last executing test programs: 29m50.242533359s ago: executing program 32 (id=355): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000040)={0x14, 0xd233}, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65b2ff0a2c370242c067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r3) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x30, r7, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2010}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) 28m46.761164094s ago: executing program 33 (id=455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) socket$nl_audit(0x10, 0x3, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00010028bd7000fedbdf2500000000", @ANYRES32=r3, @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4040c04}, 0x20040840) (fail_nth: 6) 27m33.998733639s ago: executing program 34 (id=607): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) timer_create(0x5, &(0x7f0000000180)={0x0, 0x2c, 0x2, @tid=r4}, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socket$packet(0x11, 0x2, 0x300) (async) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)) (async) timer_create(0x5, &(0x7f0000000180)={0x0, 0x2c, 0x2, @tid=r4}, &(0x7f00000001c0)) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) (async) 22m5.511687277s ago: executing program 35 (id=1166): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) r1 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x119, 0x487, 0x0, &(0x7f0000000480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x2, 0x3fe, 0x0, 0x32}, 0x9c) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a2, &(0x7f0000000080)=ANY=[@ANYBLOB='nos&Ap,\x00']) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd26, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @local}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_OIF={0x8}]}, 0x40}}, 0x40040d0) 16m48.161216187s ago: executing program 7 (id=1542): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x58) fallocate(r0, 0x0, 0x9, 0x10001) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file1\x00', 0x80000002) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x0, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde70"], 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 16m46.622048912s ago: executing program 7 (id=1546): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000400)={[0x7, 0x7, 0x2, 0x4b4, 0x3ff, 0x7b, 0x7, 0x9, 0x0, 0x4, 0x40, 0x33a6, 0x8, 0x3, 0x1, 0x5], 0xd000, 0xa440}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYRES64=r2], 0x18) r7 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a200000e10d5464f31a6500120a01040000000000000000010000060c0006400000000000000005140000001100010000000000000000000100000a"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20044050) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r7) 16m45.370504528s ago: executing program 7 (id=1548): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x4ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x480, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x444, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1c79, 0x3, 0x2, 0x7, 0xff, 0x8, 0x1, 0x1, 0x2d0, 0x2, 0x1, 0xb, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x1, 0x5, 0xc4, 0xa117, 0x8, 0xab, 0xfffffffa, 0x1, 0x0, 0x4, 0x1fc0000, 0x4, 0x200, 0x80, 0x1, 0x1, 0x0, 0x4, 0x7, 0x2, 0x1, 0x3, 0x2, 0xb, 0xfb, 0x4, 0xa29, 0x7f, 0x82, 0x200, 0x44, 0x2, 0x1, 0x2, 0x101, 0x10005, 0xdd, 0x5, 0x8, 0x431d3ae0, 0xc03, 0x9, 0x5, 0x9349, 0x1, 0x100, 0x7ff, 0xaef, 0x1, 0x8, 0x401, 0x3, 0x6, 0x5, 0x6, 0x19e, 0x2, 0x2, 0xf, 0xc00000, 0x3ff, 0x7, 0x3326ea06, 0x7, 0x80000001, 0x25, 0x1, 0x8, 0x8001, 0x9, 0x6, 0x54773815, 0x8, 0x8001, 0x6, 0x5, 0x373, 0x4, 0x4, 0x80, 0xc000000, 0x7ff, 0x6138, 0x100, 0x3ff, 0x8, 0x0, 0x3, 0x0, 0x2, 0x10000, 0x3, 0x0, 0x9, 0x3, 0x7fffffff, 0x101, 0x3, 0xc42, 0x4, 0x7, 0x401, 0x5, 0x0, 0x4, 0x80000001, 0x8000, 0x5, 0x2fb, 0x5907, 0x8, 0x81, 0x7, 0x4, 0xfffffffc, 0xffff0001, 0x2, 0xffff, 0x8, 0x2396, 0x8000, 0xfffffffc, 0x5, 0x1, 0xfff, 0x3, 0x4, 0x3, 0xfae, 0x40, 0x900, 0x6, 0x0, 0x2, 0x6, 0x6, 0xdc, 0x9, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x30, 0xff, 0x3, 0x80, 0x91, 0x7, 0x9, 0x4, 0x0, 0x5, 0x4342, 0x7, 0x4, 0x7fff, 0x7, 0x381, 0xfffffff2, 0xfffffff6, 0x100, 0x8, 0xf73, 0x1, 0x0, 0x5, 0xe, 0x0, 0x3, 0xfffffc01, 0x2, 0xe, 0x4, 0x4, 0xf5f, 0x2, 0x0, 0x6, 0x1, 0x9, 0x80, 0x2, 0x0, 0x0, 0xfb, 0x3, 0x8, 0x0, 0x80000001, 0x5, 0x0, 0xb, 0x3159, 0x6, 0xfffffff7, 0xe4f7, 0x6, 0x1, 0xfffffffc, 0x5, 0x9, 0x1c15, 0xa098, 0x0, 0x0, 0x6, 0xb, 0x6, 0x2, 0x1ff, 0x9, 0xfffffed0, 0x2, 0x7, 0x56, 0x2, 0x4, 0x7, 0x2009, 0xb, 0x6, 0x4, 0x1, 0x3, 0x7, 0x9, 0x7, 0x90, 0x0, 0x1, 0x10, 0x1, 0x0, 0x40, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x7f, 0x4, 0x9, {0x3, 0x1, 0x4, 0x17f, 0x0, 0x1ff}, {0x6, 0x0, 0xff, 0x7, 0x5, 0xffffffff}, 0x9, 0xe90, 0x6db5cd0}}]}]}}]}, 0x4ac}}, 0x24040084) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x3ea4, 0x2, 0xa, 0xf, "d382edd74e41091d16bb8e6e540a9b4d67d389"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000380)=0x7fffffff, 0x4) bind$inet(r3, &(0x7f0000001540)={0x2, 0x4e22, @broadcast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x3, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}}], 0x1, 0x0) dup(r0) 16m44.689970388s ago: executing program 7 (id=1550): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x2}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x8040) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x600000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd0, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20040880}, 0x24040015) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x9c, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x91}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x4014) clock_gettime(0x0, &(0x7f0000005000)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004ec0)=[{{&(0x7f0000000500)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/176, 0xb0}, {&(0x7f0000000640)=""/69, 0x45}], 0x2, &(0x7f0000000700)=""/31, 0x1f}, 0x3}, {{&(0x7f0000000740)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/35, 0x23}, {&(0x7f0000001800)=""/141, 0x8d}, {&(0x7f00000018c0)=""/178, 0xb2}, {&(0x7f0000001980)=""/6, 0x6}], 0x5}, 0xcc19}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001a40)=""/169, 0xa9}, {&(0x7f0000001b00)=""/179, 0xb3}, {&(0x7f0000001bc0)=""/165, 0xa5}, {&(0x7f0000001c80)=""/155, 0x9b}, {&(0x7f0000001d40)=""/119, 0x77}, {&(0x7f0000001dc0)=""/218, 0xda}, {&(0x7f0000001ec0)=""/111, 0x6f}], 0x7, &(0x7f0000001fc0)=""/91, 0x5b}, 0xd4a}, {{&(0x7f0000002040)=@tipc, 0x80, &(0x7f0000003640)=[{&(0x7f00000020c0)=""/41, 0x29}, {&(0x7f0000002100)=""/139, 0x8b}, {&(0x7f00000021c0)=""/214, 0xd6}, {&(0x7f00000022c0)=""/187, 0xbb}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/151, 0x97}, {&(0x7f0000003440)=""/127, 0x7f}, {&(0x7f00000034c0)=""/156, 0x9c}, {&(0x7f0000003580)=""/183, 0xb7}], 0x9, &(0x7f0000003700)=""/65, 0x41}, 0x1}, {{&(0x7f0000003780)=@nfc, 0x80, &(0x7f0000004d00)=[{&(0x7f0000003800)=""/14, 0xe}, {&(0x7f0000003840)=""/197, 0xc5}, {&(0x7f0000003940)=""/89, 0x59}, {&(0x7f00000039c0)=""/38, 0x26}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/136, 0x88}, {&(0x7f0000004ac0)=""/174, 0xae}, {&(0x7f0000004b80)=""/218, 0xda}, {&(0x7f0000004c80)=""/29, 0x1d}, {&(0x7f0000004cc0)=""/58, 0x3a}], 0xa, &(0x7f0000004dc0)=""/200, 0xc8}, 0x7}], 0x5, 0x2, &(0x7f0000005040)={r4, r5+10000000}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000050c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000005180)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005140)={&(0x7f0000005100)={0x34, r9, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000005300)={&(0x7f00000051c0), 0xc, &(0x7f00000052c0)={&(0x7f0000005200)={0x8c, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x71}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}]]}, 0x8c}, 0x1, 0x0, 0x0, 0x95}, 0x4008014) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000005340), 0x8000, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000053c0), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r10, &(0x7f0000005500)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000054c0)={&(0x7f0000005400)={0x84, r11, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000011}, 0x4011) cachestat(r7, &(0x7f0000005540)={0x1, 0xbac}, &(0x7f0000005580), 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000005600), r10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r12, &(0x7f0000005780)={&(0x7f00000055c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005740)={&(0x7f0000005640)={0xd0, r13, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0xd0}}, 0x40040) sendmsg$NL80211_CMD_DISCONNECT(r10, &(0x7f0000005880)={&(0x7f00000057c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005840)={&(0x7f0000005800)={0x40, r1, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffffffff, 0x38}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x44080}, 0x9) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000005a00)={&(0x7f00000058c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000059c0)={&(0x7f0000005900)={0x84, 0x2, 0x1, 0x201, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x8, 0x8, 0x4]}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xd4}, @CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_STATUS_MASK={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40088cd}, 0x8a131689a364d3ac) r14 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000005a40), 0x40000, 0x0) getsockopt$inet6_mreq(r14, 0x29, 0x1c, &(0x7f0000005a80), &(0x7f0000005ac0)=0x14) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r10, 0x8982, &(0x7f0000005b00)={0x8, 'bond0\x00', {'team_slave_1\x00'}, 0x100}) setsockopt$bt_BT_RCVMTU(r14, 0x112, 0xd, &(0x7f0000005b40)=0x3, 0x2) r15 = syz_genetlink_get_family_id$wireguard(&(0x7f0000005bc0), r10) sendmsg$WG_CMD_GET_DEVICE(r10, &(0x7f0000005cc0)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005c80)={&(0x7f0000005c00)={0x6c, r15, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000005dc0)={&(0x7f0000005d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005d80)={&(0x7f0000005d40)={0x1c, r1, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x48}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48895}, 0x14) 16m44.452182796s ago: executing program 7 (id=1551): ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0xc0045007, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') timer_create(0x2, &(0x7f000049efa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) r4 = fcntl$dupfd(r0, 0x406, r0) write$sndseq(r4, &(0x7f0000000040)=[{0x82, 0x4, 0x0, 0x0, @tick=0xb, {0xb2, 0xb8}, {0x3, 0x2}, @result={0x10, 0x3b53}}, {0x0, 0x0, 0xfd, 0x4, @time={0x4800000, 0xfff}, {0x6, 0x8}, {0xc}, @control={0x1, 0x6, 0x511f0974}}], 0x38) 16m43.164053177s ago: executing program 7 (id=1554): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) io_setup(0x4, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r1, 0x321, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x117, 0x29}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x50) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) 16m26.364148579s ago: executing program 36 (id=1554): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) io_setup(0x4, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r1, 0x321, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x117, 0x29}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x50) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) 13m38.222960967s ago: executing program 8 (id=1901): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000006800010003001000f9ffff7f00000080000000002c0002000003", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) syz_open_procfs$userns(0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d6163767461703002000000000000001400350067726530000000000000000000000000140035007665746830"], 0xe8}}, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x40, 0x400, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000b916303a469fc2667785bad67f2b554a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300"/288], 0x110) 13m37.019021493s ago: executing program 8 (id=1902): capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) request_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0xe020, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x5421, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f0000000200)='./file1\x00', 0x2000, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) (async) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x105800, 0x52) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000140)=""/6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "f76f0722"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) 13m36.54262915s ago: executing program 8 (id=1903): r0 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) close(0x3) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000b0000000000000000000000180100005e6c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x8) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000300)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@obj_user={'obj_user', 0x3d, 'GPL\x00'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'lowerdir'}}]}) listen(0xffffffffffffffff, 0x0) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) sched_setscheduler(0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() 13m36.43025136s ago: executing program 8 (id=1904): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000280)="5a7d4e1e3ff6afd7ed884662c310a2129f55f7323d59d5aa81c3bd2b8bf12459d0b672b577bb8305d180e95dbcaa7becec7d42ec7afa385a5b649ac9132b8f504676dc3ff37d3656503390ae5a639ddf3dd6de0e751f1cc8a992b047392be1e021a7ec79ab08f8b1eedd6412ae27f7b1a1d231", &(0x7f0000000300)=""/87, 0x4}, 0x20) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000380)=ANY=[@ANYBLOB='mpol=bind:N-', @ANYRESDEC]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xa880}, 0x4040010) 13m36.036491058s ago: executing program 5 (id=1906): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001800)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="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"], 0x1df) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000380)='|', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0x4}, 0x1c) sendto$inet6(r5, &(0x7f0000000100)='c', 0x1, 0x28011, &(0x7f0000000200)={0xa, 0x4e20, 0xdc3c, @local, 0x1}, 0x1c) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x300) shutdown(r5, 0x1) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000002180)=[{{&(0x7f00000003c0)=@ieee802154, 0x80, &(0x7f0000000280)=[{&(0x7f00000019c0)=""/181, 0xb5}], 0x1, &(0x7f0000000500)=""/8, 0x8}, 0x7}, {{&(0x7f0000001a80)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000780)=[{&(0x7f0000001b00)=""/158, 0x9e}, {&(0x7f0000001bc0)=""/230, 0xe6}], 0x2, &(0x7f0000001cc0)=""/163, 0xa3}, 0x7f}, {{&(0x7f0000001d80)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001e00)=""/169, 0xa9}, {&(0x7f0000001ec0)=""/133, 0x85}, {&(0x7f0000001f80)=""/13, 0xd}, {&(0x7f0000001fc0)=""/106, 0x6a}], 0x4, &(0x7f0000002080)=""/240, 0xf0}, 0x8}], 0x3, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000a0a020000000000000009ce4cfd229b18d333f3fd29bba7446f99bd851e7e797ad0c7ab1153ce89f916f8b54b01f776ac6ba21d6657ac0b035fdaf728c5eabe3ab05587c5057f576bf86bf150be33c4133f1bc29a50a1d48b6f49a09d2d4a8a35c4410af5368dee0d51f8a3e4fd6f8197d32e78013257b619d9c979ffdd25499bd4170d573d8cf891209f5e3505a9e83fc3022700"/165], 0x14}, 0x1, 0x0, 0x0, 0x2400c880}, 0x4040054) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, 0x0, 0x0) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 13m35.149401893s ago: executing program 5 (id=1907): r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000706010800000000000000000500000205"], 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) 13m35.129351167s ago: executing program 8 (id=1909): ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0xc0045007, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') timer_create(0x2, &(0x7f000049efa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x104) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) r6 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x22, 0x8]) write$sndseq(r6, &(0x7f0000000040)=[{0x82, 0x4, 0x0, 0x0, @tick=0xb, {0xb2, 0xb8}, {0x3, 0x2}, @result={0x10, 0x3b53}}, {0x0, 0x0, 0xfd, 0x4, @time={0x4800000, 0xfff}, {0x6, 0x8}, {0xc}, @control={0x1, 0x6, 0x511f0974}}], 0x38) 13m32.968143336s ago: executing program 8 (id=1910): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x400000}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="439adf2325fa92b68b65b9be8a4f", @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x89901) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x100) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r8, 0x29, 0xcf, &(0x7f0000000180)=0x3, 0x4) unshare(0x24060400) move_mount(r6, 0x0, r7, 0x0, 0x46) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000140)={r2}, 0x1) close(r5) socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017000000000000006574683a73"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'ipvlan0\x00', @remote}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x10201, 0x0, 0x8080001, 0x2000, &(0x7f0000000000/0x2000)=nil}) 13m27.715678029s ago: executing program 5 (id=1913): r0 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) close(0x3) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000b0000000000000000000000180100005e6c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x8) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000300)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@obj_user={'obj_user', 0x3d, 'GPL\x00'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'lowerdir'}}]}) listen(0xffffffffffffffff, 0x0) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) sched_setscheduler(0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() 13m24.878787871s ago: executing program 5 (id=1915): r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000007060108000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) 13m20.176366413s ago: executing program 5 (id=1917): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7ff, 0x4, &(0x7f0000000000)=0x1) r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @broadcast}, 0x6a, 0x0, 0x0, 0x0, 0xfff7, 0x0, 0x2, 0x7fffffffffffffff, 0x2}) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, 0x0, 0x0, 0x10122, 0x0) 13m17.118596695s ago: executing program 37 (id=1910): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x400000}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="439adf2325fa92b68b65b9be8a4f", @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x89901) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x100) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r8, 0x29, 0xcf, &(0x7f0000000180)=0x3, 0x4) unshare(0x24060400) move_mount(r6, 0x0, r7, 0x0, 0x46) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000140)={r2}, 0x1) close(r5) socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017000000000000006574683a73"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'ipvlan0\x00', @remote}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x10201, 0x0, 0x8080001, 0x2000, &(0x7f0000000000/0x2000)=nil}) 13m14.477082433s ago: executing program 5 (id=1920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x1, 0x4005, 0x8, 0x200, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000000)=0x7, 0x4) getsockopt$MRT(r3, 0x0, 0xcd, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) rt_sigpending(0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f00000000c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000005740)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) 13m14.46566219s ago: executing program 6 (id=1921): r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000706010800000000000000000500000205"], 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) 13m11.615664063s ago: executing program 6 (id=1922): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) accept(r0, &(0x7f0000000040)=@ax25={{}, [@bcast, @null, @null, @default, @default, @default, @bcast]}, &(0x7f0000000100)=0x80) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') unshare(0x8020200) acct(&(0x7f0000000200)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast2, {0x0, 0x192, 0x6, 0xffff, 0x8051c, 0x2, 0x5}, {0xffffffffffffffff, 0x40000, 0x1b, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r6, 0x0, 0x0) 13m4.321279308s ago: executing program 6 (id=1923): r0 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) close(0x3) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000b0000000000000000000000180100005e6c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x8) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000300)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@obj_user={'obj_user', 0x3d, 'GPL\x00'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'lowerdir'}}]}) listen(0xffffffffffffffff, 0x0) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) sched_setscheduler(0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() 13m2.567017821s ago: executing program 6 (id=1924): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000380), &(0x7f00000000c0)=r5}, 0x20) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000440)=ANY=[@ANYBLOB="e904080000000180c2000000080045fd00240000e0000011"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, 0x0, 0x0) write$FUSE_ATTR(r7, &(0x7f0000000240)={0x78, 0x0, 0x0, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000}}}, 0x78) write$FUSE_NOTIFY_RESEND(r7, &(0x7f00000000c0)={0x14}, 0x14) 12m59.062507276s ago: executing program 6 (id=1925): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=',', 