthread+0x10/0x10 [ 1339.514978][T15565] ? _raw_spin_unlock_irq+0x23/0x50 [ 1339.520167][T15565] ? lockdep_hardirqs_on+0x9c/0x150 [ 1339.525389][T15565] ? __pfx_kthread+0x10/0x10 [ 1339.529966][T15565] ret_from_fork+0x3fc/0x770 [ 1339.534571][T15565] ? __pfx_ret_from_fork+0x10/0x10 [ 1339.539679][T15565] ? __switch_to_asm+0x39/0x70 [ 1339.544447][T15565] ? __switch_to_asm+0x33/0x70 [ 1339.549265][T15565] ? __pfx_kthread+0x10/0x10 [ 1339.554107][T15565] ret_from_fork_asm+0x1a/0x30 [ 1339.558881][T15565] [ 1339.561903][T15565] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1339.569168][T15565] CPU: 0 UID: 0 PID: 15565 Comm: kworker/0:4 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1339.579564][T15565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1339.589618][T15565] Workqueue: events request_firmware_work_func [ 1339.595787][T15565] Call Trace: [ 1339.599053][T15565] [ 1339.601971][T15565] dump_stack_lvl+0x99/0x250 [ 1339.606559][T15565] ? __asan_memcpy+0x40/0x70 [ 1339.611145][T15565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1339.616342][T15565] ? __pfx__printk+0x10/0x10 [ 1339.620959][T15565] panic+0x2db/0x790 [ 1339.624861][T15565] ? __pfx_panic+0x10/0x10 [ 1339.629267][T15565] ? show_trace_log_lvl+0x4fb/0x550 [ 1339.634462][T15565] ? ret_from_fork_asm+0x1a/0x30 [ 1339.639391][T15565] __warn+0x31b/0x4b0 [ 1339.643365][T15565] ? kernfs_get+0x72/0x90 [ 1339.647693][T15565] ? kernfs_get+0x72/0x90 [ 1339.652011][T15565] report_bug+0x2be/0x4f0 [ 1339.656345][T15565] ? kernfs_get+0x72/0x90 [ 1339.660691][T15565] ? kernfs_get+0x72/0x90 [ 1339.665023][T15565] ? kernfs_get+0x74/0x90 [ 1339.669343][T15565] handle_bug+0x84/0x160 [ 1339.673580][T15565] exc_invalid_op+0x1a/0x50 [ 1339.678073][T15565] asm_exc_invalid_op+0x1a/0x20 [ 1339.682908][T15565] RIP: 0010:kernfs_get+0x72/0x90 [ 1339.687850][T15565] Code: e8 13 f3 64 ff 48 89 df be 04 00 00 00 e8 b6 4d c6 ff f0 ff 03 eb 05 e8 fc f2 64 ff 5b 5d e9 c5 57 07 09 cc e8 ef f2 64 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 b5 [ 1339.707459][T15565] RSP: 0018:ffffc9000491f5e0 EFLAGS: 00010293 [ 1339.713527][T15565] RAX: ffffffff825b5aa1 RBX: ffff88806ec7e780 RCX: ffff8880356e3c00 [ 1339.721491][T15565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1339.729453][T15565] RBP: 0000000000000000 R08: ffff88806ec7e783 R09: 1ffff1100dd8fcf0 [ 1339.737415][T15565] R10: dffffc0000000000 R11: ffffed100dd8fcf1 R12: ffff888026853e28 [ 1339.745377][T15565] R13: 1ffff11004d0a7c6 R14: ffff888026853e30 R15: 1ffff11004d0a7c5 [ 1339.753345][T15565] ? kernfs_get+0x71/0x90 [ 1339.757689][T15565] kobject_add_internal+0x632/0xb40 [ 1339.762978][T15565] kobject_add+0x155/0x220 [ 1339.767398][T15565] ? __pfx_kobject_add+0x10/0x10 [ 1339.772346][T15565] ? kobject_init+0x83/0x1e0 [ 1339.776934][T15565] get_device_parent+0x316/0x3a0 [ 1339.781876][T15565] device_add+0x2e1/0xb50 [ 1339.786209][T15565] firmware_fallback_sysfs+0x2e4/0x9b0 [ 1339.791672][T15565] _request_firmware+0xf83/0x15b0 [ 1339.796706][T15565] ? __pfx__request_firmware+0x10/0x10 [ 1339.802160][T15565] ? process_scheduled_works+0x9ef/0x17b0 [ 1339.807888][T15565] request_firmware_work_func+0xaf/0x1c0 [ 1339.813515][T15565] ? process_scheduled_works+0x9ef/0x17b0 [ 1339.819229][T15565] process_scheduled_works+0xae1/0x17b0 [ 1339.824789][T15565] ? __pfx_process_scheduled_works+0x10/0x10 [ 1339.830774][T15565] worker_thread+0x8a0/0xda0 [ 1339.835360][T15565] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1339.841685][T15565] ? __kthread_parkme+0x7b/0x200 [ 1339.846628][T15565] kthread+0x711/0x8a0 [ 1339.850689][T15565] ? __pfx_worker_thread+0x10/0x10 [ 1339.855794][T15565] ? __pfx_kthread+0x10/0x10 [ 1339.860380][T15565] ? _raw_spin_unlock_irq+0x23/0x50 [ 1339.865578][T15565] ? lockdep_hardirqs_on+0x9c/0x150 [ 1339.870768][T15565] ? __pfx_kthread+0x10/0x10 [ 1339.875351][T15565] ret_from_fork+0x3fc/0x770 [ 1339.879936][T15565] ? __pfx_ret_from_fork+0x10/0x10 [ 1339.885046][T15565] ? __switch_to_asm+0x39/0x70 [ 1339.889798][T15565] ? __switch_to_asm+0x33/0x70 [ 1339.894552][T15565] ? __pfx_kthread+0x10/0x10 [ 1339.899130][T15565] ret_from_fork_asm+0x1a/0x30 [ 1339.903895][T15565] [ 1339.907134][T15565] Kernel Offset: disabled [ 1339.911447][T15565] Rebooting in 86400 seconds..