last executing test programs: 13m15.557055006s ago: executing program 3 (id=137): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000006c0)={0x0, 0x6, [{0xffffffffffffffff, 0x0, 0x1000, 0x8000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000001006000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0x8000}, {0xffffffffffffffff, 0x0, 0x1000, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x10000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffff000, 0x1000000}]}) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x4042) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_usb_connect(0x4, 0x9a2, &(0x7f0000000280)=ANY=[], 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x6) sendto$inet6(r3, 0x0, 0x0, 0x89c0, &(0x7f0000000080)={0xa, 0x4e1e, 0x2, @loopback, 0x7ff}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x40040d4, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000600)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020017b00090080007f000001e8090000e78b39ab5a8873eb165526f9d074283784d23700ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000df08559e7f0d5acaed715ec9d901981e4641036133502359ccd8fea2d43b1b2add3faf0076374f23eb75a0ba7b47b0289f3ac78e329d629c685f8603c4cc3b8d", 0xab}, {&(0x7f0000000840)="5071a6644010b2d3f79f8821bc85a8cddbbf58d5cdb5400bab6fa60084d113a94ccefb86058132dba9c2fa772724b8929e0b534b2c97dc9c542f9ca8a3130c49daaa9fad9bbca01b12bb6ec2278bb492c4c03027dccb8a9102860188e303911c0c4ce8219ec47de0a47f83dec4b2b397e80b2169ed4262812c2efd3167758a3039e8d9b52b7454e3e5e343d1256f39bd04bd52c304889f8a9ae268c543d38025c85c5e2428f390c73146e8a75e5a4ed16c72a4010655f002e2143dcb7ad764d6ec43fc2429fff38ba6847795e9e2a4f0afef3cac692b1b21243c85b53aa23c6070abcd956002", 0xe6}, {&(0x7f0000000940)="8320cab138048dd8c0740a34a0f4694dd573d2ef8c5ebad5161cb413566317b129bd27bde5fa20129520c50ac5b04a0032fb283c21c6bd03bb3546f8d673d1069179b72e0cdda41e9888e63fa2d94f612cc56bb03bb3de5e27d1915f35571d88", 0x60}], 0x3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x10c, r8, 0x1, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xe8, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xe3, 0x1, "3b4ecb9d85137149b19d1ab4472eef71552ccb3df6d4717d6bb9f194b1dd92f7a6cb91c8972635dfa6e18ff376105edf9a57dae6c267925a9c8a32788933af7948abc57c7e50e1df6f31dea4c1d284ef5ed95bc13b83a23aebbcd023e8e5831518dfff89603c24343762918dcff49378e091cb28c918e12b1d73973129fd2fe0ecc183b050044c56c25795959d09cf3043306652654e02d1b7b86099d475d724b7b6c0de6a8455ffac787b7cdba1b4615420bb429150afa0db95a08b8b158a554c51d891fffdd5282cca2d62caeb66a7cb8f6686a10208ae40514ec7828ff5"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x58, r5, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="340ace8e86e21f997d6267a04201122926abed2a213bc4e7a323739358baf50d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a8c4f903dcf06594"}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x51) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYRES8], &(0x7f00000003c0)='GPL\x00'}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) r12 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r12, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}], 0x1}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000130001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000240012800b0041"], 0x5c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=ANY=[], 0x78}}], 0x1, 0x40805) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r11, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) 13m13.173826439s ago: executing program 3 (id=143): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000baf9875462b22089155f13cbf6a67cf685ee86c7387a244fe0bc51edac2b8829c226df55e42596976848", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000010, 0x13, r0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r1, &(0x7f0000000400)="d2817fa47d6490efbc809f2a", 0xc) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1c02, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x80000002}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000100)=0x7) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) socket$inet6(0xa, 0x5, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0d, &(0x7f0000000040)) socket$inet6(0xa, 0x3, 0x88) r7 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r8) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0xb}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r8, 0x4004550e, 0x0) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) 13m10.865976553s ago: executing program 3 (id=153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000540)=[@code={0x1, 0x94, {"66baf80cb83053c480ef66bafc0ced66baf80cb8122ca188ef66bafc0c66b855ec66ef0f01c3670f21948fa91002b300000000f0219c7467000000c74424000a000000c744240200000000c7442406000000000f011c240fc79d2c000000b99a020000b8d8000000ba000000000f3066baf80cb880319e81ef66bafc0c66b8be0066ef"}}, @uexit={0x0, 0x18, 0x6d1768b}, @uexit={0x0, 0x18, 0x15}, @code={0x1, 0x53, {"67420f1c02660f3882950b00000080c90d0f01c20f200366baf80cb80a55298def66bafc0c66edf080619fa3430f06440f20c0350a000000440f22c066440fc77741"}}, @uexit={0x0, 0x18, 0xf2a}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x52, {"3647dd90020000000f01d14a0fc76a1db805000000b9000000000f01c1673e410f01cfc4a17d29f6660f38388600380000c4e27d39fa460f01c9f746009bf40000"}}, @code={0x1, 0x5c, {"360f204166bad00466edb8010000000f01c1c4011cc2e90766baf80cb8ea231e8eef66bafc0cb000eec481f97fbe68cf000067440f30c4416812ed26f0f790794a16c1400fc7b600800000"}}, @uexit={0x0, 0x18, 0xfffffffffffffff7}, @uexit={0x0, 0x18, 0xf6}, @code={0x1, 0x55, {"c4627d0eb8b1000000430f9066606766460fd628460fbf76a96726660f3882916b8900002e0f01c96467450f9782fa000000400f01df430f005e0dc4814deb91b205baf9"}}, @code={0x1, 0x42, {"f30f1b3766bad004b00deec461e5d4fa260f2080410f01343a0f01df260f062e0f0130c461e55f1d00000000c462fd3113"}}, @uexit={0x0, 0x18, 0x1000000000000000}, @uexit={0x0, 0x18, 0x81}, @code={0x1, 0x7e, {"c74424009a000000c744240204000000ff1c24440f20c03505000000440f22c03e2e0feb28c744240000000000c74424020a000000c7442406000000000f011424c442793042836566460fc7323640d35b0c66bad10466b80c0066ef66ba4200b0f7ee66baa000b80e000000ef"}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x8000}, @code={0x1, 0x54, {"b9a30a00000f320f1ee445f4450f7875f13e0f0fe0a7c4e22991ac5201000000652e66420f38811b3666410f38358a06000000c441e8c29f000000000bf30fc7746843"}}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @code={0x1, 0x4e, {"470f01c444f48f486097658d3036660f3a08ea0065450f01c366b81d000f00d066baf80cb8d194a784ef66bafc0cb000ee36400fae210f9078060f20c0"}}, @code={0x1, 0x4f, {"c4227d5ab43d3bb400000f01cbc44119f5d0460f01f0b9800000c00f3235000800000f300f01cbb9840500000f32660f3835557146da3366b821000f00d8"}}, @uexit={0x0, 0x18, 0x9}, @code={0x1, 0x74, {"66b821010f00d066b80b000f00d0f466baf80cb874c15085ef66bafc0ced673ef2460f598901000000b9ec0b0000b80ff5f437bab79f8e5b0f300f20e035000001000f22e00f23adc74424002b010000c744240200000100ff2c24b8010000000f01c1"}}, @code={0x1, 0x64, {"66bad10466ed0f01df0f011e400f20dfedc74424001acd0000c744240259ff0000c7442406000000000f01142466baf80cb86c689885ef66bafc0ced470fa319f30f0966baf80cb876d1498def66bafc0c66ed"}}, @uexit={0x0, 0x18, 0xdcc4}, @uexit={0x0, 0x18, 0x67}, @code={0x1, 0x6e, {"0f01c426660f017ebb400f06c744240072000000c7442402ff000000ff2c2466440fc7b6008000002e2e2664410f3066b838010f00d8c481a456d448b805000100000000000f23d80f21f835800000600f23f8643e460fc7b79de315e6"}}, @uexit={0x0, 0x18, 0x1}], 0x649}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xfff}, @IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x4c}}, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x90}}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) 13m9.130384882s ago: executing program 3 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0x20005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x200000000000}, 0x18) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r8, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r6, 0x3b8d, &(0x7f0000000c40)={0x20, r10, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r6, @ANYBLOB="000000000000000074080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008a18efc982ca2a89cef66d9000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r11, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x12, r12, 0x0, r11}) 13m6.669515028s ago: executing program 3 (id=161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xffffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000011c0)={{}, "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"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0xa2, 0xcff, 0x8, 0x7, 0x1, "4462811f5249ceec"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e24, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e23, @multicast2}}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x820061, &(0x7f0000000180)={[{@size={'size', 0x3d, [0x25]}}]}) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x9}, 0x1c) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)={0x1e0, 0x7, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x174, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x800}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xbe}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x50, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x11}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0xe}]}}}, {0x58, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x90}, 0xc010) read(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x21, &(0x7f0000000000)=0x1, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) 13m5.733809706s ago: executing program 3 (id=168): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0x581}], 0x1, 0x0, 0x0, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0xe, 0x7}, &(0x7f0000000140)=0x6, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x22, 0xfffffffffffffffa}}], 0x58, 0x8004}, 0x0) memfd_create(&(0x7f0000000180)=']+\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x83) readahead(r7, 0x7fffffff, 0x10000) 13m3.664387813s ago: executing program 32 (id=168): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0x581}], 0x1, 0x0, 0x0, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0xe, 0x7}, &(0x7f0000000140)=0x6, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x22, 0xfffffffffffffffa}}], 0x58, 0x8004}, 0x0) memfd_create(&(0x7f0000000180)=']+\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x83) readahead(r7, 0x7fffffff, 0x10000) 12m35.660124694s ago: executing program 5 (id=251): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r1, 0x121500) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000080)=ANY=[]) 12m34.20187742s ago: executing program 5 (id=257): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 12m33.933950309s ago: executing program 5 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) 12m33.628177064s ago: executing program 5 (id=262): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() userfaultfd(0x801) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x90, 0x30, 0xb, 0x1000005, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x78, 0x1, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x40}, @TCA_CT_LABELS={0x14, 0x7, "e1ff0f000007000000000000006b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1c, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r7, &(0x7f0000000340), 0x0}, 0x20) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800003fecf200", 0x16, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000000)='.dead\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', &(0x7f00000001c0), 0x2209c01, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000000380)=""/141, 0x8d) 12m29.014322169s ago: executing program 5 (id=274): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0xadc) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_getnexthop={0x18, 0x6a, 0x1, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x2}}, 0x18}, 0x1, 0x0, 0x0, 0x4040891}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0xa, r5, 0x0, r1}) 12m19.333935864s ago: executing program 5 (id=293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1ffffec6, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x218800, 0x0) 12m18.295216233s ago: executing program 33 (id=293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1ffffec6, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x218800, 0x0) 10m0.300332964s ago: executing program 1 (id=713): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x2b, 0x1, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='qdisc_reset\x00', r0, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000580), 0x1, 0x101000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x30, 0x2e, 0xcdbe01d79ea30125]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 9m59.043123932s ago: executing program 1 (id=719): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x2000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="9e44f5ffffff00ff"], &(0x7f0000000440)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40046f41, &(0x7f0000000440)=0x1f) 9m57.251080466s ago: executing program 1 (id=725): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x2b, 0x1, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='qdisc_reset\x00', r0, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000580), 0x1, 0x101000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x30, 0x2e, 0xcdbe01d79ea30125]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 9m56.235030603s ago: executing program 1 (id=731): syz_init_net_socket$llc(0x1a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1, 0x803, 0x5bd) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000280)={0x3}) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='coda\x00', 0x240010, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) acct(&(0x7f0000000240)='./file0\x00') move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = getpid() bind$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) r6 = mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_getsetattr(r6, 0x0, &(0x7f0000000180)) r7 = syz_pidfd_open(r5, 0x0) setns(r7, 0x24020000) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) umount2(&(0x7f0000000040)='.\x00', 0x2) 9m54.46007291s ago: executing program 1 (id=734): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) (fail_nth: 2) 9m53.294091702s ago: executing program 1 (id=739): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) read(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214050, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) syz_open_dev$midi(&(0x7f00000005c0), 0x8, 0x20180) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 9m52.179637673s ago: executing program 34 (id=739): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) read(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214050, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) syz_open_dev$midi(&(0x7f00000005c0), 0x8, 0x20180) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 14.354598975s ago: executing program 7 (id=2613): timerfd_create(0x4, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x4000000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x800) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f00000003c0)=""/240) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x38, 0x301, 0x70bd25, 0x25dbdbfa, {0x4}}, 0x14}}, 0x0) 10.823556304s ago: executing program 7 (id=2627): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001dc0)=@delchain={0x438, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x408, 0x2, [@TCA_BASIC_EMATCHES={0x104, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x38, 0x1, 0x0, 0x0, {{0x27, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="777a85f15b05e6e67321", @TCF_META_TYPE_VAR='J', @TCF_META_TYPE_VAR="a9cf6640"]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x8}, {0x4, 0x3, 0x40, 0xad4a}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xb213, 0x8, 0xd4}, {0x2, 0x6, 0x5}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x140, 0x7, 0x3}, {{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0x4e69}, {0xffffffffffffffff, 0x1, 0x6}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x100, 0x1, 0x61f8}, {0x6d413ace, 0x6, 0xe5b, 0x3, 0x5, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x200}, {0x2, 0x2, 0xc}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x8}, {0x3, 0x2, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x2b66}, {0x4, 0x80000001, 0xffd0, 0x6, 0xc, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x859}}]}, @TCA_BASIC_ACT={0x300, 0x3, [@m_nat={0x1f8, 0xa, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x695, 0x3, 0x6, 0x6, 0x2}, @dev={0xac, 0x14, 0x14, 0x39}, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x0, 0x3, 0xd71b, 0xe}, @multicast1, @loopback, 0x80}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x10000000, 0x0, 0x7}, @multicast1, @dev={0xac, 0x14, 0x14, 0x42}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x5, 0x3, 0x120000}, @multicast1, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80, 0x1ff, 0xffffffffffffffff, 0xfffff8cf, 0xfff80000}, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x3c}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xdc, 0x61, 0x5, 0x7ff, 0x5}, @local, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5e, 0x61, 0x20000000, 0x3a0}, @empty, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffffff, 0x1}}]}, {0xb6, 0x6, "f17d04ef52cb3083964a2bdfe6d5ee61e70d2b9c40373ff7d65b9f5fb6481695f210362e004cf762ea22acc3b22892b54d4f3b120b2d85f6e1da3fa9d046a396e98222a6534686ce9c9d996a04c9359a77225d570b5c8e197f82e5c403b93c3eabb78c0666df925cfe2ba3f57353237d3b88beb1b5652f73541980637a937b6e005d06ac8c468b4e729edb5c3e8856921ed74e8d17aca7af82a823ff8aa50dd579cd7830e3213b22b11a424e244a03cc1f9c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x104, 0x1f, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x80000001, 0x9, 0x3, 0xa, 0x6}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x8, 0x7, 0x7, 0xfffffc00}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x7, 0x2, 0x9, 0x6144}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2ad}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x53, 0x6, "53d4419a4549e29787c923385ba908d41f951002e3d48c11216351b62907a2e8dadbc48475a2e196e2d1e7e0e649accf09ceaff734cf57b0c9b75c8cd125bc9de6b350d617b725fcf94fe91a13fddb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x438}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000001d80), &(0x7f0000001d40)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000300), 0x0}, 0x20) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = syz_open_procfs$userns(0x0, &(0x7f0000003640)) fsetxattr$system_posix_acl(r6, &(0x7f0000003680)='system.posix_acl_default\x00', &(0x7f00000057c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {}, {0x20, 0x3}}, 0x24, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000001c00)={0x48, r9, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xe4bc7e0516638f4c}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000001bc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x2c, r10, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c4}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022200000005717321748"], 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x52, &(0x7f00000006c0)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfffd, 0x0, 0x8}}}}}}}, 0x0) 10.646946792s ago: executing program 0 (id=2628): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) (async, rerun: 32) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) (rerun: 32) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000a80), 0x2, 0x4aa, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8000}, 0x10, 0x0, r4}, 0x94) pwritev(r4, &(0x7f00000001c0)=[{&(0x7f0000000180)="81ef65de52865ccb90b81e6441ef2cfc77fdf316f3ae4859a6", 0x19}], 0x1, 0xa, 0x7f) 10.041891198s ago: executing program 0 (id=2630): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000740)={0xfffffffc, {{0xa, 0x4e23, 0x100, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r1 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x12, r7}) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) openat$cgroup(r4, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, 0x0, &(0x7f0000000000)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) unshare(0x20000400) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) write$cgroup_freezer_state(r9, &(0x7f0000000080)='FROZEN\x00', 0x7) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x57d30d9515bfb297}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c004) 8.77387275s ago: executing program 0 (id=2633): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007d00000018150000", @ANYRES32=r4, @ANYBLOB="df06e083263642010e27bb59bf5a75266e85e0597525fd3df04377c7fa1dbcd13f2e7f245587069fc874ace16c2c185cf6c39d1b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000004c0)="e0b95416f85df477c90a3721677b", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x101, 0x80) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206430000000000000000000000000005000400000000000900020073797a31000000000c0007800800120000000000050005000200000005000100060000000d000300686173683a6e657400"], 0x54}, 0x1, 0x0, 0x0, 0x844}, 0x20040080) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000000500)={0x5, 0x3, "5a639030fc94d4c21f69f1919c4d3068fba6077b9eb4f4276c2c517dba3952d1", 0x1, 0x1, 0x8, 0x50, 0x280}) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r10, @in6={{0xa, 0x0, 0x5, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f00000000c0)={0x80, 0x4, 0xed, 0x80, "09904c676055b1af73b142a0ebab792dc922e7f7508e4ef7ecc3bb4075be830a"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000200000000000300000000030000000200000020000000000000000000000105000000200000000000"], 0x0, 0x42}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0x35fe7901]}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @loopback, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000100), 0xfffffd9d) syz_kvm_setup_cpu$x86(r2, r11, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b805000000b98ea33aac0f01d966baf80cb890ef7f8def66bafc0cb85feb2b8fef66baf80cb88cbd668bef66bafc0cedb805000000b9007000000f01d90f01706566b869000f00d8c7442400e7b20000c744240200500000c7442406000000000f011c2466b802010f00d866baf80cb8e0964888ef66bafc0cb800680000ef9a6c750a78d000", 0x86}], 0x1, 0x2, &(0x7f0000000340)=[@dstype3={0x7, 0x8}, @flags={0x3, 0x1}], 0x2) sendfile(r0, r11, 0x0, 0x1000004) 8.735584988s ago: executing program 6 (id=2634): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000f00), 0x204200, 0x0) getdents(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05040800d3fc030810004788031c09102f28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8864, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYRES32=r4], 0x278}, 0x1, 0x0, 0x0, 0xc000}, 0x40055) 8.573861394s ago: executing program 6 (id=2636): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) 8.198848814s ago: executing program 6 (id=2638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) fcntl$addseals(r0, 0x409, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r1 = syz_usb_connect(0x4, 0x3f, &(0x7f00000007c0)=ANY=[], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x1000, &(0x7f0000001000/0x1000)=nil}) syz_usb_connect(0x3, 0x751, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x3, 0x49, 0x5c, 0x0, 0x19d2, 0xff5f, 0x8761, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73f, 0x4, 0x3, 0x0, 0x40, 0x5, [{{0x9, 0x4, 0xac, 0x1, 0x0, 0xff, 0xff, 0xff, 0x11, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "49a1"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xd, 0xfffd, 0xd, 0x1}, [@country_functional={0xc, 0x24, 0x7, 0x0, 0xff01, [0xf, 0x7, 0x5]}, @country_functional={0xe, 0x24, 0x7, 0x0, 0x8001, [0x5, 0x3, 0x1000, 0x7fff]}]}]}}, {{0x9, 0x4, 0x7c, 0x5, 0x1, 0xab, 0x20, 0xc7, 0x8, [], [{{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x20, 0x9, 0x7}}]}}, {{0x9, 0x4, 0x1, 0xff, 0xc, 0x2, 0x8a, 0x25, 0x0, [@generic={0x65, 0x30, "0ca6d3b9dcf929badf62e037fbcf946410b66a595be46223738ad8167b511ee0dc493bb17a62f3ead0d096a9b04ff84e2070c18dbdff7de5a558e45839653ac851c5ea7bd84ec7fd6b35e2d3d72c03d2fd849b0e8c4801ff689b3523ff6f2298278af7"}], [{{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x2, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x60, 0x1, 0x7, [@generic={0x6e, 0x9, "e95ac92771b944a0616012c58bbecce9227d314b0ac67e89720d648fb29ff42076bdff4bf8459af6ec961f0c352d1eec17350de5cbb814181a1f94f5695737e955d5c82f2d14851e3958bf335227c59ab3fca4e83ce07678a12185c84528f45fdad1a90a1281eecbd0511e56"}, @uac_iso={0x7, 0x25, 0x1, 0x5, 0x6, 0x9}]}}, {{0x9, 0x5, 0x8c, 0x0, 0x40, 0x81, 0xb6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x81, 0x5, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xa, 0x51, 0x5}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x8, 0x0, 0x3, [@generic={0xe, 0x6, "aa61e4aa93fb7a20a5c1b741"}, @generic={0xc7, 0x9, "e6f73f5ffe442527ef1e091c372bcf72e2f5f6d8a9d2718761fddc2e9d644c7742ae08cf4cb121992db7e0fef002f4efd9343bf3e245b2912ffca29ec6b873627126154da39f384e9db30f9a1473a621fc5bfc2181f7bac209475f5676b760d856ccc519945ea3faaa8bbb1e4c496535b92d91119db0761b2e18fbf8a2fe9e08a76936bbf6a4e2a58137b9ef0a901592eee2f76b8d6f00ab82d5c3c2631137c180ffe2e536190045df71e64f34a44da4230f58c7c1ea3b5bbf4eeaa3ce69298986d51d4647"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x1, 0x7, 0x8, [@generic={0x77, 0x20, "9a7b30c9e442e2398a880fdbde8f120861d049491b9ce1d4466fa19507d873489703e141deaf1eb11843e5878701e494da0315f1f01440009f285be495c58d8ecd9284c33541f90114e6a70e304cc4152b0eee0b24e61a07acf75eccb1c4f20cf5fda2c8373956436129be72a65ce762c2da0d591e"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0xda6f}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x1, 0x5, 0x45, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x21}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0x2, 0xfc, 0x27}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x8, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x3}]}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x0, 0x6, 0xff, [@generic={0xf3, 0xd, "4d7404d24ad668169efa270c60bb5018d5cde9ff53e78ba22a506e7610b882079f06c0c863396a50d6c7ae7a4c8188bf779855878750ad91af781e8d914cf04e147aed0b737fd15abfbdad09cbe259e9b3cf2388bc1c572b2cc7d1088a12efef77ebe84f511a92014309b4bb3460f6abb410b532d08738750bda6677816e26ec553515507c01cc2411d3ddd060a035f93537d5814c4f25db0aa1a8852fce47101e96fcc065d7d6aac5f19469fb395f179dc35e2c434197b45a633f0635f7a74d08463da772a864c143438bb8e2e8c27cc1655eb768ff1421078d4b9c02817d6b0f5c80ee12e9cb640cd40443e2bcafd75f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0xfff}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x3d, 0x54, 0x40, [@generic={0xa8, 0x8, "42c31e5fb15b8d6038de28b1996c0fd8af75445322a3823c048f14191567571496e74e8b3f8e8e179be2b4e40930cb4da4ef41f3e0f79537d5097e98e0ad1ecb56f34fffb15dfd973001f771dff0422e955d6d9c4085db8dc8308e370dc0d8e45c34b65248e89b4b35d00dd258acc09beebd1037cb9be90a3f172835842269784299c8b392ef7fd82329305b97c8053dd6065e3f8b31c64fbbe262087c6a4f59e1295c435396"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9}]}}]}}, {{0x9, 