0x1}, {&(0x7f0000001080)="47b53b4b2d757b6bdbfecf13a3eb343c7ddfaaa99fec9d1e5f049d1f4dc9b4bc49cd0e11f2d8ba81ed67c146a50a585c5b03d6f794d314657d4ec6cd039369cb702ab278322eb332c1581b5260fc94ee0766294337cbd368fe5b1a350cebecc219833bddd8d8d1fff7316502acd8feb7ff5f1abb0243e5df9a95e421ce94435ee89f2a5373ebcdd6d3525cb55545cd9db0f1c134b81fdd996fa5b4cae385052aaee8c0bc31e3d087280e76d0eb35d4a97a5a89d069af57e10e2b26a31f04854a2d302b64f9be7c4135de92c3f30ff2c06952efbcb3d74f54d425448403999c0c87adec3cdfa77d1af132a422181c6031ec6bd01d35668bd50df03b730253e20364fbb216708e5806e32ee2bf06dac15b18d67cf9541c6e973b2443e945976397d3948aab7886429d781fd705dd16bf5276ad9f726191cced7dbdd3e1026e999c860b83026647286c3b8e01029dbf17d0f0a6559d6c2a929a80574b43225f66c5ff5e42c9aee553f607634ae388bd9dca213df8a91471a6e83fbbeb2f11a3d500346b5854b7b8f86cbf1ffbe9add856b5c3221942f175670f108e76aa3adec8b752245769cab340d1a3982ddb732a11cedec2524614baa38865c6546b48b7ad30942e9fa7ce8dbdf95d911e0eb7ca6577871c7fc7d4c99e2672bee981a022b7362d089529093c35f0a50c8bcca4a3cd077d8e86cc028229f0e273c3a1567ebb05b865a773f45149a6e4db8972636d46fb72b517d88ba178d386a33176a4b3386e0549e96944c0a9dd50b3eb51a62409c3d5484d1e22c257b09c5a4ad89f978494885c2615e29d15f72f53e75490e7e686139655f866de33a38765617b6139435f852cf28312e7966d984f6aef2f569be4a5aa08e2b64c04b2faa48298ad3c7ae797304eeb82cef2944f00019139690030040a62ed27cc1d75bb86ecff7d16a3c7e0769b4c70a5a729672ce1d7a7ceccd01d7c688f359d1c3f2dbdce3ac65fed2a521aa02b1ee5ba9ab9cbc90143466ead90aeeaa1ebb36d588e41b3eda2fb284d17b170f2b3a29f7178ce733ec76ec06727ef3c4d48e7d5a5955ad76f51a9cd7cf03d4ab7afd20952ff5844aed62a273560423610234c3357d20b7ea877e9b7742b9d19119708e3aeb2186725869674a2c0f4059c4193157e029537eeea43319170c1842cc5a0dd48e2407d62f500c970ff597a5b7c6d7223e86bc7eaa772ea4a82c6acc587bee517d26a25675523955c36012547a0817fd292db39b08792ed6e782f558168f8e97cd2d2a95fae6c8ff19537a2b07c4ebb705123e20300d206863c870cc93450395804bc898abf95e7946e3613087702402880b37003370d94cc2e60451675899423a278a156f864290e674ac3b49cc5cef955a5fadaa51947a218e903a259e31f2d788a2b60c5f9b1ec7030f461681ab1b000ee78ae1c9026138b7f59060089b9793dc3354a996278ac3e43835e71535a6f1954c38d66845bbc64ffe9049ee14591e9f0193572dc603f91ab65eeda362e556c9b9a08483ecda1aa561e0fd97684ba8a8d61dc92b74bae1ff68d86aeef91bfbca6e2d3e0b10682d5a7cd6eadc51457fe71de2a58ee6d5d00999f386700926bba03e1c91a8e919aa51f6b6a08495ecf857e2de0d59155c3b6c54d7843c0a986d71cab49f73200184dbb4d854d9146ebc4397772ebe6591a1c918073a868f4c0be6538ebc302f56cc061ba26f00d70d978eaa39f5ad3f139763643fc627a3b8ec825104e93724bc13eb63545838e591df957373344a54a4cad7bd62a6e7659dbb4648aa97769c191630c7d6407104319dce1c61f7ce960438ff40f8ea41cc9e6370cfdfca9868dcac6df6ea2442cee143ae25607d4d531eb6b4ea0d4b70b39d3d29cdebc319b2a77f1019d189079a8a723e0da627608a5f591e6a367f6af1c191561fcb28560343beb69ad3d58b84190170155b9fd08e666c40bb8f0bae01de6637c1a55140f6299fa19ab36414aae4483222967608e30518fabbcacfe1dc76064bd6c17230622c6853bf2131820088bc6547fa14ac1a20071c716c9f3c0b52e578b231fe5d531dbe0c95707318d7fc62be3cd8e0e585f2b6ee6a85aa76fe003b5b19b2a3248416a68ccb7acf44cf70e617285bfbb2263e0f8e166b1933fffab41dc5a37054a2c86d4b9450b7ba7cf5e983dee493e5efd2fc77714f4674738c3cc4ce5fd2d10b58ea4d50a851738406c5ed863f660d295f5158a940a68122543b934bdfb211c774ad56ef0fab8d738b15efefca3b5e2889aa8e56306324229a9959c8ef6f29d1c3174eaeca4f1af2859dc4bac9614fe0c727e6fc71f90b2285ae5db8ebb3d58c44a66ae0f57d1007106d77cb28c32744ff4455f08856d709f1adf1e2a71a52d30dba7aebb962382d852eec699fecf6fb541bc12c2a102a9e0c532a9276052504378a83f36c48f0718b49f35b67b0d533231757f02be08c4f83aca0cace81da0f3054ad950b0a3063f6581e29270bc880bf82fb645fb6c9dd2ce2b0dbb7df2bc3ab19c4567b443da2bc3e4b84f461d5e654918542ced736f688dc3d028b24c34cbbd90829d0502d720b0ae70ec3fd01e492cc5e7d16dff53c708916f27f668ac94d4ab4bcf1799c2301f9af06701a06b6825c6ac995e7111b2ec16e9a7740c7774eba7264a6b17765b068b5cbc0adf52e0ab25847991c1ba965f66da48551ca2c9d352ec120c4b7ec6623d3ce262906f442f980683c7620bd444a3b539e4285dec41f6e37899ff1617c3fbb980a17a4b22c2c14b15b2453f9cedb3ea781f5e03aaa0aa6a501a59443af8c68762246938b70884612ff1a4adee7b31b98aca8b70ed2d4b20b64309b6087c5cf3740d774ef283b007864fcd6b66a423edfab677de4e903421c95e1c75299922aaae053e95bcac78b30f5a74f908824f07d7341c4e3a45126f5c5e7bf3369370915e370bab5f39a338dc4574e2dad5624a9a1e881289b2f97d94c6baf661287a172ee218cc8d8cb612fc6356986d71fbf5286d4ccdf13cde0bb7140640704a2a0532e6d20aa63b62bc1ab1b24f3a28527059ea1b95e18581300991c90126f538c9d0a928b297df5ee6f67a1e71c28096fa37037f08b9199e89013b9e9bbc3243a059efc6b0f7952659e9abdc29bfad6089b0723e967c97adaef006616e9978395f808d1e6b76290f728ae1cd819e20d354429f7d2d831db693b801f116b4c5f8e446bd3fdb64328d53a624b3a9d1e89a86641a3aa8299a326c9da9d2a5bd556abcecca252c200aa3f6c3cc08fc3a5c424a0a0056810d65ebae779e618daea8b70583e5874f7fb0c5142e6422742d009f1d797bd8ffb0aa13f4e97f4bb4475bb8f4ba57a6930bb8693e7900648dc48d353694209e527d29d21dc7403d815c52294a3b45ccb2160a910bf92b846ecd331a52b77e1a9ec737be00c11c88d300e8993eb02a0964c1a66d529d08e4900ab8645fbf3955bc86432a2dfd903c4f905d71fefcd86fe72d7fc537e8724d5088d31bea1465663a9b9fbb70c40021372f4a091d9490c41f41a21b263fb1c1f8ceff5381b59d2fe73fc915227fd56094e4db5cb6b7d20fc15d1c24395b1b0cc55b577a31c86f1a2c1c5a1505eda53acb6dcca21b27de655c6aeae6471ee3e86e93713fe3dc4bcdd0cdca75f4111c1042f401e3a56e73390d8991c61a9f1c4c4f08df6242d00e55757ccad07b58381a2bf08af4132af0c9ca8261b19944b7ebb2596b49b2ab3235f4243fda339c95768d26e737e43cd3b55bfef6dde1773c3a4604ab5a017f579306f72879ed69741eba013ec5788ac22a7ad76b6f9a4535ff63a96232345c383c9217ba24011858fe46b985cf9341d706e3483c5627915428aac08b53996b48a560240b8b7d4beeb2bd9bb2d84ed0e76f0c76fe5bd62277505b6081bb6307af25a5a4c2d224b708b3e7ed06c8242add50c7c69daf0c9c9d4623157bd693b936dbc8dbfca52575f9b6c9f89ef7d4208e2012c143b4feb0c9cef978cd56538e6674e2f41799d64e805181e7ccd1c070fab644f9dd3dffd5df9eaf63c8562645eca1bc2a40257e1c9132001501c3a8ff0feabaa7091e779f0ce1eb148b10592d6598f265b5cd4f42165da807c328367cd05f55ffc7369dffa591b1ea693141e49254c3c0e9a45480d9c9e8eebbb0dde606a613b6bd3da8528ce84bbba05b3ff362c1da24eb60591a91ea47bf6157ed8b03cc484a80f99d027ce5c3d3efbb64b3e02a840d1a5a1d67cfd684fce9d68edf38fabb6ab51784a8d05c80f1b5058fcceb85374334fe1cf3ab4a5044f9c06c8d1014e74c1115702c9c99be9f5266885e8099d60bf0cbad9cd9edd7808679d26c281e0848a1338d97c24a3f9c13890c3986c9bbb17db378ffd200fe4482eaebe35285b6840f3ed8880f7820803a4d865ea0e1f60d0fffbcd53674828bc07e0ef954aeffd94f79809928568e5790328c18193c0614bc0f0b1cdad74eb8b6a6383893c203dd4bfcec322a85f01947a604814aa02c2074bc48ba10e786b2cd0ea0b51da0de5587044470cc29d2c850fd81ec3b7c23de873896e06cb8d9d5b0b4862fbd2d443cd684a410054443b208130220c0f7f08825b39632790a0caa0ad3f837693b287aeafcd159a215da3056eb55e6723ef2e4e4a380f9c68b5ebeb72e9052f7655da3b3ce4452f20ef3b3772e1da5caa22ca170132ec82ae253436fe5a8606463e21361175c02c584ad63d320e51a11894314d41e7f7b4a80e5f175615af3a9933fba0c53d6f04f2e618000e5f29b09f829795733f6e13cf76627495f7863ae68a893bd1c9c5a1b5989fe61543845d41d89fb7e74ee7a50f24e2d4f64521b382cfd49c9bbbfd4ebd44f1c0e0a349ead75b61b76224b6c84ac6cbdea0817fe388f9a095d73912759c04b4e08f4538c56dacb1e7b0520d5a3cc3ed38cf9fd91d6f6232dfdfed8a2c158cc65e609e2ebc8af93f90a26c7bb6dad4c07da3e90d37f16f7b8bec3b33bc42af575dc4cb78a8c2dfb121f3e7cab238a0496e134d15c8d86f5af228cf50de21246ff1af622f314d18a49030ce9d63c39cd540a65b9207113edad9a0d15abadeeb642ffd499888ae870fd6d7f7f2cd84a80973962ff1d15ccf4f82b58c74fd8ca729bf7052e4579e0d674b82946813aa0725b406c7302aff0453b8ec75f937bfa97b88dd2bdf8fd8573995e6bb87547f3d9107733c06063dc652b2e0c0cb1c48f8e62b65b9ed9e4f4dd7afd42bb91d5ea18d207f9ee872463fac5594fab5be5a42ca70b7066b7e02e9da9091a48c79bdc4b0bcd17eda73b56b31a98fb9f492c3124cf05181116cddc0ae03c081bb3791011830b1f4175adcc8ddff6f658f2405ec794addec0da74ac366b75077ec4224bdcc3847c02d52b6b82831664ae48d4f552559362200dd8b0657de8b86c62c5bbe8f7b3a026df20590e60cea81dee1a80ebd6680d867918629b136030408eb6b998c115f70b02c3b3635afa3fd92142b37ad7828f49725c08b1d99cac528dda368929c9875826abd7848a42fd7b38902e53ea895d113ea5dc92b64ebc8f8a76ce3d069e3632225be098d5b1bb6d7efaf456ad315d4ed1eaa6f1394aae875632a98104c4104e476c23aeeaced3320bbf376a19b8f994f7804ddc51f85031e7524ccc760683d4151f89c15ac5a574642124daad5f055cc1c5c551328e8776f03b7a5e733358334a42ca26d49cfbdd0787c92d1f8d40beeeeb64e703014163dd9eac1bb19cc4ddf8690eb694df072ed8846e9ae5b7d80958b0f68afd88", 0x1053}], 0x2) sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x2a}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e0", 0x13}], 0x3}, 0x0) setreuid(0x0, 0xee00) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c10000000224e224e0000", 0x58}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0) 12m58.704967136s ago: executing program 38 (id=1920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x1, 0x4005, 0x8, 0x200, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000000)=0x7, 0x4) getsockopt$MRT(r3, 0x0, 0xcd, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) rt_sigpending(0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f00000000c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000005740)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) 12m58.124277633s ago: executing program 6 (id=1927): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x100078}, 0x20) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x2, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x4}}) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x519fd189, 0x4) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12m41.714805856s ago: executing program 39 (id=1927): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x100078}, 0x20) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x2, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x4}}) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x519fd189, 0x4) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m49.680539232s ago: executing program 9 (id=3083): socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x50, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x1a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, [{0x0, 0x1, "0000000004002600"}]}}}}}}, 0x0) 2m49.130960218s ago: executing program 9 (id=3085): r0 = userfaultfd(0x80801) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x1}) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000600)={0xafa, "126ebf7d9fdf9aec84c0fe4cb734f282d46938152a71855f9c8d590c79cfaf41", 0x0, 0x400, 0x0, 0x8, 0x0, 0x4000000}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x4}) 2m48.817044799s ago: executing program 9 (id=3088): r0 = fsopen(&(0x7f0000000040)='zonefs\x00', 0x1) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="5e6ac77702883b3fe5a9e9b28cb7f93b5a8a27c4041e729f05c2c1c81d5785e265c68a96d19e9177b9eaa01d7b02e22112c2d46d18f9a32eef1f3759972d11e670296c9ff1f0726900a3c8eecc3bde2226e076f54a310f", @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x13) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"000000149c0286e08ffad4ad1381b3aff5eb000022a70c2900", r5, 0xffffffffffffffff}) close(r7) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0xa, 0x800, 0xe0000000, &(0x7f0000000000)) ptrace(0x4206, r9) 2m44.56833478s ago: executing program 9 (id=3093): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000880)={&(0x7f0000000180)={0xa, 0x4e21, 0x2, @remote, 0x40000008}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="141300000000000029000000430000000400000000080000"], 0x18}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x22, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe2981) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000400)={{0x80000000, 0x2, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x200, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) lseek(0xffffffffffffffff, 0x0, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0xff9) read(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000080000000090a010401000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008340011800a00010072616e67650000002400028008000140000000040800024000000001080002400000000108000140000000134c0000000c0a000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c00028008000180fffffffe140000001000010000000000000000000084000a"], 0x114}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) 2m43.472886974s ago: executing program 9 (id=3102): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x903d01) r1 = syz_open_dev$evdev(0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000100), 0x0, 0x38, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000fcdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="04002c805714febcf1bfe2fe06ecc3a7d55ee7d6655af7ed871c229e9463be198ab24a69155aa1c984ef6f930b51299fcb39c628ea9e4de11777ea4525bb392480035fa8bcd2f201c10a371a0d78849c8c7abe178c611056735b0400bcfca3e434da17e571d3f95bb850582878b14d56d639895a968ae3217cd9975e0462ba59dea6f2c5c9fe400318b6b4"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', r2, 0x4000, r1}, 0x18) write$char_usb(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000080)={0x4, 0x3, 0x40}) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000480)={0x13, 0x10, 0x7, {0x0, r6, 0x3}}, 0x18) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) 2m42.065787355s ago: executing program 9 (id=3124): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) r1 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000340)={{r1}, "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"}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x5) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) 2m26.614966088s ago: executing program 40 (id=3124): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) r1 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000340)={{r1}, "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"}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x5) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) 2m9.141373131s ago: executing program 3 (id=3346): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x96}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async, rerun: 64) getrlimit(0x0, &(0x7f0000000040)) (rerun: 64) 2m8.96272942s ago: executing program 3 (id=3347): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/current\x00') read$char_usb(r4, &(0x7f0000000240)=""/9, 0x9) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) fcntl$setstatus(r3, 0x4, 0x4000) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) 2m8.945057445s ago: executing program 3 (id=3348): socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 2m8.797807354s ago: executing program 3 (id=3350): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@multicast, @broadcast, @void, {@can={0xc, {{0x1, 0x1, 0x0, 0x1}, 0x3, 0x3, 0x0, 0x0, "a5ae9c94dc085165"}}}}, &(0x7f0000000080)={0x1, 0x2, [0xb06, 0xdf7, 0x44f, 0x1e4]}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m8.405463212s ago: executing program 3 (id=3352): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) rename(&(0x7f0000000000)='./cgroup/../file0\x00', &(0x7f00000000c0)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000001640)=[@in6={0xa, 0x4e23, 0xb3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xaa3}]}, &(0x7f0000001680)=0x10) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "956a7ea5ee742f528ff45c79c9297740fdbde2ddfcfdc6d892b66d494e12527b", "40558ca5210590c4386ca985ea00", "ef3dd21ee56a9fb59a8ec1d355e7768499bfe0eee62f1f1333a7692a43ac93d3", "532d09c44a6fdabce78c407eb0e1aa92b46f44016a416983e66b00d9c00be3c1", "068c44edd5cc30ffbd8abfa6dfcb00ce5c79f99126bd15c9de684e0cbf5e13e3", "a95a19c5ca253936777e16d2", 0xbbf, 0x7fffffff, 0x8, 0x6, 0x7}}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000180)={0x3}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000016c0)={0x15, 0x65, 0xffff, 0xd98, 0x8, '9P2000.u'}, 0x15) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0xe000003, 0x4073, &(0x7f0000000040), 0x1, 0x4000003}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000880)={r4, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x66}}, 0x1}}}, &(0x7f0000000300)=0x90) sendmsg$alg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f0000000100)="54928f19b4bc280944c3f94d21835d67c5a45e79c21c413bc29c422b705a8a91e48680bcea99fbb6c75f1a08e152602a178bdd915d496ac46431c193939c1b73aac25a6a1ab158e5a5864c1d5eac60722109a2be67659efee730e3d75a66318800d7d7fd30ce2c06de4897fcfff9", 0x6e}, {&(0x7f0000000180)="75d40280e8c8ae42e9948a37d37e6241c32c7914e079d2b1815472a392e30110e262ae3e827640a322335aee6f17244c80f93b715c5b906f49f040aad3ad5233db6dd063069b53893fbf10628a98534ac2ddcfe30df20f96ad3a6ecacad985b51b79447351c0612af744c160ee5dede61139d6ed9969d80345d706b9b0830afbd7e3878e335a063954", 0x89}, {&(0x7f0000000240)="7069112d8f36492d0415540faa0882f826df2ace1f58b6d62aebb10c22f2e0c655eb8748052c1ee6ac3c06b67ad769c818d1a58423d032026f50e4c6d7941e3924870ae58dce554aa8296a67bf", 0x4d}, {&(0x7f00000002c0)="e9e1efb8c6841f4c60d08acbfe910a580732ab6357c08ac80f5108b9802e0baf204058b7546c7016bc10ad3c79b36e467b2c99e102405ad1e429809cfdd0f432fe793cd47692c4ca8f3c1dbc8adf008e913c009bdf428335587cf3f71654b1fdea2f2b20eb92f13d9b77ba0cf372e7013387dbee4eb1717c5caf508894fad3cadb8ed757919ea1d1d06cba32fd8ce380fc4c7f2520980b2f15402e", 0x9b}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000080)="d8d1dbd491fa78007cbddbdcff9f4e0c203cf01c134fd5b7f2e1298048d017be2cf004eb0b", 0x25}, {&(0x7f0000001380)="0074dfeeca409502d3ed2bf981154f5fab53bc208ea5bf1e358d5eeb9cd31665b783d1a6f1e3ab514b7ae737521c24a64122236ad1a33423fd3403ff609a67fdac8957ab447771faad0eecb3138339d9f702c9e0e033e6faf377bc9090c0e5dd898916946dc05ca375ab9407c3", 0x6d}, {&(0x7f0000001400)="0330dc59b9d3f17d5cc092ec718c16050f1448f837cc9da76fa4dc2b31ece301b47e27bcbdc2eddf460d8f90256f9fce541a74e13b9ad821e441f9a9fe45e4c014df8f0bf591d2ba37f0b8de892d98c77554813653ee06869466e5cc984531d35010edcd696e602dd4054c39c80f04eef20060e969df1132029c67c957f5bc16e31ec37f8d74e5efefb39005d22d1210a48e5c7e9f64492ce205b88b475498a42a3f947768ecb08dc3e08f80", 0xac}, {&(0x7f00000014c0)="133d4e32adf3e7cf9b201ca56c29297b560ebd6f5ae2b1", 0x17}], 0xa, &(0x7f00000015c0)=[@assoc={0x18, 0x117, 0x4, 0x9787}], 0x18, 0x20008890}, 0x44004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x101480) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000400)={0x0, 0xffffffffffffff80, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2d, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) 2m6.294721948s ago: executing program 3 (id=3357): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x67700992df819641, 0x2008000000000003}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e2793b10abc09fa6ff00d112000100001300090400000000000000000000009e9dd298d1a8fa7e"], 0x0) 21.526937857s ago: executing program 1 (id=3558): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 21.220451327s ago: executing program 1 (id=3559): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) syz_usb_connect(0x0, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde70"], 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_cancel(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x18c6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x5, {0x5, 0x7, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x1, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 17.808392242s ago: executing program 2 (id=3562): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_connect$uac1(0x6, 0xc8, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0xe, 0xa0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2aaf, 0x2}, [@selector_unit={0x5, 0x24, 0x5, 0x1, 0x1f}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x3, 0x31, "aea9"}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0xff, "87ce"}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x73, "1f46409ece"}, @extension_unit={0xc, 0x24, 0x8, 0x6, 0x97f, 0x20, "e276ca4179"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x3, 0x9, 0x4c, "e2a600e0df2942"}]}, {{0x9, 0x5, 0x1, 0x9, 0x388, 0x2, 0x9, 0xfd, {0x7, 0x25, 0x1, 0x0, 0xde, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x81, 0x3, 0x4, 0xc2, "e4fa0482"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8001, 0xf, "37cad5dbb461156f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x30, 0x3, {0x7, 0x25, 0x1, 0x1, 0x0, 0x8}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x80, 0x5, 0x7, 0x40, 0x3}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x6c, 0xe, 0x6}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x440a}}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x2, {{@in=@multicast1, @in=@multicast1, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xee01}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000848}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17.714682312s ago: executing program 0 (id=3563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './bus\x00'}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x80043, 0x4, 0x1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143442, 0xf2) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r8, 0x0) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa7f084dd5657bbb1, 0x14}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ftruncate(r6, 0x2007ffb) sendfile(r1, r5, 0x0, 0xfff) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000300)=0x400) 15.505159654s ago: executing program 1 (id=3565): creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) preadv(r2, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/225, 0xe1}, {&(0x7f0000000880)=""/216, 0xd8}, {&(0x7f0000000980)=""/17, 0x11}, {&(0x7f00000009c0)=""/144, 0x90}, {&(0x7f0000000a80)=""/216, 0xd8}], 0x5, 0x8001, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x811) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x3, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x1d, 0x3, 0x2, 0x6, 0x0, 0xb, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0x3, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x1, 0x17}, @mdlm={0x15, 0x24, 0x12, 0x8}, @obex={0x5, 0x24, 0x15, 0xa898}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4d, 0x3, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x420, 0x3, 0x6e}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x44630892fc868b0b, 0xf, 0x3, 0x2, 0x10, 0x91}, 0x43, &(0x7f0000000300)={0x5, 0xf, 0x43, 0x3, [@generic={0x31, 0x10, 0xb, "baa659a373a92c65c814c19fa9f080c53ad4c5a8a6cd1551dacd25440159df6db92cc33ee5dcdf0952a22d0b728e"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x0, 0x1, 0x9}]}, 0x6, [{0xf4, &(0x7f0000000380)=@string={0xf4, 0x3, "921e5ac22c0173c98a48c172ddebf9815b2fddb5fa1a97df2c54b2da524a42e8384f2950d0b3699fe5b927c76e49cd7716606bd6b5d8099e959129e6d7cef1b506248be7f71952c94942f26bded14aae742016e22ba74031f882748d8e420718bba5b6420865d7bd8cd94bbb3cb46752cf66540333cbf6d9e07bbc13d34b0da24962cfee948864c10d7068dbfb1d009d5d1f69e14fab00f8d4c4c4aece10a37b63bea711d2f216ba0b4d2ab705ad26b6fb36bdc53f2aca4ffa3b08bb09c3135af7703053c4f0e204dc5c2033960f08de0cac7511f38cfb730d543eeb63db6e07daa701a500ab218236c3dffe8df8fa4c4433"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x457}}, {0x100, &(0x7f00000004c0)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x88, &(0x7f0000000600)=@string={0x88, 0x3, "2525b5de822e4f9a633e4eaf65da627f3c61d2342cdd0de4798ac7fae65b3164f508b9d5357a36bf3a37a186ca2fa4fa30a8da4d751a3aceb2baae9fb967cfa4e014231e3c97665196658e50dff1f870e73d9ca8c9761e39caab760df730760b309d5fc76dd30c2c8b6e2026f92d90d46cd135cdc29781b2c4ce5518ca08468c3eab3e86ff44"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x82c}}]}) socket$rds(0x15, 0x5, 0x0) 15.090045956s ago: executing program 0 (id=3566): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x9, 0xfffffff9, 0x8, 0xd, 0x2, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0xb) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x7f) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) 14.538611811s ago: executing program 2 (id=3568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f40), r0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="41d691137000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0xd4, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xd4}}, 0xfae258987eac16a5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3, 0x1, 0x3432564e, 0x3, 0x7, [{0x108, 0xf}, {0x3, 0x29f6ebcf}, {0xd, 0x8}, {0x5, 0xc}, {0x75a, 