last executing test programs: 15m50.107837865s ago: executing program 0 (id=446): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r3 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r3, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000084000000", @ANYRESOCT=0x0], 0x18}}], 0x2, 0x844) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x210780, 0x0) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000140)={0x18, r2, 0x401}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, 0x0, 0x0, 0x3}) 15m49.998808936s ago: executing program 0 (id=448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081139000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105900000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0xffffffffffffffff, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0x100000001, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15m49.710535568s ago: executing program 0 (id=451): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000003c0)={{}, {0x1}, 0x100, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="6394d3add059f50a374826929ed063188f8a7c40bc3e8c72cf148761e9ff6b01c31c645c77211c85c543e0b44a9c15f520b83d2f63bb495bb8b323da62cb0a1a87dbe88b244fb87a9f0d75af2648b9ec77775aef0b807c9b1cd9ef3ac39a7c98512737a1e77c2c4597aefc65b4e35214288f1b970c5c9c94e6ebbcd1e6e8c9ac012673240d82f4fb851fb493d2545030174d6fdeba6fb3d2c6c9e9a25514f09c8cedacc8b629922669", 0xa9, 0x0, &(0x7f0000000140)={0x2, 0x181, {0x1, 0xc, 0x8b, "f2ac69788a2bf385c75ef68658372d2ff715394b61a0dde2d331007068090b5d2e92187a6ae80fc7b0a020b74caeda89cfc4a0cb306183cbcedfa43737ed1e43bc048e850d490c45a97975ad4dc3abec6fa3b66312b1815d692f1ad2ab644374a893411df4e0c699ab56c68d315a453cfb93e27cd74023cb21fda51dfd4358df1bb0157211feda3a506839", 0xe9, "6a938d7961f0f7383c32eeb1e590073b6858ee1b799e3ebb8a61545c414bfb5507132f53a851bb3d336c98d5249fa8fb548c66c13b6a207e63532a6aeab8c63e6b25f8bcfdd9cbb097410ba0065a67a915a117dbd0c86ee0fc032513d85cea01379b944862fabc4911c26719dc3c0472969cabc6e8cc8119789073140512bdc38adeb660b0099ac4d365e733edec8aefdce329498185d1039765027383dea2158eadef0e3b20283a451f2de9d4a7e137910726729bde8446863303a8759639bb7b2fe027e2c9f4909914143463f5e735999d90244b463bc790dd49055bfec75e9480f153e0385bbfa7"}, 0xd3, "d271a86cf7ffa33c621569374412a3904d4f6df39a1603084ab58854c34e9ae646f3a21aad1bc7039c13ad1cd66643291113bb58e56ac7bc83ef266e98b094989c82d3e9cbb920a3b9d0e90dfac9a63cac5c8688a766564f822597e2429be9186e4b9f0263546145b0fa2c3c87faf2fabec3e0bc32b42f29f2c45becbe9977a33289878232bb24120ba251053dc6acde400817009fef2eedd3fe8ab4fe46bd2721116ac6a1169f06457b4716f760684cd3f0bfd373b889e54fbda69354f793eb222816b1f665bec43d7d19da98ee17e6f7d376"}, 0x260}) syz_usb_connect(0x5, 0x255, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000670250404020014964680102030109024302010000000009042100021085d80009050402ff0300000007250180000500872266b8d895a718d2000000000000000000fe3c9ad0bc7dabdd92000000000070e9f36dffd56e149523b04f7553979abf48a538bc48c7e4a637cc4a89b541bee19126701eccf408bd99d59db466d75bebccb72b8d609c305cd95b3a54eb8b4cab9b90c524ddae7d03c45b03f767301ff08a7cbc2e734271681488df1ddf64a39a9a442ea517f609050702"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000980)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x8, 0x9, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x10, 0x8, 0x2, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x6d86, {{0x24, 0x4, 0x0, 0x3, 0x90, 0x66, 0x0, 0x63, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x25}, {[@cipso={0x86, 0xf, 0x2, [{0x6, 0x9, "e91742cfbfefd8"}]}, @ssrr={0x89, 0x7, 0x22, [@multicast2]}, @timestamp_addr={0x44, 0x34, 0x5a, 0x1, 0x7, [{@loopback, 0x8}, {@private=0xa010100}, {@multicast2, 0x1}, {@local, 0x7f}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x10}]}, @end, @noop, @noop, @timestamp_prespec={0x44, 0x2c, 0xfe, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}, {@local, 0x5}, {@private=0xa010100, 0x40}, {@multicast2, 0x4}, {@broadcast, 0x5}]}]}}}}}) sendmsg$inet(r1, &(0x7f0000000d00)={&(0x7f0000000440)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000480)="20841edc732ae94d1e62c895a65d96a8dba573b17a05cc67d169f1ae846b5aa344cf6e1773f329f51ad188720003e19999c8de726ff287a5e1b959bf0cd83b969dcf93445fbba1f0de580837a75276c0ce57c4", 0x53}, {&(0x7f0000000500)="e667bc29df704fc40c1b4e5e4a40ef6310054410f51c379c4dc14d1d95c83a527a83cc004671ff9898a8e01c", 0x2c}, {&(0x7f0000000540)="a860886df6e2daa6a1f26579b9e8a3df4fcb1c258ba24ba29103177720edd4e47e84dd8a46ea78ba5c5e8f39aa5e8202e0b012552b55ef283e1f091851712811d9d8a932c60e5c031e47f8ad396b08522d5768e814d065b5182c8790581da6c37e1318e991fa0726373a63ec5a5530c234d7e99392d3f47de0a07d0c3e4cc1a187", 0x81}, {&(0x7f0000000f40)="cd4d67d3962c1e27866c52ca60b5d82a028c12172c2f9a3f40a7e63459a7e1f57e5900eaa49495e863fd58ec1bd4608622f8fb0edf872720cccb87e8052b4220119981a1d6cdcc30b1e4c7a755a3d6897be92c82ee8d3e50aba1c90856f444fb3c1a32508820cbc2b5321cb198d00804e74d5831a0d491d3f1aee317a7451599cf08902788ec5bf67b031c2e23c30da334fa7eee53bec8ccbce2fab79ba7b087ed47253ac9ff9bc70bb98a57b8675096aaeaa348a46a5859dfe60bdf89695879ab7ad815bf2061a40269df73b0dc3bfd930bbf56305bcff29f332acc33ea8a1c183ec32a1104ea2008fb4f304b0145d30da305a9783c772999389539d93577d9c280a7f208959fc3ca656dd30c4d3f0bd0d393e31aac237f8fd23f4289332891b4e7dcd0bebf8391d32cc90e4b0b9d47b342967d047f2c83004af52b6318ca88b5b70c1b72743500cd68406819ac1ada28332612fb2aed504e8d57f291a2c23952118f8a199669e3c35c1ccfd5bdc5aeedea9f9eab2b649b30cda50fda8debda8d5a4e5b123a6d59b2631dd59f4d27cef38e1569621f892b8abf63d8cf13a165ac6ca1d164138c1f90693b279e0263d9665d97ea46e44efa124ba8ee67bdab618cc621409665b876efa7215d590c3559bf1d7a70ad68017e7b3ceb87d4384932e06eb1604895d488db43127a97501015be64e0542d287b0b0ddce0cdb4298b8cbd855e6208087521881c3b76eaec8aa22fb1a9e51112adf034f37747abb58006192cd6b12b135a5ceb97246d9af11b3d62199df4fc454fdbae79ef482163f42f42bb68cdb7676b86d8300d29034dac5d5ba935ecbcf081744c8e0ac7060edde7289006bd3f1a5173bda157b8a86acdc5c56528bbbab3d6aa8ba9917676b6b34407edd543324113c89889b9c1e43b140ed289692de33a5b3925394b2301e16d3868752feb362e4f3a105267b87ba59d1d4fd9ef8f5fa26338c05a72911be3fda0f499ae1f0a12a7042c2ffd41be70c293aee4f7c1142738a924d2bfc8a36ea604614f44035d095f7d81976a0f4ae1dc7e2c5f5c041f1061916bd6fbad2148d7fd5de49eaa54c9f087c49733983505c0367661ce02cc6061550893fbc4df4265351d08c6680672b6b05a14662823e7b31311d983070dfa06f99016645858240e347b2543aff9e76657d7feaa3b49673601d34764e10a2f9105bf6e6ae65e7a266edd039b3d825bb34bdaba6117154619aebbbb73216a629ae046fce3e0ebd0fc81ada235e67b3e45a9d655b8dc8114fe66869d6ad9c35fc413128db51cdaafc3c9c5dea4dca1183a28a265a165d01cbb966c8e872b16247f9ec86845f95b3edff02ede640826c8862794dd29474fe191ea8b94375a4a6fadd8d1d23ed8cea94a50edfd3f0afc8181eb0c42a85e15cb3d999377b9a723e634e93ce56f3923ec4789eace30c018ab30f2faa6fd99af85213d5af5cee58fa2c402d36d859b56e0664dfc98a1646884d750fd29f155d1149b2553977974d108f132ec459b3a616c1a9481c23acb9ce182e13da290fba8683acd985c7971d774f27334b7cc5e65d5f4f48732aa6de980511921fae454d3e91d562086e8ad4f2f4ce83e51010dcc954c33da926d9e35c4bf85786b6a7dd2070d5e9a4a96312bca1af423c69dd93f75434022ef6b22402fe59d441fb7b869860c1f72fbcb60cc228d87b6ad2da873ae04e326724cc74667983c3f1f20ed632803a455569a1ebcfc7211d12653a0fe022599d860d86a9b5e3746618a932313e2b81cd9562a234457bba6245866aa408303a50ec363f0d67221453ca49debdfc0099662d95e8f637ce4f14d6c38197cad2516d60914d8f736a6f131d1ae440b19731531f45ab68ca12efc23bdf295c47719fd75989bd67d308572c95655e61c3eeb47f3ddc759dcfe72edb73950b1447f6598b13606ce3ac8fcb60b67500264250b6b56553477cd4bd55aad1cbfc497391f3a5ee7efef2006e0a6fda57a24f580a95d0c5e997a983bbe4f9bddc3c2a2e03b8983defa8f199222f1f3cd02e7417677168886d07552d134a40caf06163390f5ea230e384dbc806e674118c443ef8c5cbf9e9a94b629e048de3923000bbd60a9b0478b3d155c01a548668902d4b4fd69ac3742399bc95f724ad416a76ed2d7ac7efa7d33cb3b7f7f5e0cc6be37c6fb1a6f3496ee79145611e9ad819ef929beb13875c7e28458e9a379ce77b487fb0e98b1aa0e635f47a50e78c370a97cee5569611271ff56380d8c3b3ecb1b08600111ac752e3fbebdb219c257399078d264c7d515249ee0050df16d94b5d2003766bdc08d7f1c9670fecacf239103a7e2ca720803f7ba9dfba59bd2849e7291d8325e72d2d75bc0f71138ccec98e0db9110142a204629365c1b1cfbf22cd86c2bddadd3e5fd4fd1040b0556a9c02c67bc356bfe4832f3baf5a4eb559ff103daff51e616710bbc887d0868acb8422691d93bbf37520c38c97be966c14aa4a1d212cbbe44fbddbc69e076f5c90e04634249f73d8b9ca2657acaaffdb76a8bcf11f4dff71e79c5deffeec906360b3a6f31e5cade40e2805d35e1ad935109cd6e01212d63078f0fe59e80cafa759f2117b38a21a770118379febd7fec70025793bd5fa67242b83d9444aef4b4b193a5765b8c64a7206fd81e1630def75667f5256f39dcfb2aaf73b3015ce9fe3edacccf4fae5d7c94c9a15814cc17effca0d1d50fc056e0a4fd5dae473e2aa1bf9077343608f230d40a6dadd8f17d830222427ffc197c570808e8a00634cf09d43443dd1cec90755f0aeccb899900c211bef9c2908dc7a0c1547da9c105cbfe98725fb59a131e8c44fd61fbdc8e5daf665232671c118299cc95eb86d1043938029e0d6744b34e554222f56dd6fb0268e89610eba5b8c00ec6126c18b84bfe54096670a203a1eaca1a2db1129a7f5c30474fcf7e5ebe428a7dda773787162a8ccd7409d92c61cbddaa92cc25429f261361ffa1f6cbb0f4cddeb34b1e435e30c9c086aac566940b246cc0eb08d0c32e52c17752dc3c57a7d3dbb65e52336c42c8a4d705ee4e2dea1471f191f70beb0063cdb58e53ca5e460e27a32d01a0b9db8fb36d4a4ec36429b8f316fcb4e655ca65e08bab8095381a9ea6024a2b6a8a0b3fdb3cb3ba5161e1526d2ca6c8a514253c9d8907431582a95102df27823c8864d0e6a2c1a0a55b00d0a4b90f1aa567a19e8237e5f08ecd72915e1c5921f2edc7299cfe320ef82c26adba12bf22e2ec21352b2e777a922161223b4071c772e1015911a8c378a8db24be57f906270d5c3754f3fb6a4ba15488003b26ea398fa3e809e98a766057997e79dd891340b2707cebd67116dcecf8200fd9884f3505b995f0226563e43fc3ee7f698119c5e8f25be8334c55bbba468c299e329feaf799ca655efbe783c10736e8b55b149434e1ff93d2724606107b91f2a380d72f78d6e67502efcd41deeb05b61faa1c2bbf1fa54b920b0107ad6ad66c7030aa4062da097bf98601070df9df3a0e7e21605c498261a6d16122f32d5d0b01e0e0a8258f126416695857f172ff3e1ba4373b4f54786171b877d061fb3ca4cd01675659cf08602efa6b1bf980fe469bccc932136f71ca4cde7e2e2775832eb5a2b3c657b2f5f5696e0c94662397c02d270cfb6172a312170b6b5405707ce513d5a2c82cd95acfc753b0045fbfe0cdfe9c21c6c8ec524e5b1cf19272da334a0fc910e445eba97e89e4d85a8f3a4d6332cef5253108217e873251089d00d2b492d699d111e746654ea4ee595da410a7575045396a53ca11b42d7a45420492b4c22c939baa5e6ecc08dc4b7368dc593b8470a619cf9fe94775a4e598f2d2b9e4696bc9608aefe966d13dd0679cb88e432c5c397b04902ccbf34b623e5fb4ccbaf06dd154cc9e122638abbfb050de41cefd92d8ec9425f2e019a5bc23b5388027e148a5d8f52ae42bcebb063b358ab42fbbc9b54dab2335e9ecda7a0153131fa449e6f734bd1eaf4d06ff98cf9008c7f05b5c6b58da7dee927f71b1211710749a9f54aa4983c6438ab4d9ac10af0540209f22f0482fcd77dd06ac433fd2d1513fe958be14b48f16ee4d8d2aeabe9988ed5dceebf3d16720d4ad015e6b7cf05d89a3a3966707326133274aaaf9e3c1bf29ad99fea72e483c3a60b9f08fade5a54bcd4189d5dd525db39c2b8ed1dfc07d6f3ed66d450c2649443e1eb8376b89ec32c3d4a6abd2648f0badd888255ce05223668330b152e5d71db227f98bae28e22d76cb463015cef58ac6dacf2445959c821605010536cc31e4987fb2d02ce1d0e54fd4c250c27a9bf5cfe6e79b0fbbee9fd2fe7465f79b757736cfc2b4a50cf6245f660a1828b59f2e6fede287fa324d2e236a46547e3f7f561e68228cfced14c8d13b0590e8ede105fcd8c8a393174e903ed790f99dfc27b4422caa0d0cebaa0d2206784918382ea6d772c83cbfd118ec0bb28ad184265962cccbbc525f42c83d90109542a5c75d8a42b995c58e13b18ab1af9ff7daab45793f929eb06960a6d2ff50612a808918048d11be4f4f8eb3a4e8ee0852c22fa0b8cf8dbd01ac120a8d384ebbb331b5a5d32916794871b9ec1e01b9f9d7b3f4e2163efee125252f95e4faff544299994b26c2a1805630becf3a7dbc05b084dfe0aab840201128d8495fafa9a0ab63a49939c0e3f21bac851c5555f5ed91f0acc21099b57fd96dc89f580b9b5efe54e10147b407375e6c3350228098e10ea855809279d22b413bc7ed3e9bf4bf13f29066b802de18726a3ebc115ba92799b6dbcdfbaab8fb7ddb133e2fd8e4af85248127f56f4867e098c01a65d7d854246c4d221a8052741c50df7561d202e748ef33736062659a4d5b2633239afc696fc0945adcfbf4daacd503ae50df5bf923bd1d35f953eca24eb6a98046f4ef9991f8f8661fb1d1509021a0cd9cfca603bde2d81eee46f9777c9a3400685c24428c1a518a53d48881f638ce4290c29721000a14280960e9f8c5e6e558437df8a7828ad6d3acdfb2312e3cd50a9d7c0791e203e1927cd54712ffd1a64787351defadd2ace9d758791b5da598b8e029fba0c0f67fb86fe821dadcbabfec06db3b4db0e42cfeb46ead92e5874f60c7eec7c8f7dc9ee0476d48f771d6d84903439dfaf5df2475fe37b4ae45533b240ce51efaea1351d09de291530a39cab3112d4c49a7209af85ec431fc0ced8ee57acbe1f07dd90b7b920862d96e4f9d0d98cc195765876f8992c884f1973b6fef045e9f8c515ca19956b5c4986ec32393ec286f55961fe4d17726fdfaae3960b7a24c6d38b2ca279e3e91790e10613a8dd84f877887e33c3bebb9034cd7bf63729078f166e85377dccd0c694d100ae959f340618ffbac4f8e679cff9961258db75893df23280ba3da61bd9d0280bdef79f28c84595412a49a610a9349bf12dc3380d6f1d02063787f12eed2c18c1791b7ba9a22d354b5d895f76eca47000b4fa3e605307ee64a2f53c155ef04c2a35789de83f3784dd6bc4898888d5920492037f9ade4495d9a795e35e229d05bcb70907901d3afea96d5626953626bc1d3d823beac8b4b9e8822e1ad66fb9069403db16512adef98d2599ef46433a315353cdca98d8b2d49f6ed278c70e1f65bd6f7814bae8639432c2a9d430fb142748102526bd1d8f47a1846da41c08dde926f54c58e7aa191a4ffec411f9005965eefd79b60db36cf68ba579c9d505450a7fef2860d8ce260277cad54d7c2e7162213b83a384f39844d19e149e1543f4d4f0ba5d3ac47", 0x1000}, {&(0x7f0000000640)="2172c28b320d2e23218a8b76998f413b2c3092e15b8210e4f41245", 0x1b}, {&(0x7f0000000680)="7deb71edcb549a70c8fa5b59227952bb23de69dde2f6e0668f", 0x19}, {&(0x7f00000006c0)="9221deadb309bc1ddc3373861e4198adf405e515d67b2f69391ee09b8c2bc691a86d169c911c0a8350b7affd8775f38351b975a294a66a4f454b8b2e3e2580bfdefefaf93c2fcb87d6505af9e117b8a104a02ddba4cc37b2a10b3d5ca57aee7f401f4787", 0x64}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000000740)}], 0x9, &(0x7f0000000b00)=[@ip_retopts={{0xc4, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x47, [@empty, @dev={0xac, 0x14, 0x14, 0x3b}, @local, @local]}, @timestamp={0x44, 0x1c, 0x4d, 0x0, 0x5, [0x1, 0x400, 0x55, 0x357, 0x7, 0x0]}, @cipso={0x86, 0x5b, 0x1, [{0x0, 0x8, "3a362bacbabb"}, {0x6, 0x4, "f1fa"}, {0x7, 0x10, "93ba1f06d4cb14e4e135f5ecbca4"}, {0x6, 0xa, "4f160c000656f398"}, {0x2, 0xd, "1195b62a4238dbae18cd29"}, {0x1, 0x6, "748d49dc"}, {0x2, 0x4, "1eef"}, {0x1, 0x6, 'Y(Gq'}, {0x6, 0x12, "6384a487f76ee27485abebce55b1494c"}]}, @rr={0x7, 0xb, 0xfe, [@local, @local]}, @ssrr={0x89, 0x1f, 0x1f, [@remote, @multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_retopts={{0x68, 0x0, 0x7, {[@end, @timestamp={0x44, 0x8, 0x46, 0x0, 0x6, [0x10001]}, @noop, @ssrr={0x89, 0xb, 0x1d, [@empty, @local]}, @timestamp_prespec={0x44, 0xc, 0xc3, 0x3, 0x5, [{@broadcast, 0x80}]}, @timestamp_addr={0x44, 0x24, 0x22, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x5}, {@empty, 0x1}, {@loopback, 0x8}]}, @timestamp={0x44, 0xc, 0xe3, 0x0, 0xe, [0xffffff99, 0xffffff81]}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @dev={0xac, 0x14, 0x14, 0x2f}}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xac}}], 0x1d0}, 0x4000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000600)=@ethtool_perm_addr={0x4b, 0xa, 'Cr\a\x00\x00\x00\x00\x00Go'}}) 15m47.620396637s ago: executing program 0 (id=459): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x104e22}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="3800000000000000000000000000000079110000000000009500000000000000fb0ddd"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_io_uring_setup(0x4172, &(0x7f0000000000)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) open$dir(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x480000, 0x20) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x2, 0x2}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x16, 0x200000000000000, &(0x7f00000004c0)="e0"}) r7 = dup(r3) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) 15m45.850725156s ago: executing program 0 (id=461): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) 15m45.414785968s ago: executing program 0 (id=465): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) read$FUSE(r1, &(0x7f0000001440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r1, &(0x7f0000000200)={0x60, 0x0, r2, {{0x9, 0x5, 0x5, 0x2, 0x400069a, 0xae, 0x2400000, 0x800}}}, 0xfffffec2) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x180000000) write$tun(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="00010000ff0f2503683f216800083a01fe8000000000000000010000000000bbb1adfba5000000000000000000000001850090780000000096573463dca17936e7ac9bf542a529d1301adc282a45dff2dd929513683debb4cdcf3f63cb7951a441581c22ab9de2c22b576aa608967022c6be2aef15a9d66dfb6423f0c55dbceec2c365b4c49daf4e520d3720e401e959739c28ccf808f3caa78fa69a2f7979fff6"], 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000300)={0x48}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000040)={0x18, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x9, 0x1000}]}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000080)={0x28, 0x6, 0x0, 0x0, &(0x7f0000000200)='W', 0x1, 0x17a}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000380)={0x28, 0x1, r6, 0x0, 0x0, 0x0, 0xdead, 0x3, &(0x7f00000003c0)}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 15m44.023820697s ago: executing program 32 (id=465): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) read$FUSE(r1, &(0x7f0000001440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r1, &(0x7f0000000200)={0x60, 0x0, r2, {{0x9, 0x5, 0x5, 0x2, 0x400069a, 0xae, 0x2400000, 0x800}}}, 0xfffffec2) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x180000000) write$tun(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="00010000ff0f2503683f216800083a01fe8000000000000000010000000000bbb1adfba5000000000000000000000001850090780000000096573463dca17936e7ac9bf542a529d1301adc282a45dff2dd929513683debb4cdcf3f63cb7951a441581c22ab9de2c22b576aa608967022c6be2aef15a9d66dfb6423f0c55dbceec2c365b4c49daf4e520d3720e401e959739c28ccf808f3caa78fa69a2f7979fff6"], 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000300)={0x48}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000040)={0x18, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x9, 0x1000}]}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000080)={0x28, 0x6, 0x0, 0x0, &(0x7f0000000200)='W', 0x1, 0x17a}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000380)={0x28, 0x1, r6, 0x0, 0x0, 0x0, 0xdead, 0x3, &(0x7f00000003c0)}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 7m32.118548167s ago: executing program 4 (id=1651): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='mm_collapse_huge_page\x00', r0, 0x0, 0x9}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000280)={0x0, 0x8, 0x0, 0x7f, 0x2, 0xfffffffb}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000050095c20009050000000000000007058433"], 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x360, 0x15, 0x8, 0x70bd29, 0x25dfdbfd, {0x18, 0x62}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "9854450331c1b74a4e349dfaf73ee430e729108e0a0102a7c47135e42f40c6c768a718c451b8e17a34001433e78dea2e591f2fb19e14b3c63f687a7f5a372e7dfc2470976c29b6f2cd45ddb291cbaa8735118e46393deb24508941e4af1d493cf175ae79157052872ab1483ab1841dad06b90ab87c74d153af5f4e5bdb7023a6baf4de50fa64afcb60afa6cb3b1c0d41ad8457e6a02ebb"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "70ee2e8748d928f07c58b8b0bcf15cca61279031e543e8825de8346e63ebd83b3d6ea14098395c86ea0b9b8ee3eb43bb10"}, @INET_DIAG_REQ_BYTECODE={0x38, 0x1, "f9ad13617cff85f3b5d3616ed53a36493a49ba31c779b1f8d4435a65e105c7b875263ad2d2b6221406a55639c852aeaf3a0f8d91"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "f5f0080f154e37a9bea95d23c260b3ad59dde5dfb5656720b80a10d6d977a454c978d51f4bfe812cd3cf0fda58aa59dfb139bffb94d5da30e1379d2f5ee61247e7ea44fbddddfc1472b08888590d24137b7bbbe0ff41d7da739bad642d523cbb2ba47803ae95110a8bf8014c62b8d2d47754374f49a2ed708315"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "783ac4c529495a52585ab9b14162e85b5f1dfaf17abeef9fa135f390c7e51f218eff73580bfc123656ba91c56d716cefb3e310469d87e3d8f48dfa1b895fa359b6549c5247bd10e42533"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "855689105f6c98dd5b5fbcec078c1ec5d538c2fca0134ca18831f1e4cc2ddbf124c0aa1a50da3a72c79cfba4db18fbcd9e24a67c5d69f8d0b5009c8986998122a25b3b4755"}, @INET_DIAG_REQ_BYTECODE={0x58, 0x1, "d6a093e67a26f983893be73d59fee07852fc05beb2fda1f97d97d21f7ae421388e7067d42282ce294a3666de02d65f25534dd97cc5df803f8aff0e9eb45ec1e52683514c094463a5cc6e0a42d982380ce2485c93"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "ff4ef284c0f816804946bc02d0746700e8b6a037c27d62b70bece3c8755e345d9673104425a09664d22d92e3952e8838b3fcdac4f2be35747703695e807522d1216c65be816cda001ef6899dba9c1bfe19fbb52ca4ed487665cfc6ff71487aa24122c0af86e3926248b2208632dae1f7009b53e48fd62c1f38fd0cf45c819b259090a55939ede340978e038255a6ee03d23822a63600e67c16566a6edebddfd8e454046c43e487cc41aae4b34b1d787c4e0b039f3cb2dac9566647e8fb34b9d27531f78ac65a29"}]}, 0x360}, 0x1, 0x0, 0x0, 0x40800}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='mm_collapse_huge_page\x00', r0, 0x0, 0x9}, 0x18) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) getpgrp(0xffffffffffffffff) (async) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000280)={0x0, 0x8, 0x0, 0x7f, 0x2, 0xfffffffb}) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) sendmmsg$inet_sctp(r2, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000050095c20009050000000000000007058433"], 0x0) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x360, 0x15, 0x8, 0x70bd29, 0x25dfdbfd, {0x18, 