0x4, 0xa, 0x0, 0x7, 0x8c, 0xdb, 0x76, 0xff, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "cba87d0f"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd4, 0xffff, 0x7f}, {0x6, 0x24, 0x1a, 0x6, 0x28}, [@mdlm_detail={0x91, 0x24, 0x13, 0x0, "1b0623465808876a861cc34e563ff0981b0fc01edc4aa3d910f1ea66ab4649e78a7994e763eccf6db3900e5bebfbdea7ec68ccb438f1bb6d77f45eb70399799dd6dcca46fc19176ea21ea2ca4b33e6bc0ec8577ff82f9ed3de0d7cfb2d8d7529a2421d9aaa8c9132a419e2c01e2a4184fe05f4968f7504ecc7b58e19c1de8ad8812bff77869eb56bbb4c4d84e7"}, @country_functional={0xe, 0x24, 0x7, 0x8, 0xa, [0x98bd, 0x5, 0x5, 0x1000]}, @dmm={0x7, 0x24, 0x14, 0x101, 0x1}, @mdlm_detail={0x5e, 0x24, 0x13, 0x3, "6c5078b7e9e12c6f5ba8c17b9c14310d3f316a0d0b9ca2736054fff4d1b6e4c90c55b7c0f7c03821d8d117a48b631dca30d7c7af754d58f37904ef92d1ecf9d04b895dcb55d2cfa11898fba836b648c63e1e8ad334c4ea3b13d5"}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x0, 0x2, 0xa}]}], [{{0x9, 0x5, 0x1, 0x10, 0x10, 0x3, 0x5, 0x8, [@generic={0x38, 0x23, "5931c07e5426d9931e9b3779f0ec08084d4922619e9eb0ca7ab9b75b330102a1281af3a5214ead41dc67b2e9fdc75ac2a8dc08a86e11"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0xa, 0x9a, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xfff}, @generic={0x91, 0x11, "ec111b9d46506a70f0656fbeb10e55cf49021a8cafe9416a7cd1ab487ed1f1d634dc364b1538c94c96ce68c31b3661fd4e213423ee7e14044b56477ab98ffbb23f96d519c8540b075b773e027bcd0fde0d829e8310ded5fc8bce60c4cfd7e296025ec6d5e7ea2040b07ef031c26a7e8c562f5946c45443113ad39078447ca08d5596a4c0f10cd7aa97ac31f6d0c3a0"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x3, 0x81, 0xa0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf3, 0x3}]}}, {{0x9, 0x5, 0x5, 0x4, 0x20, 0xb, 0xff, 0xf9}}, {{0x9, 0x5, 0x4, 0x0, 0x28, 0x5, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xfffa}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xffff}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x7, 0x3, 0x0, [@generic={0x21, 0x8, "09d223600d42ee69720079d58d0fe9352f1492ee8e22efeefcc7c8b628fb29"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0xa, 0x4, 0x4}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x1, 0x4, 0x1, 0x40, 0xfc}, 0x94, &(0x7f0000000080)={0x5, 0xf, 0x94, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x40, 0xf00f, 0xb4, [0xff30, 0x60, 0xc000, 0xffc0c0, 0xc00f]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0x9, 0xe}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x1, 0x6, 0x518, 0x6c}, @generic={0x5d, 0x10, 0x3, "0f7229e034badc706a3afdce9a4485e3dcf1a9ae9ed83d324488d444a8d97722a7d3fe5ab33009418c8b4be7fa7a92b48a56a6432a2c1389975991d666f18a9c479b81398fd093a8de9d418da102f541a10f7afa1a4feb760952"}]}, 0x6, [{0x30, &(0x7f0000000140)=@string={0x30, 0x3, "d6be9f1e28410bf45a38e94169565f55ba12756f46cd60e67dc455a82fb32dbad35f3181e1c06e537586189c8962"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xd}}, {0xf0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="f0030c3adc7de812e374169825afae81880f7fbed712d837c3593fcd7f7d53a14589e7d248e3ca5e29e9795f5812ba7d9d5c5b1e2e5056207ed18dd68761e72e0d60eee428de676fd790ad8660f65b98b3cd1adefa8f8dcb6d43a8fd6b09c78e6e3599dd93d44daeabbd28f6d93870873245309960a2392a460e78525239c5a92ef6990e0283b33fab1a5b8aca24fbb2afee7ad5a84e1eb1665007a9a73556af4fd2cfb15431d77be1df3814eba9898aeaac90b695e4d0c3fe68f6e218a29e057ccf76381ccf90e65b975f1d37c8d77e172e72209295c7db4e236dcb1a6330d971b73818bb3266f426"]}, {0x19, &(0x7f0000000200)=@string={0x19, 0x3, "5500ac4e82ecf623e7233c8358ce0021e1fafa43fa2f96"}}, {0x31, &(0x7f0000000240)=@string={0x31, 0x3, "00e6b6f5d68d8ffec43d7a7b41d830faa5e4c1af9c42c36e5086be960b3e4354dc32c6ac2f8982fd20137ed2829b61"}}]}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000002c0)={0x18, &(0x7f0000000300)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000200)) ioctl$FS_IOC_GETVERSION(r4, 0x40025b0c, &(0x7f0000000000)) 7.494822592s ago: executing program 7 (id=2639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000000)=0x4007, 0x4) add_key$user(&(0x7f0000000340), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000980)="592892d12dd7a4cdc9f07acdd2b98fe9692444f181693a6512c4717fab9a871fb846ccbbbfad368416a6205498ddf65c871b285ad83d1600453a51dfe3812a7f362cbcd8efd5b38b7ff0f6b423dfbf5630f9ffd7674420a837a52f", 0x5b, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000001980)="567c97f7eda6db6ecbbdceec0269b318d50b1ce2a9c5a5c42e8b74333258374e2ff517536616c87ade8bb0f1efdccf6b0f290e4c20d9eb34a71afd3655071e226e9749c682792a94469ad82c3dff4b25749c1e3b3c90b768c22645eab914959e9f71cbdd59756c2def1f5e8a4154cbeff3", 0x71, 0xfffffffffffffffa) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 7.147923412s ago: executing program 0 (id=2641): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x40, 0xa, 0x4, "5193b958"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6.60452063s ago: executing program 7 (id=2643): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800014000000002080002400000000905008300000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1, 0x80000001, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r4 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x3, 0x1b04, 0x0, 0x3ff, 0x9, 0x7, 0xe, 0x2d, 0xbf0, 0x3, 0x8, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 6.233262847s ago: executing program 4 (id=2644): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x6, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) readv(r0, &(0x7f0000001540)=[{&(0x7f0000004580)=""/4107, 0x100b}], 0x1) (fail_nth: 3) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.146109279s ago: executing program 2 (id=2645): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4000) r1 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000806000/0x4000)=nil) setxattr$incfs_metadata(0x0, &(0x7f0000000180), 0x0, 0x0, 0x2) ptrace(0x10, r1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000ffffffff0007000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00"/144]}, 0x108) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 6.051457039s ago: executing program 2 (id=2646): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@delchain={0x3708, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x36cc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x36ac, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_police={0x3594, 0x2, 0x0, 0x0, {{0xb}, {0x3550, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x1, 0xf5d, 0x4c94efaf, 0xfffff325, {0x7, 0x0, 0xff, 0x7, 0x7, 0x1}, {0x5, 0x1, 0xd7, 0x6, 0xffff, 0xa}, 0x7ff, 0x5d1, 0x8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x4e9, 0x7, 0xfffffff9, 0x81, 0x800, 0x1, 0x8, 0x0, 0x9, 0x0, 0x4, 0x7f, 0x8872, 0x40, 0xb0, 0x8, 0xc054, 0x0, 0x2, 0x1ff, 0xa39f, 0x7, 0x9, 0x5, 0xa, 0xf, 0x36f, 0x80000000, 0x3, 0xc12, 0x1, 0x7, 0xf902, 0x7, 0x8, 0x1, 0x3, 0x7f, 0x2, 0x3, 0x4, 0x5, 0x4, 0x101, 0x0, 0x3, 0x203746a, 0xffffffff, 0x1, 0x1ff, 0x2, 0x7c5, 0x8, 0x0, 0x5, 0xee, 0xffff38ac, 0x4, 0x6, 0x2, 0x6, 0x3, 0x3, 0x3, 0x4, 0xca3, 0xf, 0x9, 0x6, 0x1, 0x1, 0xfd, 0x4, 0x0, 0xfff, 0x401, 0x0, 0x8, 0xca3, 0x4, 0x401, 0x9, 0x4, 0xfff, 0x3, 0x7fffffff, 0x5, 0x9, 0x10000, 0x7, 0x6, 0x6, 0x6c2a3326, 0x28, 0xffffff15, 0x0, 0x8000, 0xec5, 0x6, 0xb, 0xda, 0x0, 0x1, 0x2, 0x8, 0x401, 0xc4, 0xba94, 0xbff6, 0x4, 0x101, 0xfffffffc, 0x9, 0xfffffff7, 0xc4, 0x8a1, 0x28cc, 0xf, 0x2, 0x1c, 0x2, 0x9, 0x2, 0x1, 0x0, 0x0, 0x9, 0x5, 0x5, 0xfffffff7, 0x5, 0x9d6b, 0x9, 0x2, 0x4, 0xa0f, 0xd9, 0x5, 0x5f79, 0x9, 0x7fff, 0x40, 0x80000001, 0x7, 0x5, 0x401, 0x6, 0x0, 0x1f6, 0x2, 0x40, 0x100, 0x2, 0x8, 0x400, 0x2, 0x10000, 0x40, 0x800, 0x2, 0x9f46, 0x8, 0x7, 0x7, 0x0, 0x2, 0xe4f8, 0x2, 0x6, 0x36, 0x2, 0x100, 0x9, 0x9, 0xf, 0x5, 0x2, 0x3, 0x9, 0x100, 0x8, 0xffffffff, 0x7, 0x4195, 0xff, 0x8, 0x6, 0x8, 0x8, 0x7, 0x3, 0x1, 0x5df0, 0x4, 0x1, 0x800, 0x5, 0x9, 0x6, 0x1, 0xfffff801, 0x3, 0x7, 0x3ff, 0x6, 0x20000000, 0x1, 0x1, 0x8, 0x8001, 0x7, 0x40, 0x0, 0x7fff, 0x0, 0x7, 0xfffffffb, 0x7f, 0x6, 0x6, 0x7, 0x0, 0x9, 0x0, 0x3ff, 0x3, 0x5, 0x800, 0xffffffff, 0x6, 0xfffff58a, 0x4, 0x4, 0x7, 0x2, 0xa3b, 0xffff, 0x101, 0xffffffa9, 0x3, 0xf, 0x200, 0x8, 0x10000, 0xd501, 0x4, 0xa8, 0xd, 0x1, 0x2, 0x800, 0xfffffffb, 0xd479, 0x5, 0x6, 0xeba]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x101, 0x4, 0xcf, 0x3, 0x2, 0x6d, 0xe9f, 0x3, 0x1b04, 0x2, 0x8001, 0x8, 0x1, 0x10001, 0x0, 0x1, 0x1000, 0x480000, 0x2, 0x1, 0x8000, 0x4, 0x10001, 0x90bb, 0xfe3, 0x8, 0x3, 0xc97, 0xa, 0x45, 0x3, 0xed, 0xe6, 0x4, 0x7, 0x9, 0xa3, 0x3, 0x5, 0x1, 0x2, 0x7ff, 0x3, 0x5, 0xfff, 0xffffff81, 0x4, 0xad, 0x100, 0xff, 0x77, 0x0, 0x8, 0x6, 0x8, 0x5, 0x917, 0x6, 0xf, 0x0, 0x7, 0x6ff2442d, 0x10001, 0x800, 0x1ff, 0x9, 0x1, 0x5, 0x0, 0xfffffffe, 0x9, 0x1, 0x1fe, 0x3, 0xea8, 0xed0, 0x0, 0x5, 0x3, 0x7fffffff, 0x1, 0x10001, 0xc, 0x0, 0xd, 0x4, 0x2, 0x1, 0xb, 0x6, 0x100, 0xffff, 0xce, 0x1, 0x7ff, 0x6, 0x7, 0x9, 0x6, 0x2, 0xffff, 0x7, 0x80000001, 0x7f, 0x5, 0x2, 0x5, 0xfffffe24, 0x5e, 0x1, 0x0, 0x5, 0xffffffff, 0x5, 0xffff, 0x1, 0xf, 0x2, 0x8d, 0x7fff, 0xc5c, 0x2, 0x5674, 0x4, 0x5, 0x5, 0x8, 0xa, 0x8, 0x8a, 0xfe79, 0x6, 0x3, 0x31a4, 0x7, 0x4, 0xfffffc01, 0x1, 0x2, 0x101, 0x800, 0x7, 0x5, 0xc0e, 0x80, 0xfffffffe, 0x5, 0xfffffff7, 0x3, 0x4, 0x0, 0x8, 0x3b, 0x1, 0x100, 0xfffffff1, 0x4, 0x3e55ce1f, 0x401, 0x80, 0x1, 0x8, 0x0, 0xfd, 0x40, 0x800, 0x5, 0xf, 0x3e, 0x80000000, 0x4, 0x5, 0xbbc1, 0x1, 0x10, 0x400, 0x5058, 0xc, 0x9, 0xffffd8a5, 0x1, 0xc10, 0x9, 0x9, 0x401, 0x7, 0x6, 0x800, 0x2, 0x0, 0x6, 0x9, 0x6, 0xb, 0x15a2, 0xfffffe01, 0xa8, 0x3, 0x4, 0xfffffff8, 0x4, 0xec12, 0x8, 0x10000, 0x3, 0x10000, 0x7, 0x5, 0x0, 0x3, 0x6, 0xfffffff8, 0x6, 0x2, 0x611d, 0x401, 0x7, 0xfb6, 0x6, 0xa0, 0x5ab7, 0x2, 0x3, 0x10, 0x5, 0x5, 0x3, 0x7, 0x8, 0x2, 0xffffffff, 0xa, 0xfffffffa, 0x97, 0x1, 0x9, 0xe, 0x7, 0x4, 0x1, 0x401, 0x5, 0x6, 0x0, 0x5, 0x2, 0x10001, 0x1, 0xffff, 0xfffffffa, 0x0, 0x4, 0x76, 0x0, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x697, 0xa, 0x7, 0x828, 0x9, 0x5, 0x84, 0x5, 0x0, 0x80, 0x7f, 0xe1, 0x0, 0x4, 0xb68, 0xd, 0x8, 0x1, 0x0, 0x7000000, 0x3, 0x3, 0x6, 0x10001, 0x9, 0x7, 0xfffffe01, 0x1, 0x8, 0x38, 0x7, 0x6, 0x0, 0x1, 0x8, 0xf, 0x1, 0x10001, 0x9, 0xea, 0x2, 0x6, 0x9, 0x4, 0x6, 0x0, 0x1, 0x0, 0x100, 0x2, 0x200, 0xffffffff, 0xa92f, 0x505, 0xf0, 0xe, 0x4, 0x3ff, 0x3, 0xb, 0x691, 0x9e, 0xd, 0x3, 0x2, 0x7, 0x0, 0xffff10c9, 0x91b, 0x2, 0xe, 0xfffffff6, 0xfffffff8, 0x41, 0x6, 0x1, 0x8000, 0x5, 0x1, 0xc1, 0x5, 0x10, 0x4, 0x3, 0x5cc8b0a8, 0x8, 0x4, 0x800, 0x0, 0x7fffffff, 0x6, 0xfffeffff, 0x2f63, 0x7, 0x2, 0x5, 0x97df, 0x400, 0x5, 0x80000000, 0x7, 0xbe, 0x9, 0x100, 0x4, 0x0, 0x200, 0x6, 0x8340, 0x400, 0x7, 0x6, 0xfe7, 0x0, 0x5, 0x40, 0x71, 0x7fffffff, 0x10000, 0x8e, 0x830f, 0x0, 0x0, 0x2, 0x3, 0x6a93, 0x9340, 0x6da, 0x2, 0x0, 0x1, 0x0, 0xffff, 0x2, 0x2, 0x101, 0x8, 0xdf, 0x0, 0x1, 0x8, 0x3, 0x401, 0x5a, 0x38, 0xbdc7, 0x77, 0x9, 0x0, 0x821, 0x2, 0x0, 0x4, 0x3, 0x5, 0x3, 0x6, 0x7, 0xbf42, 0x8, 0x3, 0x10000, 0x992, 0x7, 0x7, 0x3, 0x7fff, 0x0, 0x73, 0x8, 0x0, 0xffff0e75, 0x5, 0x4, 0x11, 0x8, 0x1, 0x7, 0x6, 0xfffff1d1, 0x397, 0x2, 0x9b, 0x2, 0x2, 0x10000, 0x3, 0x6, 0x0, 0xf494, 0x0, 0x2, 0xfffffffa, 0x2ffd, 0x7, 0x5, 0x7, 0x400, 0x4, 0x3, 0x2, 0x8, 0x5, 0x5, 0x100, 0x6, 0x7, 0x81, 0x0, 0xfffffa22, 0x4, 0x1000, 0x80000000, 0x1, 0x7, 0xfffffffb, 0x6, 0x1, 0x2, 0x2, 0x7ff, 0x6, 0x9, 0x3, 0x7, 0x1, 0x7f, 0x40, 0x4, 0x3, 0x9, 0x1, 0x9, 0x4, 0x9, 0x101, 0x9, 0x2, 0x7, 0x1ff, 0x6, 0x7, 0x7, 0x7, 0x80000000, 0x0, 0x0, 0x3, 0x7f, 0x35e2, 0x3, 0x8, 0x5, 0x9, 0x10]}, @TCA_POLICE_RATE={0x404, 0x2, [0xa000000, 0xc, 0x101, 0x80000001, 0x4, 0x77, 0x7, 0xffffffff, 0x7, 0x57fa, 0x6, 0xa, 0x7ff, 0x101, 0x8, 0x8, 0x0, 0xc459, 0x0, 0x5, 0x5, 0x0, 0x6, 0x81, 0x1, 0x5, 0x5, 0xfffffff8, 0xfffffff7, 0x4, 0x8, 0x4, 0x7, 0x6, 0xffffffff, 0xfffffff3, 0xc, 0x3, 0x7, 0x81, 0x1, 0x361f, 0x6, 0xfffffffa, 0xacba, 0x7, 0x80000001, 0x200, 0x1, 0x0, 0x6, 0x2, 0xe, 0x1, 0x3, 0x9a, 0xbe176134, 0xfffffff0, 0x9, 0x0, 0xd76a, 0x1ff, 0x5, 0x2dd, 0x2, 0x9, 0x8, 0x8, 0x9, 0x53d, 0x0, 0xe2, 0x3, 0x9, 0xffffb32a, 0x2, 0x47, 0x8, 0x7760000, 0xd, 0x401, 0x7, 0xc, 0x9, 0x9, 0x9, 0xf, 0x1a, 0x5, 0xfffffffa, 0x200, 0x56f, 0xc8f, 0x5, 0x0, 0x1ff, 0x5, 0x9, 0x40, 0x6bb, 0x9d, 0x1, 0x1, 0x527f, 0xc, 0x4, 0x9ee8, 0x1, 0x2f, 0x8000, 0xef30, 0x1, 0xf2, 0x12, 0x1, 0x280000, 0x43d4, 0xcb85, 0x101, 0x1, 0xc, 0x5, 0x3, 0xfffffffc, 0x3, 0x289, 0x4, 0x0, 0x5, 0x0, 0x1, 0x4, 0x1ff, 0x7, 0x4, 0x2feb63ac, 0x6, 0x3ff, 0x81, 0x9, 0xb70b, 0x9, 0x7, 0x2, 0x1, 0x3, 0x7ff, 0x4b7407e, 0x8e, 0x5, 0x4, 0xff, 0x308, 0x200, 0x6, 0x2, 0x9, 0x0, 0x8, 0x4, 0x3, 0x95, 0x800, 0x4, 0x2, 0x1e0, 0x5, 0x5, 0x6, 0x8, 0x9, 0x3ff, 0x37, 0x1, 0x2, 0x0, 0x9, 0x623, 0x7, 0x8, 0x10001, 0x6, 0x8, 0x3, 0x5, 0x9b62, 0x100, 0x4, 0x8001, 0xffffffff, 0x6, 0x4ec, 0x101, 0xffffff00, 0x6, 0x4, 0x100, 0x80000001, 0x400, 0x4, 0x80000000, 0x5, 0x4, 0x3, 0x7, 0xab7, 0x1, 0x4, 0x80, 0x4, 0x80000000, 0x7fffffff, 0x1000, 0x5, 0x9, 0x5, 0x0, 0x10000, 0xfffffff7, 0x4, 0x0, 0x4, 0x6, 0x9, 0x40, 0x7, 0x0, 0xb, 0xffffffff, 0xc, 0x0, 0x8000, 0x3, 0x7fffffff, 0x1000, 0x7, 0x6, 0x81, 0xffffffff, 0x6, 0x401, 0x100, 0x1da, 0x7, 0x1000, 0x9, 0x7, 0x0, 0x762d, 0x8001, 0x10, 0xfffff800, 0x5, 0x2, 0x0, 0xfffffff9]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x8, 0x7f3, 0x100, 0x7, 0x3, 0xfffffff7, 0x80, 0x6, 0xf, 0x3, 0xc4, 0xfffff768, 0x80, 0x8, 0x0, 0x6, 0x4, 0x6, 0xfffffff8, 0x2, 0x3, 0x5, 0xc3b, 0x8, 0x1, 0x9, 0x1, 0x5, 0x6, 0x7, 0x4, 0x6, 0x81, 0x6, 0x1, 0x8, 0x10, 0x6, 0x6, 0x3, 0x100, 0xe, 0x6, 0xd292, 0x4, 0xfb2a, 0x0, 0x80000000, 0x1, 0x4, 0x9, 0x8, 0x80000001, 0x200, 0x800, 0x71, 0x8000, 0x7, 0x0, 0x8, 0x5, 0x8, 0x10000, 0x5, 0x0, 0x80000000, 0x9, 0x39c, 0xa19, 0x3, 0x8, 0x6, 0xea7, 0x0, 0x6, 0x0, 0x2, 0x7, 0x9, 0x1000, 0x6, 0x6, 0x49, 0x3, 0xe4, 0x7f, 0x10, 0x4, 0x3, 0x60000, 0x4f87, 0x5, 0xfb, 0xe, 0x3, 0x6, 0x100, 0x5, 0x5, 0x80000000, 0x10001, 0x6, 0x3, 0x84, 0x8, 0x14, 0xfffffff8, 0x101, 0x7, 0x3, 0xffff, 0xfffff001, 0x6, 0x6, 0x6e5, 0x3, 0x3, 0x8, 0x4, 0x7, 0x8, 0x7, 0x3, 0x2, 0x3ff, 0x3, 0x8, 0x1, 0x7779933e, 0x8, 0x2, 0x2, 0x3ff, 0x9, 0x9f, 0x4, 0x7, 0xffffffff, 0x1, 0x8, 0xa4b, 0x7, 0x8, 0x800, 0x0, 0x2, 0x5, 0x1, 0x9, 0x5, 0x1, 0x2, 0x3, 0x5, 0xe, 0x3000000, 0x17, 0x0, 0xffff, 0x1, 0x5, 0x7, 0xcba1, 0x8, 0x2, 0x80, 0x40, 0x6, 0x9, 0x1, 0x1, 0x4, 0x9e, 0x6, 0x200, 0x5, 0x96, 0xffffffff, 0x5, 0xf95b, 0x3, 0xfff, 0x1000, 0x9, 0x9, 0x1, 0x7, 0x9, 0x2, 0xb7, 0x5, 0x1, 0x7ff, 0x6, 0x919, 0x20, 0x10000, 0x1, 0x3, 0x200, 0xd, 0x9, 0x7, 0x9, 0xe, 0x2, 0x7, 0x1, 0xf, 0x7, 0xfffffffc, 0x4, 0x2, 0xffffc793, 0x7fffffff, 0xffff, 0x3, 0xc2, 0x2, 0x3, 0x4e3, 0x2, 0x80, 0x8, 0x9, 0x3ff, 0x0, 0x40, 0x5, 0x2, 0x101, 0x0, 0x2, 0xff, 0x9, 0x5, 0x2, 0x7, 0x3, 0xd25e, 0x9, 0xc984, 0x659a, 0x400, 0x3, 0x10, 0x1, 0x0, 0x5, 0xa, 0x800, 0x1, 0x14, 0x1, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x80000001, 0x2, 0x7, 0x40cb, 0x7, 0x9, 0x7f, 0x0, 0x3ff, 0x1ff, 0x226, 0x0, 0x40, 0x6, 0xfffffff8, 0x9, 0x7fbc, 0x0, 0x2, 0x4, 0x100, 0x2, 0xd, 0xffffffff, 0xfffffffe, 0x9, 0x7ff, 0x1528, 0x5, 0xc, 0x80, 0x7, 0x17bf73f9, 0x7, 0x8, 0x35c, 0x40, 0x7ff, 0x6, 0x5de, 0x100, 0x7ff, 0xab7, 0x6f27, 0x8, 0xfffffff8, 0x200, 0x5, 0xbc5, 0x7, 0x3, 0xc6, 0x74, 0x0, 0x5, 0x8, 0x1, 0x80000001, 0x4, 0x8, 0x6, 0x200, 0x8, 0x5, 0x2, 0x5, 0x4, 0x1, 0x8000, 0x29a4, 0x4, 0x6, 0x2, 0x7, 0x6, 0x40, 0x10, 0x5, 0x7, 0x4, 0x7fff, 0x9, 0xd, 0x10001, 0x8, 0xf, 0x6, 0xffffffdf, 0xfffff801, 0x4000000, 0x8, 0x3, 0x2, 0x9, 0x6, 0x80, 0x1, 0x7f, 0xfffffffd, 0x7, 0x100, 0x6, 0x8000, 0x9, 0x5, 0x7, 0xffff60fc, 0x2, 0x7, 0xffffffa5, 0x6, 0x81, 0x4, 0x1, 0x0, 0x8, 0x3, 0x3fb3, 0xfe4, 0x1200, 0x6, 0x0, 0x0, 0x0, 0x200, 0x7, 0x0, 0xdd, 0x8e, 0x4, 0x3, 0x5, 0x7, 0x9e5f, 0x20a4a536, 0xe3, 0x4, 0x7, 0x1, 0x5, 0xfffffff7, 0x1000, 0x5e97, 0xfdda, 0x81, 0x101, 0x5, 0x6, 0x10, 0x3, 0x9, 0x1, 0xff, 0xee33, 0x1, 0x4e, 0x8, 0x0, 0x3ff, 0x6, 0x0, 0xf, 0x4, 0x6577, 0x78a33936, 0xfffffffa, 0xffff0, 0x4, 0xe, 0x4, 0xcfec, 0xf, 0x0, 0x8, 0x1000, 0x3053, 0x0, 0x5, 0x30, 0xfcce, 0x81, 0xc4d, 0x3, 0x3, 0x30d602e6, 0xd0e, 0x7f, 0x6, 0x8, 0x40, 0xb, 0x7, 0x6, 0x9, 0xf7e, 0x2, 0x2, 0xa5e4, 0x2, 0x6, 0x401, 0x4, 0x231, 0x7, 0x8, 0x7, 0xa, 0x4, 0x1000, 0x4, 0x92c3, 0x5, 0x8000, 0x0, 0x0, 0xe1, 0x2, 0x1, 0x100, 0x3, 0x8001, 0x9, 0xffff3e4b, 0x0, 0x9, 0x1, 0x0, 0x36, 0x3, 0xfffffff5, 0x0, 0x8, 0x10000, 0x200, 0x8, 0x3, 0xffff, 0xffffff91, 0x4, 0xf, 0x8000, 0x10, 0x1, 0x7, 0x8, 0xc8d1, 0x1, 0x4, 0x7fff, 0x5, 0x3, 0x8000, 0x5, 0x7fffffff, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x42c6, 0x81, 0x8, 0x9, 0x5, 0x2, 0xfff, 0x48, 0x5, 0x1, 0x6, 0x40, 0x5, 0x209, 0x3, 0x2, 0x9, 0x8, 0xb, 0xfffffffa, 0xffff, 0x4, 0x9, 0x3ff, 0xe, 0x175, 0x2, 0x9, 0x9, 0x0, 0x1, 0x7, 0x8, 0x8, 0xa79, 0x9, 0x2fd, 0x9, 0x6, 0x8, 0x6, 0x10, 0xa, 0x0, 0x9, 0x7, 0x830a, 0x1, 0xffff53a3, 0xfffff001, 0x7, 0x800, 0x8, 0xeb0, 0x2, 0x200, 0xffffffff, 0x6, 0x9, 0x9, 0x10001, 0x0, 0x3ff, 0x101, 0x0, 0x7, 0xc, 0x0, 0xfff00000, 0x4, 0x0, 0x100, 0x2, 0x5, 0x1, 0xfffffffd, 0x7fffffff, 0x0, 0x80000000, 0x1, 0x5, 0xff, 0x4ccfad3f, 0xffffff01, 0x5, 0x5, 0xddf, 0x7, 0x80000001, 0x0, 0x5, 0x5, 0x4, 0x8, 0x2, 0xf4a7, 0x80000000, 0x2, 0x6, 0x6, 0xffffffff, 0x7, 0x85cc, 0x5, 0x76e8, 0x4, 0x1ff, 0x5b6, 0x7, 0x1, 0x5, 0x2, 0x9, 0xda, 0x7, 0x8, 0x8, 0x81, 0xf5f2, 0x3, 0x9, 0x100, 0x3, 0x3, 0xfffffff8, 0xc5, 0x5, 0xddb, 0x9, 0xfdc, 0x759, 0x2, 0x8, 0x8, 0x9, 0x0, 0x9, 0x9, 0x2, 0x400, 0x0, 0x7, 0xff, 0xd, 0x9, 0x7, 0x0, 0x9, 0x0, 0x7, 0x7d, 0x0, 0x6, 0x7, 0x9, 0x0, 0x4, 0xffff, 0x0, 0x48d9, 0x4, 0x7fff, 0x2, 0x17, 0x5, 0xb6, 0x2e6a, 0x8, 0x105, 0x3, 0x6, 0xe668, 0x7, 0x633, 0x80, 0x5, 0x5, 0xe, 0x2af0, 0xe, 0x9, 0x8, 0x9, 0x400, 0x0, 0x400, 0x9, 0x4, 0x67, 0x40, 0x3, 0x8f4, 0x2, 0x6, 0x3, 0xffffffc0, 0x0, 0x926, 0x3, 0x8, 0x8, 0x2, 0x7, 0x7fffffff, 0x9, 0x1f, 0x100, 0x6, 0x8, 0xfffffffe, 0x8, 0x9, 0x5, 0x2, 0x7, 0x80000000, 0x401, 0x7ff, 0x4, 0x47b, 0x4, 0x80000000, 0x6, 0xc1, 0x8, 0x7, 0x10001, 0x7, 0x4, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x6c, 0xb, 0x9, 0xa, 0xf, 0x3ff, 0x2, 0x7, 0xffffff72, 0x0, 0x0, 0x9, 0x6, 0x7243, 0x4fe2, 0x1ff, 0x10000, 0x7fff, 0x2, 0x7, 0xfffeffff, 0x9, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x90}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fffffff}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x3ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf7}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x28}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xe, 0x1, 0x0, 0xfa1, 0x3, 0x5, 0x922, 0x100, 0x8, 0x9, 0x200, 0xffffffff, 0x9, 0x240, 0x400, 0x4, 0x7, 0xfffffff8, 0x40, 0x9, 0x400, 0xffffff06, 0x9, 0x8, 0x2, 0x7fff, 0x7, 0x0, 0x9, 0x3, 0x400, 0x1, 0x0, 0x3, 0xc97, 0x8, 0x3, 0x3058, 0x400, 0x5, 0xfffff001, 0x2, 0x6, 0x800, 0xfff, 0x81, 0x6, 0x8, 0x0, 0x10, 0x100, 0x9, 0x9, 0x6, 0x9, 0x0, 0xb, 0x5, 0x4, 0x2, 0x4, 0x4, 0x2, 0x7, 0x4, 0x2, 0x9, 0x3, 0x53d, 0x6, 0x4, 0x7, 0x9, 0x5, 0x5, 0x101, 0x1000, 0x0, 0x90, 0x7fff, 0x7, 0x3, 0x3b2b2194, 0x1, 0x3, 0x7, 0x3ff, 0x0, 0xf6a, 0x101, 0x91, 0x4, 0x4, 0x2, 0x9, 0x7fff, 0xfffffffa, 0xfffffffe, 0xffffffff, 0x0, 0xffff, 0xffff8000, 0x400, 0x6, 0x1, 0x4, 0x80, 0x7fffffff, 0xde2, 0x5, 0x1, 0x995, 0xe0, 0x9d1e, 0x5, 0x2, 0xffff, 0x7, 0x4, 0x3, 0x5, 0x6, 0x10001, 0x1, 0x4, 0xfffffff7, 0x7f, 0x1, 0x8, 0x70000000, 0x8, 0x7, 0x3, 0xf0000000, 0x6, 0xa755, 0x6, 0x4c6, 0x5, 0xffffffff, 0xfff, 0xef0, 0x100, 0x8, 0x8, 0x3ff, 0x7fff, 0x0, 0x1, 0xc, 0x3, 0xfffffc01, 0x9, 0x8, 0x3, 0x9c, 0xfffffff8, 0xd, 0x81, 0x3, 0x7fff, 0x3, 0xe, 0x560522cd, 0x3, 0x0, 0x7f, 0x8000, 0xfffffffc, 0x101, 0x1, 0x26a, 0x3, 0x3, 0xc2, 0x401, 0x3fe00000, 0xfffffffb, 0x0, 0xd, 0x924, 0x2, 0xff, 0x5, 0xdcb, 0x898, 0x4, 0x47, 0x5, 0x0, 0x10000, 0x9, 0x4, 0x3ff, 0x1, 0x4, 0x961e668, 0x4, 0x81, 0x5, 0x6bcdf424, 0x100, 0xdebd, 0x9, 0x1000, 0xc, 0x80000000, 0xffffffff, 0x80000000, 0x6, 0x0, 0x2, 0xfffffe00, 0x91, 0x9, 0x1, 0x5, 0x890d, 0x9, 0xff, 0x5, 0x5, 0x4, 0x1000, 0xd40, 0x40, 0x3, 0x0, 0x0, 0x4, 0x9, 0x1, 0x7fff, 0xfffffff0, 0xffffff7f, 0x4, 0x81, 0x8, 0xfffffffd, 0x1, 0x1, 0x1, 0x10001, 0x4, 0x0, 0x2, 0x3ec0, 0xff, 0xd, 0x400, 0x1, 0xf, 0x7, 0x67f841b2, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xe, 0x4, 0x7fff, 0xff, 0x80, 0x2ceb, 0x800, 0x1, 0x1, 0x4, 0x8, 0x1, 0x4, 0xffffffff, 0x43, 0x6, 0x80, 0x7, 0x8, 0x7, 0x0, 0x10001, 0x9, 0x5ef, 0xea, 0x1, 0xfffffe00, 0x10, 0x80, 0xfffffffa, 0x4, 0x0, 0x6, 0xf9, 0x4, 0xfffffffb, 0x3, 0x5, 0x583, 0x2, 0x8, 0x5, 0xffffff7f, 0x9, 0x3da20000, 0x80000001, 0x1000, 0x1, 0x6, 0x9, 0x7fffffff, 0xd, 0x4, 0x68, 0x5, 0x80000001, 0x7, 0xfffffff4, 0x7, 0xff, 0x2, 0x1ff, 0x6, 0x7, 0x1, 0xfffffff8, 0x1, 0x40, 0x37b2, 0x5, 0x10001, 0x7, 0x6e2, 0xd26, 0xaded, 0x4, 0x8000, 0x101, 0x8, 0x80000001, 0x5, 0x7, 0x80000000, 0x7fff, 0x25f2, 0x80000000, 0xf5b4, 0x0, 0x0, 0xd857, 0x6, 0xfffffff8, 0x7b, 0x547, 0xfffffffd, 0x10001, 0x8, 0x6, 0x7, 0x3c, 0xffff, 0x1ff, 0xfffffffd, 0xf, 0x81, 0x1, 0x2d, 0x4, 0x6, 0x9, 0x5, 0x8abd, 0x1ff, 0x2, 0x8, 0x4, 0x5, 0x8, 0x1, 0x200, 0x10000, 0x1, 0x0, 0x7, 0x1, 0x343b, 0x8, 0x9, 0x2, 0x9, 0x0, 0x5, 0x79, 0x9, 0x8, 0x0, 0x6, 0x4299, 0x5, 0x5, 0x3, 0x5, 0xffffffff, 0xda, 0x2, 0x7fff, 0x0, 0x6, 0x6, 0x5, 0x1, 0x3, 0x3, 0x8, 0x2, 0xffff, 0x2, 0x8, 0x3, 0x6, 0x4, 0xb756, 0xc, 0x8, 0xf, 0x200, 0x6, 0xa5, 0x5, 0x8, 0x7fff, 0x1000, 0x2, 0xae, 0x1, 0x6, 0x0, 0x8, 0xe73, 0x40, 0x40, 0x2, 0x4, 0x200, 0x0, 0xc, 0x4, 0x7, 0x3, 0xc000000, 0x1, 0x2, 0x7c42ad1, 0x5, 0x1, 0x401, 0xfff, 0xe703, 0x401, 0x61, 0x4, 0x1, 0x42, 0x7, 0xfffffffc, 0x7, 0x1e, 0xb, 0x831, 0xffff2191, 0xfffffff4, 0x2, 0xaf, 0x4, 0x5, 0x4, 0x0, 0x4, 0x5, 0x0, 0x4e, 0xb4b, 0x2, 0x6, 0xffffffff, 0x1000, 0x8, 0x1, 0x1, 0x3ff, 0x8, 0x8, 0xc5, 0x8, 0x6d32, 0xbb38, 0xff, 0x6, 0x8, 0x7, 0x9, 0x200, 0x7, 0x7, 0x6d, 0xc, 0x7, 0x4, 0x4, 0x1, 0xffff, 0x3e37e613, 0x5, 0x7fffffff, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x800, 0x1, 0x4, 0x9, 0x0, 0x10000, 0x10000, 0x22, 0x5, 0x2, 0x20b, 0x3, 0x4, 0xffff5b1b, 0x4fcfc2af, 0xe, 0x7fff, 0x81, 0x1, 0x20000000, 0x6, 0xffff27dd, 0x1, 0x180, 0x4, 0x9, 0x4, 0xf, 0xfffffff8, 0x1000, 0x2, 0x4, 0x1, 0x101, 0x384, 0xe, 0x2, 0x800, 0xfffffffc, 0xc0b, 0x7, 0x1, 0x8, 0xf3, 0xffffffff, 0xffffff68, 0x4, 0xfff, 0x4, 0x9, 0x3, 0xf45, 0x46, 0x6, 0x666, 0x5, 0xfffffffb, 0x5, 0x0, 0x1, 0x4, 0x5, 0x4, 0x6, 0x80000000, 0xfc000000, 0x7, 0xd6f32861, 0x2, 0x9, 0xc999, 0x2, 0x1dfb, 0x0, 0x2, 0x1, 0x3, 0x8, 0x1, 0x3ff, 0x10000, 0x9, 0x5, 0x50a851ee, 0x7fff, 0x0, 0x0, 0x93b, 0x7, 0xfffffffe, 0x1, 0xe, 0x7, 0xfb, 0xfff, 0x80000000, 0xcc, 0x4548, 0x6514, 0x8, 0xffffff38, 0x8, 0x9, 0x5, 0x5, 0x5, 0xfffffffb, 0x3, 0x0, 0x4, 0x3ff, 0x9, 0x7, 0x7d6, 0x5, 0xe16, 0xfff, 0x3, 0xcb, 0x957c, 0xe, 0x3, 0xc99, 0xcd0f, 0x40, 0x2e2, 0xffff7fff, 0x6, 0x2, 0x7, 0x7, 0x5, 0x4, 0xb5e6, 0x1, 0x2, 0x0, 0x5, 0xeb, 0x3, 0x7fff, 0x2c5, 0x4, 0x0, 0x8, 0x8, 0x0, 0x2700e281, 0x3a43800e, 0x8, 0x4, 0x7, 0xfffffff7, 0x79, 0x3, 0x3800, 0x401, 0x9, 0x401, 0xc, 0x2, 0x5, 0x71ee, 0x1b7497dc, 0x7, 0xf, 0x0, 0x9, 0xffffff81, 0x2, 0x48f6, 0xd52, 0x2, 0x80, 0x7dc5, 0x5, 0x1, 0xf, 0x7, 0x1, 0xfffffb7b, 0x98, 0x2aa, 0x4000, 0xa7c0, 0x81, 0x37e, 0x3, 0x5, 0x8, 0xffffffff, 0x1, 0x81, 0x5, 0x3, 0x1138, 0x0, 0x4, 0xfffffffa, 0x5, 0x4, 0x40, 0x10000, 0xfffffffe, 0xa204, 0x6, 0x1, 0x10001, 0x2, 0x5, 0x7f, 0x9, 0x10001, 0x10000, 0x1ff, 0x0, 0x80000000, 0xff, 0x2bd, 0x4, 0x8000, 0x80000001, 0x4, 0x8, 0x5, 0x4, 0x1, 0x7fff, 0x6, 0x40, 0x0, 0x1, 0x11, 0xb, 0x126, 0xcf6, 0x5, 0x2, 0x8, 0x80, 0x4, 0xc, 0x3, 0x7, 0x5, 0x7, 0x3, 0x7, 0x2, 0xffffffe0, 0x4, 0x7fffffff, 0x8000, 0x6c8f8ed7, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x75a, 0x6, 0xc, 0xfffffb13, 0x2d, 0x4, 0xe, 0x3, 0x7, 0x1, 0x8, 0x1ff, 0x59, 0x7f, 0x793, 0x7, 0x7, 0x9, 0x81, 0x6, 0x2, 0x2, 0x7f, 0x40a, 0xe2, 0x7, 0x8001, 0x5, 0x7fff, 0xc9, 0x5, 0xffffffff, 0x2, 0x5, 0x9, 0x80000001, 0x509f, 0x6, 0x3, 0x81, 0xfff, 0x2, 0x0, 0x86d9, 0x25, 0xa6, 0x0, 0x3, 0xbad, 0x4, 0xfffffffa, 0x5, 0x7c, 0xffffffff, 0x0, 0x2, 0x68e, 0xfffffff9, 0x401, 0x5, 0x10, 0xa, 0x87aa, 0x3, 0x8c, 0x7ff, 0x1, 0x4, 0x4, 0x0, 0x1000, 0x6cef, 0xffffff12, 0x4, 0x1c7, 0x7, 0xfffffffa, 0xff, 0x7fff, 0x2, 0xffff, 0x0, 0x9, 0x3, 0x4, 0x2, 0x8, 0x4, 0x0, 0x7, 0x8, 0x1, 0x10000, 0x10, 0xb, 0x100, 0xffffffc0, 0x1, 0x4, 0xc4ff, 0x98, 0x0, 0x10000, 0x7ff, 0x6, 0x100, 0xb656, 0x200, 0x3680, 0x2, 0x9, 0x2, 0x6, 0xffffffff, 0xffff, 0xffffffa2, 0x1, 0x80000001, 0x4, 0x7, 0xe9, 0xc0c2, 0x6b75, 0xe0, 0xfffffffb, 0x8, 0x7ff, 0xfff, 0x5, 0x2, 0x20, 0x200, 0x0, 0x8, 0x10001, 0x1ff, 0x781, 0x8, 0x0, 0x1, 0x2, 0x7, 0xc, 0xb4, 0xbb1, 0x7360, 0x5, 0x4, 0x80000001, 0xfffffff4, 0x200, 0xffffaf76, 0xc9, 0x7, 0x4, 0xba, 0x4e0d, 0x4, 0x3, 0x80000000, 0xd, 0x4, 0x7ff, 0x2e06, 0x1, 0x5, 0x8, 0xfb, 0x2, 0x8, 0x40a7, 0x3, 0x71b8, 0x4, 0x98a, 0x9, 0x101, 0x6, 0x1, 0x7, 0xa8b, 0x2fae3269, 0xd, 0x3, 0x9, 0x5, 0x1, 0xc7ae, 0x4, 0x1ff, 0x101, 0x9, 0x5, 0x9, 0x2e27, 0x2, 0x9b7, 0x1, 0x5, 0x9, 0x5, 0x1, 0x4, 0x9, 0x472, 0x1, 0x0, 0x9, 0x100, 0xf, 0x7, 0x8, 0x9, 0x3, 0x6, 0x9, 0x2, 0xf37f, 0x1, 0x0, 0x7fff, 0x5, 0x8e, 0x0, 0x3cc, 0x5, 0x3, 0x1, 0xfffffff7, 0x9d0, 0x0, 0x1, 0x9, 0x9c, 0x3ec, 0x7, 0x18, 0x5, 0x9, 0xbe, 0x6e, 0x1c685f48, 0x5, 0x6, 0x1, 0x8, 0x5, 0x0, 0xa5, 0x1, 0x1, 0x6, 0x1, 0xb1fe, 0x0, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7a5, 0xd, 0x7, 0x5, 0x9, 0x401, 0x1, 0x8, 0x2, 0x3ff, 0x6, 0xef, 0x7fff, 0x6, 0x7, 0x9, 0x6, 0x6cb, 0xdf0, 0x8, 0x4, 0x3ff, 0x5, 0x1ff, 0x80000001, 0x6, 0x2, 0x3, 0xffff, 0x7ff, 0x0, 0x800, 0x2, 0xd, 0x8, 0x2, 0x24d, 0xfffffffb, 0x7, 0xfffffffc, 0x7, 0x8, 0x0, 0x8, 0x8efb, 0x8000, 0xcf7, 0x5, 0xfff, 0x2, 0x9, 0x0, 0x7, 0x6, 0xc29e, 0x40, 0xfffffffd, 0x10, 0x7fffffff, 0x6, 0x6, 0x400, 0x8, 0x6, 0x10, 0x7, 0x4, 0x0, 0x80, 0x7ff, 0x401, 0x1, 0x4, 0x9, 0x696f, 0x10, 0xffffff0b, 0xffffffff, 0x297, 0x7ff, 0x8, 0xff, 0xf, 0xfffffff9, 0x3e4, 0x10, 0x101, 0x80000001, 0xffffff0c, 0x8, 0xfff, 0x9, 0x9, 0x0, 0x2, 0xf1, 0x6, 0x10, 0x8, 0x8, 0x992, 0x5, 0x100, 0x80000000, 0x7f, 0x40, 0x0, 0x100, 0x2, 0x3, 0x5, 0x9, 0x4, 0x101, 0x5, 0x9, 0x2, 0x4, 0x10001, 0x8, 0x3, 0x614, 0x5, 0xfffffffc, 0x677b, 0xff, 0x8000, 0x2, 0x5, 0xc3f, 0x1, 0x10000, 0x8, 0x498e, 0x5, 0x80000000, 0x5, 0xfffffffb, 0x6, 0x7, 0x6, 0x8001, 0xc88, 0x60000000, 0x7f, 0x8, 0x80000001, 0x1, 0x7, 0x9, 0x2, 0x7, 0x7, 0xfffffff8, 0x11, 0x7, 0x10000, 0x7, 0x401, 0x6, 0x8000, 0x2, 0x80, 0x77b, 0x0, 0x98ba, 0x4, 0x6, 0x13, 0x3, 0x0, 0x398, 0x8, 0x4, 0x5, 0xffffffff, 0x64edee8e, 0xa, 0x10000, 0x1a58, 0x9d, 0x0, 0x4, 0x6, 0x3, 0x4, 0x4, 0x2, 0x10000, 0x200, 0x2, 0x5, 0xffff, 0x2, 0x9, 0x9, 0x7fffffff, 0x80, 0xf30000, 0x95a, 0x38, 0xd5, 0xf, 0x7f, 0x0, 0x6, 0xfffffff7, 0x8, 0xb49, 0x8, 0x36f8, 0x10000, 0x1ff, 0x6, 0x6, 0x5, 0xe0, 0x8001, 0x200, 0x3, 0x80000000, 0x40, 0x80000000, 0xeb0, 0x8, 0xfffffffe, 0x5, 0x80000000, 0x8000, 0x8, 0x8, 0x2, 0x2, 0x7, 0x3, 0x1, 0x3, 0x6, 0x7, 0x4, 0x9, 0x98aa, 0x413, 0x1, 0x14, 0x2, 0x0, 0x2, 0x9b, 0x9, 0x10001, 0x10000, 0x6, 0x524, 0x3, 0x1ff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6b, 0x2, 0x3, 0x6, 0x9, 0xe0, 0x5, 0x8b, 0x6, 0x3, 0x7, 0x7, 0x8, 0x3, 0xa, 0xa, 0x0, 0x52a, 0x3, 0x4, 0x0, 0x9, 0x6, 0x15c8922d, 0x5, 0x8, 0x1, 0x48d, 0x9, 0x40, 0x3, 0x0, 0x20000000, 0x3, 0xa2c, 0x7f, 0x0, 0x9, 0x6, 0x8, 0x6, 0x10000, 0x0, 0xc45, 0x8, 0x0, 0x2, 0x1f5, 0x3, 0xa, 0x9, 0x0, 0x101, 0x75f, 0x98, 0x5, 0x1e46ce52, 0x6, 0xd9, 0x9, 0x7, 0x40000000, 0xd, 0xa, 0xfffffff7, 0x4, 0x4, 0x80000000, 0xa4e, 0x0, 0x8, 0x1, 0x4, 0x9, 0x7, 0x74, 0x5, 