0x5}, {0x7ff, 0x6b}, {0x4, 0x40c}, {0xfffe, 0x1800000}], 0x0, 0xd, 0x2, 0x1, 0x1}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) r6 = socket(0x10, 0x3, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x0, 0x0) keyctl$chown(0x4, r7, 0xee01, r8) keyctl$setperm(0x5, r7, 0x30925) keyctl$KEYCTL_MOVE(0x3, r7, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_generic(r6, 0x0, 0x20044884) 14.496436156s ago: executing program 4 (id=3569): r0 = fsopen(&(0x7f0000000040)='zonefs\x00', 0x1) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="5e6ac77702883b3fe5a9e9b28cb7f93b5a8a27c4041e729f05c2c1c81d5785e265c68a96d19e9177b9eaa01d7b02e22112c2d46d18f9a32eef1f3759972d11e670296c9ff1f0726900a3c8eecc3bde2226e076f54a310f", @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x13) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"000000149c0286e08ffad4ad1381b3aff5eb000022a70c2900", r5}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0xa, 0x800, 0xe0000000, &(0x7f0000000000)) ptrace(0x4206, r8) 8.85183094s ago: executing program 2 (id=3570): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 8.658799283s ago: executing program 0 (id=3571): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="110000000000030000000f00000008", @ANYRES32], 0x34}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x64, 0x0, 0xd2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff}}}}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x400) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f00000000c0)={{0x2, 0x7}, {0xfb, 0x8}, 0xa5a, 0x6, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x3ffffffffffffef9}) 8.651175294s ago: executing program 4 (id=3572): r0 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f000000bf00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="1bf1d7", 0x3}], 0x1}}], 0x20, 0x10081) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005d35b94082058d00ac7a0133a1010902120001000000000904"], 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r6}, 0x10) flistxattr(r5, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 8.445958774s ago: executing program 2 (id=3573): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) accept(r0, &(0x7f0000000040)=@ax25={{}, [@bcast, @null, @null, @default, @default, @default, @bcast]}, &(0x7f0000000100)=0x80) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') unshare(0x8020200) acct(&(0x7f0000000200)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast2, {0x0, 0x192, 0x6, 0xffff, 0x8051c, 0x2, 0x5}, {0xffffffffffffffff, 0x40000, 0x1b, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r6, 0x0, 0x0) 8.346860362s ago: executing program 0 (id=3574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 8.12172811s ago: executing program 0 (id=3575): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080), 0x4) syz_usb_connect(0x0, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde70"], 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_cancel(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x18c6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x5, {0x5, 0x7, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x1, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6.683212141s ago: executing program 4 (id=3576): ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0xc0045007, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') timer_create(0x2, &(0x7f000049efa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000044000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x104) r4 = fcntl$dupfd(r0, 0x406, r0) write$sndseq(r4, &(0x7f0000000040)=[{0x82, 0x4, 0x0, 0x0, @tick=0xb, {0xb2, 0xb8}, {0x3, 0x2}, @result={0x10, 0x3b53}}, {0x0, 0x0, 0xfd, 0x4, @time={0x4800000, 0xfff}, {0x6, 0x8}, {0xc}, @control={0x1, 0x6, 0x511f0974}}], 0x38) 5.508878528s ago: executing program 2 (id=3577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4d, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="672e670fc7baf5ceb9230200000f320fc5b0040000000f9a000000008b000f01cfc4e21d4501c74424ba00e40000660f38823d0e3000005224020f01c50000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae8266bafc0c66b8004066ef", 0x63}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x2000, 0x4000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x9, 0x6, 0x8, 0x0, 0x8, r4}) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x2, 0x0, 0x100000000, 0x10, r7}) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close(0x3) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001200130628b57000fdd3df2506ff01fc00004e2200239e8927000600000009000000090000007d00014afb909eac16394b7e7100e61e70783e85d29f65c6c92e1f"], 0x4c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4000000) 5.370809833s ago: executing program 1 (id=3578): r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 5.266150409s ago: executing program 1 (id=3579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x407, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}, {0x1, 0x2a00, 0x0, 0x0}], 0x2}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) listen(0xffffffffffffffff, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) 5.265379542s ago: executing program 4 (id=3580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f40), r0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="41d691137000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0xd4, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xd4}}, 0xfae258987eac16a5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3, 0x1, 0x3432564e, 0x3, 0x7, [{0x108, 0xf}, {0x3, 0x29f6ebcf}, {0xd, 0x8}, {0x5, 0xc}, {0x75a, 0x5}, {0x7ff, 0x6b}, {0x4, 0x40c}, {0xfffe, 0x1800000}], 0x0, 0xd, 0x2, 0x1, 0x1}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) r6 = socket(0x10, 0x3, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x0, 0x0) keyctl$chown(0x4, r7, 0xee01, r8) keyctl$setperm(0x5, r7, 0x30925) keyctl$KEYCTL_MOVE(0x3, r7, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_generic(r6, 0x0, 0x20044884) 4.541206095s ago: executing program 0 (id=3581): r0 = fsopen(&(0x7f0000000040)='zonefs\x00', 0x1) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="5e6ac77702883b3fe5a9e9b28cb7f93b5a8a27c4041e729f05c2c1c81d5785e265c68a96d19e9177b9eaa01d7b02e22112c2d46d18f9a32eef1f3759972d11e670296c9ff1f0726900a3c8eecc3bde2226e076f54a310f", @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x13) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0xa, 0x800, 0xe0000000, &(0x7f0000000000)) ptrace(0x4206, r8) 3.712734205s ago: executing program 4 (id=3582): syz_emit_ethernet(0x0, 0x0, 0x0) 1.870657562s ago: executing program 4 (id=3583): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="110000000000030000000f00000008", @ANYRES32], 0x34}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x64, 0x0, 0xd2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff}}}}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f00000000c0)={{0x2, 0x7}, {0xfb, 0x8}, 0xa5a, 0x6, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x3ffffffffffffef9}) 484.524617ms ago: executing program 2 (id=3584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 0s ago: executing program 1 (id=3585): setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000080)=0x9, 0x4) kernel console output (not intermixed with test programs): T18038] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1877.910873][T18038] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1877.929921][T18038] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1879.722899][T18059] usb usb9: usbfs: process 18059 (syz.3.3082) did not claim interface 4 before use [ 1880.430511][T11616] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1880.468838][T11616] usb 5-1: USB disconnect, device number 50 [ 1880.697490][T18078] FAULT_INJECTION: forcing a failure. [ 1880.697490][T18078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1880.697523][T18078] CPU: 1 UID: 0 PID: 18078 Comm: syz.2.3089 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1880.697546][T18078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1880.697558][T18078] Call Trace: [ 1880.697566][T18078] [ 1880.697576][T18078] dump_stack_lvl+0x189/0x250 [ 1880.697607][T18078] ? __pfx____ratelimit+0x10/0x10 [ 1880.697631][T18078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1880.697657][T18078] ? __pfx__printk+0x10/0x10 [ 1880.697697][T18078] should_fail_ex+0x46c/0x600 [ 1880.697728][T18078] _copy_to_user+0x31/0xb0 [ 1880.697752][T18078] simple_read_from_buffer+0xe1/0x170 [ 1880.697783][T18078] proc_fail_nth_read+0x1b6/0x220 [ 1880.697807][T18078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1880.697832][T18078] ? rw_verify_area+0x2ac/0x4e0 [ 1880.697854][T18078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1880.697877][T18078] vfs_read+0x206/0xa30 [ 1880.697908][T18078] ? __pfx_vfs_read+0x10/0x10 [ 1880.697928][T18078] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1880.697959][T18078] ? mutex_lock_nested+0x154/0x1d0 [ 1880.697979][T18078] ? fdget_pos+0x253/0x320 [ 1880.698014][T18078] ksys_read+0x14b/0x260 [ 1880.698039][T18078] ? __pfx_ksys_read+0x10/0x10 [ 1880.698066][T18078] ? do_syscall_64+0xbe/0xfa0 [ 1880.698094][T18078] do_syscall_64+0xfa/0xfa0 [ 1880.698117][T18078] ? lockdep_hardirqs_on+0x9c/0x150 [ 1880.698140][T18078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1880.698160][T18078] ? clear_bhb_loop+0x60/0xb0 [ 1880.698183][T18078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1880.698202][T18078] RIP: 0033:0x7f734734e0dc [ 1880.698220][T18078] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1880.698236][T18078] RSP: 002b:00007f73455ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1880.698257][T18078] RAX: ffffffffffffffda RBX: 00007f73475a5fa0 RCX: 00007f734734e0dc [ 1880.698272][T18078] RDX: 000000000000000f RSI: 00007f73455ae0a0 RDI: 0000000000000003 [ 1880.698284][T18078] RBP: 00007f73455ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1880.698297][T18078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1880.698309][T18078] R13: 00007f73475a6038 R14: 00007f73475a5fa0 R15: 00007ffc875a2998 [ 1880.698343][T18078] [ 1884.411189][T18087] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3091'. [ 1884.830249][ T37] audit: type=1326 audit(1762256741.527:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18085 comm="syz.4.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23b54f6c9 code=0x7ffc0000 [ 1884.830303][ T37] audit: type=1326 audit(1762256741.547:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18085 comm="syz.4.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23b54f6c9 code=0x7ffc0000 [ 1885.232316][T18100] FAULT_INJECTION: forcing a failure. [ 1885.232316][T18100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1885.232348][T18100] CPU: 0 UID: 0 PID: 18100 Comm: syz.3.3095 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1885.232370][T18100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1885.232382][T18100] Call Trace: [ 1885.232391][T18100] [ 1885.232399][T18100] dump_stack_lvl+0x189/0x250 [ 1885.232431][T18100] ? __pfx____ratelimit+0x10/0x10 [ 1885.232455][T18100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1885.232482][T18100] ? __pfx__printk+0x10/0x10 [ 1885.232505][T18100] ? __might_fault+0xb0/0x130 [ 1885.232540][T18100] should_fail_ex+0x46c/0x600 [ 1885.232571][T18100] _copy_from_iter+0x1de/0x1790 [ 1885.232603][T18100] ? kmalloc_reserve+0xbd/0x290 [ 1885.232623][T18100] ? rcu_is_watching+0x15/0xb0 [ 1885.232643][T18100] ? kmalloc_reserve+0xbd/0x290 [ 1885.232661][T18100] ? __alloc_skb+0x112/0x2d0 [ 1885.232680][T18100] ? __pfx__copy_from_iter+0x10/0x10 [ 1885.232710][T18100] ? __build_skb_around+0x262/0x3f0 [ 1885.232733][T18100] ? netlink_sendmsg+0x642/0xb30 [ 1885.232752][T18100] ? skb_put+0x11b/0x210 [ 1885.232776][T18100] netlink_sendmsg+0x6b2/0xb30 [ 1885.232795][T18100] ? is_bpf_text_address+0x26/0x2b0 [ 1885.232831][T18100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1885.232860][T18100] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1885.232884][T18100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1885.232906][T18100] __sock_sendmsg+0x21c/0x270 [ 1885.232935][T18100] ____sys_sendmsg+0x508/0x820 [ 1885.232963][T18100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1885.232995][T18100] ? import_iovec+0x74/0xa0 [ 1885.233048][T18100] ___sys_sendmsg+0x21f/0x2a0 [ 1885.233073][T18100] ? __pfx____sys_sendmsg+0x10/0x10 [ 1885.233132][T18100] ? __fget_files+0x2a/0x420 [ 1885.233156][T18100] ? __fget_files+0x3a6/0x420 [ 1885.233190][T18100] __x64_sys_sendmsg+0x1a1/0x260 [ 1885.233216][T18100] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1885.233248][T18100] ? __pfx_ksys_write+0x10/0x10 [ 1885.233275][T18100] ? do_syscall_64+0xbe/0xfa0 [ 1885.233303][T18100] do_syscall_64+0xfa/0xfa0 [ 1885.233325][T18100] ? lockdep_hardirqs_on+0x9c/0x150 [ 1885.233348][T18100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1885.233368][T18100] ? clear_bhb_loop+0x60/0xb0 [ 1885.233391][T18100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1885.233410][T18100] RIP: 0033:0x7faa11bff6c9 [ 1885.233428][T18100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1885.233444][T18100] RSP: 002b:00007faa0fe5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1885.233465][T18100] RAX: ffffffffffffffda RBX: 00007faa11e55fa0 RCX: 00007faa11bff6c9 [ 1885.233480][T18100] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000004 [ 1885.233493][T18100] RBP: 00007faa0fe5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1885.233506][T18100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1885.233518][T18100] R13: 00007faa11e56038 R14: 00007faa11e55fa0 R15: 00007fffd1539358 [ 1885.233551][T18100] [ 1885.510271][ T5953] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1885.592530][T18103] /dev/nullb0: Can't open blockdev [ 1885.700232][ T5953] usb 3-1: device descriptor read/64, error -71 [ 1885.714468][T18110] unsupported nla_type 52263 [ 1885.940259][ T5953] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1885.969274][T18120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1886.070288][ T5953] usb 3-1: device descriptor read/64, error -71 [ 1886.180670][ T5953] usb usb3-port1: attempt power cycle [ 1886.240256][T18000] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1886.392603][T18000] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1886.392637][T18000] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1886.392664][T18000] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1886.395516][T18000] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1886.395545][T18000] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.395567][T18000] usb 10-1: Product: syz [ 1886.395582][T18000] usb 10-1: Manufacturer: syz [ 1886.395597][T18000] usb 10-1: SerialNumber: syz [ 1886.409485][T18000] usb 10-1: config 0 descriptor?? [ 1886.420839][T18119] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1886.421152][T18119] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1886.433174][T18000] usb 10-1: ucan: probing device on interface #0 [ 1886.550395][ T5953] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1886.570903][ T5953] usb 3-1: device descriptor read/8, error -71 [ 1886.647919][T18000] usb 10-1: ucan: could not read protocol version, ret=-71 [ 1886.647946][T18000] usb 10-1: ucan: probe failed; try to update the device firmware [ 1886.718807][T18000] usb 10-1: USB disconnect, device number 40 [ 1886.840244][ T5953] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1886.861049][ T5953] usb 3-1: device descriptor read/8, error -71 [ 1886.970573][ T5953] usb usb3-port1: unable to enumerate USB device [ 1887.850316][ T37] audit: type=1326 audit(1762256744.137:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18154 comm="syz.4.3117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe23b54f6c9 code=0x0 [ 1888.205137][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3128'. [ 1888.890262][ T5872] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1889.054539][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 1889.064831][ T5872] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1889.064889][ T5872] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1889.064916][ T5872] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1889.064944][ T5872] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1889.069750][ T5872] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1889.069776][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.069798][ T5872] usb 3-1: Product: syz [ 1889.069812][ T5872] usb 3-1: Manufacturer: syz [ 1889.069828][ T5872] usb 3-1: SerialNumber: syz [ 1889.171097][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1889.235232][ T5872] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input20 [ 1889.324389][ T5872] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1889.324411][ T5872] (id 0x00) [ 1889.430217][ T5872] rc_core: IR keymap rc-imon-pad not found [ 1889.430237][ T5872] Registered IR keymap rc-empty [ 1889.430322][ T5872] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1889.430341][ T5872] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1889.542034][ T5872] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1889.550058][ T5872] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input21 [ 1889.571410][ T5872] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:30> initialized [ 1890.102268][T11616] usb 3-1: USB disconnect, device number 30 [ 1890.574372][ T5872] hid (null): global environment stack underflow [ 1890.643530][ T5872] hid-generic 0401:4680000:1490.0008: unknown main item tag 0x3 [ 1890.643663][ T5872] hid-generic 0401:4680000:1490.0008: global environment stack underflow [ 1890.643679][ T5872] hid-generic 0401:4680000:1490.0008: item 0 4 1 11 parsing failed [ 1890.646952][ T5872] hid-generic 0401:4680000:1490.0008: probe with driver hid-generic failed with error -22 [ 1890.922900][ C0] vkms_vblank_simulate: vblank timer overrun [ 1891.694705][ C0] vkms_vblank_simulate: vblank timer overrun [ 1891.847005][ C0] vkms_vblank_simulate: vblank timer overrun [ 1892.058515][ C0] vkms_vblank_simulate: vblank timer overrun [ 1892.257987][T14379] Bluetooth: hci1: Invalid handle: 0x30c9 > 0x0eff [ 1892.974959][ C0] vkms_vblank_simulate: vblank timer overrun [ 1893.349212][ C0] vkms_vblank_simulate: vblank timer overrun [ 1893.678222][ T9728] Bluetooth: hci4: Invalid handle: 0x30c9 > 0x0eff [ 1893.682363][T18291] FAULT_INJECTION: forcing a failure. [ 1893.682363][T18291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1893.682394][T18291] CPU: 1 UID: 0 PID: 18291 Comm: syz.3.3169 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1893.682417][T18291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1893.682429][T18291] Call Trace: [ 1893.682437][T18291] [ 1893.682446][T18291] dump_stack_lvl+0x189/0x250 [ 1893.682478][T18291] ? __pfx____ratelimit+0x10/0x10 [ 1893.682502][T18291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1893.682528][T18291] ? __pfx__printk+0x10/0x10 [ 1893.682569][T18291] should_fail_ex+0x46c/0x600 [ 1893.682601][T18291] _copy_from_user+0x2d/0xb0 [ 1893.682623][T18291] alg_setkey+0xb8/0x190 [ 1893.682650][T18291] alg_setsockopt+0x3da/0x4a0 [ 1893.682674][T18291] ? __pfx_alg_setsockopt+0x10/0x10 [ 1893.682699][T18291] do_sock_setsockopt+0x17c/0x1b0 [ 1893.682727][T18291] __x64_sys_setsockopt+0x145/0x1b0 [ 1893.682755][T18291] do_syscall_64+0xfa/0xfa0 [ 1893.682777][T18291] ? lockdep_hardirqs_on+0x9c/0x150 [ 1893.682801][T18291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.682820][T18291] ? clear_bhb_loop+0x60/0xb0 [ 1893.682843][T18291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.682862][T18291] RIP: 0033:0x7faa11bff6c9 [ 1893.682880][T18291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1893.682896][T18291] RSP: 002b:00007faa0fe5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1893.682917][T18291] RAX: ffffffffffffffda RBX: 00007faa11e55fa0 RCX: 00007faa11bff6c9 [ 1893.682931][T18291] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 1893.682943][T18291] RBP: 00007faa0fe5e090 R08: 0000000000000020 R09: 0000000000000000 [ 1893.682956][T18291] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 1893.682969][T18291] R13: 00007faa11e56038 R14: 00007faa11e55fa0 R15: 00007fffd1539358 [ 1893.683003][T18291] [ 1893.757258][ C0] vkms_vblank_simulate: vblank timer overrun [ 1894.480894][ C0] vkms_vblank_simulate: vblank timer overrun [ 1894.643028][ C0] vkms_vblank_simulate: vblank timer overrun [ 1894.942072][T18313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3177'. [ 1898.520448][T18000] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1898.672181][T18000] usb 5-1: Using ep0 maxpacket: 32 [ 1899.034180][T18352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1899.034832][T18352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1899.066562][T18000] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1899.069149][T18000] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1899.069186][T18000] usb 5-1: can't read configurations, error -71 [ 1899.560256][ T1894] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1899.690200][ T1894] usb 1-1: device descriptor read/64, error -71 [ 1899.950273][ T1894] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1900.060742][T11616] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1900.090254][ T1894] usb 1-1: device descriptor read/64, error -71 [ 1900.200532][ T1894] usb usb1-port1: attempt power cycle [ 1900.220276][T11616] usb 3-1: Using ep0 maxpacket: 32 [ 1900.224266][T11616] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1900.249216][T11616] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1900.249246][T11616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.249267][T11616] usb 3-1: Product: syz [ 1900.249282][T11616] usb 3-1: Manufacturer: syz [ 1900.249291][T11616] usb 3-1: SerialNumber: syz [ 1900.284910][T11616] usb 3-1: config 0 descriptor?? [ 1900.560333][ T1894] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1900.585480][ T1894] usb 1-1: device descriptor read/8, error -71 [ 1900.646127][T18374] kvm_intel: kvm [18373]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x10000002 [ 1900.791864][T11616] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 1900.791909][T11616] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1900.820236][ T1894] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1900.824449][T11616] usb 3-1: USB disconnect, device number 31 [ 1900.851418][ T1894] usb 1-1: device descriptor read/8, error -71 [ 1900.962207][ T1894] usb usb1-port1: unable to enumerate USB device [ 1901.042967][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3221'. [ 1901.043175][T18422] FAULT_INJECTION: forcing a failure. [ 1901.043175][T18422] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1901.043205][T18422] CPU: 0 UID: 0 PID: 18422 Comm: syz.3.3221 