last executing test programs: 6m13.595894541s ago: executing program 2 (id=1578): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa0000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = gettid() mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r3, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) splice(r5, 0x0, r8, 0x0, 0x80, 0x4) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 6m12.737796017s ago: executing program 2 (id=1585): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r3}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37}, 0x28) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f0000000200)={0xf8ac, 0xd9, 0x0, 0x3}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r4, 0xfffffd63, &(0x7f00000002c0)={0x0, 0x41, 0x0, &(0x7f00000003c0)=""/166, 0xab}}, 0x10) r6 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xe5ab, 0x10000, 0xfffffffd, 0x24c}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xc7, 0x3, 0x0, 0x9276, 0x0, 0x1, {0x1}}) io_uring_enter(r6, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) 6m11.571067068s ago: executing program 2 (id=1593): syz_open_dev$video(&(0x7f0000000000), 0x2000000008, 0xa8080) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r4 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)={'#! ', './file0'}, 0xfffffd9d) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000023000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r6 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) write$binfmt_aout(r6, 0x0, 0xc8) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x13f, 0x4}}, 0x20) 6m10.561362634s ago: executing program 2 (id=1597): ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0xe, 0x1}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="04000100"], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}], 0x20) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) sync_file_range(r4, 0x2, 0xda38, 0x1) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x10000000000000, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x52b281, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000d4a1ce4e9de42536000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) 6m9.537316319s ago: executing program 2 (id=1604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) io_pgetevents(0x0, 0xa5df, 0x80000000000002f, 0xfffffffffffffffe, 0x0, 0x0) 6m9.49959675s ago: executing program 2 (id=1605): r0 = add_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$update(0x2, r0, &(0x7f0000000280)="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", 0x1000) keyctl$set_timeout(0xf, r0, 0x8001) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x102b23) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) syz_usb_connect(0x3, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x69, 0x2f, 0x13, 0x20, 0x19d2, 0xffab, 0xd8e0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x6, 0x80, 0x7, [{{0x9, 0x4, 0xf4, 0x8, 0x2, 0xff, 0xff, 0xff, 0xd, [], [{{0x9, 0x5, 0x8d, 0x10, 0xc5d013e888bb2464, 0x4, 0xa4, 0x1}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x3, 0x60, 0xe, [@generic={0x8, 0xb, "1c4502b46a9d"}]}}]}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'veth1_to_bridge\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x8a883, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$BLKRRPART(r1, 0x125f, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) r6 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109020200000000000009040000030b08000009058d67c8"], 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) syz_usb_ep_write(r6, 0x8d, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) close(0x3) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/253, 0xfd}], 0x1, 0xaf69, 0x24000000) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000200)={'veth0_to_batadv\x00', @local}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x5080) mknodat$loop(r8, &(0x7f00000001c0)='./cgroup\x00', 0x1, 0x1) 5m54.305405676s ago: executing program 32 (id=1605): r0 = add_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$update(0x2, r0, &(0x7f0000000280)="03e45b8459e6c9deb5d685d1ed62c91d9ef989bc3fad8299eeda438b3a523922b8546ff7565eac2df21641a26eaae89620ec2a4a3f92b6c9bdb2b04aa02614c667e8c385719575df9b53255b8a858e05b6b59f595752726272928c08e27f8f85260ebb5d18117d69c34b2d109a1bfb8d489a492b4842dcb0ecccc5cdcab2b0a4fe70f939329d5dc7e1fb7d1722a4fed37248ae033e48281e916bbc97f12c7c8b0df4e6d424d1135752028c8a91f9db6d7858949a3941d144ae5c468b46b9e8f16ee456bb95acce4ffd1fff7b0632000b25cbd9f1763046a0a18939a8c115a251314fe1563cfecccaa7da1caeef25db34e44b9867826355e38247731df561918ace8842b1a14c205bfc1dea34157082083db17cc365fedf8789f16591aaafc905bfde425a9c87ba2d583b030ccec6db98cf5ea51db007276c5096c3855e353d3cba4c540d089e584016e30724b7372e06fb5519a29fba8e05daabb5e4b817c7c14edbe1e0e27eb81e99ec780085df8ce95a428acbdebe7bc9bd06e6f6d67d9cafea76362beefce6cbbe1bd46e8d9a74292af9f8ce82beb7ba2b4197d5920927719d3721e78ee293af43d017e4202dcdd4b8fad54dba375acd85fbff50dcf32453e295e258a4fd57fea1d63ca7a2b341cc101dc8fc93ebdcbd2211f06a8b1b2567ae94662e49add7a14e82e592bf71e1f319b2a18a0ef0feaa04f53179696c0cac7641de489eff57535f3b7d652e7d26f890ece64ef9c2fbb3be0efa6c8344bdde92524022cd0dd70e150858f44d58844b6159bf224467b0d675d2602e380c17f241023d447a8441d12203b95ac35bb4e6cf342dbddbc761b3194653d41ab43c31eb57da7289689943db607da247813465bbd798218d6418a7f8dd78b352be02453eca39e1298aec6ddfffa955a1bf13bd9c14c076bea4c5a37e6e667495a260dc12ee7f6964f79e520e519d225b200fdd273c91783a01450641cfd8f963afb3f3e27357ee5e38a01d18b30c996bd8816ced2bc12b9a80ad43ca67a3065a53583f3d0956fb9af0b2bdb89f28120f8aef97af5c97a47672cb680c0b1ad6be3cfdefe8ff86c65c224851ac9180c27245d985040adb17896f4305afa5c6c41f176f95dce6a77cfac712f9d2be8a019f844fe3a96b43b65313ad79984eb11909f0aab69b43b0fb21113158b1918150531340fc3dda6abfa7d068c3189521afbb54e5836f12e6ce09fc235dd1047b68459cbc7ae3681a3f7169ef223540f227511086f444fd3135a9479270e3fbe947792e57d2a3e3e7e9e950f73c04a284088adffbcd09f022c81416e5dc8786931eacc3a85c322c901e23f2fd78fec335553922e15db9091c74f7f21fdff3bad05dd8f0990d356d3e36adda015e24ffaae21608886be22457af27814c6b5f9fd631a0cf7d833935d7d8ba51abdeff4f75bb1b36fc8ccfd044268709210f3823ef3a048b10b5e9bd4d40fdb6efce4cace25db69698bc1be7637f14e16de5dbeb4d697760e37fb2a5e33a68d684340ac328161dc4ebfe7810998c632bb5fbfb7de1708aebe3c3683ccdbeec1fbb364de20aebbc60c0b73d1b2209beff24c7fe96fb4f2de24d766f5560df9105afe16ccc70fead027a4ecc238be74c4977042b8d354080d65ce84d0320769c591e0843432a2253902098d4e128626d2a22193fbefc48633fc5ca0237aefd9075caff22db5aadd2e9f593b30c9f1a86bd36d9d97b667dd66e889d35522baad90f9a17bc6c6d221cdb36d7d86f4e67c19947e05ece544ca12ac52480a29a1554ec24cadac6146bd301ac9071b89f3cd058a3b92f9c71d0db2b1423c861497e27cd1063de111d53eab77ff32841acac799ed4088258454e35370386e7dc12fe00c225384d7ff2a8bdcfa0208808a17d2b1a943dd433d638a00c5b9a5b10b50fff2f93c10616539fac88daccc3ee022ae1347068c8cea47d3196e6c4c11933ac780205d36dc55a1b669c77295d17d25ba7a3fe829ff7cd0f83fde624ba0fd9defbfac20f53dca73f302b8cf72bfdff4188ceb1cf9ac4947e36948d5d723fa0d032d5ed3baf606db79d49c235dce905b7f9b3d39b039d439f4a8f63d8fbce4c108376df6b19cba3b78e5d62cc9a6787d4f26b807d13a6b3e75173addabbc05837b8b8d64c82e3d6df2b9cf8cf15a26bae2b3ac8ac506ee4c02e7b5edebc01d7c22fcdd1a27c65f1abf3bd88ce2de5d5417147ad031eae6ff64483c5b561667859867afcf9072d3b5c56bea3e6ab3e8c3a7f4c2e85d723b093773a52d9565fe15bcfd6f9948d49eef26f9d982b6b9f363d19213ecce5f651572bbd3dc489112fffe0d102bd15aa2b5b14ca5201ac2599478de6e8e1bfbb2fd17b4a1b2acf40523a322cd70945c80dead46ffb5e34549c3d0ab0f5be8c344d322a14eef533f9bceb614404ffb1a5b051def64bca7995485fd0569decd1abb09a99eabf318a3dc897bca9953f67749cf0a2c4de2ffc86b69959fa7b0bf94f0b238eea45b0d0bbde242d1074c3c13dc80778710b82bbe322c661dad2160a7e2b3a1ff167fa06c39ffc24f539eb87ab1bb7aa240f11ea5b1c5e7f65a6aa1de2e3c81a7b5abe20588fae510b5e696f8cd18bd17a5a9d24afce39f3ce5a5ac75c79dc871be223894554e026a417084cec8f849423cbc392f59cb1b3738f2930ff19ca1d84c0618cb51e5e0a29851dde02493b0fabb1650536bea89eb5d985165bf8609317503addbe239909b21f3560b263eda11c6ba33270be7d55c769ab3c1b01aef73009576ee9639b6c9e72fcd4e0d4faba05e0b2e335239e1fd1adcdcd5622e1e8c4bb0de4ac41c161d52a0ab22cc6163611131c485c98703abb2c3437358420ee88e9983fd565b1931c0acfe7a08e3c4e1be171aecffc66f2dfdf0e8855bbfe9b05cf7ec15cb4559b4f1581767836c883e12643e40c7b99aff7913d88cb4b65470dfc0be0376c9fd45fd1c075c09a71267c48f525a82d811ad188710f227322fe7e54165d7ce687f2c91adc3d9e3ca4797febf8c6f5f4801bef51687731adbe00f20287c56ab8cc7f84150b8e22aa0d87a653ee4662f690a5b72da3cc4df98dbed46012cc7d8f45229aaee1b251b74e1f36fefb7969f8a3e63737f7591145db28f3f6c10314cc8e534e5bf6f52b0d714b8f5b75f6a5277dbdaa6b58f2253800b7f7c96ac41335046f228fc277f9b137ab3ac667337df4cea849b6eac6e2fd4160523be35d9b97ca9c12c471fd4420588fe9e71deddb136f6289da970434d2b9513d10156a6aba5dabf7df91b438a79af5e7d049130abb84ac393be72c2712d0b24213b181aca338434437f8b125bcee2a253df89297d0c69a506aca1081e4295b6b2d19b004cc5a918f954aafd829eb940a000ff980434861c5df245b68d85b96e07af1bb65f1187655dad81392e857e20f04ede3e1c83832262f33ee71ebc488e2647447d511489b04219c309dd8ca08197284c19bb782137df5763d2b2d3e6a015a8741cd4a1f47fd4083e3e896d9fff3b788b69fc68001e2778cf60ef52bf50cf0e82b150431a742c7495a3c6147ab695dcfa082bcd3b949a7a51d6f5a444ffc74a3265717fe81c77f179c29cf9f5ecbf56e541c18ec9206be018dfef317889840550750777f0dd485af77d92e8cbe31f0f44b8e09da2f58c5ade7d71a8f5fb0f5b4f655cb1d59d644ee13f33d49e1c65f5c0e191ddef36f796e2d3545aa7713be7dcef74863e2a41f526b9ebd33453ddddbe8ad6bbf3a719e1d9f6ad6c5f16489c26caed5df977746569d91315b3cbc245efd37ffa10f079263a45ff82f65de1be5244f809d9703e6a4f488e31141d0d88a1c74572c19247631bfa4c0d7485c2fd001a822aa4c2e5a331479d0a7be55fa207c354d650e9865b7b491a696cc017a7cf36e6c450517ee06aea01c7dd149fb374a22a5a9e9d4e6949654ca1f1c0b7b294c30c7df6e672a59f6d5be797b4df8ee0d1ffafd36b8bfd829e205f793548df88220aa6b3aedfcb32c9b6f3fa7e30e37fb2ece352a792c78d5b0d9e684889cb407819278fdbe1a3ca6990ec5ca25182832ea23746710c10ad011359e9b1ca9bdf7a5e4b9f0b8e176b34d8ed4945e31ab59e167abedbd3c23873e580e7055524746a30b16b7190352564605cbadc1ad9dcc27328118d35f737db061e39e506ea50ba16f43e546ff4488604d2355a3d7ad7cf5161bee02cef625d8b23f7d6ee9888ee9cfe9bbae6e250ae98f55e2496c285044f1846f2b53b59cedd466873846b6866d4dc3bae971794a9de888a6d1ee5e5ebca79e6b344adc789a65a46035bd420c5b6a41ae0b7116316f1ed2388f903dc404b3db5c63de68852414287bd5d439bb573f42fa773ca2c0bfbb04ea4add439848a0ab4eb279f3c222c6654b97cc394dff607578f2c287b536f8854fe1573d36c4544bc2a46437ab00de5dc23ec83e7f49e9a43ce6285e349fb0936a918bfdd90f9176bfaeb96e75a664166dd5b439fcd1607580736db4fcb6ca1740614a9dd54f7e3b6e7cc7ea2a70d6647ca276a3f298448c585cc17266baf943a9fdad7cbf287f62b25fb52d79cd0ac4361320a5a5c459f8c00d553995e30bf77d5a4ad236faa9095a5acc0e90e0af81b96b0bd8d6262388fbb681f047cd481123ab9644ed860e5dcb4d4c16d843cc4e66c1b613addf593fa152d93e655baba77538c0d9b664888466243d30bbf247672f675f91e6e7afff09b696f3e155cbd27d75f6516f09bd4ddb602ff1346655880664c7d0b2048ea6c33cb82893de9f97ae46ce165cf3a94a495e8659dc7f551590cb0ba46dfea3c3b3ecfe5a0c697959aaba2dd65d7a471f5dfbbe5140399644e7f7890d1d837bcc64bc61e60ae5e50cfa7c0daf67ca068aeeadeb4264d69c4f9fdc15521e68c77bf988b96d843836a08a94caa88e160cab9d1a6691849b59956052baa421a3e26f1b94d6687b07a29f2368be79870d7046b6fc31dc77eef27c4dcfa29076411061235ead235596ac5c426708d80009a83c5c5b2afea0a8b0e6629251a2e55cc9f4a3cb91d476256621f13e6f3208c3fa48416f49ff17179b29165fc14ec3854d4432d54a471a4a4829b09b90b0d6d76b1e2b5c6c33e0b6bc530ac42b7cbebccd78374dd9798e1ceefc59f4c2268c59a2fada0d1930c2f98200cd6c89db72c6345756ba75b7c9fa518ea42109d0a921d9ff279154847f2092f52f7ff4e82d9cbc42969a9e7f11fc3d808ec53b2156be2fca7eddaf2308d04a31a3c6b65aaec83f7e7cb135a0785d5bec30f6194c1673b48a205dc0646e6296f8df53d34af277bb4891c5799a31342fc326eb5094b4b31aa21ed4034b0fe01e0f74d7a1bb4ae883f0b923b02e92420532dd976d78dff47c7fddea48d7932bfb29feb80bfb70449501981dcd91b99aec5ae40f0e10ca65bf7c5459f80ba281ea9d3512e415f761bcbb5696a9dfe2230f18836032f7496c8fa89effe3db28c9cb0295bc7467d7fa6067d5ac4cb30028c7e0ffa1091803cd1998c58363b1bd5b6b55bd0f087005e698434db34c7f8c6ea0f8388d463f40fa4a9b7c93eb30aa106181f504b3efb75821e2b6be8436da4bf3106a25d063f2eaea98a2c58bd2e5668443e55695ee26e464f20636064301a868f97872dd124d571389dc030b1120ce72ecb83b9b874ab93767761fb8cdcee8bb40b30c2931c4399618435017b9d4c87816bbb0f86e17307f7e5e80bb0d30f5ec188c828709855173719ea56515052f91a40ff3e98ce0a77076089657cd0fcacc85bdc96099", 0x1000) keyctl$set_timeout(0xf, r0, 0x8001) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x102b23) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) syz_usb_connect(0x3, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x69, 0x2f, 0x13, 0x20, 0x19d2, 0xffab, 0xd8e0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x6, 0x80, 0x7, [{{0x9, 0x4, 0xf4, 0x8, 0x2, 0xff, 0xff, 0xff, 0xd, [], [{{0x9, 0x5, 0x8d, 0x10, 0xc5d013e888bb2464, 0x4, 0xa4, 0x1}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x3, 0x60, 0xe, [@generic={0x8, 0xb, "1c4502b46a9d"}]}}]}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'veth1_to_bridge\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x8a883, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$BLKRRPART(r1, 0x125f, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) r6 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109020200000000000009040000030b08000009058d67c8"], 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) syz_usb_ep_write(r6, 0x8d, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) close(0x3) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/253, 0xfd}], 0x1, 0xaf69, 0x24000000) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000200)={'veth0_to_batadv\x00', @local}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x5080) mknodat$loop(r8, &(0x7f00000001c0)='./cgroup\x00', 0x1, 0x1) 5m50.527185994s ago: executing program 4 (id=1693): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x1015c0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r0, 0x801, 0x200000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "2bfaa5ff32"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x3c}}, 0x0) 5m50.477365003s ago: executing program 4 (id=1694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newtclass={0x24, 0x28, 0x1, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0xfff1, 0xb}, {0xffe0, 0x1}, {0x2}}}, 0x24}}, 0x2000c044) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf253400000008000300", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x200440d0) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendmmsg$sock(r7, &(0x7f0000000b00)=[{{&(0x7f0000000100)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)="f8146e9c4ef58a736c552c6ef9268efcb27572a678f400993818a6f0b4792c20b55ea80bfb96c37a2b4f181114f043b77c679baf897e1d80e18ab80b3265a23b4e738526c59dfa21c4275158d3f368e2e37789cdeb3cb77688b2934fc8bcc205", 0x60}, {&(0x7f0000000280)="109029fe3cb2175013283bce8786ebe66b5e2a481e4debeea5636b27a9eb94882168e39ffab0d2d6bab5c1b1c3de85ba61dade5cdc70de3760edef358240c2ae89396b3a071bfcd06f967a53d09483480af63dd201c43df72dbcb9ad2e3f789e0433598d8740edd3b5bb70d04dcb95dc5baf9034c2edcb0407726a9dcb61884635b896878789ea51aacc4664199b28e1e97bad70d9ac4c22ac90fbe3f28d40395c2f7b284cc9b66e603e795fb23179e615b2dfedf7dad4c9e70b3d86ac98ecbe5d99b6a15cd9434b0891f30f3d51f2084ffa0419e9ea94421451a7d02add157a38fc9188dd8d5baad44844815efac88e0a954e9b9f7a4e1d", 0xf8}, {&(0x7f0000000080)="02fe57f4960fe33127ebc6a1df61f16de187a69ede717c162a3c3d0d96d4db20d82ba5a5256061320e1f1046a40b", 0x2e}, {&(0x7f0000000380)="65175d8dc267722820527aecaf0120d7853a44e4510732ae431d3981605855b67393b569f751090630fd0a9a5851613db451ec704fe31f8ab98d3fe2a834f89f50b62dad0f8f5d945b634d1667e6d18b560ce5ca2d86a5c0ab390a8f9b1503d647b76cf361ae3d165721af85817ad9bea0051697f95bdc459998776f16b932a184b64eb58a826eb2e4ef59b24f81d4fca4e6d83f942df89d9eae7ee9818c1b6b29f88acc827d3696f23dd0ff84dee8e6", 0xb0}, {&(0x7f0000000180)="6a1841862cdd712d5df5cc67ea0c6284da2e07777ec36fc49eebd7bda579736965dcff1fc207f5a7bc1644812ab574ca9b0f03", 0x33}], 0x5, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0x2000}}], 0x78}}, {{&(0x7f00000005c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000540)="fed99c83525f6194ed48a3d2bfa26a02bbfdc312cf8dbfa837f6b088", 0x1c}, {&(0x7f0000000640)="5a56b98cc6fa215046b8474e1ec29420e8c4a03757cf7a2c3ed8a5", 0x1b}, {&(0x7f0000000a40)="135ca18be53f4f16f22e57442e3907cc29979569dcc747a40ce382308a706b7c8b4b9e600a65f52dcde84d208d372edd0ad790a42bcf6661e1fd00"/72, 0x48}, {&(0x7f0000000700)="e40ff5f2d2c20f6dc05222c839c334ef2562bb8b6ab3865beb29e7cdb23ec0841804be1fdc8e7bccca420281307b1ce6c5b160d92993daeef0af59784c9be009a930c4477add24dd65376fd7f35a7e17bced179cdcbe8ec753ca2ec2a1332734c5a540a4a24f752486ea5ae089ee9ea4df212a7beacf6a70539549b56a0d79513f675c404b539d9a1cf27816c767a719a1fb010e3b65c0c5eda56959b093d3f501b4aa6fd8d51279b7fda301f498fe42104b8d84c5de22fae36c4b8e69c597b802884b4e1e4a875c26c3c1b9e87202b6891b4fa9bf1ae809ec001dcfaec0184fd6bb279f690bd0c3d1", 0xe9}, {&(0x7f0000000800)="cc745d4737d318423cee4a707c3a82fb3f959c04acc1e76b49", 0x19}], 0x5, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xfffff2a8}}], 0xc0}}, {{&(0x7f0000000980)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x81, 0x3}, 0x80, &(0x7f0000000ac0)}}], 0x3, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x501703, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='wake_reaper\x00', 0xffffffffffffffff, 0x0, 0x80000001}, 0x18) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000006c0)={'syz', 0x1}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x271}) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) socket$tipc(0x1e, 0x5, 0x0) 5m49.418891088s ago: executing program 4 (id=1699): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x4, 0x64, {0x64, 0xd, "0049cfb511ae4c958a9564ff7b8f4c9c43b25ce73dde1e51a8a08f8c1d7eb16d55d3c2e21c6a4f2baa14c3dbd0b8350f731b55386e94361cbc8c050cd6cfb7f0afe1ab736f3b89a9eef32aa87d6c1352cedcc1f79e6dc09acc4fcd3c0d2c49ec27c0"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}}, &(0x7f0000000300)={0x34, &(0x7f0000000480)={0x0, 0xd, 0xe2, "66029d0257e70745ad837c878d7cbe9e0b6d3ff64908350d656585ad102b2b74787ec1d10fb924b292a6c68152f01de46a7b089075ce7e04b896289ab7568aa9b0aa906f1c3f36ac699f7d2442c0317c64ed61bc9263282adbac5faa646b649851be900b7258caf44266cb2ca82951d4e6375573c1fea03ca30b177b7fecdc8f7da61d10619e82aaf83daa60fe24b2d5cf9ff2c7c221f64fdbcea3b2eb3773fa0722ac677077dec5f8020fe812962524d071b1f3655d61049377093c79b083afe8e4712abe8f37402d2118fcb223c910010928fcc2f428f2ba20877186922f31293a"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000780)={0x20, 0x0, 0xe1, {0xdf, "45ee84e5493276cd90427e9f99cfc7e7e467d3656b6da8141492780d4fa561dba9b9749d15bda844c74944117e5095655c4ffd3d6ae4444b6d81a7a880128e89752e2e1893c8bd1073744fb3b4716409c4cd724d1652fd65c2286c019f60ccd1300f68cf536cf5f581e1b600601d7f472eb1aa8485225ed3e0e4da2e8a3fcd950b905b8ff5f2d537e99e7b9485b5bc196938a718877586d072eb5064f6a75e602d689528f94a37557e8ec310a43df774b069291ff94e8c0361e0f2c113f1323172d3fed14767b66509217e227f5121b3d019ff9a06fd945919e8a472335dd5"}}, &(0x7f0000000240)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000280)={0x20, 0x0, 0x1, 0xae}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x6d, @string={0x6d, 0x3, "7f1f361eb9812884efa0739dcb30a29999a2e24ae6b68d364b774429fdb394f061e4efdee8576e4778e089c4d283928be6b186aadbee1b827ed3d447bb9120ff14ec219134066e560f021753d868c2918a6448849e51dbfb3759187487e1672ddddab4354e76c6b52227ed"}}, &(0x7f00000002c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, '1X4j'}]}}, 0x0}, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x0, 0x30, 0x80, "9e3808b052abb59a4a1de0cdea86fcf401c0691cf06ac7c9daf7c79be0c3fbfe157d624e0106ab839ecd1b6ceddc995639af99b45637802df6274bdc1c4ec6d72fc1981e45b9c977f032f5764aabf113cd7a10b1b305d1f04731724a0c4e8d70cb07776f89d809e2b51089bc48cabf48e8422a2b5c992740bcaea0b78321b064"}, 0x0, 0x0, 0x0, 0x0}) 5m46.209402533s ago: executing program 4 (id=1717): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) socket(0x11, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40080) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x14) r6 = dup(0xffffffffffffffff) setsockopt$packet_buf(r6, 0x107, 0x16, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x30, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000100)={'veth1_to_bridge\x00', @multicast}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a9d42, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r8, 0x11, 0xa, 0x0, &(0x7f00000000c0)) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 5m45.134673631s ago: executing program 4 (id=1721): socket(0x10, 0x80002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r3, &(0x7f0000000580), 0x0, 0x45, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1f7eaa55845d7c40, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000280), 0x800000000020001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) 5m42.522601251s ago: executing program 4 (id=1729): syz_open_dev$sndpcmc(&(0x7f00000049c0), 0x0, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @private2, 0xfffffffc}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xe7, 0xd7, 0x7f, 0x40, 0x12d6, 0x444, 0x293d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x0, 0x0, 0x8b, 0xa, 0x2e}}]}}]}}, 0x0) 5m27.288333043s ago: executing program 33 (id=1729): syz_open_dev$sndpcmc(&(0x7f00000049c0), 0x0, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @private2, 0xfffffffc}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xe7, 0xd7, 0x7f, 0x40, 0x12d6, 0x444, 0x293d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x0, 0x0, 0x8b, 0xa, 0x2e}}]}}]}}, 0x0) 5m23.89052512s ago: executing program 0 (id=1810): syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c000904020000010300000904020101010200000724"], 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x88) 5m20.717755859s ago: executing program 0 (id=1832): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "1a05204ed8b4f691bec5191ae91e8e126b0051e74156cdf85f59c743229e34f58026a825de4787765d2de8afc086354d0d474861de0fa0ec2df668b83ec4b3d3", 0x30}, 0x48, 0xfffffffffffffffb) keyctl$read(0xb, r0, 0x0, 0x0) r1 = syz_clone(0x3a80100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) r2 = getpgrp(r1) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000001000000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000854ac2b2cbe8c483aaf6a812204d95d53b9f6c46963986cebbdb1c103f056c589dab07d2f7c185ae86653a8b5fd8ad38e30c235234926bc76a245a3f09ccc53be141d810678e3a1ccddf431764943102a747e6b30a2c1d088bedd823cf963d2aa83a4d6fd5719bbd4d02ee67f485cc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000500"/28], 0x50) kcmp(r2, r1, 0x3, r3, r4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) ptrace(0x11, r5) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0x74000000) write$dsp(r6, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x89) 