0x0, 0x6, 0x0, 0xac, 0x1, 0x6, 0x609f6244, 0x401, 0x6, 0x40, 0x81, 0x7fff, 0xb4, 0xcfb4, 0x6, 0x7, 0x2, 0x1, 0x2, 0x2, 0x9, 0xfffffff7, 0x200, 0x3, 0xbf, 0xfffffff5, 0x40, 0x10, 0x4, 0x4d45, 0x4, 0x6, 0x7, 0x1, 0x1, 0x3, 0x0, 0xc, 0x4, 0xcaf320e1, 0x6, 0x10000, 0xd1c, 0x3ff, 0x8000, 0xa0c3d19, 0x6711, 0x3, 0x5, 0x6, 0xf, 0x4, 0x8, 0x6, 0x2, 0xa0, 0x10001, 0xfffffffb, 0x9, 0x80000000, 0xb, 0xa2ca, 0x64, 0x6, 0x3, 0x4, 0xe, 0x6, 0xfffffeff, 0x2, 0x0, 0x1ff, 0x0, 0x7, 0x1, 0x7, 0x6, 0xa0, 0x1, 0xe3f1, 0x3, 0x200, 0x8, 0xfffffff8, 0x6, 0x3, 0x8, 0x3, 0x9, 0x5, 0x0, 0x3a69b370, 0xc, 0xff, 0x9, 0x6, 0x7, 0x8, 0xdd, 0x101, 0xd25a, 0x2, 0x2, 0x5, 0x7e, 0x0, 0x0, 0x4, 0x1, 0xaa09, 0x6, 0x1, 0x7ff, 0xa000000, 0x9, 0xe, 0xffffffff, 0x4, 0x3, 0x6, 0x1, 0x5, 0x0, 0x5, 0xfffffffc, 0x5, 0x5, 0x1000, 0x2314, 0xde2, 0x9, 0x4, 0x19, 0x10, 0xe4, 0x1, 0x5, 0xffff0001, 0x80000000, 0x10, 0x0, 0x8000, 0x4, 0x5, 0x7fff, 0xc3, 0x4, 0x2, 0x800, 0x3653, 0x28a7, 0x10000, 0xcf98, 0x334, 0x80000000, 0x800, 0x14b, 0x7, 0xabfd, 0x9, 0xffffffff, 0xfffffffb, 0x3, 0x4, 0x103, 0x5, 0x6, 0x1, 0x1, 0x5, 0x7, 0x36, 0x800000, 0x10000, 0x6, 0x100, 0x3, 0x7f]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x13b2}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xb4}]]}, {0x1a, 0x6, "263f12a80a00f2f24dbaf56fd87896cb8d971cb1bfd3"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0xb0, 0x15, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x8, 0xc, 0x8}, 0xff21}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x1, 0x6}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1000, 0x20000000, 0xcdb, 0x305}, 0x5}}]}, {0x29, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x34, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "4ac6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x3708}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="240000001e005f1814fffffffffffff807000000010000000000000008000500c4cb0b02", 0x24) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x50, r1, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}]}, 0x50}}, 0x20000040) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x891d, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d6039220fc0404026767010203010902240001000010000904bf00026da0d800090502020002fe00000905820a"], 0x0) syz_usb_connect$cdc_ecm(0x4, 0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010003020000872505a1a44000010203010902720001010150030904007f020206008f03240600006f500524000b000d240f01fdffffff0000011c251192bd091524120700a317a88b045e4f01a607c0ffcb7e392a04240205072414080009000c241b010469b70104010005090581030004ff050209058202ff0302ff03100804000000000000"], &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x2, 0x6, 0x8, 0x8, 0x20}, 0x36, &(0x7f0000000140)={0x5, 0xf, 0x36, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x4, 0x8800, 0xf, [0x3f, 0xff3f, 0xffff0f, 0x0, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0xa, 0x8, 0x7b07}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x9, 0x1}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x280a}}, {0xe1, &(0x7f0000000880)=@string={0xe1, 0x3, "4fc84240b7e910ebd004ab9ce1f31d680bcbef407e7923931bacfdb3f2cefe387d2fa62b9d9a05b92d2785192bd1f689fa014bdc94ffc6df5e173d6ecda2348603cd57623df2263ceb6e17b0da78dc7cfd775b822891e96afeb3909a626bd4d0d9137ad5b76e697354544ec5327c9cb7ad2c62d9937be5fe74383eef86212981abc93ae2588435b52be209243dad183d106c5323cc93548addca9b3393fec7bc20ea2dadb19eaea1db303471ead8c1eaed9daa7366174f5f84ab44bfd2030ca8985ca36e6e9fb5e04589503cbc80a5828839ed069adf273f7f99a15a0da75d"}}, {0x4e, &(0x7f0000000240)=@string={0x4e, 0x3, "d526e947999bbb2bf3d546d7cb4dae7dd4c76be37248e3bdf8cccda5baddfd09c21a89b30286bad973617ca52e4100ad4aeee04372ac612a91b90fe0da53164c14fd2a613fb02346d6fc5bfe"}}, {0xe, &(0x7f00000002c0)=@string={0xe, 0x3, "c82e25f533042279f1d8aceb"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40a}}]}) 5.747680161s ago: executing program 4 (id=2647): socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = io_uring_setup(0x7ed4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff, 0x2f9}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x1a, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) r1 = socket$kcm(0x2, 0x1, 0x0) syz_emit_ethernet(0x80, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x4a, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0xe803, [0x3e8, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}}}}}}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x10, 0x6, 0x5b0, 0x290, 0xd0, 0x1a0, 0x1a0, 0x0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xffffffff, 0xff000000, 0xff], [0x0, 0xffffff00, 0xff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x73, 0x81, 0x2, 0x64}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f8}}, {{@ipv6={@local, @loopback, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff], 'ip6gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x4, 0x6, 0x0, 0x30}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, @ipv6=@private0, 0xd, 0x25, 0x162b}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x84}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@hbh={{0x48}, {0x8001, 0x6, 0x0, [0x3, 0x2, 0x1, 0x8, 0xd850, 0x8000, 0x0, 0x2bd8, 0x6, 0x7, 0x9, 0x3, 0x1, 0x1, 0xb30, 0xa2f6], 0xf}}, @common=@frag={{0x30}, {[0x6, 0x800], 0x5, 0xe, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x6, @ipv4=@private=0xa010101, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000100000008000b400000000030000480180001800d00010073796e70726f78790000000004000280140001800d00010073796e70726f7879000000000900010073797a30009b"], 0xcc}}, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5.521385999s ago: executing program 4 (id=2648): r0 = socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, 0x0) 5.456530179s ago: executing program 4 (id=2649): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xfffffffffffffff5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f000000ac40)={0x2020}, 0x2020) syz_open_dev$ndb(0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) r6 = syz_usb_connect(0x6, 0x76b, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x13, 0x42, 0xb8, 0x20, 0x83a, 0x7522, 0x43d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x759, 0x3, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x27, 0x0, 0xd, 0x6b, 0x8f, 0x65, 0xd, [], [{{0x9, 0x5, 0x80, 0x8, 0x10, 0x1c, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x4}, @generic={0x9d, 0xe, "8ae624bb521b7909c8abf196c2477ca71f0e8b43fd9a174b25bdb5973f9bef3cdc3e5d241810123a25cbd76723c6cfc84c36c421d1b26132f93c892dec5ccbf913380f84b467242fed1b8d85eba9d6cff853aa274ea7653d0ef81a8916680331000a009d4b3ad91c4ee839346449211fab81d29c98608df6c8cebb746cf0ac32e5b1a94892afdb6797f5ff87eaca19a2ac539c1dc92c7aa913d389"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xe, 0xd9, 0xeb, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xc, 0x7}, @generic={0xd6, 0xc, "1abdcdf135925d29bfbf24bb599d3db0fb4288ebd47929951cf012912129fce131976e4b5734a69957f6ab3ee81e91e2111b8885bc76b6d3b205fc6e24df0a06ddefc45a2302b3f2870dbf892d828bd8436634f47dd68b020cdfaf4ef8e11d711d832e078b9d0e2e29cc4610161378b9f0b55dd610ecf614c4c078bd51090c2ebcaf9e97fad6e3fe1d7065a0490873df0a4be595dd4077d2969db9c4af285d6981c49cc222b9c7d415c9055c8ab3fb1dd62d62307d1363694762f0295c2710185ee305c946fd05eb93581e2ce480ae684024dace"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x1, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xf7a}]}}, {{0x9, 0x5, 0x3, 0xc, 0x200, 0xac, 0x81, 0x6}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x5, 0x81, 0x3, [@generic={0x49, 0x3, "fda64102877766efc699c584bb418f6efa35b616e98b12f8d6ead256279947c8a1ccf14d40ec1416bad7c91fd1f63acfcad46abf26810282b95b406898cbdc4d09c9d4fac455b0"}, @generic={0xb, 0x30, "2c8bf01d850b61b4a7"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0xd, 0x6, 0x0, [@generic={0x13, 0xe, "7c074e5ec0c42114c160861c5397891f37"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xff80}]}}, {{0x9, 0x5, 0x7, 0x0, 0x5df, 0xf9, 0x5, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x9, 0x3, 0x3, [@generic={0xdb, 0x10, "0447090856e7aa84db74ba74333719d58fae86be81de587f40693dbea2eb63b5a714c7fd6477509529f9393a3da57492ae6db1820707f0881de0e65def7c9c38d534be58af8c78d6e32af98d2e1dc708a2f5315a96d9c46a7f6ff2241202e1ecb7b47a48b45ee718e667b24bea82330dda108077f1d92c0d532865e1d06d3c431f5d108bdb84f288350b0d5e5b1ceaa45fa48cb937d227abc4284587ae1e692d33637484a3f8ae9c0f8cb1b7598deafc711dd2b44bb91a20aa72e1c76ba330c9b4f0fd75fb45cd6de1a31392c2019b8e0458bd05dbdfda3f85"}, @generic={0x6f, 0x2, "38d19ff468d8cd58f7059972b2cbee6e9215940924496574495ebc85b71185e3ee0e7d7833ca115987918807e1c218cea8ba166687f980f42d6ae6240c627b7267c10918d3a05b4d8f12fa40360d5b8880bc55879e0624cb5abb461fa1ba38aff1b6ded2f9c45afda887a83fe8"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x70, 0x72, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x8}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x5, 0x9, 0x7}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x81, 0x9, 0x1, [@generic={0x4, 0x3, "0e30"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x8, 0xfa, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1c2, 0x3, 0x7}, @generic={0xdf, 0x1, "b66ff7a4ea7fdee233ceca17dd24379e567392718dec7e9ae33192e65d749b16fd4cca5ef0c403702737f5cbf000335fbd827ef2cddbfbfbd80bfa9508ebaec896cc36234d458efd9f322e7b136455fb3d946e56a99ca274c9f47153bcee8a9fec47c0e2cfa9f3ee97a5016946b77a34e1a7397032dcbe8681a1a48a45f4bad44e059d7c446a8b8c0d26ebb86f4ff9544713c080f9c429d959cd74fc8ac542157d3a71b753607e77592b816612e0301af06ff8eea77b35103dab54face272953e9b451008127da00c2519128c2c63712271a4cbe89207eaff884566786"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x3, 0x28, 0x2, [@generic={0x7e, 0x22, "5378444dc11dffdf3bba32964a36291aa4a265244fe4a216f6d692bf4c5fc984f2170c96fd8054f089302021952fd23923bff5de487aafde0eb0d8f04c904b556c8402bacd1363b0a6c42e1dc6b6187ab07521ac95aaee7b255f131134c9a438af9cb4ff01ccdc3caae0268a4ee4ae2a64390d385f3919376e5907db"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x6}]}}]}}, {{0x9, 0x4, 0xd5, 0x5, 0x0, 0x69, 0xd2, 0xcc, 0x97, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x6}, [@processing_unit={0xd, 0x24, 0x7, 0x1, 0x0, 0x6, "18901b14f74a"}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0x81, "94a0f53e6748"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x1ff, 0x2, 0x5e, 0x2, 0x0, 0x2}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x0, "c8b0e3"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x100, 0x6, 0x5, 0xd, 0x2, 0x7}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x5, 0x3, [0x5, 0xa, 0x5], 0x7f}]}, @uac_control={{0xa, 0x24, 0x1, 0x40, 0x2d}, [@processing_unit={0x8, 0x24, 0x7, 0x3, 0x2, 0x3, "b1"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x2, 0x1, 0xd2}]}]}}, {{0x9, 0x4, 0x60, 0x1, 0x3, 0xff, 0xff, 0xff, 0x5, [@uac_as], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0x9, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xa}]}}, {{0x9, 0x5, 0xb, 0x2, 0x0, 0x2, 0x9, 0x3}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x9a, 0x0, 0x10, [@generic={0xb5, 0x31, "d9f1bc5d65141cc1b9bd6552559570cc82032376164ad4df45e0c4d05d4faa04e53671ec7f84b3db1090a7095928819cce1963f4576fd19616897571839c0dd00fcf67438b82a9120ea8ac133517da184ca2519bd7eb59c3e426b851714457fd89dbf9c79050a8bb613d5c4f2cecc79fb890ad26702fda5baa95d8501181ba22555e8b76ca4ddb0302331a779fb023fa705ca5eb431bd78a35edc70dfa18c29ca9420f0f2259bc6082e49944da413aacad0ed7"}, @generic={0xcb, 0x2, "29e3e933f65e56e84fca65d2f9086d72ddc761dc4b092d937891f675fb8c901ada03e88298fae4381de1db98927a3d7d5720da4b851150753f0a2a771f2b16af6ee850d548a58c517791572ed04593ce2f3c91bbe4d5e3b083336902e2cb4136397b4f0fe9c670e1a8a93a04136bb9f02e4edf2edba7dcfd77e07029a42e7f4396beb8a8739e3230c3bd681f85795d357955eb6ecdfca1647917208f9e93aaaec975ff492aba76f7d033874b11253552629dbd5496fd6c0b5ef111531ecd5cfa452305200c4110a9b2"}]}}]}}]}}]}}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="140000002b000b93de09a427b36c690000fff005", 0x14}], 0x1}, 0x480c0) syz_usb_control_io$uac1(r6, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfffffffd, {}, {}, @ext={0x0, &(0x7f0000000180)}}], 0x1c) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x0, 0xb5, {0xb5, 0xd, "76269633c542b449edaad390e22d21b4fc9005960966f7a63585bbe8d78ec979dae28c761429e20243a3197b0bbf03e753b6de40b0df5b03d0bc817d83f4d3792a99a1791956da52dc4fef5023d8f360b1f24d58626cdcefd474f803c079c3aa180e048d1196a7bc4b27c04aefd36afcdbf3918c27ff2af5955b124ed01b2d894390735fa908e26877bc8611367ecac7498db1f4df3d124e40b14c56de51b947bfb9fec98d33e2495cf8fc045ee6cccc2dddec"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x5, 0xc2, "6f598ae2a4ed64af7565546da4a2ee26a50500216066e6e3d742e1f7a0e45287d2d3f0aa7d88d793f17d08e3b06812927bfc27f77f2c9d8d22f20e0678a3836b2f5a275724664a46f887b30835eb2203234c0762a09e5fdfc5fae4129d5077138806d0e4e46af9d94ffd5b98fb8939d67fcdcf92ebb317ef0bb01493ce5cac2962c500996d40dee86a015cbebda080870192fd3edc71c2e76379d33957ce51b79a4118be3465e55c4751bf659cc5ccd8ab8696838792334d6501c332716b65e01410"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}}) syz_usb_control_io(r8, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000540)={0x0, 0x8c7c8f6744f0b74e, 0x8, "d4a911bb11e39d2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_connect(0x0, 0x12f9, &(0x7f0000001080)={{0x12, 0x1, 0x110, 0x81, 0xab, 0x15, 0x40, 0xcf3, 0x1006, 0x1b4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12e7, 0x3, 0xd, 0x4, 0x50, 0x2, [{{0x9, 0x4, 0xd7, 0x6, 0xa, 0x6e, 0xd9, 0x48, 0x3, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0x2, 0x81}, {0x6, 0x24, 0x1a, 0x3, 0x10}, [@country_functional={0x8, 0x24, 0x7, 0x8, 0x401, [0x81]}]}], [{{0x9, 0x5, 0x4, 0x0, 0x8, 0x5, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x27f}, @generic={0x9d, 0x8, "4b7eb5db9b6b182f294e2e169faf64229bbf6689d6d667e10d823558be1bbe54c151c3c46260b48f3628fc95ccd87a32e8d46573045d6e774d47556b7862a1f366af28fde2ccda12a201ab454d9c2ffd4dc8da4d61d54adc214bbf6bab85ce9cae957315b12e5d31e870bd6966fa89299042dd74c0d7690342a2d6dc61ced24b48ff7c8f26918f6f2fe986ad2d99f2b5d91ff38277157e4719dad4"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x9, 0x81, 0x8, [@generic={0xd0, 0x3, "39aef73d3f18ded6731e182ddca7dc8ddb685a58ce84639fe1b5fe8414707d2f964d827265e8df3fab9ad44a5d10c9c19ae8c06613cdbcd59d2490a5944c343bf32697f8de530624679e06f950d31f54e88c152fe8afb5ea6874c824d768ec1f7d33b486727e79e1877c75dbdfe28121e0bfee2e92a1adcc62104ef4c97c1dcd6b7871c546275a67d641b0a516a72212a4b9b19b150d59291e9a773ec7781df923c580d55a0e9ac7d60d0f93b7244cbf9640046e271748c3e2905a0312fc431fc907b3b26aeaf3e701d9664e6846"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0xe, 0x0, 0x9, [@generic={0x91, 0x11, "0be08752ea1e64532d1e17faf8a8a5f882fb7c3942f2e4b630a1c0679d39be3bfb1738241f5cf7270beb7e9bbd9bc8d9c67a9474ea06a55ad4bd2c5f38f9077bc6fdc502b7babfc53c662e59fe01404ee6226aa94774fd1348deb9e7c280e211cffec9f3de834345f5975a4e0cdb9704c3d2c3fe971262063c20270f8b0213aa706cffd9903706af5936023a712242"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x1ef, 0xb3, 0x6, 0x4, [@generic={0x98, 0x7, "145892c8328978fc5319b85798ded5bd51b2db18256f48615e4f21bcb9e0a9d2ef39c6bf53f0a14b47151a030f6db1079a24edc2b6977657e769425af356ec04b435a1539d03197b963c9edb8161f331ce89c5d8f1fa1a5ce8f9d2789cc96b0c0a84fb94c84bb0ec6757f5712cc9578d7db3e56d17ec0084ec74af912568396e9ee3fd139885f2934efc13f5c234104a41bed649799b"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x3, 0x2, 0x0, [@generic={0xc9, 0x8, "c035988cba99602de3d1e7b9cfe2a183a494130332bc2b4a887f3e60455642e4774ec35a1b166299bb97b7f2c9fbb4612c93dfd036716b591e21162c9be2e6216bc00d4285a4b6d045f764d9126c7e1dc06f276e9820ca0287246adf56da0da20d81d4b5ac4036c378224080d71fa30ff53863dcf24e8ca1d4dbcdad19bfe5be54e17b2d66d5cc1bf947d0515e4d64f6fcfa7f3f158344b8a4c86ae5c7fb0cf13fb0d8c480bd38823b2fc3e4e11c354e473bbfcdc53e22a0da096938802404bf22148604672db1"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0xd8, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x4289}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x0, 0xfa, 0x8, [@generic={0xd3, 0x21, "81a24db531c7b25e589e209d5e10443c2ce66063af753b350ef14bbc7b9fba683b353e1c1db8288ea11e06487b4b1055301522cf1f879cdfc1c6b41ffae049b0224236732b9422fdaaabc71a3362f7f1ae03ee2764c7d4953252e61ba61aecbb363dc5084b8c461f7207cd63a947a3af819451025878b5530631f53ce970bf4a2adbd681d652e2e21b14c448d88ead82d26f149b619e0b46406b560a001b689fb577e9602efa0a84c7391ec23181370b02529e27d3b2867bdeb0bde3f0afe46035f61ad20854173280815f48966fe19da8"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x67, 0x8, 0x83, [@generic={0xca, 0x22, "0578655688a6ff321a5d718b6b7a36c69132fc7432a35f844078972fcdb932f017365b6fafa5fdcc35f39d45812932976c14bfbea73971689a51e0647ef01da5a6df3be00806a9b65df8f3b7d8577f80456a4833fd1205dc6dcab5b18cd9793f8e2215de8d7d0d5348bf85df5691d049947f79fb77515e278f5ce61e7727280694728d71eccd486551d94967318a22d123f164635709df142c62fbebb6a8bcefbe22461c8e3aeeb895e836dbe1752be94f618e6ddd0eb72c564cc42edc14ca69858eff3e5fe70dd8"}, @generic={0x8e, 0xb, "d5adb76230c567a4ee9be33dee1c133e71c110205af09ed52accc2d910edc2feb6e8be6be88e823aba2fbaa542fd312ef1550c440cf0b7dbd5437ef72e73d34d7b02d15eb2096879b185ae704255c0f733a541eadf0cab2cc17b89239b4d61e3249536347bbf75b2757726fa834b0535e448d3f15b9badeee38ee16cb28581e67ad700a9729b3d091450df7c"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x4, 0x1, 0x4, [@generic={0xe8, 0x6, "8ca0c19551fb19b5df8c9365ab7a9f4706c9470dddeed98141fd5d8821f8d103104ce88543eb44ad082b214ba08e900eb35268b6d855a81380e9f2a7bd4cfeb077a87dcf6a07a95a9844f5f15e985174fc87d136e93746e10f69a12a20a35ead781604d5119628217aef437b6f713520d0382703b99a9eceddc20eeac62d60e5562d2e55c0e9dad48844fa231b5db4b0c7c46b4cb3878d7c18f3097afd17307daa52840a5ef28142123e5f94848d028774d542577c3bb1cc7cb53cbed7a894c964b50366d1b1ff7893d8c963b181a308ac7d392ca2505c7a860bd451cb995ef88479875ee02e"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x200, 0x78, 0x2, 0xb9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x2}]}}]}}, {{0x9, 0x4, 0x5, 0x7, 0xc, 0x7c, 0xd8, 0xd, 0xf9, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "2620d332b1"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xc, 0xf, 0x2, 0x7}, {0x6, 0x24, 0x1a, 0x4, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x3, 0xe0, 0x8}]}], [{{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x6, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x8}, @generic={0xe0, 0x9, "4604679d96a16a52e00980b1b9828b636beb253d998efbce93f81d56c4a139db6f8e39e75c4d3262e118cfc2c8d2ccd2f589303ee192b8ea80dc15f61d9fb7884b22126f4ca829d38750aae4ed17977900df85f017f041d20c570d4c743b2a830755aa456c3d00152bb6c6b2c17f104a254727f230921c350cab35f8332215201989bca9bf2aeb5b0ebbe87db5059c9f540d0df3d9add01487de1f28b82e3043568ff8621b5e874d257fcc76c41642e510f9329ddc651187fddc73468be536b8cf7ee17e22f55d23dabd330768dc314576cea0f2eaa8c3af3e1542205386"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x4, 0x3, 0x18, [@generic={0xb2, 0x10, "56c2b5009e066b7364793da637e19610afb9b92cd5ff1222d2f6f1ae56d2078b66a5272315c66375413bdcde2fff40722451dd537cb180f3d1177e046a187e9275fadfc85ec43bc95d66915ff83ead52cc9ae0d1918468abc90b35bdd8b15421b963b0aaa507c0f249d466f64f25ab46f898a90576b043a260739c938780efc33a92f19df6582866f0c07ccf0db2b34be1e7ee10a93ebff844b0fbd9cf0f4c06523d19aa9f9bb542a6af326b8ec50528"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x200}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x3, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xea2}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x40, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x4}]}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x5, 0x4, 0x5, [@generic={0x70, 0xd, "6b4091fc4c839f159ef82aabfe11f6c6e6371945bcff4765f465a61c3e6f1210b1c039b63886060e2a1263795c0453149c528efc28f1e9910254f2542bec35b918f87819ed22d9435742fb8ce050b28aa41fa74b86b5040d42005139781026b4fbc94ac5e1c77300c02f01cb5107"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x650, 0x3, 0x0, 0x81, [@generic={0xff, 0xa, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5c, 0x9}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0x2, 0xff, 0x1, [@generic={0xb7, 0x3, "c2b00e64f964c7a84da31ded4672192663e12b5e46522aa7376a06f8eda6866e16e21e15235040cfd5c6a1300accec9839b384982e7013f5c0bb5ff4b4251a16f2f9de0cc71002585f4e7125ade55db3bf133e57a6e91e2a32f53201a4dc6881ab8891112e663fdbe8fa94652efa72868fb82decac4e139c3b0dbef7eebf2352974402ecc29de369d3986003ebe3dee8bf6edd88758a87694c95563d82eff6122501aaa102217c51a172b3072def289c27dee9ba26"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x58}]}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0xf, 0x6, 0x2, [@generic={0xcb, 0x2, "545f92d36cbb7356d616bcf1348a4df723c7a02404e6d957fac1aff438f9f82803eb24bbcf5ea810d7aea281f005a8e0af843f775214c5cb80bbf9ffb2bbeeafd86e210e3be36931df63efb4fd0061f4ebf16cba47eeac0f87b1424478c868c4b55f9691ec1912bd514cbd2317dce1666ac528d9e9830b8514ec3b600c03ad1de36f91713af182ec6ac3f795ec55d6d1d3ba584237c9b9e48474af1b38a2f303df9fb9b459b7b4ae6b064da39e48f606fc606d486b54a80d71e3ee981f4e79b107d5ada3a552d58ffd"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x6, 0x5, 0xe0, [@generic={0xc8, 0x3, "855792297b57330ba66c7080f5123b9e23e11958917c48a92376e0eb84977f7920379b38ce0a093c7cc914e99cf6460424d580df7f4adc3135c6e7bfeaf81bb3c2b4d9d998f5e5bff49b13667f90c4ed8983df0bb3c066e29fe9421f21d6d5318527e1b947f49f265d97b9d2f458d88d07cf0e49285f132cb8f92f63eb7382837710a5f6e57dd9669ef0da105d4efa8ccda6533730d6362d4b574159faa9348bf951b0875d41c2bb408a98c5f721c3690c6edcda663acdda45300f10edc70d1ad19897c120c8"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x3, 0x8, 0x3, [@generic={0x56, 0x24, "6ae571a2a4ee7fe27e9e3aaebb7edf9032ca81f1bea0a1f342be9462593ddc872e111dd6d6bf70909e92f3351b9f06df9d573cc2ae03e4094ec3248cbb5ab2f89a4a962ae81973bf1ca1fe20565e6a0ed7a7288a"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0xeb, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x8001}, @generic={0xb1, 0x31, "34c459939c2c9ecab6e24fcb4320ec7b9f2e2bd3f5237f5ad5dcac32285c14776ea732e0039ef655880820e0dfb93dfd7fcb44f967fdfb56f1264a09fc48a981a3ac088c93f18e2126abf5879927eb0db4d5c6b5ca8775c17e1c89a9d778b17c6db06385b1d3de1903c3ee6b9baab29819e1955d2fab9651b37305e62447e10e50c324983037c023d8617a5ef87ac0529dd6e0717875636404e1e5ba93b1a48193fc73ed1a0eec488e7bb4bb1fccc5"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0x10, 0x76, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x3}]}}]}}, {{0x9, 0x4, 0x12, 0x4, 0xc, 0x16, 0xa3, 0x8a, 0xd2, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "e1b1fd24"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x0, 0x28, 0x1}, {0x6, 0x24, 0x1a, 0x5, 0x30}, [@acm={0x4}, @acm={0x4, 0x24, 0x2, 0xd}, @obex={0x5, 0x24, 0x15, 0xb}, @obex={0x5, 0x24, 0x15, 0x6}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "de"}, {0x5, 0x24, 0x0, 0xc}, {0xd, 0x24, 0xf, 0x1, 0x5d1, 0xd2e, 0x2, 0x43}, {0x6, 0x24, 0x1a, 0x5867, 0x3a}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x10, 0x2, 0x4a, 0x101, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xb, 0x0, 0x7fff}, @mdlm_detail={0xf1, 0x24, 0x13, 0x96, "7b70c68be51c9cac891f3c08e79f3c3a1c9d97a55595e14b2e452e3b8f207b4b2b4f906427c204fb2d7b0f5b274fc05edc321528e0d84d56a7ec5a6434f3c4f7d780b7ddc13d883faf6ea6f7176cef2d20c94f98a2af722f79c61d25dcfd498cb7f1ccb50d82700a8e2dd2150207196eaaf7dceb08afe8f8e54cab6ce1f1f15827fd539f944633f1f7146a173d779e0ecf0e67e1f28eb80037ab0dfe52a0605d2bee72524798cd8aa8e9686d9fa74056da335e85707f26aa7449a8c369dc275e5af86184364dd9d47eb807e7240aaaba9dc9895cd2eae714b1a78a4f1f19102e089d859220275aea93684127f2"}, @mbim_extended={0x8, 0x24, 0x1c, 0x101, 0x0, 0x8}]}], [{{0x9, 0x5, 0x2, 0x3, 0x28, 0x7, 0x0, 0x3, [@generic={0xa7, 0xd, "0580d86501edc4a0b2f46809a8bf8edf2090ee23c2ae78eb1e5eb65b8d097574b2c75540ce23809b2d2fa04c2de450d72393d613d3b90cb0b3ff084b38c9ded1d79f67796d1a3d8be6c53817f14b77f6116340ff8a0da74aa9a31c878015e2b9e20d3da3add30a252139eb11489db3e5dd13e2dedc0dab6f17ccbdf71e66aa9c6c6949be00f3c0d2244c9ac68f06f3e2505a0c14554ba91a330f150c4393c794c16ffd8c5c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x7}]}}, {{0x9, 0x5, 0x5, 0x8, 0x440, 0xfb, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x7, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x5}]}}, {{0x9, 0x5, 0xc, 0xd526ee0acb0774ae, 0x8, 0x2, 0x17, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5}]}}, {{0x9, 0x5, 0x8, 0x10, 0x0, 0x9, 0x1b, 0x5, [@generic={0x60, 0xb, "33c5f752612583ff4386053bbffe0429e07301a260efe584312bf3115d004c60739f0672aa0d358408cea720f50aae8bfd4c821706b747d3c074e374d2de68340ccff208627cccbe68fd2d4e6e15e419691bd6d369f30b1f077ef8ed7d8e"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0xf9, 0x8, 0x80, [@generic={0x8a, 0x10, "04a595ff11eba44ad07dc20bc0c2cd4e99cdfc00a8577ac874e76b32cbaace92ae7edf709c5f656b6dbeca8804d739b6f6e8b843b55fd4bfa528da10158ce5ccc2d08a391cc2581830fda2fee616405c75aed6525e1b29e40a72539bb5037457cf261a2181f1a22fa558a1cf2feeb308548b18ad8afb1004b4fa0569056829c2d4ad8843cb51c049"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x7eff50336a966d57, 0x21, 0x4, 0xcd, [@generic={0x4b, 0x9, "51b3e851861be1f31f9b65181471592769b5ccd507ab07a5e5c17d3b61e45b165c29ff1cb8c775d89c0d425ab2a8acae2a8bd45fc627e3738495c648e6edc6c2ef521517b9f01bfa82"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0x8, 0x80, 0x7, [@generic={0x8, 0x24, "f0f0d6744d8e"}, @generic={0x91, 0x3d, "908f80b570f5bd37f8446bc9e47e94011c0c60f612ce648c9ec5f95b146d6b3203708dc27a1584172fe7f32f4f19ba6248943cde295c5c2eb03920c65744e2bc049290fa9b1c0911766c290b886d165632dadafe5dde1ccf657edb38b05473e8bd75a68ba166162301d98142df9416b1ab35dc53739eaa5a234633ba5d83f2ddfcd916963fac9e22e9b21c5f20bf8f"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x650, 0x1, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x6, 0x7f, 0xee, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x6}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7f, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xff, 0x6}, @generic={0xb, 0x10, "16af1088981bd95135"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x8, 0xe, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x400}]}}]}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0xdd, 0x4, 0xa, 0x40, 0x7f}, 0x5, &(0x7f00000027c0)={0x5, 0xf, 0x5}, 0x3, [{0x4a, &(0x7f0000000400)=@string={0x4a, 0x3, "df2c8dde08441e13699ea6cc2831350e690779e79a568c0fb31efd5e23fe3534c0ecbd2df924f8dc267eb1cccbb4c06dcc8b3c726b69bf242032f28f9ce79fe050982c380ff0b1f9"}}, {0x14, &(0x7f0000000480)=@string={0x14, 0x3, "310c2ef29c9df9f9b6b2a706bbf1fb203738"}}, {0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x44b}}]}) syz_usb_connect$cdc_ncm(0x3, 0x7f, &(0x7f0000002440)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0x10, 0xb0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "14b9f4e8489e"}, {0x5, 0x24, 0x0, 0xfffb}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x2, 0x8}, {0x6, 0x24, 0x1a, 0x11d0, 0x2a8d8355f897bfd2}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x6, 0x5c, 0x6}, @acm={0x4, 0x24, 0x2, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0xd, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x3b, 0x3}}}}}}}]}}, &(0x7f0000002740)={0xa, &(0x7f00000024c0)={0xa, 