0x62}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "9854450331c1b74a4e349dfaf73ee430e729108e0a0102a7c47135e42f40c6c768a718c451b8e17a34001433e78dea2e591f2fb19e14b3c63f687a7f5a372e7dfc2470976c29b6f2cd45ddb291cbaa8735118e46393deb24508941e4af1d493cf175ae79157052872ab1483ab1841dad06b90ab87c74d153af5f4e5bdb7023a6baf4de50fa64afcb60afa6cb3b1c0d41ad8457e6a02ebb"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "70ee2e8748d928f07c58b8b0bcf15cca61279031e543e8825de8346e63ebd83b3d6ea14098395c86ea0b9b8ee3eb43bb10"}, @INET_DIAG_REQ_BYTECODE={0x38, 0x1, "f9ad13617cff85f3b5d3616ed53a36493a49ba31c779b1f8d4435a65e105c7b875263ad2d2b6221406a55639c852aeaf3a0f8d91"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "f5f0080f154e37a9bea95d23c260b3ad59dde5dfb5656720b80a10d6d977a454c978d51f4bfe812cd3cf0fda58aa59dfb139bffb94d5da30e1379d2f5ee61247e7ea44fbddddfc1472b08888590d24137b7bbbe0ff41d7da739bad642d523cbb2ba47803ae95110a8bf8014c62b8d2d47754374f49a2ed708315"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "783ac4c529495a52585ab9b14162e85b5f1dfaf17abeef9fa135f390c7e51f218eff73580bfc123656ba91c56d716cefb3e310469d87e3d8f48dfa1b895fa359b6549c5247bd10e42533"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "855689105f6c98dd5b5fbcec078c1ec5d538c2fca0134ca18831f1e4cc2ddbf124c0aa1a50da3a72c79cfba4db18fbcd9e24a67c5d69f8d0b5009c8986998122a25b3b4755"}, @INET_DIAG_REQ_BYTECODE={0x58, 0x1, "d6a093e67a26f983893be73d59fee07852fc05beb2fda1f97d97d21f7ae421388e7067d42282ce294a3666de02d65f25534dd97cc5df803f8aff0e9eb45ec1e52683514c094463a5cc6e0a42d982380ce2485c93"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "ff4ef284c0f816804946bc02d0746700e8b6a037c27d62b70bece3c8755e345d9673104425a09664d22d92e3952e8838b3fcdac4f2be35747703695e807522d1216c65be816cda001ef6899dba9c1bfe19fbb52ca4ed487665cfc6ff71487aa24122c0af86e3926248b2208632dae1f7009b53e48fd62c1f38fd0cf45c819b259090a55939ede340978e038255a6ee03d23822a63600e67c16566a6edebddfd8e454046c43e487cc41aae4b34b1d787c4e0b039f3cb2dac9566647e8fb34b9d27531f78ac65a29"}]}, 0x360}, 0x1, 0x0, 0x0, 0x40800}, 0x40) (async) 7m28.219692152s ago: executing program 4 (id=1660): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r1, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000017000000bca30000000000002403000040feffff6b0af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000061140800000000001d430000000000007a0a00fe0000001f6114100000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4fffe2158dfb8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb3fa3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5973acc706db6b861b8c10a7cbd0b723906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff6194732827a58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f1000000006eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f3a6da2819d2f9e77c7c64affa555ec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f37382000000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23577949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115553f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5f07918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa61071799e1acb3928143be1c1023a375e528285544d0064b91f00f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aa3f999ce700ffe794e27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a2271d96c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b0200780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca78fa04d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f00000000000000005bae7859839f856e7a397913eec7977f6231c5f11849b3deabc60c5ccf240d16924eb760a969813be02a229c674045b88915518a17b683268f10358e1c0b20cfc2bd105e5e1db7fed951b8faf126267bb38b8d356f63d3433d3dee643503a8ba4968adf6673f720c474ecf324d989235f1b52aacfe52e4519af87b7e1594728d6d6fff1248e72d5b1b1b692b2b732f0f2ac0714079fd7bf97bf2b5687d1db91daa5210d09ebe66d00ff4f35143be01585e629d408f2d00a0a290db76adc5f57e160b2c188bb1ecc4e7d2948788e4f9c1bcaf91dac53a2f525f7385d5d82728b5217908748f4c22b6d79700"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$inet6(0xa, 0x3, 0x2c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r6}, 0x10) lsm_get_self_attr(0x69, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000dc0)={0xa, 0x4e21, 0x0, @loopback, 0x200}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xda, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac14030a44079f03fe8000ff80000000000000000008ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0", 0x0, 0xfe, 0x60000000, 0x7, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x50) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001840)=""/198, 0xc6}], 0x1, 0x33, 0xfffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0xf, 0x9, &(0x7f0000000c00)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000050000008500000011000000a7000000000000001800000000000006000000000000000095000000000000009500000000000000e4c58f5df185d8074f6ea8d35682d3b662255f375e5fbd2d8f7f0a1d7872ffde0cca35a10960dc764fc6d80ad7be1bd1f3bcf0fa70a5c9fcea89496190539769448f1a133e6f69aa1a8fb430c40728e238af81e0a7777c5683f279fc916572ee2188a28baa3ec9223cb8097cbe"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="04000000ff07000007000000d09d6d5b20200000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYBLOB="d64b77e54d6629634047efdc81f44bc3d792bc2f32b56d20d18bb3e6dc79ba6ce033b85076fbfe4b9e496300cb5271ad715f65b9800e86ad2ac35c71eb12a83620db46cacafb2e7a0eaf27427d5e3edfed8b52847e4e6d38d54d4f649bf8c24ed18b4ea1f43305e28ac20536500d862bd1425f3f622b89a4bf8a00aa10b89b4f859ea7d578743fcbe9ff77254e184a8b425c2a4eb99824ef3537f01bc1b492c01efc44ec72bbfc5583c707e9bbfdd2218ec07c5ff6bc3f44e303641add649422813b70cd9a4ae928853fab81932cca72a71d9c9beeaa54", @ANYRES32, @ANYBLOB="b78eb67d03000000737700d46245e83100000800000f000000000000"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r8, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x9, 0x6a, {{0xd, 0x4, 0x2, 0x9, 0x34, 0x64, 0x0, 0x3, 0x2f, 0x0, @remote, @loopback, {[@generic={0x7, 0x11, "fa73c88c16500666f2414a5895d137"}, @timestamp_prespec={0x44, 0xc, 0x77, 0x3, 0x6, [{@empty, 0x5}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000340)=0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="700000001000110f2dbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000005000128008000100767469004400028008000500ac1414bb08000100", @ANYRES32=r9, @ANYBLOB="001823179617690bb73ccbd3f33466c9ae0d86ff284a76a5d327f56d66cd702f2cf63c660152f361d62af7e9758fb2016a42c184d88d22e38920b36ef6e60489e3df1a11f4fd15652f838b79a610061b2e9b359deb59a3d011d14cef8da80301f04af2a0ec201d33", @ANYRES32=r10, @ANYBLOB="0800030000010000080002000cfdffff080003000900000008000100", @ANYRES32=r11, @ANYBLOB="0800020004000000"], 0x70}}, 0x20008824) 7m27.050950831s ago: executing program 4 (id=1662): syz_usb_connect(0x5, 0x36, 0x0, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(r0, 0x6, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a001800ff20010000000000000000000000000000fe8000000000000000000000000000000002000000000000070800000000000000d6000100010100"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000001000000000000"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000300), 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x9, 0x0, &(0x7f0000000040), 0x0, 0x0}}) dup3(r3, 0xffffffffffffffff, 0x80000) syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) ustat(0x0, 0x0) 7m20.511284448s ago: executing program 4 (id=1676): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4055}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x9) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f00000001c0)=0x1, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x40, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x505000) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000040)={0xa79, 0xfffffffe}) 7m20.018353776s ago: executing program 4 (id=1679): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=@hopopts={0x2}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x14, r4, 0x1}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r5, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8d}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xb}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x60}}, 0x890) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x8, 0x6, 0x34324152, 0x9, 0x86, 0x6, 0x2, 0xdd4, 0x1, 0x3, 0x1, 0x2}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x8, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x80) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0x1ff, 0x4) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x1, @empty, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000018"], 0x40, 0x7ffffff7}}], 0x1, 0x4880) 7m19.299077794s ago: executing program 4 (id=1682): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000070000000100010009000000010000001174b41ad29708c4f50f4da56e2bdee7a2adaf776acf7cb33c20eb14f82ec7aeecf14a4228ac21e3c2f719cec92df26cf775db364c5e82fb3c3bc0aa3c4d265758f853d89b3f4cb3309ef27addf3960e3f7722f3ff8cd2141afc93d40e4b7426d104b8996e4bce8a03f22fd3a640d9dfd96dc686fccb03064deeab02f0aeb7cad5e293ab26ca0a7110a087b8e5e239f8945c08973615383fce00f024d823aa310b082133710fbdf592ec02b57389d72e9709ba8229b6f8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x80000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r2, 0x50c8, 0x0, 0x8, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getrlimit(0x4, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r9, 0x0, 0x0) 7m16.062877946s ago: executing program 1 (id=1686): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) chdir(0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x6000000, 0x0, 0x0, 0x2) 7m12.990348194s ago: executing program 1 (id=1698): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000073c4f61ba09eff00"/27, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200), 0x0, 0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r3], &(0x7f0000000200), &(0x7f0000000300)=[r5], &(0x7f0000000340)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000480)={&(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0], 0x2, r4, 0xe0e0e0e0}) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 7m12.255920683s ago: executing program 1 (id=1700): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0x8080) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd092403000003"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3f) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x9, 0x0) 7m8.882179765s ago: executing program 1 (id=1712): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) socket(0x15, 0x6, 0x100) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000140)='iocharset\xe4\x95\xd5O[\xe5H\xcf\xe3=\xf2\xc2&\xa3\x80[fg\xf1\xd0\x05\xf7\xc7\x83\xa4\xdb\xe7\xcf\xcb70BN\xc2o\xa8\xe9\xbd\xa3\xf4\x1c\x10j\xe2\xcb\xb3\xf4\xcd\t:9E\xe9Js=\x97\x9dT\x84t\x8b\xac\x9c\xdc\x8dJ\xd9\xef}\xb0b\xf7\x1aeW\xa2\xeb\xb8;\xb8\xdb\x99D\xc4R', 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x18) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@var={0x4, 0x0, 0x0, 0xe, 0x5, 0x2}, @fwd={0xb}]}, {0x0, [0x5f, 0x0, 0x30, 0x5f, 0x30, 0x2e, 0x61]}}, &(0x7f0000000400)=""/32, 0x3d, 0x20, 0x1, 0x7, 0x10000, @value}, 0x28) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x8000, 0x1, 0x5, 0x507a000, {{0x8, 0x4, 0x0, 0x7, 0x20, 0x64, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xe8, [@broadcast]}]}}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xe, 0xd, 0xe500, 0x182, r3, 0xc, '\x00', r5, r4, 0x0, 0x1, 0x4, 0xa, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000280)=r7, 0x4) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='attr\x00') setrlimit(0x0, &(0x7f00000001c0)={0x8000000000000001, 0x4}) 7m7.526708697s ago: executing program 1 (id=1713): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffbfc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x140, 0x0, {0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r5 = dup(r4) write$FUSE_INIT(r5, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x1000, 0x14210000, 0x81, 0x1005, 0x0, 0xc, 0x0, 0x0, 0x80}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 7m4.555436137s ago: executing program 1 (id=1720): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x200, @mcast2, 0x20000}]}, &(0x7f00000001c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r1, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r2 = getpid() mount$tmpfs(0x0, 0x0, 0x0, 0x2a00a9, 0x0) open(0x0, 0x185102, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000380)=@l={0x92, 0xa, 0x70, 0x1, 0x68, 0x4, 0x9}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000001b80)=""/134, 0x86) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(r2, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}}) 7m3.586296779s ago: executing program 33 (id=1682): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000070000000100010009000000010000001174b41ad29708c4f50f4da56e2bdee7a2adaf776acf7cb33c20eb14f82ec7aeecf14a4228ac21e3c2f719cec92df26cf775db364c5e82fb3c3bc0aa3c4d265758f853d89b3f4cb3309ef27addf3960e3f7722f3ff8cd2141afc93d40e4b7426d104b8996e4bce8a03f22fd3a640d9dfd96dc686fccb03064deeab02f0aeb7cad5e293ab26ca0a7110a087b8e5e239f8945c08973615383fce00f024d823aa310b082133710fbdf592ec02b57389d72e9709ba8229b6f8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x80000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r2, 0x50c8, 0x0, 0x8, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getrlimit(0x4, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r9, 0x0, 0x0) 6m57.991779893s ago: executing program 5 (id=1735): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) syz_emit_ethernet(0x50, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x1a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @mcast2, [{}]}}}}}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x7, 0x7218, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, 0xfffffffe}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x5, 0x300, 0x175, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0) socket(0x1e, 0x4, 0x6d9e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r3 = dup(r2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$msr(r4, &(0x7f0000000300)=""/102376, 0x18fe8) sendfile(r2, r3, 0x0, 0x80006) 6m57.575892685s ago: executing program 5 (id=1736): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 6m56.326018372s ago: executing program 5 (id=1737): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x5, @mcast2, 0xff}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@fwd={0x8}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x8, 0x0, 0x0, 0xf, 0x1}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) fcntl$addseals(r4, 0x409, 0x7) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d400500000000003400000001ed00007b030000000000001d440000000000007a0a00fe00ffffffdb03000000010000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031ed3afa84c401f0ece6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cdbef2662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3ddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc521718348071ec6288906347dcd62b75c72ce2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x3, 0x6, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x30}, 0x8, 0x1, 0xfffffff7, 0xa8}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', r7, 0x0, r6, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x10, 0xb, 0xfff}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000440)=[{0x5, 0x5, 0x0, 0xa}, {0x1, 0x5, 0x3, 0xc}, {0x4, 0x4, 0xc, 0xc}, {0x4, 0x3, 0x5}, {0x5, 0x3, 0xc, 0x3}], 0x10, 0xf, @void, @value}, 0x94) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r6}) 6m56.130603047s ago: executing program 5 (id=1738): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = io_uring_setup(0x5e69, &(0x7f0000000100)={0x0, 0x1084, 0x40, 0x10000003, 0x2c3}) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000700) 6m55.05501418s ago: executing program 5 (id=1740): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002200)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r2, @ANYRES64, @ANYRES64=r0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000008881dc5d3bac9505000000000000bf91000000000000b7020000030000008500000084000000b7000000000000009500"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r7, 0x0) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) r8 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) sendmmsg$inet6(r8, &(0x7f0000000ac0)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x800000fe, @rand_addr=' \x01\x00', 0x80000006}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000069e4a334f46", 0x8}], 0x1}}], 0x1, 0x240000d4) ioctl$SNDCTL_DSP_GETOSPACE(r7, 0x8010500c, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r9, 0x5406, &(0x7f0000000080)={0x2, 0x2946, 0x3000, 0x8246, 0x14, "00000008f4553a00"}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x1}, 0xe) ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x5412, &(0x7f00000006c0)=0x16) 6m53.874957447s ago: executing program 5 (id=1743): shutdown(0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000440)={0x0, 0x0, [0x7, 0xfffffffb, 0x100000, 0x2, 0x80000000, 0x7, 0xd, 0xae52]}) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 6m49.340192894s ago: executing program 34 (id=1720): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x200, @mcast2, 0x20000}]}, &(0x7f00000001c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r1, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r2 = getpid() mount$tmpfs(0x0, 0x0, 0x0, 0x2a00a9, 0x0) open(0x0, 0x185102, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000380)=@l={0x92, 0xa, 0x70, 0x1, 0x68, 0x4, 0x9}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000001b80)=""/134, 0x86) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(r2, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}}) 6m38.681758914s ago: executing program 35 (id=1743): shutdown(0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000440)={0x0, 0x0, [0x7, 0xfffffffb, 0x100000, 0x2, 0x80000000, 0x7, 0xd, 0xae52]}) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 2m51.162637259s ago: executing program 2 (id=2436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000140)='iocharset\xe4\x95\xd5O[\xe5H\xcf\xe3=\xf2\xc2&\xa3\x80[fg\xf1\xd0\x05\xf7\xc7\x83\xa4\xdb\xe7\xcf\xcb70BN\xc2o\xa8\xe9\xbd\xa3\xf4\x1c\x10j\xe2\xcb\xb3\xf4\xcd\t:9E\xe9Js=\x97\x9dT\x84t\x8b\xac\x9c\xdc\x8dJ\xd9\xef}\xb0b\xf7\x1aeW\xa2\xeb\xb8;\xb8\xdb\x99D\xc4R', 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x18) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@var={0x4, 0x0, 0x0, 0xe, 0x5, 0x2}, @fwd={0xb}]}, {0x0, [0x5f, 0x0, 0x30, 0x5f, 0x30, 0x2e, 0x61]}}, &(0x7f0000000400)=""/32, 0x3d, 0x20, 0x1, 0x7, 0x10000, @value}, 0x28) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x8000, 0x1, 0x5, 0x507a000, {{0x8, 0x4, 0x0, 0x7, 0x20, 0x64, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xe8, [@broadcast]}]}}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xe, 0xd, 0xe500, 0x182, r3, 0xc, '\x00', r5, r4, 0x0, 0x1, 0x4, 0xa, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000280)=r7, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='attr\x00') setrlimit(0x0, &(0x7f00000001c0)={0x8000000000000001, 0x4}) 2m49.640249477s ago: executing program 2 (id=2441): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004882, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket(0x10, 0x2, 0x0) socket(0x2c, 0x80000, 0x7fffffff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[]) chdir(0x0) unshare(0x24020400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0x1000000, 0x2, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m45.49941184s ago: executing program 2 (id=2449): shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000440)={0x0, 0x0, [0x7, 0xfffffffb, 0x100000, 0x2, 0x80000000, 0x7, 0xd, 0xae52]}) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 2m43.31286405s ago: executing program 2 (id=2454): r0 = socket$kcm(0x2, 0x3, 0x84) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x2, 0x0) syz_open_procfs(r4, &(0x7f00000001c0)='net/raw6\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902120003000000000904"], 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x8602) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000400)={0x1, 0x5, 0x3, 0x0}) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717"], 0x48}, 0x0) 2m40.065405293s ago: executing program 2 (id=2463): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="58001c00000000009fed2788c5532994414b47034801d524faf41663821765cc87a0d5ef94ee803f0fa321394376eb2a6da3b841ab06a2b8510b6d02d7e0cc5c0936f8b4ce", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 2m38.571809767s ago: executing program 2 (id=2468): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x14e}) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000000)=0x1, 