5m20.454841414s ago: executing program 0 (id=1834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, &(0x7f0000000040)) ioctl$TIOCVHANGUP(r3, 0x5437, 0x300) socket$netlink(0x10, 0x3, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004380)={&(0x7f0000004400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x594d56ab29acc382}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4002801}, 0x8880) 5m19.32475025s ago: executing program 0 (id=1837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, &(0x7f0000000040)) ioctl$TIOCVHANGUP(r3, 0x5437, 0x300) socket$netlink(0x10, 0x3, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004380)={&(0x7f0000004400)=ANY=[@ANYBLOB="140000001000010000000000000000008200000a14000001000100010000000000000000050000021400000011000100000000000000000005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4002801}, 0x8880) 5m18.290925192s ago: executing program 0 (id=1839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000011c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040000) 5m17.711958304s ago: executing program 0 (id=1841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000700000018010000696c6c2500000000002020207b1af8ff00000100bfa100000000000007010000f8ffffffb70201030000850000002d000000181100"/84, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000940)='tlb_flush\x00', r1, 0x0, 0x3}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fbffffff0000000003000000a500009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9}, 0x50) dup3(r2, r2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000001d000000730000000c00000002000066c4348b17658a097d1b0276000000000000aa9fecfcf09f00e837d0cdca2b8f062b000004d785243d160025f4b01375e8dc0903c509dcc583c234055bb4adf0c413674fa080dd943d7c36cd3a2f1193fe5a76f4bd7b14a8c4fbbae74863660cef031303f09bc1764ff197a5ad67ba398d00b8ae0357fa058b07769ef02748288d717030fd5d2d5fe3d24fdb85020ddbe8a59e0484bd275aa8d25e84b2f0dc0aa46cb744c38e7dac943e1a88ebe7"], 0x0, 0x26}, 0x28) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) userfaultfd(0x801) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000740)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000480)="cb86429f9100c92ad2a2ace430e50b100b19d20b242667c5cab4e36b98171e4979cac78ef17c7487d4a6f43fd7ee69a0ba65d9059fa79ad536ee430aff0aac7d49755c81b3707dd42369c8a889f6d1", 0x4f}, {&(0x7f0000000780)="f3ee40547e81cd081859c24090e7a89c2bf73d7aa9ab3ed8da1cb722cec3546d048259c88035b9c3a65819b62f4f80f1cd6b26e2b8c0af99fe9ce97dae5fabac9090e875e59fc9dcb6b1ea45460c87cf13f01c609fa92b3497886600d7540ce4445bd7ebee08ae76c66de3f6d62d28cf02fbb1337b91f827bccec5ad67c8686f7db627e3c2a10feca85c785a0de8ae1b18279502760ba6fe42ffea0f59b8b20f1f8010", 0xa3}, {&(0x7f0000000680)="91912ad60a5ae41c5c0f6e7dc57870d60f7eb323d9da60e31a5141cbbc80467993aa5e14039a385df08aa5c5da1346c9163e22aec888656da1c528cd315262aa710935f6cdf2d99250ac1ec1b61bcea2e2efa1ce6b9c0e543f0b9c15bdfa31039612396d9e7408318f61efe22239", 0x6e}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x8000}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 5m2.497969942s ago: executing program 34 (id=1841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000700000018010000696c6c2500000000002020207b1af8ff00000100bfa100000000000007010000f8ffffffb70201030000850000002d000000181100"/84, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000940)='tlb_flush\x00', r1, 0x0, 0x3}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fbffffff0000000003000000a500009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9}, 0x50) dup3(r2, r2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000001d000000730000000c00000002000066c4348b17658a097d1b0276000000000000aa9fecfcf09f00e837d0cdca2b8f062b000004d785243d160025f4b01375e8dc0903c509dcc583c234055bb4adf0c413674fa080dd943d7c36cd3a2f1193fe5a76f4bd7b14a8c4fbbae74863660cef031303f09bc1764ff197a5ad67ba398d00b8ae0357fa058b07769ef02748288d717030fd5d2d5fe3d24fdb85020ddbe8a59e0484bd275aa8d25e84b2f0dc0aa46cb744c38e7dac943e1a88ebe7"], 0x0, 0x26}, 0x28) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) userfaultfd(0x801) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000740)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000480)="cb86429f9100c92ad2a2ace430e50b100b19d20b242667c5cab4e36b98171e4979cac78ef17c7487d4a6f43fd7ee69a0ba65d9059fa79ad536ee430aff0aac7d49755c81b3707dd42369c8a889f6d1", 0x4f}, {&(0x7f0000000780)="f3ee40547e81cd081859c24090e7a89c2bf73d7aa9ab3ed8da1cb722cec3546d048259c88035b9c3a65819b62f4f80f1cd6b26e2b8c0af99fe9ce97dae5fabac9090e875e59fc9dcb6b1ea45460c87cf13f01c609fa92b3497886600d7540ce4445bd7ebee08ae76c66de3f6d62d28cf02fbb1337b91f827bccec5ad67c8686f7db627e3c2a10feca85c785a0de8ae1b18279502760ba6fe42ffea0f59b8b20f1f8010", 0xa3}, {&(0x7f0000000680)="91912ad60a5ae41c5c0f6e7dc57870d60f7eb323d9da60e31a5141cbbc80467993aa5e14039a385df08aa5c5da1346c9163e22aec888656da1c528cd315262aa710935f6cdf2d99250ac1ec1b61bcea2e2efa1ce6b9c0e543f0b9c15bdfa31039612396d9e7408318f61efe22239", 0x6e}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20, 0x8000}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2m34.130522821s ago: executing program 1 (id=2673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x4) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000"], 0x80}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x4d, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000340)={0x18, r3, 0xffffffffffffffff, 0x1c}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r3}) socket$netlink(0x10, 0x3, 0x0) 2m34.034611686s ago: executing program 1 (id=2674): socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f000040b000/0x1000)=nil, 0x1000) pipe(&(0x7f0000000480)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x891f, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x6, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) socket$netlink(0x10, 0x3, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) process_vm_writev(r6, &(0x7f0000001c80), 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) 2m32.930292808s ago: executing program 1 (id=2679): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x138, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x73, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xff}, @device_b, @device_b, @initial, {0x4, 0x3}}, 0x2, @random=0x1, 0x8086, @val, @val={0x1, 0x3, [{0x12, 0x1}, {0x1b}, {0x48}]}, @val={0x3, 0x1, 0x4}, @val={0x4, 0x6, {0x0, 0x2, 0xc, 0xff56}}, @val={0x6, 0x2, 0xa}, @void, @val={0x25, 0x3, {0x0, 0x0, 0x3}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x800, 0xff, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, 'o'}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x4d, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x81, 0x1, 0xc}}, @preq={0x82, 0x3b, {{0x1, 0x1}, 0x8, 0x6, 0xb, @broadcast, 0x10, @void, 0x1ed2bb9f, 0x7, 0x3, [{{0x0, 0x0, 0x1}, @broadcast, 0x8}, {{0x1}, @device_b, 0xabc}, {{0x0, 0x0, 0x1}, @device_b, 0x1c}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0xaf, 0x2}}]}, @NL80211_ATTR_BEACON_TAIL={0x2e, 0xf, [@peer_mgmt={0x75, 0x18, {0x0, 0x3, @val=0x101, @val=0x2c, @val="744af2a9c9466f9431accc271481b269"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @gcr_ga={0xbd, 0x6}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x138}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 2m32.883637544s ago: executing program 1 (id=2680): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee8000004002000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000080", @ANYRES32=r3, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) 2m32.833658778s ago: executing program 1 (id=2681): syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c000904020000010300000904020101010200000724"], 0x0) pipe2$watch_queue(&(0x7f0000000380), 0x80) syz_usb_connect$printer(0xa0eb7fe2423c1db3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xdf, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xbc, 0x40, 0x80, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x1, 0x1, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xe, 0x1, 0x2}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x5, 0x40, 0x7, 0x20, 0x4}, 0x53, &(0x7f0000000080)={0x5, 0xf, 0x53, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0xe2, 0x0, 0x7fff}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x6, 0xf00f, 0x2, [0x0, 0xff014f, 0xff3f00, 0xff00]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "c684e18cc17d79b234fd008b49acd624"}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0xd, 0xf00, 0x2, [0x3f0f, 0x3f00]}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x812}}, {0xc4, &(0x7f0000000200)=@string={0xc4, 0x3, "3ae8d0905e0c979893279da462f9f637eeff4ae97682b2c964784e9f1575aabda74966a32fea57cdc67728a70b1a8466bb09ecebaf9a5db345bdf4087c2c7092efdd162cd8dc207d67d3c2798fc5db8fd8b61d3db56e5b5104b7da27172776439521936b67aeabe75de5fe1c8921c7704c343a4f30387da3e063752278927ee1c3106b106fa7156217ff8a3eb4f226a4bd78790d14fa643f9d3c2c6179b4a9769ea86c2b0c71b7397c4a4e8e406f5b7cec7658942702fae23d5bb33bb4064cbce32d"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1004}}]}) 2m30.431595793s ago: executing program 1 (id=2688): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x7fffffffffffffff, 0xa01) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) sendto$inet6(r0, &(0x7f0000000140)="96858c7097ecbd393520da4bc88d0f8d68f157dfec70a6f40713ad0085cec56b3c7ff57c", 0x24, 0x24044040, &(0x7f0000000200)={0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00', 0x6}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 2m15.21168132s ago: executing program 35 (id=2688): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x7fffffffffffffff, 0xa01) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) sendto$inet6(r0, &(0x7f0000000140)="96858c7097ecbd393520da4bc88d0f8d68f157dfec70a6f40713ad0085cec56b3c7ff57c", 0x24, 0x24044040, &(0x7f0000000200)={0xa, 0x4e22, 0x3ff, @rand_addr=' \x01\x00', 0x6}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 38.303328744s ago: executing program 8 (id=3174): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x8004) prctl$PR_CAPBSET_DROP(0x18, 0x19) close_range(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_tcp(0x2, 0x1, 0x0) fanotify_init(0x200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x80000001, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0xf4e0, 0x2}, 0x0, 0x0) 37.330462359s ago: executing program 8 (id=3181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="200000000a0a050000000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x8, @none, 0x3ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x400000f2, 0x0, 0x32feb97c}]}) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) close_range(r6, 0xffffffffffffffff, 0x0) 36.114929878s ago: executing program 8 (id=3187): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000021400032dbd7000fbdbdf250900022073797a3200000000"], 0x1c}}, 0x4045) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x1, {0x0, 0x3, 0x0, {0x0, 0xffffffff, 0x177, 0x1a6, 0x7f, 0x7, 0x7, 0x3, 0x8, 0xc000, 0x2, 0x0, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r1, &(0x7f00000001c0), &(0x7f0000000200)=@v3={0x3000000, [{0x10, 0x10000}, {0x7fff, 0x3}]}, 0x18, 0x2) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x28}}], 0x30}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000000)=0x1ff, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) 35.024868702s ago: executing program 8 (id=3192): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x66) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r6, 0x0, 0x300}, 0x38) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x24, 0x21, 0x121, 0x70bd26, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}]}, 0x24}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000800)=ANY=[@ANYBLOB="ffffffffffff000000000000fb94c9ea00300000000000889078ac1eff01ac1414aa0c009078830b0300450000000000000009000000e0000001e0000002"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 34.058837924s ago: executing program 8 (id=3199): clock_getres(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r2, &(0x7f0000001c00), 0x40000000000017a, 0x40840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000002000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x4000) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x18, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x54, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x62da}, {0x6, 0x11, 0xe98}, {0x8, 0x15, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040088) r8 = socket(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', r9, 0x29, 0x0, 0x1, 0x65b, 0x8, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x14, 0x30, 0xb, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') 33.337941377s ago: executing program 8 (id=3202): r0 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002080)=[{{&(0x7f00000001c0)={0xa, 0x4, 0x1ff, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7ff}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000440)="8b419b4edb9061f359553d1fa218d6ddb88fd2e3d0d9a35b64b065595737c61776b9937b8f13703b5e96536cd342fc0d913c36d4b96d7b82f5e5d35c196ff133b13cbedea0f51d319f9906c1c4e5e23027ec905eacac4cee640b838f8426cc278b005a66f62e277f554c1ff74f348f9e922cc6a568537683cfceb406615b8b17c7323b541d2a13335a7f7178b297801bcabe6e66ccbd626d55e8a37bdeba3b8d8be46d8c27938133d113015ed62741c3e6fb42d7db0022cafffa8232ba4c652aa0d10b92cc75708dcc26ac4999f909703074a9128d344b68eabdf353f21823796b57d00e9ddb677036d9", 0xea}, {&(0x7f0000000540)="62b302139eef73f2ae9f11afa2df3e45030b8fbca1d9d63e0ebd6a5316adc9175b6c86aa418c7ab3", 0x28}, {&(0x7f00000005c0)="77a1bc21bb843f15573e65575d3007bf85f080331ecfba8c596ab9642154974694da51381ec38a692037d638def8ea7b62936c310cf19ad1c96b7aeb640a428a8f3f2c0f476f8f725bdb7a5c41fca6c762290bc59c3912e8908f6d3c795cf1b3388a08a70a74130009980a47308b2d41db5a062b2f4f1cf8cb0b079838d67c86d40963ab0addc9451277846938b594fdc63548f92c8d011a4cbe2c7ad6e3347ad7714f42", 0xa4}, {&(0x7f0000000680)="9573ee515e57c29160b6fe448429febd78f9d61521986a700d20e93efc3e236029d0054a196e48ce7f4ebe5bdce8252ee724e1b4d0b2442f75a54edb6663d3c11dcfa20ba03a801f5532ecd1a8b9d5fca9eb953acb3a41ed4165487eecea4f076971177974e187303c1fe954cb2e9c07834859780c9193cec34c57cb90d2a195865a22a599a1eff96e33ca751015f9e354b17522abc6a25685b8803edf79cfdc251265b9557cc5fe9bdfcd5ece281d4c47012ebe4b35e4570b77c88362fc625189a1240afd50e99850498bf6dbe90682a53d3f6c", 0xd4}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000000780)="f411baf7ff19cf5fc95eab41342e5258b73767d015b1d2232268a791398397fcc9f300c4f67e1c37e927418e8fb87f6f55672b3316d21610844e8812ab38e4b0c561f4e7f58ed086f19953bea0627fba57158da771969eedac6d64415ca55245144b455898c8429a33fd1f2930cfb484ca00ca8a97647d9bbd676258bdb58ed1342430511bf52808c26c0b006bb4c1e5d813549799b0765c0666904e1b427e4b5d1298dacee80f31337d4c644cc4b7c8e11258ce1be31380a203f4f33f298e01", 0xc0}, {&(0x7f0000000840)="63cd8d257ee8fc", 0x7}, {&(0x7f0000000880)="4c6dcba8fff7ff370f3725ecb5990199bc5c5cfec364675949165414b9d908c99c768869f5ad01a9e0db2eab0a34d9dbad80ea3ec3fd44998305f9a96a60a5e95c9d985012a52787213df0a699ca078a004736aae8d203c67631da88f386c369b7c58dc00bd7bc3b52c1f36ef820f2433c9b80f309181312af4e95fe373f637509b1c5dab4ca49810a481a8c6c8785018a58657f54e17b7da09ae106965118bf7e332f2267eb517ea7ea6e573ca9655b57c38350f16f4b62668a925fbbfbe9", 0xbf}, {&(0x7f0000000940)="a87fe919fa92a834a79465133dd6cd46fb8c46d39017359b9aedf8f39a91c66c64edd08d74f062d60b33b527b3a06bee02f1921601bd0eda53b34ec295b21c048cc36c45c05320eca0955ffd3ac87e5069cec524514098834ed2af5e6296a83c85bd764cc23555773e09538a7acb91045edee3bf9b3828030dc3212852d2c394b232e2a4ab1b2bad7c9320783cdd8292d75b8d49ff1425f9e7c6863da7b4c42a8cc8ae3fb3cb9d702f61d03a2256a1978aba75a8", 0xb4}], 0x9, &(0x7f0000000c80)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x50}}, {{&(0x7f0000000d00)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff0001}, 0x1c, &(0x7f0000002000)=[{&(0x7f0000000d40)="9ae17ca8027bd059e5880796e9ebf3fce687523b3622b58adf8d8c1ceaf1c733d9eb9eb0b1fc18e84e72194f0942a2a1fee4c9d231b54b08ae3127f7c9cbb9cb7b7acbb1da9e21a282e2f5f440832178210859ec18ebc2bba77de0d706e3065048713652147d5542acfc37ef10e9d713765ec3bccff724f88cfeaef1215b22205178f2e3f2da76b2390f65a537d57f8cbdd498095e94da2a17e55935bcf73e724d912a16924b07747b8b590e3f3a8bae32e7880696369ea892f15a739b52980773b89e7b03cdb016bbd3ede056e0e16e1a04313f5dbaa5850e1b4e8193756734743b2d35f0b798917620db51904af527", 0xf0}, {&(0x7f0000001e80)="40941a82fc248a342afa7b8d0e9ea770e8f1064fb97d79b7155ee0404f3fd6b8cf36838a1ca4cc24681dc150041d0fd77e51cf1f977d6477c7f5efb0945dd96b062803de2d98135fd82a207c381ec7d4352fd9ea0cd3d160a11d37d3c3ed9633486d0e8bc2e3938e3833783f1c03adffc8d6055920e7f32db04997256734837a31317bb2e7d1facaee7b1e5e906e3081c74c062c91060243ce3e640c", 0x9c}, {&(0x7f0000001f40)="a6c7a144f3472ef5a12d135c147748c4c78b9ec9799bc140c3b2a0b6c5b2867d7ac69b3a192f16d0d10bc879ead0867292fa0d154b8e759c4410738c6297f0e1da696a53d79a3b78e70ebe8c1617f4097481f2d2ae42d7f19ef67f22b678ae57a5520032341ae33181be59ea8d", 0x6d}, {&(0x7f0000001fc0)="2124780304db9c807f0777c1000dfc26eddce28c98749abc6f2f0742961b045bd6b473049c1bb7c2611f2b3b41f19afcaf736c9dbd93b7783dea", 0x3a}], 0x4, &(0x7f0000002040)=[@dstopts={{0x30, 0x29, 0x37, {0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}}}], 0x30}}], 0x2, 0x840) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda5, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) sync() sync() ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000100070000000900020073797a31000000000c00078008001240000000000c000300686173683a697000050005000a0018000500040001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x4e22, 0x0, 0xa}, {0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x31ef27cb}, {0x7, 0x0, 0x0, 0x4a000000}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@empty, 0x34ff, 0x4, 0x0, 0xb7, 0x400}}, 0xe8) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) 18.085851881s ago: executing program 36 (id=3202): r0 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002080)=[{{&(0x7f00000001c0)={0xa, 0x4, 0x1ff, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7ff}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000440)="8b419b4edb9061f359553d1fa218d6ddb88fd2e3d0d9a35b64b065595737c61776b9937b8f13703b5e96536cd342fc0d913c36d4b96d7b82f5e5d35c196ff133b13cbedea0f51d319f9906c1c4e5e23027ec905eacac4cee640b838f8426cc278b005a66f62e277f554c1ff74f348f9e922cc6a568537683cfceb406615b8b17c7323b541d2a13335a7f7178b297801bcabe6e66ccbd626d55e8a37bdeba3b8d8be46d8c27938133d113015ed62741c3e6fb42d7db0022cafffa8232ba4c652aa0d10b92cc75708dcc26ac4999f909703074a9128d344b68eabdf353f21823796b57d00e9ddb677036d9", 0xea}, {&(0x7f0000000540)="62b302139eef73f2ae9f11afa2df3e45030b8fbca1d9d63e0ebd6a5316adc9175b6c86aa418c7ab3", 0x28}, {&(0x7f00000005c0)="77a1bc21bb843f15573e65575d3007bf85f080331ecfba8c596ab9642154974694da51381ec38a692037d638def8ea7b62936c310cf19ad1c96b7aeb640a428a8f3f2c0f476f8f725bdb7a5c41fca6c762290bc59c3912e8908f6d3c795cf1b3388a08a70a74130009980a47308b2d41db5a062b2f4f1cf8cb0b079838d67c86d40963ab0addc9451277846938b594fdc63548f92c8d011a4cbe2c7ad6e3347ad7714f42", 0xa4}, {&(0x7f0000000680)="9573ee515e57c29160b6fe448429febd78f9d61521986a700d20e93efc3e236029d0054a196e48ce7f4ebe5bdce8252ee724e1b4d0b2442f75a54edb6663d3c11dcfa20ba03a801f5532ecd1a8b9d5fca9eb953acb3a41ed4165487eecea4f076971177974e187303c1fe954cb2e9c07834859780c9193cec34c57cb90d2a195865a22a599a1eff96e33ca751015f9e354b17522abc6a25685b8803edf79cfdc251265b9557cc5fe9bdfcd5ece281d4c47012ebe4b35e4570b77c88362fc625189a1240afd50e99850498bf6dbe90682a53d3f6c", 0xd4}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000000780)="f411baf7ff19cf5fc95eab41342e5258b73767d015b1d2232268a791398397fcc9f300c4f67e1c37e927418e8fb87f6f55672b3316d21610844e8812ab38e4b0c561f4e7f58ed086f19953bea0627fba57158da771969eedac6d64415ca55245144b455898c8429a33fd1f2930cfb484ca00ca8a97647d9bbd676258bdb58ed1342430511bf52808c26c0b006bb4c1e5d813549799b0765c0666904e1b427e4b5d1298dacee80f31337d4c644cc4b7c8e11258ce1be31380a203f4f33f298e01", 0xc0}, {&(0x7f0000000840)="63cd8d257ee8fc", 0x7}, {&(0x7f0000000880)="4c6dcba8fff7ff370f3725ecb5990199bc5c5cfec364675949165414b9d908c99c768869f5ad01a9e0db2eab0a34d9dbad80ea3ec3fd44998305f9a96a60a5e95c9d985012a52787213df0a699ca078a004736aae8d203c67631da88f386c369b7c58dc00bd7bc3b52c1f36ef820f2433c9b80f309181312af4e95fe373f637509b1c5dab4ca49810a481a8c6c8785018a58657f54e17b7da09ae106965118bf7e332f2267eb517ea7ea6e573ca9655b57c38350f16f4b62668a925fbbfbe9", 0xbf}, {&(0x7f0000000940)="a87fe919fa92a834a79465133dd6cd46fb8c46d39017359b9aedf8f39a91c66c64edd08d74f062d60b33b527b3a06bee02f1921601bd0eda53b34ec295b21c048cc36c45c05320eca0955ffd3ac87e5069cec524514098834ed2af5e6296a83c85bd764cc23555773e09538a7acb91045edee3bf9b3828030dc3212852d2c394b232e2a4ab1b2bad7c9320783cdd8292d75b8d49ff1425f9e7c6863da7b4c42a8cc8ae3fb3cb9d702f61d03a2256a1978aba75a8", 0xb4}], 0x9, &(0x7f0000000c80)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x50}}, {{&(0x7f0000000d00)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff0001}, 0x1c, &(0x7f0000002000)=[{&(0x7f0000000d40)="9ae17ca8027bd059e5880796e9ebf3fce687523b3622b58adf8d8c1ceaf1c733d9eb9eb0b1fc18e84e72194f0942a2a1fee4c9d231b54b08ae3127f7c9cbb9cb7b7acbb1da9e21a282e2f5f440832178210859ec18ebc2bba77de0d706e3065048713652147d5542acfc37ef10e9d713765ec3bccff724f88cfeaef1215b22205178f2e3f2da76b2390f65a537d57f8cbdd498095e94da2a17e55935bcf73e724d912a16924b07747b8b590e3f3a8bae32e7880696369ea892f15a739b52980773b89e7b03cdb016bbd3ede056e0e16e1a04313f5dbaa5850e1b4e8193756734743b2d35f0b798917620db51904af527", 0xf0}, {&(0x7f0000001e80)="40941a82fc248a342afa7b8d0e9ea770e8f1064fb97d79b7155ee0404f3fd6b8cf36838a1ca4cc24681dc150041d0fd77e51cf1f977d6477c7f5efb0945dd96b062803de2d98135fd82a207c381ec7d4352fd9ea0cd3d160a11d37d3c3ed9633486d0e8bc2e3938e3833783f1c03adffc8d6055920e7f32db04997256734837a31317bb2e7d1facaee7b1e5e906e3081c74c062c91060243ce3e640c", 0x9c}, {&(0x7f0000001f40)="a6c7a144f3472ef5a12d135c147748c4c78b9ec9799bc140c3b2a0b6c5b2867d7ac69b3a192f16d0d10bc879ead0867292fa0d154b8e759c4410738c6297f0e1da696a53d79a3b78e70ebe8c1617f4097481f2d2ae42d7f19ef67f22b678ae57a5520032341ae33181be59ea8d", 0x6d}, {&(0x7f0000001fc0)="2124780304db9c807f0777c1000dfc26eddce28c98749abc6f2f0742961b045bd6b473049c1bb7c2611f2b3b41f19afcaf736c9dbd93b7783dea", 0x3a}], 0x4, &(0x7f0000002040)=[@dstopts={{0x30, 0x29, 0x37, {0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}}}], 0x30}}], 0x2, 0x840) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda5, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) sync() sync() ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000100070000000900020073797a31000000000c00078008001240000000000c000300686173683a697000050005000a0018000500040001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x4e22, 0x0, 