0x6, 0x200, 0x2, 0xa0, 0x4, 0xff, 0x9}, 0xf, &(0x7f0000002500)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x9, 0x1}]}, 0x6, [{0x15, &(0x7f0000002540)=@string={0x15, 0x3, "9be5175f254a4c43bfc723dccd598702f7b7cb"}}, {0x28, &(0x7f0000002580)=@string={0x28, 0x3, "5054daded109fdcd55e785f7cf97cfacf439f20aa42388df7f3e7928c9fcb05b6de9e99e22cb"}}, {0x36, &(0x7f00000025c0)=@string={0x36, 0x3, "fe0e64086b25c89692422ca4484885c5eb9fa835b9f11edf49519e430b3ea6eaabd8d7dbbe4a44606919d2b04d86c5fba226eea1"}}, {0x4, &(0x7f0000002600)=@lang_id={0x4, 0x3, 0x3801}}, {0xa7, &(0x7f0000002640)=@string={0xa7, 0x3, "949c6af1d9790b21a259c7dfb010707671cb95a1ab67fc056826747f15ef9cac977b8f4d8c550d680b5c8e3aeeb1c46b07c4965e9947f77b8f22e1a49e666a285325e1edc5e33c7a14ab8785093dec7e3ea0fd98da2b2bcc598ea465baf5396b5f724f8a1f2c710c4915ec70133707a5087947a6d594255660532a381f3bc6a6a76cc3eaeece25383dcbf5e50b5fb8727837a8b69e52b973426ccbd77c852c48c8df992116"}}, {0x4, &(0x7f0000002700)=@lang_id={0x4, 0x3, 0x280a}}]}) 4.313773184s ago: executing program 6 (id=2650): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000380)=""/130, &(0x7f0000000000)=0x82) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)=ANY=[], 0x41) pipe2(&(0x7f0000001180), 0x4000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x4) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000240)='[-$*\x00', 0x5) pipe2$9p(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 4.203446629s ago: executing program 6 (id=2651): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x82a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000480)={0x0, 0xf00, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r4, 0x1, 0xa6, 0xa6, {{0x1, 0x0, 0xa1ff}, {0x0, 0x3}, {0x14}}}, 0x30}}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r7, 0x21, &(0x7f0000000340)={0x0, 0x40ebb9, 0x8, 0x3, 0xd5}, 0x1) 4.054745678s ago: executing program 0 (id=2652): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000004850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x8, 0x8, &(0x7f00000001c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x183822, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000200)="67650f0d9600000000440f20c066350e000000440f22c0d9e80f01ca0f01c3660f6bf667670f0057db66b9800000c00f326635008000000f30260f300f01d1", 0x3f}], 0x1, 0x10, &(0x7f0000000300), 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0x1000006) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000000}) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r5, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff000) bind$llc(r5, 0x0, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r7, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000000}, 0x800) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)={{0x108, 0x3, 0x3, 0x25, 0x32e, 0x899, 0x3b1, 0x8c3}, "71a92108675d98d1c9cda3d5890a754ebc0ce29c1063ca48a6ac2ae37b38436e2e5ac6f9f801c972d740b0b008cb78cd19a84f18e44f7c2fce3d84a85653b29f28141b9f", ['\x00']}, 0x164) 3.026075985s ago: executing program 2 (id=2653): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)=ANY=[@ANYBLOB="b8000000190001000000000000000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000840005"], 0x13c}}, 0x0) 3.025466916s ago: executing program 6 (id=2654): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)="f553d89d86c3350daedd0c51e3c9cc572b06cf489ea38bfaeb1cb95a0a33102d447d5e1e37edaab000b05e6a1738957cd1e2d9df3b547517f5908766c69ae2f63309c7", 0x43) rt_sigprocmask(0x2, &(0x7f0000000180)={[0xfffffffffffffffc]}, 0x0, 0x8) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x7fff, 0x4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01090050000f8049002100c9a7befe6f6d645a1a11b81b2c4b10fb4f5fdaf9331c7510e19feecb90ee48b49fdb1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fde58b000000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r7 = syz_usb_connect$cdc_ecm(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0xae17da64f5e6a26b, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0xe8, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x19, 0x2, 0x2, 0x6, 0x0, 0xe2, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x8a1, 0x100, 0x2}, [@acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x6, 0x44}}], {{0x9, 0x5, 0x82, 0x2, 0x620, 0x3, 0x3e, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x68, 0x9}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x0, 0x2, 0x0, 0x4, 0x33, 0x36}, 0x1b, &(0x7f0000000440)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xfa, 0x8, 0xfff, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x6, 0x9, 0x75, 0x401, 0x7}]}, 0x5, [{0x60, &(0x7f0000000480)=@string={0x60, 0x3, "e31604cb754d5c50ba283edcfca1305733f48a4b17dab3e3b013a614efd665a307a5ef6840f818848eaa9c68c6be74a9c94ef6e9a4df79e5a4d8b102bfccdc6ea1db6d76e6c460f3834f18d96ae3511884074b70da84a7c9a84bbdde2264"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000540)=@lang_id={0x4}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x820}}]}) syz_usb_control_io(r7, &(0x7f00000008c0)={0x2c, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)={0x0, 0x3, 0xed, @string={0xed, 0x3, "5849fec59b46c29b10e9afb1f780ebf803e51b8b39def7d7bc371a1fc45874544ff9be8f2b7980e31c9eed5b2440f11fc074c877957a64fd1f28eacc74d24eac8a59e3d6cc77c3fd27be1ae7032a840e4d6c10dd275aae6741e9ffe34dee262fb7c5b7f5334c8765e1e9c53fa773c386f1f5f5a881fdadc301f785720e17ddbe1af35ea935264b8eb83ed361890a2532dc86f5e1a0937588a7d446b2d7d84539b97e903d184c87be05d2d68e18ae8bb61d4e649f36f2aee8310d7406c050613472901d8e064b572d8ba460a071c23b28945ccb36eba5c2da92a3cb15deee41091c682f360df8beb3ae565e"}}, &(0x7f0000000800)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x1, 0x4}]}}, &(0x7f0000000e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf7, 0x10, 0xd, 0x5, "c64ef0f9", "dc733a32"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x8, 0x63, 0x80, 0x7, 0x7fff, 0x1}}}, &(0x7f0000000d80)={0x84, &(0x7f0000000900)={0x0, 0xf, 0x20, "50b92c333795e325136c34938833a59c27e3c4846a4e334568cc41d13d33833b"}, &(0x7f0000000940)={0x0, 0xa, 0x1}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0xb}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000a00)={0x20, 0x0, 0x8, {0x20, 0x40, [0xfff0]}}, &(0x7f0000000a40)={0x40, 0x7, 0x2}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0xa8}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "ff9a"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0xa5}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "7599"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x4}}) rt_sigqueueinfo(r3, 0x2e, &(0x7f0000000ac0)={0xfffffffe, 0xc4, 0xff7fffff}) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@local}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES8=0x0, @ANYRES16=r3, @ANYRESOCT], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r8 = timerfd_create(0x8, 0x80000) timerfd_settime(r8, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) r9 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) 3.025161405s ago: executing program 7 (id=2655): r0 = semget$private(0x0, 0x2, 0x9d) semop(r0, &(0x7f0000000240)=[{0x2, 0xd5db}, {0x0, 0x200, 0x800}], 0x2) semtimedop(r0, &(0x7f0000000300)=[{0x0, 0x2, 0x1800}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], &(0x7f0000000480)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = socket(0x2, 0x2, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c7858a4dc0dd35d5c0000000002010400000000000000000300000524000280140001800800010000000000080002c0ac1e00010c000280050001000000000030b403802c00018014000300fe8000000000000000000000000000bb14000400fe8000"/108], 0x6c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x40004, &(0x7f0000000200)=ANY=[@ANYBLOB="000200"]) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0000000300009b383e8e4ac6221e9cc08594e1596de713", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRESDEC=r4], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1.936183383s ago: executing program 2 (id=2656): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4000) r1 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000806000/0x4000)=nil) setxattr$incfs_metadata(0x0, &(0x7f0000000180), 0x0, 0x0, 0x2) ptrace(0x10, r1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000ffffffff0007000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00"/144]}, 0x108) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.821891675s ago: executing program 4 (id=2657): syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004900003800000000000690780a010102ac1414aa070b0441b613a31ed707e2440406010000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000780ff8bdc36556369caebd3102fb7a1633a1696b62df5e92103d78e7ea1cb914593d961bbc8161d623d27bf52a42aeb913b91a6bb8c1a778355b832baea3fcb80b6e2acb874ef0817a98cb39fc9014ff1a48d06e47e8cca204b9954de8a95a06b94b51007f70c607fd04"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8000000000000001, 0xffffffff7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000001c80)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x0, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x3, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x586, 0x6, 0xf667, 0xfffffffb, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0xe, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x82, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0x2c, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x9, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x7ffffffc, 0xff, 0x7, 0x4da8e6f3, 0x5, 0xfffe, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) 950.505688ms ago: executing program 0 (id=2658): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x7, 0x49a6d117, 0x1, 'queue0\x00', 0xfffffff8}) (async) syz_open_dev$dri(0x0, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xb}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) 949.758977ms ago: executing program 2 (id=2659): r0 = socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, 0x0) 684.943687ms ago: executing program 2 (id=2660): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000002c0)={0x4, "421ae3543785259649154c631fb18e6a2ba2b1000000000000000000000007ee"}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) r2 = syz_usb_connect$hid(0x2, 0x49, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@main=@item_012={0x2, 0x0, 0x6, "b5cc"}, @global=@item_012={0x2, 0x1, 0x3, "bed3"}, @global=@item_012={0x0, 0x1, 0x4}]}}, 0x0}, 0x0) 423.09295ms ago: executing program 7 (id=2661): clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 0s ago: executing program 4 (id=2662): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x104) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xa0}, 0x49004) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0xc010}, 0x20000880) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0xc010}, 0x20000880) r3 = getegid() mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r3}}) kernel console output (not intermixed with test programs): limited to 200000 ns [ 696.469952][T13032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 698.216785][T13046] new mount options do not match the existing superblock, will be ignored [ 698.238301][T13046] option changes via remount are deprecated (pid=13041 comm=syz.0.1918) [ 699.733768][T13059] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1923'. [ 699.762416][T13059] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1923'. [ 699.981207][ T30] audit: type=1326 audit(1751007790.765:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.6.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 700.137949][ T30] audit: type=1326 audit(1751007790.775:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.6.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 700.285019][ T30] audit: type=1326 audit(1751007790.775:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.6.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 700.756255][ T30] audit: type=1326 audit(1751007790.785:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.6.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 700.836697][ T30] audit: type=1326 audit(1751007790.785:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.6.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 700.872949][ T30] audit: type=1326 audit(1751007790.795:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.6.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 700.898160][ T30] audit: type=1326 audit(1751007790.805:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.6.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 700.922636][ T30] audit: type=1326 audit(1751007790.825:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.6.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 700.954507][ T30] audit: type=1326 audit(1751007790.835:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.6.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 700.976288][ T30] audit: type=1326 audit(1751007790.845:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.6.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 701.395073][T13089] syzkaller1: entered promiscuous mode [ 701.401831][T13089] syzkaller1: entered allmulticast mode [ 701.415867][T13089] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 701.565040][T11003] Bluetooth: (null): Invalid header checksum [ 701.588114][T11003] Bluetooth: (null): Invalid header checksum [ 703.392023][T13112] FAULT_INJECTION: forcing a failure. [ 703.392023][T13112] name failslab, interval 1, probability 0, space 0, times 0 [ 703.415761][T13112] CPU: 0 UID: 0 PID: 13112 Comm: syz.7.1941 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 703.415792][T13112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 703.415807][T13112] Call Trace: [ 703.415815][T13112] [ 703.415824][T13112] dump_stack_lvl+0x189/0x250 [ 703.415860][T13112] ? __pfx____ratelimit+0x10/0x10 [ 703.415891][T13112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 703.415922][T13112] ? __pfx__printk+0x10/0x10 [ 703.415949][T13112] ? __pfx___might_resched+0x10/0x10 [ 703.416003][T13112] should_fail_ex+0x414/0x560 [ 703.416031][T13112] should_failslab+0xa8/0x100 [ 703.416058][T13112] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 703.416083][T13112] ? __alloc_skb+0x112/0x2d0 [ 703.416107][T13112] __alloc_skb+0x112/0x2d0 [ 703.416131][T13112] netlink_sendmsg+0x5c6/0xb30 [ 703.416162][T13112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 703.416191][T13112] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 703.416214][T13112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 703.416236][T13112] __sock_sendmsg+0x219/0x270 [ 703.416267][T13112] ____sys_sendmsg+0x505/0x830 [ 703.416295][T13112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 703.416327][T13112] ? import_iovec+0x74/0xa0 [ 703.416348][T13112] ___sys_sendmsg+0x21f/0x2a0 [ 703.416373][T13112] ? __pfx____sys_sendmsg+0x10/0x10 [ 703.416450][T13112] ? __fget_files+0x2a/0x420 [ 703.416495][T13112] ? __fget_files+0x3a0/0x420 [ 703.416534][T13112] __x64_sys_sendmsg+0x19b/0x260 [ 703.416563][T13112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 703.416600][T13112] ? __pfx_ksys_write+0x10/0x10 [ 703.416622][T13112] ? rcu_is_watching+0x15/0xb0 [ 703.416658][T13112] ? do_syscall_64+0xbe/0x3b0 [ 703.416695][T13112] do_syscall_64+0xfa/0x3b0 [ 703.416725][T13112] ? lockdep_hardirqs_on+0x9c/0x150 [ 703.416754][T13112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.416776][T13112] ? clear_bhb_loop+0x60/0xb0 [ 703.416801][T13112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.416822][T13112] RIP: 0033:0x7fe70498e929 [ 703.416841][T13112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.416861][T13112] RSP: 002b:00007fe7057e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.416884][T13112] RAX: ffffffffffffffda RBX: 00007fe704bb5fa0 RCX: 00007fe70498e929 [ 703.416899][T13112] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 703.416913][T13112] RBP: 00007fe7057e4090 R08: 0000000000000000 R09: 0000000000000000 [ 703.416926][T13112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.416939][T13112] R13: 0000000000000000 R14: 00007fe704bb5fa0 R15: 00007fff172ba3b8 [ 703.416971][T13112] [ 703.990002][T13124] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1945'. [ 705.000815][T13142] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 705.012743][T10453] kernel read not supported for file /vga_arbiter (pid: 10453 comm: kworker/1:0) [ 705.324630][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1949'. [ 707.199096][T13174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 707.361726][T13183] FAULT_INJECTION: forcing a failure. [ 707.361726][T13183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.376334][T13183] CPU: 1 UID: 0 PID: 13183 Comm: syz.2.1964 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 707.376359][T13183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 707.376371][T13183] Call Trace: [ 707.376379][T13183] [ 707.376386][T13183] dump_stack_lvl+0x189/0x250 [ 707.376434][T13183] ? __pfx____ratelimit+0x10/0x10 [ 707.376465][T13183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 707.376495][T13183] ? __pfx__printk+0x10/0x10 [ 707.376529][T13183] should_fail_ex+0x414/0x560 [ 707.376560][T13183] _copy_to_user+0x31/0xb0 [ 707.376582][T13183] simple_read_from_buffer+0xe1/0x170 [ 707.376614][T13183] proc_fail_nth_read+0x1df/0x250 [ 707.376648][T13183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 707.376681][T13183] ? rw_verify_area+0x258/0x650 [ 707.376704][T13183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 707.376737][T13183] vfs_read+0x1fd/0x980 [ 707.376766][T13183] ? __pfx___mutex_lock+0x10/0x10 [ 707.376800][T13183] ? __pfx_vfs_read+0x10/0x10 [ 707.376826][T13183] ? __fget_files+0x2a/0x420 [ 707.376859][T13183] ? __fget_files+0x3a0/0x420 [ 707.376886][T13183] ? __fget_files+0x2a/0x420 [ 707.376923][T13183] ksys_read+0x145/0x250 [ 707.376951][T13183] ? __pfx_ksys_read+0x10/0x10 [ 707.376972][T13183] ? rcu_is_watching+0x15/0xb0 [ 707.377011][T13183] ? do_syscall_64+0xbe/0x3b0 [ 707.377048][T13183] do_syscall_64+0xfa/0x3b0 [ 707.377078][T13183] ? lockdep_hardirqs_on+0x9c/0x150 [ 707.377108][T13183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.377130][T13183] ? clear_bhb_loop+0x60/0xb0 [ 707.377157][T13183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.377177][T13183] RIP: 0033:0x7fb6af18d33c [ 707.377196][T13183] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 707.377215][T13183] RSP: 002b:00007fb6aff8a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 707.377238][T13183] RAX: ffffffffffffffda RBX: 00007fb6af3b5fa0 RCX: 00007fb6af18d33c [ 707.377254][T13183] RDX: 000000000000000f RSI: 00007fb6aff8a0a0 RDI: 0000000000000005 [ 707.377267][T13183] RBP: 00007fb6aff8a090 R08: 0000000000000000 R09: 0000000000000000 [ 707.377281][T13183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.377294][T13183] R13: 0000000000000000 R14: 00007fb6af3b5fa0 R15: 00007ffecc152f88 [ 707.377337][T13183] [ 708.761803][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1967'. [ 708.892369][ T9731] kernel write not supported for file /adsp1 (pid: 9731 comm: kworker/0:1) [ 710.404767][T13238] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1983'. [ 712.609548][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'. [ 717.598829][T13286] dlm: no local IP address has been set [ 717.604521][T13286] dlm: cannot start dlm midcomms -107 [ 719.567919][T13305] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2004'. [ 721.073500][T13315] dlm: no local IP address has been set [ 721.091040][T13315] dlm: cannot start dlm midcomms -107 [ 721.179512][T13293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.580311][T13318] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2007'. [ 722.117284][T13331] FAULT_INJECTION: forcing a failure. [ 722.117284][T13331] name failslab, interval 1, probability 0, space 0, times 0 [ 722.166441][T13331] CPU: 1 UID: 0 PID: 13331 Comm: syz.2.2013 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 722.166489][T13331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 722.166503][T13331] Call Trace: [ 722.166512][T13331] [ 722.166521][T13331] dump_stack_lvl+0x189/0x250 [ 722.166559][T13331] ? __pfx____ratelimit+0x10/0x10 [ 722.166591][T13331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 722.166623][T13331] ? __pfx__printk+0x10/0x10 [ 722.166652][T13331] ? __pfx___might_resched+0x10/0x10 [ 722.166682][T13331] ? fs_reclaim_acquire+0x7d/0x100 [ 722.166718][T13331] should_fail_ex+0x414/0x560 [ 722.166751][T13331] should_failslab+0xa8/0x100 [ 722.166780][T13331] __kmalloc_noprof+0xcb/0x4f0 [ 722.166805][T13331] ? kfree+0x4d/0x440 [ 722.166828][T13331] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 722.166866][T13331] tomoyo_realpath_from_path+0xe3/0x5d0 [ 722.166901][T13331] ? tomoyo_domain+0xda/0x130 [ 722.166940][T13331] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 722.166966][T13331] tomoyo_path_number_perm+0x1e8/0x5a0 [ 722.166997][T13331] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 722.167049][T13331] ? __lock_acquire+0xab9/0xd20 [ 722.167103][T13331] ? __fget_files+0x2a/0x420 [ 722.167136][T13331] ? __fget_files+0x2a/0x420 [ 722.167163][T13331] ? __fget_files+0x3a0/0x420 [ 722.167190][T13331] ? __fget_files+0x2a/0x420 [ 722.167223][T13331] security_file_ioctl+0xcb/0x2d0 [ 722.167254][T13331] __se_sys_ioctl+0x47/0x170 [ 722.167280][T13331] do_syscall_64+0xfa/0x3b0 [ 722.167311][T13331] ? lockdep_hardirqs_on+0x9c/0x150 [ 722.167342][T13331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.167363][T13331] ? clear_bhb_loop+0x60/0xb0 [ 722.167389][T13331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.167410][T13331] RIP: 0033:0x7fb6af18e929 [ 722.167429][T13331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.167447][T13331] RSP: 002b:00007fb6aff8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 722.167470][T13331] RAX: ffffffffffffffda RBX: 00007fb6af3b5fa0 RCX: 00007fb6af18e929 [ 722.167485][T13331] RDX: 0000200000000040 RSI: 00000000c0306201 RDI: 0000000000000004 [ 722.167499][T13331] RBP: 00007fb6aff8a090 R08: 0000000000000000 R09: 0000000000000000 [ 722.167513][T13331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.167525][T13331] R13: 0000000000000000 R14: 00007fb6af3b5fa0 R15: 00007ffecc152f88 [ 722.167560][T13331] [ 722.268822][T13331] ERROR: Out of memory at tomoyo_realpath_from_path. [ 722.400335][T13329] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20004 [ 722.411866][T13331] binder: 13330:13331 ioctl c0306201 200000000040 returned -14 [ 723.465699][T13347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 725.678093][ T9731] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 726.178078][ T9731] usb 1-1: Using ep0 maxpacket: 16 [ 726.240860][ T9731] usb 1-1: config 0 has no interfaces? [ 726.391030][ T9731] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 726.409353][ T9731] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 726.417386][ T9731] usb 1-1: Manufacturer: syz [ 726.434706][ T9731] usb 1-1: config 0 descriptor?? [ 727.237463][ T978] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 727.377987][ T5934] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 727.416617][ T5981] usb 1-1: USB disconnect, device number 40 [ 727.457983][ T978] usb 7-1: Using ep0 maxpacket: 8 [ 727.466569][ T978] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 727.488179][ T978] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.498670][ T978] usb 7-1: config 0 has no interface number 0 [ 727.505116][ T978] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 727.537895][ T978] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 727.550893][ T5934] usb 3-1: Using ep0 maxpacket: 32 [ 727.556296][ T978] usb 7-1: config 0 interface 52 has no altsetting 0 [ 727.584519][ T5934] usb 3-1: unable to get BOS descriptor or descriptor too short [ 727.593777][ T978] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 727.612548][ T978] usb 7-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 727.623712][ T5934] usb 3-1: config 6 has an invalid interface number: 165 but max is 0 [ 727.632978][ T5934] usb 3-1: config 6 has no interface number 0 [ 727.641119][ T978] usb 7-1: Manufacturer: syz [ 727.645954][ T5934] usb 3-1: config 6 interface 165 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 727.662574][ T5934] usb 3-1: New USB device found, idVendor=0403, idProduct=faf0, bcdDevice=24.f7 [ 727.674092][ T978] usb 7-1: config 0 descriptor?? [ 727.696737][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.727887][ T5934] usb 3-1: Product: syz [ 727.742473][ T5934] usb 3-1: Manufacturer: syz [ 727.747131][ T5934] usb 3-1: SerialNumber: syz [ 728.318499][ T978] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.52/input/input39 [ 728.359310][T13377] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2024'. [ 728.521889][ T5934] ftdi_sio 3-1:6.165: FTDI USB Serial Device converter detected [ 728.643059][ T5934] ftdi_sio ttyUSB0: unknown device type: 0x24f7 [ 728.699757][ T5934] usb 3-1: USB disconnect, device number 43 [ 728.732004][ T5896] usb 7-1: USB disconnect, device number 37 [ 728.732056][ C0] synaptics_usb 7-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 728.786661][ T5934] ftdi_sio 3-1:6.165: device disconnected [ 729.916105][T13421] overlayfs: failed to clone upperpath [ 730.444032][T13417] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2036'. [ 731.660279][T13437] libceph: resolve '4..' (ret=-3): failed [ 732.224096][T13443] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 732.650950][T13451] FAULT_INJECTION: forcing a failure. [ 732.650950][T13451] name failslab, interval 1, probability 0, space 0, times 0 [ 732.665993][T13451] CPU: 0 UID: 0 PID: 13451 Comm: syz.2.2048 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 732.666014][T13451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 732.666024][T13451] Call Trace: [ 732.666031][T13451] [ 732.666038][T13451] dump_stack_lvl+0x189/0x250 [ 732.666066][T13451] ? __pfx____ratelimit+0x10/0x10 [ 732.666087][T13451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 732.666110][T13451] ? __pfx__printk+0x10/0x10 [ 732.666129][T13451] ? __pfx___might_resched+0x10/0x10 [ 732.666149][T13451] ? fs_reclaim_acquire+0x7d/0x100 [ 732.666174][T13451] should_fail_ex+0x414/0x560 [ 732.666196][T13451] should_failslab+0xa8/0x100 [ 732.666216][T13451] kmem_cache_alloc_noprof+0x73/0x3c0 [ 732.666233][T13451] ? alloc_empty_file+0x55/0x1d0 [ 732.666259][T13451] alloc_empty_file+0x55/0x1d0 [ 732.666282][T13451] path_openat+0x107/0x3830 [ 732.666296][T13451] ? arch_stack_walk+0xfc/0x150 [ 732.666340][T13451] ? kasan_save_track+0x4f/0x80 [ 732.666355][T13451] ? kasan_save_track+0x3e/0x80 [ 732.666368][T13451] ? __kasan_slab_alloc+0x6c/0x80 [ 732.666384][T13451] ? getname_flags+0xb8/0x540 [ 732.666405][T13451] ? __pfx_path_openat+0x10/0x10 [ 732.666418][T13451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.666448][T13451] do_filp_open+0x1fa/0x410 [ 732.666461][T13451] ? __lock_acquire+0xab9/0xd20 [ 732.666482][T13451] ? __pfx_do_filp_open+0x10/0x10 [ 