0x0, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffeee, &(0x7f0000000540)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000800000000000000000000009543d871223d517ecb0007fb4049ae20c60b9b91b2947b0dd1089b27547ef01374d0e3d215bfdf385d3d19a763ef4441b21d5ed999469733d5dff4defb0de1c814846ba02a44e6c10659ad2d56b527315411fcf029f5db31f5c8b552cd9f1d18d1df636d853f60e5c4afe86fdcf7355b8bef22b9aafbc8f8e8fe6aa69917a4960f6a2e"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = openat$dsp(0xffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000300)) 2m37.215894757s ago: executing program 36 (id=2468): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x14e}) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000000)=0x1, 0x0, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffeee, &(0x7f0000000540)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000800000000000000000000009543d871223d517ecb0007fb4049ae20c60b9b91b2947b0dd1089b27547ef01374d0e3d215bfdf385d3d19a763ef4441b21d5ed999469733d5dff4defb0de1c814846ba02a44e6c10659ad2d56b527315411fcf029f5db31f5c8b552cd9f1d18d1df636d853f60e5c4afe86fdcf7355b8bef22b9aafbc8f8e8fe6aa69917a4960f6a2e"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = openat$dsp(0xffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000300)) 20.340652783s ago: executing program 3 (id=2912): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 19.686700062s ago: executing program 3 (id=2915): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000001010000ff7f00ec7b1541d4b9944f8bbecc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_elf32(r6, &(0x7f0000001e80)=ANY=[], 0x38) fcntl$setpipe(r5, 0x407, 0x80019c) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x200002, 0x0) 18.403276089s ago: executing program 3 (id=2920): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r6}, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x92500, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x88000, 0x0) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(r7, 0xffffffffffffffff, 0x0) fchdir(r5) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r9 = open(&(0x7f0000000180)='./control\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r5, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) 17.38469106s ago: executing program 3 (id=2922): syz_open_dev$media(0x0, 0xee6, 0x494a43) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@deltclass={0x8c, 0x29, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff5}, {0x5, 0xb}, {0x10, 0x9}}, [@c_cbq={{0x8}, {0x4}}, @c_atm={{0x8}, {0x3c, 0x2, [@TCA_ATM_FD={0x8}, @TCA_ATM_HDR={0x20, 0x3, "f322cd8cf2267e2012ed8a1ff42b1ba897709ee3d248ad1fa2c4b532"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0xfff3}}, @TCA_ATM_FD={0x8, 0x1, r3}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xc}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4044000}, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)}, 0x12060) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x40) 14.727916888s ago: executing program 3 (id=2933): openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe) fanotify_init(0x81, 0x800) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) chdir(&(0x7f0000000080)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.635692808s ago: executing program 3 (id=2935): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) 6.750627856s ago: executing program 6 (id=2974): r0 = semget(0x0, 0x1, 0x281) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @remote, @val, {@ipv6}}, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0xfe78, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000040)) 6.006896783s ago: executing program 7 (id=2986): connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x1, &(0x7f0000000040)={0x2, 0x81, 0x7, 0x1, 0xffffffffffffffa5, 0x5, 0x3, 0xaeb3}, &(0x7f0000000080)={0xde4, 0x7, 0x0, 0x1, 0x6, 0x6, 0x0, 0x4}, &(0x7f00000000c0)={0x2, 0xac1e, 0x0, 0x89b7, 0x9, 0x7c, 0x85, 0x64}, &(0x7f0000000100)={0x0, 0x86c4}) 5.883923796s ago: executing program 7 (id=2989): shmget(0x1, 0x1000, 0x2c0, &(0x7f0000ffd000/0x1000)=nil) shmget(0x1, 0x4000, 0xa1, &(0x7f000051d000/0x4000)=nil) 5.810978957s ago: executing program 6 (id=2990): syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6beed57d00002c0200000000000000000000ffffe0000002feed"], 0x0) 5.723487733s ago: executing program 7 (id=2991): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000)="a3f7c0cdcc2ad2c755444c8e", 0xc) 5.64226253s ago: executing program 6 (id=2993): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0x1, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x800) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000010000000000000003000000850000007a0000001fba0001000000009d00000000000000"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000003780)=[{{&(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000380)="a9993faa5f4b96293b8e1878b59b80de058e6902dc199f74a80006674f2c666d885bdd810e61c0e8022d0f3122619f6a20ee70efc38ea58d106871dbde4efd28d8f1a4644d148fb3c91abe8c42", 0x4d}, {&(0x7f0000000400)="66a1b259f364fff51de89a5e5a76617964cd18162edcd3a22bc35cffbe8fb43c6f989789795d4f91bfc5ce93b46b0a193ee027db15d940f04d4723d6a251152225a3", 0x42}, {&(0x7f00000000c0)="ca", 0x1}, {&(0x7f0000000480)="42d162b0136c2d9c74d8158a4871f7728831adb3644c5a8601ab97cac8d981d66b38c46762670ece32cf09c90042d823d8e25e65ed1b7f8d1986aea21ba79f6fd5bcd8c602968e90ddccafa0525323426f88e867a9af72118acfd3d72d75888db72ac2499badc5dcbfd393b77ceeae79cfb8783354d0ab44e22984c4f607e80c879f6363898a23c28a0a3ef1af71bc308d69f2235c93f68aa3f218b2d4cf3ceadba291061b8bd88e56bf03d763787c8d9250727cb0d768688e97d79b371bacbac464c81323f63dfbeb5399a6c6ac0214291191d7ca68dd375c910f", 0xdb}], 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r3, @ANYRES32=r10, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES64=r9, @ANYRES32=r5, @ANYRES32=r10, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000400000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x4048001}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002900)="14dea07108347901b565ad49a4a15df666ea7f7c9ecb0a7c35167d1ca5b0d0540b9ea162360b2c5bcbff6474b9f4217b799fa540f0a90e8dee", 0x39}, {&(0x7f0000002940)="690ce02d42c912f31bec734c67e6849424d938e35ff7e090c8450248fe3581857f62da0bdd6283dffe8f6ff97e9ebcd250dda80cebd89ca4b7f416f9f81c1a420f87e34822b9a90643e92284fc61a71663ee80bd18034d7d9a7959944f045482a8b6e1016f981512e9cb966d8af7faeaa00ecf420acba39a2eca53643ab429cf64e71cee2a5f94ccc246413a5203c532b8f545456bd7f950f6c895166c6738b6f2fbe1949b348e78975a832a676f1eb72ab943632a2cfced29196d", 0xbb}, {&(0x7f0000002a00)="9fa3eeb7c486d6a3e0df25016be36c0db3bc5134c2942b2d907540441e54a4466cc8d47d30b3b569c2e2f41b589ccda8922df30d195e", 0x36}, {&(0x7f0000000180)="d97ee2c5f0c09313876af6f00dcf13466bedf2bd389f80ac942447443dbe51115e6aef91a7d74febbcd12cce329f4cf11d8add093ce7ccdd0a", 0x39}], 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r10, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES64=r4, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES8, @ANYRES32=r4, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32, @ANYRES32=r5, @ANYRES32=r9, @ANYRES32=r3, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r9, @ANYRES32, @ANYRES32=r6, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="1c000000000000000100040002bd5985da7c61e0898499c805d4", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x158, 0x4000080}}, {{&(0x7f0000002d40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000000580)="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", 0x134}, {&(0x7f0000002ec0)="2e5b94074744b7ee586195f529e0c8e73259cd0bf595c2dcc456c080e181988600b955cf764bd1b1b3d5c115f0c8ce565b9048def9ccf0dda4eb7e112c5553ee3ade59d99f6197954063b86ad036394a3645ba244b4ec911bdd71522ff2a7f41a8df91f082b8dbba5dc4cefd06d9a65c18e1a1b7dfb2f3831cc445d355f803fd5d6201b1da8cee8134833df45b7b764e9c41cb", 0x93}, {&(0x7f0000002f80)="21ddda3af2f8fd1d689a1bc31daa73c9b721f81cca82", 0x16}, {&(0x7f0000002fc0)="4717f63e6509fc25b3a9cc57e61b07e1bfea32595b23b5a3eff518ed425a9f7f82d61f8dd365d91a504db1b6660db2c118abc741a9e969ca0045c23ba3031d20d80b020fa3674a4fa2b8302c8d4dd7f786fbd127954e4f8fd3d87b51f2bb47c669fb59db7894323d3b8dab8c09bdafa7c371d1a191bc6538850b642c814d8dcff0f9120999f58a6e0d158dbbb321850e126a42b1", 0x94}], 0x4, &(0x7f0000003100)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32, @ANYBLOB="100000000000000001000000010000001000000000000000010000000100000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000008001c000000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}, {{&(0x7f0000003200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003340)=[{&(0x7f0000003280)="6a0eba0a81ee076f1e1e1c5e2d692213e783e79cea88b1a7f23a4c67fcf44f2a3ac7fda275d675ceac0ea52cd64b8f10d1158d04064253861b39e61675cdb9608502b07d4fa5fc8a7983faacb98426102bd73af1a823c5926e52eb280ad6ce68712fbbd823459bebe28fcf2d74fbb060f1a3fd02426fbde40d03611da7e6c044b072187d33c9", 0x86}], 0x1, &(0x7f0000000d00)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="00000003000000000000006401000000eeffffff30bc35757695f0b29502a52cfdf764649652ec4cfc0a4ae7d5", @ANYRES32=r10, @ANYRES32], 0x98, 0x80c0}}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000003480)="8f33102d90c0aebe70e87f92e35ef89337b3e3381f3939ca4d553e412ed0a71bf378a492d04ae753ec11116144c4f8c7337cb2d047966e4524081868de87c656d3506b581eb12244adf29e2ae8eb4b0f615e2c72dc8b43", 0x57}, {&(0x7f0000003500)="9bc8490335d167eef11aed9ad7428e0f91679341d85b801e51455dc0eb9d76c88524d87cc359ec543dc9fa319cbe11a742e3be3a05dfb473c01a253130c24d75e5dfc22513865d0ba7fcd1", 0x4b}, {&(0x7f0000003580)="0833579bcb96bd1bb644738909c6d0de47385b8931b6a7d83b1b85b79c22d1b6c8277a5af2d089d56d77327ed00cf63f5a58d3b672db34b9931f35eab3319eea6e3415b72e5d5676f96c3ea139902341c6badb8bf50b57e8a33508914f25957a74fb004bf090f8cf23a659bc0292aa9c6d58fc1bf77c7315bfc5bd", 0x7b}, {&(0x7f00000006c0)="af71cf8f6a1cf62dc0c810b3cac904bc79778a8bcaac6db513e48cbff57b74ebd6ff4a2b5796f5e738a12af9f6da78bd12a98c5d20f157129a60816a5dcec84dcd4226f64db24ea911b6675dcdf756dd3e96426d01d1a28d36df662a80489517187d9751661fe6a3aff8bef8e18362d1e8f22dd912ae2603d064f96ea1ea49ce26389656ff728589b9fa09c0ef11d9e3ff8b0d51a5bf66a7a1", 0x99}], 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRESOCT=r1], 0x70, 0x401}}], 0x5, 0x24008825) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x78f900bb8d4aa0e7, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r11, 0x0, 0x5) 5.262358168s ago: executing program 7 (id=2996): socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa441, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[], 0x0) 5.024675766s ago: executing program 9 (id=2997): socket$alg(0x26, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb0800", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 4.695368999s ago: executing program 6 (id=2998): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r7, 0x8b2c, &(0x7f0000000040)) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0x12, 0x0, &(0x7f0000000000)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x5e, &(0x7f00000000c0)=""/16, 0x10}}], 0x1, 0x2000, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100001900000000000006000009"], 0x14}, 0x2, 0x34005}, 0x40) 4.468616979s ago: executing program 8 (id=2999): read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) mount(&(0x7f0000000080)=@nullb, 0x0, &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) 4.338959412s ago: executing program 8 (id=3000): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 4.286994172s ago: executing program 8 (id=3001): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000001010000ff7f00ec7b1541d4b9944f8bbecc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x400007, 0x9) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_elf32(r6, &(0x7f0000001e80)=ANY=[], 0x38) fcntl$setpipe(r5, 0x407, 0x80019c) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x200002, 0x0) 3.951625895s ago: executing program 9 (id=3002): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) 3.494543127s ago: executing program 8 (id=3003): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, 0x0, 0x0, 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x0, 0x0}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0xa, 0xf, 0xd, 0x300, 0xb021, 0x0}) 3.477390658s ago: executing program 9 (id=3004): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000400)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x6, "34e6498c25f58dad9987ffe93bbabd18cf504a2700", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r7}) 2.525904111s ago: executing program 9 (id=3005): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x70, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3a, 0xe, {{{}, {}, @device_b, @device_a, @random="15cc00436134"}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0x95}, @void, @val={0x6, 0x2, 0x8000}, @void, @val={0x25, 0x3, {0x0, 0xb4, 0x9b}}, @void, @val={0x3c, 0x4, {0x0, 0x4, 0x28, 0x40}}, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}]}, 0x70}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x840) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}}}, 0x48) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000040)={0x9, 0x0, 0x100201, 0x0, 0x2, 0x7f, "b2093a00", 0x0, 0x0, 0x0, 0x3, 0xfd}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x3a, 0x23b) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0x8, 0x8000, 0x5, 0x722, 0xe72, 0xb0c, 0x8, 0x38, 0xf7b5aa9ce17490a9, {0xffff945a, 0x1}, 0x3, 0xed}}) 2.439588035s ago: executing program 8 (id=3006): io_uring_setup(0xc34, &(0x7f0000000240)={0x0, 0x2, 0x1, 0x2}) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$kcm(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd2d, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="17090100000000000000010000000500070000000000080009000000000008000a0000000000060002000100000014001f0000000000000000000000000000000000140020"], 0x5c}}, 0x0) 1.762993533s ago: executing program 8 (id=3007): fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)=0x10001) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004001500000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.383000916s ago: executing program 7 (id=3008): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.104998653s ago: executing program 6 (id=3009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setregid(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0000000000000088cb378ce6d47efdec14fa7e7106772d8cb90300001038171abb3750be5dd8b7b242f15e4983c8f5dd5c6727bcd5d217822db97f9f136d068fec252e3be289d81007fd346b5940ba7fd0560bd41cb1b399d76ad8d2e0d206e4c13f729aa5bccd9019ee6e6c6f08f30eeb853535955b9e7b900566", @ANYRES32=0x0, @ANYBLOB="0000000000000000500011007f0000010000000000000000000000000a0101000000000000000000000000000a010100000000000000000000000000640101000000000000000000000000003c000000000000000a0002"], 0xbc}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000005c00), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000005c40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000005c80)={0x1c, r4, 0x711, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0xf0ffff, 0x0, 0x4000084}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prlimit64(r0, 0x4, &(0x7f0000000040)={0x6, 0x6}, &(0x7f0000000100)) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x928, 0x200000008b}, 0x0) listen(0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5387, &(0x7f0000000000)) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000200)={0x2000000b}) 1.065998267s ago: executing program 7 (id=3010): read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x208000, 0x0) 1.044056544s ago: executing program 9 (id=3011): socket$alg(0x26, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb0800", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 543.890918ms ago: executing program 9 (id=3012): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000001010000ff7f00ec7b1541d4b9944f8bbecc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) set_mempolicy(0x2, &(0x7f0000000000)=0x400007, 0x9) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_elf32(r5, &(0x7f0000001e80)=ANY=[], 0x38) fcntl$setpipe(r4, 0x407, 0x80019c) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x200002, 0x0) 0s ago: executing program 6 (id=3013): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/sockstat6\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000080)={0x4}) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r5}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @local}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000180)={r7}, &(0x7f0000000100)=0x8) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000c40)={0x8000203d}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x11, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, 0x0}, 0x78) kernel console output (not intermixed with test programs): T5883] usb 7-1: config 8 has an invalid interface number: 223 but max is 0 [ 941.526196][ T5883] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 941.536715][ T5883] usb 7-1: config 8 has no interface number 0 [ 941.543116][ T5883] usb 7-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 941.556711][ T5883] usb 7-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 941.604640][ T5883] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 941.697839][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.872326][ T5883] usb 7-1: Product: syz [ 941.886854][ T5883] usb 7-1: Manufacturer: syz [ 941.905084][ T5883] usb 7-1: SerialNumber: syz [ 942.397928][T13691] CIFS: iocharset name too long [ 942.472545][T13692] input: syz1 as /devices/virtual/input/input31 [ 943.280821][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2168'. [ 943.352240][ T5883] usb 7-1: USB disconnect, device number 12 [ 943.406922][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2168'. [ 943.484866][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2168'. [ 943.511402][ T9415] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 943.554090][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2168'. [ 943.896176][ T9415] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 943.907372][ T9415] usb 9-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 943.951472][ T9415] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.968048][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2168'. [ 944.137043][ T9415] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 944.158196][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2168'. [ 944.212748][T13700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.223851][T13700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.235445][T13708] XFS (nullb0): Invalid superblock magic number [ 944.264088][T13700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.284392][T13700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.300172][T13700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.319857][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2168'. [ 944.329744][T13700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.873209][T13700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.884620][T13700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.898020][T13700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.908265][T13700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.909288][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2168'. [ 944.925526][T13725] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2175'. [ 945.207533][ T9415] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 945.215888][ T9415] stv0680 9-1:4.0: STV(e): camera ping failed!! [ 945.224469][ T9415] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 945.236063][ T9415] stv0680 9-1:4.0: last error: 0, command = 0x0 [ 945.296580][ T9415] usb 9-1: USB disconnect, device number 7 [ 945.921426][ T9415] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 946.245427][ T9415] usb 9-1: device descriptor read/64, error -71 [ 946.500875][ T9415] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 946.520822][ T9504] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 946.630811][ T9415] usb 9-1: device descriptor read/64, error -71 [ 946.693102][ T9504] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.704452][ T9504] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.716262][ T9504] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 946.727088][ T9504] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.741314][ T9415] usb usb9-port1: attempt power cycle [ 946.745882][ T9504] usb 7-1: config 0 descriptor?? [ 947.101763][ T9415] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 947.156137][ T9415] usb 9-1: device descriptor read/8, error -71 [ 947.192125][ T9504] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 947.228034][T13761] tipc: Started in network mode [ 947.233838][ T9504] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 947.245133][T13761] tipc: Node identity , cluster identity 4711 [ 947.281026][T13761] tipc: Failed to set node id, please configure manually [ 947.288150][T13761] tipc: Enabling of bearer rejected, failed to enable media [ 947.339284][T13761] FAULT_INJECTION: forcing a failure. [ 947.339284][T13761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.383790][T13761] CPU: 1 UID: 0 PID: 13761 Comm: syz.7.2186 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 947.383817][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 947.383829][T13761] Call Trace: [ 947.383837][T13761] [ 947.383848][T13761] dump_stack_lvl+0x189/0x250 [ 947.383879][T13761] ? __pfx____ratelimit+0x10/0x10 [ 947.383905][T13761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 947.383930][T13761] ? __pfx__printk+0x10/0x10 [ 947.383960][T13761] should_fail_ex+0x414/0x560 [ 947.383992][T13761] _copy_to_user+0x31/0xb0 [ 947.384017][T13761] simple_read_from_buffer+0xe1/0x170 [ 947.384046][T13761] proc_fail_nth_read+0x1df/0x250 [ 947.384093][T13761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 947.384124][T13761] ? rw_verify_area+0x258/0x650 [ 947.384145][T13761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 947.384176][T13761] vfs_read+0x200/0x980 [ 947.384204][T13761] ? __pfx___mutex_lock+0x10/0x10 [ 947.384233][T13761] ? __pfx_vfs_read+0x10/0x10 [ 947.384257][T13761] ? __fget_files+0x2a/0x420 [ 947.384288][T13761] ? __fget_files+0x3a0/0x420 [ 947.384313][T13761] ? __fget_files+0x2a/0x420 [ 947.384365][T13761] ksys_read+0x145/0x250 [ 947.384393][T13761] ? __pfx_ksys_read+0x10/0x10 [ 947.384415][T13761] ? rcu_is_watching+0x15/0xb0 [ 947.384451][T13761] ? do_syscall_64+0xbe/0x3b0 [ 947.384487][T13761] do_syscall_64+0xfa/0x3b0 [ 947.384516][T13761] ? lockdep_hardirqs_on+0x9c/0x150 [ 947.384545][T13761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.384565][T13761] ? clear_bhb_loop+0x60/0xb0 [ 947.384591][T13761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.384612][T13761] RIP: 0033:0x7f8ddab8d37c [ 947.384631][T13761] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 947.384649][T13761] RSP: 002b:00007f8ddbaa1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 947.384671][T13761] RAX: ffffffffffffffda RBX: 00007f8ddadb5fa0 RCX: 00007f8ddab8d37c [ 947.384694][T13761] RDX: 000000000000000f RSI: 00007f8ddbaa10a0 RDI: 0000000000000004 [ 947.384708][T13761] RBP: 00007f8ddbaa1090 R08: 0000000000000000 R09: 0000000000000000 [ 947.384722][T13761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 947.384734][T13761] R13: 0000000000000000 R14: 00007f8ddadb5fa0 R15: 00007ffd53415b78 [ 947.384768][T13761] [ 947.404030][ T9415] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 947.867692][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2187'. [ 948.385141][T13770] vivid-004: disconnect [ 948.874309][T13767] vivid-004: reconnect [ 949.111127][ T9415] usb 9-1: device not accepting address 11, error -71 [ 949.148607][ T9415] usb usb9-port1: unable to enumerate USB device [ 949.860753][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 949.860773][ T30] audit: type=1326 audit(2000000411.435:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13743 comm="syz.6.