0xa}, {0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x31ef27cb}, {0x7, 0x0, 0x0, 0x4a000000}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@empty, 0x34ff, 0x4, 0x0, 0xb7, 0x400}}, 0xe8) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) 9.742920397s ago: executing program 6 (id=3308): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x101, 0x8, 0x0, 0xb}, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) r2 = socket$netlink(0x10, 0x3, 0x13) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1c3, 0x4a, 0x1b, 0x62, 0x2e}) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x6e1}], 0x1, 0x20, 0x0) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0x20000000) 8.750075695s ago: executing program 9 (id=3270): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)={0x40, 0x0, 0x1, "d0"}, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x6, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0xcb02}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing}, 0x94) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fe9000/0xf000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000/0x13000)=nil, 0x0}, 0x68) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x3, &(0x7f0000000040)={0x51, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 7.338897896s ago: executing program 6 (id=3323): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x121100) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xd21, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, &(0x7f0000000200)='\x00\x80\x00\x00\x00\x00\x00\x06\x8a\x82,\x9eA\x93\x8a\xb4\xf1y\x8d\x80\x00\xbb\x14C\xee\xd2(]\x1fZG\xdb\xee\xd3\xcf\x98+\x1d\x01\x87Q\xe9\x03H;0\xa8\xe4\xfe\x1a\xbb\x17\xb9\xf0\xe2\t\x93\xde\xf4\xad\x8a\xa2\xf6{\x1d\x02\x85I\f\x06\xe0\x03\xcd\xca\xa2d\x0e\x1d\xc6[\xe8\xd2\xe1\x9cX\xed\xc1?n9%\x00#_\b\xaadP\xf8\xab\xa0#') ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000480)) 7.265944145s ago: executing program 6 (id=3324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed000000010902"], 0x0) write$usbip_server(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x35) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$nfc_llcp(0xffffffffffffffff, 0x111, 0x0, 0x0, 0x90aa62107f0000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4}, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000a7f000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) 3.908026265s ago: executing program 6 (id=3340): syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7d, 0x2e, 0x91, 0x8, 0xa2c, 0x8, 0xe9c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa2, 0x0, 0x0, 0x3f, [{{0x9, 0x4, 0xec, 0x5, 0x0, 0x87, 0x7c, 0xa9, 0x5b}}]}}]}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r0, 0x0, 0x9}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r2, &(0x7f0000000140)=""/56, 0x38) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) 3.88715622s ago: executing program 3 (id=3341): mremap(&(0x7f0000a7c000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000d29000/0x1000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/warn_count', 0x220001, 0x54) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="090000000200c076df2200006d73001903"], 0x50) getdents64(r2, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x80008001, 0x0, 0x1, 0x100000000b, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setresuid(0xee00, 0xee01, 0xee01) unshare(0xc000400) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005e833, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000041c0)=ANY=[@ANYBLOB="0100000000000000b2000040e4ce7f8817"]) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff006c000000000011424203"], 0x0) sendmmsg$sock(r0, &(0x7f0000004180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001fc0)=@ethernet={0x306}, 0x80, 0x0, 0x0, &(0x7f00000026c0)=[@timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0x30}}, {{&(0x7f0000002740)=@vsock={0x28, 0x0, 0x2710}, 0x80, &(0x7f0000002c00)=[{0x0}, {&(0x7f00000029c0)}, {&(0x7f00000002c0)="ccd36558849a1a7907c835cdeecfbb06aac92b18d1e0baecbc40849fcf26c7a19da1059c94cc91a05890b25dc989b97c0095b190422bef35b31a6ba8f7931d6ea9970200000000000000f3c1abfe106f531309196bec1418871612b7e84245d91d4ee3d09395d927c5bbe9768044b66083548c6d21b5c18eec223bd8cb1fa534ea9dcb0553189ff10b1fa63ec544e0de0f686d67b543935e0efaf90ee541cbdc3d194dc7fa232fe1b1742cdd62eee68d03ff46610a6e7a72984fae7bdd3a5c12a50e4a7103ffb38690254bee5e2558be9fb08fc477b3ec8f1ad85612a5adf0db73", 0xe1}, {0x0}], 0x4}}, {{&(0x7f0000002d00)=@rc={0x1f, @fixed, 0x7}, 0x80, &(0x7f0000002dc0)=[{0x0}], 0x1}}, {{&(0x7f0000002ec0)=@isdn={0x22, 0xfd, 0x5, 0x9, 0xbd}, 0x80, 0x0, 0x0, &(0x7f0000004080)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x818}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x40400}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}], 0xa8}}], 0x5, 0x20004040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r5 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x6040000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 3.754951787s ago: executing program 3 (id=3342): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f029, 0x2}) (fail_nth: 2) 3.509542079s ago: executing program 7 (id=3344): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x150, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {0x0, 0x0, 0x8, 0x4, 'group_id'}}, {{0x3, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, r2}}, {0x0, 0x0, 0x8, 0x2, 'group_id'}}]}, 0x0, 0x0, 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 3.410679172s ago: executing program 5 (id=3345): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0x14, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x64, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x25}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x2000010) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) 3.410442102s ago: executing program 3 (id=3346): mkdir(0x0, 0xa) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='cifs\x00', 0x400, &(0x7f0000000000)='F\x91\xfd\x9b:\xc3\xe2v\xf49^\xc6\x9e\b\xb28T\\\xf7\x8e\x99\xbe\xed8\xf5Vp') 3.396188329s ago: executing program 5 (id=3347): socket$rxrpc(0x21, 0x2, 0xa) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x1, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_create(0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r0) socket$unix(0x1, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xdededede}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f00000001c0), &(0x7f00000002c0)=[r2], &(0x7f00000001c0), 0x0, 0x2}) 3.391531234s ago: executing program 3 (id=3348): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/mdstat\x00', 0x0, 0x0) read$hiddev(r1, &(0x7f00000000c0)=""/4092, 0xffc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') 3.286934706s ago: executing program 5 (id=3349): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r6, 0x0) 2.534566631s ago: executing program 7 (id=3350): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20004800) syz_open_dev$video(0x0, 0x101, 0xab82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000005c0)=[@uexit={0x0, 0x18, 0x1}, @rdmsr={0x32, 0x18, {0x378}}, @wr_crn={0x46, 0x20, {0x2, 0x1}}, @cpuid={0x14, 0x18, {0x8, 0x5}}, @rdmsr={0x32, 0x18, {0x314}}, @wrmsr={0x1e, 0x20, {0xb73, 0xf7}}, @cpuid={0x14, 0x18, {0x9, 0x8}}, @wr_crn={0x46, 0x20, {0x0, 0x3}}, @rdmsr={0x32, 0x18, {0x9d4}}, @wrmsr={0x1e, 0x20, {0x0, 0x1}}, @rdmsr={0x32, 0x18, {0x3bf}}, @rdmsr={0x32, 0x18, {0x9a8}}, @cpuid={0x14, 0x18, {0x94d9, 0x4000}}, @uexit={0x0, 0x18, 0x4}, @wr_crn={0x46, 0x20, {0x2, 0x6}}, @code={0xa, 0x6b, {"64f343a566baf80cb82cc8df8eef66bafc0c66b8000066ef653666430f38800f48b854443260455db34c0f23d00f21f8351000000b0f23f866baa10066b8030066ef640f017a0ac441a554fe7d3a660ffe75e1b95c0200000f32"}}, @cpuid={0x14, 0x18, {0x9, 0xa71}}], 0x213}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r1, 0x4068aea3, &(0x7f0000000200)={0xc7, 0x0, 0x1}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r3, 0x32, 0x1, 0x0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0]}, 0x40) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="973bda0fcb7804081600"], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40000) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x29, 0x2000, @fd, 0x80000000, &(0x7f00000002c0)=[{0x0}], 0x1, 0x18, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f027, 0x2}) 2.450925275s ago: executing program 5 (id=3351): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, 0xee01, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10001, 0x755, 0x9, 0x0, 0xfffffe0000000001, 0x8001, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000cc9000/0x4000)=nil, 0x4000, 0x1000002, 0x20010, r1, 0x200000) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r5 = dup(r4) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x50064}, 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8926, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{}, 0x3}}, 0x10) socket$tipc(0x1e, 0x7, 0x0) listen(r1, 0x100) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(r6, 0x1, &(0x7f00000001c0)=0x8000) sched_setaffinity(r6, 0x8, &(0x7f0000000180)=0xc) sched_getattr(r6, &(0x7f0000000100)={0x38}, 0x38, 0x0) 2.372045826s ago: executing program 3 (id=3352): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60010000100033060000000000000000ac1e020100000000008f473c4c000000fc010000000000000000276b8abf00"/64, @ANYBLOB="9bba15337544c8c07944e2e8ffbceaa482c721031a56bd0fdc2c79fdd0a102a9f2d28125ca4b680adae552146564a89083f768ecfc26e06881d867376f8a0d579c6c2146c2fd7ca2cebcb6ab2463c717d6c84643a37cfd5244528f2c9877219c3443b26a3033af25d5990059727e394b25037d9b3e9669f79669a0bcc2d5399cd5f50dd48af3adcd3cbe1cb1a49168bde32679afd75af7acca0031e98b75367b9e10406ff8cb5c3085dd5d8e0e9469084ba21e7dc80bd6e149aede442a06d356", @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fe880000000000000000000000000001fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000006d00000000000000030000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002500080008000800010919002a68ca6a10b637ec3669d31b6f2d4011379abc4f661387bdc1000000"], 0x160}}, 0x40) 2.231534626s ago: executing program 3 (id=3353): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) epoll_create(0xf) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f029, 0x2}) 1.537502977s ago: executing program 7 (id=3354): clock_getres(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r2, &(0x7f0000001c00), 0x40000000000017a, 0x40840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000002000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x4000) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x18, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x54, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x62da}, {0x6, 0x11, 0xe98}, {0x8, 0x15, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040088) r8 = socket(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', r9, 0x29, 0x0, 0x1, 0x65b, 0x8, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0xfffffffc, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0x1000, 0x0) 433.944671ms ago: executing program 7 (id=3355): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x8180, 0x3, 0x2}, 0x18, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000300)={0x2}, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x80047453, 0x0) 386.90287ms ago: executing program 6 (id=3356): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r2, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) close_range(r0, 0xffffffffffffffff, 0x0) 344.821069ms ago: executing program 5 (id=3357): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x31, @tick=0x40, 0x4, {0x0, 0x2}, 0xa, 0x1, 0x4}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000180)) tkill(r2, 0x7) sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="73d0", 0x2}], 0x1}, 0x4000000) unshare(0x6a040000) r4 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000300)="15", 0x1, 0xfffffffffffffffc) keyctl$get_security(0x11, r4, &(0x7f0000000340)=""/9, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x200000000000020c, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000002a4133b00b4d1246000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 333.534604ms ago: executing program 7 (id=3358): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x1d, 0x0, 0x0, {0x1, 0xfe, 0x4}}, 0xe, &(0x7f0000000240)={0x0}}, 0x800) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x275a, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="857ab3054742b9fccd33ee9d8f639b14f42d89ce3b77ce7ad6f56956c3330705a8592f55d2fe01cb1e64600c1fa9161067648279cdd5e6519f60841d82a960796989a43e26ce1b6777ab0177", 0x4c}, {&(0x7f0000000140)="01d69551202dac266333c671e400e0bed9b6f36b4c85224e661b04335bf5e656a8dcd27241e31e5244806415662cf57ff9d9b1dfab2c80eec637980cf76c044df5c65ce05aaa20e423bea7696824cda778aee137e2d9eba84164902eef763e8b8df6dab76f64a09fd71bd8", 0x6b}], 0x2, 0x0, 0x0, 0x880}, 0x0) 264.78908ms ago: executing program 6 (id=3359): ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0xe, 0x1}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="04000100"], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}], 0x20) write(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) sync_file_range(r4, 0x2, 0xda38, 0x1) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x10000000000000, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x52b281, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000d4a1ce4e9de42536000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) 174.216493ms ago: executing program 7 (id=3360): syz_emit_ethernet(0x8a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@rr={0x7, 0x3, 0xd7}]}}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x3, "384f2e196b59482167e83404f483981cc810982895d6cfe2a1d62e4ecd54f89d", "4f024f4fd833b1b014109a6e1c7a4505", {"a6fb3a8a714580bff1b15dc41f638c37", "99daf62beb15ac5de8b48182ff263aca"}}}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x800, 0x10, &(0x7f0000000380)) mmap(&(0x7f0000169000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futimesat(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="f40100000002010400000000000000000a0000080c00018006000340000100000800094000000000500003802c0001"], 0x1f4}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="0c0100003e0007010000000000000000017c000004008e000c00018006000600800a0000e8000280de0006"], 0x10c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) fsopen(&(0x7f0000000280)='nfs\x00', 0x1) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x22, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000007000000000000000a09000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186b0000030000000000000008000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x2e, &(0x7f00000005c0)=""/46, 0x41100, 0x9, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0xb, 0x5, 0x80000001}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000680)=[{0x0, 0x3, 0x6, 0x2}, {0x3, 0x5, 0x7, 0x9}, {0x0, 0x1, 0xc, 0x6}, {0x5, 0x1, 0xb, 0x4}], 0x10, 0xb4b334b3}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@newchain={0x89c, 0x64, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff2, 0x9}, {0x7, 0xe}, {0xb, 0xc}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x13e33289c3531c2f}}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @filter_kind_options=@f_flow={{0x9}, {0x838, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x2d8}, @TCA_FLOW_POLICE={0x82c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0xe, 0xc, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x10000, 0x401, 0x0, 0x8, 0x0, 0x5, 0xffff, 0x80000001, 0xff, 0xffffffff, 0x6, 0x3ff, 0x5, 0x8000, 0x89, 0x7, 0x8, 0x8, 0x0, 0x24, 0x7f, 0x61b, 0x6a, 0x2, 0x3, 0xffffffff, 0x3, 0x4, 0xe2, 0x4, 0x6, 0x1, 0x8a, 0xf, 0xe6, 0x4, 0x0, 0x6, 0xa6, 0xc, 0x2, 0xfff, 0xf1, 0x7, 0x8, 0xffff, 0x4, 0x0, 0x3, 0x100, 0x9, 0x101, 0x400, 0x1, 0x10000, 0x92, 0x5, 0x9f7f, 0x8, 0xe0, 0x81, 0x8c, 0x7fff, 0x3, 0xfffffff9, 0x8, 0x40000, 0x7, 0x101, 0x8, 0x3ff, 0x9d, 0x2, 0x7fffffff, 0x9, 0x10001, 0x4, 0x5, 0x8, 0x8001, 0x9d75, 0x0, 0x9000000, 0x6, 0x7, 0x4, 0x4d7, 0x7ff, 0x7a437450, 0xc04, 0x9, 0xffff, 0x5, 0x9, 0x6, 0x6, 0xfffffffe, 0x4fe6, 0x80000000, 0x3, 0x0, 0x0, 0x100, 0x4, 0x800, 0x8, 0x2, 0x1, 0x29c, 0xc9f0, 0x1, 0x3, 0x1, 0x7, 0x40, 0x8, 0x75d, 0x0, 0xffffffff, 0x7, 0x8000, 0x8, 0xffff, 0x5, 0xa, 0x2, 0x5, 0x4, 0x100, 0x2, 0x3, 0x401, 0x100, 0x9, 0xfffc0000, 0x7, 0x4c, 0x1ca8615, 0x4, 0xb07, 0xc, 0x3366, 0x400, 0x9, 0x5, 0x3, 0xfffffe00, 0x6, 0x4, 0x80000001, 0x81, 0x9, 0x800, 0x80, 0x7f, 0xfffffffa, 0xe8, 0x7ff, 0x7, 0x0, 0xbd2d, 0x2a0, 0x7, 0x3, 0x6, 0xfff, 0x4, 0xff, 0x5, 0x40c8, 0xfb, 0x6, 0x2, 0x3, 0x70e0, 0xff, 0x1, 0x8, 0x8, 0x8, 0xb7, 0x74800000, 0x8, 0x8, 0x6, 0x0, 0x0, 0xce8, 0x2a1, 0x40, 0xf, 0x7, 0x1, 0xffff, 0x3, 0x5, 0xffffb79e, 0x5, 0x4, 0x84fd, 0x3, 0x3, 0x0, 0xfffffe01, 0x9, 0x5343, 0x4, 0x8, 0x5, 0x9, 0x9, 0x1, 0x5, 0x7f, 0x7, 0x4, 0xff, 0x5, 0x4, 0x2, 0x8, 0x8, 0x3, 0x80, 0x73d, 0x8, 0x9, 0xffffffff, 0xdba, 0x20000000, 0x8001, 0x5, 0x7, 0x400, 0x9a, 0xba6, 0x2, 0x2, 0xff, 0x246b, 0x7fff, 0x0, 0x7f, 0x9, 0x5, 0x9, 0x6, 0x3d, 0x1000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x1, 0x100, 0x7f, 0x800, 0xa2, 0x81, 0x0, 0x7fff, 0x6, 0x10001, 0x7, 0x28000000, 0x85, 0x1000, 0x6, 0x7fffffff, 0x8, 0x3, 0x9, 0x8000, 0x9, 0xff, 0x6, 0x1a3, 0xfffff49f, 0x2, 0xc31e, 0x3, 0x5, 0x5, 0x7, 0x0, 0xffffffff, 0xe7, 0x8001, 0xa9, 0x4, 0x8a, 0x0, 0x8, 0x1000, 0x4, 0xffffff58, 0x0, 0x9485, 0x5, 0xffffffff, 0x1ff, 0x401, 0x19, 0x0, 0xb61, 0x54, 0xa2, 0x0, 0x5, 0xcc8, 0xc76, 0x9, 0x0, 0x5, 0x7e6, 0x7, 0x1000, 0x200, 0x2, 0x5, 0x7, 0x3, 0x9, 0x0, 0xcf, 0x6, 0x9, 0x80000000, 0x7, 0x6, 0x7, 0x1, 0x9, 0xff, 0x8, 0x7, 0x8a, 0x5b, 0xe613, 0x4, 0x10, 0x8001, 0x2, 0x9, 0x0, 0x6, 0x6, 0xffff, 0x8, 0xd7d, 0x9, 0x2, 0x8, 0x7, 0x7, 0xc, 0x8, 0x870, 0x7, 0x7, 0x1, 0x1, 0x800, 0x7fff, 0x600, 0x7, 0x5870, 0x100, 0xa, 0x7332, 0x0, 0xfffffffb, 0xd3b4, 0x4, 0x0, 0x3, 0xaa, 0x8001, 0xfec, 0x93, 0x8d7, 0x3ff, 0xfffffffa, 0x1, 0x180, 0x1, 0x2a0, 0x7ff, 0xd, 0xc5, 0x2, 0x5, 0x8000, 0x6, 0x6, 0xf4, 0x4, 0x0, 0x9, 0x3, 0xffff, 0x1ff, 0x1, 0x3, 0x9, 0x800, 0x9, 0x8, 0x9f, 0xffff116f, 0x4, 0x4, 0x0, 0xb, 0x1, 0x3, 0x40, 0x3, 0x4, 0xe22f, 0x4, 0x1, 0x6, 0x0, 0x5, 0x40000000, 0x9, 0xfffffff8, 0x2, 0x9, 0x0, 0x9, 0x8000, 0xe, 0x6, 0x3, 0x5, 0x1, 0x9, 0xfffffff7, 0x62, 0x4, 0x2, 0x1, 0x1000, 0xa, 0x5, 0x80000000, 0x0, 0x0, 0x9, 0xe50, 0x2, 0x1, 0xfffffff9, 0x9, 0x80, 0xfffffffe, 0x7, 0xfffffffd, 0x2, 0x8ef, 0x8, 0x28, 0x80000000, 0x9, 0x3, 0x3, 0x9, 0x0, 0x3, 0x1fc4bf63, 0x8, 0x800, 0x3ff, 0x5, 0x10, 0x3, 0x7fffffff, 0x2, 0x80, 0x0, 0xffff8001, 0x70fc, 0x9, 0x8, 0xff52, 0x200, 0x5, 0xffffffb9, 0xffffffff, 0x7, 0xf0f, 0x3, 0x7, 0x7, 0x0, 0x2, 0x2, 0x3, 0x1, 0xb0f, 0x8001, 0x2, 0xecf4, 0x8, 0x6, 0x101]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100}]}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x89c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20050) 0s ago: executing program 5 (id=3361): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f0000004f00)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x5008, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000340)={0xc0000008}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000100)={0x6f, 0x2, 0x0, {0x1, 0x0, 0x5}}, 0x28) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000140)) r5 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105511, &(0x7f00000000c0)={{0xb}, 0x0, [0x3, 0x0, 0x0, 0x2000, 0x7, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000000, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0xa5f0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffefffffffc, 0x0, 0x7, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x40000000000000, 0xffffffff, 0x0, 0x0, 0xfffffffffffffffd]}) socket(0x400000000010, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) read$FUSE(r6, &(0x7f0000000e40)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000000c0)=0x20) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000000c0)=[{r7, 0x200}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): : Not using interface batadv_slave_1 (retrying later): interface not active [ 686.825040][T16339] hsr_slave_0: entered promiscuous mode [ 686.842145][T16339] hsr_slave_1: entered promiscuous mode [ 686.862935][T16339] debugfs: 'hsr0' already exists in 'hsr' [ 686.884000][T16339] Cannot create hsr debugfs directory [ 686.890123][ T1950] usb 9-1: USB disconnect, device number 3 [ 687.011318][T16370] comedi comedi2: reset error (fatal) [ 687.129200][ T69] bridge_slave_1: left allmulticast mode [ 687.145783][ T69] bridge_slave_1: left promiscuous mode [ 687.161351][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.182291][T16391] netlink: 'syz.7.2797': attribute type 6 has an invalid length. [ 687.356362][ T69] bridge_slave_0: left allmulticast mode [ 687.371289][ T69] bridge_slave_0: left promiscuous mode [ 687.381772][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.575842][ T69] ip6gretap0 (unregistering): left promiscuous mode [ 687.709579][ T69] bond1 (unregistering): (slave geneve2): Releasing active interface [ 687.984209][ T69] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 688.053130][ T69] bridge0 (unregistering): left allmulticast mode [ 688.264832][ T69] bond0 (unregistering): left allmulticast mode [ 688.286563][ T69] bond_slave_0: left allmulticast mode [ 688.304750][ T69] bond_slave_1: left allmulticast mode [ 688.324927][ T69] batadv0: left allmulticast mode [ 688.345067][ T69] bond0 (unregistering): left promiscuous mode [ 688.364569][ T69] bond_slave_0: left promiscuous mode [ 688.383001][ T69] bond_slave_1: left promiscuous mode [ 688.401027][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.423089][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.442952][ T69] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 688.462011][ T69] bond0 (unregistering): Released all slaves [ 688.502477][ T69] bond1 (unregistering): Released all slaves [ 688.515612][ T69] bond2 (unregistering): Released all slaves [ 688.725276][ T69] tipc: Left network mode [ 688.736282][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 688.736297][ T30] audit: type=1400 audit(1755766017.625:1233): avc: denied { append } for pid=16416 comm="syz.5.2800" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 688.767343][ T5169] Bluetooth: hci2: command tx timeout [ 689.511248][ T30] audit: type=1400 audit(1755766017.835:1234): avc: denied { accept } for pid=16419 comm="syz.8.2803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 689.537155][ T30] audit: type=1400 audit(1755766017.835:1235): avc: denied { read } for pid=16419 comm="syz.8.2803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 689.577736][ T30] audit: type=1800 audit(1755766017.855:1236): pid=16427 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.2803" name="bus" dev="overlay" ino=76 res=0 errno=0 [ 689.630030][T16426] can: request_module (can-proto-0) failed. [ 689.767303][ T69] hsr_slave_0: left promiscuous mode [ 689.774046][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.791177][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.909696][T16438] 9pnet_fd: Insufficient options for proto=fd [ 689.986343][T16436] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 689.992887][T16436] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 690.000606][T16436] vhci_hcd vhci_hcd.0: Device attached [ 690.668084][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.675641][T16437] vhci_hcd: connection closed [ 690.703624][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.757106][ T8869] vhci_hcd: stop threads [ 690.761489][ T8869] vhci_hcd: release socket [ 690.806492][ T8869] vhci_hcd: disconnect device [ 690.861434][ T5169] Bluetooth: hci2: command tx timeout [ 690.947206][ T69] veth1_macvtap: left promiscuous mode [ 690.973668][ T69] veth0_macvtap: left promiscuous mode [ 690.979258][ T69] veth1_vlan: left promiscuous mode [ 691.013482][ T69] veth0_vlan: left promiscuous mode [ 691.215577][T16459] FAULT_INJECTION: forcing a failure. [ 691.215577][T16459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.245829][T16459] CPU: 1 UID: 0 PID: 16459 Comm: syz.5.2809 Not tainted syzkaller #0 PREEMPT(full) [ 691.245855][T16459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 691.245865][T16459] Call Trace: [ 691.245871][T16459] [ 691.245878][T16459] dump_stack_lvl+0x16c/0x1f0 [ 691.245908][T16459] should_fail_ex+0x512/0x640 [ 691.245927][T16459] _copy_from_user+0x2e/0xd0 [ 691.245947][T16459] __sys_bpf+0x21d/0x4de0 [ 691.245966][T16459] ? lock_release+0x201/0x2f0 [ 691.245990][T16459] ? __pfx___sys_bpf+0x10/0x10 [ 691.246010][T16459] ? ksys_write+0x190/0x250 [ 691.246027][T16459] ? rcu_is_watching+0x12/0xc0 [ 691.246048][T16459] ? lock_release+0x201/0x2f0 [ 691.246072][T16459] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 691.246095][T16459] ? fput+0x9b/0xd0 [ 691.246115][T16459] ? ksys_write+0x1ac/0x250 [ 691.246129][T16459] ? __pfx_ksys_write+0x10/0x10 [ 691.246146][T16459] __x64_sys_bpf+0x78/0xc0 [ 691.246165][T16459] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 691.246184][T16459] do_syscall_64+0xcd/0x4c0 [ 691.246201][T16459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.246217][T16459] RIP: 0033:0x7f023ad8ebe9 [ 691.246230][T16459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.246247][T16459] RSP: 002b:00007f023bb17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 691.246264][T16459] RAX: ffffffffffffffda RBX: 00007f023afb5fa0 RCX: 00007f023ad8ebe9 [ 691.246276][T16459] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 691.246287][T16459] RBP: 00007f023bb17090 R08: 0000000000000000 R09: 0000000000000000 [ 691.246298][T16459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.246309][T16459] R13: 00007f023afb6038 R14: 00007f023afb5fa0 R15: 00007ffcb4384238 [ 691.246327][T16459] [ 691.462509][ T30] audit: type=1400 audit(1755766020.325:1237): avc: denied { bind } for pid=16460 comm="syz.7.