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1901.043227][T18422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1901.043239][T18422] Call Trace: [ 1901.043247][T18422] [ 1901.043255][T18422] dump_stack_lvl+0x189/0x250 [ 1901.043285][T18422] ? __pfx____ratelimit+0x10/0x10 [ 1901.043309][T18422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1901.043336][T18422] ? __pfx__printk+0x10/0x10 [ 1901.043361][T18422] ? fs_reclaim_acquire+0x7d/0x100 [ 1901.043394][T18422] should_fail_ex+0x46c/0x600 [ 1901.043422][T18422] prepare_alloc_pages+0x213/0x670 [ 1901.043444][T18422] __alloc_frozen_pages_noprof+0x123/0x370 [ 1901.043462][T18422] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1901.043483][T18422] ? policy_nodemask+0x27c/0x720 [ 1901.043498][T18422] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1901.043515][T18422] alloc_pages_mpol+0xd1/0x380 [ 1901.043532][T18422] vma_alloc_folio_noprof+0xe4/0x280 [ 1901.043547][T18422] ? rt_spin_lock+0x1c1/0x3e0 [ 1901.043559][T18422] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1901.043581][T18422] folio_prealloc+0x30/0x180 [ 1901.043598][T18422] do_wp_page+0x11f4/0x4930 [ 1901.043621][T18422] ? preempt_count_add+0x91/0x1a0 [ 1901.043633][T18422] ? __pfx_do_wp_page+0x10/0x10 [ 1901.043645][T18422] ? rt_spin_lock+0x2ae/0x3e0 [ 1901.043657][T18422] ? __pfx_rt_spin_lock+0x10/0x10 [ 1901.043671][T18422] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1901.043687][T18422] handle_mm_fault+0x97c/0x3400 [ 1901.043700][T18422] ? reacquire_held_locks+0x127/0x1d0 [ 1901.043727][T18422] ? handle_mm_fault+0xdb/0x3400 [ 1901.043745][T18422] ? __pfx_handle_mm_fault+0x10/0x10 [ 1901.043758][T18422] ? lock_vma_under_rcu+0x3d2/0x450 [ 1901.043784][T18422] ? do_user_addr_fault+0x1a8/0x1380 [ 1901.043799][T18422] do_user_addr_fault+0xa7c/0x1380 [ 1901.043815][T18422] ? rcu_is_watching+0x15/0xb0 [ 1901.043825][T18422] ? trace_page_fault_user+0x84/0x1e0 [ 1901.043839][T18422] exc_page_fault+0x82/0x100 [ 1901.043855][T18422] asm_exc_page_fault+0x26/0x30 [ 1901.043865][T18422] RIP: 0033:0x7faa11bb90d5 [ 1901.043875][T18422] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b [ 1901.043885][T18422] RSP: 002b:00007faa0fe5cde0 EFLAGS: 00010293 [ 1901.043895][T18422] RAX: 0000000000000008 RBX: 00007faa12987d60 RCX: 0000000000000000 [ 1901.043902][T18422] RDX: 0000000000000000 RSI: 00007faa11cbfb70 RDI: 00007faa12987d60 [ 1901.043910][T18422] RBP: 00007faa0fe5cf00 R08: 0000000000000000 R09: 0000000000000005 [ 1901.043916][T18422] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faa11cbf740 [ 1901.043923][T18422] R13: 0000000000000013 R14: 00007faa11e27460 R15: 0000000000000000 [ 1901.043941][T18422] [ 1901.044141][T18422] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1901.524832][T18428] tipc: Failed to remove unknown binding: 66,1,1/0:731046022/731046024 [ 1901.669545][T18431] tipc: Failed to remove unknown binding: 66,1,1/0:731046022/731046024 [ 1901.669584][T18431] tipc: Failed to remove unknown binding: 66,1,1/0:731046022/731046024 [ 1902.296729][ T1894] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1902.511535][ T1894] usb 5-1: Using ep0 maxpacket: 16 [ 1902.610292][ T1894] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1902.610320][ T1894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.610339][ T1894] usb 5-1: Product: syz [ 1902.610353][ T1894] usb 5-1: Manufacturer: syz [ 1902.610367][ T1894] usb 5-1: SerialNumber: syz [ 1902.677757][ T1894] usb 5-1: config 0 descriptor?? [ 1902.690868][ T1894] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 1903.192782][T18456] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1903.194019][T18456] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1903.520250][ T5872] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1903.672537][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 1903.675379][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1903.679574][ T5872] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1903.679603][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.679625][ T5872] usb 3-1: Product: syz [ 1903.679640][ T5872] usb 3-1: Manufacturer: syz [ 1903.679656][ T5872] usb 3-1: SerialNumber: syz [ 1903.693070][ T5872] usb 3-1: config 0 descriptor?? [ 1904.029946][T14379] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1904.056120][T14379] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1904.057679][T14379] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1904.077145][T14379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1904.078048][T14379] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1904.191339][T18472] lo speed is unknown, defaulting to 1000 [ 1904.240440][T18000] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1904.293974][T18481] FAULT_INJECTION: forcing a failure. [ 1904.293974][T18481] name failslab, interval 1, probability 0, space 0, times 0 [ 1904.294692][T18481] CPU: 0 UID: 0 PID: 18481 Comm: syz.3.3243 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1904.294722][T18481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1904.294734][T18481] Call Trace: [ 1904.294743][T18481] [ 1904.294752][T18481] dump_stack_lvl+0x189/0x250 [ 1904.294783][T18481] ? __pfx____ratelimit+0x10/0x10 [ 1904.294810][T18481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1904.294836][T18481] ? __pfx__printk+0x10/0x10 [ 1904.294865][T18481] ? __pfx___might_resched+0x10/0x10 [ 1904.294885][T18481] ? fs_reclaim_acquire+0x7d/0x100 [ 1904.294915][T18481] should_fail_ex+0x46c/0x600 [ 1904.294945][T18481] ? __alloc_skb+0x112/0x2d0 [ 1904.294964][T18481] should_failslab+0xa8/0x100 [ 1904.294990][T18481] ? __alloc_skb+0x112/0x2d0 [ 1904.295006][T18481] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 1904.295038][T18481] __alloc_skb+0x112/0x2d0 [ 1904.295062][T18481] alloc_skb_with_frags+0xca/0x890 [ 1904.295092][T18481] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 1904.295122][T18481] sock_alloc_send_pskb+0x859/0x990 [ 1904.295164][T18481] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1904.295184][T18481] ? rcu_is_watching+0x15/0xb0 [ 1904.295204][T18481] ? rcu_read_unlock_special+0x35b/0x470 [ 1904.295238][T18481] __ip_append_data+0x2ce8/0x40c0 [ 1904.295285][T18481] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1904.295333][T18481] ? __pfx___ip_append_data+0x10/0x10 [ 1904.295354][T18481] ? ipv4_mtu+0x53b/0x650 [ 1904.295381][T18481] ? ip_setup_cork+0x577/0x9a0 [ 1904.295406][T18481] ip_make_skb+0x1e4/0x400 [ 1904.295436][T18481] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1904.295459][T18481] ? __pfx_ip_make_skb+0x10/0x10 [ 1904.295479][T18481] ? xfrm_lookup_with_ifid+0x1553/0x1a90 [ 1904.295535][T18481] udp_sendmsg+0x1925/0x2170 [ 1904.295577][T18481] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1904.295602][T18481] ? __pfx_udp_sendmsg+0x10/0x10 [ 1904.295624][T18481] ? do_raw_spin_lock+0x121/0x290 [ 1904.295662][T18481] ? __lock_acquire+0xab9/0xd20 [ 1904.295728][T18481] udpv6_sendmsg+0xc1c/0x2510 [ 1904.295770][T18481] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1904.295801][T18481] ? smack_socket_sendmsg+0x1a7/0x520 [ 1904.295837][T18481] ? __might_fault+0xb0/0x130 [ 1904.295863][T18481] ? _parse_integer_limit+0x1ae/0x1f0 [ 1904.295898][T18481] ? inet_send_prepare+0x5c/0x270 [ 1904.295927][T18481] ? inet6_sendmsg+0xe4/0x120 [ 1904.295954][T18481] __sock_sendmsg+0xe5/0x270 [ 1904.295984][T18481] sock_write_iter+0x27f/0x370 [ 1904.296011][T18481] ? __pfx_sock_write_iter+0x10/0x10 [ 1904.296056][T18481] vfs_write+0x5d5/0xb40 [ 1904.296084][T18481] ? __pfx_sock_write_iter+0x10/0x10 [ 1904.296108][T18481] ? __pfx_vfs_write+0x10/0x10 [ 1904.296142][T18481] ? __fget_files+0x2a/0x420 [ 1904.296177][T18481] ksys_write+0x14b/0x260 [ 1904.296200][T18481] ? __pfx_ksys_write+0x10/0x10 [ 1904.296225][T18481] ? do_syscall_64+0xbe/0xfa0 [ 1904.296248][T18481] do_syscall_64+0xfa/0xfa0 [ 1904.296268][T18481] ? lockdep_hardirqs_on+0x9c/0x150 [ 1904.296289][T18481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.296308][T18481] ? clear_bhb_loop+0x60/0xb0 [ 1904.296331][T18481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.296349][T18481] RIP: 0033:0x7faa11bff6c9 [ 1904.296367][T18481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1904.296382][T18481] RSP: 002b:00007faa0fe5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1904.296402][T18481] RAX: ffffffffffffffda RBX: 00007faa11e55fa0 RCX: 00007faa11bff6c9 [ 1904.296417][T18481] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000003 [ 1904.296429][T18481] RBP: 00007faa0fe5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1904.296442][T18481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1904.296453][T18481] R13: 00007faa11e56038 R14: 00007faa11e55fa0 R15: 00007fffd1539358 [ 1904.296487][T18481] [ 1904.370302][T18000] usb 1-1: device descriptor read/64, error -71 [ 1904.508936][T16163] usb 5-1: USB disconnect, device number 53 [ 1904.637487][ T5872] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 1904.637531][ T5872] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1904.691558][ T5872] usb 3-1: USB disconnect, device number 32 [ 1904.850216][T18000] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1905.006276][T18472] chnl_net:caif_netlink_parms(): no params data found [ 1905.030214][T18000] usb 1-1: device descriptor read/64, error -71 [ 1905.150558][T18000] usb usb1-port1: attempt power cycle [ 1905.410248][ T5893] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1905.443016][T18472] bridge0: port 1(bridge_slave_0) entered blocking state [ 1905.443225][T18472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1905.443453][T18472] bridge_slave_0: entered allmulticast mode [ 1905.446241][T18472] bridge_slave_0: entered promiscuous mode [ 1905.449778][T18472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1905.449981][T18472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1905.490325][T18472] bridge_slave_1: entered allmulticast mode [ 1905.493188][T18472] bridge_slave_1: entered promiscuous mode [ 1905.500269][T18000] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1905.520249][ T5872] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1905.530934][T18000] usb 1-1: device descriptor read/8, error -71 [ 1905.564146][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1905.565405][ T5893] usb 5-1: config 14 has an invalid interface number: 145 but max is 0 [ 1905.565429][ T5893] usb 5-1: config 14 has no interface number 0 [ 1905.565480][ T5893] usb 5-1: config 14 interface 145 altsetting 26 has a duplicate endpoint with address 0x8A, skipping [ 1905.565507][ T5893] usb 5-1: config 14 interface 145 has no altsetting 0 [ 1905.567966][ T5893] usb 5-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=84.40 [ 1905.567996][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.568017][ T5893] usb 5-1: Product: syz [ 1905.568034][ T5893] usb 5-1: Manufacturer: syz [ 1905.568049][ T5893] usb 5-1: SerialNumber: syz [ 1905.694436][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1905.694474][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1905.697178][ T5872] usb 3-1: New USB device found, idVendor=1a34, idProduct=6f05, bcdDevice=8e.7b [ 1905.697258][ T5872] usb 3-1: New USB device strings: Mfr=176, Product=0, SerialNumber=0 [ 1905.697281][ T5872] usb 3-1: Manufacturer: syz [ 1905.761657][ T5872] usb 3-1: config 0 descriptor?? [ 1905.772638][T18000] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1905.809109][T18000] usb 1-1: device descriptor read/8, error -71 [ 1905.891233][ T5893] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 1905.894281][ T5893] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 1905.894430][ T5893] pac7311 5-1:14.145: probe with driver pac7311 failed with error -71 [ 1905.917962][T18000] usb usb1-port1: unable to enumerate USB device [ 1905.937193][T18472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1905.956504][ T5893] usb 5-1: USB disconnect, device number 54 [ 1906.032629][T18510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1906.035423][T18472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1906.039340][T18510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1906.140512][T14379] Bluetooth: hci2: command tx timeout [ 1906.188868][ T5872] usbhid 3-1:0.0: can't add hid device: -71 [ 1906.188994][ T5872] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1906.225277][ T5872] usb 3-1: USB disconnect, device number 33 [ 1906.487637][T18472] team0: Port device team_slave_0 added [ 1906.491904][T18472] team0: Port device team_slave_1 added [ 1906.584573][T18550] FAULT_INJECTION: forcing a failure. [ 1906.584573][T18550] name failslab, interval 1, probability 0, space 0, times 0 [ 1906.584633][T18550] CPU: 1 UID: 0 PID: 18550 Comm: syz.3.3266 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1906.584656][T18550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1906.584669][T18550] Call Trace: [ 1906.584677][T18550] [ 1906.584687][T18550] dump_stack_lvl+0x189/0x250 [ 1906.584718][T18550] ? lockdep_hardirqs_on+0x9c/0x150 [ 1906.584744][T18550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1906.584771][T18550] ? __pfx__printk+0x10/0x10 [ 1906.584807][T18550] should_fail_ex+0x46c/0x600 [ 1906.584837][T18550] ? preload_this_cpu_lock+0x49/0xc0 [ 1906.584864][T18550] should_failslab+0xa8/0x100 [ 1906.584891][T18550] ? preload_this_cpu_lock+0x49/0xc0 [ 1906.584916][T18550] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 1906.584941][T18550] ? alloc_vmap_area+0x271/0x14c0 [ 1906.584969][T18550] ? kmem_cache_alloc_node_noprof+0x291/0x6e0 [ 1906.584991][T18550] ? alloc_vmap_area+0x271/0x14c0 [ 1906.585018][T18550] preload_this_cpu_lock+0x49/0xc0 [ 1906.585047][T18550] alloc_vmap_area+0x41c/0x14c0 [ 1906.585087][T18550] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1906.585109][T18550] ? __kasan_kmalloc+0x93/0xb0 [ 1906.585135][T18550] ? __kmalloc_cache_node_noprof+0x2a9/0x700 [ 1906.585161][T18550] ? __get_vm_area_node+0x172/0x350 [ 1906.585183][T18550] ? bpf_prog_alloc_no_stats+0x4a/0x530 [ 1906.585211][T18550] __get_vm_area_node+0x227/0x350 [ 1906.585242][T18550] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 1906.585273][T18550] ? bpf_prog_alloc_no_stats+0x4a/0x530 [ 1906.585329][T18550] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1906.585352][T18550] ? preempt_schedule_irq+0xde/0x150 [ 1906.585376][T18550] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1906.585410][T18550] ? bpf_prog_alloc_no_stats+0x4a/0x530 [ 1906.585433][T18550] __vmalloc_noprof+0xb1/0xf0 [ 1906.585457][T18550] ? bpf_prog_alloc_no_stats+0x4a/0x530 [ 1906.585486][T18550] bpf_prog_alloc_no_stats+0x4a/0x530 [ 1906.585516][T18550] bpf_prog_alloc+0x3c/0x1a0 [ 1906.585544][T18550] bpf_prog_create_from_user+0xa7/0x440 [ 1906.585571][T18550] ? __pfx_seccomp_check_filter+0x10/0x10 [ 1906.585597][T18550] do_seccomp+0x788/0xce0 [ 1906.585620][T18550] ? __pfx___schedule+0x10/0x10 [ 1906.585643][T18550] ? __pfx_do_seccomp+0x10/0x10 [ 1906.585663][T18550] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 1906.585686][T18550] ? ksys_write+0x230/0x260 [ 1906.585720][T18550] ? do_syscall_64+0xbe/0xfa0 [ 1906.585748][T18550] do_syscall_64+0xfa/0xfa0 [ 1906.585773][T18550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.585792][T18550] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1906.585812][T18550] ? clear_bhb_loop+0x60/0xb0 [ 1906.585835][T18550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.585855][T18550] RIP: 0033:0x7faa11bff6c9 [ 1906.585873][T18550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1906.585889][T18550] RSP: 002b:00007faa0fe1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1906.585910][T18550] RAX: ffffffffffffffda RBX: 00007faa11e56180 RCX: 00007faa11bff6c9 [ 1906.585925][T18550] RDX: 0000200000000240 RSI: 0000000000000008 RDI: 0000000000000001 [ 1906.585939][T18550] RBP: 00007faa0fe1c090 R08: 0000000000000000 R09: 0000000000000000 [ 1906.585952][T18550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1906.585964][T18550] R13: 00007faa11e56218 R14: 00007faa11e56180 R15: 00007fffd1539358 [ 1906.585998][T18550] [ 1906.812506][ T37] audit: type=1326 audit(1762256763.317:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18541 comm="syz.3.3266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=0 compat=0 ip=0x7faa11bfe0dc code=0x0 [ 1907.530551][ T5872] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1907.680346][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 1907.682357][ T5872] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 1907.682383][ T5872] usb 3-1: config 0 has no interface number 0 [ 1907.682432][ T5872] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1907.682455][ T5872] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1907.682481][ T5872] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1907.682508][ T5872] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1907.682532][ T5872] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1907.682558][ T5872] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1907.682581][ T5872] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1907.682606][ T5872] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 24933, setting to 64 [ 1907.682633][ T5872] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1907.686136][ T5872] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1907.686173][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.686194][ T5872] usb 3-1: Product: syz [ 1907.686210][ T5872] usb 3-1: Manufacturer: syz [ 1907.686226][ T5872] usb 3-1: SerialNumber: syz [ 1907.703582][ T5872] usb 3-1: config 0 descriptor?? [ 1907.704462][T18546] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1907.722430][ T5872] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1907.722448][ T5872] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 1907.904009][T18472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1907.904024][T18472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1907.904049][T18472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1907.922482][T18472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1907.922497][T18472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1907.922522][T18472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1908.218354][T18472] hsr_slave_0: entered promiscuous mode [ 1908.219257][T18472] hsr_slave_1: entered promiscuous mode [ 1908.219918][T18472] debugfs: 'hsr0' already exists in 'hsr' [ 1908.219933][T18472] Cannot create hsr debugfs directory [ 1908.230883][T14379] Bluetooth: hci2: command tx timeout [ 1908.908955][T18582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1908.964773][T18582] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1909.300327][ T5872] usb 3-1: USB disconnect, device number 34 [ 1910.305129][T14379] Bluetooth: hci2: command tx timeout [ 1910.343654][T18596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3285'. [ 1910.821057][T18598] nbd0: detected capacity change from 0 to 8 [ 1910.855829][T18603] lo speed is unknown, defaulting to 1000 [ 1910.899738][T18610] block nbd0: shutting down sockets [ 1910.917830][ C0] blk_print_req_error: 5 callbacks suppressed [ 1910.917852][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1910.917882][ C0] buffer_io_error: 5 callbacks suppressed [ 1910.917905][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1910.967243][ T59] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1910.967278][ T59] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1910.973441][T18340] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1910.973470][T18340] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1910.973924][T18340] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1910.973947][T18340] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1910.974207][T18340] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1910.974231][T18340] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1910.987201][ T5953] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1911.019170][T18340] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1911.019201][T18340] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1911.019394][T18340] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1911.019416][T18340] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1911.019566][T18340] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1911.019586][T18340] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1911.019679][T18340] ldm_validate_partition_table(): Disk read failed. [ 1911.019747][T18340] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1911.019769][T18340] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1911.029090][T18340] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1911.029119][T18340] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1911.036646][T18340] Dev nbd0: unable to read RDB block 0 [ 1911.037089][T18340] nbd0: unable to read partition table [ 1911.038557][T18340] nbd0: partition table beyond EOD, truncated [ 1911.087170][T18340] ldm_validate_partition_table(): Disk read failed. [ 1911.087730][T18340] Dev nbd0: unable to read RDB block 0 [ 1911.089638][T18340] nbd0: unable to read partition table [ 1911.089887][T18340] nbd0: partition table beyond EOD, truncated [ 1911.154597][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1911.154631][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1911.154669][ T5953] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1911.154692][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.177962][ T5953] usb 5-1: config 0 descriptor?? [ 1911.436575][T18597] mmap: syz.0.3286 (18597): VmData 26103808 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 1911.614394][ T5953] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 1912.216907][T18609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1912.217878][T18609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1912.221363][ T5953] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 1912.221415][ T5953] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 1912.231169][ T5953] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -71 [ 1912.236317][ T5953] usb 5-1: USB disconnect, device number 55 [ 1912.380793][T14379] Bluetooth: hci2: command tx timeout [ 1912.596642][T18649] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3307'. [ 1913.100296][ T1894] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1913.230236][ T1894] usb 5-1: device descriptor read/64, error -71 [ 1913.470378][ T1894] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1913.590361][T18673] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3315'. [ 1913.600330][ T1894] usb 5-1: device descriptor read/64, error -71 [ 1913.710605][ T1894] usb usb5-port1: attempt power cycle [ 1914.062439][ T1894] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1914.099056][ T1894] usb 5-1: device