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7218e969 code=0x7fc00000 [ 949.933635][ T9504] cp2112 0003:10C4:EA90.000F: error requesting version [ 950.662835][ T9504] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -71 [ 950.679641][ T9504] usb 7-1: USB disconnect, device number 13 [ 955.499463][T13854] binder_alloc: 13852: pid 13852 spamming oneway? 1 buffers allocated for a total size of 4096 [ 955.538189][T13853] binder_alloc: 13852: pid 13852 spamming oneway? 2 buffers allocated for a total size of 5120 [ 955.716388][T13858] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 955.885495][T13861] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2217'. [ 955.936667][ T9415] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 956.430791][ T9415] usb 7-1: device descriptor read/64, error -71 [ 956.672773][ T9415] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 956.792569][T13865] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2219'. [ 956.950897][ T9415] usb 7-1: device descriptor read/64, error -71 [ 957.011125][T13869] mkiss: ax0: crc mode is auto. [ 957.101120][ T9415] usb usb7-port1: attempt power cycle [ 957.361963][ T9391] Bluetooth: hci6: command 0x0405 tx timeout [ 957.510970][ T9415] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 957.567033][ T9415] usb 7-1: device descriptor read/8, error -71 [ 957.800026][T13872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2222'. [ 957.901234][ T9415] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 957.965058][T13876] overlayfs: failed to resolve './file1': -36 [ 957.968219][ T9415] usb 7-1: device descriptor read/8, error -71 [ 957.999554][T13879] FAULT_INJECTION: forcing a failure. [ 957.999554][T13879] name failslab, interval 1, probability 0, space 0, times 0 [ 958.018611][T13879] CPU: 0 UID: 0 PID: 13879 Comm: syz.8.2224 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 958.018636][T13879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 958.018648][T13879] Call Trace: [ 958.018656][T13879] [ 958.018665][T13879] dump_stack_lvl+0x189/0x250 [ 958.018696][T13879] ? __pfx____ratelimit+0x10/0x10 [ 958.018723][T13879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 958.018749][T13879] ? __pfx__printk+0x10/0x10 [ 958.018770][T13879] ? __pfx___might_resched+0x10/0x10 [ 958.018797][T13879] ? fs_reclaim_acquire+0x7d/0x100 [ 958.018829][T13879] should_fail_ex+0x414/0x560 [ 958.018862][T13879] should_failslab+0xa8/0x100 [ 958.018888][T13879] kmem_cache_alloc_noprof+0x73/0x3c0 [ 958.018911][T13879] ? security_inode_alloc+0x39/0x330 [ 958.018938][T13879] security_inode_alloc+0x39/0x330 [ 958.018963][T13879] inode_init_always_gfp+0x9ed/0xdc0 [ 958.018994][T13879] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 958.019018][T13879] alloc_inode+0x82/0x1b0 [ 958.019043][T13879] new_inode+0x22/0x170 [ 958.019073][T13879] shmem_get_inode+0x346/0xe90 [ 958.019112][T13879] shmem_symlink+0xa3/0x510 [ 958.019146][T13879] vfs_symlink+0x140/0x2f0 [ 958.019172][T13879] do_symlinkat+0x1b1/0x3f0 [ 958.019198][T13879] ? __pfx_do_symlinkat+0x10/0x10 [ 958.019225][T13879] ? getname_flags+0x1e5/0x540 [ 958.019255][T13879] __x64_sys_symlinkat+0x95/0xb0 [ 958.019280][T13879] do_syscall_64+0xfa/0x3b0 [ 958.019304][T13879] ? lockdep_hardirqs_on+0x9c/0x150 [ 958.019329][T13879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.019347][T13879] ? clear_bhb_loop+0x60/0xb0 [ 958.019369][T13879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.019387][T13879] RIP: 0033:0x7f17b2b8e969 [ 958.019403][T13879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.019421][T13879] RSP: 002b:00007f17b3ad5038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 958.019441][T13879] RAX: ffffffffffffffda RBX: 00007f17b2db5fa0 RCX: 00007f17b2b8e969 [ 958.019454][T13879] RDX: 0000200000000000 RSI: ffffffffffffff9c RDI: 0000200000002040 [ 958.019468][T13879] RBP: 00007f17b3ad5090 R08: 0000000000000000 R09: 0000000000000000 [ 958.019480][T13879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 958.019490][T13879] R13: 0000000000000000 R14: 00007f17b2db5fa0 R15: 00007fff8de25338 [ 958.019519][T13879] [ 958.293256][T13880] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2223'. [ 958.293507][ T9415] usb usb7-port1: unable to enumerate USB device [ 958.312707][T13880] lo speed is unknown, defaulting to 1000 [ 958.318567][T13880] lo speed is unknown, defaulting to 1000 [ 958.325532][T13880] lo speed is unknown, defaulting to 1000 [ 958.342649][T13880] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 958.422175][T13880] lo speed is unknown, defaulting to 1000 [ 958.429849][T13880] lo speed is unknown, defaulting to 1000 [ 958.437527][T13880] lo speed is unknown, defaulting to 1000 [ 958.445087][T13880] lo speed is unknown, defaulting to 1000 [ 958.452727][T13880] lo speed is unknown, defaulting to 1000 [ 958.575254][T13885] CIFS: iocharset name too long [ 958.912908][T13883] kvm: kvm [13882]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x0 [ 958.957594][T13889] FAULT_INJECTION: forcing a failure. [ 958.957594][T13889] name failslab, interval 1, probability 0, space 0, times 0 [ 959.164160][T13897] block device autoloading is deprecated and will be removed. [ 959.328693][T13889] CPU: 1 UID: 0 PID: 13889 Comm: syz.2.2227 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 959.328724][T13889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 959.328743][T13889] Call Trace: [ 959.328751][T13889] [ 959.328760][T13889] dump_stack_lvl+0x189/0x250 [ 959.328797][T13889] ? __pfx____ratelimit+0x10/0x10 [ 959.328836][T13889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 959.328862][T13889] ? __pfx__printk+0x10/0x10 [ 959.328886][T13889] ? __pfx___might_resched+0x10/0x10 [ 959.328911][T13889] ? fs_reclaim_acquire+0x7d/0x100 [ 959.328942][T13889] should_fail_ex+0x414/0x560 [ 959.328976][T13889] should_failslab+0xa8/0x100 [ 959.329002][T13889] __kmalloc_noprof+0xcb/0x4f0 [ 959.329024][T13889] ? kfree+0x4d/0x440 [ 959.329041][T13889] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 959.329067][T13889] tomoyo_realpath_from_path+0xe3/0x5d0 [ 959.329089][T13889] ? tomoyo_domain+0xda/0x130 [ 959.329115][T13889] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 959.329142][T13889] tomoyo_path_number_perm+0x1e8/0x5a0 [ 959.329172][T13889] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 959.329214][T13889] ? __lock_acquire+0xab9/0xd20 [ 959.329257][T13889] ? __fget_files+0x2a/0x420 [ 959.329286][T13889] ? __fget_files+0x2a/0x420 [ 959.329309][T13889] ? __fget_files+0x3a0/0x420 [ 959.329332][T13889] ? __fget_files+0x2a/0x420 [ 959.329361][T13889] security_file_ioctl+0xcb/0x2d0 [ 959.329391][T13889] __se_sys_ioctl+0x47/0x170 [ 959.329415][T13889] do_syscall_64+0xfa/0x3b0 [ 959.329440][T13889] ? lockdep_hardirqs_on+0x9c/0x150 [ 959.329464][T13889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.329482][T13889] ? clear_bhb_loop+0x60/0xb0 [ 959.329504][T13889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.329521][T13889] RIP: 0033:0x7f2c4318e969 [ 959.329538][T13889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.329554][T13889] RSP: 002b:00007f2c44016038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 959.329573][T13889] RAX: ffffffffffffffda RBX: 00007f2c433b5fa0 RCX: 00007f2c4318e969 [ 959.329587][T13889] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 959.329598][T13889] RBP: 00007f2c44016090 R08: 0000000000000000 R09: 0000000000000000 [ 959.329610][T13889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.329621][T13889] R13: 0000000000000000 R14: 00007f2c433b5fa0 R15: 00007ffed6cce5b8 [ 959.329649][T13889] [ 959.574087][ C1] vkms_vblank_simulate: vblank timer overrun [ 959.810784][T13889] ERROR: Out of memory at tomoyo_realpath_from_path. [ 960.186212][T13907] FAULT_INJECTION: forcing a failure. [ 960.186212][T13907] name failslab, interval 1, probability 0, space 0, times 0 [ 960.199319][T13907] CPU: 1 UID: 0 PID: 13907 Comm: syz.8.2231 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 960.199345][T13907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 960.199357][T13907] Call Trace: [ 960.199365][T13907] [ 960.199374][T13907] dump_stack_lvl+0x189/0x250 [ 960.199407][T13907] ? __pfx____ratelimit+0x10/0x10 [ 960.199436][T13907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 960.199464][T13907] ? __pfx__printk+0x10/0x10 [ 960.199489][T13907] ? __pfx___might_resched+0x10/0x10 [ 960.199522][T13907] should_fail_ex+0x414/0x560 [ 960.199556][T13907] ? traverse+0xd9/0x570 [ 960.199593][T13907] should_failslab+0xa8/0x100 [ 960.199622][T13907] __kvmalloc_node_noprof+0x168/0x600 [ 960.199650][T13907] ? traverse+0xd9/0x570 [ 960.199678][T13907] traverse+0xd9/0x570 [ 960.199707][T13907] ? __lock_acquire+0xab9/0xd20 [ 960.199739][T13907] seq_read_iter+0xcfe/0xe10 [ 960.199773][T13907] ? __asan_memset+0x22/0x50 [ 960.199800][T13907] seq_read+0x2e2/0x3d0 [ 960.199821][T13907] ? __lock_acquire+0xab9/0xd20 [ 960.199856][T13907] ? __pfx_seq_read+0x10/0x10 [ 960.199885][T13907] ? __import_iovec+0x5d4/0x7f0 [ 960.199928][T13907] ? __pfx_seq_read+0x10/0x10 [ 960.199948][T13907] proc_reg_read+0x1e6/0x2e0 [ 960.199976][T13907] vfs_readv+0x5aa/0x850 [ 960.200008][T13907] ? __pfx_proc_reg_read+0x10/0x10 [ 960.200033][T13907] ? __pfx_vfs_readv+0x10/0x10 [ 960.200079][T13907] ? __fget_files+0x2a/0x420 [ 960.200112][T13907] ? __fget_files+0x3a0/0x420 [ 960.200140][T13907] ? __fget_files+0x2a/0x420 [ 960.200178][T13907] __x64_sys_preadv+0x197/0x2a0 [ 960.200208][T13907] ? __pfx___x64_sys_preadv+0x10/0x10 [ 960.200233][T13907] ? rcu_is_watching+0x15/0xb0 [ 960.200269][T13907] ? do_syscall_64+0xbe/0x3b0 [ 960.200304][T13907] do_syscall_64+0xfa/0x3b0 [ 960.200332][T13907] ? lockdep_hardirqs_on+0x9c/0x150 [ 960.200361][T13907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.200382][T13907] ? clear_bhb_loop+0x60/0xb0 [ 960.200407][T13907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.200427][T13907] RIP: 0033:0x7f17b2b8e969 [ 960.200447][T13907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 960.200464][T13907] RSP: 002b:00007f17b3a93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 960.200486][T13907] RAX: ffffffffffffffda RBX: 00007f17b2db6160 RCX: 00007f17b2b8e969 [ 960.200501][T13907] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000007 [ 960.200514][T13907] RBP: 00007f17b3a93090 R08: 000000000000097e R09: 0000000000000000 [ 960.200527][T13907] R10: 0000000000000105 R11: 0000000000000246 R12: 0000000000000001 [ 960.200539][T13907] R13: 0000000000000000 R14: 00007f17b2db6160 R15: 00007fff8de25338 [ 960.200571][T13907] [ 960.471700][ C1] vkms_vblank_simulate: vblank timer overrun [ 961.191531][T13916] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2237'. [ 961.580727][T13917] FAULT_INJECTION: forcing a failure. [ 961.580727][T13917] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 961.594469][T13917] CPU: 0 UID: 0 PID: 13917 Comm: syz.6.2235 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 961.594490][T13917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 961.594501][T13917] Call Trace: [ 961.594507][T13917] [ 961.594514][T13917] dump_stack_lvl+0x189/0x250 [ 961.594541][T13917] ? __pfx____ratelimit+0x10/0x10 [ 961.594563][T13917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 961.594586][T13917] ? __pfx__printk+0x10/0x10 [ 961.594601][T13917] ? rcu_is_watching+0x15/0xb0 [ 961.594624][T13917] ? trace_contention_end+0x39/0x120 [ 961.594640][T13917] ? __mutex_lock+0x330/0xe80 [ 961.594667][T13917] should_fail_ex+0x414/0x560 [ 961.594693][T13917] iommufd_get_object+0x78/0x4b0 [ 961.594710][T13917] ? __pfx___mutex_lock+0x10/0x10 [ 961.594733][T13917] ? __pfx_iommufd_get_object+0x10/0x10 [ 961.594757][T13917] iommufd_access_change_ioas_id+0x48/0x150 [ 961.594779][T13917] iommufd_access_attach+0x5a/0x90 [ 961.594798][T13917] iommufd_test+0x30da/0x5170 [ 961.594829][T13917] ? __pfx_iommufd_test+0x10/0x10 [ 961.594852][T13917] ? __lock_acquire+0xab9/0xd20 [ 961.594880][T13917] ? __might_fault+0xb0/0x130 [ 961.594924][T13917] iommufd_fops_ioctl+0x446/0x520 [ 961.594942][T13917] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 961.594968][T13917] ? __fget_files+0x3a0/0x420 [ 961.594989][T13917] ? __fget_files+0x2a/0x420 [ 961.595012][T13917] ? bpf_lsm_file_ioctl+0x9/0x20 [ 961.595034][T13917] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 961.595051][T13917] __se_sys_ioctl+0xfc/0x170 [ 961.595070][T13917] do_syscall_64+0xfa/0x3b0 [ 961.595091][T13917] ? lockdep_hardirqs_on+0x9c/0x150 [ 961.595112][T13917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.595127][T13917] ? clear_bhb_loop+0x60/0xb0 [ 961.595145][T13917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.595160][T13917] RIP: 0033:0x7f6a7218e969 [ 961.595174][T13917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.595188][T13917] RSP: 002b:00007f6a72f75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 961.595204][T13917] RAX: ffffffffffffffda RBX: 00007f6a723b5fa0 RCX: 00007f6a7218e969 [ 961.595215][T13917] RDX: 0000200000000600 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 961.595225][T13917] RBP: 00007f6a72f75090 R08: 0000000000000000 R09: 0000000000000000 [ 961.595235][T13917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 961.595244][T13917] R13: 0000000000000000 R14: 00007f6a723b5fa0 R15: 00007fffcf666258 [ 961.595267][T13917] [ 963.248066][T13939] vivid-004: disconnect [ 963.608109][T13942] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2243'. [ 963.620997][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2243'. [ 963.640102][T13937] vivid-004: reconnect [ 963.971375][T13946] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2245'. [ 964.040794][T13953] No source specified [ 964.063986][T13946] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2245'. [ 964.116137][T13946] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.125075][T13946] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.371030][ T5887] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 965.530931][ T5887] usb 9-1: Using ep0 maxpacket: 8 [ 965.542497][ T5887] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 965.563700][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.639183][ T5887] usb 9-1: Product: syz [ 965.650887][ T5887] usb 9-1: Manufacturer: syz [ 965.665672][ T5887] usb 9-1: SerialNumber: syz [ 965.699053][ T5887] usb 9-1: config 0 descriptor?? [ 965.715456][ T5887] gspca_main: se401-2.14.0 probing 047d:5003 [ 966.489014][ T5887] input: se401 as /devices/platform/dummy_hcd.8/usb9/9-1/input/input32 [ 970.306412][ T5887] usb 9-1: USB disconnect, device number 12 [ 970.981501][ T30] audit: type=1326 audit(2000000432.685:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13993 comm="syz.7.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ddab8e969 code=0x7ffc0000 [ 971.004098][T11573] udevd[11573]: setting owner of /dev/bus/usb/009/012 to uid=0, gid=0 failed: No such file or directory [ 971.059658][ T30] audit: type=1326 audit(2000000432.685:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13993 comm="syz.7.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ddab8e969 code=0x7ffc0000 [ 971.166088][ T30] audit: type=1326 audit(2000000432.755:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13993 comm="syz.7.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f8ddab8e969 code=0x7ffc0000 [ 971.250044][ T30] audit: type=1326 audit(2000000432.755:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13993 comm="syz.7.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ddab8e969 code=0x7ffc0000 [ 971.469408][ T30] audit: type=1326 audit(2000000432.755:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13993 comm="syz.7.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f8ddab8e969 code=0x7ffc0000 [ 971.517306][ T30] audit: type=1326 audit(2000000432.755:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13993 comm="syz.7.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ddab8e969 code=0x7ffc0000 [ 971.551929][ T30] audit: type=1326 audit(2000000432.755:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13993 comm="syz.7.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ddab8d2d0 code=0x7ffc0000 [ 972.534652][ T30] audit: type=1326 audit(2000000432.755:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13993 comm="syz.7.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ddab8e969 code=0x7ffc0000 [ 972.612570][ T30] audit: type=1326 audit(2000000432.755:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13993 comm="syz.7.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f8ddab8e969 code=0x7ffc0000 [ 972.800825][ T30] audit: type=1326 audit(2000000432.755:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13993 comm="syz.7.