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 691.472766][T16463] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2810'. [ 691.573153][ T69] team0 (unregistering): Port device team_slave_1 removed [ 691.587039][ T69] team0 (unregistering): Port device team_slave_0 removed [ 691.756030][T16339] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 691.793169][T16473] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 691.812396][T16470] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2813'. [ 691.824052][T16339] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 691.845481][T16339] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 691.873902][T16339] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 692.086907][ T69] IPVS: stop unused estimator thread 0... [ 692.115638][T16339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.185906][T16339] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.490759][T16506] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2819'. [ 692.951189][ T5169] Bluetooth: hci2: command tx timeout [ 693.062088][ T8856] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.069279][ T8856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.079718][ T8856] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.086961][ T8856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.569561][T16339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.677444][T16339] veth0_vlan: entered promiscuous mode [ 693.725420][T16339] veth1_vlan: entered promiscuous mode [ 693.844949][T16339] veth0_macvtap: entered promiscuous mode [ 693.865083][T16339] veth1_macvtap: entered promiscuous mode [ 693.908525][T16339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.944816][T16339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.982594][ T8867] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.014893][ T8867] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.050982][ T8867] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.125279][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.172332][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.641519][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.671341][ T8868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.684771][ T8868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.757608][T16558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2785'. [ 695.033582][T16573] netlink: 'syz.8.2829': attribute type 6 has an invalid length. [ 695.232986][T16574] team0: No ports can be present during mode change [ 695.258246][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2828'. [ 695.452663][T16574] team0 (unregistering): Port device team_slave_0 removed [ 695.467637][T16574] team0 (unregistering): Port device team_slave_1 removed [ 695.891690][T16592] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2831'. [ 696.019195][T16592] geneve3: entered allmulticast mode [ 696.121205][ T5989] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 696.356286][T16599] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 696.380150][ T5989] usb 6-1: Using ep0 maxpacket: 16 [ 696.386673][ T5989] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 696.525729][T16602] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 696.532276][T16602] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 696.540014][T16602] vhci_hcd vhci_hcd.0: Device attached [ 696.540792][ T5989] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 696.567215][T16602] 9pnet_fd: Insufficient options for proto=fd [ 696.781218][T15509] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 697.283989][T16603] vhci_hcd: connection reset by peer [ 697.296401][ T49] vhci_hcd: stop threads [ 697.322761][ T49] vhci_hcd: release socket [ 697.358544][ T49] vhci_hcd: disconnect device [ 697.802880][ T5989] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 697.815238][ T5989] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 697.864819][ T5989] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 697.875937][ T5989] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 697.892537][ T5989] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 697.926511][ T5989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 697.943149][T16616] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2839'. [ 698.001698][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2838'. [ 698.060671][ T5989] usb 6-1: SerialNumber: syz [ 698.121564][T12309] block nbd1: Possible stuck request ffff88803ff07000: control (read@0,1024B). Runtime 60 seconds [ 698.122921][T16589] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 698.132478][T12309] block nbd1: Possible stuck request ffff88803ff071c0: control (read@1024,1024B). Runtime 60 seconds [ 698.140499][ T5989] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 698.150297][T12309] block nbd1: Possible stuck request ffff88803ff07380: control (read@2048,1024B). Runtime 60 seconds [ 698.169476][T12309] block nbd1: Possible stuck request ffff88803ff07540: control (read@3072,1024B). Runtime 60 seconds [ 698.243858][ T5989] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 698.405698][ T30] audit: type=1400 audit(1755766027.265:1238): avc: denied { connect } for pid=16626 comm="syz.3.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 698.440665][ T5989] usb 6-1: USB disconnect, device number 33 [ 698.522366][T16637] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 698.690669][T16642] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2845'. [ 698.748632][T16642] geneve2: entered allmulticast mode [ 699.109259][T16651] netlink: 'syz.6.2848': attribute type 6 has an invalid length. [ 699.626729][T16657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2851'. [ 699.732133][T16660] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2852'. [ 700.076199][T16669] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2853'. [ 700.175584][T16672] netlink: 'syz.7.2855': attribute type 6 has an invalid length. [ 701.524651][T16683] netlink: 'syz.3.2859': attribute type 4 has an invalid length. [ 701.535003][T16683] netlink: 'syz.3.2859': attribute type 4 has an invalid length. [ 701.547098][T16683] trusted_key: encrypted_key: master key parameter 'de' is invalid [ 701.575953][ T30] audit: type=1400 audit(1755766030.415:1239): avc: denied { connect } for pid=16680 comm="syz.3.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 701.702691][T16690] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2860'. [ 702.091188][T15509] vhci_hcd: vhci_device speed not set [ 702.268963][T16703] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2865'. [ 702.469306][ T30] audit: type=1400 audit(1755766031.355:1240): avc: denied { setopt } for pid=16704 comm="syz.7.2866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 703.521799][T12157] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 703.601682][T16722] veth9: entered promiscuous mode [ 703.641362][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 703.679611][T16731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2876'. [ 703.690625][T12157] usb 8-1: device descriptor read/64, error -71 [ 703.709680][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2877'. [ 703.746026][ T30] audit: type=1400 audit(1755766032.625:1241): avc: denied { execute } for pid=16727 comm="syz.8.2875" path="/dev/radio#" dev="devtmpfs" ino=4106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 703.770999][ T30] audit: type=1800 audit(1755766032.625:1242): pid=16728 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.2875" name="radio#" dev="devtmpfs" ino=4106 res=0 errno=0 [ 703.901157][T15509] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 703.908837][T16734] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2878'. [ 704.071331][T15509] usb 6-1: Using ep0 maxpacket: 16 [ 704.082682][T12157] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 704.083740][T15509] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 704.284534][T16740] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2879'. [ 704.297241][T16734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 704.306187][T15509] usb 6-1: config 0 has no interface number 0 [ 704.328390][T15509] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 704.361943][T15509] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 704.372878][T15509] usb 6-1: config 0 interface 41 has no altsetting 0 [ 704.381976][T15509] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 704.391311][T15509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.399540][T15509] usb 6-1: Product: syz [ 704.404233][T12157] usb 8-1: device descriptor read/64, error -71 [ 704.420053][T15509] usb 6-1: Manufacturer: syz [ 704.425170][T15509] usb 6-1: SerialNumber: syz [ 704.444063][T15509] usb 6-1: config 0 descriptor?? [ 704.458249][T16722] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 704.469239][T16722] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 704.679442][T12157] usb usb8-port1: attempt power cycle [ 704.690943][T16722] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 704.700916][T16722] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 705.031576][T12157] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 705.052232][T16744] netlink: 'syz.8.2880': attribute type 6 has an invalid length. [ 705.071178][T12157] usb 8-1: device descriptor read/8, error -71 [ 705.259706][T15509] Error reading MAC address [ 705.267533][T15509] sr9700 6-1:0.41: probe with driver sr9700 failed with error -71 [ 705.288834][T15509] usb 6-1: USB disconnect, device number 34 [ 705.334920][T16748] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 705.425155][T12157] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 705.451528][T12157] usb 8-1: device descriptor read/8, error -71 [ 705.641146][ T5849] Bluetooth: hci2: command tx timeout [ 705.768932][T12157] usb usb8-port1: unable to enumerate USB device [ 705.902714][T16757] syz.3.2881 (16757): drop_caches: 2 [ 706.385047][T16771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2888'. [ 706.798397][T16783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2891'. [ 707.074386][T16785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 707.311323][T16786] netlink: 'syz.7.2889': attribute type 10 has an invalid length. [ 707.332072][T16786] batman_adv: batadv0: Adding interface: team0 [ 707.338272][T16786] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.457365][T16786] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 707.544497][T16792] netlink: 'syz.5.2893': attribute type 6 has an invalid length. [ 708.361294][ T5849] Bluetooth: hci4: command tx timeout [ 708.371037][T16799] veth3: entered promiscuous mode [ 708.651192][T12157] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 708.681242][ T30] audit: type=1326 audit(1755766037.555:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.7.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 708.718501][ T30] audit: type=1326 audit(1755766037.555:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.7.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 708.745383][ T30] audit: type=1326 audit(1755766037.555:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.7.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 708.798808][ T30] audit: type=1326 audit(1755766037.555:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.7.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 708.858209][ T30] audit: type=1326 audit(1755766037.555:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.7.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 708.882111][T12157] usb 9-1: Using ep0 maxpacket: 16 [ 708.889411][ T30] audit: type=1326 audit(1755766037.555:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.7.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 708.930964][T12157] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 708.946667][ T30] audit: type=1326 audit(1755766037.555:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.7.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 708.970369][T12157] usb 9-1: config 0 has no interface number 0 [ 708.977884][T12157] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 708.979328][ T30] audit: type=1326 audit(1755766037.555:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.7.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 709.012533][T12157] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 709.015885][ T30] audit: type=1326 audit(1755766037.555:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.7.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 709.048257][ T30] audit: type=1326 audit(1755766037.555:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.7.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 709.071916][ T92] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 709.083142][T12157] usb 9-1: config 0 interface 41 has no altsetting 0 [ 709.086185][ T30] audit: type=1326 audit(1755766037.555:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.7.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 709.164679][T12157] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 709.173821][T12157] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.187474][ T30] audit: type=1326 audit(1755766037.555:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.7.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 709.189934][T12157] usb 9-1: Product: syz [ 709.213292][ T30] audit: type=1326 audit(1755766037.555:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16809 comm="syz.7.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 709.231236][ T92] usb 6-1: Using ep0 maxpacket: 16 [ 709.245287][T12157] usb 9-1: Manufacturer: syz [ 709.250998][T12157] usb 9-1: SerialNumber: syz [ 709.256234][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.267362][ T92] usb 6-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 709.277801][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.289748][T12157] usb 9-1: config 0 descriptor?? [ 709.296817][ T92] usb 6-1: config 0 descriptor?? [ 709.303699][T16799] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 709.313118][ T92] usbhid 6-1:0.0: can't add hid device: -22 [ 709.315712][T16799] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 709.319651][ T92] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 709.590993][T16799] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 709.601971][T16799] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 709.619972][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2908'. [ 709.641858][ T8869] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 709.983667][T15509] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 710.070395][T15509] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 710.699040][T16849] fido_id[16849]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 711.851379][T12157] Error reading MAC address [ 711.872522][T12157] sr9700 9-1:0.41: probe with driver sr9700 failed with error -71 [ 711.915599][T12157] usb 9-1: USB disconnect, device number 4 [ 711.976307][ T92] usb 6-1: USB disconnect, device number 35 [ 712.016331][T16865] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 712.151556][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2921'. [ 712.185967][T16873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 712.193263][T16873] IPv6: NLM_F_CREATE should be set when creating new route [ 712.541642][T12157] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 712.602255][ T92] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 712.647133][T12157] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 712.801146][ T92] usb 6-1: Using ep0 maxpacket: 16 [ 712.847316][ T92] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 712.863181][ T92] usb 6-1: config 0 has no interface number 0 [ 712.883760][ T92] usb 6-1: New USB device found, idVendor=17cc, idProduct=1978, bcdDevice= 1.34 [ 712.893825][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.308131][ T92] usb 6-1: Product: syz [ 713.314063][ T92] usb 6-1: Manufacturer: syz [ 713.318701][ T92] usb 6-1: SerialNumber: syz [ 713.345544][ T92] usb 6-1: config 0 descriptor?? [ 713.365232][ T92] snd-usb-caiaq 6-1:0.67: can't set alt interface. [ 713.374072][ T92] usb 6-1: unable to init card! (ret=-5) [ 713.380551][ T92] snd-usb-caiaq 6-1:0.67: probe with driver snd-usb-caiaq failed with error -5 [ 713.439060][T16894] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2926'. [ 713.575500][ T5919] usb 6-1: USB disconnect, device number 36 [ 715.428672][ T5919] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 715.491699][ T92] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 715.499920][ T92] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 715.841218][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 715.862371][ T5919] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 715.950333][ T5919] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 715.965632][T16931] fido_id[16931]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 715.993723][ T5919] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 716.324970][ T5919] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 716.341070][ T5919] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 716.480248][ T9] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 716.480567][ T5919] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 716.684561][ T9] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 716.878765][ T5919] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 717.239677][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 717.247906][ T5919] usb 4-1: SerialNumber: syz [ 717.254959][T16923] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 717.271564][ T5919] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 717.281810][ T5919] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 717.434610][T16956] syz.7.2942: attempt to access beyond end of device [ 717.434610][T16956] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 717.448551][T16956] syz.7.2942: attempt to access beyond end of device [ 717.448551][T16956] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 717.461908][T16956] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 717.518811][T16956] syz.7.2942: attempt to access beyond end of device [ 717.518811][T16956] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 717.532192][T16956] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 717.543684][T16956] syz.7.2942: attempt to access beyond end of device [ 717.543684][T16956] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 717.557244][T16956] syz.7.2942: attempt to access beyond end of device [ 717.557244][T16956] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 717.602391][T16956] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 717.612567][T16956] syz.7.2942: attempt to access beyond end of device [ 717.612567][T16956] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 717.616221][T15509] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 717.626428][T16956] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 717.651859][T16956] syz.7.2942: attempt to access beyond end of device [ 717.651859][T16956] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 717.666466][T16956] syz.7.2942: attempt to access beyond end of device [ 717.666466][T16956] nbd7: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 717.679869][T16956] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 717.690380][T16956] syz.7.2942: attempt to access beyond end of device [ 717.690380][T16956] nbd7: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 717.703877][T16956] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 717.713461][T16956] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 718.184535][T16966] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2943'. [ 718.200851][T15509] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 718.234746][T15509] usb 6-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 718.277293][T15509] usb 6-1: config 2 interface 0 has no altsetting 0 [ 718.293936][T15509] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 718.304239][T16973] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2947'. [ 718.314460][T15509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.323673][T15509] usb 6-1: Product: syz [ 718.328084][T15509] usb 6-1: Manufacturer: syz [ 718.334591][T15509] usb 6-1: SerialNumber: syz [ 718.671877][ T5919] usb 4-1: USB disconnect, device number 90 [ 719.724840][ T5933] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 719.733064][T15509] usb 6-1: USB disconnect, device number 37 [ 719.740357][ T5933] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 720.051186][ T5933] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 720.164001][T16995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2954'. [ 720.212452][ T5933] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 720.225781][ T5933] usb 8-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 720.242073][ T5933] usb 8-1: config 2 interface 0 has no altsetting 0 [ 720.352603][ T5933] usb 8-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 720.361823][ T5933] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.369808][ T5933] usb 8-1: Product: syz [ 720.375424][ T5933] usb 8-1: Manufacturer: syz [ 720.380530][ T5933] usb 8-1: SerialNumber: syz [ 720.546856][ T5919] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 720.631245][ T5933] usb 8-1: USB disconnect, device number 27 [ 720.791169][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 720.798057][ T5919] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 720.800587][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 720.800602][ T30] audit: type=1326 audit(1755766049.685:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.8.2957" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f014a78ebe9 code=0x0 [ 720.813469][ T5919] usb 6-1: config 0 has no interface number 0 [ 720.842785][ T5919] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.853829][ T5919] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.863737][ T5919] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 720.872973][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.882398][ T5919] usb 6-1: config 0 descriptor?? [ 720.901191][ T1950] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 721.051146][ T1950] usb 4-1: Using ep0 maxpacket: 16 [ 721.057580][ T1950] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 721.068438][ T1950] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 721.078259][ T1950] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 721.088056][ T1950] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 721.099565][ T1950] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 721.109871][ T1950] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 721.124384][ T1950] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 721.133458][ T1950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 721.141467][ T1950] usb 4-1: SerialNumber: syz [ 721.151686][T17002] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 721.160455][ T1950] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 721.173596][ T1950] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 721.692563][ T5919] uclogic 0003:28BD:0071.001B: pen parameters not found [ 721.699635][ T5919] uclogic 0003:28BD:0071.001B: interface is invalid, ignoring [ 721.745392][ T30] audit: type=1400 audit(1755766050.635:1286): avc: denied { ioctl } for pid=17016 comm="syz.8.2960" path="socket:[63195]" dev="sockfs" ino=63195 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 721.814927][ T9] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 721.896122][ T92] usb 6-1: USB disconnect, device number 38 [ 721.909070][T17023] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2961'. [ 721.971366][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 721.980851][ T9] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 721.991750][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 722.001679][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 722.012788][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 722.024826][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 722.037692][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 722.063697][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 722.083798][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 722.101066][ T9] usb 8-1: SerialNumber: syz [ 722.114594][T17014] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 722.124171][ T9] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 722.132662][ T9] cdc_acm 8-1:1.0: probe with driver cdc_acm failed with error -12 [ 723.249276][ T92] usb 4-1: USB disconnect, device number 91 [ 724.300380][ T1950] usb 8-1: USB disconnect, device number 28 [ 724.519290][ T92] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 724.528854][ T92] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 724.919666][T17066] tipc: Started in network mode [ 724.981391][T17066] tipc: Node identity 4, cluster identity 4711 [ 724.987987][T17066] tipc: Node number set to 4 [ 725.552492][ T5863] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 725.621845][T17077] netlink: 'syz.5.2973': attribute type 6 has an invalid length. [ 725.703491][ T5863] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 725.812099][ T5863] usb 8-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 725.827502][ T5863] usb 8-1: config 2 interface 0 has no altsetting 0 [ 725.843043][ T5863] usb 8-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 725.871139][ T5863] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.911189][ T5863] usb 8-1: Product: syz [ 725.924874][ T5863] usb 8-1: Manufacturer: syz [ 725.929484][ T5863] usb 8-1: SerialNumber: syz [ 727.521931][ T5863] usb 8-1: USB disconnect, device number 29 [ 727.841130][ T5989] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 728.108381][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 728.334526][ T5989] usb 9-1: device descriptor read/64, error -32 [ 728.598980][T12309] block nbd1: Possible stuck request ffff88803ff07000: control (read@0,1024B). Runtime 90 seconds [ 728.628845][T12309] block nbd1: Possible stuck request ffff88803ff071c0: control (read@1024,1024B). Runtime 90 seconds [ 728.641956][T12309] block nbd1: Possible stuck request ffff88803ff07380: control (read@2048,1024B). Runtime 90 seconds [ 728.656297][T12309] block nbd1: Possible stuck request ffff88803ff07540: control (read@3072,1024B). Runtime 90 seconds [ 728.732486][ T5989] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 728.868521][T17101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2979'. [ 729.170882][T17101] geneve2: entered allmulticast mode [ 729.205998][ T5989] usb 9-1: Using ep0 maxpacket: 32 [ 729.218380][ T5989] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 729.431202][ T5863] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 729.611282][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 729.625798][ T5863] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 729.640010][ T5863] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 729.661989][ T5863] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 729.691141][ T5989] usb 9-1: config 0 has no interface number 0 [ 729.701179][ T5989] usb 9-1: config 0 interface 184 has no altsetting 0 [ 729.725424][ T5989] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 729.734711][ T5989] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.743418][ T5863] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 729.766994][ T5989] usb 9-1: Product: syz [ 729.775054][ T5863] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 729.789958][ T5989] usb 9-1: Manufacturer: syz [ 729.808995][ T5989] usb 9-1: SerialNumber: syz [ 729.835950][ T5989] usb 9-1: config 0 descriptor?? [ 729.863990][ T5863] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 729.878609][ T5989] smsc75xx v1.0.0 [ 729.912232][ T5863] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 729.957911][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 729.988149][ T5863] usb 6-1: SerialNumber: syz [ 730.005843][ T30] audit: type=1326 audit(1755766058.885:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.6.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3898ebe9 code=0x7ffc0000 [ 730.042267][ T30] audit: type=1326 audit(1755766058.885:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.6.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f3898ebe9 code=0x7ffc0000 [ 730.066186][T17105] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 730.074377][ T5863] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 730.083909][ T5863] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 730.098553][ T30] audit: type=1326 audit(1755766058.885:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.6.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3898ebe9 code=0x7ffc0000 [ 730.126956][ T30] audit: type=1326 audit(1755766058.885:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.6.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f9f3898ebe9 code=0x7ffc0000 [ 730.969399][ T30] audit: type=1326 audit(1755766058.885:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.6.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3898ebe9 code=0x7ffc0000 [ 730.993140][ T30] audit: type=1326 audit(1755766058.895:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.6.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f9f3898ebe9 code=0x7ffc0000 [ 731.016863][ T30] audit: type=1326 audit(1755766058.895:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.6.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3898ebe9 code=0x7ffc0000 [ 731.040662][ T30] audit: type=1326 audit(1755766058.895:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.6.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f3898ebe9 code=0x7ffc0000 [ 731.064334][ T30] audit: type=1326 audit(1755766058.895:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.6.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3898ebe9 code=0x7ffc0000 [ 731.088605][ T30] audit: type=1326 audit(1755766058.895:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17114 comm="syz.6.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f9f3898ebe9 code=0x7ffc0000 [ 731.135878][T17120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.147469][ T5989] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 731.213484][T17120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.228064][ T5989] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 731.888810][ T9] usb 6-1: USB disconnect, device number 39 [ 732.105531][T17133] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2989'. [ 732.122940][T17133] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2989'. [ 732.392148][T17139] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2990'. [ 732.406412][T17143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2992'. [ 732.660339][T17145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 732.954902][ T5989] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 733.046853][ T5989] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 733.144586][T17155] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2994'. [ 733.160189][ T5989] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 733.186151][ T5989] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 733.218405][ T5989] usb 9-1: USB disconnect, device number 7 [ 733.333895][T17162] veth11: entered promiscuous mode [ 733.591218][ T10] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 733.855203][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 733.882944][ T10] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 734.061847][T17183] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3001'. [ 734.070886][T17183] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3001'. [ 734.080067][T17183] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3001'. [ 734.182188][ T10] usb 6-1: config 0 has no interface number 0 [ 734.221887][ T10] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 734.238778][ T10] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 734.292619][ T10] usb 6-1: config 0 interface 41 has no altsetting 0 [ 734.301580][T17185] overlayfs: option "workdir=./file2" is useless in a non-upper mount, ignore [ 734.311044][T17185] overlayfs: missing 'lowerdir' [ 734.330024][ T10] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 734.339144][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.366945][ T10] usb 6-1: Product: syz [ 734.420570][ T10] usb 6-1: Manufacturer: syz [ 734.425897][ T10] usb 6-1: SerialNumber: syz [ 734.431597][ T10] usb 6-1: config 0 descriptor?? [ 734.440515][T17162] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 734.536471][T17162] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 734.888571][T17162] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 734.896424][T17162] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 737.147458][T17227] geneve4: entered promiscuous mode [ 737.152776][T17227] geneve4: entered allmulticast mode [ 737.620269][ T10] Error reading MAC address [ 737.628338][ T10] sr9700 6-1:0.41: probe with driver sr9700 failed with error -71 [ 737.673380][ T10] usb 6-1: USB disconnect, device number 40 [ 738.093015][T17267] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3024'. [ 738.301153][ T5933] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 738.360756][T17270] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3025'. [ 738.481250][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 738.496379][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.530580][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.559501][ T5933] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 738.590054][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.604470][T17280] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3028'. [ 738.623190][ T5933] usb 4-1: config 0 descriptor?? [ 738.635648][T17280] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3028'. [ 738.669764][T17280] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3028'. [ 739.040087][T17290] sp0: Synchronizing with TNC [ 739.075108][ T5933] hid-multitouch 0003:1FD2:6007.001D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 739.091530][T17290] sp0: Found TNC [ 739.539710][T17265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3023'. [ 739.572768][T17265] netlink: 'syz.3.3023': attribute type 1 has an invalid length. [ 739.581269][T17265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3023'. [ 739.632326][ T5933] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 739.641772][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 739.641787][ T30] audit: type=1326 audit(1755766068.535:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17264 comm="syz.3.3023" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fd9b2b85ba7 code=0x0 [ 739.801209][ T5933] usb 8-1: device descriptor read/64, error -71 [ 740.043528][ T5933] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 741.123587][ T92] usb 4-1: USB disconnect, device number 92 [ 741.181783][T17307] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.189676][T17307] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.208230][T17307] veth3: left promiscuous mode [ 741.274545][ T5933] usb 8-1: device descriptor read/64, error -71 [ 741.490295][T17315] syz.5.3039: attempt to access beyond end of device [ 741.490295][T17315] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 741.514782][ T5933] usb usb8-port1: attempt power cycle [ 741.521313][T17315] syz.5.3039: attempt to access beyond end of device [ 741.521313][T17315] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 741.537946][T17315] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 741.549487][T17315] syz.5.3039: attempt to access beyond end of device [ 741.549487][T17315] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 741.562570][T17315] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 741.607840][T17315] syz.5.3039: attempt to access beyond end of device [ 741.607840][T17315] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 741.632886][T17315] syz.5.3039: attempt to access beyond end of device [ 741.632886][T17315] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 741.658297][T17315] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 741.672705][T17315] syz.5.3039: attempt to access beyond end of device [ 741.672705][T17315] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 741.704164][T17315] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 741.901199][ T5933] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 741.915290][T17315] syz.5.3039: attempt to access beyond end of device [ 741.915290][T17315] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 741.931534][ T5933] usb 8-1: device descriptor read/8, error -71 [ 741.959913][T17315] syz.5.3039: attempt to access beyond end of device [ 741.959913][T17315] nbd5: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 741.977200][T17315] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 741.988629][T17315] syz.5.3039: attempt to access beyond end of device [ 741.988629][T17315] nbd5: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 742.032268][T17315] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 742.044503][T17315] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 742.347259][T17336] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3045'. [ 742.356765][T17336] nbd: must specify a size in bytes for the device [ 743.178330][ T1312] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 743.231225][ T10] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 744.794212][ T10] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 744.811295][ T10] usb 4-1: config 6 has no interface number 0 [ 744.831194][ T10] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 744.851169][ T10] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 744.864455][ T10] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 744.891119][ T10] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 744.913268][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 744.924891][ T10] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 744.966628][ T10] usb 4-1: Product: syz [ 745.009467][ T10] usb 4-1: Manufacturer: syz [ 745.035512][ T10] usb 4-1: SerialNumber: syz [ 745.040849][T17359] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3054'. [ 745.179059][ T10] hso 4-1:6.2: Failed to find BULK IN ep [ 746.200646][T17359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.328968][T17368] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(18) [ 746.335586][T17368] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 746.345812][T17368] vhci_hcd vhci_hcd.0: Device attached [ 746.352584][T17372] vhci_hcd: connection closed [ 746.352767][ T69] vhci_hcd: stop threads [ 746.363911][ T69] vhci_hcd: release socket [ 746.369570][ T69] vhci_hcd: disconnect device [ 746.561397][T17378] syz.7.3057: attempt to access beyond end of device [ 746.561397][T17378] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 746.565862][T17379] syz.6.3058: attempt to access beyond end of device [ 746.565862][T17379] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 746.598897][T17378] syz.7.3057: attempt to access beyond end of device [ 746.598897][T17378] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 746.614041][T17379] syz.6.3058: attempt to access beyond end of device [ 746.614041][T17379] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 746.629955][T17379] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 746.630012][T17378] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 746.659802][T17379] syz.6.3058: attempt to access beyond end of device [ 746.659802][T17379] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 746.659834][T17378] syz.7.3057: attempt to access beyond end of device [ 746.659834][T17378] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 746.690761][T17379] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 746.690872][T17378] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 746.726593][T17378] syz.7.3057: attempt to access beyond end of device [ 746.726593][T17378] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 746.728288][T17379] syz.6.3058: attempt to access beyond end of device [ 746.728288][T17379] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 746.766561][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.767307][T17379] syz.6.3058: attempt to access beyond end of device [ 746.767307][T17379] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 746.790140][T17378] syz.7.3057: attempt to access beyond end of device [ 746.790140][T17378] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 746.810591][T17378] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 746.822628][T17379] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 746.846688][T17378] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 746.859058][T17379] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 746.880466][T17378] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 746.880805][T17379] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 746.904769][T17379] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 746.919671][T17379] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 746.921137][T17378] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 746.943290][T17378] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 747.205778][ T10] usb 4-1: USB disconnect, device number 93 [ 747.223910][T17389] Bluetooth: MGMT ver 1.23 [ 747.301521][ T5863] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 747.375422][T17393] Failed to initialize the IGMP autojoin socket (err -2) [ 747.496467][ T5863] usb 6-1: config 0 interface 0 has no altsetting 0 [ 747.506390][ T5863] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 747.669086][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.691059][ T5863] usb 6-1: config 0 descriptor?? [ 747.911130][ T10] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 