732.666515][T13451] ? _raw_spin_unlock+0x28/0x50 [ 732.666534][T13451] ? alloc_fd+0x64c/0x6c0 [ 732.666562][T13451] do_sys_openat2+0x121/0x1c0 [ 732.666586][T13451] ? __pfx_do_sys_openat2+0x10/0x10 [ 732.666609][T13451] ? ksys_write+0x22a/0x250 [ 732.666627][T13451] ? __pfx_ksys_write+0x10/0x10 [ 732.666641][T13451] ? rcu_is_watching+0x15/0xb0 [ 732.666665][T13451] __x64_sys_openat+0x138/0x170 [ 732.666704][T13451] do_syscall_64+0xfa/0x3b0 [ 732.666726][T13451] ? lockdep_hardirqs_on+0x9c/0x150 [ 732.666747][T13451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.666762][T13451] ? clear_bhb_loop+0x60/0xb0 [ 732.666780][T13451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.666794][T13451] RIP: 0033:0x7fb6af18e929 [ 732.666808][T13451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.666821][T13451] RSP: 002b:00007fb6aff8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 732.666837][T13451] RAX: ffffffffffffffda RBX: 00007fb6af3b5fa0 RCX: 00007fb6af18e929 [ 732.666849][T13451] RDX: 00000000001c1341 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 732.666859][T13451] RBP: 00007fb6aff8a090 R08: 0000000000000000 R09: 0000000000000000 [ 732.666869][T13451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.666877][T13451] R13: 0000000000000000 R14: 00007fb6af3b5fa0 R15: 00007ffecc152f88 [ 732.666900][T13451] [ 734.100082][ T5934] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 734.128002][ T5896] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 734.357998][ T5896] usb 1-1: config index 0 descriptor too short (expected 72, got 10) [ 734.367936][ T5934] usb 7-1: Using ep0 maxpacket: 32 [ 734.374829][ T5934] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 734.376395][ T5896] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 734.383079][ T5934] usb 7-1: config 0 has no interface number 0 [ 734.402464][ T5934] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 734.411028][ T5896] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 734.443107][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.452066][ T5896] usb 1-1: string descriptor 0 read error: -71 [ 734.467946][ T5934] usb 7-1: Product: syz [ 734.471922][ T5896] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 734.472160][ T5934] usb 7-1: Manufacturer: syz [ 734.497866][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.514453][ T5934] usb 7-1: SerialNumber: syz [ 734.532285][ T5934] usb 7-1: config 0 descriptor?? [ 734.550795][ T5934] smsc95xx v2.0.0 [ 734.559863][ T5896] usb 1-1: can't set config #1, error -71 [ 734.593642][ T5896] usb 1-1: USB disconnect, device number 41 [ 737.045842][T13508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2064'. [ 737.308348][ T5934] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 737.348414][ T5934] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 737.598721][ T5934] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 737.832624][ T5934] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 738.079302][ T5934] usb 7-1: USB disconnect, device number 38 [ 738.147943][T10453] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 738.308539][T13514] IPVS: set_ctl: invalid protocol: 135 172.20.20.45:20000 [ 739.207949][T10453] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 739.220425][T10453] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.239263][T10453] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 739.254904][T10453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.289592][T10453] usb 1-1: config 0 descriptor?? [ 739.434802][T13527] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2070'. [ 739.620926][T13535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 739.809900][T10453] lenovo 0003:17EF:6047.0019: unknown main item tag 0x0 [ 739.853450][T10453] lenovo 0003:17EF:6047.0019: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 740.563071][T10453] usb 1-1: USB disconnect, device number 42 [ 743.136147][T13564] FAULT_INJECTION: forcing a failure. [ 743.136147][T13564] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 743.180343][T13564] CPU: 1 UID: 0 PID: 13564 Comm: syz.0.2081 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 743.180373][T13564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 743.180382][T13564] Call Trace: [ 743.180387][T13564] [ 743.180393][T13564] dump_stack_lvl+0x189/0x250 [ 743.180418][T13564] ? __pfx____ratelimit+0x10/0x10 [ 743.180438][T13564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 743.180458][T13564] ? __pfx__printk+0x10/0x10 [ 743.180472][T13564] ? fs_reclaim_acquire+0x7d/0x100 [ 743.180497][T13564] should_fail_ex+0x414/0x560 [ 743.180517][T13564] prepare_alloc_pages+0x213/0x610 [ 743.180542][T13564] __alloc_frozen_pages_noprof+0x123/0x370 [ 743.180565][T13564] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 743.180588][T13564] ? __lock_acquire+0xab9/0xd20 [ 743.180609][T13564] ? policy_nodemask+0x27c/0x720 [ 743.180629][T13564] alloc_pages_mpol+0x232/0x4a0 [ 743.180650][T13564] alloc_pages_noprof+0xa9/0x190 [ 743.180668][T13564] get_free_pages_noprof+0xf/0x80 [ 743.180688][T13564] environ_read+0xbc/0x3e0 [ 743.180711][T13564] vfs_readv+0x5aa/0x850 [ 743.180731][T13564] ? __pfx_environ_read+0x10/0x10 [ 743.180748][T13564] ? __pfx_vfs_readv+0x10/0x10 [ 743.180777][T13564] ? __fget_files+0x2a/0x420 [ 743.180797][T13564] ? __fget_files+0x3a0/0x420 [ 743.180814][T13564] ? __fget_files+0x2a/0x420 [ 743.180837][T13564] __x64_sys_preadv+0x197/0x2a0 [ 743.180863][T13564] ? __pfx___x64_sys_preadv+0x10/0x10 [ 743.180878][T13564] ? rcu_is_watching+0x15/0xb0 [ 743.180903][T13564] ? do_syscall_64+0xbe/0x3b0 [ 743.180925][T13564] do_syscall_64+0xfa/0x3b0 [ 743.180946][T13564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.180959][T13564] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 743.180973][T13564] ? clear_bhb_loop+0x60/0xb0 [ 743.180989][T13564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.181003][T13564] RIP: 0033:0x7f16b818e929 [ 743.181015][T13564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.181027][T13564] RSP: 002b:00007f16b9034038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 743.181042][T13564] RAX: ffffffffffffffda RBX: 00007f16b83b5fa0 RCX: 00007f16b818e929 [ 743.181052][T13564] RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000004 [ 743.181061][T13564] RBP: 00007f16b9034090 R08: 0000000000000000 R09: 0000000000000000 [ 743.181069][T13564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.181078][T13564] R13: 0000000000000000 R14: 00007f16b83b5fa0 R15: 00007ffd1a5cc858 [ 743.181098][T13564] [ 743.572912][T13566] program syz.7.2083 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 744.484399][T13573] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2085'. [ 745.819160][T13588] dlm: no local IP address has been set [ 745.825175][T13588] dlm: cannot start dlm midcomms -107 [ 746.343957][T13596] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 746.372770][T13596] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 746.778096][ T5981] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 747.208892][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.215228][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.216914][ T5981] usb 3-1: device descriptor read/64, error -71 [ 747.247960][T13604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2093'. [ 747.597828][ T5981] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 747.748492][T13609] new mount options do not match the existing superblock, will be ignored [ 748.358205][ T5981] usb 3-1: device descriptor read/64, error -71 [ 749.298223][ T5981] usb usb3-port1: attempt power cycle [ 749.717148][ T5981] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 750.462913][T13635] syz.0.2102: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 750.478670][T13635] CPU: 1 UID: 0 PID: 13635 Comm: syz.0.2102 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 750.478696][T13635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 750.478708][T13635] Call Trace: [ 750.478717][T13635] [ 750.478725][T13635] dump_stack_lvl+0x189/0x250 [ 750.478757][T13635] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 750.478782][T13635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 750.478811][T13635] ? __pfx__printk+0x10/0x10 [ 750.478831][T13635] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 750.478863][T13635] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 750.478902][T13635] warn_alloc+0x214/0x310 [ 750.478928][T13635] ? stack_depot_save_flags+0x40/0x900 [ 750.478957][T13635] ? __pfx_warn_alloc+0x10/0x10 [ 750.478986][T13635] ? kasan_save_track+0x4f/0x80 [ 750.479008][T13635] ? xskq_create+0x56/0x170 [ 750.479032][T13635] ? xsk_init_queue+0xb0/0x110 [ 750.479055][T13635] ? xsk_setsockopt+0x43f/0x710 [ 750.479076][T13635] ? do_sock_setsockopt+0x25a/0x3e0 [ 750.479102][T13635] ? __x64_sys_setsockopt+0x18b/0x220 [ 750.479122][T13635] ? do_syscall_64+0xfa/0x3b0 [ 750.479149][T13635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.479177][T13635] __vmalloc_node_range_noprof+0x125/0x12f0 [ 750.479251][T13635] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 750.479285][T13635] ? __kasan_kmalloc+0x93/0xb0 [ 750.479313][T13635] vmalloc_user_noprof+0xad/0xf0 [ 750.479339][T13635] ? xskq_create+0xbf/0x170 [ 750.479378][T13635] xskq_create+0xbf/0x170 [ 750.479407][T13635] xsk_init_queue+0xb0/0x110 [ 750.479435][T13635] xsk_setsockopt+0x43f/0x710 [ 750.479462][T13635] ? __pfx_xsk_setsockopt+0x10/0x10 [ 750.479489][T13635] ? __pfx_xsk_setsockopt+0x10/0x10 [ 750.479512][T13635] ? __pfx_xsk_setsockopt+0x10/0x10 [ 750.479536][T13635] ? do_sock_setsockopt+0x236/0x3e0 [ 750.479558][T13635] ? __pfx_xsk_setsockopt+0x10/0x10 [ 750.479584][T13635] do_sock_setsockopt+0x25a/0x3e0 [ 750.479608][T13635] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 750.479635][T13635] ? __fget_files+0x2a/0x420 [ 750.479669][T13635] __x64_sys_setsockopt+0x18b/0x220 [ 750.479698][T13635] do_syscall_64+0xfa/0x3b0 [ 750.479724][T13635] ? lockdep_hardirqs_on+0x9c/0x150 [ 750.479751][T13635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.479770][T13635] ? clear_bhb_loop+0x60/0xb0 [ 750.479793][T13635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.479811][T13635] RIP: 0033:0x7f16b818e929 [ 750.479828][T13635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.479845][T13635] RSP: 002b:00007f16b9013038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 750.479863][T13635] RAX: ffffffffffffffda RBX: 00007f16b83b6080 RCX: 00007f16b818e929 [ 750.479878][T13635] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 750.479888][T13635] RBP: 00007f16b8210b39 R08: 0000000000000004 R09: 0000000000000000 [ 750.479900][T13635] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.479912][T13635] R13: 0000000000000000 R14: 00007f16b83b6080 R15: 00007ffd1a5cc858 [ 750.479943][T13635] [ 750.480000][T13635] Mem-Info: [ 750.807148][T13635] active_anon:288 inactive_anon:7598 isolated_anon:0 [ 750.807148][T13635] active_file:18972 inactive_file:39111 isolated_file:0 [ 750.807148][T13635] unevictable:768 dirty:282 writeback:0 [ 750.807148][T13635] slab_reclaimable:6132 slab_unreclaimable:104519 [ 750.807148][T13635] mapped:34130 shmem:4265 pagetables:1185 [ 750.807148][T13635] sec_pagetables:0 bounce:0 [ 750.807148][T13635] kernel_misc_reclaimable:0 [ 750.807148][T13635] free:1301820 free_pcp:13563 free_cma:0 [ 750.853329][T13635] Node 0 active_anon:1152kB inactive_anon:30392kB active_file:75580kB inactive_file:156444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136456kB dirty:1128kB writeback:0kB shmem:15524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12996kB pagetables:4584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 750.971211][T13635] Node 1 active_anon:0kB inactive_anon:0kB active_file:308kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 751.014039][T13635] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 751.043603][T13635] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 751.050287][T13635] Node 0 DMA32 free:1281952kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1148kB inactive_anon:30452kB active_file:73804kB inactive_file:156376kB unevictable:1536kB writepending:1128kB present:3129332kB managed:2561464kB mlocked:0kB bounce:0kB free_pcp:42528kB local_pcp:17364kB free_cma:0kB [ 751.151654][T13635] lowmem_reserve[]: 0 0 1 1 1 [ 751.193001][T13635] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1776kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 751.222377][T13635] lowmem_reserve[]: 0 0 0 0 0 [ 751.227777][T13635] Node 1 Normal free:3909960kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:308kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:11520kB local_pcp:7616kB free_cma:0kB [ 751.259250][T13635] lowmem_reserve[]: 0 0 0 0 0 [ 751.263982][T13635] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 751.304178][T13635] Node 0 DMA32: 1518*4kB (UME) 515*8kB (UME) 535*16kB (UME) 601*32kB (UME) 385*64kB (UME) 80*128kB (UME) 55*256kB (UME) 26*512kB (UME) 14*1024kB (UME) 4*2048kB (UE) 283*4096kB (M) = 1281952kB [ 751.329513][T13635] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 751.369282][T13635] Node 1 [ 751.477939][ T5981] usb 3-1: device not accepting address 46, error -71 [ 751.547933][T13635] Normal: 198*4kB (UME) 48*8kB (UME) 33*16kB (UME) 215*32kB (UME) 73*64kB (UE) 19*128kB (UME) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (M) = 3909960kB [ 751.702933][T13635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 751.737078][T13635] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 751.794765][T13635] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 751.848611][T13635] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 751.863848][T13635] 62347 total pagecache pages [ 751.973323][T13635] 0 pages in swap cache [ 751.977689][T13635] Free swap = 124996kB [ 752.153519][T13635] Total swap = 124996kB [ 752.164535][T13635] 2097051 pages RAM [ 752.177326][T13635] 0 pages HighMem/MovableOnly [ 752.190736][T13635] 424578 pages reserved [ 752.194919][T13635] 0 pages cma reserved [ 752.983182][T13660] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2106'. [ 753.290962][T13662] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 753.301864][T13622] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2098'. [ 753.341245][T13653] sp0: Synchronizing with TNC [ 753.919824][T13670] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 753.976933][T13672] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2109'. [ 754.077458][T13675] netlink: 'syz.4.2110': attribute type 10 has an invalid length. [ 754.085429][T13675] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2110'. [ 754.487148][T13677] macsec0: entered promiscuous mode [ 754.493692][T13677] macsec0: entered allmulticast mode [ 754.511003][T13677] veth1_macvtap: entered allmulticast mode [ 754.869219][T13684] new mount options do not match the existing superblock, will be ignored [ 754.879100][T13684] option changes via remount are deprecated (pid=13682 comm=syz.6.2114) [ 755.572254][T13691] FAULT_INJECTION: forcing a failure. [ 755.572254][T13691] name failslab, interval 1, probability 0, space 0, times 0 [ 755.625716][T13691] CPU: 1 UID: 0 PID: 13691 Comm: syz.0.2115 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 755.625745][T13691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 755.625757][T13691] Call Trace: [ 755.625764][T13691] [ 755.625772][T13691] dump_stack_lvl+0x189/0x250 [ 755.625804][T13691] ? __pfx____ratelimit+0x10/0x10 [ 755.625831][T13691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 755.625858][T13691] ? __pfx__printk+0x10/0x10 [ 755.625881][T13691] ? __pfx___might_resched+0x10/0x10 [ 755.625913][T13691] should_fail_ex+0x414/0x560 [ 755.625940][T13691] should_failslab+0xa8/0x100 [ 755.625965][T13691] kmem_cache_alloc_noprof+0x73/0x3c0 [ 755.625986][T13691] ? getname_flags+0xb8/0x540 [ 755.626015][T13691] getname_flags+0xb8/0x540 [ 755.626038][T13691] ? _copy_from_user+0x94/0xb0 [ 755.626058][T13691] user_path_at+0x24/0x60 [ 755.626076][T13691] __se_sys_mount+0x2d3/0x410 [ 755.626107][T13691] ? __pfx___se_sys_mount+0x10/0x10 [ 755.626128][T13691] ? rcu_is_watching+0x15/0xb0 [ 755.626159][T13691] ? do_syscall_64+0xbe/0x3b0 [ 755.626184][T13691] ? __x64_sys_mount+0x20/0xc0 [ 755.626209][T13691] do_syscall_64+0xfa/0x3b0 [ 755.626234][T13691] ? lockdep_hardirqs_on+0x9c/0x150 [ 755.626260][T13691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.626279][T13691] ? clear_bhb_loop+0x60/0xb0 [ 755.626301][T13691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.626328][T13691] RIP: 0033:0x7f16b818e929 [ 755.626345][T13691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.626356][T13691] RSP: 002b:00007f16b9013038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 755.626370][T13691] RAX: ffffffffffffffda RBX: 00007f16b83b6080 RCX: 00007f16b818e929 [ 755.626379][T13691] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000200000000040 [ 755.626388][T13691] RBP: 00007f16b9013090 R08: 0000000000000000 R09: 0000000000000000 [ 755.626395][T13691] R10: 0000000002a00000 R11: 0000000000000246 R12: 0000000000000001 [ 755.626403][T13691] R13: 0000000000000000 R14: 00007f16b83b6080 R15: 00007ffd1a5cc858 [ 755.626422][T13691] [ 757.457871][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 757.457892][ T30] audit: type=1326 audit(1751007848.515:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13676 comm="syz.7.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70498e929 code=0x7fc00000 [ 757.586065][T13715] ntfs3(nullb0): Primary boot signature is not NTFS. [ 757.601955][T13715] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 760.376227][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2127'. [ 760.808748][T13760] FAULT_INJECTION: forcing a failure. [ 760.808748][T13760] name failslab, interval 1, probability 0, space 0, times 0 [ 760.824274][T13760] CPU: 1 UID: 0 PID: 13760 Comm: syz.0.2135 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 760.824305][T13760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 760.824318][T13760] Call Trace: [ 760.824328][T13760] [ 760.824336][T13760] dump_stack_lvl+0x189/0x250 [ 760.824374][T13760] ? __pfx____ratelimit+0x10/0x10 [ 760.824404][T13760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 760.824435][T13760] ? __pfx__printk+0x10/0x10 [ 760.824464][T13760] ? io_recv+0xe5e/0x10e0 [ 760.824497][T13760] should_fail_ex+0x414/0x560 [ 760.824527][T13760] should_failslab+0xa8/0x100 [ 760.824556][T13760] __kmalloc_noprof+0xcb/0x4f0 [ 760.824580][T13760] ? io_cache_alloc_new+0x40/0x100 [ 760.824614][T13760] io_cache_alloc_new+0x40/0x100 [ 760.824647][T13760] io_arm_poll_handler+0x537/0xb70 [ 760.824684][T13760] ? __pfx_io_arm_poll_handler+0x10/0x10 [ 760.824717][T13760] ? io_file_get_normal+0x101/0x2f0 [ 760.824742][T13760] ? io_issue_sqe+0x3bb/0xfd0 [ 760.824767][T13760] io_queue_async+0x79/0x2f0 [ 760.824797][T13760] io_submit_sqes+0xe22/0x1c50 [ 760.824853][T13760] __se_sys_io_uring_enter+0x2df/0x2b20 [ 760.824898][T13760] ? ksys_write+0x1cb/0x250 [ 760.824925][T13760] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 760.824957][T13760] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 760.824998][T13760] ? __pfx_vfs_write+0x10/0x10 [ 760.825027][T13760] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 760.825059][T13760] ? __fget_files+0x3a0/0x420 [ 760.825090][T13760] ? fput+0xa0/0xd0 [ 760.825117][T13760] ? ksys_write+0x22a/0x250 [ 760.825139][T13760] ? __pfx_ksys_write+0x10/0x10 [ 760.825157][T13760] ? rcu_is_watching+0x15/0xb0 [ 760.825189][T13760] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 760.825213][T13760] do_syscall_64+0xfa/0x3b0 [ 760.825238][T13760] ? lockdep_hardirqs_on+0x9c/0x150 [ 760.825263][T13760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.825282][T13760] ? clear_bhb_loop+0x60/0xb0 [ 760.825304][T13760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.825322][T13760] RIP: 0033:0x7f16b818e929 [ 760.825338][T13760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.825354][T13760] RSP: 002b:00007f16b9034038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 760.825374][T13760] RAX: ffffffffffffffda RBX: 00007f16b83b5fa0 RCX: 00007f16b818e929 [ 760.825388][T13760] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000006 [ 760.825398][T13760] RBP: 00007f16b9034090 R08: 0000000000000000 R09: 0000000000000000 [ 760.825410][T13760] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 760.825421][T13760] R13: 0000000000000000 R14: 00007f16b83b5fa0 R15: 00007ffd1a5cc858 [ 760.825450][T13760] [ 762.607013][T13772] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2136'. [ 763.848012][T13783] new mount options do not match the existing superblock, will be ignored [ 768.189246][T13854] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2161'. [ 772.658010][T13898] netlink: 'syz.2.2172': attribute type 5 has an invalid length. [ 773.957952][ T5896] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 774.277081][ T5896] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.377480][ T5896] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 774.561980][ T5896] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 774.643851][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 774.714715][ T5896] usb 3-1: SerialNumber: syz [ 777.692324][ T5896] usb 3-1: 0:2 : does not exist [ 777.697319][ T5896] usb 3-1: unit 5 not found! [ 777.790176][ T5896] usb 3-1: USB disconnect, device number 48 [ 777.879789][T13376] udevd[13376]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 777.968525][ T43] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 778.261762][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 778.273395][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.289425][ T43] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 778.303612][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.338657][ T43] usb 7-1: config 0 descriptor?? [ 779.339771][ T43] lenovo 0003:17EF:6047.001A: unknown main item tag 0x0 [ 779.355939][ T43] lenovo 0003:17EF:6047.001A: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 780.145535][ T43] usb 7-1: USB disconnect, device number 39 [ 780.294032][T13962] fido_id[13962]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 781.258910][T10453] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 781.440907][T10453] usb 1-1: Using ep0 maxpacket: 8 [ 781.474955][T10453] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 8 [ 781.923943][T10453] usb 1-1: config 1 interface 0 has no altsetting 0 [ 781.937028][T10453] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 781.957981][T10453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.981133][T10453] usb 1-1: Product: à°„ [ 781.985330][T10453] usb 1-1: Manufacturer: О [ 781.996488][T10453] usb 1-1: SerialNumber: Ђ [ 782.063372][T13986] dlm: no local IP address has been set [ 782.069312][T13986] dlm: cannot start dlm midcomms -107 [ 782.476751][T13968] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 782.641755][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2198'. [ 784.636801][T10453] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 8 proto 1 vid 0x0525 pid 0xA4A8 [ 784.696466][T10453] usb 1-1: USB disconnect, device number 43 [ 784.739797][T10453] usblp0: removed [ 786.915970][T14024] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 787.455547][T14035] new mount options do not match the existing superblock, will be ignored [ 787.465299][T14035] option changes via remount are deprecated (pid=14033 comm=syz.6.2211) [ 788.030925][ T5896] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 788.209642][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 788.270320][T14041] overlayfs: failed to resolve 'wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8//file0': -2 [ 788.392299][ T5896] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.403795][ T5896] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 788.413746][ T5896] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 788.427903][ T5896] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 788.436984][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 788.445335][ T5896] usb 3-1: SerialNumber: syz [ 788.492864][T14029] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 788.701030][ T5896] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 789.200452][ T5896] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 789.230806][ T5896] usb 3-1: USB disconnect, device number 49 [ 789.350570][T14047] overlayfs: failed to resolve './file0': -2 [ 789.561062][T14053] dlm: no local IP address has been set [ 789.567027][T14053] dlm: cannot start dlm midcomms -107 [ 789.956962][T14058] 9pnet_fd: Insufficient options for proto=fd [ 790.364032][ T5140] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 792.417886][ T5896] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 792.558674][ T5896] usb 3-1: device descriptor read/64, error -71 [ 793.939082][ T5896] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 794.346346][T14086] new mount options do not match the existing superblock, will be ignored [ 794.393204][T14087] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2225'. [ 795.396753][T14096] 9pnet_fd: Insufficient options for proto=fd [ 795.602244][T14104] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 796.001018][T14106] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 796.389375][ T9] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 797.031647][ T9] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 797.047964][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.086885][ T9] usb 7-1: config 0 descriptor?? [ 797.098092][ T5896] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 797.108125][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 797.438044][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 797.453861][ T5896] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 797.465156][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.505463][ T5896] pvrusb2: Hardware description: Terratec Grabster AV400 [ 797.514154][ T5896] pvrusb2: ********** [ 797.519073][ T5896] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 797.531255][ T5896] pvrusb2: Important functionality might not be entirely working. [ 797.539693][ T5896] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 798.076028][ T5896] pvrusb2: ********** [ 798.091791][ T2343] pvrusb2: Invalid write control endpoint [ 798.103363][T14123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2231'. [ 798.138574][T14123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2231'. [ 798.160397][T14123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2231'. [ 798.208239][T14125] pvrusb2: Invalid write control endpoint [ 798.369031][T14123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2231'. [ 798.426147][T14103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2231'. [ 798.440603][T14123] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2231'. [ 798.441523][ T2343] pvrusb2: Invalid write control endpoint [ 798.469272][T14130] new