descriptor read/8, error -71 [ 1914.411849][ T1894] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1914.434564][ T1894] usb 5-1: device descriptor read/8, error -71 [ 1914.583893][ T1894] usb usb5-port1: unable to enumerate USB device [ 1915.090289][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.090353][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.396111][T18472] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1917.396835][T18716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1917.401241][T18716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1918.090779][ C1] vkms_vblank_simulate: vblank timer overrun [ 1918.194090][ C1] vkms_vblank_simulate: vblank timer overrun [ 1918.217489][T18472] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1918.290478][T18472] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1918.335024][T18472] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1918.370255][ T5953] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1918.592802][T18000] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1918.637773][T18728] FAULT_INJECTION: forcing a failure. [ 1918.637773][T18728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1918.637807][T18728] CPU: 0 UID: 0 PID: 18728 Comm: syz.0.3333 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1918.637830][T18728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1918.637842][T18728] Call Trace: [ 1918.637850][T18728] [ 1918.637859][T18728] dump_stack_lvl+0x189/0x250 [ 1918.637889][T18728] ? __pfx____ratelimit+0x10/0x10 [ 1918.637912][T18728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1918.637939][T18728] ? __pfx__printk+0x10/0x10 [ 1918.637979][T18728] should_fail_ex+0x46c/0x600 [ 1918.638009][T18728] _copy_to_user+0x31/0xb0 [ 1918.638033][T18728] simple_read_from_buffer+0xe1/0x170 [ 1918.638064][T18728] proc_fail_nth_read+0x1b6/0x220 [ 1918.638088][T18728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1918.638113][T18728] ? rw_verify_area+0x2ac/0x4e0 [ 1918.638135][T18728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1918.638157][T18728] vfs_read+0x206/0xa30 [ 1918.638189][T18728] ? __pfx_vfs_read+0x10/0x10 [ 1918.638208][T18728] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1918.638239][T18728] ? mutex_lock_nested+0x154/0x1d0 [ 1918.638258][T18728] ? fdget_pos+0x253/0x320 [ 1918.638293][T18728] ksys_read+0x14b/0x260 [ 1918.638331][T18728] ? __pfx_ksys_read+0x10/0x10 [ 1918.638357][T18728] ? do_syscall_64+0xbe/0xfa0 [ 1918.638387][T18728] do_syscall_64+0xfa/0xfa0 [ 1918.638411][T18728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.638430][T18728] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1918.638450][T18728] ? clear_bhb_loop+0x60/0xb0 [ 1918.638473][T18728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.638492][T18728] RIP: 0033:0x7fc5dc06e0dc [ 1918.638516][T18728] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1918.638532][T18728] RSP: 002b:00007fc5da2ad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1918.638553][T18728] RAX: ffffffffffffffda RBX: 00007fc5dc2c6090 RCX: 00007fc5dc06e0dc [ 1918.638567][T18728] RDX: 000000000000000f RSI: 00007fc5da2ad0a0 RDI: 0000000000000006 [ 1918.638580][T18728] RBP: 00007fc5da2ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1918.638592][T18728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1918.638604][T18728] R13: 00007fc5dc2c6128 R14: 00007fc5dc2c6090 R15: 00007ffca01ba318 [ 1918.638639][T18728] [ 1918.749879][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 1918.977540][ T5953] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1918.977595][ T5953] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1918.984784][ T5953] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1918.984821][ T5953] usb 4-1: can't read configurations, error -71 [ 1919.036877][T18000] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1919.036906][T18000] usb 3-1: config 0 has no interfaces? [ 1919.058186][T18000] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1919.058225][T18000] usb 3-1: New USB device strings: Mfr=1, Product=51, SerialNumber=161 [ 1919.058249][T18000] usb 3-1: Product: syz [ 1919.058265][T18000] usb 3-1: Manufacturer: syz [ 1919.058280][T18000] usb 3-1: SerialNumber: syz [ 1919.102957][T18000] usb 3-1: config 0 descriptor?? [ 1919.222384][T18472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1919.250606][T18472] 8021q: adding VLAN 0 to HW filter on device team0 [ 1919.257948][ T6995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1919.277479][ T6995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1919.296186][T17385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1919.296478][T17385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1919.330335][T16163] usb 3-1: USB disconnect, device number 35 [ 1919.401038][T18742] Falling back ldisc for ptm0. [ 1919.490270][ T5893] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1919.643502][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 1919.649694][ T5893] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1919.649724][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1919.649747][ T5893] usb 1-1: Product: syz [ 1919.649763][ T5893] usb 1-1: Manufacturer: syz [ 1919.649778][ T5893] usb 1-1: SerialNumber: syz [ 1919.672751][ T5893] usb 1-1: config 0 descriptor?? [ 1919.720343][ T5885] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1919.748854][T18472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1919.887333][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1919.887368][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1919.887391][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1919.887434][ T5885] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1919.887459][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1919.896240][T18472] veth0_vlan: entered promiscuous mode [ 1919.912082][ T5885] usb 5-1: config 0 descriptor?? [ 1919.963529][T18472] veth1_vlan: entered promiscuous mode [ 1920.027928][ T5893] usb 1-1: USB disconnect, device number 51 [ 1920.042661][T18472] veth0_macvtap: entered promiscuous mode [ 1920.048800][T18472] veth1_macvtap: entered promiscuous mode [ 1920.098081][T18472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1920.117376][T18472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1920.137675][T17385] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.139550][T17385] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.161870][T17385] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.161915][T17385] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.206488][T18747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1920.207092][T18747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1920.243295][T18747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1920.278851][T18747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1920.685542][ T5885] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1920.728364][ T5885] usb 5-1: USB disconnect, device number 60 [ 1920.824484][ T6995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1920.824503][ T6995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1920.899554][ C1] vkms_vblank_simulate: vblank timer overrun [ 1920.978612][T17385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1920.978659][T17385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1921.758557][ C1] vkms_vblank_simulate: vblank timer overrun [ 1921.802601][T18776] fido_id[18776]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1921.900539][T18781] FAULT_INJECTION: forcing a failure. [ 1921.900539][T18781] name failslab, interval 1, probability 0, space 0, times 0 [ 1921.900601][T18781] CPU: 1 UID: 0 PID: 18781 Comm: syz.0.3351 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1921.900624][T18781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1921.900637][T18781] Call Trace: [ 1921.900646][T18781] [ 1921.900655][T18781] dump_stack_lvl+0x189/0x250 [ 1921.900687][T18781] ? __pfx____ratelimit+0x10/0x10 [ 1921.900712][T18781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1921.900739][T18781] ? __pfx__printk+0x10/0x10 [ 1921.900766][T18781] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1921.900791][T18781] ? __pfx___might_resched+0x10/0x10 [ 1921.900817][T18781] should_fail_ex+0x46c/0x600 [ 1921.900849][T18781] should_failslab+0xa8/0x100 [ 1921.900877][T18781] __kmalloc_node_track_caller_noprof+0xcf/0x7e0 [ 1921.900903][T18781] ? dh_data_from_key+0x1aa/0x280 [ 1921.900934][T18781] kmemdup_noprof+0x2b/0x70 [ 1921.900958][T18781] dh_data_from_key+0x1aa/0x280 [ 1921.900993][T18781] __keyctl_dh_compute+0x295/0xca0 [ 1921.901020][T18781] ? finish_task_switch+0x18b/0x950 [ 1921.901053][T18781] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1921.901084][T18781] ? lockdep_hardirqs_on+0x9c/0x150 [ 1921.901116][T18781] ? rcu_is_watching+0x15/0xb0 [ 1921.901159][T18781] keyctl_dh_compute+0x109/0x160 [ 1921.901184][T18781] ? __pfx_preempt_schedule+0x10/0x10 [ 1921.901209][T18781] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1921.901234][T18781] ? __pfx___schedule+0x10/0x10 [ 1921.901272][T18781] __se_sys_keyctl+0x423/0x910 [ 1921.901296][T18781] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1921.901316][T18781] ? trace_irq_disable+0x37/0x110 [ 1921.901341][T18781] ? preempt_schedule_irq+0xde/0x150 [ 1921.901364][T18781] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1921.901386][T18781] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1921.901413][T18781] ? irqentry_exit+0x74/0x90 [ 1921.901442][T18781] ? lockdep_hardirqs_on+0x9c/0x150 [ 1921.901483][T18781] ? __x64_sys_keyctl+0x6a/0xc0 [ 1921.901505][T18781] ? __x64_sys_keyctl+0x20/0xc0 [ 1921.901528][T18781] do_syscall_64+0xfa/0xfa0 [ 1921.901554][T18781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1921.901572][T18781] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1921.901591][T18781] ? clear_bhb_loop+0x60/0xb0 [ 1921.901615][T18781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1921.901634][T18781] RIP: 0033:0x7fc5dc06f6c9 [ 1921.901652][T18781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1921.901669][T18781] RSP: 002b:00007fc5da28c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1921.901690][T18781] RAX: ffffffffffffffda RBX: 00007fc5dc2c6180 RCX: 00007fc5dc06f6c9 [ 1921.901705][T18781] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000017 [ 1921.901718][T18781] RBP: 00007fc5da28c090 R08: 0000000000000000 R09: 0000000000000000 [ 1921.901731][T18781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1921.901744][T18781] R13: 00007fc5dc2c6218 R14: 00007fc5dc2c6180 R15: 00007ffca01ba318 [ 1921.901779][T18781] [ 1922.620975][T18353] udevd[18353]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1922.640999][ C1] vkms_vblank_simulate: vblank timer overrun [ 1922.721951][T18786] tipc: Enabling of bearer rejected, failed to enable media [ 1922.962737][ C1] vkms_vblank_simulate: vblank timer overrun [ 1924.498047][T18818] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.3361'. [ 1925.674670][ T9728] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1925.718624][ T9728] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1925.727276][ T9728] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1925.734994][ T9728] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1925.737429][ T9728] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1925.755006][T18823] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1925.884413][T18829] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3364'. [ 1926.253741][T18821] lo speed is unknown, defaulting to 1000 [ 1926.310290][ T5893] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1926.531136][ T5893] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1926.531153][ T5893] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1926.531165][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1926.531195][ T5893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1926.531210][ T5893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1926.538396][ T5893] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1926.538425][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1926.538442][ T5893] usb 2-1: Product: syz [ 1926.538450][ T5893] usb 2-1: Manufacturer: syz [ 1926.643332][ T5893] cdc_wdm 2-1:1.0: skipping garbage [ 1926.643352][ T5893] cdc_wdm 2-1:1.0: skipping garbage [ 1926.699697][ T5893] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1926.699714][ T5893] cdc_wdm 2-1:1.0: Unknown control protocol [ 1926.732995][T18840] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3367'. [ 1926.733352][T18840] unsupported nlmsg_type 40 [ 1927.015962][ T5885] usb 2-1: USB disconnect, device number 31 [ 1927.914317][T14379] Bluetooth: hci6: command tx timeout [ 1928.427754][T18854] FAULT_INJECTION: forcing a failure. [ 1928.427754][T18854] name failslab, interval 1, probability 0, space 0, times 0 [ 1928.427776][T18854] CPU: 0 UID: 0 PID: 18854 Comm: syz.4.3371 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1928.427790][T18854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1928.427797][T18854] Call Trace: [ 1928.427802][T18854] [ 1928.427807][T18854] dump_stack_lvl+0x189/0x250 [ 1928.427827][T18854] ? __pfx____ratelimit+0x10/0x10 [ 1928.427841][T18854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1928.427857][T18854] ? __pfx__printk+0x10/0x10 [ 1928.427873][T18854] ? __pfx___might_resched+0x10/0x10 [ 1928.427884][T18854] ? fs_reclaim_acquire+0x7d/0x100 [ 1928.427902][T18854] should_fail_ex+0x46c/0x600 [ 1928.427919][T18854] ? getname_kernel+0x5a/0x2f0 [ 1928.427935][T18854] should_failslab+0xa8/0x100 [ 1928.427950][T18854] ? getname_kernel+0x5a/0x2f0 [ 1928.427964][T18854] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 1928.427983][T18854] getname_kernel+0x5a/0x2f0 [ 1928.428000][T18854] kern_path+0x1d/0x50 [ 1928.428010][T18854] bpf_uprobe_multi_link_attach+0x374/0xee0 [ 1928.428035][T18854] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 1928.428049][T18854] ? __fget_files+0x2a/0x420 [ 1928.428065][T18854] ? __fget_files+0x2a/0x420 [ 1928.428079][T18854] ? __fget_files+0x2a/0x420 [ 1928.428095][T18854] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 1928.428109][T18854] link_create+0x67c/0x850 [ 1928.428127][T18854] __sys_bpf+0x6be/0x860 [ 1928.428142][T18854] ? __pfx___sys_bpf+0x10/0x10 [ 1928.428155][T18854] ? bpf_trace_run2+0x322/0x4b0 [ 1928.428185][T18854] __x64_sys_bpf+0x7c/0x90 [ 1928.428198][T18854] do_syscall_64+0xfa/0xfa0 [ 1928.428212][T18854] ? lockdep_hardirqs_on+0x9c/0x150 [ 1928.428226][T18854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1928.428236][T18854] ? clear_bhb_loop+0x60/0xb0 [ 1928.428249][T18854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1928.428259][T18854] RIP: 0033:0x7fe23b54f6c9 [ 1928.428269][T18854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1928.428278][T18854] RSP: 002b:00007fe2397b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1928.428290][T18854] RAX: ffffffffffffffda RBX: 00007fe23b7a5fa0 RCX: 00007fe23b54f6c9 [ 1928.428298][T18854] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 000000000000001c [ 1928.428305][T18854] RBP: 00007fe2397b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1928.428312][T18854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1928.428318][T18854] R13: 00007fe23b7a6038 R14: 00007fe23b7a5fa0 R15: 00007ffdd8ed9ab8 [ 1928.428336][T18854] [ 1928.710326][ T1894] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1928.860729][ T1894] usb 1-1: Using ep0 maxpacket: 32 [ 1928.863123][ T1894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1928.863149][ T1894] usb 1-1: config 0 has no interfaces? [ 1928.863180][ T1894] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1928.863205][ T1894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.915051][ T1894] usb 1-1: config 0 descriptor?? [ 1929.980234][T14379] Bluetooth: hci6: command tx timeout [ 1931.061047][ T1894] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1931.500287][ T1894] usb 5-1: config 0 has an invalid interface number: 62 but max is 0 [ 1931.500316][ T1894] usb 5-1: config 0 has no interface number 0 [ 1931.525074][ T1894] usb 5-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=1b.48 [ 1931.525093][ T1894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.525104][ T1894] usb 5-1: Product: syz [ 1931.525112][ T1894] usb 5-1: Manufacturer: syz [ 1931.525120][ T1894] usb 5-1: SerialNumber: syz [ 1931.567977][ T1894] usb 5-1: config 0 descriptor?? [ 1931.583015][ T5953] usb 1-1: USB disconnect, device number 52 [ 1931.583809][ T1894] snd-usb-caiaq 5-1:0.62: can't set alt interface. [ 1931.583827][ T1894] usb 5-1: unable to init card! (ret=-5) [ 1931.584374][ T1894] snd-usb-caiaq 5-1:0.62: probe with driver snd-usb-caiaq failed with error -5 [ 1931.775606][ T1894] usb 5-1: USB disconnect, device number 61 [ 1931.959457][ T5953] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1932.065454][T14379] Bluetooth: hci6: command tx timeout [ 1932.143657][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.151926][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 1932.168697][ T5953] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1932.183805][ T5953] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1932.183836][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.183858][ T5953] usb 1-1: Product: syz [ 1932.183873][ T5953] usb 1-1: Manufacturer: syz [ 1932.183888][ T5953] usb 1-1: SerialNumber: syz [ 1932.192866][ T5953] usb 1-1: config 0 descriptor?? [ 1932.299054][T18879] netlink: 'syz.1.3381': attribute type 1 has an invalid length. [ 1932.714079][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1933.277706][ T5953] gs_usb 1-1:0.0: Couldn't send data format (err=-110) [ 1933.277752][ T5953] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -110 [ 1933.552610][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1934.792761][T14379] Bluetooth: hci6: command tx timeout [ 1935.270323][ T1894] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1935.706187][ T1894] usb 3-1: not running at top speed; connect to a high speed hub [ 1935.736151][ T1894] usb 3-1: config 1 interface 0 altsetting 29 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1935.736252][ T1894] usb 3-1: config 1 interface 0 altsetting 29 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1935.736319][ T1894] usb 3-1: config 1 interface 0 altsetting 29 endpoint 0x3 has invalid maxpacket 1056, setting to 64 [ 1935.736386][ T1894] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1936.480024][ T1894] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1936.480062][ T1894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.480209][ T5953] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1936.547932][ T1894] usb 3-1: can't set config #1, error -71 [ 1936.566136][ T1894] usb 3-1: USB disconnect, device number 36 [ 1936.632845][T18917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3389'. [ 1936.640261][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 1936.642543][ T5953] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1936.645478][ T5953] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1936.645505][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.645526][ T5953] usb 5-1: Product: syz [ 1936.645541][ T5953] usb 5-1: Manufacturer: syz [ 1936.645556][ T5953] usb 5-1: SerialNumber: syz [ 1936.651807][ T5953] usb 5-1: config 0 descriptor?? [ 1936.652799][T18912] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1936.686781][ T5953] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 1936.767722][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1936.988202][T18917] FAULT_INJECTION: forcing a failure. [ 1936.988202][T18917] name failslab, interval 1, probability 0, space 0, times 0 [ 1936.988351][T18917] CPU: 0 UID: 0 PID: 18917 Comm: syz.1.3389 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1936.988371][T18917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1936.988380][T18917] Call Trace: [ 1936.988388][T18917] [ 1936.988396][T18917] dump_stack_lvl+0x189/0x250 [ 1936.988424][T18917] ? __pfx____ratelimit+0x10/0x10 [ 1936.988451][T18917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1936.988476][T18917] ? __pfx__printk+0x10/0x10 [ 1936.988500][T18917] ? __pfx___might_resched+0x10/0x10 [ 1936.988518][T18917] ? fs_reclaim_acquire+0x7d/0x100 [ 1936.988549][T18917] should_fail_ex+0x46c/0x600 [ 1936.988581][T18917] should_failslab+0xa8/0x100 [ 1936.988609][T18917] __kmalloc_cache_noprof+0x6f/0x6c0 [ 1936.988635][T18917] ? ieee80211_start_roc_work+0x1a2/0x1100 [ 1936.988664][T18917] ieee80211_start_roc_work+0x1a2/0x1100 [ 1936.988686][T18917] ? __netdev_alloc_skb+0x386/0x5e0 [ 1936.988708][T18917] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 1936.988745][T18917] ? ieee80211_mgmt_tx+0x13f9/0x22e0 [ 1936.988777][T18917] ieee80211_mgmt_tx+0x1dce/0x22e0 [ 1936.988804][T18917] ? ieee80211_mgmt_tx+0xa20/0x22e0 [ 1936.988833][T18917] cfg80211_mlme_mgmt_tx+0x7bc/0x1420 [ 1936.988867][T18917] nl80211_tx_mgmt+0xa64/0xdf0 [ 1936.988899][T18917] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 1936.988948][T18917] ? nl80211_pre_doit+0x4f1/0x930 [ 1936.988975][T18917] genl_family_rcv_msg_doit+0x215/0x300 [ 1936.989006][T18917] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1936.989044][T18917] ? bpf_lsm_capable+0x9/0x20 [ 1936.989058][T18917] ? security_capable+0x7e/0x2e0 [ 1936.989084][T18917] genl_rcv_msg+0x60e/0x790 [ 1936.989114][T18917] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1936.989136][T18917] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1936.989154][T18917] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 1936.989174][T18917] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1936.989196][T18917] ? __lock_acquire+0xab9/0xd20 [ 1936.989224][T18917] netlink_rcv_skb+0x208/0x470 [ 1936.989241][T18917] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1936.989261][T18917] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1936.989289][T18917] ? netlink_deliver_tap+0x2e/0x1b0 [ 1936.989304][T18917] ? netlink_deliver_tap+0x2e/0x1b0 [ 1936.989324][T18917] genl_rcv+0x28/0x40 [ 1936.989342][T18917] netlink_unicast+0x846/0xa10 [ 1936.989372][T18917] ? __pfx_netlink_unicast+0x10/0x10 [ 1936.989396][T18917] ? netlink_sendmsg+0x642/0xb30 [ 1936.989411][T18917] ? skb_put+0x11b/0x210 [ 1936.989430][T18917] netlink_sendmsg+0x805/0xb30 [ 1936.989445][T18917] ? is_bpf_text_address+0x26/0x2b0 [ 1936.989477][T18917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1936.989507][T18917] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1936.989527][T18917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1936.989543][T18917] __sock_sendmsg+0x21c/0x270 [ 1936.989571][T18917] ____sys_sendmsg+0x508/0x820 [ 1936.989601][T18917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1936.989634][T18917] ? import_iovec+0x74/0xa0 [ 1936.989660][T18917] ___sys_sendmsg+0x21f/0x2a0 [ 1936.989683][T18917] ? __pfx____sys_sendmsg+0x10/0x10 [ 1936.989734][T18917] ? __fget_files+0x2a/0x420 [ 1936.989752][T18917] ? __fget_files+0x3a6/0x420 [ 1936.989787][T18917] __x64_sys_sendmsg+0x1a1/0x260 [ 1936.989806][T18917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1936.989831][T18917] ? __pfx_ksys_write+0x10/0x10 [ 1936.989851][T18917] ? do_syscall_64+0xbe/0xfa0 [ 1936.989873][T18917] do_syscall_64+0xfa/0xfa0 [ 1936.989890][T18917] ? lockdep_hardirqs_on+0x9c/0x150 [ 1936.989908][T18917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.989923][T18917] ? clear_bhb_loop+0x60/0xb0 [ 1936.989941][T18917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.989955][T18917] RIP: 0033:0x7fb95181f6c9 [ 1936.989970][T18917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1936.989983][T18917] RSP: 002b:00007fb94fa86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1936.990000][T18917] RAX: ffffffffffffffda RBX: 00007fb951a75fa0 RCX: 00007fb95181f6c9 [ 1936.990012][T18917] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1936.990023][T18917] RBP: 00007fb94fa86090 R08: 0000000000000000 R09: 0000000000000000 [ 1936.990033][T18917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1936.990043][T18917] R13: 00007fb951a76038 R14: 00007fb951a75fa0 R15: 00007ffde851bc38 [ 1936.990071][T18917] [ 1937.331180][T18821] chnl_net:caif_netlink_parms(): no params data found [ 1937.562582][T18926] binder: 18925:18926 ioctl c0306201 200000000040 returned -22 [ 1937.611529][T12812] usb 5-1: USB disconnect, device number 62 [ 1937.611713][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1937.883755][ T1894] usb 1-1: USB disconnect, device number 53 [ 1941.542983][T18949] kAFS: unable to lookup cell '\/' [ 1942.938134][T18821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1942.942088][T18821] bridge0: port 1(bridge_slave_0) entered disabled state [ 1942.942328][T18821] bridge_slave_0: entered allmulticast mode [ 1942.951099][T18821] bridge_slave_0: entered promiscuous mode [ 1942.957444][T18821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1942.958893][T18821] bridge0: port 2(bridge_slave_1) entered disabled state [ 1942.959079][T18821] bridge_slave_1: entered allmulticast mode [ 1942.963089][T18821] bridge_slave_1: entered promiscuous mode [ 1944.231291][ T58] bridge_slave_1: left allmulticast mode [ 1944.231319][ T58] bridge_slave_1: left promiscuous mode [ 1944.231565][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1944.321124][T18000] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1944.414424][ T58] bridge_slave_0: left allmulticast mode [ 1944.414519][ T58] bridge_slave_0: left promiscuous mode [ 1944.414688][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1944.434856][T18976] binder: 18974:18976 ioctl c0306201 2000000001c0 returned -14 [ 1944.435316][T18976] binder: 18974:18976 ioctl c0206416 200000000280 returned -22 [ 1944.672458][T18000] usb 3-1: not running at top speed; connect to a high speed hub [ 1944.704268][T18000] usb 3-1: config 1 interface 0 altsetting 29 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1944.704304][T18000] usb 3-1: config 1 interface 0 altsetting 29 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1944.704332][T18000] usb 3-1: config 1 interface 0 altsetting 29 endpoint 0x3 has invalid maxpacket 1056, setting to 64 [ 1944.704364][T18000] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1944.772967][T18000] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1944.773044][T18000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.773067][T18000] usb 3-1: Manufacturer: ї [ 1944.773083][T18000] usb 3-1: SerialNumber: ဉ [ 1944.836151][T18968] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1944.848024][T18968] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1944.848511][T18968] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1950.008792][T18000] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -32 [ 1950.079501][T16163] usb 3-1: USB disconnect, device number 37 [ 1951.370723][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1951.432178][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1951.452481][ T58] bond0 (unregistering): Released all slaves [ 1951.634103][T18821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1951.731377][T18821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1954.258434][ T37] audit: type=1326 audit(1762256810.977:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19047 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5dc06f6c9 code=0x7ffc0000 [ 1954.258572][ T37] audit: type=1326 audit(1762256810.977:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19047 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5dc06f6c9 code=0x7ffc0000 [ 1954.259220][ T37] audit: type=1326 audit(1762256810.977:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19047 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5dc06f6c9 code=0x7ffc0000 [ 1954.259346][ T37] audit: type=1326 audit(1762256810.977:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19047 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5dc06f6c9 code=0x7ffc0000 [ 1954.259485][ T37] audit: type=1326 audit(1762256810.977:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19047 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5dc06f6c9 code=0x7ffc0000 [ 1954.262963][ T37] audit: type=1326 audit(1762256810.987:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19047 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5dc06f6c9 code=0x7ffc0000 [ 1954.263341][ T37] audit: type=1326 audit(1762256810.987:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19047 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5dc06f6c9 code=0x7ffc0000 [ 1954.263589][ T37] audit: type=1326 audit(1762256810.987:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19047 comm="syz.0.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5dc06f6c9 code=0x7ffc0000 [ 1955.846476][T19056] FAULT_INJECTION: forcing a failure. [ 1955.846476][T19056] name failslab, interval 1, probability 0, space 0, times 0 [ 1955.846544][T19056] CPU: 0 UID: 0 PID: 19056 Comm: syz.0.3426 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1955.846566][T19056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1955.846579][T19056] Call Trace: [ 1955.846587][T19056] [ 1955.846596][T19056] dump_stack_lvl+0x189/0x250 [ 1955.846627][T19056] ? __pfx____ratelimit+0x10/0x10 [ 1955.846651][T19056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1955.846677][T19056] ? __pfx__printk+0x10/0x10 [ 1955.846705][T19056] ? __pfx___might_resched+0x10/0x10 [ 1955.846726][T19056] ? fs_reclaim_acquire+0x7d/0x100 [ 1955.846755][T19056] should_fail_ex+0x46c/0x600 [ 1955.846783][T19056] ? __alloc_skb+0x112/0x2d0 [ 1955.846802][T19056] should_failslab+0xa8/0x100 [ 1955.846830][T19056] ? __alloc_skb+0x112/0x2d0 [ 1955.846846][T19056] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 1955.846871][T19056] ? netlink_autobind+0xdb/0x300 [ 1955.846897][T19056] __alloc_skb+0x112/0x2d0 [ 1955.846920][T19056] netlink_sendmsg+0x5c6/0xb30 [ 1955.846950][T19056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1955.846979][T19056] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1955.847004][T19056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1955.847025][T19056] __sock_sendmsg+0x21c/0x270 [ 1955.847054][T19056] ____sys_sendmsg+0x508/0x820 [ 1955.847081][T19056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1955.847112][T19056] ? import_iovec+0x74/0xa0 [ 1955.847136][T19056] ___sys_sendmsg+0x21f/0x2a0 [ 1955.847160][T19056] ? __pfx____sys_sendmsg+0x10/0x10 [ 1955.847215][T19056] ? kvm_sched_clock_read+0x11/0x20 [ 1955.847275][T19056] ? __fget_files+0x2a/0x420 [ 1955.847298][T19056] ? __fget_files+0x3a6/0x420 [ 1955.847334][T19056] __x64_sys_sendmsg+0x1a1/0x260 [ 1955.847359][T19056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1955.847399][T19056] ? do_syscall_64+0xbe/0xfa0 [ 1955.847426][T19056] do_syscall_64+0xfa/0xfa0 [ 1955.847451][T19056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.847470][T19056] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1955.847488][T19056] ? clear_bhb_loop+0x60/0xb0 [ 1955.847512][T19056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.847530][T19056] RIP: 0033:0x7fc5dc06f6c9 [ 1955.847548][T19056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1955.847564][T19056] RSP: 002b:00007fc5da2ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1955.847585][T19056] RAX: ffffffffffffffda RBX: 00007fc5dc2c6090 RCX: 00007fc5dc06f6c9 [ 1955.847600][T19056] RDX: 0000000000008040 RSI: 0000200000000040 RDI: 0000000000000007 [ 1955.847613][T19056] RBP: 00007fc5da2ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1955.847626][T19056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1955.847639][T19056] R13: 00007fc5dc2c6128 R14: 00007fc5dc2c6090 R15: 00007ffca01ba318 [ 1955.847672][T19056] [ 1956.263921][T19064] 9pnet_fd: Insufficient options for proto=fd [ 1956.420263][T14779] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1956.438580][T18821] team0: Port device team_slave_0 added [ 1956.451382][T18821] team0: Port device team_slave_1 added [ 1959.822768][T14779] usb 2-1: unable to get BOS descriptor set [ 1959.824830][T14779] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1959.824875][T14779] usb 2-1: can't read configurations, error -71 [ 1960.344106][ T5885] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1961.763296][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1961.763332][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1961.763374][ T5885] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1961.763399][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.833156][ T5885] usb 3-1: config 0 descriptor?? [ 1962.197587][T18821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1962.197603][T18821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1962.197630][T18821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1962.202068][T18821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1962.202081][T18821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1962.202104][T18821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1962.505846][T19094] bridge0: port 3(batadv0) entered disabled state [ 1962.514345][T19094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1962.514645][T19094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1962.635846][T19123] bridge0: port 3(batadv0) entered disabled state [ 1962.842170][T19123] bridge_slave_0: left allmulticast mode [ 1962.842201][T19123] bridge_slave_0: left promiscuous mode [ 1962.843634][T19123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1962.914614][T19123] bridge_slave_1: left allmulticast mode [ 1962.914643][T19123] bridge_slave_1: left promiscuous mode [ 1962.914879][T19123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1963.681525][T19123] bond0: (slave bond_slave_0): Releasing backup interface [ 1963.801019][T19123] bond0: (slave bond_slave_1): Releasing backup interface [ 1968.192498][ T5885] usbhid 3-1:0.0: can't add hid device: -32 [ 1968.192631][ T5885] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1968.359365][T19123] team0: Port device team_slave_0 removed [ 1968.396778][T19143] netlink: 'syz.0.3447': attribute type 30 has an invalid length. [ 1968.396797][T19143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3447'. [ 1968.517020][T19123] team0: Port device team_slave_1 removed [ 1968.517675][T19123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1968.517692][T19123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1968.572368][T19123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1968.572396][T19123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1968.624783][T19123] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1968.668567][T19152] FAULT_INJECTION: forcing a failure. [ 1968.668567][T19152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1968.668589][T19152] CPU: 0 UID: 0 PID: 19152 Comm: syz.1.3450 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1968.668602][T19152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1968.668609][T19152] Call Trace: [ 1968.668614][T19152] [ 1968.668620][T19152] dump_stack_lvl+0x189/0x250 [ 1968.668640][T19152] ? __pfx____ratelimit+0x10/0x10 [ 1968.668655][T19152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1968.668670][T19152] ? __pfx__printk+0x10/0x10 [ 1968.668684][T19152] ? __might_fault+0xb0/0x130 [ 1968.668705][T19152] should_fail_ex+0x46c/0x600 [ 1968.668723][T19152] _copy_from_user+0x2d/0xb0 [ 1968.668735][T19152] do_sock_getsockopt+0x17d/0x450 [ 1968.668753][T19152] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1968.668765][T19152] ? do_syscall_64+0xa0/0xfa0 [ 1968.668785][T19152] __x64_sys_getsockopt+0x1ab/0x250 [ 1968.668797][T19152] ? do_syscall_64+0xa0/0xfa0 [ 1968.668812][T19152] ? do_syscall_64+0xa0/0xfa0 [ 1968.668827][T19152] do_syscall_64+0xfa/0xfa0 [ 1968.668840][T19152] ? lockdep_hardirqs_on+0x9c/0x150 [ 1968.668854][T19152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1968.668865][T19152] ? clear_bhb_loop+0x60/0xb0 [ 1968.668878][T19152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1968.668888][T19152] RIP: 0033:0x7fb95181f6c9 [ 1968.668898][T19152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1968.668908][T19152] RSP: 002b:00007fb94fa86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1968.668920][T19152] RAX: ffffffffffffffda RBX: 00007fb951a75fa0 RCX: 00007fb95181f6c9 [ 1968.668928][T19152] RDX: 0000000000000002 RSI: 000000000000010e RDI: 0000000000000003 [ 1968.668935][T19152] RBP: 00007fb94fa86090 R08: 0000200000000100 R09: 0000000000000000 [ 1968.668943][T19152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1968.668949][T19152] R13: 00007fb951a76038 R14: 00007fb951a75fa0 R15: 00007ffde851bc38 [ 1968.668966][T19152] [ 1968.882364][ T5885] usb 3-1: USB disconnect, device number 38 [ 1968.986969][T19158] use of bytesused == 0 is deprecated and will be removed in the future, [ 1968.986985][T19158] use the actual size instead. [ 1969.071776][T19143] bond1 (unregistering): Released all slaves [ 1969.637830][T19144] macsec1: entered promiscuous mode [ 1969.866729][T19145] macsec1: entered promiscuous mode [ 1969.923950][T19168] FAULT_INJECTION: forcing a failure. [ 1969.923950][T19168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1969.923984][T19168] CPU: 1 UID: 0 PID: 19168 Comm: syz.1.3454 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1969.924008][T19168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1969.924020][T19168] Call Trace: [ 1969.924028][T19168] [ 1969.924037][T19168] dump_stack_lvl+0x189/0x250 [ 1969.924068][T19168] ? __pfx____ratelimit+0x10/0x10 [ 1969.924093][T19168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1969.924120][T19168] ? __pfx__printk+0x10/0x10 [ 1969.924143][T19168] ? __might_fault+0xb0/0x130 [ 1969.924181][T19168] should_fail_ex+0x46c/0x600 [ 1969.924212][T19168] _copy_from_user+0x2d/0xb0 [ 1969.924234][T19168] csum_and_copy_from_iter_full+0x694/0x1ed0 [ 1969.924286][T19168] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 1969.924323][T19168] ? trace_kmalloc+0x1f/0xd0 [ 1969.924349][T19168] ip_generic_getfrag+0x12f/0x2b0 [ 1969.924378][T19168] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1969.924405][T19168] ? skb_put+0x11b/0x210 [ 1969.924430][T19168] __ip6_append_data+0x3974/0x3f30 [ 1969.924477][T19168] ? __pfx_raw6_getfrag+0x10/0x10 [ 1969.924521][T19168] ? __pfx___ip6_append_data+0x10/0x10 [ 1969.924540][T19168] ? __pfx_ip6_mtu+0x10/0x10 [ 1969.924570][T19168] ip6_append_data+0x1c1/0x380 [ 1969.924597][T19168] ? __pfx_raw6_getfrag+0x10/0x10 [ 1969.924623][T19168] rawv6_sendmsg+0x1286/0x1830 [ 1969.924666][T19168] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1969.924696][T19168] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1969.924745][T19168] ? sock_rps_record_flow+0x19/0x410 [ 1969.924774][T19168] ? inet_sendmsg+0x2f4/0x370 [ 1969.924797][T19168] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1969.924826][T19168] __sock_sendmsg+0x19c/0x270 [ 1969.924855][T19168] ____sys_sendmsg+0x534/0x820 [ 1969.924884][T19168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1969.924916][T19168] ? import_iovec+0x74/0xa0 [ 1969.924942][T19168] ___sys_sendmsg+0x21f/0x2a0 [ 1969.924967][T19168] ? __pfx____sys_sendmsg+0x10/0x10 [ 1969.925027][T19168] ? __fget_files+0x2a/0x420 [ 1969.925051][T19168] ? __fget_files+0x3a6/0x420 [ 1969.925087][T19168] __sys_sendmmsg+0x22d/0x430 [ 1969.925115][T19168] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1969.925148][T19168] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1969.925186][T19168] ? ksys_write+0x230/0x260 [ 1969.925212][T19168] ? __pfx_ksys_write+0x10/0x10 [ 1969.925241][T19168] __x64_sys_sendmmsg+0xa0/0xc0 [ 1969.925265][T19168] do_syscall_64+0xfa/0xfa0 [ 1969.925293][T19168] ? lockdep_hardirqs_on+0x9c/0x150 [ 1969.925316][T19168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.925335][T19168] ? clear_bhb_loop+0x60/0xb0 [ 1969.925358][T19168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.925377][T19168] RIP: 0033:0x7fb95181f6c9 [ 1969.925395][T19168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1969.925411][T19168] RSP: 002b:00007fb94fa86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1969.925432][T19168] RAX: ffffffffffffffda RBX: 00007fb951a75fa0 RCX: 00007fb95181f6c9 [ 1969.925446][T19168] RDX: 0000000000000001 RSI: 0000200000001040 RDI: 0000000000000004 [ 1969.925459][T19168] RBP: 00007fb94fa86090 R08: 0000000000000000 R09: 0000000000000000 [ 1969.925471][T19168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1969.925483][T19168] R13: 00007fb951a76038 R14: 00007fb951a75fa0 R15: 00007ffde851bc38 [ 1969.925517][T19168] [ 1970.390361][ T5885] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1970.416253][ T58] hsr_slave_0: left promiscuous mode [ 1970.450760][ T58] hsr_slave_1: left promiscuous mode [ 1970.451383][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1970.451399][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1970.630674][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 1970.636240][ T5885] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1970.638041][ T5885] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1970.638099][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.638112][ T5885] usb 2-1: Product: syz [ 1970.638120][ T5885] usb 2-1: Manufacturer: syz [ 1970.638128][ T5885] usb 2-1: SerialNumber: syz [ 1970.653827][ T5885] usb 2-1: config 0 descriptor?? [ 1970.858731][T19178] overlayfs: missing 'lowerdir' [ 1971.507886][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1971.507922][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1971.743439][ T5885] gs_usb 2-1:0.0: Couldn't send data format (err=-110) [ 1971.743468][ T5885] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 1971.805989][ T5885] usb 2-1: USB disconnect, device number 34 [ 1971.830558][ T58] veth1_macvtap: left promiscuous mode [ 1971.831907][ T58] veth0_macvtap: left promiscuous mode [ 1971.832185][ T58] veth1_vlan: left promiscuous mode [ 1971.832369][ T58] veth0_vlan: left promiscuous mode [ 1972.319695][T14779] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1972.470297][T14779] usb 5-1: Using ep0 maxpacket: 16 [ 1972.473225][T14779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1972.473258][T14779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1972.473283][T14779] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1972.473327][T14779] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1972.473353][T14779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.479263][T14779] usb 5-1: config 0 descriptor?? [ 1973.425397][T12812] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1973.513221][T19197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1973.520740][T19202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1973.521261][T19202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1973.521683][T19197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1973.630250][T12812] usb 2-1: Using ep0 maxpacket: 16 [ 1973.638118][T12812] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1973.638200][T12812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.638223][T12812] usb 2-1: Product: syz [ 1973.638238][T12812] usb 2-1: Manufacturer: syz [ 1973.638253][T12812] usb 2-1: SerialNumber: syz [ 1973.690899][T12812] usb 2-1: config 0 descriptor?? [ 1973.711931][T12812] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 1973.785062][T19202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1973.785597][T19197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1973.793680][T19202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1973.793953][T19197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1973.934114][ C0] vkms_vblank_simulate: vblank timer overrun [ 1973.969755][T14779] usbhid 5-1:0.0: can't add hid device: -71 [ 1973.969893][T14779] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1973.986269][T14779] usb 5-1: USB disconnect, device number 63 [ 1974.426804][ C0] vkms_vblank_simulate: vblank timer overrun [ 1974.712545][ C0] vkms_vblank_simulate: vblank timer overrun [ 1974.776484][ C0] vkms_vblank_simulate: vblank timer overrun [ 1975.827161][ C0] vkms_vblank_simulate: vblank timer overrun [ 1975.842221][ T5885] usb 2-1: USB disconnect, device number 35 [ 1975.939636][ C0] vkms_vblank_simulate: vblank timer overrun [ 1975.987683][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.987758][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.029148][ C0] vkms_vblank_simulate: vblank timer overrun [ 1976.463585][ C0] vkms_vblank_simulate: vblank timer overrun [ 1976.664132][ C0] vkms_vblank_simulate: vblank timer overrun [ 1976.721688][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1976.812782][ C0] vkms_vblank_simulate: vblank timer overrun [ 1976.942469][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1977.311076][ C0] vkms_vblank_simulate: vblank timer overrun [ 1977.479965][ C0] vkms_vblank_simulate: vblank timer overrun [ 1977.511004][ C0] vkms_vblank_simulate: vblank timer overrun [ 1977.613957][ C0] vkms_vblank_simulate: vblank timer overrun [ 1977.680745][ C0] vkms_vblank_simulate: vblank timer overrun [ 1977.778622][ C0] vkms_vblank_simulate: vblank timer overrun [ 1977.959859][ C0] vkms_vblank_simulate: vblank timer overrun [ 1978.064757][ C0] vkms_vblank_simulate: vblank timer overrun [ 1978.329705][ C0] vkms_vblank_simulate: vblank timer overrun [ 1978.449578][ C0] vkms_vblank_simulate: vblank timer overrun [ 1979.461235][T18821] hsr_slave_0: entered promiscuous mode [ 1979.462507][T18821] hsr_slave_1: entered promiscuous mode [ 1979.463376][T18821] debugfs: 'hsr0' already exists in 'hsr' [ 