747.961607][T17381] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3059'. [ 747.973074][T17381] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3059'. [ 748.055630][T17381] sit2: entered allmulticast mode [ 748.061226][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 748.067462][ T10] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 748.086301][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 748.099972][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 748.109839][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.143341][ T10] usbtmc 4-1:16.0: bulk endpoints not found [ 748.376969][T17400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.432899][T17400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.438171][ T5863] usbhid 6-1:0.0: can't add hid device: -71 [ 748.447565][ T5863] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 748.457296][ T10] usb 4-1: USB disconnect, device number 94 [ 748.472402][ T5863] usb 6-1: USB disconnect, device number 41 [ 748.958371][ T30] audit: type=1400 audit(1755766077.845:1302): avc: denied { mounton } for pid=17414 comm="syz.5.3071" path="/proc/892/cgroup" dev="proc" ino=65062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 749.009525][ T30] audit: type=1400 audit(1755766077.885:1303): avc: denied { remount } for pid=17414 comm="syz.5.3071" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 749.381622][ T5863] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 749.591208][ T5863] usb 9-1: Using ep0 maxpacket: 32 [ 749.610333][ T5863] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 749.635475][ T5863] usb 9-1: config 0 has no interface number 0 [ 749.656865][ T5863] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 749.747474][ T5863] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.769050][ T5863] usb 9-1: Product: syz [ 749.779112][ T5863] usb 9-1: Manufacturer: syz [ 749.793311][ T5863] usb 9-1: SerialNumber: syz [ 749.810814][ T5863] usb 9-1: config 0 descriptor?? [ 749.864925][ T5863] smsc95xx v2.0.0 [ 750.057797][T17444] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 750.068621][T17444] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 750.082393][T17444] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 750.092448][T17444] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 750.104349][T17444] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 750.119566][T17444] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 750.130369][T17444] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 750.565103][T17453] veth13: entered promiscuous mode [ 750.802310][T17458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 750.881641][ T1950] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 750.890137][ T5863] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 751.204475][T17424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.285788][T17424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.295312][ T5863] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 751.307219][ T5863] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 751.321445][ T5863] usb 9-1: USB disconnect, device number 8 [ 751.352475][ T1950] usb 6-1: Using ep0 maxpacket: 16 [ 751.359537][ T1950] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 751.369831][ T1950] usb 6-1: config 0 has no interface number 0 [ 751.377292][ T1950] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 751.388476][ T1950] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 751.400178][ T1950] usb 6-1: config 0 interface 41 has no altsetting 0 [ 751.409429][ T1950] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 751.418760][ T1950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.426868][ T1950] usb 6-1: Product: syz [ 751.431096][ T1950] usb 6-1: Manufacturer: syz [ 751.435672][ T1950] usb 6-1: SerialNumber: syz [ 751.441162][ T1950] usb 6-1: config 0 descriptor?? [ 751.446458][T17453] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 751.453817][T17453] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 751.461792][ T30] audit: type=1326 audit(1755766080.355:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.3.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2b8ebe9 code=0x7ffc0000 [ 751.485651][ T30] audit: type=1326 audit(1755766080.355:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.3.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2b8ebe9 code=0x7ffc0000 [ 751.512974][ T30] audit: type=1326 audit(1755766080.355:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.3.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b2b8ebe9 code=0x7ffc0000 [ 751.536875][ T30] audit: type=1326 audit(1755766080.355:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.3.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2b8ebe9 code=0x7ffc0000 [ 751.560591][ T30] audit: type=1326 audit(1755766080.355:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.3.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fd9b2b8ebe9 code=0x7ffc0000 [ 751.584397][ T30] audit: type=1326 audit(1755766080.355:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.3.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2b8ebe9 code=0x7ffc0000 [ 751.607844][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.616631][ T30] audit: type=1326 audit(1755766080.355:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.3.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b2b8ebe9 code=0x7ffc0000 [ 751.643203][ T30] audit: type=1326 audit(1755766080.355:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.3.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2b8ebe9 code=0x7ffc0000 [ 751.690761][T17453] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 751.704802][T17453] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 751.839895][T17474] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3091'. [ 751.955003][ T5919] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 751.981356][T17476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 752.251842][ T5919] usb 8-1: Using ep0 maxpacket: 8 [ 752.265580][ T5919] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 752.283456][ T5919] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.293831][ T5919] usb 8-1: Product: syz [ 752.298012][ T5919] usb 8-1: Manufacturer: syz [ 752.321145][ T5919] usb 8-1: SerialNumber: syz [ 752.335990][ T5919] usb 8-1: config 0 descriptor?? [ 752.380558][T17485] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3094'. [ 752.547608][ T5919] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 752.681753][ T1950] Error reading MAC address [ 752.714699][ T1950] sr9700 6-1:0.41: probe with driver sr9700 failed with error -71 [ 752.983636][ T1950] usb 6-1: USB disconnect, device number 42 [ 753.007544][ T5919] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 753.043839][ T5919] usb 8-1: USB disconnect, device number 34 [ 753.479543][T17512] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3101'. [ 753.492472][T17512] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3101'. [ 753.525895][T17514] overlayfs: failed to resolve './cgroup': -2 [ 753.591111][ T92] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 753.783063][ T92] usb 6-1: Using ep0 maxpacket: 16 [ 753.803923][ T92] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 753.816707][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.824821][ T92] usb 6-1: Product: syz [ 753.828992][ T92] usb 6-1: Manufacturer: syz [ 753.833587][ T92] usb 6-1: SerialNumber: syz [ 753.908491][ T92] usb 6-1: config 0 descriptor?? [ 753.915902][ T92] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 754.353913][T17530] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3106'. [ 754.610533][T17530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 754.701113][ T10] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 754.902280][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.914083][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 754.923479][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.941148][ T10] usb 4-1: config 0 descriptor?? [ 754.948495][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 754.971136][T17535] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 755.121115][T17535] usb 9-1: Using ep0 maxpacket: 32 [ 755.144034][T17535] usb 9-1: config 0 has an invalid interface number: 126 but max is 0 [ 755.152726][T17535] usb 9-1: config 0 has no interface number 0 [ 755.200947][T17535] usb 9-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 755.228151][T17535] usb 9-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 755.346086][T17545] delete_channel: no stack [ 755.352220][ T10] pwc: send_video_command error -71 [ 755.438810][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 755.451784][ T10] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 755.479837][T17535] usb 9-1: config 0 interface 126 has no altsetting 0 [ 755.496284][ T10] usb 4-1: USB disconnect, device number 95 [ 755.516296][T17535] usb 9-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 755.539823][T17535] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.585074][T17535] usb 9-1: Product: syz [ 755.594347][T17535] usb 9-1: Manufacturer: syz [ 755.599460][T17535] usb 9-1: SerialNumber: syz [ 755.613474][T17535] usb 9-1: config 0 descriptor?? [ 755.625416][T17538] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 755.670525][T17538] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 755.712132][ T92] gp8psk: usb out operation failed. [ 755.720343][ T92] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 755.752834][ T92] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 755.785121][ T92] usb 6-1: media controller created [ 755.917278][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 756.207445][ T92] gp8psk_fe: Frontend revision 1 attached [ 756.216806][ T92] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 756.227632][ T92] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 756.369453][ T92] gp8psk: usb in 138 operation failed. [ 756.380138][T17535] ir_usb 9-1:0.126: IR Dongle converter detected [ 756.467136][ T92] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 756.481187][ T92] gp8psk: found Genpix USB device pID = 201 (hex) [ 756.511204][ T92] usb 6-1: USB disconnect, device number 43 [ 756.580538][T17535] usb 9-1: IRDA class descriptor not found, device not bound [ 756.787682][ T92] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 756.828594][T17535] usb 9-1: USB disconnect, device number 9 [ 757.257593][T17563] FAULT_INJECTION: forcing a failure. [ 757.257593][T17563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.281161][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 757.281178][ T30] audit: type=1400 audit(1755766086.155:1320): avc: denied { setopt } for pid=17564 comm="syz.6.3114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 757.321311][T17563] CPU: 1 UID: 0 PID: 17563 Comm: syz.5.3113 Not tainted syzkaller #0 PREEMPT(full) [ 757.321337][T17563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 757.321347][T17563] Call Trace: [ 757.321353][T17563] [ 757.321360][T17563] dump_stack_lvl+0x16c/0x1f0 [ 757.321382][T17563] should_fail_ex+0x512/0x640 [ 757.321402][T17563] _copy_from_iter+0x29f/0x16f0 [ 757.321425][T17563] ? __alloc_skb+0x200/0x380 [ 757.321441][T17563] ? __pfx__copy_from_iter+0x10/0x10 [ 757.321462][T17563] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 757.321485][T17563] netlink_sendmsg+0x829/0xdd0 [ 757.321506][T17563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.321528][T17563] ____sys_sendmsg+0xa95/0xc70 [ 757.321551][T17563] ? copy_msghdr_from_user+0x10a/0x160 [ 757.321568][T17563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 757.321589][T17563] ? __pfx_kstrtouint+0x10/0x10 [ 757.321606][T17563] ? kstrtouint_from_user+0x13c/0x1d0 [ 757.321623][T17563] ___sys_sendmsg+0x134/0x1d0 [ 757.321640][T17563] ? __pfx____sys_sendmsg+0x10/0x10 [ 757.321661][T17563] ? rcu_is_watching+0x12/0xc0 [ 757.321690][T17563] __sys_sendmsg+0x16d/0x220 [ 757.321707][T17563] ? __pfx___sys_sendmsg+0x10/0x10 [ 757.321732][T17563] do_syscall_64+0xcd/0x4c0 [ 757.321751][T17563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.321768][T17563] RIP: 0033:0x7f023ad8ebe9 [ 757.321781][T17563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.321801][T17563] RSP: 002b:00007f023bb17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.321818][T17563] RAX: ffffffffffffffda RBX: 00007f023afb5fa0 RCX: 00007f023ad8ebe9 [ 757.321830][T17563] RDX: 0000000004000810 RSI: 0000200000001200 RDI: 0000000000000005 [ 757.321841][T17563] RBP: 00007f023bb17090 R08: 0000000000000000 R09: 0000000000000000 [ 757.321853][T17563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.321863][T17563] R13: 00007f023afb6038 R14: 00007f023afb5fa0 R15: 00007ffcb4384238 [ 757.321881][T17563] [ 758.969288][T12309] block nbd1: Possible stuck request ffff88803ff07000: control (read@0,1024B). Runtime 120 seconds [ 758.980996][T12309] block nbd1: Possible stuck request ffff88803ff071c0: control (read@1024,1024B). Runtime 120 seconds [ 759.004901][T12309] block nbd1: Possible stuck request ffff88803ff07380: control (read@2048,1024B). Runtime 120 seconds [ 759.022527][T12309] block nbd1: Possible stuck request ffff88803ff07540: control (read@3072,1024B). Runtime 120 seconds [ 759.531451][T17591] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3122'. [ 759.540526][T17591] IPVS: Error during creation of socket; terminating [ 760.261658][T17598] nbd3: detected capacity change from 0 to 127 [ 760.270450][ T5849] block nbd3: Receive control failed (result -32) [ 760.278326][ T8071] block nbd3: Dead connection, failed to find a fallback [ 760.285475][ T8071] block nbd3: shutting down sockets [ 760.293010][ T8071] blk_print_req_error: 53 callbacks suppressed [ 760.293024][ T8071] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 760.652717][ T8071] buffer_io_error: 54 callbacks suppressed [ 760.652734][ T8071] Buffer I/O error on dev nbd3, logical block 0, async page read [ 760.681301][ T8071] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 760.698170][ T8071] Buffer I/O error on dev nbd3, logical block 1, async page read [ 760.727644][T17602] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3124'. [ 760.818451][ T8071] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 760.828561][ T8071] Buffer I/O error on dev nbd3, logical block 2, async page read [ 760.837761][ T8071] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 760.848976][ T8071] Buffer I/O error on dev nbd3, logical block 3, async page read [ 761.249086][T17612] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3127'. [ 761.311325][ T8071] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 761.323258][ T8071] Buffer I/O error on dev nbd3, logical block 0, async page read [ 761.390464][ T8071] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 761.426555][ T8071] Buffer I/O error on dev nbd3, logical block 1, async page read [ 761.455520][ T8071] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 761.565914][ T8071] Buffer I/O error on dev nbd3, logical block 2, async page read [ 761.653032][ T8071] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 761.672029][ T8071] Buffer I/O error on dev nbd3, logical block 3, async page read [ 761.691265][ T8071] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 761.731183][ T8071] Buffer I/O error on dev nbd3, logical block 0, async page read [ 761.741013][ T8071] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 761.771281][ T8071] Buffer I/O error on dev nbd3, logical block 1, async page read [ 761.792980][ T8071] ldm_validate_partition_table(): Disk read failed. [ 761.819713][ T8071] Dev nbd3: unable to read RDB block 0 [ 761.839480][ T8071] nbd3: unable to read partition table [ 762.729796][ T8071] ldm_validate_partition_table(): Disk read failed. [ 762.746091][ T8071] Dev nbd3: unable to read RDB block 0 [ 762.759210][ T8071] nbd3: unable to read partition table [ 762.854615][T17622] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3129'. [ 764.199373][ T5849] block nbd5: Receive control failed (result -32) [ 764.248491][ T92] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=92 comm=kworker/0:2 [ 764.270595][ T30] audit: type=1400 audit(1755766093.135:1321): avc: denied { mount } for pid=17658 comm="syz.5.3140" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 764.301106][T17664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17664 comm=syz.5.3140 [ 764.623445][T17669] FAULT_INJECTION: forcing a failure. [ 764.623445][T17669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.637155][T17669] CPU: 0 UID: 0 PID: 17669 Comm: syz.6.3143 Not tainted syzkaller #0 PREEMPT(full) [ 764.637181][T17669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 764.637191][T17669] Call Trace: [ 764.637197][T17669] [ 764.637205][T17669] dump_stack_lvl+0x16c/0x1f0 [ 764.637228][T17669] should_fail_ex+0x512/0x640 [ 764.637250][T17669] _copy_from_user+0x2e/0xd0 [ 764.637274][T17669] ioctl_standard_iw_point+0x513/0xca0 [ 764.637293][T17669] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 764.637321][T17669] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 764.637339][T17669] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 764.637372][T17669] ? __pfx___mutex_lock+0x10/0x10 [ 764.637394][T17669] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 764.637420][T17669] ioctl_standard_call+0x166/0x1d0 [ 764.637437][T17669] ? __pfx_ioctl_standard_call+0x10/0x10 [ 764.637454][T17669] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 764.637480][T17669] wireless_process_ioctl.constprop.0+0x28e/0x3d0 [ 764.637501][T17669] wext_handle_ioctl+0x226/0x2a0 [ 764.637518][T17669] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 764.637537][T17669] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 764.637563][T17669] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 764.637591][T17669] sock_ioctl+0x3a1/0x6b0 [ 764.637615][T17669] ? __pfx_sock_ioctl+0x10/0x10 [ 764.637637][T17669] ? hook_file_ioctl_common+0x145/0x410 [ 764.637658][T17669] ? selinux_file_ioctl+0x180/0x270 [ 764.637681][T17669] ? selinux_file_ioctl+0xb4/0x270 [ 764.637705][T17669] ? __pfx_sock_ioctl+0x10/0x10 [ 764.637728][T17669] __x64_sys_ioctl+0x18b/0x210 [ 764.637758][T17669] do_syscall_64+0xcd/0x4c0 [ 764.637778][T17669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.637796][T17669] RIP: 0033:0x7f9f3898ebe9 [ 764.637811][T17669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.637827][T17669] RSP: 002b:00007f9f36bee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.637846][T17669] RAX: ffffffffffffffda RBX: 00007f9f38bb5fa0 RCX: 00007f9f3898ebe9 [ 764.637857][T17669] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 764.637869][T17669] RBP: 00007f9f36bee090 R08: 0000000000000000 R09: 0000000000000000 [ 764.637880][T17669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.637890][T17669] R13: 00007f9f38bb6038 R14: 00007f9f38bb5fa0 R15: 00007ffd5c54c8f8 [ 764.637908][T17669] [ 765.921922][ T30] audit: type=1400 audit(1755766094.795:1322): avc: denied { unmount } for pid=12097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 766.053689][T17680] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3145'. [ 766.157875][T17680] NILFS (loop3): device size too small [ 766.172876][T17688] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3147'. [ 766.549111][T17696] nbd: must specify a size in bytes for the device [ 766.875458][T17702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3154'. [ 766.951922][T17704] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3154'. [ 767.055689][T17713] kvm: Disabled LAPIC found during irq injection [ 767.877731][T17727] geneve3: entered promiscuous mode [ 767.885846][T17727] geneve3: entered allmulticast mode [ 768.224085][T17741] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3165'. [ 768.605182][T17747] bridge0: port 3(syz_tun) entered blocking state [ 768.631494][T17747] bridge0: port 3(syz_tun) entered disabled state [ 768.690010][T17747] syz_tun: entered allmulticast mode [ 768.861242][T17747] syz_tun: entered promiscuous mode [ 768.880984][T17747] bridge0: port 3(syz_tun) entered blocking state [ 768.887510][T17747] bridge0: port 3(syz_tun) entered forwarding state [ 770.083004][ T30] audit: type=1400 audit(1755766098.955:1323): avc: denied { map } for pid=17766 comm="syz.3.3176" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 770.220161][ T30] audit: type=1400 audit(1755766098.955:1324): avc: denied { execute } for pid=17766 comm="syz.3.3176" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 770.723447][T17781] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3181'. [ 770.765741][T17783] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3182'. [ 770.948769][T17787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 771.156624][T17786] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3183'. [ 771.177273][T17786] nbd: must specify a size in bytes for the device [ 772.077317][T17809] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3189'. [ 772.611167][T17535] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 772.781839][T17535] usb 6-1: device descriptor read/64, error -71 [ 773.051299][T17535] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 773.203436][T17535] usb 6-1: device descriptor read/64, error -71 [ 773.367412][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 773.446388][ T30] audit: type=1400 audit(1755766102.185:1325): avc: denied { map } for pid=17823 comm="syz.6.3195" path="socket:[67191]" dev="sockfs" ino=67191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 773.475153][T17535] usb usb6-port1: attempt power cycle [ 773.747801][ T10] usb 4-1: device descriptor read/64, error -71 [ 773.771220][ T30] audit: type=1400 audit(1755766102.185:1326): avc: denied { read accept } for pid=17823 comm="syz.6.3195" path="socket:[67191]" dev="sockfs" ino=67191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 773.795810][ C1] vkms_vblank_simulate: vblank timer overrun [ 774.011186][T17535] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 774.111146][ T10] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 774.521803][T17535] usb 6-1: device descriptor read/8, error -71 [ 774.661836][T17846] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 774.691287][ T10] usb 4-1: device descriptor read/64, error -71 [ 774.851314][T17535] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 775.034672][T17855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.049902][ T10] usb usb4-port1: attempt power cycle [ 775.383223][T17858] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3204'. [ 775.528773][T17535] usb 6-1: device descriptor read/8, error -71 [ 775.586783][T17861] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3205'. [ 775.644488][T17535] usb usb6-port1: unable to enumerate USB device [ 775.793604][ T10] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 775.851584][ T10] usb 4-1: device descriptor read/8, error -71 [ 776.091126][ T10] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 776.123222][ T10] usb 4-1: device descriptor read/8, error -71 [ 776.258007][ T10] usb usb4-port1: unable to enumerate USB device [ 776.591763][ T30] audit: type=1400 audit(1755766105.255:1327): avc: denied { mount } for pid=17877 comm="syz.3.3211" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 777.359575][T17896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.481699][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 777.647261][T17900] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3216'. [ 778.291138][ T9] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 778.442893][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.736587][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 778.761196][ T1950] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 778.770236][ T10] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 778.781347][ T10] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 778.790989][ T9] usb 8-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 778.856557][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.875119][ T9] usb 8-1: config 0 descriptor?? [ 778.924624][ T1950] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 778.950838][ T1950] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 778.970842][ T1950] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 779.150601][ T1950] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 779.163285][ T1950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.171553][ T1950] usb 4-1: Product: syz [ 779.175753][ T1950] usb 4-1: Manufacturer: syz [ 779.180792][ T1950] usb 4-1: SerialNumber: syz [ 779.193750][ T1950] hub 4-1:1.0: bad descriptor, ignoring hub [ 779.202204][ T1950] hub 4-1:1.0: probe with driver hub failed with error -5 [ 779.346515][T17907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.358571][T17907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.371588][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 779.377735][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 779.391005][ T9] usb 8-1: USB disconnect, device number 35 [ 779.417824][ T1950] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 100 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 779.663728][T17915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.674219][T17915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.881476][ T9] usb 4-1: USB disconnect, device number 100 [ 779.895375][ T9] usblp0: removed [ 779.903696][T17931] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3225'. [ 780.034487][T17932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 780.174680][ T30] audit: type=1400 audit(1755766109.065:1328): avc: denied { getopt } for pid=17912 comm="syz.3.