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ddab8e969 code=0x7ffc0000 [ 973.251866][T14010] CIFS: iocharset name too long [ 973.345240][T14012] CIFS: iocharset name too long [ 975.401016][ T9415] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 975.568463][ T9415] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.215456][ T9415] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 976.246999][ T9415] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 976.282545][ T9415] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 976.322667][ T9415] usb 7-1: SerialNumber: syz [ 976.928875][ T9415] usb 7-1: 0:2 : does not exist [ 976.967384][ T9415] usb 7-1: USB disconnect, device number 18 [ 977.103902][T11573] udevd[11573]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 977.339288][T14071] netlink: 'syz.8.2282': attribute type 10 has an invalid length. [ 977.681127][T14071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.742955][T14071] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 978.100946][ T9327] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 978.230988][ T5882] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 978.260762][ T9327] usb 7-1: Using ep0 maxpacket: 8 [ 978.281280][ T9327] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 978.288780][ T9327] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 978.309881][ T9327] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 978.326456][ T9327] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 978.329688][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2294'. [ 978.339103][ T9327] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 978.365251][ T9327] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 978.383541][ T9327] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 978.424916][ T9327] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 978.451110][ T5882] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 978.469847][ T5882] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 978.469900][ T5882] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 978.469927][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.492039][ T9327] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 978.492075][ T9327] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 978.500761][ T9327] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 978.500810][ T9327] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 978.500879][ T9327] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 978.500906][ T9327] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 978.500933][ T9327] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 978.515314][ T9327] usb 7-1: string descriptor 0 read error: -22 [ 978.515499][ T9327] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 978.515539][ T9327] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.531761][ T9327] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 978.702755][ T5882] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 978.725505][ T5882] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input33 [ 978.747779][ T5882] input: failed to attach handler kbd to device input33, error: -5 [ 978.763754][ T5928] usb 7-1: USB disconnect, device number 19 [ 978.820503][ T5882] usb 4-1: USB disconnect, device number 72 [ 979.919056][T14109] vivid-001: disconnect [ 980.261404][T14111] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2298'. [ 980.827947][T14105] vivid-001: reconnect [ 982.194097][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2309'. [ 982.576913][T14145] bridge_slave_0: left allmulticast mode [ 982.583595][T14145] bridge_slave_0: left promiscuous mode [ 982.589469][T14145] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.605088][T14145] bridge_slave_1: left allmulticast mode [ 982.611059][T14145] bridge_slave_1: left promiscuous mode [ 982.619606][T14145] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.646843][T14145] bond0: (slave bond_slave_0): Releasing backup interface [ 982.741601][ T5887] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 982.976477][T14145] bond0: (slave bond_slave_1): Releasing backup interface [ 983.023987][ T5887] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 983.117434][ T5887] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 983.180969][ T9327] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 983.248007][ T5887] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 983.260270][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.311972][T14145] team0: Port device team_slave_0 removed [ 983.334291][ T9327] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 983.368551][ T9327] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 983.383592][T14145] team0: Port device team_slave_1 removed [ 983.400394][ T9327] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 983.421428][ T9327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 983.433145][T14145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 983.443082][ T9327] usb 3-1: SerialNumber: syz [ 983.485647][T14145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 983.518226][T14145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 983.526630][T14145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.035973][ T5887] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 984.204371][ T9327] usb 3-1: 0:2 : does not exist [ 984.268203][ T9327] usb 3-1: USB disconnect, device number 58 [ 984.274055][ T5887] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input34 [ 984.287852][ T5887] input: failed to attach handler kbd to device input34, error: -5 [ 984.455046][ T5887] usb 7-1: USB disconnect, device number 20 [ 984.489164][ T9979] udevd[9979]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 984.673174][T14170] hfs: unable to load iocharset "io#harset" [ 984.680444][T14170] netdevsim netdevsim3 : renamed from netdevsim0 [ 984.716750][T14170] x_tables: duplicate underflow at hook 1 [ 984.875825][T14175] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2322'. [ 986.402684][T14188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2326'. [ 986.434199][T14188] 9pnet_fd: Insufficient options for proto=fd [ 987.448968][T14199] lo speed is unknown, defaulting to 1000 [ 988.580859][ T9327] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 988.751389][ T9327] usb 3-1: Using ep0 maxpacket: 32 [ 988.764958][ T9327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.781189][ T9327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.791591][ T9327] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 988.801113][ T9327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.817639][ T9327] usb 3-1: config 0 descriptor?? [ 988.842905][ T9327] hub 3-1:0.0: USB hub found [ 988.940803][ T5882] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 989.185654][ T9327] hub 3-1:0.0: 1 port detected [ 989.201021][ T5882] usb 7-1: Using ep0 maxpacket: 8 [ 989.208523][ T5882] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 989.224428][ T5882] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 989.244818][ T5882] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 989.287905][ T5882] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 989.308476][ T5882] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 989.325880][ T5882] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 989.337072][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.568442][ T5882] usb 7-1: GET_CAPABILITIES returned 0 [ 989.574293][ T5882] usbtmc 7-1:16.0: can't read capabilities [ 989.710791][T10622] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 989.762396][ T5882] hub 3-1:0.0: activate --> -90 [ 989.863241][T10622] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.877588][ T5928] usb 7-1: USB disconnect, device number 21 [ 989.896409][T10622] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 989.898214][T14214] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 989.910602][T10622] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 989.930343][T10622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 989.939404][T10622] usb 4-1: SerialNumber: syz [ 990.514515][T10622] usb 4-1: 0:2 : does not exist [ 990.589116][ T5928] usb 3-1: USB disconnect, device number 59 [ 990.601214][ T5882] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 990.617938][T10622] usb 4-1: USB disconnect, device number 73 [ 990.753437][T11573] udevd[11573]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 991.526603][T10622] usb 4-1: new low-speed USB device number 74 using dummy_hcd [ 991.792686][T10622] usb 4-1: LPM exit latency is zeroed, disabling LPM. [ 991.808228][T10622] usb 4-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 991.829752][T10622] usb 4-1: config 1 interface 0 has no altsetting 0 [ 991.896228][T10622] usb 4-1: string descriptor 0 read error: -22 [ 991.910853][T10622] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 991.947621][T10622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.258381][T10622] usbhid 4-1:1.0: can't add hid device: -71 [ 992.277650][T10622] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 992.324215][T10622] usb 4-1: USB disconnect, device number 74 [ 992.496451][T14280] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2356'. [ 992.544316][ T9327] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 992.939344][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.945926][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.012007][ T5882] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 993.029100][ T9327] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.127170][ T9327] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 993.157033][ T9327] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 993.169534][ T9327] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 993.190757][ T9327] usb 9-1: SerialNumber: syz [ 993.202962][ T5882] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.221553][ T5882] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 993.258921][ T5882] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 993.270910][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 993.290853][ T5882] usb 7-1: SerialNumber: syz [ 993.297367][T14286] CIFS mount error: No usable UNC path provided in device string! [ 993.297367][T14286] [ 993.308198][T14286] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 993.410830][ T5928] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 993.466453][ T9327] usb 9-1: 0:2 : does not exist [ 993.499123][ T9327] usb 9-1: USB disconnect, device number 13 [ 993.534138][ T5882] usb 7-1: 0:2 : does not exist [ 993.561004][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 993.582515][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.591796][ T9979] udevd[9979]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 993.596660][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.616109][ T5882] usb 7-1: USB disconnect, device number 22 [ 993.626500][ T5928] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 993.639457][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.681056][ T5928] usb 4-1: config 0 descriptor?? [ 993.684753][ T9979] udevd[9979]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 993.692063][ T5928] hub 4-1:0.0: USB hub found [ 993.896007][ T5928] hub 4-1:0.0: 1 port detected [ 994.243533][T14291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2360'. [ 994.748707][ T5887] hub 4-1:0.0: activate --> -90 [ 995.548163][ T5887] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 995.548557][ T5882] usb 4-1: USB disconnect, device number 75 [ 995.636025][T14303] 8021q: VLANs not supported on ip6_vti0 [ 1000.550504][T14350] macsec1: entered allmulticast mode [ 1000.662451][ T5886] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1000.822543][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 1000.830554][ T5886] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1000.843607][ T5886] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1000.854806][ T5886] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1000.868415][ T5886] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1000.880113][ T5886] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1000.897200][ T5886] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1000.907070][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.980818][ T5928] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1001.225038][ T5886] usb 3-1: GET_CAPABILITIES returned 0 [ 1001.238277][ T5886] usbtmc 3-1:16.0: can't read capabilities [ 1001.320723][ T5928] usb 7-1: Using ep0 maxpacket: 32 [ 1001.327721][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.339030][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.488974][ T5928] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1002.938191][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.988551][ T5928] usb 7-1: config 0 descriptor?? [ 1003.188273][ T5928] hub 7-1:0.0: USB hub found [ 1003.785933][ T5887] usb 3-1: USB disconnect, device number 60 [ 1003.788894][T14345] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 1004.015506][ T5928] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1004.284487][ T5928] usbhid 7-1:0.0: can't add hid device: -71 [ 1005.396536][T14377] 8021q: VLANs not supported on wg0 [ 1005.473134][ T5928] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1005.513972][ T5928] usb 7-1: USB disconnect, device number 23 [ 1005.672703][T14384] FAULT_INJECTION: forcing a failure. [ 1005.672703][T14384] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.707735][T14384] CPU: 0 UID: 0 PID: 14384 Comm: syz.6.2387 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 1005.707763][T14384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1005.707775][T14384] Call Trace: [ 1005.707783][T14384] [ 1005.707791][T14384] dump_stack_lvl+0x189/0x250 [ 1005.707822][T14384] ? __pfx____ratelimit+0x10/0x10 [ 1005.707848][T14384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1005.707874][T14384] ? __pfx__printk+0x10/0x10 [ 1005.707898][T14384] ? __pfx___might_resched+0x10/0x10 [ 1005.707923][T14384] ? fs_reclaim_acquire+0x7d/0x100 [ 1005.707955][T14384] should_fail_ex+0x414/0x560 [ 1005.708004][T14384] should_failslab+0xa8/0x100 [ 1005.708050][T14384] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1005.708091][T14384] ? __alloc_skb+0x112/0x2d0 [ 1005.708117][T14384] __alloc_skb+0x112/0x2d0 [ 1005.708144][T14384] netlink_ack+0x146/0xa50 [ 1005.708164][T14384] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1005.708210][T14384] netlink_rcv_skb+0x28c/0x470 [ 1005.708234][T14384] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1005.708264][T14384] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1005.708305][T14384] ? down_read+0x1ad/0x2e0 [ 1005.708329][T14384] genl_rcv+0x28/0x40 [ 1005.708354][T14384] netlink_unicast+0x75b/0x8d0 [ 1005.708387][T14384] netlink_sendmsg+0x805/0xb30 [ 1005.708420][T14384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.708453][T14384] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1005.708479][T14384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.708503][T14384] __sock_sendmsg+0x219/0x270 [ 1005.708536][T14384] ____sys_sendmsg+0x505/0x830 [ 1005.708567][T14384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1005.708602][T14384] ? import_iovec+0x74/0xa0 [ 1005.708632][T14384] ___sys_sendmsg+0x21f/0x2a0 [ 1005.708659][T14384] ? __pfx____sys_sendmsg+0x10/0x10 [ 1005.708724][T14384] ? __fget_files+0x2a/0x420 [ 1005.708751][T14384] ? __fget_files+0x3a0/0x420 [ 1005.708791][T14384] __x64_sys_sendmsg+0x19b/0x260 [ 1005.708819][T14384] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1005.708854][T14384] ? __pfx_ksys_write+0x10/0x10 [ 1005.708877][T14384] ? rcu_is_watching+0x15/0xb0 [ 1005.708911][T14384] ? do_syscall_64+0xbe/0x3b0 [ 1005.708946][T14384] do_syscall_64+0xfa/0x3b0 [ 1005.708974][T14384] ? lockdep_hardirqs_on+0x9c/0x150 [ 1005.709001][T14384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.709021][T14384] ? clear_bhb_loop+0x60/0xb0 [ 1005.709046][T14384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.709072][T14384] RIP: 0033:0x7f6a7218e969 [ 1005.709090][T14384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.709107][T14384] RSP: 002b:00007f6a72f75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1005.709129][T14384] RAX: ffffffffffffffda RBX: 00007f6a723b5fa0 RCX: 00007f6a7218e969 [ 1005.709144][T14384] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1005.709158][T14384] RBP: 00007f6a72f75090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.709170][T14384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.709183][T14384] R13: 0000000000000000 R14: 00007f6a723b5fa0 R15: 00007fffcf666258 [ 1005.709215][T14384] [ 1006.561458][T14391] syz.2.2391 (14391): drop_caches: 1 [ 1006.823261][ T9327] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1006.849293][T14391] syz.2.2391 (14391): drop_caches: 1 [ 1006.992023][ T9327] usb 7-1: Using ep0 maxpacket: 32 [ 1007.632893][T14399] sctp: [Deprecated]: syz.3.2393 (pid 14399) Use of int in maxseg socket option. [ 1007.632893][T14399] Use struct sctp_assoc_value instead [ 1007.690279][ T9327] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1007.711845][ T9327] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1007.730786][ T9327] usb 7-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 1007.739890][ T9327] usb 7-1: too many endpoints for config 1 interface 2 altsetting 255: 255, using maximum allowed: 30 [ 1007.770810][ T9327] usb 7-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1007.811502][ T9327] usb 7-1: config 1 interface 2 has no altsetting 1 [ 1007.841054][ T9327] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1007.860765][ T9327] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.871272][ T9327] usb 7-1: Product: syz [ 1007.876179][ T9327] usb 7-1: Manufacturer: syz [ 1007.890921][ T9327] usb 7-1: SerialNumber: syz [ 1008.080761][ T5928] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1008.291977][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 1008.414858][ T5928] usb 4-1: config 0 has an invalid interface number: 92 but max is 0 [ 1008.599719][ T5928] usb 4-1: config 0 has no interface number 0 [ 1008.732460][ T9327] usb 7-1: 2:0 : UAC_AS_GENERAL descriptor not found [ 1008.774500][ T9327] usb 7-1: USB disconnect, device number 24 [ 1008.817832][T11573] udevd[11573]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1008.838027][ T5928] usb 4-1: config 0 interface 92 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1008.858061][ T5886] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1008.860694][ T5928] usb 4-1: config 0 interface 92 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1008.896115][ T5928] usb 4-1: config 0 interface 92 has no altsetting 0 [ 1008.933203][ T5928] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=a8.eb [ 1008.950719][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.989448][ T5928] usb 4-1: Product: syz [ 1009.000122][ T5928] usb 4-1: Manufacturer: syz [ 1009.007914][ T5928] usb 4-1: SerialNumber: syz [ 1009.027994][ T5928] usb 4-1: config 0 descriptor?? [ 1009.045002][T14399] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1009.060878][T14399] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1009.063742][ T5886] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1009.118216][ T5886] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1009.140856][ T5886] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1009.160257][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.386723][ T5928] redrat3 4-1:0.92: Couldn't find all endpoints [ 1009.414245][ T5928] usb 4-1: USB disconnect, device number 76 [ 1009.444335][ T5886] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1009.467861][ T5886] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input36 [ 1009.603424][ T5886] input: failed to attach handler kbd to device input36, error: -5 [ 1010.069879][ T5886] usb 3-1: USB disconnect, device number 61 [ 1011.679086][ T5883] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1012.002381][ T5883] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.020730][ T5883] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1012.031839][ T5883] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1012.041902][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1012.049968][ T5883] usb 7-1: SerialNumber: syz [ 1012.662927][ T5883] usb 7-1: 0:2 : does not exist [ 1012.681661][ T5883] usb 7-1: USB disconnect, device number 25 [ 1012.779999][T11573] udevd[11573]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1014.594290][T14467] 9pnet_fd: Insufficient options for proto=fd [ 1023.322325][T14534] netlink: 'syz.6.2432': attribute type 4 has an invalid length. [ 1023.343369][T14534] netlink: 'syz.6.2432': attribute type 4 has an invalid length. [ 1025.580757][T14552] syz.8.2438 (14552): drop_caches: 1 [ 1025.615651][T14557] kvm: pic: non byte write [ 1025.627809][T14556] syz.3.2439 (14556): drop_caches: 1 [ 1025.696624][T14552] syz.8.2438 (14552): drop_caches: 1 [ 1025.702346][T14556] syz.3.2439 (14556): drop_caches: 1 [ 1030.541974][T14583] syz.7.2447 (14583): drop_caches: 1 [ 1030.624018][T14593] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2450'. [ 1030.765677][T14594] netlink: 'syz.6.2446': attribute type 7 has an invalid length. [ 1030.819755][T14594] : entered promiscuous mode [ 1031.803182][T14598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2449'. [ 1032.079970][T14583] syz.7.2447 (14583): drop_caches: 1 [ 1032.211105][T14600] syz.3.2452 (14600): drop_caches: 1 [ 1032.355737][T14600] syz.3.2452 (14600): drop_caches: 1 [ 1032.561180][ T24] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1033.207032][ T9391] Bluetooth: hci5: command 0x0406 tx timeout [ 1033.250778][ T5886] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1033.510863][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.591227][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 1033.657158][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1033.660282][ T5886] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1033.776248][ T24] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1033.819259][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1033.830074][ T24] usb 7-1: SerialNumber: syz [ 1033.848455][ T5886] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1033.870814][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.895454][ T5886] usb 3-1: Product: syz [ 1033.920035][ T5886] usb 3-1: Manufacturer: syz [ 1033.924879][ T5886] usb 3-1: SerialNumber: syz [ 1033.957061][ T5886] usb 3-1: config 0 descriptor?? [ 1033.995807][ T5886] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1034.010819][ T5886] usb 3-1: setting power ON [ 1034.015489][ T5886] dvb-usb: bulk message failed: -22 (2/0) [ 1034.038389][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1034.054633][ T5886] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1034.095856][ T24] usb 7-1: 0:2 : does not exist [ 1034.364178][T14608] dvb-usb: bulk message failed: -22 (3/0) [ 1034.391237][T14608] dvb-usb: bulk message failed: -22 (3/0) [ 1034.431126][ T24] usb 7-1: USB disconnect, device number 26 [ 1034.525585][ T5886] usb 3-1: media controller created [ 1034.554575][T11573] udevd[11573]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1034.564249][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1035.303612][ T5886] usb 3-1: selecting invalid altsetting 6 [ 1035.310319][ T5886] usb 3-1: digital interface selection failed (-22) [ 1035.327691][ T5886] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1035.347344][ T5886] usb 3-1: setting power OFF [ 1035.355090][ T5886] dvb-usb: bulk message failed: -22 (2/0) [ 1035.379897][ T5886] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1035.401770][ T5886] (NULL device *): no alternate interface [ 1035.488917][T14634] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2462'. [ 1035.633894][ T5886] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1035.718695][ T5886] usb 3-1: USB disconnect, device number 62 [ 1036.284122][T14646] netlink: 'syz.8.2466': attribute type 21 has an invalid length. [ 1036.783551][T14646] netlink: 'syz.8.2466': attribute type 6 has an invalid length. [ 1036.800010][T14646] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2466'. [ 1037.126303][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033d5b000: rx timeout, send abort [ 1037.137030][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033d5b000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1037.717391][T12866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.983042][T12866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.209635][T12866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.917637][T12866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.477027][T12866] bridge_slave_1: left allmulticast mode [ 1039.494263][T12866] bridge_slave_1: left promiscuous mode [ 1039.588766][T12866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.617764][T14670] syz.8.2475 (14670): drop_caches: 1 [ 1039.625747][T12866] bridge_slave_0: left allmulticast mode [ 1039.635533][T12354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1039.646796][T12354] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1039.654828][T12866] bridge_slave_0: left promiscuous mode [ 1039.661036][T12866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.669479][T12354] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1039.678843][T14670] syz.8.2475 (14670): drop_caches: 1 [ 1039.687598][T12354] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1039.698750][T12354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1039.732498][ T5886] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1039.971361][ T5886] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.997886][ T5886] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1040.023472][ T5886] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1040.343045][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1040.444774][ T5886] usb 7-1: SerialNumber: syz [ 1040.991178][ T5886] usb 7-1: 0:2 : does not exist [ 1041.006760][ T5886] usb 7-1: USB disconnect, device number 27 [ 1041.056819][ T9391] Bluetooth: hci6: command 0x0405 tx timeout [ 1041.112219][T11573] udevd[11573]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1041.762868][ T51] Bluetooth: hci0: command tx timeout [ 1042.386172][ T5928] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1042.411605][T12866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.426510][T12866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.437061][T12866] bond0 (unregistering): Released all slaves [ 1042.588393][T14671] lo speed is unknown, defaulting to 1000 [ 1042.633018][ T5928] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.657483][ T5928] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1042.672837][T14704] FAULT_INJECTION: forcing a failure. [ 1042.672837][T14704] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.692284][T14704] CPU: 1 UID: 0 PID: 14704 Comm: syz.3.2485 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 1042.692310][T14704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1042.692322][T14704] Call Trace: [ 1042.692330][T14704] [ 1042.692344][T14704] dump_stack_lvl+0x189/0x250 [ 1042.692378][T14704] ? __pfx____ratelimit+0x10/0x10 [ 1042.692405][T14704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1042.692433][T14704] ? __pfx__printk+0x10/0x10 [ 1042.692454][T14704] ? __pfx___might_resched+0x10/0x10 [ 1042.692480][T14704] ? fs_reclaim_acquire+0x7d/0x100 [ 1042.692512][T14704] should_fail_ex+0x414/0x560 [ 1042.692546][T14704] should_failslab+0xa8/0x100 [ 1042.692574][T14704] __kmalloc_noprof+0xcb/0x4f0 [ 1042.692598][T14704] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1042.692631][T14704] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1042.692665][T14704] genl_family_rcv_msg_doit+0xb8/0x300 [ 1042.692700][T14704] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1042.692730][T14704] ? rcu_is_watching+0x15/0xb0 [ 1042.692759][T14704] ? cap_capable+0x11f/0x460 [ 1042.692788][T14704] ? safesetid_security_capable+0xa9/0x1a0 [ 1042.692819][T14704] ? bpf_lsm_capable+0x9/0x20 [ 1042.692837][T14704] ? security_capable+0x7e/0x2e0 [ 1042.692863][T14704] genl_rcv_msg+0x60e/0x790 [ 1042.692893][T14704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1042.692916][T14704] ? ref_tracker_free+0x63a/0x7d0 [ 1042.692934][T14704] ? __pfx_gtp_genl_new_pdp+0x10/0x10 [ 1042.692964][T14704] ? __pfx_ref_tracker_free+0x10/0x10 [ 1042.692994][T14704] netlink_rcv_skb+0x208/0x470 [ 1042.693016][T14704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1042.693045][T14704] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1042.693103][T14704] ? down_read+0x1ad/0x2e0 [ 1042.693127][T14704] genl_rcv+0x28/0x40 [ 1042.693153][T14704] netlink_unicast+0x75b/0x8d0 [ 1042.693186][T14704] netlink_sendmsg+0x805/0xb30 [ 1042.693228][T14704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1042.693261][T14704] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1042.693286][T14704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1042.693310][T14704] __sock_sendmsg+0x219/0x270 [ 1042.693344][T14704] ____sys_sendmsg+0x505/0x830 [ 1042.693375][T14704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1042.693411][T14704] ? import_iovec+0x74/0xa0 [ 1042.693441][T14704] ___sys_sendmsg+0x21f/0x2a0 [ 1042.693469][T14704] ? __pfx____sys_sendmsg+0x10/0x10 [ 1042.693533][T14704] ? __fget_files+0x2a/0x420 [ 1042.693561][T14704] ? __fget_files+0x3a0/0x420 [ 1042.693600][T14704] __x64_sys_sendmsg+0x19b/0x260 [ 1042.693626][T14704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1042.693661][T14704] ? __pfx_ksys_write+0x10/0x10 [ 1042.693683][T14704] ? rcu_is_watching+0x15/0xb0 [ 1042.693718][T14704] ? do_syscall_64+0xbe/0x3b0 [ 1042.693750][T14704] do_syscall_64+0xfa/0x3b0 [ 1042.693778][T14704] ? lockdep_hardirqs_on+0x9c/0x150 [ 1042.693806][T14704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.693826][T14704] ? clear_bhb_loop+0x60/0xb0 [ 1042.693850][T14704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.693869][T14704] RIP: 0033:0x7fb33998e969 [ 1042.693888][T14704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.693906][T14704] RSP: 002b:00007fb33a899038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1042.693928][T14704] RAX: ffffffffffffffda RBX: 00007fb339bb5fa0 RCX: 00007fb33998e969 [ 1042.693943][T14704] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1042.693956][T14704] RBP: 00007fb33a899090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.693969][T14704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.693981][T14704] R13: 0000000000000000 R14: 00007fb339bb5fa0 R15: 00007ffd2aac3878 [ 1042.694013][T14704] [ 1042.695180][ T5928] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1042.841049][T14706] syzkaller1: entered promiscuous mode [ 1042.920766][ T5928] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1043.025661][T14706] syzkaller1: entered allmulticast mode [ 1043.033671][ T5928] usb 9-1: SerialNumber: syz [ 1043.037586][T12866] IPVS: stopping master sync thread 10742 ... [ 1043.504827][ T5928] usb 9-1: 0:2 : does not exist [ 1043.690058][T14713] netlink: 'syz.3.2489': attribute type 1 has an invalid length. [ 1043.691046][ T5928] usb 9-1: USB disconnect, device number 14 [ 1043.786741][T11573] udevd[11573]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1043.853527][ T51] Bluetooth: hci0: command tx timeout [ 1043.909884][T14725] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2491'. [ 1043.942398][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1043.942419][ T30] audit: type=1804 audit(2000000505.655:229): pid=14713 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.2489" name="/newroot/508/file0" dev="tmpfs" ino=2755 res=1 errno=0 [ 1044.969060][T12866] hsr_slave_0: left promiscuous mode [ 1044.993868][T12866] hsr_slave_1: left promiscuous mode [ 1045.020586][T12866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1045.044015][T12866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.066676][T14756] Bluetooth: MGMT ver 1.23 [ 1045.075224][T12866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1045.092663][T12866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.125588][T12866] veth1_macvtap: left promiscuous mode [ 1045.139311][T12866] veth0_macvtap: left promiscuous mode [ 1045.920990][ T51] Bluetooth: hci0: command tx timeout [ 1047.374501][T14773] syz.7.2503 (14773): drop_caches: 4 [ 1047.868160][T12866] team0 (unregistering): Port device team_slave_1 removed [ 1047.938500][T12866] team0 (unregistering): Port device team_slave_0 removed [ 1048.009435][ T51] Bluetooth: hci0: command tx timeout [ 1048.508736][T12866] lo (unregistering): left allmulticast mode [ 1048.548072][T14671] chnl_net:caif_netlink_parms(): no params data found [ 1048.627431][ T24] lo speed is unknown, defaulting to 1000 [ 1048.701103][ T24] infiniband syz2: ib_query_port failed (-19) [ 1048.817977][T14783] geneve0: entered allmulticast mode [ 1048.818005][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2507'. [ 1051.490983][T14671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.533343][T14671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.565158][T14671] bridge_slave_0: entered allmulticast mode [ 1051.586046][T14671] bridge_slave_0: entered promiscuous mode [ 1051.615593][T14810] sctp: [Deprecated]: syz.8.2513 (pid 14810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1051.615593][T14810] Use struct sctp_sack_info instead [ 1051.636520][T14671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.672585][T14671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.680110][T14671] bridge_slave_1: entered allmulticast mode [ 1051.694257][T14671] bridge_slave_1: entered promiscuous mode [ 1052.935588][T14671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.029892][T12866] IPVS: stop unused estimator thread 0... [ 1054.123591][T14671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.352559][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.391336][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.063072][T14671] team0: Port device team_slave_0 added [ 1055.096469][T14671] team0: Port device team_slave_1 added [ 1055.830829][T14671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.869712][T14671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.969475][T14671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.989937][T14671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.998392][T14671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.028950][T14671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.237596][T14671] hsr_slave_0: entered promiscuous mode [ 1056.251705][T14671] hsr_slave_1: entered promiscuous mode [ 1056.356639][T14858] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.2524'. [ 1056.365966][T14858] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.2524'. [ 1056.375188][T14858] netlink: 584 bytes leftover after parsing attributes in process `syz.3.2524'. [ 1056.647711][T14671] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1056.676850][T14671] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1056.692097][T14671] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1056.710217][T14671] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1056.915764][T14671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.999915][T14671] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.105157][T12883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.112372][T12883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.137712][T12883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.144941][T12883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.304596][ T24] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1057.476639][ T24] usb 4-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 1057.497382][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1057.510570][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1057.520068][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1057.548428][ T24] usb 4-1: SerialNumber: syz [ 1057.644823][T14671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.216360][ T24] usb 4-1: 0:2 : does not exist [ 1059.575730][ T24] usb 4-1: USB disconnect, device number 77 [ 1060.338211][T11573] udevd[11573]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1060.722540][T14671] veth0_vlan: entered promiscuous mode [ 1060.793396][T14671] veth1_vlan: entered promiscuous mode [ 1060.903882][T14671] veth0_macvtap: entered promiscuous mode [ 1060.980951][T14671] veth1_macvtap: entered promiscuous mode [ 1061.091363][T14671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.135716][T14671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1061.193050][T14671] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.236348][T14671] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.253115][T14671] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.269139][T14671] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.526942][T14919] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2542'. [ 1061.694168][T12876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.745621][T12876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.786994][T12876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.835232][T12876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.139227][T10622] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1062.331450][T14931] IPVS: Error connecting to the multicast addr [ 1062.809306][T10622] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.967423][T10622] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1062.981852][T10622] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1063.021740][T10622] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1063.058497][T10622] usb 7-1: SerialNumber: syz [ 1063.709508][T10622] usb 7-1: 0:2 : does not exist [ 1063.826398][T10622] usb 7-1: USB disconnect, device number 28 [ 1063.916512][T11573] udevd[11573]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1064.178905][T14949] netlink: 'syz.8.2553': attribute type 7 has an invalid length. [ 1064.351668][T14951] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2554'. [ 1067.548059][T14982] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1067.558682][T14982] syz.3.2564 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1067.670897][ T30] audit: type=1800 audit(2000000529.395:230): pid=14978 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.2563" name="dmabuf" dev="dmabuf" ino=6 res=0 errno=0 [ 1067.860856][T14989] input: syz1 as /devices/virtual/input/input37 [ 1068.135840][ T5928] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1068.493290][ T5928] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.316049][ T5928] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1069.558719][ T5928] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1069.980724][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1069.988778][ T5928] usb 7-1: SerialNumber: syz [ 1070.285488][ T5928] usb 7-1: 0:2 : does not exist [ 1070.368716][ T5928] usb 7-1: USB disconnect, device number 29 [ 1070.419845][T15012] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2575'. [ 1070.458244][T11573] udevd[11573]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1070.487374][T15012] team_slave_0: entered promiscuous mode [ 1070.493595][T15012] team_slave_1: entered promiscuous mode [ 1070.507014][T15012] macvtap1: entered promiscuous mode [ 1070.521075][T15012] team0: entered promiscuous mode [ 1070.538890][T15012] macvtap1: entered allmulticast mode [ 1070.618030][T15012] team0: entered allmulticast mode [ 1070.731960][T15012] team_slave_0: entered allmulticast mode [ 1070.753067][T15012] team_slave_1: entered allmulticast mode [ 1070.783795][T15012] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1070.797261][ T5887] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1071.106439][ T5887] usb 9-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1071.200991][ T5887] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1071.207758][ T5887] usb 9-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1071.281398][ T5887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.302559][ T5887] usb 9-1: config 0 descriptor?? [ 1071.636815][T15014] netlink: 277 bytes leftover after parsing attributes in process `syz.8.2574'. [ 1073.911168][ T5887] usbhid 9-1:0.0: can't add hid device: -71 [ 1074.006292][ T5887] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1074.219818][ T5887] usb 9-1: USB disconnect, device number 15 [ 1074.764916][ T5887] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1075.230490][ T5887] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.251820][ T5887] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1075.861864][ T5887] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1075.878291][ T5887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1076.015121][ T5887] usb 9-1: SerialNumber: syz [ 1076.517106][ T5887] usb 9-1: 0:2 : does not exist [ 1076.611682][ T5887] usb 9-1: USB disconnect, device number 16 [ 1076.666464][T11573] udevd[11573]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1076.900998][T10622] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1077.663330][T10622] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.688407][T10622] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1077.732294][T10622] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1077.764345][T10622] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1077.787465][T10622] usb 7-1: SerialNumber: syz [ 1078.853767][T10622] usb 7-1: 0:2 : does not exist [ 1078.877807][T10622] usb 7-1: USB disconnect, device number 30 [ 1079.066070][T11573] udevd[11573]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1080.206289][T10622] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1080.584663][T10622] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1080.731563][T10622] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1080.867911][T10622] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1080.882346][T10622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.106568][T10622] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1081.128971][T10622] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input38 [ 1081.654307][T10622] input: failed to attach handler kbd to device input38, error: -5 [ 1081.703584][T10622] usb 4-1: USB disconnect, device number 78 [ 1082.956530][ T30] audit: type=1326 audit(2000000544.685:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15127 comm="syz.6.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7218e969 code=0x7ffc0000 [ 1082.990816][ T30] audit: type=1326 audit(2000000544.685:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15127 comm="syz.6.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7218e969 code=0x7ffc0000 [ 1083.130927][ T30] audit: type=1326 audit(2000000544.715:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15127 comm="syz.6.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f6a7218e969 code=0x7ffc0000 [ 1083.807010][ T30] audit: type=1326 audit(2000000544.715:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15127 comm="syz.6.