mount options do not match the existing superblock, will be ignored [ 798.479234][T14130] option changes via remount are deprecated (pid=14126 comm=syz.0.2238) [ 798.489834][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 798.503679][ T5896] usb 3-1: USB disconnect, device number 52 [ 798.513396][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 798.522595][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 798.533757][ T2343] pvrusb2: Device being rendered inoperable [ 798.721213][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 798.729333][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 798.744013][ T2343] pvrusb2: Attached sub-driver cx25840 [ 798.757971][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 798.769035][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 798.780654][ T9] gp8psk: usb in 128 operation failed. [ 798.787094][ T9] gp8psk: usb in 137 operation failed. [ 799.385577][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 799.399622][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 799.414095][ T9] usb 7-1: USB disconnect, device number 40 [ 799.931828][T14145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 804.657997][ T9731] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 804.900235][ T9731] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 804.920519][ T9731] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 804.947840][ T9731] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 804.956989][ T9731] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.177427][ T9731] usb 7-1: GET_CAPABILITIES returned 0 [ 805.196341][ T9731] usbtmc 7-1:16.0: can't read capabilities [ 805.316737][T14192] fuse: Bad value for 'fd' [ 806.098896][ T43] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 806.329898][ T43] usb 1-1: config 0 has an invalid interface number: 58 but max is 0 [ 806.347906][ T43] usb 1-1: config 0 has no interface number 0 [ 806.356361][ T43] usb 1-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 806.388005][ T43] usb 1-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 806.412867][ T43] usb 1-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 806.430499][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.449150][ T43] usb 1-1: Product: syz [ 806.459344][ T43] usb 1-1: Manufacturer: syz [ 806.471929][ T43] usb 1-1: SerialNumber: syz [ 806.534772][ T43] usb 1-1: config 0 descriptor?? [ 806.546414][T14192] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 806.776849][ T43] kaweth 1-1:0.58: Firmware present in device. [ 807.419991][ T43] kaweth 1-1:0.58: Error reading configuration (-71), no net device created [ 807.428997][ T43] kaweth 1-1:0.58: probe with driver kaweth failed with error -5 [ 807.447268][ T43] usb 1-1: USB disconnect, device number 44 [ 807.537802][T14226] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2265'. [ 807.562418][ T30] audit: type=1326 audit(1751007898.635:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14227 comm="syz.7.2266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe70498e929 code=0x0 [ 807.664467][T14232] netlink: 'syz.7.2266': attribute type 11 has an invalid length. [ 807.673638][T14232] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2266'. [ 807.874006][ T9] usb 7-1: USB disconnect, device number 41 [ 808.729225][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.751769][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.672061][T14243] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2272'. [ 809.718117][ T43] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 809.991058][ T43] usb 3-1: device descriptor read/64, error -71 [ 810.727894][ T43] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 810.886666][T14273] 9pnet_fd: Insufficient options for proto=fd [ 810.894038][ T43] usb 3-1: device descriptor read/64, error -71 [ 811.010237][ T43] usb usb3-port1: attempt power cycle [ 811.098324][ T5896] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 811.963862][ T43] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 812.135964][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 812.155760][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.166447][ T43] usb 3-1: device descriptor read/8, error -71 [ 812.176528][ T5896] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 812.185656][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.198963][ T5896] usb 1-1: config 0 descriptor?? [ 812.331650][T14293] binder: BINDER_SET_CONTEXT_MGR already set [ 812.337715][T14293] binder: 14291:14293 ioctl 4018620d 200000000040 returned -16 [ 812.347057][T14293] binder: 14291:14293 ioctl c0306201 200000000240 returned -11 [ 812.486675][T14298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2289'. [ 812.610030][ T5896] lenovo 0003:17EF:6047.001B: unknown main item tag 0x0 [ 812.633212][ T5896] lenovo 0003:17EF:6047.001B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 813.771454][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2292'. [ 814.171054][ T9731] usb 1-1: USB disconnect, device number 45 [ 814.177888][ T43] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 814.209790][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 814.237210][ T43] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 814.280865][ T43] usb 3-1: config 0 has no interface number 0 [ 814.306937][ T43] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 814.341779][ T43] usb 3-1: config 0 interface 85 has no altsetting 0 [ 814.399566][ T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 814.477838][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.522125][ T43] usb 3-1: Product: syz [ 814.543848][ T43] usb 3-1: Manufacturer: syz [ 814.896928][ T43] usb 3-1: SerialNumber: syz [ 815.052618][T14318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2295'. [ 815.062871][ T43] usb 3-1: config 0 descriptor?? [ 815.477155][ T43] appletouch 3-1:0.85: Geyser mode initialized. [ 815.504868][ T43] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input41 [ 815.519218][T14340] netlink: 'syz.6.2302': attribute type 1 has an invalid length. [ 815.577699][T14340] 8021q: adding VLAN 0 to HW filter on device bond7 [ 815.634863][T14342] vlan2: entered allmulticast mode [ 815.650244][T14342] veth1: entered allmulticast mode [ 815.666398][T14342] bond7: (slave vlan2): making interface the new active one [ 815.683093][T14342] bond7: (slave vlan2): Enslaving as an active interface with an up link [ 815.830173][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2303'. [ 815.883674][T14307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.893258][T14307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.902547][T14307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.911377][T14307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.996893][T14346] cgroup: fork rejected by pids controller in /syz6 [ 816.211443][ T978] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 816.427973][ T978] usb 7-1: device descriptor read/64, error -71 [ 816.839836][T14859] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2307'. [ 817.055180][ T9731] usb 3-1: USB disconnect, device number 56 [ 817.115384][ T978] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 817.167489][ T9731] appletouch 3-1:0.85: input: appletouch disconnected [ 817.257922][ T978] usb 7-1: device descriptor read/64, error -71 [ 817.289351][T15075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 817.371650][ T978] usb usb7-port1: attempt power cycle [ 817.580066][ T9731] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 817.728803][T15332] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2314'. [ 817.761539][ T978] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 817.828829][ T978] usb 7-1: device descriptor read/8, error -71 [ 818.019133][ T9731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 818.035802][ T9731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.669633][ T978] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 818.678569][ T9731] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 818.803049][ T9731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.817707][ T9731] usb 3-1: config 0 descriptor?? [ 818.847950][ T978] usb 7-1: device descriptor read/8, error -71 [ 818.961364][ T978] usb usb7-port1: unable to enumerate USB device [ 819.977708][ T9731] lenovo 0003:17EF:6047.001C: unknown main item tag 0x0 [ 820.017284][ T9731] lenovo 0003:17EF:6047.001C: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 820.959371][ T9731] usb 3-1: USB disconnect, device number 57 [ 821.420649][ T5875] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 821.533056][T15870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 821.578111][ T5875] usb 7-1: Using ep0 maxpacket: 32 [ 821.590306][ T5875] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 821.608934][ T5875] usb 7-1: can't read configurations, error -22 [ 821.630751][T15872] FAULT_INJECTION: forcing a failure. [ 821.630751][T15872] name failslab, interval 1, probability 0, space 0, times 0 [ 821.644585][T15872] CPU: 0 UID: 0 PID: 15872 Comm: syz.2.2326 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 821.644614][T15872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 821.644628][T15872] Call Trace: [ 821.644637][T15872] [ 821.644646][T15872] dump_stack_lvl+0x189/0x250 [ 821.644681][T15872] ? __pfx____ratelimit+0x10/0x10 [ 821.644711][T15872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 821.644741][T15872] ? __pfx__printk+0x10/0x10 [ 821.644765][T15872] ? __pfx___might_resched+0x10/0x10 [ 821.644795][T15872] ? fs_reclaim_acquire+0x7d/0x100 [ 821.644829][T15872] should_fail_ex+0x414/0x560 [ 821.644859][T15872] should_failslab+0xa8/0x100 [ 821.644889][T15872] __kmalloc_noprof+0xcb/0x4f0 [ 821.644911][T15872] ? tomoyo_encode+0x28b/0x550 [ 821.644945][T15872] tomoyo_encode+0x28b/0x550 [ 821.644969][T15872] tomoyo_realpath_from_path+0x58d/0x5d0 [ 821.645014][T15872] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 821.645032][T15872] tomoyo_path_number_perm+0x1e8/0x5a0 [ 821.645052][T15872] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 821.645082][T15872] ? __lock_acquire+0xab9/0xd20 [ 821.645116][T15872] ? __fget_files+0x2a/0x420 [ 821.645137][T15872] ? __fget_files+0x2a/0x420 [ 821.645155][T15872] ? __fget_files+0x3a0/0x420 [ 821.645173][T15872] ? __fget_files+0x2a/0x420 [ 821.645195][T15872] security_file_ioctl+0xcb/0x2d0 [ 821.645215][T15872] __se_sys_ioctl+0x47/0x170 [ 821.645232][T15872] do_syscall_64+0xfa/0x3b0 [ 821.645253][T15872] ? lockdep_hardirqs_on+0x9c/0x150 [ 821.645273][T15872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.645287][T15872] ? clear_bhb_loop+0x60/0xb0 [ 821.645305][T15872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.645319][T15872] RIP: 0033:0x7fb6af18e929 [ 821.645332][T15872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.645345][T15872] RSP: 002b:00007fb6aff8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 821.645362][T15872] RAX: ffffffffffffffda RBX: 00007fb6af3b5fa0 RCX: 00007fb6af18e929 [ 821.645373][T15872] RDX: 0000200000000940 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 821.645383][T15872] RBP: 00007fb6aff8a090 R08: 0000000000000000 R09: 0000000000000000 [ 821.645391][T15872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.645400][T15872] R13: 0000000000000000 R14: 00007fb6af3b5fa0 R15: 00007ffecc152f88 [ 821.645422][T15872] [ 821.645436][T15872] ERROR: Out of memory at tomoyo_realpath_from_path. [ 821.763196][ T5875] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 822.418768][ T5875] usb 7-1: Using ep0 maxpacket: 32 [ 822.568787][ T5875] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 822.578437][ T5875] usb 7-1: can't read configurations, error -22 [ 822.598702][ T5896] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 822.626444][ T5875] usb usb7-port1: attempt power cycle [ 822.765398][ T5896] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.807908][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 822.819519][ T5896] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 822.838004][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.880976][ T5896] usb 3-1: config 0 descriptor?? [ 823.107647][ T5875] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 823.252792][ T5875] usb 7-1: Using ep0 maxpacket: 32 [ 823.321349][ T5875] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 823.385449][ T5875] usb 7-1: can't read configurations, error -22 [ 823.424846][ T5896] sony 0003:1345:3008.001D: unknown main item tag 0x6 [ 823.538531][T15884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.552446][T15884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.572926][ T5896] sony 0003:1345:3008.001D: hiddev0,hidraw0: USB HID v80.08 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 823.586541][ T5140] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 823.615626][ T5875] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 823.646803][ T5896] sony 0003:1345:3008.001D: failed to claim input [ 823.670925][ T5875] usb 7-1: Using ep0 maxpacket: 32 [ 823.695144][ T5875] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 823.720422][ T5875] usb 7-1: can't read configurations, error -22 [ 823.740819][ T5875] usb usb7-port1: unable to enumerate USB device [ 823.805482][ T6036] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 825.820150][ T5875] usb 3-1: USB disconnect, device number 58 [ 825.998081][ T978] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 826.937898][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 827.065167][ T978] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 827.087932][ T978] usb 1-1: config 0 has no interface number 0 [ 827.100868][ T978] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 827.137928][ T978] usb 1-1: config 0 interface 85 has no altsetting 0 [ 827.178109][ T978] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 827.187204][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.249926][ T978] usb 1-1: Product: syz [ 827.254238][ T978] usb 1-1: Manufacturer: syz [ 827.267705][ T978] usb 1-1: SerialNumber: syz [ 827.896988][ T978] usb 1-1: config 0 descriptor?? [ 828.278067][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 829.438137][ T978] usb 1-1: can't set config #0, error -71 [ 829.574144][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2347'. [ 829.693788][ T978] usb 1-1: USB disconnect, device number 46 [ 830.181279][T15952] FAULT_INJECTION: forcing a failure. [ 830.181279][T15952] name failslab, interval 1, probability 0, space 0, times 0 [ 830.202035][T15952] CPU: 1 UID: 0 PID: 15952 Comm: syz.7.2351 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 830.202067][T15952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 830.202080][T15952] Call Trace: [ 830.202088][T15952] [ 830.202097][T15952] dump_stack_lvl+0x189/0x250 [ 830.202133][T15952] ? __pfx____ratelimit+0x10/0x10 [ 830.202163][T15952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 830.202194][T15952] ? __pfx__printk+0x10/0x10 [ 830.202217][T15952] ? __pfx___might_resched+0x10/0x10 [ 830.202247][T15952] ? fs_reclaim_acquire+0x7d/0x100 [ 830.202282][T15952] should_fail_ex+0x414/0x560 [ 830.202312][T15952] should_failslab+0xa8/0x100 [ 830.202341][T15952] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 830.202365][T15952] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 830.202394][T15952] ? __alloc_skb+0x112/0x2d0 [ 830.202419][T15952] __alloc_skb+0x112/0x2d0 [ 830.202446][T15952] rtmsg_ifinfo_build_skb+0x84/0x260 [ 830.202489][T15952] rtmsg_ifinfo+0x8c/0x1a0 [ 830.202525][T15952] dev_close_many+0x27f/0x410 [ 830.202563][T15952] ? __pfx_dev_close_many+0x10/0x10 [ 830.202593][T15952] ? __mutex_trylock_common+0x153/0x260 [ 830.202638][T15952] unregister_netdevice_many_notify+0x834/0x2320 [ 830.202673][T15952] ? __mutex_lock+0x330/0xe80 [ 830.202709][T15952] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 830.202742][T15952] ? rtnl_dellink+0x331/0x710 [ 830.202760][T15952] ? kasan_save_track+0x4f/0x80 [ 830.202789][T15952] ? unregister_netdevice_queue+0x1b3/0x380 [ 830.202835][T15952] ? netdev_name_node_lookup+0xdf/0x120 [ 830.202866][T15952] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 830.202893][T15952] rtnl_dellink+0x488/0x710 [ 830.202920][T15952] ? __pfx_rtnl_dellink+0x10/0x10 [ 830.203042][T15952] ? __pfx_rtnl_dellink+0x10/0x10 [ 830.203061][T15952] rtnetlink_rcv_msg+0x7cc/0xb70 [ 830.203085][T15952] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 830.203104][T15952] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 830.203121][T15952] ? ref_tracker_free+0x63a/0x7d0 [ 830.203146][T15952] ? __copy_skb_header+0xa7/0x550 [ 830.203174][T15952] ? __pfx_ref_tracker_free+0x10/0x10 [ 830.203212][T15952] netlink_rcv_skb+0x205/0x470 [ 830.203236][T15952] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 830.203258][T15952] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 830.203305][T15952] ? netlink_deliver_tap+0x2e/0x1b0 [ 830.203343][T15952] ? netlink_deliver_tap+0x2e/0x1b0 [ 830.203372][T15952] netlink_unicast+0x758/0x8d0 [ 830.203417][T15952] netlink_sendmsg+0x805/0xb30 [ 830.203450][T15952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.203483][T15952] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 830.203507][T15952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.203532][T15952] __sock_sendmsg+0x219/0x270 [ 830.203567][T15952] ____sys_sendmsg+0x505/0x830 [ 830.203597][T15952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 830.203632][T15952] ? import_iovec+0x74/0xa0 [ 830.203656][T15952] ___sys_sendmsg+0x21f/0x2a0 [ 830.203683][T15952] ? __pfx____sys_sendmsg+0x10/0x10 [ 830.203749][T15952] ? __fget_files+0x2a/0x420 [ 830.203775][T15952] ? __fget_files+0x3a0/0x420 [ 830.203821][T15952] __x64_sys_sendmsg+0x19b/0x260 [ 830.203849][T15952] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 830.203885][T15952] ? __pfx_ksys_write+0x10/0x10 [ 830.203905][T15952] ? rcu_is_watching+0x15/0xb0 [ 830.203941][T15952] ? do_syscall_64+0xbe/0x3b0 [ 830.203976][T15952] do_syscall_64+0xfa/0x3b0 [ 830.204005][T15952] ? lockdep_hardirqs_on+0x9c/0x150 [ 830.204033][T15952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.204053][T15952] ? clear_bhb_loop+0x60/0xb0 [ 830.204090][T15952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.204109][T15952] RIP: 0033:0x7fe70498e929 [ 830.204144][T15952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.204162][T15952] RSP: 002b:00007fe7057e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.204184][T15952] RAX: ffffffffffffffda RBX: 00007fe704bb5fa0 RCX: 00007fe70498e929 [ 830.204197][T15952] RDX: 0000000000040004 RSI: 0000200000002bc0 RDI: 0000000000000004 [ 830.204209][T15952] RBP: 00007fe7057e4090 R08: 0000000000000000 R09: 0000000000000000 [ 830.204221][T15952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.204234][T15952] R13: 0000000000000000 R14: 00007fe704bb5fa0 R15: 00007fff172ba3b8 [ 830.204266][T15952] [ 830.756234][T15954] Invalid ELF header magic: != ELF [ 832.272450][T15975] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2357'. [ 836.127324][T10453] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 836.317950][T10453] usb 7-1: Using ep0 maxpacket: 32 [ 836.340236][T10453] usb 7-1: unable to get BOS descriptor or descriptor too short [ 836.358593][T10453] usb 7-1: config 127 has an invalid interface number: 51 but max is 0 [ 836.373305][T10453] usb 7-1: config 127 has no interface number 0 [ 836.621444][T10453] usb 7-1: config 127 interface 51 has no altsetting 0 [ 836.640916][T10453] usb 7-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=53.d4 [ 836.659519][T10453] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.974488][T10453] usb 7-1: Product: syz [ 836.978796][T10453] usb 7-1: Manufacturer: syz [ 836.983743][T10453] usb 7-1: SerialNumber: syz [ 837.198838][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2369'. [ 837.328212][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 837.424627][T16033] FAULT_INJECTION: forcing a failure. [ 837.424627][T16033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.479016][T16033] CPU: 1 UID: 0 PID: 16033 Comm: syz.0.2377 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 837.479045][T16033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 837.479058][T16033] Call Trace: [ 837.479066][T16033] [ 837.479074][T16033] dump_stack_lvl+0x189/0x250 [ 837.479108][T16033] ? __pfx____ratelimit+0x10/0x10 [ 837.479138][T16033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 837.479163][T16033] ? __pfx__printk+0x10/0x10 [ 837.479192][T16033] should_fail_ex+0x414/0x560 [ 837.479216][T16033] _copy_to_user+0x31/0xb0 [ 837.479235][T16033] simple_read_from_buffer+0xe1/0x170 [ 837.479261][T16033] proc_fail_nth_read+0x1df/0x250 [ 837.479302][T16033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 837.479330][T16033] ? rw_verify_area+0x258/0x650 [ 837.479349][T16033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 837.479376][T16033] vfs_read+0x1fd/0x980 [ 837.479401][T16033] ? __pfx___mutex_lock+0x10/0x10 [ 837.479429][T16033] ? __pfx_vfs_read+0x10/0x10 [ 837.479450][T16033] ? __fget_files+0x2a/0x420 [ 837.479478][T16033] ? __fget_files+0x3a0/0x420 [ 837.479501][T16033] ? __fget_files+0x2a/0x420 [ 837.479533][T16033] ksys_read+0x145/0x250 [ 837.479554][T16033] ? __pfx_ksys_read+0x10/0x10 [ 837.479579][T16033] ? do_syscall_64+0xbe/0x3b0 [ 837.479608][T16033] do_syscall_64+0xfa/0x3b0 [ 837.479634][T16033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.479651][T16033] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 837.479669][T16033] ? clear_bhb_loop+0x60/0xb0 [ 837.479690][T16033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.479707][T16033] RIP: 0033:0x7f16b818d33c [ 837.479723][T16033] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 837.479739][T16033] RSP: 002b:00007f16b9034030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 837.479759][T16033] RAX: ffffffffffffffda RBX: 00007f16b83b5fa0 RCX: 00007f16b818d33c [ 837.479771][T16033] RDX: 000000000000000f RSI: 00007f16b90340a0 RDI: 0000000000000004 [ 837.479782][T16033] RBP: 00007f16b9034090 R08: 0000000000000000 R09: 0000000000000000 [ 837.479793][T16033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.479829][T16033] R13: 0000000000000000 R14: 00007f16b83b5fa0 R15: 00007ffd1a5cc858 [ 837.479859][T16033] [ 838.055676][T10453] usb 7-1: USB disconnect, device number 50 [ 838.335257][T16043] tipc: Started in network mode [ 838.340368][T16043] tipc: Node identity 4, cluster identity 4711 [ 838.346630][T16043] tipc: Node number set to 4 [ 839.348040][ T5875] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 840.190119][ T5875] usb 7-1: config index 0 descriptor too short (expected 160, got 147) [ 840.207826][ T5875] usb 7-1: config 1 has an invalid descriptor of length 169, skipping remainder of the config [ 840.223551][ T5875] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 840.235319][ T5875] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 840.248138][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.256201][ T5875] usb 7-1: Product: syz [ 840.262632][ T5875] usb 7-1: Manufacturer: syz [ 840.267271][ T5875] usb 7-1: SerialNumber: syz [ 843.435969][ T5875] usb 7-1: 0:2 : does not exist [ 843.558876][ T5875] usb 7-1: USB disconnect, device number 51 [ 843.901408][T16085] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2393'. [ 844.923204][T16112] tipc: Started in network mode [ 844.928350][T16112] tipc: Node identity 1c053974, cluster identity 4711 [ 844.935210][T16112] tipc: Enabling of bearer rejected, failed to enable media [ 848.147908][ T5934] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 848.318625][ T5934] usb 1-1: device descriptor read/64, error -71 [ 848.569996][ T5934] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 848.603154][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 848.613343][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 848.625254][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 848.638083][ T9] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 848.647463][T14042] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 848.666261][T14042] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 848.709100][ T5934] usb 1-1: device descriptor read/64, error -71 [ 848.737258][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.818786][ T9] usb 7-1: device descriptor read/64, error -71 [ 848.825553][ T5934] usb usb1-port1: attempt power cycle [ 848.860852][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.946159][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.025280][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.058054][ T9] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 849.256623][ T5934] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 849.279033][ T5934] usb 1-1: device descriptor read/8, error -71 [ 849.317954][ T9] usb 7-1: device descriptor read/64, error -71 [ 849.433199][ T9] usb usb7-port1: attempt power cycle [ 849.498667][T16186] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input42 [ 849.519335][ T5934] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 849.562319][ T5934] usb 1-1: device descriptor read/8, error -71 [ 849.678806][ T5934] usb usb1-port1: unable to enumerate USB device [ 849.798352][ T9] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 849.877967][ T9] usb 7-1: device descriptor read/8, error -71 [ 850.134694][ T9] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 850.221768][ T9] usb 7-1: device descriptor read/8, error -71 [ 850.355288][ T9] usb usb7-port1: unable to enumerate USB device [ 850.768561][ T5140] Bluetooth: hci5: command tx timeout [ 850.797536][ T50] bond1 (unregistering): Released all slaves [ 850.824348][ T50] bond0 (unregistering): Released all slaves [ 850.850031][ T50] bond2 (unregistering): Released all slaves [ 850.873742][ T50] bond3 (unregistering): Released all slaves [ 850.894749][ T50] bond4 (unregistering): Released all slaves [ 850.927075][T16171] chnl_net:caif_netlink_parms(): no params data found [ 851.040485][ T50] tipc: Left network mode [ 851.406379][T16171] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.440047][T16171] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.447323][T16171] bridge_slave_0: entered allmulticast mode [ 851.479987][T16171] bridge_slave_0: entered promiscuous mode [ 851.524347][T16171] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.531733][T16171] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.563678][T16171] bridge_slave_1: entered allmulticast mode [ 851.580640][T16171] bridge_slave_1: entered promiscuous mode [ 852.424434][ T50] hsr_slave_0: left promiscuous mode [ 852.440569][ T50] hsr_slave_1: left promiscuous mode [ 852.463038][ T50] veth1_macvtap: left allmulticast mode [ 852.472819][ T50] veth1_macvtap: left promiscuous mode [ 852.479832][ T50] veth0_macvtap: left promiscuous mode [ 852.485810][ T50] veth1_vlan: left promiscuous mode [ 852.495507][ T50] veth0_vlan: left promiscuous mode [ 852.917972][ T5140] Bluetooth: hci5: command tx timeout [ 853.184615][T16222] new mount options do not match the existing superblock, will be ignored [ 853.201892][T16222] option changes via remount are deprecated (pid=16221 comm=syz.0.2431) [ 853.958025][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 855.056906][T16243] tmpfs: Unknown parameter 'sizd' [ 855.211450][ T5140] Bluetooth: hci5: command tx timeout [ 855.651785][T16242] netlink: 'syz.7.2435': attribute type 1 has an invalid length. [ 855.919095][T16252] FAULT_INJECTION: forcing a failure. [ 855.919095][T16252] name failslab, interval 1, probability 0, space 0, times 0 [ 855.978178][T16252] CPU: 1 UID: 0 PID: 16252 Comm: syz.6.2438 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 855.978208][T16252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 855.978220][T16252] Call Trace: [ 855.978228][T16252] [ 855.978237][T16252] dump_stack_lvl+0x189/0x250 [ 855.978271][T16252] ? __pfx____ratelimit+0x10/0x10 [ 855.978299][T16252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 855.978328][T16252] ? __pfx__printk+0x10/0x10 [ 855.978353][T16252] ? __pfx___might_resched+0x10/0x10 [ 855.978381][T16252] ? fs_reclaim_acquire+0x7d/0x100 [ 855.978412][T16252] should_fail_ex+0x414/0x560 [ 855.978440][T16252] should_failslab+0xa8/0x100 [ 855.978466][T16252] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 855.978490][T16252] ? __d_alloc+0x31/0x6f0 [ 855.978523][T16252] __d_alloc+0x31/0x6f0 [ 855.978557][T16252] d_alloc_pseudo+0x1f/0xb0 [ 855.978588][T16252] alloc_file_pseudo+0xcc/0x210 [ 855.978619][T16252] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 855.978648][T16252] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 855.978677][T16252] ? rcu_is_watching+0x15/0xb0 [ 855.978726][T16252] ? hugetlbfs_get_inode+0x448/0x660 [ 855.978766][T16252] hugetlb_file_setup+0x3e0/0x630 [ 855.978802][T16252] ksys_mmap_pgoff+0x22f/0x760 [ 855.978833][T16252] do_syscall_64+0xfa/0x3b0 [ 855.978863][T16252] ? lockdep_hardirqs_on+0x9c/0x150 [ 855.978903][T16252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.978921][T16252] ? clear_bhb_loop+0x60/0xb0 [ 855.978945][T16252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.978963][T16252] RIP: 0033:0x7f23e7b8e929 [ 855.978981][T16252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.978997][T16252] RSP: 002b:00007f23e894f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 855.979019][T16252] RAX: ffffffffffffffda RBX: 00007f23e7db5fa0 RCX: 00007f23e7b8e929 [ 855.979033][T16252] RDX: 000000000300000c RSI: 0000000000ff5000 RDI: 0000200000000000 [ 855.979047][T16252] RBP: 00007f23e894f090 R08: ffffffffffffffff R09: 0000000000000000 [ 855.979060][T16252] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001 [ 855.979072][T16252] R13: 0000000000000001 R14: 00007f23e7db5fa0 R15: 00007ffdb3f2de88 [ 855.979101][T16252] [ 856.211712][ C1] vkms_vblank_simulate: vblank timer overrun [ 857.053549][T16266] FAULT_INJECTION: forcing a failure. [ 857.053549][T16266] name failslab, interval 1, probability 0, space 0, times 0 [ 857.066233][T16266] CPU: 0 UID: 0 PID: 16266 Comm: syz.6.2443 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 857.066254][T16266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 857.066263][T16266] Call Trace: [ 857.066270][T16266] [ 857.066277][T16266] dump_stack_lvl+0x189/0x250 [ 857.066304][T16266] ? __pfx____ratelimit+0x10/0x10 [ 857.066325][T16266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 857.066347][T16266] ? __pfx__printk+0x10/0x10 [ 857.066365][T16266] ? __pfx___might_resched+0x10/0x10 [ 857.066385][T16266] ? fs_reclaim_acquire+0x7d/0x100 [ 857.066410][T16266] should_fail_ex+0x414/0x560 [ 857.066432][T16266] should_failslab+0xa8/0x100 [ 857.066456][T16266] kmem_cache_alloc_noprof+0x73/0x3c0 [ 857.066473][T16266] ? security_inode_alloc+0x39/0x330 [ 857.066509][T16266] security_inode_alloc+0x39/0x330 [ 857.066526][T16266] inode_init_always_gfp+0x9ed/0xdc0 [ 857.066551][T16266] ? __pfx_sock_alloc_inode+0x10/0x10 [ 857.066572][T16266] alloc_inode+0x82/0x1b0 [ 857.066592][T16266] __sock_create+0x12d/0x9f0 [ 857.066616][T16266] ? look_up_lock_class+0x74/0x170 [ 857.066641][T16266] mptcp_subflow_create_socket+0xfd/0xb40 [ 857.066660][T16266] ? __lock_acquire+0xab9/0xd20 [ 857.066682][T16266] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 857.066706][T16266] __mptcp_nmpc_sk+0x148/0x750 [ 857.066722][T16266] ? __local_bh_enable_ip+0x12d/0x1c0 [ 857.066744][T16266] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 857.066774][T16266] mptcp_setsockopt+0xfc4/0x3460 [ 857.066791][T16266] ? vfs_write+0x8d8/0xa90 [ 857.066813][T16266] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 857.066834][T16266] ? __lock_acquire+0xab9/0xd20 [ 857.066859][T16266] ? sock_common_setsockopt+0x36/0xc0 [ 857.066883][T16266] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 857.066908][T16266] do_sock_setsockopt+0x25a/0x3e0 [ 857.066927][T16266] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 857.066948][T16266] ? __fget_files+0x2a/0x420 [ 857.066974][T16266] __x64_sys_setsockopt+0x18b/0x220 [ 857.066996][T16266] do_syscall_64+0xfa/0x3b0 [ 857.067018][T16266] ? lockdep_hardirqs_on+0x9c/0x150 [ 857.067039][T16266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.067054][T16266] ? clear_bhb_loop+0x60/0xb0 [ 857.067072][T16266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.067087][T16266] RIP: 0033:0x7f23e7b8e929 [ 857.067101][T16266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.067114][T16266] RSP: 002b:00007f23e894f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 857.067130][T16266] RAX: ffffffffffffffda RBX: 00007f23e7db5fa0 RCX: 00007f23e7b8e929 [ 857.067141][T16266] RDX: 0000000000000009 RSI: 0000000000000006 RDI: 0000000000000003 [ 857.067150][T16266] RBP: 00007f23e894f090 R08: 0000000000000004 R09: 0000000000000000 [ 857.067159][T16266] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.067169][T16266] R13: 0000000000000000 R14: 00007f23e7db5fa0 R15: 00007ffdb3f2de88 [ 857.067192][T16266] [ 857.067216][T16266] socket: no more sockets [ 857.267868][ T5140] Bluetooth: hci5: command tx timeout [ 858.957033][T16171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.994645][T16283] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2446'. [ 859.019205][T16171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 859.057466][T16290] new mount options do not match the existing superblock, will be ignored [ 859.144885][T16293] option changes via remount are deprecated (pid=16287 comm=syz.2.2448) [ 859.186974][T16171] team0: Port device team_slave_0 added [ 859.212179][T16171] team0: Port device team_slave_1 added [ 859.499188][T16301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 859.577360][T16301] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 859.629025][T16297] block nbd0: server does not support multiple connections per device. [ 859.652223][T16171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.679532][T16171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.721368][T16297] block nbd0: shutting down sockets [ 859.782450][T16171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.892867][T16171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.924904][T16171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.980897][T16171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.137388][T16171] hsr_slave_0: entered promiscuous mode [ 860.145496][T16171] hsr_slave_1: entered promiscuous mode [ 860.155925][T16171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 860.164441][T16171] Cannot create hsr debugfs directory [ 860.666290][ T30] audit: type=1326 audit(1751007951.735:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16311 comm="syz.2.2456" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6af18e929 code=0x0 [ 860.988181][T16171] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 861.002904][T16171] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 861.013549][T16171] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 861.025363][T16171] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 861.107355][T16171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.132635][T16171] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.147770][T11006] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.155023][T11006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.171194][T11006] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.178387][T11006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.446845][T16171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.625538][T16338] netlink: 'syz.6.2461': attribute type 1 has an invalid length. [ 861.670155][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2461'. [ 861.987885][T10453] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 862.145872][T16171] veth0_vlan: entered promiscuous mode [ 862.165051][T16171] veth1_vlan: entered promiscuous mode [ 862.179621][T10453] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.208927][T10453] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 862.222282][T16171] veth0_macvtap: entered promiscuous mode [ 862.238647][T10453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.240825][T16171] veth1_macvtap: entered promiscuous mode [ 862.273272][T10453] usb 1-1: config 0 descriptor?? [ 862.299500][T10453] pwc: Askey VC010 type 2 USB webcam detected. [ 862.305174][T16171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.334835][T16171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.354945][T16171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.373299][T16171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.384495][T16171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.395424][T16171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.609675][T11005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.617555][T11005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.695741][T10453] pwc: recv_control_msg error -32 req 02 val 2b00 [ 862.713810][T10453] pwc: recv_control_msg error -32 req 02 val 2700 [ 862.723414][T10453] pwc: recv_control_msg error -32 req 02 val 2c00 [ 862.738669][T10453] pwc: recv_control_msg error -32 req 04 val 1000 [ 862.751690][T11003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.752957][T10453] pwc: recv_control_msg error -32 req 04 val 1300 [ 862.775022][T11003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.782450][T10453] pwc: recv_control_msg error -32 req 04 val 1400 [ 862.804309][T10453] pwc: recv_control_msg error -32 req 02 val 2000 [ 862.829432][T10453] pwc: recv_control_msg error -32 req 02 val 2100 [ 862.905376][T10453] pwc: recv_control_msg error -32 req 04 val 1500 [ 862.955757][T10453] pwc: recv_control_msg error -32 req 02 val 2500 [ 862.972649][T10453] pwc: recv_control_msg error -32 req 02 val 2400 [ 862.992935][T10453] pwc: recv_control_msg error -32 req 02 val 2600 [ 863.333141][T10453] pwc: recv_control_msg error -71 req 02 val 2800 [ 863.356870][T10453] pwc: recv_control_msg error -71 req 04 val 1100 [ 863.395463][T10453] pwc: recv_control_msg error -71 req 04 val 1200 [ 863.425766][T10453] pwc: Registered as video103. [ 863.466506][T10453] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input43 [ 863.542261][T10453] usb 1-1: USB disconnect, device number 51 [ 864.022857][T16365] new mount options do not match the existing superblock, will be ignored [ 864.148499][T16368] option changes via remount are deprecated (pid=16362 comm=syz.6.2465) [ 865.806234][T16383] _ÐZ`Ô€@ÿÃ: entered promiscuous mode [ 866.785867][T16388] NILFS (nullb0): couldn't find nilfs on the device [ 868.239792][ T5140] Bluetooth: hci4: unknown advertising packet type: 0x70 [ 869.459761][T16406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2476'. [ 869.584823][T16408] binder: 16405:16408 ioctl 40046205 0 returned -22 [ 869.964299][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.970749][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.817863][ T978] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 872.049636][ T978] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 872.061147][ T978] usb 3-1: config 0 interface 0 has no altsetting 0 [ 872.082278][ T978] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 872.097524][ T978] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 872.122442][ T978] usb 3-1: Product: syz [ 872.126749][ T978] usb 3-1: Manufacturer: syz [ 872.131610][ T978] usb 3-1: SerialNumber: syz [ 872.148004][ T978] usb 3-1: config 0 descriptor?? [ 872.164641][ T978] usb 3-1: selecting invalid altsetting 0 [ 872.614680][T10453] usb 3-1: USB disconnect, device number 59 [ 876.673847][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 877.186255][ T43] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 877.217846][ T43] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 877.247895][ T43] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 877.279529][ T43] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6 [ 877.314444][ T43] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 877.376449][ T43] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 877.417880][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.426242][ T43] usb 5-1: Product: syz [ 877.476093][ T43] usb 5-1: Manufacturer: syz [ 877.548732][ T43] usb 5-1: SerialNumber: syz [ 877.762595][ T43] usb 5-1: ucan: probing device on interface #0 [ 877.808235][ T43] usb 5-1: ucan: invalid endpoint configuration [ 877.983629][ T43] usb 5-1: ucan: probe failed; try to update the device firmware [ 878.076426][ T43] usb 5-1: USB disconnect, device number 11 [ 880.218413][ T5140] Bluetooth: hci1: unexpected event for opcode 0x2036 [ 881.011015][ T30] audit: type=1326 audit(1751007972.085:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16527 comm="syz.2.2515" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6af18e929 code=0x0 [ 881.394443][T16532] dummy0 speed is unknown, defaulting to 1000 [ 881.569414][T16532] dummy0 speed is unknown, defaulting to 1000 [ 881.576448][T16532] dummy0 speed is unknown, defaulting to 1000 [ 882.052202][T16532] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 882.351114][T16532] dummy0 speed is unknown, defaulting to 1000 [ 882.406510][T16532] dummy0 speed is unknown, defaulting to 1000 [ 882.456600][T16532] dummy0 speed is unknown, defaulting to 1000 [ 884.527682][T16543] dummy0 speed is unknown, defaulting to 1000 [ 884.539415][T16552] FAULT_INJECTION: forcing a failure. [ 884.539415][T16552] name failslab, interval 1, probability 0, space 0, times 0 [ 884.695235][T16532] dummy0 speed is unknown, defaulting to 1000 [ 884.712082][T16552] CPU: 0 UID: 0 PID: 16552 Comm: syz.0.2520 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 884.712114][T16552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 884.712126][T16552] Call Trace: [ 884.712145][T16552] [ 884.712153][T16552] dump_stack_lvl+0x189/0x250 [ 884.712185][T16552] ? __pfx____ratelimit+0x10/0x10 [ 884.712212][T16552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 884.712238][T16552] ? __pfx__printk+0x10/0x10 [ 884.712261][T16552] ? __pfx___might_resched+0x10/0x10 [ 884.712286][T16552] ? fs_reclaim_acquire+0x7d/0x100 [ 884.712316][T16552] should_fail_ex+0x414/0x560 [ 884.712343][T16552] should_failslab+0xa8/0x100 [ 884.712368][T16552] __kmalloc_cache_noprof+0x70/0x3d0 [ 884.712390][T16552] ? snd_pcm_oss_change_params_locked+0x1b3/0x3e40 [ 884.712423][T16552] snd_pcm_oss_change_params_locked+0x1b3/0x3e40 [ 884.712457][T16552] ? __pfx___mutex_trylock_common+0x10/0x10 [ 884.712484][T16552] ? __mutex_trylock_common+0x153/0x260 [ 884.712516][T16552] ? rcu_is_watching+0x15/0xb0 [ 884.712543][T16552] ? trace_contention_end+0x39/0x120 [ 884.712560][T16552] ? __mutex_lock+0x330/0xe80 [ 884.712596][T16552] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 884.712622][T16552] ? snd_pcm_oss_get_active_substream+0x136/0x280 [ 884.712655][T16552] ? __pfx___mutex_lock+0x10/0x10 [ 884.712680][T16552] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 884.712713][T16552] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 884.712750][T16552] snd_pcm_oss_get_active_substream+0x1e2/0x280 [ 884.712784][T16552] snd_pcm_oss_set_channels+0x1b6/0x4d0 [ 884.712817][T16552] snd_pcm_oss_ioctl+0xadb/0xdd0 [ 884.712844][T16552] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 884.712870][T16552] __se_sys_ioctl+0xf9/0x170 [ 884.712892][T16552] do_syscall_64+0xfa/0x3b0 [ 884.712925][T16552] ? lockdep_hardirqs_on+0x9c/0x150 [ 884.712950][T16552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.712969][T16552] ? clear_bhb_loop+0x60/0xb0 [ 884.713009][T16552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.713028][T16552] RIP: 0033:0x7f16b818e929 [ 884.713045][T16552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.713063][T16552] RSP: 002b:00007f16b9034038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 884.713084][T16552] RAX: ffffffffffffffda RBX: 00007f16b83b5fa0 RCX: 00007f16b818e929 [ 884.713098][T16552] RDX: 00002000000000c0 RSI: 00000000c0045006 RDI: 0000000000000003 [ 884.713110][T16552] RBP: 00007f16b9034090 R08: 0000000000000000 R09: 0000000000000000 [ 884.713122][T16552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.713133][T16552] R13: 0000000000000000 R14: 00007f16b83b5fa0 R15: 00007ffd1a5cc858 [ 884.713161][T16552] [ 885.033529][T16532] dummy0 speed is unknown, defaulting to 1000 [ 886.566817][T16571] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 886.587898][ T5934] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 886.748114][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 886.771656][ T5934] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=69.40 [ 886.798213][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.839210][ T5934] usb 1-1: config 0 descriptor?? [ 887.063628][ T5934] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 887.102213][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 887.142954][ T5934] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 887.157426][ T5934] usb 1-1: media controller created [ 887.240644][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 887.481209][T16569] hfsplus: unable to find HFS+ superblock [ 887.489384][T16569] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 887.878009][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 888.671147][ T5934] az6027: usb out operation failed. (-71) [ 888.745021][ T5934] az6027: usb out operation failed. (-71) [ 888.808113][ T5934] stb0899_attach: Driver disabled by Kconfig [ 888.841703][ T5934] az6027: no front-end attached [ 888.841703][ T5934] [ 888.902584][ T5934] az6027: usb out operation failed. (-71) [ 888.927975][ T5934] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 888.937328][ T5934] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input44 [ 889.050209][ T5934] dvb-usb: schedule remote query interval to 400 msecs. [ 889.143882][T16608] netlink: 'syz.4.2538': attribute type 1 has an invalid length. [ 889.267145][ T5934] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 890.040911][ T5934] usb 1-1: USB disconnect, device number 52 [ 890.652646][T16613] veth3: entered promiscuous mode [ 890.744002][ T5934] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 892.068023][ T978] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 892.265696][ T978] usb 1-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 892.286577][ T978] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 892.319870][ T978] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 892.337776][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.359506][ T978] usb 1-1: Product: syz [ 892.376277][ T978] usb 1-1: Manufacturer: syz [ 892.400951][ T978] usb 1-1: SerialNumber: syz [ 892.619908][T16640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2548'. [ 892.685594][T16640] netlink: 'syz.0.2548': attribute type 4 has an invalid length. [ 892.700180][T16640] evm: overlay not supported [ 892.713437][ T978] usb 1-1: 0:2 : does not exist [ 892.723289][ T30] audit: type=1804 audit(1751007983.775:550): pid=16640 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.2548" name="/newroot/517/bus/file0" dev="overlay" ino=2834 res=1 errno=0 [ 892.800740][ T978] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 893.095189][ T978] usb 1-1: USB disconnect, device number 53 [ 893.199147][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2553'. [ 893.358218][T16653] netlink: 14528 bytes leftover after parsing attributes in process `syz.7.2552'. [ 893.487595][T16441] udevd[16441]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 897.447900][ T5934] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 898.075607][ T978] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 898.183038][ T5934] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 898.203257][ T5934] usb 7-1: config 0 interface 0 has no altsetting 0 [ 898.222821][ T5934] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 898.232368][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 898.242621][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 898.255672][ T5934] usb 7-1: Product: syz [ 898.261128][ T978] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 898.282835][ T5934] usb 7-1: Manufacturer: syz [ 898.287696][ T978] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 898.303196][ T5934] usb 7-1: SerialNumber: syz [ 898.315421][ T5934] usb 7-1: config 0 descriptor?? [ 898.960608][ T5140] Bluetooth: hci4: unknown advertising packet type: 0x06 [ 898.960746][ T5140] Bluetooth: hci4: unknown advertising packet type: 0x20 [ 899.283385][ T5934] usb 7-1: selecting invalid altsetting 0 [ 899.291151][ T978] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 899.310025][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.386780][ T978] usb 5-1: Product: syz [ 899.393250][ T978] usb 5-1: Manufacturer: syz [ 899.401673][ T978] usb 5-1: SerialNumber: syz [ 899.498881][T10453] usb 7-1: USB disconnect, device number 56 [ 900.682358][T16747] dummy0 speed is unknown, defaulting to 1000 [ 902.551227][ T5934] IPVS: starting estimator thread 0... [ 902.687956][T16774] IPVS: using max 29 ests per chain, 69600 per kthread [ 903.675737][T16790] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 903.700939][T16788] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2587'. [ 903.982497][T16796] FAULT_INJECTION: forcing a failure. [ 903.982497][T16796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.015557][T16796] CPU: 0 UID: 0 PID: 16796 Comm: syz.2.2591 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 904.015587][T16796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 904.015599][T16796] Call Trace: [ 904.015610][T16796] [ 904.015619][T16796] dump_stack_lvl+0x189/0x250 [ 904.015653][T16796] ? __pfx____ratelimit+0x10/0x10 [ 904.015682][T16796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 904.015711][T16796] ? __pfx__printk+0x10/0x10 [ 904.015731][T16796] ? __might_fault+0xb0/0x130 [ 904.015765][T16796] should_fail_ex+0x414/0x560 [ 904.015793][T16796] _copy_from_user+0x2d/0xb0 [ 904.015812][T16796] video_usercopy+0x354/0x14f0 [ 904.015838][T16796] ? smk_tskacc+0x2fc/0x370 [ 904.015858][T16796] ? __pfx___video_do_ioctl+0x10/0x10 [ 904.015878][T16796] ? __pfx_video_usercopy+0x10/0x10 [ 904.015895][T16796] ? smack_file_ioctl+0x2a9/0x340 [ 904.015933][T16796] ? __fget_files+0x2a/0x420 [ 904.015958][T16796] ? __fget_files+0x3a0/0x420 [ 904.015988][T16796] v4l2_ioctl+0x18a/0x1e0 [ 904.016019][T16796] ? __pfx_v4l2_ioctl+0x10/0x10 [ 904.016050][T16796] __se_sys_ioctl+0xf9/0x170 [ 904.016074][T16796] do_syscall_64+0xfa/0x3b0 [ 904.016101][T16796] ? lockdep_hardirqs_on+0x9c/0x150 [ 904.016128][T16796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.016154][T16796] ? clear_bhb_loop+0x60/0xb0 [ 904.016177][T16796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.016196][T16796] RIP: 0033:0x7fb6af18e929 [ 904.016213][T16796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.016230][T16796] RSP: 002b:00007fb6aff8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 904.016251][T16796] RAX: ffffffffffffffda RBX: 00007fb6af3b5fa0 RCX: 00007fb6af18e929 [ 904.016265][T16796] RDX: 0000200000000100 RSI: 00000000c0745645 RDI: 0000000000000003 [ 904.016278][T16796] RBP: 00007fb6aff8a090 R08: 0000000000000000 R09: 0000000000000000 [ 904.016290][T16796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.016302][T16796] R13: 0000000000000000 R14: 00007fb6af3b5fa0 R15: 00007ffecc152f88 [ 904.016331][T16796] [ 904.237913][T10453] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 904.377988][T10453] usb 1-1: device descriptor read/64, error -71 [ 904.614537][ T978] cdc_ncm 5-1:1.0: bind() failure [ 904.621544][T10453] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 904.634010][ T978] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 904.655440][ T978] cdc_ncm 5-1:1.1: bind() failure [ 904.787935][T10453] usb 1-1: device descriptor read/64, error -71 [ 904.888631][ T978] usb 5-1: USB disconnect, device number 12 [ 904.898710][T10453] usb usb1-port1: attempt power cycle [ 905.308151][T10453] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 905.461593][T10453] usb 1-1: device descriptor read/8, error -71 [ 905.807897][T10453] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 905.864064][T10453] usb 1-1: device descriptor read/8, error -71 [ 905.998295][T10453] usb usb1-port1: unable to enumerate USB device [ 906.531565][T16820] FAULT_INJECTION: forcing a failure. [ 906.531565][T16820] name failslab, interval 1, probability 0, space 0, times 0 [ 906.625002][T16820] CPU: 1 UID: 0 PID: 16820 Comm: syz.7.2598 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 906.625029][T16820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 906.625042][T16820] Call Trace: [ 906.625049][T16820] [ 906.625056][T16820] dump_stack_lvl+0x189/0x250 [ 906.625088][T16820] ? __pfx____ratelimit+0x10/0x10 [ 906.625114][T16820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 906.625140][T16820] ? __pfx__printk+0x10/0x10 [ 906.625162][T16820] ? __pfx___might_resched+0x10/0x10 [ 906.625206][T16820] ? fs_reclaim_acquire+0x7d/0x100 [ 906.625237][T16820] should_fail_ex+0x414/0x560 [ 906.625264][T16820] should_failslab+0xa8/0x100 [ 906.625292][T16820] kmem_cache_alloc_noprof+0x73/0x3c0 [ 906.625314][T16820] ? alloc_empty_file+0x55/0x1d0 [ 906.625345][T16820] alloc_empty_file+0x55/0x1d0 [ 906.625374][T16820] alloc_file_pseudo+0x13d/0x210 [ 906.625405][T16820] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 906.625431][T16820] ? do_raw_spin_unlock+0x122/0x240 [ 906.625455][T16820] ? _raw_spin_unlock+0x28/0x50 [ 906.625487][T16820] sock_alloc_file+0xb8/0x2e0 [ 906.625513][T16820] ? __sys_socket+0x12c/0x1b0 [ 906.625543][T16820] __sys_socket+0x13d/0x1b0 [ 906.625576][T16820] __x64_sys_socket+0x7a/0x90 [ 906.625606][T16820] do_syscall_64+0xfa/0x3b0 [ 906.625635][T16820] ? lockdep_hardirqs_on+0x9c/0x150 [ 906.625679][T16820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.625699][T16820] ? clear_bhb_loop+0x60/0xb0 [ 