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 780.778020][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 780.895384][ T10] hid-generic 0000:0000:0000.001F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 781.261186][ T5919] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 781.682650][ T5919] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 781.693726][ T5919] usb 6-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 781.707574][ T5919] usb 6-1: config 2 interface 0 has no altsetting 0 [ 781.717850][ T5919] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 781.727797][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.737001][ T5919] usb 6-1: Product: syz [ 781.743689][ T5919] usb 6-1: Manufacturer: syz [ 781.748356][ T5919] usb 6-1: SerialNumber: syz [ 781.810494][T17948] futex_wake_op: syz.6.3230 tries to shift op by 32; fix this program [ 782.145329][T17957] netlink: 'syz.7.3232': attribute type 23 has an invalid length. [ 782.227739][ T5919] usb 6-1: USB disconnect, device number 48 [ 782.267388][T17960] netlink: 'syz.6.3233': attribute type 6 has an invalid length. [ 782.411140][ T5933] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 782.583538][ T5933] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 782.656582][ T5933] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.666069][ T5933] usb 8-1: config 0 descriptor?? [ 782.676935][ T5933] cp210x 8-1:0.0: cp210x converter detected [ 782.874218][ T5933] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 782.888453][ T5933] cp210x 8-1:0.0: querying part number failed [ 782.924150][ T5933] usb 8-1: cp210x converter now attached to ttyUSB0 [ 783.346763][T17983] netlink: 'syz.6.3240': attribute type 27 has an invalid length. [ 783.364062][T17983] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3240'. [ 783.415950][ T30] audit: type=1326 audit(1755766112.305:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17984 comm="syz.3.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2b8ebe9 code=0x7ffc0000 [ 783.439440][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.447966][ T30] audit: type=1326 audit(1755766112.305:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17984 comm="syz.3.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2b8ebe9 code=0x7ffc0000 [ 783.471614][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.480691][ T30] audit: type=1326 audit(1755766112.305:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17984 comm="syz.3.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b2b8ebe9 code=0x7ffc0000 [ 783.504165][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.513310][ T30] audit: type=1326 audit(1755766112.305:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17984 comm="syz.3.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2b8ebe9 code=0x7ffc0000 [ 783.513346][ T30] audit: type=1326 audit(1755766112.305:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17984 comm="syz.3.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fd9b2b8ebe9 code=0x7ffc0000 [ 783.513377][ T30] audit: type=1326 audit(1755766112.305:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17984 comm="syz.3.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2b8ebe9 code=0x7ffc0000 [ 783.513407][ T30] audit: type=1326 audit(1755766112.305:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17984 comm="syz.3.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b2b8ebe9 code=0x7ffc0000 [ 783.513437][ T30] audit: type=1326 audit(1755766112.305:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17984 comm="syz.3.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2b8ebe9 code=0x7ffc0000 [ 783.513465][ T30] audit: type=1326 audit(1755766112.305:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17984 comm="syz.3.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd9b2b8ebe9 code=0x7ffc0000 [ 783.536900][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.587630][T17990] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3232'. [ 783.639202][ T30] audit: type=1326 audit(1755766112.305:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17984 comm="syz.3.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2b8ebe9 code=0x7ffc0000 [ 783.655432][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.871122][T17535] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 784.022365][T17535] usb 6-1: too many configurations: 151, using maximum allowed: 8 [ 784.043277][T17535] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 784.054579][T17535] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 784.071239][T17535] usb 6-1: Product: syz [ 784.080770][T17535] usb 6-1: Manufacturer: syz [ 784.090735][T17535] usb 6-1: SerialNumber: syz [ 784.104065][T17535] usb 6-1: config 0 descriptor?? [ 784.244304][T17999] veth3: entered promiscuous mode [ 784.501203][ T5933] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 784.594470][T18003] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3246'. [ 784.673421][T18004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 784.851111][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 784.868426][ T5933] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 784.876717][ T5933] usb 4-1: config 0 has no interface number 0 [ 784.883012][ T5933] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 784.896305][ T5933] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 784.911078][ T5933] usb 4-1: config 0 interface 41 has no altsetting 0 [ 784.920671][ T5933] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 784.941015][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.950969][ T5933] usb 4-1: Product: syz [ 784.955633][ T5933] usb 4-1: Manufacturer: syz [ 784.960296][ T5933] usb 4-1: SerialNumber: syz [ 784.969572][ T5933] usb 4-1: config 0 descriptor?? [ 784.975283][T17999] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 784.982872][T17999] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 785.028147][T18008] vxcan1: tx address claim with dest, not broadcast [ 785.166503][ T1950] usb 8-1: USB disconnect, device number 36 [ 785.191476][T17999] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 785.199509][ T1950] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 785.216327][T17999] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 785.219267][ T1950] cp210x 8-1:0.0: device disconnected [ 785.240526][T18011] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3249'. [ 785.259264][T18011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 786.631287][ T5933] Error reading MAC address [ 786.648705][ T5933] sr9700 4-1:0.41: probe with driver sr9700 failed with error -71 [ 786.659130][ T5933] usb 4-1: USB disconnect, device number 101 [ 787.364939][ T5919] usb 6-1: USB disconnect, device number 49 [ 787.468909][T18034] FAULT_INJECTION: forcing a failure. [ 787.468909][T18034] name failslab, interval 1, probability 0, space 0, times 0 [ 787.482052][T18034] CPU: 0 UID: 0 PID: 18034 Comm: syz.6.3257 Not tainted syzkaller #0 PREEMPT(full) [ 787.482077][T18034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 787.482088][T18034] Call Trace: [ 787.482094][T18034] [ 787.482100][T18034] dump_stack_lvl+0x16c/0x1f0 [ 787.482124][T18034] should_fail_ex+0x512/0x640 [ 787.482145][T18034] should_failslab+0xc2/0x120 [ 787.482166][T18034] __kmalloc_cache_noprof+0x6a/0x3e0 [ 787.482191][T18034] ? genl_start+0x1e8/0x980 [ 787.482212][T18034] genl_start+0x1e8/0x980 [ 787.482232][T18034] __netlink_dump_start+0x60b/0x990 [ 787.482252][T18034] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 787.482275][T18034] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 787.482301][T18034] ? __pfx_genl_start+0x10/0x10 [ 787.482321][T18034] ? __pfx_genl_dumpit+0x10/0x10 [ 787.482340][T18034] ? __pfx_genl_done+0x10/0x10 [ 787.482365][T18034] ? bpf_lsm_capable+0x9/0x10 [ 787.482390][T18034] ? security_capable+0x7e/0x260 [ 787.482410][T18034] ? ns_capable+0xd7/0x110 [ 787.482431][T18034] genl_rcv_msg+0x46e/0x800 [ 787.482453][T18034] ? __pfx_genl_rcv_msg+0x10/0x10 [ 787.482474][T18034] ? __pfx_batadv_bla_claim_dump+0x10/0x10 [ 787.482501][T18034] netlink_rcv_skb+0x155/0x420 [ 787.482521][T18034] ? __pfx_genl_rcv_msg+0x10/0x10 [ 787.482541][T18034] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 787.482564][T18034] ? netlink_deliver_tap+0x1ae/0xd30 [ 787.482582][T18034] genl_rcv+0x28/0x40 [ 787.482600][T18034] netlink_unicast+0x5aa/0x870 [ 787.482620][T18034] ? __pfx_netlink_unicast+0x10/0x10 [ 787.482640][T18034] netlink_sendmsg+0x8d1/0xdd0 [ 787.482660][T18034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 787.482681][T18034] ____sys_sendmsg+0xa95/0xc70 [ 787.482703][T18034] ? copy_msghdr_from_user+0x10a/0x160 [ 787.482720][T18034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 787.482741][T18034] ? __pfx_kstrtouint+0x10/0x10 [ 787.482761][T18034] ? kstrtouint_from_user+0x13c/0x1d0 [ 787.482777][T18034] ___sys_sendmsg+0x134/0x1d0 [ 787.482792][T18034] ? __pfx____sys_sendmsg+0x10/0x10 [ 787.482811][T18034] ? rcu_is_watching+0x12/0xc0 [ 787.482841][T18034] __sys_sendmsg+0x16d/0x220 [ 787.482859][T18034] ? __pfx___sys_sendmsg+0x10/0x10 [ 787.482881][T18034] do_syscall_64+0xcd/0x4c0 [ 787.482906][T18034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.482923][T18034] RIP: 0033:0x7f9f3898ebe9 [ 787.482938][T18034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.482955][T18034] RSP: 002b:00007f9f36bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.482973][T18034] RAX: ffffffffffffffda RBX: 00007f9f38bb5fa0 RCX: 00007f9f3898ebe9 [ 787.482985][T18034] RDX: 0000000020000000 RSI: 0000200000001100 RDI: 0000000000000003 [ 787.482996][T18034] RBP: 00007f9f36bee090 R08: 0000000000000000 R09: 0000000000000000 [ 787.483007][T18034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.483018][T18034] R13: 00007f9f38bb6038 R14: 00007f9f38bb5fa0 R15: 00007ffd5c54c8f8 [ 787.483036][T18034] [ 787.824518][T18038] netlink: 'syz.7.3256': attribute type 6 has an invalid length. [ 787.861384][T18042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.897829][T18044] netlink: 'syz.5.3259': attribute type 6 has an invalid length. [ 788.086244][T18055] kvm: kvm [18054]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 788.095450][T18055] kvm: kvm [18054]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 788.106513][T18055] kvm: kvm [18054]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 788.117743][T18055] kvm: kvm [18054]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 788.128242][T18055] kvm: kvm [18054]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 789.092562][T12309] block nbd1: Possible stuck request ffff88803ff07000: control (read@0,1024B). Runtime 150 seconds [ 789.103314][T12309] block nbd1: Possible stuck request ffff88803ff071c0: control (read@1024,1024B). Runtime 150 seconds [ 789.114502][T12309] block nbd1: Possible stuck request ffff88803ff07380: control (read@2048,1024B). Runtime 150 seconds [ 789.125649][T12309] block nbd1: Possible stuck request ffff88803ff07540: control (read@3072,1024B). Runtime 150 seconds [ 789.561153][ T5933] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 789.723392][ T5933] usb 8-1: Using ep0 maxpacket: 16 [ 789.731790][ T5933] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 789.745000][ T5933] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 789.756939][ T5933] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 789.775071][ T5933] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 789.795621][ T5933] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 789.807010][ T5933] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 789.825229][ T5933] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 789.834466][ T5933] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 789.844194][ T5933] usb 8-1: SerialNumber: syz [ 789.850603][T18071] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 789.858769][ T5933] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 789.869588][ T5933] cdc_acm 8-1:1.0: probe with driver cdc_acm failed with error -12 [ 789.891724][T18080] netlink: 'syz.5.3269': attribute type 10 has an invalid length. [ 789.899694][T18080] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3269'. [ 789.910309][T18080] team0: entered promiscuous mode [ 789.915640][T18080] team0: entered allmulticast mode [ 789.925535][T18080] bridge0: port 1(team0) entered blocking state [ 789.954927][T18080] bridge0: port 1(team0) entered disabled state [ 789.996613][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 789.996628][ T30] audit: type=1326 audit(1755766118.885:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18085 comm="syz.6.3272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f3898ebe9 code=0x0 [ 790.183991][T18091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3274'. [ 790.217092][T18091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 790.224149][ T5863] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 790.242816][ T5169] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 790.250023][ T5169] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 790.257854][ T5169] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 790.267448][ T5169] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 790.275779][ T5169] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 790.382191][ T5863] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 790.407206][ T5863] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.420422][T18092] Failed to initialize the IGMP autojoin socket (err -2) [ 790.427989][ T5863] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 790.440267][ T5863] usb 6-1: config 0 interface 0 has no altsetting 0 [ 790.449373][ T5863] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.459490][ T5863] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 790.471120][ T5863] usb 6-1: config 0 interface 0 has no altsetting 0 [ 790.529087][ T5863] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.542365][ T5863] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 790.560328][ T5863] usb 6-1: config 0 interface 0 has no altsetting 0 [ 790.568302][ T5863] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.579505][ T5863] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 790.590728][ T5863] usb 6-1: config 0 interface 0 has no altsetting 0 [ 790.622758][T18092] chnl_net:caif_netlink_parms(): no params data found [ 790.683869][ T5863] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.718327][ T5863] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 790.754493][ T5863] usb 6-1: config 0 interface 0 has no altsetting 0 [ 790.782845][ T5863] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.818491][ T5863] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 790.855021][T18107] comedi comedi2: ni_at_a2150: I/O port conflict (0x4f27,28) [ 790.887588][ T5863] usb 6-1: config 0 interface 0 has no altsetting 0 [ 790.915647][T18092] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.947966][ T5863] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.957679][T18092] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.971542][T18092] bridge_slave_0: entered allmulticast mode [ 790.986110][T18092] bridge_slave_0: entered promiscuous mode [ 791.000395][ T5863] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 791.002245][T18092] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.029391][ T5863] usb 6-1: config 0 interface 0 has no altsetting 0 [ 791.039961][ T5863] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 791.050315][ T5863] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 791.063678][ T5863] usb 6-1: config 0 interface 0 has no altsetting 0 [ 791.093878][ T5863] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 791.098970][T18092] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.120402][T18092] bridge_slave_1: entered allmulticast mode [ 791.138949][ T5863] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 791.159310][T18092] bridge_slave_1: entered promiscuous mode [ 791.173291][ T5863] usb 6-1: Product: syz [ 791.188167][ T5863] usb 6-1: Manufacturer: syz [ 791.198389][ T5863] usb 6-1: SerialNumber: syz [ 791.210324][ T5863] usb 6-1: config 0 descriptor?? [ 791.243911][ T5863] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 791.442407][T18092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.469856][T18120] serio: Serial port ptm0 [ 791.485237][T18092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.542307][T18123] syzkaller0: entered promiscuous mode [ 791.548181][T18123] syzkaller0: entered allmulticast mode [ 791.672139][T18092] team0: Port device team_slave_0 added [ 791.807547][T18092] team0: Port device team_slave_1 added [ 791.927043][T18092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.945163][T18092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.954324][T18131] ubi: mtd0 is already attached to ubi31 [ 792.039366][ T10] usb 8-1: USB disconnect, device number 37 [ 792.047942][T18092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.084256][T18092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.085351][T18130] netlink: 'syz.3.3278': attribute type 21 has an invalid length. [ 792.091662][T18092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.136635][T18092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.151136][T18130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3278'. [ 792.317602][T18092] hsr_slave_0: entered promiscuous mode [ 792.351700][T18078] Failed to initialize the IGMP autojoin socket (err -2) [ 792.403775][T18092] hsr_slave_1: entered promiscuous mode [ 792.421869][T18092] debugfs: 'hsr0' already exists in 'hsr' [ 792.427812][T18092] Cannot create hsr debugfs directory [ 792.441292][ T5169] Bluetooth: hci6: command tx timeout [ 793.719592][T18164] netlink: 'syz.7.3284': attribute type 6 has an invalid length. [ 794.197179][T18092] netdevsim netdevsim9 netdevsim0: renamed from eth5 [ 794.212329][T18092] netdevsim netdevsim9 netdevsim1: renamed from eth6 [ 794.231556][T18092] netdevsim netdevsim9 netdevsim2: renamed from eth7 [ 794.247720][T18092] netdevsim netdevsim9 netdevsim3: renamed from eth8 [ 794.364439][ T5933] usb 6-1: USB disconnect, device number 50 [ 794.378717][ T5933] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 794.457014][T18092] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.480534][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.487613][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.522021][ T5169] Bluetooth: hci6: command tx timeout [ 794.533822][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.540960][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.033355][T18194] veth15: entered promiscuous mode [ 795.070270][T18196] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3291'. [ 795.336103][ T10] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 795.399508][T18092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.477603][T18196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 795.531707][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 795.548560][ T10] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 795.566849][ T10] usb 6-1: config 0 has no interface number 0 [ 795.609172][ T10] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 795.624752][ T10] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 795.653894][ T10] usb 6-1: config 0 interface 41 has no altsetting 0 [ 795.672008][ T10] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 795.684623][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.702859][ T10] usb 6-1: Product: syz [ 