1979.463397][T18821] Cannot create hsr debugfs directory [ 1979.681553][T19225] FAULT_INJECTION: forcing a failure. [ 1979.681553][T19225] name failslab, interval 1, probability 0, space 0, times 0 [ 1979.681575][T19225] CPU: 0 UID: 0 PID: 19225 Comm: syz.1.3471 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1979.681587][T19225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1979.681595][T19225] Call Trace: [ 1979.681599][T19225] [ 1979.681605][T19225] dump_stack_lvl+0x189/0x250 [ 1979.681626][T19225] ? __pfx____ratelimit+0x10/0x10 [ 1979.681641][T19225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1979.681657][T19225] ? __pfx__printk+0x10/0x10 [ 1979.681673][T19225] ? __pfx___might_resched+0x10/0x10 [ 1979.681687][T19225] should_fail_ex+0x46c/0x600 [ 1979.681705][T19225] ? __alloc_skb+0x112/0x2d0 [ 1979.681715][T19225] should_failslab+0xa8/0x100 [ 1979.681731][T19225] ? __alloc_skb+0x112/0x2d0 [ 1979.681740][T19225] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 1979.681755][T19225] ? __lock_acquire+0xab9/0xd20 [ 1979.681771][T19225] __alloc_skb+0x112/0x2d0 [ 1979.681784][T19225] sock_omalloc+0xd8/0x1e0 [ 1979.681799][T19225] msg_zerocopy_realloc+0xd8/0x8c0 [ 1979.681812][T19225] ? is_bpf_text_address+0x26/0x2b0 [ 1979.681831][T19225] __ip6_append_data+0xca2/0x3f30 [ 1979.681856][T19225] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1979.681880][T19225] ? __pfx___ip6_append_data+0x10/0x10 [ 1979.681892][T19225] ? ip6_setup_cork+0xa1c/0x10e0 [ 1979.681907][T19225] ip6_make_skb+0x2d4/0x410 [ 1979.681920][T19225] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1979.681936][T19225] ? __pfx_ip6_make_skb+0x10/0x10 [ 1979.681954][T19225] ? sk_dst_check+0x307/0x480 [ 1979.681972][T19225] ? ip6_sk_dst_lookup_flow+0x696/0x9b0 [ 1979.681988][T19225] udpv6_sendmsg+0x1d1a/0x2510 [ 1979.682006][T19225] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1979.682020][T19225] ? kasan_save_track+0x3e/0x80 [ 1979.682032][T19225] ? __kasan_kmalloc+0x93/0xb0 [ 1979.682046][T19225] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1979.682056][T19225] ? __sys_sendmmsg+0x22d/0x430 [ 1979.682073][T19225] ? smack_socket_sendmsg+0x1a7/0x520 [ 1979.682101][T19225] ? inet_send_prepare+0x5c/0x270 [ 1979.682119][T19225] ? inet6_sendmsg+0xe4/0x120 [ 1979.682134][T19225] __sock_sendmsg+0xe5/0x270 [ 1979.682151][T19225] ____sys_sendmsg+0x534/0x820 [ 1979.682167][T19225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1979.682184][T19225] ? import_iovec+0x74/0xa0 [ 1979.682198][T19225] ___sys_sendmsg+0x21f/0x2a0 [ 1979.682211][T19225] ? __pfx____sys_sendmsg+0x10/0x10 [ 1979.682242][T19225] ? __fget_files+0x2a/0x420 [ 1979.682257][T19225] ? __fget_files+0x3a6/0x420 [ 1979.682277][T19225] __sys_sendmmsg+0x22d/0x430 [ 1979.682292][T19225] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1979.682310][T19225] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1979.682330][T19225] ? ksys_write+0x230/0x260 [ 1979.682345][T19225] ? __pfx_ksys_write+0x10/0x10 [ 1979.682360][T19225] __x64_sys_sendmmsg+0xa0/0xc0 [ 1979.682373][T19225] do_syscall_64+0xfa/0xfa0 [ 1979.682387][T19225] ? lockdep_hardirqs_on+0x9c/0x150 [ 1979.682400][T19225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1979.682411][T19225] ? clear_bhb_loop+0x60/0xb0 [ 1979.682424][T19225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1979.682434][T19225] RIP: 0033:0x7fb95181f6c9 [ 1979.682444][T19225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1979.682454][T19225] RSP: 002b:00007fb94fa86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1979.682466][T19225] RAX: ffffffffffffffda RBX: 00007fb951a75fa0 RCX: 00007fb95181f6c9 [ 1979.682479][T19225] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000006 [ 1979.682486][T19225] RBP: 00007fb94fa86090 R08: 0000000000000000 R09: 0000000000000000 [ 1979.682493][T19225] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 1979.682499][T19225] R13: 00007fb951a76038 R14: 00007fb951a75fa0 R15: 00007ffde851bc38 [ 1979.682517][T19225] [ 1980.400765][T19229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3474'. [ 1980.468702][T19231] sctp: [Deprecated]: syz.2.3473 (pid 19231) Use of int in maxseg socket option. [ 1980.468702][T19231] Use struct sctp_assoc_value instead [ 1982.551789][T19254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3480'. [ 1984.280436][ C0] vkms_vblank_simulate: vblank timer overrun [ 1985.024538][ C0] vkms_vblank_simulate: vblank timer overrun [ 1985.186600][ C0] vkms_vblank_simulate: vblank timer overrun [ 1985.326382][ C0] vkms_vblank_simulate: vblank timer overrun [ 1986.146964][ C0] vkms_vblank_simulate: vblank timer overrun [ 1986.278075][T19291] FAULT_INJECTION: forcing a failure. [ 1986.278075][T19291] name failslab, interval 1, probability 0, space 0, times 0 [ 1986.278104][T19291] CPU: 0 UID: 0 PID: 19291 Comm: syz.4.3493 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1986.278122][T19291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1986.278131][T19291] Call Trace: [ 1986.278137][T19291] [ 1986.278144][T19291] dump_stack_lvl+0x189/0x250 [ 1986.278171][T19291] ? __pfx____ratelimit+0x10/0x10 [ 1986.278192][T19291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1986.278213][T19291] ? __pfx__printk+0x10/0x10 [ 1986.278236][T19291] ? __pfx___might_resched+0x10/0x10 [ 1986.278256][T19291] should_fail_ex+0x46c/0x600 [ 1986.278281][T19291] should_failslab+0xa8/0x100 [ 1986.278303][T19291] __kmalloc_cache_noprof+0x6f/0x6c0 [ 1986.278322][T19291] ? nlmon_xmit+0xb0/0x100 [ 1986.278341][T19291] ? rtnl_newlink+0xfb/0x1c80 [ 1986.278355][T19291] ? kasan_save_track+0x4f/0x80 [ 1986.278375][T19291] rtnl_newlink+0xfb/0x1c80 [ 1986.278388][T19291] ? netlink_deliver_tap+0x19c/0x1b0 [ 1986.278404][T19291] ? netlink_unicast+0x811/0xa10 [ 1986.278424][T19291] ? netlink_sendmsg+0x805/0xb30 [ 1986.278437][T19291] ? __sock_sendmsg+0x21c/0x270 [ 1986.278453][T19291] ? ____sys_sendmsg+0x534/0x820 [ 1986.278467][T19291] ? ___sys_sendmsg+0x21f/0x2a0 [ 1986.278481][T19291] ? __sys_sendmmsg+0x22d/0x430 [ 1986.278495][T19291] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1986.278509][T19291] ? do_syscall_64+0xfa/0xfa0 [ 1986.278526][T19291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1986.278544][T19291] ? __pfx_rtnl_newlink+0x10/0x10 [ 1986.278571][T19291] ? __local_bh_enable+0x27b/0x410 [ 1986.278592][T19291] ? __local_bh_enable+0x28c/0x410 [ 1986.278608][T19291] ? reacquire_held_locks+0x127/0x1d0 [ 1986.278632][T19291] ? __pfx___local_bh_enable+0x10/0x10 [ 1986.278656][T19291] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 1986.278675][T19291] ? lockdep_hardirqs_on+0x9c/0x150 [ 1986.278700][T19291] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1986.278717][T19291] ? dev_hard_start_xmit+0x7f5/0x870 [ 1986.278735][T19291] ? __dev_queue_xmit+0x26f/0x3b70 [ 1986.278760][T19291] ? __dev_queue_xmit+0x26f/0x3b70 [ 1986.278779][T19291] ? __dev_queue_xmit+0x26f/0x3b70 [ 1986.278799][T19291] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 1986.278820][T19291] ? __lock_acquire+0xab9/0xd20 [ 1986.278857][T19291] ? __pfx_rtnl_newlink+0x10/0x10 [ 1986.278870][T19291] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1986.278887][T19291] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1986.278900][T19291] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1986.278920][T19291] ? ref_tracker_free+0x61e/0x7c0 [ 1986.278941][T19291] ? __asan_memcpy+0x40/0x70 [ 1986.278956][T19291] ? __pfx_ref_tracker_free+0x10/0x10 [ 1986.278973][T19291] ? __skb_clone+0x63/0x7a0 [ 1986.278997][T19291] netlink_rcv_skb+0x208/0x470 [ 1986.279014][T19291] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1986.279028][T19291] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1986.279052][T19291] ? netlink_deliver_tap+0x2e/0x1b0 [ 1986.279073][T19291] netlink_unicast+0x846/0xa10 [ 1986.279100][T19291] ? __pfx_netlink_unicast+0x10/0x10 [ 1986.279122][T19291] ? netlink_sendmsg+0x642/0xb30 [ 1986.279135][T19291] ? skb_put+0x11b/0x210 [ 1986.279153][T19291] netlink_sendmsg+0x805/0xb30 [ 1986.279176][T19291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1986.279197][T19291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1986.279219][T19291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1986.279237][T19291] __sock_sendmsg+0x21c/0x270 [ 1986.279262][T19291] ____sys_sendmsg+0x534/0x820 [ 1986.279285][T19291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1986.279310][T19291] ? import_iovec+0x74/0xa0 [ 1986.279329][T19291] ___sys_sendmsg+0x21f/0x2a0 [ 1986.279349][T19291] ? __pfx____sys_sendmsg+0x10/0x10 [ 1986.279396][T19291] ? __fget_files+0x2a/0x420 [ 1986.279416][T19291] ? __fget_files+0x3a6/0x420 [ 1986.279447][T19291] __sys_sendmmsg+0x22d/0x430 [ 1986.279475][T19291] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1986.279507][T19291] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1986.279543][T19291] ? ksys_write+0x230/0x260 [ 1986.279567][T19291] ? __pfx_ksys_write+0x10/0x10 [ 1986.279592][T19291] __x64_sys_sendmmsg+0xa0/0xc0 [ 1986.279616][T19291] do_syscall_64+0xfa/0xfa0 [ 1986.279638][T19291] ? lockdep_hardirqs_on+0x9c/0x150 [ 1986.279660][T19291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1986.279679][T19291] ? clear_bhb_loop+0x60/0xb0 [ 1986.279702][T19291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1986.279721][T19291] RIP: 0033:0x7fe23b54f6c9 [ 1986.279739][T19291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1986.279756][T19291] RSP: 002b:00007fe2397b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1986.279777][T19291] RAX: ffffffffffffffda RBX: 00007fe23b7a5fa0 RCX: 00007fe23b54f6c9 [ 1986.279793][T19291] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1986.279807][T19291] RBP: 00007fe2397b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1986.279820][T19291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1986.279832][T19291] R13: 00007fe23b7a6038 R14: 00007fe23b7a5fa0 R15: 00007ffdd8ed9ab8 [ 1986.279866][T19291] [ 1986.894226][ C0] vkms_vblank_simulate: vblank timer overrun [ 1987.723349][ C0] vkms_vblank_simulate: vblank timer overrun [ 1987.874906][ C0] vkms_vblank_simulate: vblank timer overrun [ 1987.909498][ T9728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1987.918821][ T9728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1987.951891][ T9728] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1988.337023][ T9728] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1988.731383][ C0] vkms_vblank_simulate: vblank timer overrun [ 1988.811409][ T9728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1988.897961][ C0] vkms_vblank_simulate: vblank timer overrun [ 1990.356403][ C0] vkms_vblank_simulate: vblank timer overrun [ 1990.447538][ C0] vkms_vblank_simulate: vblank timer overrun [ 1990.612118][ C0] vkms_vblank_simulate: vblank timer overrun [ 1990.680047][ C0] vkms_vblank_simulate: vblank timer overrun [ 1991.429048][ T9728] Bluetooth: hci4: command tx timeout [ 1992.589066][T19299] chnl_net:caif_netlink_parms(): no params data found [ 1992.970311][ T5885] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1993.120867][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 1993.187416][T12877] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1993.500380][T14379] Bluetooth: hci4: command tx timeout [ 1994.472880][T12877] usb 5-1: Using ep0 maxpacket: 32 [ 1995.580376][T14379] Bluetooth: hci4: command tx timeout [ 1996.880840][ T5885] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1996.881861][ T5885] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1996.881898][ T5885] usb 3-1: can't read configurations, error -71 [ 1997.028136][T12877] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1997.050572][T12877] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1997.050610][T12877] usb 5-1: can't read configurations, error -71 [ 1997.520205][ T5885] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1997.730431][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 1998.488898][T14379] Bluetooth: hci4: command tx timeout [ 1998.962298][ T5885] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1998.965724][ T5885] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1998.965762][ T5885] usb 3-1: can't read configurations, error -71 [ 1998.966229][ T5885] usb usb3-port1: attempt power cycle [ 1999.069188][T19299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1999.069318][T19299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.069565][T19299] bridge_slave_0: entered allmulticast mode [ 1999.080628][T19299] bridge_slave_0: entered promiscuous mode [ 1999.085926][T19299] bridge0: port 2(bridge_slave_1) entered blocking state [ 1999.086130][T19299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.086313][T19299] bridge_slave_1: entered allmulticast mode [ 1999.093812][T19299] bridge_slave_1: entered promiscuous mode [ 1999.340245][T12877] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1999.344251][ T43] bridge_slave_1: left allmulticast mode [ 1999.344278][ T43] bridge_slave_1: left promiscuous mode [ 1999.344581][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.431197][ T43] bridge_slave_0: left allmulticast mode [ 1999.431219][ T43] bridge_slave_0: left promiscuous mode [ 1999.431397][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.490258][T12877] usb 5-1: Using ep0 maxpacket: 8 [ 1999.508758][T12877] usb 5-1: config index 0 descriptor too short (expected 30022, got 18) [ 1999.508818][T12877] usb 5-1: config 200 has too many interfaces: 37, using maximum allowed: 32 [ 1999.509180][T12877] usb 5-1: config 200 has an invalid descriptor of length 55, skipping remainder of the config [ 1999.509234][T12877] usb 5-1: config 200 has 0 interfaces, different from the descriptor's value: 37 [ 1999.565150][T12877] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1999.565181][T12877] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=3 [ 1999.565202][T12877] usb 5-1: Product: syz [ 1999.565218][T12877] usb 5-1: Manufacturer: syz [ 1999.565459][T12877] usb 5-1: SerialNumber: syz [ 2001.894728][T19403] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 2004.069463][T12877] usb 5-1: USB disconnect, device number 66 [ 2005.094538][T19411] FAULT_INJECTION: forcing a failure. [ 2005.094538][T19411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2005.094575][T19411] CPU: 0 UID: 0 PID: 19411 Comm: syz.0.3520 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2005.094597][T19411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2005.094609][T19411] Call Trace: [ 2005.094617][T19411] [ 2005.094626][T19411] dump_stack_lvl+0x189/0x250 [ 2005.094654][T19411] ? __pfx____ratelimit+0x10/0x10 [ 2005.094674][T19411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2005.094695][T19411] ? __pfx__printk+0x10/0x10 [ 2005.094713][T19411] ? __might_fault+0xb0/0x130 [ 2005.094745][T19411] should_fail_ex+0x46c/0x600 [ 2005.094770][T19411] _copy_from_iter+0x1de/0x1790 [ 2005.094796][T19411] ? kmalloc_reserve+0xbd/0x290 [ 2005.094811][T19411] ? rcu_is_watching+0x15/0xb0 [ 2005.094828][T19411] ? kmalloc_reserve+0xbd/0x290 [ 2005.094841][T19411] ? __alloc_skb+0x112/0x2d0 [ 2005.094856][T19411] ? __pfx__copy_from_iter+0x10/0x10 [ 2005.094880][T19411] ? __build_skb_around+0x262/0x3f0 [ 2005.094898][T19411] ? skb_put+0x11b/0x210 [ 2005.094916][T19411] pfkey_sendmsg+0x230/0x1090 [ 2005.094944][T19411] ? smack_socket_sendmsg+0x1a7/0x520 [ 2005.094964][T19411] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 2005.094990][T19411] ? is_bpf_text_address+0x26/0x2b0 [ 2005.095017][T19411] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2005.095043][T19411] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2005.095063][T19411] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 2005.095083][T19411] __sock_sendmsg+0x21c/0x270 [ 2005.095106][T19411] ____sys_sendmsg+0x508/0x820 [ 2005.095134][T19411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2005.095159][T19411] ? import_iovec+0x74/0xa0 [ 2005.095178][T19411] ___sys_sendmsg+0x21f/0x2a0 [ 2005.095197][T19411] ? __pfx____sys_sendmsg+0x10/0x10 [ 2005.095243][T19411] ? __fget_files+0x2a/0x420 [ 2005.095262][T19411] ? __fget_files+0x3a6/0x420 [ 2005.095291][T19411] __x64_sys_sendmsg+0x1a1/0x260 [ 2005.095310][T19411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2005.095341][T19411] ? do_syscall_64+0xbe/0xfa0 [ 2005.095365][T19411] do_syscall_64+0xfa/0xfa0 [ 2005.095385][T19411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2005.095400][T19411] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2005.095415][T19411] ? clear_bhb_loop+0x60/0xb0 [ 2005.095433][T19411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2005.095448][T19411] RIP: 0033:0x7fc5dc06f6c9 [ 2005.095462][T19411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2005.095476][T19411] RSP: 002b:00007fc5da2ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2005.095493][T19411] RAX: ffffffffffffffda RBX: 00007fc5dc2c5fa0 RCX: 00007fc5dc06f6c9 [ 2005.095505][T19411] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 000000000000000a [ 2005.095515][T19411] RBP: 00007fc5da2ce090 R08: 0000000000000000 R09: 0000000000000000 [ 2005.095525][T19411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2005.095534][T19411] R13: 00007fc5dc2c6038 R14: 00007fc5dc2c5fa0 R15: 00007ffca01ba318 [ 2005.095560][T19411] [ 2005.549194][T19431] FAULT_INJECTION: forcing a failure. [ 2005.549194][T19431] name failslab, interval 1, probability 0, space 0, times 0 [ 2005.549216][T19431] CPU: 0 UID: 0 PID: 19431 Comm: syz.4.3527 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2005.549229][T19431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2005.549236][T19431] Call Trace: [ 2005.549240][T19431] [ 2005.549246][T19431] dump_stack_lvl+0x189/0x250 [ 2005.549266][T19431] ? __pfx____ratelimit+0x10/0x10 [ 2005.549280][T19431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2005.549296][T19431] ? __pfx__printk+0x10/0x10 [ 2005.549313][T19431] ? __pfx___might_resched+0x10/0x10 [ 2005.549325][T19431] ? fs_reclaim_acquire+0x7d/0x100 [ 2005.549350][T19431] should_fail_ex+0x46c/0x600 [ 2005.549369][T19431] should_failslab+0xa8/0x100 [ 2005.549386][T19431] __kmalloc_cache_noprof+0x6f/0x6c0 [ 2005.549401][T19431] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 2005.549418][T19431] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 2005.549437][T19431] sctp_association_new+0x15d3/0x25f0 [ 2005.549462][T19431] sctp_connect_new_asoc+0x2c5/0x690 [ 2005.549481][T19431] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2005.549498][T19431] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2005.549514][T19431] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2005.549529][T19431] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2005.549549][T19431] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2005.549559][T19431] ? security_sctp_bind_connect+0x7e/0x2e0 [ 2005.549572][T19431] sctp_sendmsg+0x14fd/0x2590 [ 2005.549594][T19431] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2005.549609][T19431] ? __lock_acquire+0xab9/0xd20 [ 2005.549633][T19431] ? sock_rps_record_flow+0x19/0x410 [ 2005.549651][T19431] ? inet_sendmsg+0x2f4/0x370 [ 2005.549665][T19431] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2005.549681][T19431] __sock_sendmsg+0x19c/0x270 [ 2005.549698][T19431] __sys_sendto+0x3c7/0x520 [ 2005.549711][T19431] ? __pfx___sys_sendto+0x10/0x10 [ 2005.549737][T19431] ? ksys_write+0x230/0x260 [ 2005.549752][T19431] ? __pfx_ksys_write+0x10/0x10 [ 2005.549767][T19431] __x64_sys_sendto+0xde/0x100 [ 2005.549780][T19431] do_syscall_64+0xfa/0xfa0 [ 2005.549793][T19431] ? lockdep_hardirqs_on+0x9c/0x150 [ 2005.549807][T19431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2005.549818][T19431] ? clear_bhb_loop+0x60/0xb0 [ 2005.549830][T19431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2005.549840][T19431] RIP: 0033:0x7fe23b54f6c9 [ 2005.549850][T19431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2005.549860][T19431] RSP: 002b:00007fe2397b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2005.549872][T19431] RAX: ffffffffffffffda RBX: 00007fe23b7a5fa0 RCX: 00007fe23b54f6c9 [ 2005.549879][T19431] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 2005.549886][T19431] RBP: 00007fe2397b6090 R08: 000020000005ffe4 R09: 000000000000001c [ 2005.549894][T19431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2005.549900][T19431] R13: 00007fe23b7a6038 R14: 00007fe23b7a5fa0 R15: 00007ffdd8ed9ab8 [ 2005.549918][T19431] [ 2005.565400][ T5885] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2005.714624][ T5885] usb 2-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 2005.714680][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2005.714723][ T5885] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2005.714747][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2005.725082][ T5885] usb 2-1: config 0 descriptor?? [ 2005.753302][ T5885] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2005.774471][T14675] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2005.905993][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2005.922608][T14675] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2005.922663][T14675] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2005.922687][T14675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2005.933164][T14675] usb 1-1: config 0 descriptor?? [ 2005.954479][T14675] pwc: Askey VC010 type 2 USB webcam detected. [ 2006.101127][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2006.206238][ T43] bond0 (unregistering): Released all slaves [ 2006.371356][T14675] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2006.375667][T14675] pwc: recv_control_msg error -32 req 02 val 2700 [ 2006.378708][T14675] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2006.379302][T14675] pwc: recv_control_msg error -32 req 04 val 1000 [ 2006.379939][T14675] pwc: recv_control_msg error -32 req 04 val 1300 [ 2006.414737][T14675] pwc: recv_control_msg error -32 req 04 val 1400 [ 2006.417121][T14675] pwc: recv_control_msg error -32 req 02 val 2000 [ 2006.420412][T14675] pwc: recv_control_msg error -32 req 02 val 2100 [ 2006.422483][T14675] pwc: recv_control_msg error -32 req 04 val 1500 [ 2006.451287][T19299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2006.473423][T19299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2008.646424][T12877] usb 2-1: USB disconnect, device number 36 [ 2011.510532][T14675] pwc: recv_control_msg error -110 req 02 val 2500 [ 2012.222131][T14675] pwc: recv_control_msg error -32 req 02 val 2400 [ 2012.265672][T14675] pwc: recv_control_msg error -32 req 02 val 2600 [ 2012.492250][T14675] pwc: recv_control_msg error -32 req 02 val 2900 [ 2012.525017][T14675] pwc: recv_control_msg error -32 req 02 val 2800 [ 2012.653610][T14675] pwc: recv_control_msg error -32 req 04 val 1100 [ 2012.751137][T14675] pwc: recv_control_msg