906.625727][T16820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.625747][T16820] RIP: 0033:0x7fe70498e929 [ 906.625765][T16820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.625785][T16820] RSP: 002b:00007fe7057e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 906.625807][T16820] RAX: ffffffffffffffda RBX: 00007fe704bb5fa0 RCX: 00007fe70498e929 [ 906.625823][T16820] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 906.625835][T16820] RBP: 00007fe7057e4090 R08: 0000000000000000 R09: 0000000000000000 [ 906.625847][T16820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.625860][T16820] R13: 0000000000000000 R14: 00007fe704bb5fa0 R15: 00007fff172ba3b8 [ 906.625898][T16820] [ 908.923008][T16853] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2604'. [ 909.750203][T16865] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 913.517826][ T43] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 913.774265][T16872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.798426][T16872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.822031][ T43] usb 7-1: unable to get BOS descriptor or descriptor too short [ 913.838281][ T43] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 913.846429][ T43] usb 7-1: can't read configurations, error -71 [ 914.454768][T16890] FAULT_INJECTION: forcing a failure. [ 914.454768][T16890] name failslab, interval 1, probability 0, space 0, times 0 [ 914.489675][T16892] loop6: detected capacity change from 0 to 1 [ 914.512679][T16890] CPU: 1 UID: 0 PID: 16890 Comm: syz.4.2618 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 914.512708][T16890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 914.512721][T16890] Call Trace: [ 914.512731][T16890] [ 914.512740][T16890] dump_stack_lvl+0x189/0x250 [ 914.512773][T16890] ? __pfx____ratelimit+0x10/0x10 [ 914.512801][T16890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 914.512831][T16890] ? __pfx__printk+0x10/0x10 [ 914.512854][T16890] ? __pfx___might_resched+0x10/0x10 [ 914.512883][T16890] ? fs_reclaim_acquire+0x7d/0x100 [ 914.512915][T16890] should_fail_ex+0x414/0x560 [ 914.512944][T16890] should_failslab+0xa8/0x100 [ 914.512972][T16890] __kmalloc_noprof+0xcb/0x4f0 [ 914.512994][T16890] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 914.513028][T16890] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 914.513071][T16890] genl_family_rcv_msg_doit+0xb8/0x300 [ 914.513105][T16890] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 914.513138][T16890] ? __pfx_genl_get_cmd+0x10/0x10 [ 914.513163][T16890] ? __pfx_nbd_genl_connect+0x10/0x10 [ 914.513206][T16890] genl_rcv_msg+0x60e/0x790 [ 914.513239][T16890] ? __pfx_genl_rcv_msg+0x10/0x10 [ 914.513263][T16890] ? __pfx_nbd_genl_connect+0x10/0x10 [ 914.513297][T16890] netlink_rcv_skb+0x205/0x470 [ 914.513314][T16890] ? __pfx_genl_rcv_msg+0x10/0x10 [ 914.513337][T16890] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 914.513369][T16890] ? down_read+0x1ad/0x2e0 [ 914.513386][T16890] genl_rcv+0x28/0x40 [ 914.513406][T16890] netlink_unicast+0x758/0x8d0 [ 914.513440][T16890] netlink_sendmsg+0x805/0xb30 [ 914.513465][T16890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.513489][T16890] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 914.513507][T16890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.513526][T16890] __sock_sendmsg+0x219/0x270 [ 914.513552][T16890] ____sys_sendmsg+0x505/0x830 [ 914.513576][T16890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 914.513602][T16890] ? import_iovec+0x74/0xa0 [ 914.513621][T16890] ___sys_sendmsg+0x21f/0x2a0 [ 914.513643][T16890] ? __pfx____sys_sendmsg+0x10/0x10 [ 914.513693][T16890] ? __fget_files+0x2a/0x420 [ 914.513714][T16890] ? __fget_files+0x3a0/0x420 [ 914.513754][T16890] __x64_sys_sendmsg+0x19b/0x260 [ 914.513774][T16890] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 914.513800][T16890] ? __pfx_ksys_write+0x10/0x10 [ 914.513819][T16890] ? rcu_is_watching+0x15/0xb0 [ 914.513846][T16890] ? do_syscall_64+0xbe/0x3b0 [ 914.513873][T16890] do_syscall_64+0xfa/0x3b0 [ 914.513897][T16890] ? lockdep_hardirqs_on+0x9c/0x150 [ 914.513920][T16890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.513936][T16890] ? clear_bhb_loop+0x60/0xb0 [ 914.513956][T16890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.513974][T16890] RIP: 0033:0x7f580a78e929 [ 914.514008][T16890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.514024][T16890] RSP: 002b:00007f580b612038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.514042][T16890] RAX: ffffffffffffffda RBX: 00007f580a9b5fa0 RCX: 00007f580a78e929 [ 914.514062][T16890] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 914.514074][T16890] RBP: 00007f580b612090 R08: 0000000000000000 R09: 0000000000000000 [ 914.514095][T16890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.514105][T16890] R13: 0000000000000000 R14: 00007f580a9b5fa0 R15: 00007ffc1488a138 [ 914.514146][T16890] [ 914.515709][ T7184] Dev loop6: unable to read RDB block 1 [ 914.878743][ T7184] loop6: unable to read partition table [ 914.897429][ T7184] loop6: partition table beyond EOD, truncated [ 914.923254][T16892] Dev loop6: unable to read RDB block 1 [ 914.929070][T16892] loop6: unable to read partition table [ 914.934858][T16892] loop6: partition table beyond EOD, truncated [ 914.950416][T16892] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 915.164163][ T30] audit: type=1326 audit(1751008006.235:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16900 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 915.228541][T16903] erspan0: entered promiscuous mode [ 915.234482][T16903] macsec1: entered promiscuous mode [ 915.348002][T16903] macsec1: entered allmulticast mode [ 915.358089][T16903] erspan0: entered allmulticast mode [ 915.367840][ T30] audit: type=1326 audit(1751008006.235:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16900 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 915.457805][T16912] xt_hashlimit: max too large, truncated to 1048576 [ 915.477849][T16912] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 915.569531][ T30] audit: type=1326 audit(1751008006.265:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16900 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 916.112427][ T30] audit: type=1326 audit(1751008006.265:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16900 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 916.139890][ T30] audit: type=1326 audit(1751008006.265:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16900 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 916.207957][ T30] audit: type=1326 audit(1751008006.265:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16900 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 916.249377][ T30] audit: type=1326 audit(1751008006.265:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16900 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 916.355371][ T30] audit: type=1326 audit(1751008006.265:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16900 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 916.478581][ T30] audit: type=1326 audit(1751008006.265:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16900 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 916.533743][ T30] audit: type=1326 audit(1751008006.265:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16900 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e7b8e929 code=0x7ffc0000 [ 917.154315][T16921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2626'. [ 917.886527][T16932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 918.142797][T16937] netlink: 'syz.4.2632': attribute type 1 has an invalid length. [ 919.928302][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 920.117853][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 920.152713][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 920.185406][ T9] usb 3-1: config 0 has no interface number 0 [ 920.193810][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.196490][T10453] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 920.227939][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.448262][T10453] usb 7-1: device descriptor read/64, error -71 [ 920.477004][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 920.491259][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.522607][ T9] usb 3-1: config 0 descriptor?? [ 920.738368][T10453] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 920.767905][ T5934] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 920.897976][T10453] usb 7-1: device descriptor read/64, error -71 [ 920.927894][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 920.938757][ T5934] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 920.967481][ T5934] usb 1-1: config 0 has no interface number 0 [ 920.987305][ T5934] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 921.008817][T10453] usb usb7-port1: attempt power cycle [ 921.020039][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.040383][ T5934] usb 1-1: Product: syz [ 921.044650][ T5934] usb 1-1: Manufacturer: syz [ 921.062457][ T5934] usb 1-1: SerialNumber: syz [ 921.093697][ T5934] usb 1-1: config 0 descriptor?? [ 921.109099][ T9] usbhid 3-1:0.1: can't add hid device: -71 [ 921.123057][ T9] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 921.149951][ T5934] smsc95xx v2.0.0 [ 921.162133][ T9] usb 3-1: USB disconnect, device number 60 [ 921.260185][T16980] FAULT_INJECTION: forcing a failure. [ 921.260185][T16980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 921.283893][T16980] CPU: 1 UID: 0 PID: 16980 Comm: syz.4.2644 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 921.283919][T16980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 921.283932][T16980] Call Trace: [ 921.283940][T16980] [ 921.283948][T16980] dump_stack_lvl+0x189/0x250 [ 921.283981][T16980] ? __pfx____ratelimit+0x10/0x10 [ 921.284008][T16980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 921.284037][T16980] ? __pfx__printk+0x10/0x10 [ 921.284067][T16980] should_fail_ex+0x414/0x560 [ 921.284093][T16980] _copy_to_user+0x31/0xb0 [ 921.284120][T16980] simple_read_from_buffer+0xe1/0x170 [ 921.284148][T16980] proc_fail_nth_read+0x1df/0x250 [ 921.284178][T16980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 921.284209][T16980] ? rw_verify_area+0x258/0x650 [ 921.284229][T16980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 921.284257][T16980] vfs_read+0x1fd/0x980 [ 921.284282][T16980] ? __pfx___mutex_lock+0x10/0x10 [ 921.284313][T16980] ? __pfx_vfs_read+0x10/0x10 [ 921.284335][T16980] ? __fget_files+0x2a/0x420 [ 921.284364][T16980] ? __fget_files+0x3a0/0x420 [ 921.284387][T16980] ? __fget_files+0x2a/0x420 [ 921.284420][T16980] ksys_read+0x145/0x250 [ 921.284444][T16980] ? __pfx_ksys_read+0x10/0x10 [ 921.284462][T16980] ? rcu_is_watching+0x15/0xb0 [ 921.284494][T16980] ? do_syscall_64+0xbe/0x3b0 [ 921.284526][T16980] do_syscall_64+0xfa/0x3b0 [ 921.284553][T16980] ? lockdep_hardirqs_on+0x9c/0x150 [ 921.284579][T16980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.284598][T16980] ? clear_bhb_loop+0x60/0xb0 [ 921.284621][T16980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.284639][T16980] RIP: 0033:0x7f580a78d33c [ 921.284657][T16980] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 921.284674][T16980] RSP: 002b:00007f580b612030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 921.284695][T16980] RAX: ffffffffffffffda RBX: 00007f580a9b5fa0 RCX: 00007f580a78d33c [ 921.284709][T16980] RDX: 000000000000000f RSI: 00007f580b6120a0 RDI: 0000000000000004 [ 921.284722][T16980] RBP: 00007f580b612090 R08: 0000000000000000 R09: 0000000000000000 [ 921.284733][T16980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.284745][T16980] R13: 0000000000000000 R14: 00007f580a9b5fa0 R15: 00007ffc1488a138 [ 921.284774][T16980] [ 921.535721][T16986] netlink: 'syz.2.2646': attribute type 5 has an invalid length. [ 921.587982][T10453] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 921.619581][T10453] usb 7-1: device descriptor read/8, error -71 [ 921.726862][ T5934] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 921.742789][ T5934] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 921.823800][ T5875] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 922.035558][T10453] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 922.058567][T10453] usb 7-1: device descriptor read/8, error -71 [ 922.107934][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 922.114915][ T5875] usb 3-1: config 0 has an invalid interface number: 191 but max is 0 [ 922.560761][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 922.662900][ T5875] usb 3-1: config 0 has no interface number 0 [ 922.669384][T10453] usb usb7-port1: unable to enumerate USB device [ 922.673661][ T5934] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 922.675882][ T5875] usb 3-1: config 0 interface 191 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 922.697442][ T5875] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 922.709710][ T5934] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 922.709893][ T5875] usb 3-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67 [ 922.724268][ T5934] usb 1-1: USB disconnect, device number 58 [ 922.733002][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.733025][ T5875] usb 3-1: Product: syz [ 922.733041][ T5875] usb 3-1: Manufacturer: syz [ 922.733056][ T5875] usb 3-1: SerialNumber: syz [ 922.756971][ T5875] usb 3-1: config 0 descriptor?? [ 922.766207][ T5875] spcp8x5 3-1:0.191: SPCP8x5 converter detected [ 922.778519][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 922.785620][ T9] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 922.793766][ T5875] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 922.803452][ T9] usb 5-1: config 0 has no interface number 0 [ 922.837878][ T9] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 922.851499][ T9] usb 5-1: config 0 interface 85 has no altsetting 0 [ 922.881984][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 922.893946][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.908652][ T9] usb 5-1: Product: syz [ 922.912842][ T9] usb 5-1: Manufacturer: syz [ 922.917433][ T9] usb 5-1: SerialNumber: syz [ 922.926747][ T9] usb 5-1: config 0 descriptor?? [ 922.981769][ T5875] usb 3-1: USB disconnect, device number 61 [ 923.014168][ T5875] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 923.039737][ T5875] spcp8x5 3-1:0.191: device disconnected [ 923.589858][ T9] appletouch 5-1:0.85: Geyser mode initialized. [ 923.600145][ T9] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input46 [ 923.812207][T16995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.821291][T16995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.832298][T16995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.841481][T16995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.067937][T17012] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 925.450194][ T5875] usb 5-1: USB disconnect, device number 13 [ 925.450214][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 926.467893][ T5934] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 926.747978][ T5934] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 926.798922][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.168033][ T5934] usb 7-1: config 0 descriptor?? [ 927.234258][ T5934] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 927.281003][ T5875] appletouch 5-1:0.85: input: appletouch disconnected [ 927.402585][T17032] loop2: detected capacity change from 0 to 7 [ 927.418873][ T9] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 962.118105][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1032.427731][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1032.434751][ C0] rcu: 1-...!: (1 GPs behind) idle=0d5c/1/0x4000000000000000 softirq=78221/78226 fqs=2 [ 1032.446026][ C0] rcu: (detected by 0, t=10502 jiffies, g=70113, q=128 ncpus=2) [ 1032.453777][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1032.453815][ C1] NMI backtrace for cpu 1 [ 1032.453831][ C1] CPU: 1 UID: 0 PID: 10453 Comm: kworker/1:0 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 1032.453852][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1032.453865][ C1] Workqueue: events rtc_timer_do_work [ 1032.453890][ C1] RIP: 0010:_raw_spin_lock+0x1a/0x40 [ 1032.453914][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 fb bf 01 00 00 00 e8 ee 8f 2e f6 48 8d 7b 18 31 f6 31 d2 <31> c9 41 b8 01 00 00 00 45 31 c9 ff 74 24 08 e8 d2 ee 3b f6 48 83 [ 1032.453929][ C1] RSP: 0018:ffffc90000a08c60 EFLAGS: 00000046 [ 1032.453942][ C1] RAX: 0000000000010002 RBX: ffff888055d992e8 RCX: ffffffff99a51303 [ 1032.453954][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888055d99300 [ 1032.453965][ C1] RBP: 0000000000000002 R08: ffffffff8f9fe1f7 R09: 1ffffffff1f3fc3e [ 1032.453977][ C1] R10: dffffc0000000000 R11: ffffffff897f32c0 R12: ffff888055d99340 [ 1032.453990][ C1] R13: ffff888055d99000 R14: dffffc0000000000 R15: ffff8880254a0ad8 [ 1032.454002][ C1] FS: 0000000000000000(0000) GS:ffff888125d83000(0000) knlGS:0000000000000000 [ 1032.454016][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1032.454027][ C1] CR2: 00007fe704ba7de8 CR3: 000000005eb28000 CR4: 00000000003526f0 [ 1032.454041][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1032.454051][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1032.454062][ C1] Call Trace: [ 1032.454070][ C1] [ 1032.454077][ C1] advance_sched+0xc4/0xc90 [ 1032.454099][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1032.454120][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1032.454147][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1032.454165][ C1] __hrtimer_run_queues+0x529/0xc60 [ 1032.454199][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1032.454221][ C1] ? read_tsc+0x9/0x20 [ 1032.454245][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 1032.454282][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 1032.454308][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1032.454330][ C1] [ 1032.454336][ C1] [ 1032.454343][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1032.454361][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 1032.454383][ C1] Code: 74 05 e8 7b a4 65 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f3 8d 2e f6 65 8b 05 ec 9a 37 07 85 c0 74 40 48 c7 04 24 0e 36 [ 1032.454397][ C1] RSP: 0018:ffffc900001077e0 EFLAGS: 00000206 [ 1032.454411][ C1] RAX: 0ffef5ac0acfc600 RBX: 0000000000000a06 RCX: 0ffef5ac0acfc600 [ 1032.454423][ C1] RDX: 0000000000000006 RSI: ffffffff8d96eaa2 RDI: 0000000000000001 [ 1032.454434][ C1] RBP: ffffc90000107870 R08: ffffffff8f9fe1f7 R09: 1ffffffff1f3fc3e [ 1032.454446][ C1] R10: dffffc0000000000 R11: fffffbfff1f3fc3f R12: dffffc0000000000 [ 1032.454459][ C1] R13: ffffc90000107920 R14: ffffffff8df72e80 R15: 1ffff92000020efc [ 1032.454482][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1032.454506][ C1] ? cmos_irq_disable+0x1c6/0x1e0 [ 1032.454529][ C1] cmos_alarm_irq_enable+0x84/0x90 [ 1032.454549][ C1] ? __pfx_cmos_alarm_irq_enable+0x10/0x10 [ 1032.454571][ C1] rtc_timer_do_work+0x815/0x920 [ 1032.454589][ C1] ? look_up_lock_class+0x74/0x170 [ 1032.454615][ C1] ? __pfx_rtc_timer_do_work+0x10/0x10 [ 1032.454633][ C1] ? __lock_acquire+0xab9/0xd20 [ 1032.454660][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1032.454687][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1032.454708][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1032.454730][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1032.454754][ C1] process_scheduled_works+0xade/0x17b0 [ 1032.454792][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1032.454830][ C1] worker_thread+0x8a0/0xda0 [ 1032.454867][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1032.454891][ C1] ? __kthread_parkme+0x7b/0x200 [ 1032.454919][ C1] kthread+0x70e/0x8a0 [ 1032.454936][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1032.454958][ C1] ? __pfx_kthread+0x10/0x10 [ 1032.454974][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1032.454993][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1032.455013][ C1] ? __pfx_kthread+0x10/0x10 [ 1032.455029][ C1] ret_from_fork+0x3fc/0x770 [ 1032.455051][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1032.455074][ C1] ? __switch_to_asm+0x39/0x70 [ 1032.455088][ C1] ? __switch_to_asm+0x33/0x70 [ 1032.455102][ C1] ? __pfx_kthread+0x10/0x10 [ 1032.455117][ C1] ret_from_fork_asm+0x1a/0x30 [ 1032.455140][ C1] [ 1032.455801][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g70113 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1032.911341][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1032.921324][ C0] rcu: RCU grace-period kthread stack dump: [ 1032.927222][ C0] task:rcu_preempt state:R running task stack:26464 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1032.940783][ C0] Call Trace: [ 1032.944086][ C0] [ 1032.947045][ C0] __schedule+0x16a2/0x4cb0 [ 1032.951612][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1032.956858][ C0] ? schedule+0x165/0x360 [ 1032.961226][ C0] ? __lock_acquire+0xab9/0xd20 [ 1032.966099][ C0] ? __pfx___schedule+0x10/0x10 [ 1032.970985][ C0] ? schedule+0x91/0x360 [ 1032.975259][ C0] schedule+0x165/0x360 [ 1032.979443][ C0] schedule_timeout+0x12b/0x270 [ 1032.984312][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1032.989705][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1032.995645][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1033.000976][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1033.006557][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1033.011465][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1033.017762][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1033.023075][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1033.028300][ C0] ? rcu_gp_fqs_loop+0x1521/0x1540 [ 1033.033441][ C0] rcu_gp_kthread+0x99/0x390 [ 1033.038061][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1033.043288][ C0] ? __kthread_parkme+0x7b/0x200 [ 1033.048273][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1033.053456][ C0] kthread+0x70e/0x8a0 [ 1033.057556][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1033.062792][ C0] ? __pfx_kthread+0x10/0x10 [ 1033.067415][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1033.072654][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1033.077880][ C0] ? __pfx_kthread+0x10/0x10 [ 1033.082489][ C0] ret_from_fork+0x3fc/0x770 [ 1033.087109][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1033.092259][ C0] ? __switch_to_asm+0x39/0x70 [ 1033.097040][ C0] ? __switch_to_asm+0x33/0x70 [ 1033.101825][ C0] ? __pfx_kthread+0x10/0x10 [ 1033.106430][ C0] ret_from_fork_asm+0x1a/0x30 [ 1033.111230][ C0] [ 1033.114271][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1033.120610][ C0] CPU: 0 UID: 0 PID: 17031 Comm: syz.7.2661 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 1033.132684][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1033.142763][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 1033.149467][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 b0 79 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 5b 75 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 40 75 0b [ 1033.169093][ C0] RSP: 0018:ffffc9000412f360 EFLAGS: 00000293 [ 1033.175183][ C0] RAX: ffffffff81b4d830 RBX: ffff8880b863b040 RCX: ffff888026aeda00 [ 1033.183168][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1033.191167][ C0] RBP: ffffc9000412f4c0 R08: ffffffff8f9fe1f7 R09: 1ffffffff1f3fc3e [ 1033.199162][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fc3f R12: 1ffff110170e7f2d [ 1033.207159][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b873f968 [ 1033.215166][ C0] FS: 0000000000000000(0000) GS:ffff888125c83000(0000) knlGS:0000000000000000 [ 1033.224119][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1033.230725][ C0] CR2: 0000000000000000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 1033.238724][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000005325 [ 1033.246720][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1033.254714][ C0] Call Trace: [ 1033.258015][ C0] [ 1033.260988][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1033.267365][ C0] ? rcu_is_watching+0x15/0xb0 [ 1033.272165][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1033.277385][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1033.282536][ C0] flush_tlb_mm_range+0x6b1/0x12c0 [ 1033.287674][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1033.292725][ C0] ? free_pgd_range+0x144b/0x14c0 [ 1033.297797][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1033.303374][ C0] tlb_flush_mmu+0x1a7/0x680 [ 1033.308010][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 1033.312729][ C0] ? free_pgd_range+0x144b/0x14c0 [ 1033.317793][ C0] free_ldt_pgtables+0x17b/0x320 [ 1033.322776][ C0] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 1033.328287][ C0] ? down_read+0x1ad/0x2e0 [ 1033.332745][ C0] exit_mmap+0x17c/0xb50 [ 1033.337035][ C0] ? uprobe_clear_state+0x20f/0x290 [ 1033.342272][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1033.347062][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1033.352743][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1033.357467][ C0] ? uprobe_clear_state+0x274/0x290 [ 1033.362690][ C0] ? mm_update_next_owner+0xa7/0x870 [ 1033.368000][ C0] __mmput+0x118/0x420 [ 1033.372095][ C0] exit_mm+0x1da/0x2c0 [ 1033.376191][ C0] ? __pfx_exit_mm+0x10/0x10 [ 1033.380806][ C0] ? rcu_is_watching+0x15/0xb0 [ 1033.385593][ C0] do_exit+0x648/0x22e0 [ 1033.389768][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1033.394810][ C0] ? __pfx_do_exit+0x10/0x10 [ 1033.399441][ C0] do_group_exit+0x21c/0x2d0 [ 1033.404069][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1033.409303][ C0] get_signal+0x125e/0x1310 [ 1033.413887][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 1033.419466][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1033.425665][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 1033.431146][ C0] exit_to_user_mode_loop+0x75/0x110 [ 1033.436473][ C0] do_syscall_64+0x2bd/0x3b0 [ 1033.441094][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1033.446320][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.452416][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1033.457119][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.463037][ C0] RIP: 0033:0x7fe70498e929 [ 1033.467478][ C0] Code: Unable to access opcode bytes at 0x7fe70498e8ff. [ 1033.474516][ C0] RSP: 002b:00007fe7057e40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1033.482962][ C0] RAX: fffffffffffffe00 RBX: 00007fe704bb5fa8 RCX: 00007fe70498e929 [ 1033.490949][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe704bb5fa8 [ 1033.498929][ C0] RBP: 00007fe704bb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1033.506916][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe704bb5fac [ 1033.514998][ C0] R13: 0000000000000000 R14: 00007fff172ba2d0 R15: 00007fff172ba3b8 [ 1033.523021][ C0]