795.712500][ T10] usb 6-1: Manufacturer: syz [ 795.727276][ T10] usb 6-1: SerialNumber: syz [ 795.740051][ T10] usb 6-1: config 0 descriptor?? [ 795.758048][T18194] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 795.785845][T18194] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 795.854604][T18092] veth0_vlan: entered promiscuous mode [ 795.868896][T18092] veth1_vlan: entered promiscuous mode [ 795.985858][T18092] veth0_macvtap: entered promiscuous mode [ 796.010132][T18092] veth1_macvtap: entered promiscuous mode [ 796.059847][T18194] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 796.093961][T18194] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 796.152474][T18092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.175310][T18092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.194943][T18092] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 796.274170][T18092] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 796.330813][T18092] wireguard: wg0: Could not create IPv4 socket [ 796.353277][T18092] wireguard: wg1: Could not create IPv4 socket [ 796.386039][T18092] wireguard: wg2: Could not create IPv4 socket [ 796.515060][T18219] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3296'. [ 796.691097][ T5169] Bluetooth: hci6: command tx timeout [ 796.832900][T18219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 796.930484][T18224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3297'. [ 796.942181][T18224] nbd: must specify a size in bytes for the device [ 797.178789][ T10] Error reading MAC address [ 797.195580][ T10] sr9700 6-1:0.41: probe with driver sr9700 failed with error -71 [ 797.205593][ T10] usb 6-1: USB disconnect, device number 51 [ 797.251120][ T5933] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 797.414423][ T5933] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 797.423392][ T5933] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 797.436916][ T30] audit: type=1326 audit(1755766126.325:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18243 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 797.463960][ T5933] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 797.475290][ T5933] usb 4-1: config 220 has no interface number 2 [ 797.481942][ T5933] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 797.495781][ T30] audit: type=1326 audit(1755766126.325:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18243 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 797.519681][ T5933] usb 4-1: config 220 interface 0 has no altsetting 0 [ 797.526655][ T5933] usb 4-1: config 220 interface 76 has no altsetting 0 [ 797.534095][ T5933] usb 4-1: config 220 interface 1 has no altsetting 0 [ 797.540944][ T30] audit: type=1326 audit(1755766126.325:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18243 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 797.565030][ T30] audit: type=1326 audit(1755766126.325:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18243 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 797.596762][ T5933] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 797.606181][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.615977][ T5933] usb 4-1: Product: syz [ 797.620310][ T30] audit: type=1326 audit(1755766126.325:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18243 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 797.646399][ T5933] usb 4-1: Manufacturer: syz [ 797.651188][ T5933] usb 4-1: SerialNumber: syz [ 797.657107][ T30] audit: type=1326 audit(1755766126.325:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18243 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 797.683426][ T30] audit: type=1326 audit(1755766126.325:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18243 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 797.709977][ T30] audit: type=1326 audit(1755766126.325:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18243 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 797.734348][ T30] audit: type=1326 audit(1755766126.325:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18243 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 797.758743][ T30] audit: type=1326 audit(1755766126.325:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18243 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cd8ebe9 code=0x7ffc0000 [ 797.890323][ T5933] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 797.900981][ T5933] usb 4-1: No valid video chain found. [ 797.915442][ T5933] usb 4-1: selecting invalid altsetting 0 [ 797.947163][ T5933] usb 4-1: selecting invalid altsetting 0 [ 797.984578][ T5933] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 798.028457][ T5933] usb 4-1: USB disconnect, device number 102 [ 798.494506][T18317] Failed to initialize the IGMP autojoin socket (err -2) [ 798.995006][T18315] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3308'. [ 799.055913][T18334] veth17: entered promiscuous mode [ 799.162004][T18339] sit1: entered allmulticast mode [ 799.401262][ T5863] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 799.561172][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 799.575997][ T5863] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 799.591244][ T5863] usb 6-1: config 0 has no interface number 0 [ 799.644872][ T5863] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 799.671111][ T5863] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 799.695357][ T5863] usb 6-1: config 0 interface 41 has no altsetting 0 [ 799.712700][ T5863] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 799.776909][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.840437][ T5863] usb 6-1: Product: syz [ 799.892969][ T5863] usb 6-1: Manufacturer: syz [ 799.897594][ T5863] usb 6-1: SerialNumber: syz [ 799.909722][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 799.919384][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 799.941366][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 799.949239][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 799.957747][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 799.969493][ T5863] usb 6-1: config 0 descriptor?? [ 799.986401][T18334] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 799.996784][T18364] Failed to initialize the IGMP autojoin socket (err -2) [ 800.001246][T18334] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 800.042543][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 800.265318][T18334] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 800.292549][T18334] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 800.656203][T18388] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 800.675684][T18388] Error validating options; rc = [-22] [ 800.685414][T18381] Failed to initialize the IGMP autojoin socket (err -2) [ 800.764701][ T10] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 800.838145][T18392] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 800.844689][T18392] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 800.881319][T18392] vhci_hcd vhci_hcd.0: Device attached [ 800.942070][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 800.955953][ T10] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 800.997042][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 801.037620][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 801.066726][T18364] netdevsim netdevsim9 netdevsim0: renamed from eth5 [ 801.075979][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 801.099935][T18364] netdevsim netdevsim9 netdevsim1: renamed from eth6 [ 801.110292][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 801.121270][ T5919] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 801.132924][T18364] netdevsim netdevsim9 netdevsim2: renamed from eth7 [ 801.141577][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 801.164537][T18364] netdevsim netdevsim9 netdevsim3: renamed from eth8 [ 801.182627][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 801.205145][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 801.230390][ T10] usb 8-1: SerialNumber: syz [ 801.257257][T18384] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 801.265634][ T10] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 801.269159][ T5863] Error reading MAC address [ 801.286953][ T5863] sr9700 6-1:0.41: probe with driver sr9700 failed with error -71 [ 801.292518][ T10] cdc_acm 8-1:1.0: probe with driver cdc_acm failed with error -12 [ 801.307078][ T5863] usb 6-1: USB disconnect, device number 52 [ 801.650623][T18364] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 801.668228][T18364] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 801.688427][T18364] wireguard: wg0: Could not create IPv4 socket [ 801.723116][T18364] wireguard: wg1: Could not create IPv4 socket [ 801.738126][T18364] wireguard: wg2: Could not create IPv4 socket [ 803.230092][ T5933] usb 8-1: USB disconnect, device number 38 [ 803.300033][T18476] FAULT_INJECTION: forcing a failure. [ 803.300033][T18476] name failslab, interval 1, probability 0, space 0, times 0 [ 803.313437][T18476] CPU: 0 UID: 0 PID: 18476 Comm: syz.3.3332 Not tainted syzkaller #0 PREEMPT(full) [ 803.313462][T18476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 803.313472][T18476] Call Trace: [ 803.313478][T18476] [ 803.313484][T18476] dump_stack_lvl+0x16c/0x1f0 [ 803.313508][T18476] should_fail_ex+0x512/0x640 [ 803.313533][T18476] should_failslab+0xc2/0x120 [ 803.313553][T18476] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 803.313572][T18476] ? vm_area_alloc+0x1f/0x160 [ 803.313599][T18476] vm_area_alloc+0x1f/0x160 [ 803.313623][T18476] create_init_stack_vma+0x29/0x700 [ 803.313644][T18476] alloc_bprm+0x420/0x710 [ 803.313662][T18476] do_execveat_common.isra.0+0x1ce/0x610 [ 803.313683][T18476] __x64_sys_execveat+0xda/0x120 [ 803.313701][T18476] do_syscall_64+0xcd/0x4c0 [ 803.313720][T18476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.313738][T18476] RIP: 0033:0x7fd9b2b8ebe9 [ 803.313752][T18476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.313769][T18476] RSP: 002b:00007fd9b3a60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 803.313787][T18476] RAX: ffffffffffffffda RBX: 00007fd9b2db5fa0 RCX: 00007fd9b2b8ebe9 [ 803.313798][T18476] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 803.313809][T18476] RBP: 00007fd9b3a60090 R08: 0000000000001000 R09: 0000000000000000 [ 803.313820][T18476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.313835][T18476] R13: 00007fd9b2db6038 R14: 00007fd9b2db5fa0 R15: 00007ffd7ac83ba8 [ 803.313852][T18476] [ 803.480231][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.723114][T18499] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3339'. [ 803.872884][T18397] vhci_hcd: connection reset by peer [ 803.941729][ T49] vhci_hcd: stop threads [ 803.974185][ T49] vhci_hcd: release socket [ 803.975414][T18504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 804.027557][ T49] vhci_hcd: disconnect device [ 804.233442][T18515] FAULT_INJECTION: forcing a failure. [ 804.233442][T18515] name failslab, interval 1, probability 0, space 0, times 0 [ 804.248234][T18515] CPU: 1 UID: 0 PID: 18515 Comm: syz.3.3342 Not tainted syzkaller #0 PREEMPT(full) [ 804.248261][T18515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 804.248272][T18515] Call Trace: [ 804.248278][T18515] [ 804.248285][T18515] dump_stack_lvl+0x16c/0x1f0 [ 804.248308][T18515] should_fail_ex+0x512/0x640 [ 804.248329][T18515] ? tomoyo_encode2+0x100/0x3e0 [ 804.248353][T18515] should_failslab+0xc2/0x120 [ 804.248373][T18515] __kmalloc_noprof+0xd2/0x510 [ 804.248390][T18515] ? d_absolute_path+0x136/0x1a0 [ 804.248416][T18515] tomoyo_encode2+0x100/0x3e0 [ 804.248441][T18515] tomoyo_encode+0x29/0x50 [ 804.248465][T18515] tomoyo_realpath_from_path+0x18f/0x6e0 [ 804.248493][T18515] tomoyo_path_number_perm+0x245/0x580 [ 804.248514][T18515] ? tomoyo_path_number_perm+0x237/0x580 [ 804.248537][T18515] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 804.248563][T18515] ? preempt_count_add+0x76/0x150 [ 804.248586][T18515] ? rcu_is_watching+0x12/0xc0 [ 804.248608][T18515] ? __fget_files+0x204/0x3c0 [ 804.248626][T18515] ? hook_file_ioctl_common+0x145/0x410 [ 804.248644][T18515] ? lock_release+0x201/0x2f0 [ 804.248670][T18515] ? __fget_files+0x20e/0x3c0 [ 804.248696][T18515] security_file_ioctl+0x9b/0x240 [ 804.248720][T18515] __x64_sys_ioctl+0xb7/0x210 [ 804.248745][T18515] do_syscall_64+0xcd/0x4c0 [ 804.248765][T18515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.248783][T18515] RIP: 0033:0x7fd9b2b8ebe9 [ 804.248798][T18515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.248815][T18515] RSP: 002b:00007fd9b3a60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 804.248833][T18515] RAX: ffffffffffffffda RBX: 00007fd9b2db5fa0 RCX: 00007fd9b2b8ebe9 [ 804.248845][T18515] RDX: 0000200000000400 RSI: 00000000c008561c RDI: 0000000000000003 [ 804.248856][T18515] RBP: 00007fd9b3a60090 R08: 0000000000000000 R09: 0000000000000000 [ 804.248867][T18515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.248878][T18515] R13: 00007fd9b2db6038 R14: 00007fd9b2db5fa0 R15: 00007ffd7ac83ba8 [ 804.248895][T18515] [ 804.248908][T18515] ERROR: Out of memory at tomoyo_realpath_from_path. [ 804.584434][T18527] syzkaller0: entered promiscuous mode [ 804.598595][T18535] serio: Serial port ptm0 [ 804.610829][T18527] syzkaller0: entered allmulticast mode [ 805.699479][T18575] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3352'. [ 805.937391][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 805.937408][ T30] audit: type=1400 audit(1755766134.825:1382): avc: denied { map } for pid=18569 comm="syz.5.3351" path="socket:[72844]" dev="sockfs" ino=72844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 805.984344][T18583] tipc: Can't bind to reserved service type 0 [ 806.281944][ T5919] vhci_hcd: vhci_device speed not set [ 807.657289][T18602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 807.900006][T18605] Failed to initialize the IGMP autojoin socket (err -2) [ 808.203810][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.204902][ T31] INFO: task syz.1.2688:15896 blocked for more than 143 seconds. [ 808.218917][ T31] Not tainted syzkaller #0 [ 808.229844][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 808.244453][ T31] task:syz.1.2688 state:D stack:27576 pid:15896 tgid:15894 ppid:5843 task_flags:0x400140 flags:0x00004004 [ 808.256902][ T31] Call Trace: [ 808.260317][ T31] [ 808.273884][ T31] __schedule+0x1190/0x5de0 [ 808.292209][ T31] ? update_irq_load_avg+0xb5/0xdd0 [ 808.332067][ T31] ? __mutex_trylock_common+0x21/0x250 [ 808.354585][ T31] ? __pfx___schedule+0x10/0x10 [ 808.387962][ T31] ? schedule+0x2d7/0x3a0 [ 808.406090][T18629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 808.419458][ T31] ? rcu_is_watching+0x12/0xc0 [ 808.437277][ T31] ? lock_release+0x201/0x2f0 [ 808.471198][ T31] ? bdev_open+0xa2/0xe40 [ 808.517104][ T31] schedule+0xe7/0x3a0 [ 808.555482][ T31] schedule_preempt_disabled+0x13/0x30 [ 808.610333][ T31] __mutex_lock+0x81b/0x1060 [ 808.617060][ T31] ? bdev_open+0xa2/0xe40 [ 808.632453][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 808.652813][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 808.709944][ T31] ? bdev_open+0xa2/0xe40 [ 808.761149][ T31] bdev_open+0xa2/0xe40 [ 808.769306][ T31] bdev_file_open_by_dev+0x182/0x210 [ 808.793438][ T31] setup_bdev_super+0x78/0x730 [ 808.800442][ T31] get_tree_bdev_flags+0x363/0x620 [ 808.812982][ T31] ? __pfx_udf_fill_super+0x10/0x10 [ 808.826333][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 808.838674][ T31] ? bpf_lsm_capable+0x9/0x10 [ 808.853298][ T31] ? security_capable+0x7e/0x260 [ 808.895760][ T31] vfs_get_tree+0x8b/0x340 [ 808.944097][ T31] path_mount+0x1513/0x2000 [ 808.961051][ T31] ? __pfx_path_mount+0x10/0x10 [ 808.965926][ T31] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 808.991159][ T31] ? __x64_sys_mount+0x28d/0x310 [ 809.005176][ T31] __x64_sys_mount+0x28d/0x310 [ 809.010026][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 809.030262][ T31] ? xfd_validate_state+0x61/0x180 [ 809.035633][ T31] do_syscall_64+0xcd/0x4c0 [ 809.040143][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.047355][ T31] RIP: 0033:0x7f255038ebe9 [ 809.056277][ T31] RSP: 002b:00007f25512bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 809.066951][ T31] RAX: ffffffffffffffda RBX: 00007f25505b6090 RCX: 00007f255038ebe9 [ 809.075285][ T31] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 809.091253][ T31] RBP: 00007f2550411e19 R08: 0000000000000000 R09: 0000000000000000 [ 809.121715][ T31] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 809.139825][ T31] R13: 00007f25505b6128 R14: 00007f25505b6090 R15: 00007ffef2070098 [ 809.152450][ T31] [ 809.170601][ T31] INFO: lockdep is turned off. [ 809.215266][ T31] NMI backtrace for cpu 1 [ 809.215285][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 809.215303][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 809.215311][ T31] Call Trace: [ 809.215317][ T31] [ 809.215323][ T31] dump_stack_lvl+0x116/0x1f0 [ 809.215342][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 809.215362][ T31] ? watchdog+0xd17/0x1260 [ 809.215378][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 809.215401][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 809.215422][ T31] watchdog+0xf0e/0x1260 [ 809.215439][ T31] ? __pfx_watchdog+0x10/0x10 [ 809.215453][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 809.215468][ T31] ? __kthread_parkme+0x19e/0x250 [ 809.215489][ T31] ? __pfx_watchdog+0x10/0x10 [ 809.215504][ T31] kthread+0x3c2/0x780 [ 809.215517][ T31] ? __pfx_kthread+0x10/0x10 [ 809.215531][ T31] ? rcu_is_watching+0x12/0xc0 [ 809.215549][ T31] ? __pfx_kthread+0x10/0x10 [ 809.215562][ T31] ret_from_fork+0x5d7/0x6f0 [ 809.215576][ T31] ? __pfx_kthread+0x10/0x10 [ 809.215589][ T31] ret_from_fork_asm+0x1a/0x30 [ 809.215611][ T31] [ 809.215620][ T31] Sending NMI from CPU 1 to CPUs 0: [ 809.336169][ C0] NMI backtrace for cpu 0 [ 809.336183][ C0] CPU: 0 UID: 0 PID: 69 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 809.336203][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 809.336211][ C0] Workqueue: events_unbound toggle_allocation_gate [ 809.336230][ C0] RIP: 0010:__enqueue_entity+0x1bd/0xb70 [ 809.336250][ C0] Code: 28 49 89 f8 49 c1 e8 03 41 80 3c 00 00 0f 85 37 09 00 00 4d 8b 74 24 28 41 b8 01 00 00 00 49 bd 00 00 00 00 00 fc ff df eb 03 <48> 89 c3 48 8d 7b 18 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 97 [ 809.336263][ C0] RSP: 0018:ffffc9000211f908 EFLAGS: 00000086 [ 809.336273][ C0] RAX: ffff888066ba8090 RBX: ffff888036dec910 RCX: ffff88801db80090 [ 809.336282][ C0] RDX: ffff8880b843a3c0 RSI: ffff8880b843a408 RDI: ffff888036dec928 [ 809.336291][ C0] RBP: ffff888036dec918 R08: 0000000000000000 R09: fffffbfff2156812 [ 809.336299][ C0] R10: ffffffff90ab4097 R11: 0000000000000001 R12: ffff88801db80080 [ 809.336307][ C0] R13: dffffc0000000000 R14: 0000005a5e4b0432 R15: ffff88801db80000 [ 809.336317][ C0] FS: 0000000000000000(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000 [ 809.336331][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 809.336339][ C0] CR2: 000055ad0391c300 CR3: 000000000e380000 CR4: 00000000003526f0 [ 809.336348][ C0] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 809.336356][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 809.336365][ C0] Call Trace: [ 809.336370][ C0] [ 809.336375][ C0] ? update_curr+0x71/0x550 [ 809.336389][ C0] put_prev_entity+0x15d/0x2a0 [ 809.336404][ C0] put_prev_task_fair+0x3c/0x80 [ 809.336417][ C0] __schedule+0x1652/0x5de0 [ 809.336431][ C0] ? lock_release+0x201/0x2f0 [ 809.336449][ C0] ? static_key_enable_cpuslocked+0x10c/0x270 [ 809.336469][ C0] ? lock_release+0x201/0x2f0 [ 809.336487][ C0] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 809.336502][ C0] ? __pfx___schedule+0x10/0x10 [ 809.336520][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 809.336534][ C0] ? rcu_is_watching+0x12/0xc0 [ 809.336550][ C0] ? schedule+0x2d7/0x3a0 [ 809.336560][ C0] ? rcu_is_watching+0x12/0xc0 [ 809.336575][ C0] ? lock_release+0x201/0x2f0 [ 809.336594][ C0] schedule+0xe7/0x3a0 [ 809.336604][ C0] toggle_allocation_gate+0x1d9/0x280 [ 809.336618][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 809.336631][ C0] ? rcu_is_watching+0x12/0xc0 [ 809.336645][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 809.336664][ C0] ? rcu_is_watching+0x12/0xc0 [ 809.336680][ C0] process_one_work+0x9cf/0x1b70 [ 809.336697][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 809.336714][ C0] ? __pfx_process_one_work+0x10/0x10 [ 809.336730][ C0] ? assign_work+0x1a0/0x250 [ 809.336743][ C0] worker_thread+0x6c8/0xf10 [ 809.336758][ C0] ? __kthread_parkme+0x19e/0x250 [ 809.336776][ C0] ? __pfx_worker_thread+0x10/0x10 [ 809.336789][ C0] kthread+0x3c2/0x780 [ 809.336801][ C0] ? __pfx_kthread+0x10/0x10 [ 809.336814][ C0] ? rcu_is_watching+0x12/0xc0 [ 809.336828][ C0] ? __pfx_kthread+0x10/0x10 [ 809.336841][ C0] ret_from_fork+0x5d7/0x6f0 [ 809.336853][ C0] ? __pfx_kthread+0x10/0x10 [ 809.336865][ C0] ret_from_fork_asm+0x1a/0x30 [ 809.336885][ C0] [ 809.653303][ C0] vkms_vblank_simulate: vblank timer overrun [ 809.701455][ T2975] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 809.847898][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 809.854774][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 809.863875][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 809.873936][ T31] Call Trace: [ 809.877193][ T31] [ 809.880105][ T31] dump_stack_lvl+0x3d/0x1f0 [ 809.884683][ T31] vpanic+0x6e8/0x7a0 [ 809.888652][ T31] ? __pfx_vpanic+0x10/0x10 [ 809.893138][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 809.899106][ T31] panic+0xca/0xd0 [ 809.902809][ T31] ? __pfx_panic+0x10/0x10 [ 809.907215][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 809.912605][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 809.918742][ T31] ? watchdog+0xd78/0x1260 [ 809.923138][ T31] ? watchdog+0xd6b/0x1260 [ 809.927531][ T31] watchdog+0xd89/0x1260 [ 809.931754][ T31] ? __pfx_watchdog+0x10/0x10 [ 809.936407][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 809.941586][ T31] ? __kthread_parkme+0x19e/0x250 [ 809.946592][ T31] ? __pfx_watchdog+0x10/0x10 [ 809.951255][ T31] kthread+0x3c2/0x780 [ 809.955301][ T31] ? __pfx_kthread+0x10/0x10 [ 809.959869][ T31] ? rcu_is_watching+0x12/0xc0 [ 809.964617][ T31] ? __pfx_kthread+0x10/0x10 [ 809.969185][ T31] ret_from_fork+0x5d7/0x6f0 [ 809.973752][ T31] ? __pfx_kthread+0x10/0x10 [ 809.978325][ T31] ret_from_fork_asm+0x1a/0x30 [ 809.983071][ T31] [ 809.986256][ T31] Kernel Offset: disabled [ 809.990554][ T31] Rebooting in 86400 seconds..