error -32 req 04 val 1200 [ 2013.236243][T14675] pwc: Registered as video103. [ 2013.266572][T14675] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 2018.198223][T14675] usb 1-1: USB disconnect, device number 54 [ 2019.561418][T19485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2019.665841][T19299] team0: Port device team_slave_0 added [ 2020.211526][ T43] hsr_slave_0: left promiscuous mode [ 2020.289266][ T43] hsr_slave_1: left promiscuous mode [ 2020.290438][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2020.664794][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2021.038425][ T5872] Process accounting resumed [ 2021.502578][ T43] team0 (unregistering): Port device team_slave_1 removed [ 2021.667063][ T43] team0 (unregistering): Port device team_slave_0 removed [ 2021.730987][ T5872] Process accounting resumed [ 2022.995945][T19508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3546'. [ 2023.214018][T19299] team0: Port device team_slave_1 added [ 2023.479430][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 2023.479634][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 2023.497447][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 2023.497661][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 2024.111534][T19510] ceph: No mds server is up or the cluster is laggy [ 2024.720461][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 2024.720681][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 2026.289462][T19299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2026.289479][T19299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2026.289506][T19299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2026.295443][T19299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2026.295458][T19299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2026.295484][T19299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2027.339568][T14779] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2027.361264][T11616] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2027.535189][T14779] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2027.535276][T14779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.543986][T11616] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 2027.544017][T11616] usb 1-1: New USB device strings: Mfr=1, Product=51, SerialNumber=161 [ 2027.544039][T11616] usb 1-1: Product: syz [ 2027.544055][T11616] usb 1-1: Manufacturer: syz [ 2027.544070][T11616] usb 1-1: SerialNumber: syz [ 2027.549774][T14779] usb 3-1: config 0 descriptor?? [ 2027.556638][T14779] cp210x 3-1:0.0: cp210x converter detected [ 2027.560693][T11616] usb 1-1: config 0 descriptor?? [ 2027.572968][T11616] usb 1-1: interface 1 not found [ 2027.689101][T19299] hsr_slave_0: entered promiscuous mode [ 2027.691808][T19299] hsr_slave_1: entered promiscuous mode [ 2027.692802][T19299] debugfs: 'hsr0' already exists in 'hsr' [ 2027.692825][T19299] Cannot create hsr debugfs directory [ 2027.834176][ T5885] Process accounting resumed [ 2027.876041][T11616] usb 1-1: USB disconnect, device number 55 [ 2027.988131][T19550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3558'. [ 2028.028568][T14779] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2028.239707][T14779] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 2028.239736][T14779] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 2028.263017][T14779] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2028.361111][T11616] Process accounting resumed [ 2028.472204][ T5885] usb 3-1: USB disconnect, device number 42 [ 2028.524175][ T5885] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2028.524679][ T5885] cp210x 3-1:0.0: device disconnected [ 2028.580384][ T5953] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2028.730275][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 2029.312603][T19558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2029.313081][T19558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2031.276227][T14379] Bluetooth: hci2: command 0x0406 tx timeout [ 2031.470946][ T5953] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2031.473291][ T5953] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2031.473330][ T5953] usb 2-1: can't read configurations, error -71 [ 2031.880335][T12877] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2032.930547][T19299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2033.748104][T19299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2033.815400][T19299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2033.927457][T12877] usb 3-1: Using ep0 maxpacket: 32 [ 2034.112498][T12877] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2034.128316][T12877] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2034.128346][T12877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.128368][T12877] usb 3-1: Product: syz [ 2034.128384][T12877] usb 3-1: Manufacturer: syz [ 2034.128400][T12877] usb 3-1: SerialNumber: syz [ 2034.174531][T12877] usb 3-1: config 0 descriptor?? [ 2034.328176][T19299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2034.710708][T12877] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 2034.710752][T12877] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 2034.790808][T12877] usb 3-1: USB disconnect, device number 43 [ 2035.220470][T14779] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 2036.184307][T14779] usb 2-1: not running at top speed; connect to a high speed hub [ 2036.280259][T14779] usb 2-1: config 1 interface 0 altsetting 29 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 2036.280294][T14779] usb 2-1: config 1 interface 0 altsetting 29 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2036.280322][T14779] usb 2-1: config 1 interface 0 altsetting 29 endpoint 0x3 has invalid maxpacket 1056, setting to 64 [ 2036.280348][T14779] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2037.323580][T14779] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2037.323600][T14779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.323615][T14779] usb 2-1: Manufacturer: ї [ 2037.323630][T14779] usb 2-1: SerialNumber: ဉ [ 2039.011928][T19299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2039.043861][T19299] 8021q: adding VLAN 0 to HW filter on device team0 [ 2039.061876][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2039.061948][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.153228][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 2039.153571][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2039.190995][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.191672][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2040.695623][T19601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3570'. [ 2041.090243][ T5953] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2041.258954][ T5953] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 2041.258985][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=51, SerialNumber=161 [ 2041.259005][ T5953] usb 5-1: Product: syz [ 2041.259013][ T5953] usb 5-1: Manufacturer: syz [ 2041.259021][ T5953] usb 5-1: SerialNumber: syz [ 2041.298052][ T5953] usb 5-1: config 0 descriptor?? [ 2041.414091][ T5953] usb 5-1: interface 1 not found [ 2041.475675][T19299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2041.682173][T11616] usb 5-1: USB disconnect, device number 68 [ 2041.885994][T19299] veth0_vlan: entered promiscuous mode [ 2041.937871][T19299] veth1_vlan: entered promiscuous mode [ 2042.011328][T16163] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2042.039670][T19299] veth0_macvtap: entered promiscuous mode [ 2042.053898][T19299] veth1_macvtap: entered promiscuous mode [ 2042.142181][T19299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2042.180412][T16163] usb 1-1: Using ep0 maxpacket: 32 [ 2042.194903][T19299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2042.389933][T11616] Process accounting resumed [ 2042.420787][ C0] vkms_vblank_simulate: vblank timer overrun [ 2042.479750][T19617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2042.480082][T19617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2042.487127][T16163] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2042.488504][T16163] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2042.488540][T16163] usb 1-1: can't read configurations, error -71 [ 2042.610958][T13523] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2042.611225][T12877] Process accounting resumed [ 2042.614344][T13523] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2042.614799][T13523] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2042.615448][T13523] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2043.258190][ C0] vkms_vblank_simulate: vblank timer overrun [ 2043.626697][ T6320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2043.626719][ T6320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2043.663877][T14779] usb 2-1: can't set config #1, error -110 [ 2043.738283][ T5885] usb 2-1: USB disconnect, device number 39 [ 2043.832792][T13523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2043.832812][T13523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2044.318715][ C0] vkms_vblank_simulate: vblank timer overrun [ 2045.551338][ C0] vkms_vblank_simulate: vblank timer overrun [ 2045.554237][T12519] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2045.700397][T12519] usb 2-1: Using ep0 maxpacket: 8 [ 2045.707303][T12519] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2045.711285][T12519] usb 2-1: config 4 interface 0 has no altsetting 0 [ 2045.719030][T12519] usb 2-1: string descriptor 0 read error: -22 [ 2045.719176][T12519] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2045.719200][T12519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.053543][T12519] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2046.275434][T12519] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2046.295000][T12519] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2046.295235][T12519] usb 2-1: media controller created [ 2047.917955][T12519] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2049.158625][T12519] zl10353_read_register: readreg error (reg=127, ret==0) [ 2049.622071][ T38] INFO: task syz.9.3124:18171 blocked for more than 143 seconds. [ 2049.622095][ T38] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2049.622106][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2049.622117][ T38] task:syz.9.3124 state:D stack:23464 pid:18171 tgid:18171 ppid:14479 task_flags:0x400040 flags:0x00080003 [ 2049.622170][ T38] Call Trace: [ 2049.622178][ T38] [ 2049.622192][ T38] __schedule+0x16f3/0x4c20 [ 2049.622232][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2049.622259][ T38] ? __lock_acquire+0xab9/0xd20 [ 2049.622292][ T38] ? __lock_acquire+0xab9/0xd20 [ 2049.622318][ T38] ? __pfx___schedule+0x10/0x10 [ 2049.622360][ T38] ? schedule+0x91/0x360 [ 2049.622386][ T38] schedule+0x165/0x360 [ 2049.622412][ T38] __fuse_simple_request+0x11d2/0x1bb0 [ 2049.622462][ T38] ? __pfx___fuse_simple_request+0x10/0x10 [ 2049.622489][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2049.622528][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2049.622567][ T38] fuse_flush+0x5dd/0x810 [ 2049.622599][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 2049.622630][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2049.622656][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2049.622703][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2049.622726][ T38] ? rt_spin_unlock+0x150/0x200 [ 2049.622749][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 2049.622773][ T38] filp_flush+0xc0/0x190 [ 2049.622796][ T38] filp_close+0x1d/0x40 [ 2049.622816][ T38] __se_sys_close_range+0x35c/0x650 [ 2049.622850][ T38] ? __pfx___se_sys_close_range+0x10/0x10 [ 2049.622880][ T38] ? do_syscall_64+0xbe/0xfa0 [ 2049.622909][ T38] do_syscall_64+0xfa/0xfa0 [ 2049.622932][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 2049.622956][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.622976][ T38] ? clear_bhb_loop+0x60/0xb0 [ 2049.623000][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.623019][ T38] RIP: 0033:0x7f3bd9cff6c9 [ 2049.623036][ T38] RSP: 002b:00007fffe0195758 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2049.623057][ T38] RAX: ffffffffffffffda RBX: 00007f3bd9f57da0 RCX: 00007f3bd9cff6c9 [ 2049.623071][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2049.623084][ T38] RBP: 00007f3bd9f57da0 R08: 00000000000000dc R09: 0000000ce0195a4f [ 2049.623098][ T38] R10: 00000000003ffd00 R11: 0000000000000246 R12: 00000000001cceeb [ 2049.623111][ T38] R13: 00007f3bd9f56090 R14: ffffffffffffffff R15: 00007fffe0195870 [ 2049.623146][ T38] [ 2049.623179][ T38] [ 2049.623179][ T38] Showing all locks held in the system: [ 2049.623193][ T38] 1 lock held by pr/legacy/17: [ 2049.623207][ T38] 1 lock held by khungtaskd/38: [ 2049.623218][ T38] #0: ffffffff8d5aa800 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2049.623288][ T38] 2 locks held by getty/5560: [ 2049.623299][ T38] #0: ffff88823bf2c8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2049.623346][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 2049.623399][ T38] 2 locks held by kworker/0:5/5885: [ 2049.623411][ T38] 6 locks held by kworker/u8:14/6320: [ 2049.623429][ T38] 5 locks held by kworker/u8:28/6993: [ 2049.623440][ T38] 3 locks held by kworker/1:0/11616: [ 2049.623453][ T38] 6 locks held by kworker/0:2/12519: [ 2049.623464][ T38] 4 locks held by kworker/u8:6/13523: [ 2049.623478][ T38] 1 lock held by syz-executor/14548: [ 2049.623491][ T38] 2 locks held by kworker/1:9/14779: [ 2049.623502][ T38] 4 locks held by kworker/0:9/16163: [ 2049.623514][ T38] 1 lock held by syz-executor/18472: [ 2049.623526][ T38] 5 locks held by kworker/u8:13/19227: [ 2049.623538][ T38] 1 lock held by syz-executor/19627: [ 2049.623550][ T38] 1 lock held by syz.4.3583/19648: [ 2049.623562][ T38] [ 2049.623567][ T38] ============================================= [ 2049.623567][ T38] [ 2049.623577][ T38] NMI backtrace for cpu 1 [ 2049.623590][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2049.623611][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2049.623622][ T38] Call Trace: [ 2049.623630][ T38] [ 2049.623638][ T38] dump_stack_lvl+0x189/0x250 [ 2049.623668][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2049.623695][ T38] ? __pfx__printk+0x10/0x10 [ 2049.623729][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 2049.623753][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2049.623776][ T38] ? __pfx__printk+0x10/0x10 [ 2049.623803][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2049.623827][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2049.623851][ T38] watchdog+0xf60/0xfa0 [ 2049.623882][ T38] ? watchdog+0x1e2/0xfa0 [ 2049.623912][ T38] kthread+0x711/0x8a0 [ 2049.623941][ T38] ? __pfx_watchdog+0x10/0x10 [ 2049.623965][ T38] ? __pfx_kthread+0x10/0x10 [ 2049.623988][ T38] ? rt_spin_unlock+0x150/0x200 [ 2049.624012][ T38] ? rt_spin_unlock+0x161/0x200 [ 2049.624031][ T38] ? __pfx_kthread+0x10/0x10 [ 2049.624057][ T38] ret_from_fork+0x4bc/0x870 [ 2049.624083][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2049.624112][ T38] ? __switch_to_asm+0x39/0x70 [ 2049.624130][ T38] ? __switch_to_asm+0x33/0x70 [ 2049.624149][ T38] ? __pfx_kthread+0x10/0x10 [ 2049.624175][ T38] ret_from_fork_asm+0x1a/0x30 [ 2049.624211][ T38] [ 2049.624219][ T38] Sending NMI from CPU 1 to CPUs 0: [ 2049.624247][ C0] NMI backtrace for cpu 0 [ 2049.624261][ C0] CPU: 0 UID: 0 PID: 19627 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2049.624280][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2049.624290][ C0] RIP: 0010:check_preemption_disabled+0x40/0x120 [ 2049.624315][ C0] Code: 08 65 8b 05 d6 f4 e1 06 65 8b 0d cb f4 e1 06 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d ab f4 e1 06 48 3b 4c 24 08 0f 85 cc 00 00 00 <48> 83 c4 10 5b 41 5e 41 5f 5d e9 d1 a3 03 00 cc 48 c7 04 24 00 00 [ 2049.624330][ C0] RSP: 0018:ffffc90005d277c8 EFLAGS: 00000246 [ 2049.624344][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 781f9740f910c200 [ 2049.624356][ C0] RDX: 0000000000000000 RSI: ffffffff8b3ddd40 RDI: ffffffff8b3ddd00 [ 2049.624369][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2049.624379][ C0] R10: dffffc0000000000 R11: ffffed1006b5f8c6 R12: 000000000003b9ca [ 2049.624392][ C0] R13: dffffc0000000000 R14: ffff88813fffa830 R15: 0000000000001000 [ 2049.624405][ C0] FS: 000055558c970500(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 2049.624419][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2049.624432][ C0] CR2: 00007fe23b7a7dac CR3: 000000004e9fe000 CR4: 00000000003526f0 [ 2049.624447][ C0] DR0: ffffffffffffffff DR1: 0000000000000009 DR2: 0000000000000083 [ 2049.624458][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2049.624470][ C0] Call Trace: [ 2049.624476][ C0] [ 2049.624485][ C0] rcu_lockdep_current_cpu_online+0x37/0x120 [ 2049.624505][ C0] rcu_read_lock_held+0x1e/0x50 [ 2049.624521][ C0] page_ext_lookup+0xe7/0x180 [ 2049.624540][ C0] ? __page_table_check_zero+0xba/0x530 [ 2049.624559][ C0] __page_table_check_zero+0x18f/0x530 [ 2049.624581][ C0] post_alloc_hook+0x253/0x2a0 [ 2049.624603][ C0] get_page_from_freelist+0x28c0/0x2960 [ 2049.624645][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 2049.624675][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2049.624705][ C0] alloc_pages_mpol+0xd1/0x380 [ 2049.624728][ C0] alloc_pages_noprof+0xcf/0x1e0 [ 2049.624751][ C0] __vmalloc_node_range_noprof+0x96c/0x12d0 [ 2049.624786][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2049.624811][ C0] vmalloc_user_noprof+0xad/0xf0 [ 2049.624830][ C0] ? kcov_ioctl+0x58/0x650 [ 2049.624850][ C0] kcov_ioctl+0x58/0x650 [ 2049.624869][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2049.624885][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 2049.624904][ C0] __se_sys_ioctl+0xff/0x170 [ 2049.624922][ C0] do_syscall_64+0xfa/0xfa0 [ 2049.624941][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2049.624960][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.624976][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2049.624994][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.625009][ C0] RIP: 0033:0x7fa8e13cf2cb [ 2049.625023][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 2049.625038][ C0] RSP: 002b:00007fffd737cd80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2049.625054][ C0] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fa8e13cf2cb [ 2049.625066][ C0] RDX: 0000000000100000 RSI: ffffffff80086301 RDI: 00000000000000d7 [ 2049.625078][ C0] RBP: 00007fa8e1625f40 R08: 00000000000000da R09: 0000000000000000 [ 2049.625089][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2049.625099][ C0] R13: 0000000000000003 R14: 00007fffd737d0c8 R15: 0000000000000000 [ 2049.625119][ C0] [ 2049.850589][T12519] usb 2-1: USB disconnect, device number 40 [ 2050.809341][T14379] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2050.829615][T14379] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2050.838319][T14379] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2050.862277][T14379] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2050.877634][T14379] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2051.022755][ C0] vkms_vblank_simulate: vblank timer overrun [ 2051.332435][ C0] vkms_vblank_simulate: vblank timer overrun [ 2051.681131][ C0] vkms_vblank_simulate: vblank timer overrun [ 2052.075463][ C0] vkms_vblank_simulate: vblank timer overrun [ 2052.940275][ T9728] Bluetooth: hci6: command tx timeout [ 2053.228974][ T6995] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.486694][ T6995] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.694743][ T6995] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.749345][T19654] chnl_net:caif_netlink_parms(): no params data found [ 2053.995563][ T6995] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2054.182373][T19654] bridge0: port 1(bridge_slave_0) entered blocking state [ 2054.182583][T19654] bridge0: port 1(bridge_slave_0) entered disabled state [ 2054.182800][T19654] bridge_slave_0: entered allmulticast mode [ 2054.185707][T19654] bridge_slave_0: entered promiscuous mode [ 2054.194148][T19654] bridge0: port 2(bridge_slave_1) entered blocking state [ 2054.194348][T19654] bridge0: port 2(bridge_slave_1) entered disabled state [ 2054.194542][T19654] bridge_slave_1: entered allmulticast mode [ 2054.197217][T19654] bridge_slave_1: entered promiscuous mode [ 2054.337788][T19654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2054.368609][T19654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2054.524275][T19654] team0: Port device team_slave_0 added [ 2054.542128][T19654] team0: Port device team_slave_1 added [ 2054.693134][T19654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2054.693146][T19654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2054.693161][T19654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2054.694588][T19654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2054.694597][T19654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2054.694612][T19654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2054.802459][ T6995] bridge_slave_1: left allmulticast mode [ 2054.802485][ T6995] bridge_slave_1: left promiscuous mode [ 2054.802696][ T6995] bridge0: port 2(bridge_slave_1) entered disabled state [ 2054.863004][ T6995] bridge_slave_0: left allmulticast mode [ 2054.863034][ T6995] bridge_slave_0: left promiscuous mode [ 2054.863288][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state [ 2055.020306][ T9728] Bluetooth: hci6: command tx timeout [ 2056.801817][ T6995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2056.861533][ T6995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2056.882763][ T6995] bond0 (unregistering): Released all slaves [ 2057.100340][ T9728] Bluetooth: hci6: command tx timeout [ 2057.194530][T19654] hsr_slave_0: entered promiscuous mode [ 2057.195996][T19654] hsr_slave_1: entered promiscuous mode [ 2057.196665][T19654] debugfs: 'hsr0' already exists in 'hsr' [ 2057.196686][T19654] Cannot create hsr debugfs directory [ 2058.090382][ T6995] hsr_slave_0: left promiscuous mode [ 2058.110344][ T6995] hsr_slave_1: left promiscuous mode [ 2058.111110][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2058.111127][ T6995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2058.161386][ T6995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2058.161412][ T6995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2058.237417][ T6995] veth1_macvtap: left promiscuous mode [ 2058.237485][ T6995] veth0_macvtap: left promiscuous mode [ 2058.237634][ T6995] veth1_vlan: left promiscuous mode [ 2058.237753][ T6995] veth0_vlan: left promiscuous mode [ 2059.180398][ T9728] Bluetooth: hci6: command tx timeout