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7218e969 code=0x7ffc0000 [ 1083.833387][ T30] audit: type=1326 audit(2000000544.715:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15127 comm="syz.6.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6a7218e969 code=0x7ffc0000 [ 1083.888760][ T30] audit: type=1326 audit(2000000544.715:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15127 comm="syz.6.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7218e969 code=0x7ffc0000 [ 1083.918347][ T30] audit: type=1326 audit(2000000544.715:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15127 comm="syz.6.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6a7218e969 code=0x7ffc0000 [ 1083.949553][ T30] audit: type=1326 audit(2000000544.715:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15127 comm="syz.6.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7218e969 code=0x7ffc0000 [ 1084.009236][ T30] audit: type=1326 audit(2000000544.715:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15127 comm="syz.6.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a7218e969 code=0x7ffc0000 [ 1084.077015][ T30] audit: type=1326 audit(2000000544.715:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15127 comm="syz.6.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7218e969 code=0x7ffc0000 [ 1087.370739][ T5886] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1087.748751][ T5886] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.786306][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1087.798587][ T5886] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1087.818594][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1087.836234][ T5886] usb 4-1: SerialNumber: syz [ 1088.290569][ T5886] usb 4-1: 0:2 : does not exist [ 1088.671501][ T5886] usb 4-1: USB disconnect, device number 79 [ 1088.821903][T11573] udevd[11573]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1090.674444][T15211] loop6: detected capacity change from 0 to 524287999 [ 1090.812598][T15211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1090.870787][T15211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1090.921756][T15211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1090.939410][T15211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1091.141969][T15211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1091.170200][T15211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1091.179755][T15211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1091.188498][T15211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1091.919853][T15211] ldm_validate_partition_table(): Disk read failed. [ 1091.960034][T15211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1091.960849][ T5886] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1091.989645][T15211] Buffer I/O error on dev loop6, logical block 0, async page read [ 1092.175165][T15211] Dev loop6: unable to read RDB block 0 [ 1092.192272][T15211] loop6: unable to read partition table [ 1092.200204][T15211] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1092.597733][ T5886] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.630327][ T5886] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1092.664636][ T5886] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1092.678960][ T5886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1092.700059][ T5886] usb 9-1: SerialNumber: syz [ 1092.966484][ T5886] usb 9-1: 0:2 : does not exist [ 1093.522366][ T5886] usb 9-1: USB disconnect, device number 17 [ 1093.716310][T11573] udevd[11573]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1094.411942][T15250] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2644'. [ 1094.533075][T15253] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2641'. [ 1095.491472][ T5928] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1095.986143][ T5928] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.008180][ T5928] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1096.038825][ T5928] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1096.060687][ T5928] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1096.079373][ T5928] usb 10-1: SerialNumber: syz [ 1096.307687][ T5928] usb 10-1: 0:2 : does not exist [ 1096.373658][ T5928] usb 10-1: USB disconnect, device number 2 [ 1096.467664][T11573] udevd[11573]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1097.387994][T15295] FAULT_INJECTION: forcing a failure. [ 1097.387994][T15295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.401570][T15295] CPU: 1 UID: 0 PID: 15295 Comm: syz.9.2658 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 1097.401599][T15295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1097.401613][T15295] Call Trace: [ 1097.401624][T15295] [ 1097.401634][T15295] dump_stack_lvl+0x189/0x250 [ 1097.401670][T15295] ? __pfx____ratelimit+0x10/0x10 [ 1097.401702][T15295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1097.401733][T15295] ? __pfx__printk+0x10/0x10 [ 1097.401755][T15295] ? __might_fault+0xb0/0x130 [ 1097.401795][T15295] should_fail_ex+0x414/0x560 [ 1097.401841][T15295] _copy_from_user+0x2d/0xb0 [ 1097.401869][T15295] snd_pcm_oss_write+0x84f/0x11a0 [ 1097.401923][T15295] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1097.401954][T15295] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1097.401982][T15295] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1097.402025][T15295] ? vfs_write+0x261/0xa90 [ 1097.402051][T15295] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1097.402084][T15295] vfs_write+0x27e/0xa90 [ 1097.402118][T15295] ? __pfx_vfs_write+0x10/0x10 [ 1097.402145][T15295] ? __fget_files+0x2a/0x420 [ 1097.402176][T15295] ? __fget_files+0x2a/0x420 [ 1097.402203][T15295] ? __fget_files+0x3a0/0x420 [ 1097.402230][T15295] ? __fget_files+0x2a/0x420 [ 1097.402268][T15295] ksys_write+0x145/0x250 [ 1097.402295][T15295] ? __pfx_ksys_write+0x10/0x10 [ 1097.402326][T15295] ? do_syscall_64+0xbe/0x3b0 [ 1097.402361][T15295] do_syscall_64+0xfa/0x3b0 [ 1097.402392][T15295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.402412][T15295] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1097.402432][T15295] ? clear_bhb_loop+0x60/0xb0 [ 1097.402457][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.402477][T15295] RIP: 0033:0x7fd2b418e969 [ 1097.402497][T15295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1097.402515][T15295] RSP: 002b:00007fd2b1fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1097.402547][T15295] RAX: ffffffffffffffda RBX: 00007fd2b43b6160 RCX: 00007fd2b418e969 [ 1097.402561][T15295] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000009 [ 1097.402573][T15295] RBP: 00007fd2b1fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.402586][T15295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1097.402597][T15295] R13: 0000000000000000 R14: 00007fd2b43b6160 R15: 00007ffcfeef1d98 [ 1097.402627][T15295] [ 1097.800815][ T5886] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1098.023941][ T5886] usb 9-1: Using ep0 maxpacket: 32 [ 1098.181552][ T5886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.196362][ T5886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.379898][ T5886] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1098.601201][ T5886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.613922][ T5886] usb 9-1: config 0 descriptor?? [ 1098.628864][ T5886] hub 9-1:0.0: USB hub found [ 1098.829561][ T5886] hub 9-1:0.0: 1 port detected [ 1099.675626][ T5886] hub 9-1:0.0: activate --> -90 [ 1100.388902][T10622] usb 9-1: USB disconnect, device number 18 [ 1100.395042][ T5886] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 1102.550197][T15347] vivid-002: disconnect [ 1102.554974][T15346] vivid-002: reconnect [ 1103.862244][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 1103.880006][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 1103.929091][T15366] ceph: No mds server is up or the cluster is laggy [ 1103.955197][T15374] netlink: 'syz.3.2683': attribute type 2 has an invalid length. [ 1104.073264][ T9504] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1104.250978][ T9504] usb 10-1: Using ep0 maxpacket: 32 [ 1104.263033][ T9504] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.290712][ T9504] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.310676][ T9504] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1104.319850][ T9504] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.335428][ T9504] usb 10-1: config 0 descriptor?? [ 1104.345912][ T9504] hub 10-1:0.0: USB hub found [ 1104.410820][ T5886] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1104.583722][ T5886] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.610900][ T5886] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1104.715286][ T9504] hub 10-1:0.0: 1 port detected [ 1104.897875][ T5886] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1104.915589][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1104.929486][ T5886] usb 7-1: SerialNumber: syz [ 1105.168592][ T5886] usb 7-1: 0:2 : does not exist [ 1105.216568][ T5886] usb 7-1: USB disconnect, device number 31 [ 1105.466093][ T9504] hub 10-1:0.0: activate --> -90 [ 1105.524771][T15401] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2694'. [ 1106.436038][ T5928] usb 10-1: USB disconnect, device number 3 [ 1106.447042][ T9504] hub 10-1:0.0: hub_ext_port_status failed (err = -71) [ 1109.487329][T15426] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1110.383620][T15438] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2705'. [ 1110.850743][ T5887] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1111.023658][ T5887] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.034574][ T5887] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1111.059314][ T5887] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1111.069926][ T5887] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1111.089791][ T5887] usb 10-1: SerialNumber: syz [ 1111.313287][ T5887] usb 10-1: 0:2 : does not exist [ 1111.362995][ T5887] usb 10-1: USB disconnect, device number 4 [ 1111.526687][T11573] udevd[11573]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1112.184425][T15463] ntfs3(nbd9): try to read out of volume at offset 0x0 [ 1112.312314][T15466] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2717'. [ 1112.509013][T15468] 9pnet_virtio: no channels available for device syz [ 1114.482385][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2729'. [ 1114.510182][T15510] team_slave_0: entered promiscuous mode [ 1114.516017][T15510] team_slave_1: entered promiscuous mode [ 1114.539556][T15510] macvtap1: entered promiscuous mode [ 1114.556558][T15510] team0: entered promiscuous mode [ 1114.578702][T15510] macvtap1: entered allmulticast mode [ 1114.596522][T15510] team0: entered allmulticast mode [ 1114.611574][T15510] team_slave_0: entered allmulticast mode [ 1114.628214][T15510] team_slave_1: entered allmulticast mode [ 1114.646030][T15510] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1115.180987][ T9327] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1115.373055][ T9327] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.390765][ T9327] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1115.410673][ T9327] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1115.420029][ T9327] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1115.446784][ T9327] usb 10-1: SerialNumber: syz [ 1115.531329][ T5886] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1115.701016][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 1115.726227][ T5886] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1115.740183][ T9327] usb 10-1: 0:2 : does not exist [ 1115.758144][ T5886] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1115.775532][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.782260][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.806826][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.823170][ T9327] usb 10-1: USB disconnect, device number 5 [ 1115.829320][ T5886] usb 4-1: Product: syz [ 1115.835352][ T5886] usb 4-1: Manufacturer: syz [ 1115.841760][ T5886] usb 4-1: SerialNumber: syz [ 1115.867685][ T5886] usb 4-1: config 0 descriptor?? [ 1115.904572][T11573] udevd[11573]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1116.290986][ T5886] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1117.005781][ T5886] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1117.113069][ T5886] usb 4-1: USB disconnect, device number 80 [ 1117.154697][T15527] FAULT_INJECTION: forcing a failure. [ 1117.154697][T15527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1117.168105][T15527] CPU: 0 UID: 0 PID: 15527 Comm: syz.6.2735 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 1117.168134][T15527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1117.168147][T15527] Call Trace: [ 1117.168157][T15527] [ 1117.168166][T15527] dump_stack_lvl+0x189/0x250 [ 1117.168200][T15527] ? __pfx____ratelimit+0x10/0x10 [ 1117.168230][T15527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1117.168259][T15527] ? __pfx__printk+0x10/0x10 [ 1117.168279][T15527] ? __might_fault+0xb0/0x130 [ 1117.168316][T15527] should_fail_ex+0x414/0x560 [ 1117.168352][T15527] _copy_from_user+0x2d/0xb0 [ 1117.168379][T15527] do_ip_vs_set_ctl+0x2d3/0xa60 [ 1117.168413][T15527] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1117.168438][T15527] ? rcu_is_watching+0x15/0xb0 [ 1117.168492][T15527] ? lockdep_hardirqs_on+0x9c/0x150 [ 1117.168532][T15527] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1117.168575][T15527] nf_setsockopt+0x26c/0x290 [ 1117.168603][T15527] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1117.168636][T15527] do_sock_setsockopt+0x257/0x3e0 [ 1117.168663][T15527] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1117.168691][T15527] ? __fget_files+0x2a/0x420 [ 1117.168728][T15527] __x64_sys_setsockopt+0x18b/0x220 [ 1117.168759][T15527] do_syscall_64+0xfa/0x3b0 [ 1117.168789][T15527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.168809][T15527] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1117.168829][T15527] ? clear_bhb_loop+0x60/0xb0 [ 1117.168872][T15527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.168892][T15527] RIP: 0033:0x7f6a7218e969 [ 1117.168911][T15527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1117.168930][T15527] RSP: 002b:00007f6a72f54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1117.168952][T15527] RAX: ffffffffffffffda RBX: 00007f6a723b6080 RCX: 00007f6a7218e969 [ 1117.168968][T15527] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000005 [ 1117.168981][T15527] RBP: 00007f6a72f54090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.168994][T15527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.169006][T15527] R13: 0000000000000000 R14: 00007f6a723b6080 R15: 00007fffcf666258 [ 1117.169038][T15527] [ 1117.391014][ C0] vkms_vblank_simulate: vblank timer overrun [ 1118.070060][ T9327] IPVS: starting estimator thread 0... [ 1118.230320][T15538] IPVS: using max 32 ests per chain, 76800 per kthread [ 1119.090770][ T5886] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1119.362904][ T5886] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1119.379604][ T5886] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1119.530764][ T5886] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1119.540581][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.193516][ T5886] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1120.305875][ T5886] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input39 [ 1120.358264][ T5886] input: failed to attach handler kbd to device input39, error: -5 [ 1120.400480][ T5886] usb 4-1: USB disconnect, device number 81 [ 1122.001499][T15574] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2748'. [ 1122.275425][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2747'. [ 1122.791638][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2749'. [ 1127.940760][ T5928] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1128.140965][ T5928] usb 10-1: device descriptor read/64, error -71 [ 1129.391079][ T5928] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1129.550857][T15661] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2770'. [ 1130.060743][ T5928] usb 10-1: device descriptor read/64, error -71 [ 1130.245778][ T5928] usb usb10-port1: attempt power cycle [ 1133.319067][T15701] FAULT_INJECTION: forcing a failure. [ 1133.319067][T15701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.417713][T15701] CPU: 1 UID: 0 PID: 15701 Comm: syz.8.2784 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 1133.417742][T15701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1133.417754][T15701] Call Trace: [ 1133.417762][T15701] [ 1133.417771][T15701] dump_stack_lvl+0x189/0x250 [ 1133.417802][T15701] ? __pfx____ratelimit+0x10/0x10 [ 1133.417828][T15701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1133.417854][T15701] ? __pfx__printk+0x10/0x10 [ 1133.417872][T15701] ? __might_fault+0xb0/0x130 [ 1133.417905][T15701] should_fail_ex+0x414/0x560 [ 1133.417957][T15701] _copy_from_user+0x2d/0xb0 [ 1133.417982][T15701] ___sys_sendmsg+0x158/0x2a0 [ 1133.418009][T15701] ? __pfx____sys_sendmsg+0x10/0x10 [ 1133.418073][T15701] ? __fget_files+0x2a/0x420 [ 1133.418100][T15701] ? __fget_files+0x3a0/0x420 [ 1133.418137][T15701] __x64_sys_sendmsg+0x19b/0x260 [ 1133.418164][T15701] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1133.418197][T15701] ? __pfx_ksys_write+0x10/0x10 [ 1133.418218][T15701] ? rcu_is_watching+0x15/0xb0 [ 1133.418251][T15701] ? do_syscall_64+0xbe/0x3b0 [ 1133.418283][T15701] do_syscall_64+0xfa/0x3b0 [ 1133.418310][T15701] ? lockdep_hardirqs_on+0x9c/0x150 [ 1133.418337][T15701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.418356][T15701] ? clear_bhb_loop+0x60/0xb0 [ 1133.418379][T15701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.418398][T15701] RIP: 0033:0x7f17b2b8e969 [ 1133.418415][T15701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1133.418432][T15701] RSP: 002b:00007f17b3ad5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1133.418453][T15701] RAX: ffffffffffffffda RBX: 00007f17b2db5fa0 RCX: 00007f17b2b8e969 [ 1133.418467][T15701] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1133.418480][T15701] RBP: 00007f17b3ad5090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.418492][T15701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.418503][T15701] R13: 0000000000000000 R14: 00007f17b2db5fa0 R15: 00007fff8de25338 [ 1133.418532][T15701] [ 1134.347823][T15710] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2788'. [ 1134.811479][T15723] netlink: 1284 bytes leftover after parsing attributes in process `syz.7.2794'. [ 1134.886987][T15725] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1137.533226][ T9327] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1137.547961][T15750] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2800'. [ 1137.750397][ T9327] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.803849][ T9327] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1137.847894][ T9327] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1137.896603][ T9327] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1137.906182][ T9327] usb 9-1: SerialNumber: syz [ 1138.370958][ T9327] usb 9-1: 0:2 : does not exist [ 1138.391534][ T9327] usb 9-1: USB disconnect, device number 19 [ 1138.429236][T11573] udevd[11573]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1138.518367][T15771] 9pnet_virtio: no channels available for device syz [ 1138.530901][ T5887] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 1138.805491][ T5887] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1138.817222][ T5887] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1138.827729][ T5887] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1139.454915][ T5887] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.194126][ T5887] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 1141.369052][ T5887] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input40 [ 1141.477811][ T5887] input: failed to attach handler kbd to device input40, error: -5 [ 1141.541957][ T5887] usb 7-1: USB disconnect, device number 32 [ 1141.552963][T15800] x_tables: duplicate entry at hook 2 [ 1141.572129][T15800] 9pnet_fd: Insufficient options for proto=fd [ 1145.374160][T15844] : entered promiscuous mode [ 1146.880687][ T9504] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 1147.241537][ T9504] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1147.254114][ T9504] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1147.264901][ T9504] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1148.003204][ T9504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.234169][ T9504] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1148.269255][ T9504] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input41 [ 1148.476936][ T9504] input: failed to attach handler kbd to device input41, error: -5 [ 1148.496205][ T9504] usb 4-1: USB disconnect, device number 82 [ 1149.564522][T15890] FAULT_INJECTION: forcing a failure. [ 1149.564522][T15890] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.591149][T15890] CPU: 0 UID: 0 PID: 15890 Comm: syz.8.2845 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 1149.591177][T15890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1149.591189][T15890] Call Trace: [ 1149.591197][T15890] [ 1149.591206][T15890] dump_stack_lvl+0x189/0x250 [ 1149.591239][T15890] ? __pfx____ratelimit+0x10/0x10 [ 1149.591267][T15890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1149.591294][T15890] ? __pfx__printk+0x10/0x10 [ 1149.591316][T15890] ? __pfx___might_resched+0x10/0x10 [ 1149.591349][T15890] ? fs_reclaim_acquire+0x7d/0x100 [ 1149.591382][T15890] should_fail_ex+0x414/0x560 [ 1149.591415][T15890] should_failslab+0xa8/0x100 [ 1149.591442][T15890] __kmalloc_noprof+0xcb/0x4f0 [ 1149.591465][T15890] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1149.591491][T15890] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1149.591525][T15890] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1149.591560][T15890] genl_family_rcv_msg_doit+0xb8/0x300 [ 1149.591594][T15890] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1149.591623][T15890] ? rcu_is_watching+0x15/0xb0 [ 1149.591651][T15890] ? cap_capable+0x11f/0x460 [ 1149.591680][T15890] ? safesetid_security_capable+0xa9/0x1a0 [ 1149.591752][T15890] ? bpf_lsm_capable+0x9/0x20 [ 1149.591770][T15890] ? security_capable+0x7e/0x2e0 [ 1149.591800][T15890] genl_rcv_msg+0x60e/0x790 [ 1149.591835][T15890] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1149.591861][T15890] ? ref_tracker_free+0x63a/0x7d0 [ 1149.591879][T15890] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1149.591904][T15890] ? __pfx_nl80211_set_bss+0x10/0x10 [ 1149.591932][T15890] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1149.591959][T15890] ? __pfx_ref_tracker_free+0x10/0x10 [ 1149.591991][T15890] netlink_rcv_skb+0x208/0x470 [ 1149.592015][T15890] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1149.592045][T15890] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1149.592086][T15890] ? down_read+0x1ad/0x2e0 [ 1149.592109][T15890] genl_rcv+0x28/0x40 [ 1149.592135][T15890] netlink_unicast+0x75b/0x8d0 [ 1149.592168][T15890] netlink_sendmsg+0x805/0xb30 [ 1149.592201][T15890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1149.592234][T15890] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1149.592259][T15890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1149.592283][T15890] __sock_sendmsg+0x219/0x270 [ 1149.592317][T15890] ____sys_sendmsg+0x505/0x830 [ 1149.592348][T15890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1149.592383][T15890] ? import_iovec+0x74/0xa0 [ 1149.592413][T15890] ___sys_sendmsg+0x21f/0x2a0 [ 1149.592440][T15890] ? __pfx____sys_sendmsg+0x10/0x10 [ 1149.592504][T15890] ? __fget_files+0x2a/0x420 [ 1149.592531][T15890] ? __fget_files+0x3a0/0x420 [ 1149.592571][T15890] __x64_sys_sendmsg+0x19b/0x260 [ 1149.592599][T15890] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1149.592635][T15890] ? __pfx_ksys_write+0x10/0x10 [ 1149.592658][T15890] ? rcu_is_watching+0x15/0xb0 [ 1149.592693][T15890] ? do_syscall_64+0xbe/0x3b0 [ 1149.592736][T15890] do_syscall_64+0xfa/0x3b0 [ 1149.592765][T15890] ? lockdep_hardirqs_on+0x9c/0x150 [ 1149.592793][T15890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.592813][T15890] ? clear_bhb_loop+0x60/0xb0 [ 1149.592839][T15890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.592858][T15890] RIP: 0033:0x7f17b2b8e969 [ 1149.592877][T15890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1149.592894][T15890] RSP: 002b:00007f17b3ad5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1149.592917][T15890] RAX: ffffffffffffffda RBX: 00007f17b2db5fa0 RCX: 00007f17b2b8e969 [ 1149.592932][T15890] RDX: 0000000000000040 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1149.592945][T15890] RBP: 00007f17b3ad5090 R08: 0000000000000000 R09: 0000000000000000 [ 1149.592959][T15890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1149.592971][T15890] R13: 0000000000000000 R14: 00007f17b2db5fa0 R15: 00007fff8de25338 [ 1149.593003][T15890] [ 1150.658611][T15908] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2851'. [ 1157.268950][T15980] FAULT_INJECTION: forcing a failure. [ 1157.268950][T15980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1157.341020][T15980] CPU: 0 UID: 0 PID: 15980 Comm: syz.8.2872 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 1157.341043][T15980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1157.341053][T15980] Call Trace: [ 1157.341059][T15980] [ 1157.341065][T15980] dump_stack_lvl+0x189/0x250 [ 1157.341093][T15980] ? __pfx____ratelimit+0x10/0x10 [ 1157.341115][T15980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1157.341138][T15980] ? __pfx__printk+0x10/0x10 [ 1157.341153][T15980] ? __might_fault+0xb0/0x130 [ 1157.341180][T15980] should_fail_ex+0x414/0x560 [ 1157.341207][T15980] _copy_from_iter+0x1db/0x16f0 [ 1157.341227][T15980] ? rcu_is_watching+0x15/0xb0 [ 1157.341261][T15980] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1157.341280][T15980] ? __pfx__copy_from_iter+0x10/0x10 [ 1157.341296][T15980] ? __build_skb_around+0x257/0x3e0 [ 1157.341338][T15980] ? netlink_sendmsg+0x642/0xb30 [ 1157.341367][T15980] ? skb_put+0x11b/0x210 [ 1157.341385][T15980] netlink_sendmsg+0x6b2/0xb30 [ 1157.341406][T15980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1157.341427][T15980] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1157.341445][T15980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1157.341461][T15980] __sock_sendmsg+0x219/0x270 [ 1157.341483][T15980] ____sys_sendmsg+0x505/0x830 [ 1157.341503][T15980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1157.341526][T15980] ? import_iovec+0x74/0xa0 [ 1157.341545][T15980] ___sys_sendmsg+0x21f/0x2a0 [ 1157.341563][T15980] ? __pfx____sys_sendmsg+0x10/0x10 [ 1157.341603][T15980] ? __fget_files+0x2a/0x420 [ 1157.341622][T15980] ? __fget_files+0x3a0/0x420 [ 1157.341647][T15980] __x64_sys_sendmsg+0x19b/0x260 [ 1157.341665][T15980] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1157.341688][T15980] ? __pfx_ksys_write+0x10/0x10 [ 1157.341703][T15980] ? rcu_is_watching+0x15/0xb0 [ 1157.341726][T15980] ? do_syscall_64+0xbe/0x3b0 [ 1157.341749][T15980] do_syscall_64+0xfa/0x3b0 [ 1157.341768][T15980] ? lockdep_hardirqs_on+0x9c/0x150 [ 1157.341787][T15980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.341800][T15980] ? clear_bhb_loop+0x60/0xb0 [ 1157.341817][T15980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.341830][T15980] RIP: 0033:0x7f17b2b8e969 [ 1157.341843][T15980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1157.341855][T15980] RSP: 002b:00007f17b3ad5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1157.341869][T15980] RAX: ffffffffffffffda RBX: 00007f17b2db5fa0 RCX: 00007f17b2b8e969 [ 1157.341880][T15980] RDX: 0000000000040000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1157.341889][T15980] RBP: 00007f17b3ad5090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.341898][T15980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.341906][T15980] R13: 0000000000000000 R14: 00007f17b2db5fa0 R15: 00007fff8de25338 [ 1157.341927][T15980] [ 1159.687720][ T9504] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1159.859729][ T9504] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1159.996664][ T9504] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1160.218583][ T9504] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1160.228884][ T9504] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.380086][T16019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2885'. [ 1160.549330][ T9504] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 1160.711587][ T9504] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input42 [ 1160.805897][ T9504] input: failed to attach handler kbd to device input42, error: -5 [ 1160.878458][ T9504] usb 10-1: USB disconnect, device number 9 [ 1162.440710][ T5886] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1162.621430][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 1162.649995][ T5886] usb 4-1: config 2 has an invalid interface number: 142 but max is 0 [ 1162.664107][ T5886] usb 4-1: config 2 has no interface number 0 [ 1162.680871][ T5886] usb 4-1: config 2 interface 142 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 1162.712316][ T5886] usb 4-1: config 2 interface 142 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1162.751060][ T5886] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 1162.771971][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.786004][ T5886] usb 4-1: Product: syz [ 1162.790211][ T5886] usb 4-1: Manufacturer: syz [ 1162.796058][ T5886] usb 4-1: SerialNumber: syz [ 1163.158874][T16032] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1163.218251][ T5886] usb 4-1: NFC: intf ffff888026317000 id ffffffff8eb41680 [ 1164.040754][T12354] Bluetooth: hci0: command 0x0405 tx timeout [ 1164.081730][T16043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.115960][T16043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.913996][ T5887] usb 4-1: USB disconnect, device number 83 [ 1167.270803][ T5886] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1167.560727][ T5886] usb 7-1: Using ep0 maxpacket: 16 [ 1167.569456][ T5886] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1167.935341][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.943610][ T5886] usb 7-1: Product: syz [ 1167.947895][ T5886] usb 7-1: Manufacturer: syz [ 1167.953767][ T5886] usb 7-1: SerialNumber: syz [ 1167.986339][ T5887] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1167.997661][ T5886] usb 7-1: config 0 descriptor?? [ 1168.009376][ T5886] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1168.019656][ T5886] usb 7-1: Detected FT-X [ 1168.390108][ T5887] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1168.582884][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.653903][ T5887] usb 9-1: Product: syz [ 1168.658237][ T5887] usb 9-1: Manufacturer: syz [ 1168.663426][ T5887] usb 9-1: SerialNumber: syz [ 1168.682195][ T5887] usb 9-1: config 0 descriptor?? [ 1168.694251][ T5887] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1169.829587][ T5887] gspca_sunplus: reg_r err -110 [ 1169.836945][ T5887] sunplus 9-1:0.0: probe with driver sunplus failed with error -110 [ 1170.000837][ T5886] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1170.009921][ T5886] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1170.028615][ T5886] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 1174.168370][ T5886] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1174.187011][ T5886] usb 7-1: USB disconnect, device number 33 [ 1174.204652][ T5886] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1174.217621][ T5886] ftdi_sio 7-1:0.0: device disconnected [ 1174.775745][ T9327] usb 9-1: USB disconnect, device number 20 [ 1175.525740][T16111] overlayfs: failed to resolve './file1': -2 [ 1175.793358][ T5887] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1176.060646][ T5887] usb 7-1: Using ep0 maxpacket: 16 [ 1176.078639][ T5887] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1176.764443][ T5887] usb 7-1: config 3 has an invalid interface number: 7 but max is 1 [ 1176.772825][ T5887] usb 7-1: config 3 has no interface number 0 [ 1176.793929][ T5887] usb 7-1: config 3 interface 1 altsetting 6 endpoint 0xE has invalid wMaxPacketSize 0 [ 1176.804115][ T5887] usb 7-1: config 3 interface 7 has no altsetting 0 [ 1176.810960][ T5887] usb 7-1: config 3 interface 1 has no altsetting 0 [ 1176.820292][ T5887] usb 7-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=e3.e2 [ 1176.850695][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.858766][ T5887] usb 7-1: Product: syz [ 1176.896433][ T5887] usb 7-1: Manufacturer: syz [ 1176.905060][ T5887] usb 7-1: SerialNumber: syz [ 1176.910911][T16128] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.933104][T16126] can0: slcan on ttyS3. [ 1177.031530][T16126] can0 (unregistered): slcan off ttyS3. [ 1177.143733][ T5887] xr_serial 7-1:3.7: xr_serial converter detected [ 1177.205839][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.213373][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.302534][ T5887] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1177.407035][ T5887] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1177.782588][ T5887] usb 7-1: USB disconnect, device number 34 [ 1178.052848][ T5887] xr_serial 7-1:3.7: device disconnected [ 1178.770806][ T5887] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1178.920843][ T5887] usb 10-1: device descriptor read/64, error -71 [ 1179.174295][ T9504] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1179.190838][ T5887] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1179.528218][ T9504] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1179.539219][ T9504] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1179.552770][ T9504] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1179.562061][ T5887] usb 10-1: device descriptor read/64, error -71 [ 1179.568507][ T9504] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1179.583083][ T9504] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1179.612010][ T9504] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1179.625491][ T9504] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1179.640603][ T9504] usb 9-1: Product: syz [ 1179.644842][ T9504] usb 9-1: Manufacturer: syz [ 1179.658415][ T9504] cdc_wdm 9-1:1.0: skipping garbage [ 1179.671074][ T5887] usb usb10-port1: attempt power cycle [ 1179.679208][ T9504] cdc_wdm 9-1:1.0: skipping garbage [ 1179.694671][ T9504] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1179.710762][ T9504] cdc_wdm 9-1:1.0: Unknown control protocol [ 1179.902298][ T5886] usb 9-1: USB disconnect, device number 21 [ 1180.110759][ T5887] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1180.261539][ T5887] usb 10-1: device descriptor read/8, error -71 [ 1180.418379][T16169] FAULT_INJECTION: forcing a failure. [ 1180.418379][T16169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.467984][T16169] CPU: 1 UID: 0 PID: 16169 Comm: syz.6.2931 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 1180.468018][T16169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1180.468031][T16169] Call Trace: [ 1180.468039][T16169] [ 1180.468048][T16169] dump_stack_lvl+0x189/0x250 [ 1180.468080][T16169] ? __pfx____ratelimit+0x10/0x10 [ 1180.468108][T16169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1180.468135][T16169] ? __pfx__printk+0x10/0x10 [ 1180.468154][T16169] ? __might_fault+0xb0/0x130 [ 1180.468190][T16169] should_fail_ex+0x414/0x560 [ 1180.468223][T16169] _copy_from_user+0x2d/0xb0 [ 1180.468248][T16169] video_usercopy+0x354/0x14f0 [ 1180.468298][T16169] ? smk_tskacc+0x2fc/0x370 [ 1180.468326][T16169] ? __pfx___video_do_ioctl+0x10/0x10 [ 1180.468349][T16169] ? __pfx_video_usercopy+0x10/0x10 [ 1180.468369][T16169] ? smack_file_ioctl+0x2a9/0x340 [ 1180.468414][T16169] ? __fget_files+0x2a/0x420 [ 1180.468442][T16169] ? __fget_files+0x3a0/0x420 [ 1180.468473][T16169] v4l2_ioctl+0x18a/0x1e0 [ 1180.468496][T16169] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1180.468517][T16169] __se_sys_ioctl+0xfc/0x170 [ 1180.468545][T16169] do_syscall_64+0xfa/0x3b0 [ 1180.468574][T16169] ? lockdep_hardirqs_on+0x9c/0x150 [ 1180.468602][T16169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.468623][T16169] ? clear_bhb_loop+0x60/0xb0 [ 1180.468648][T16169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.468667][T16169] RIP: 0033:0x7f6a7218e969 [ 1180.468686][T16169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1180.468703][T16169] RSP: 002b:00007f6a72f75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1180.468725][T16169] RAX: ffffffffffffffda RBX: 00007f6a723b5fa0 RCX: 00007f6a7218e969 [ 1180.468740][T16169] RDX: 00002000000001c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 1180.468753][T16169] RBP: 00007f6a72f75090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.468766][T16169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.468778][T16169] R13: 0000000000000000 R14: 00007f6a723b5fa0 R15: 00007fffcf666258 [ 1180.468810][T16169] [ 1180.826845][ T5887] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1180.855920][ T5887] usb 10-1: device descriptor read/8, error -71 [ 1180.981033][ T5887] usb usb10-port1: unable to enumerate USB device [ 1181.009926][T16184] FAULT_INJECTION: forcing a failure. [ 1181.009926][T16184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1181.024090][T16184] CPU: 0 UID: 0 PID: 16184 Comm: syz.6.2936 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 1181.024114][T16184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1181.024126][T16184] Call Trace: [ 1181.024134][T16184] [ 1181.024142][T16184] dump_stack_lvl+0x189/0x250 [ 1181.024172][T16184] ? __pfx____ratelimit+0x10/0x10 [ 1181.024199][T16184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1181.024256][T16184] ? __pfx__printk+0x10/0x10 [ 1181.024289][T16184] should_fail_ex+0x414/0x560 [ 1181.024324][T16184] _copy_to_user+0x31/0xb0 [ 1181.024351][T16184] simple_read_from_buffer+0xe1/0x170 [ 1181.024381][T16184] proc_fail_nth_read+0x1df/0x250 [ 1181.024414][T16184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1181.024466][T16184] ? rw_verify_area+0x258/0x650 [ 1181.024494][T16184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1181.024529][T16184] vfs_read+0x200/0x980 [ 1181.024560][T16184] ? __pfx___mutex_lock+0x10/0x10 [ 1181.024593][T16184] ? __pfx_vfs_read+0x10/0x10 [ 1181.024620][T16184] ? __fget_files+0x2a/0x420 [ 1181.024655][T16184] ? __fget_files+0x3a0/0x420 [ 1181.024683][T16184] ? __fget_files+0x2a/0x420 [ 1181.024722][T16184] ksys_read+0x145/0x250 [ 1181.024751][T16184] ? __pfx_ksys_read+0x10/0x10 [ 1181.024783][T16184] ? do_syscall_64+0xbe/0x3b0 [ 1181.024819][T16184] do_syscall_64+0xfa/0x3b0 [ 1181.024850][T16184] ? lockdep_hardirqs_on+0x9c/0x150 [ 1181.024880][T16184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.024902][T16184] ? clear_bhb_loop+0x60/0xb0 [ 1181.024928][T16184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.024949][T16184] RIP: 0033:0x7f6a7218d37c [ 1181.024969][T16184] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1181.024988][T16184] RSP: 002b:00007f6a72f54030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1181.025011][T16184] RAX: ffffffffffffffda RBX: 00007f6a723b6080 RCX: 00007f6a7218d37c [ 1181.025027][T16184] RDX: 000000000000000f RSI: 00007f6a72f540a0 RDI: 0000000000000007 [ 1181.025041][T16184] RBP: 00007f6a72f54090 R08: 0000000000000000 R09: 0000000000000000 [ 1181.025055][T16184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1181.025068][T16184] R13: 0000000000000000 R14: 00007f6a723b6080 R15: 00007fffcf666258 [ 1181.025102][T16184] [ 1181.659198][T16188] binder: 16187:16188 ioctl c0306201 200000000540 returned -22 [ 1182.979819][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.096955][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.440732][ T9504] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1183.620848][ T9504] usb 10-1: Using ep0 maxpacket: 8 [ 1183.693535][ T9504] usb 10-1: config index 0 descriptor too short (expected 57199, got 36) [ 1183.801355][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.837556][ T9504] usb 10-1: config 146 has too many interfaces: 112, using maximum allowed: 32 [ 1183.919174][ T9504] usb 10-1: config 146 has an invalid descriptor of length 9, skipping remainder of the config [ 1184.048760][ T9504] usb 10-1: config 146 has 0 interfaces, different from the descriptor's value: 112 [ 1184.061216][ T9504] usb 10-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1184.070392][ T9504] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.071809][T12354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1184.087025][ T9504] usb 10-1: Product: syz [ 1184.091583][ T9504] usb 10-1: Manufacturer: syz [ 1184.096641][ T9504] usb 10-1: SerialNumber: syz [ 1184.098296][T12354] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1184.125289][T12354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1184.135935][T12354] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1184.148339][T12354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1184.204037][ T49] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.412472][ T9504] usb 10-1: USB disconnect, device number 14 [ 1185.129514][ T49] bridge_slave_1: left allmulticast mode [ 1185.135426][ T49] bridge_slave_1: left promiscuous mode [ 1185.141435][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.153693][ T49] bridge_slave_0: left allmulticast mode [ 1185.162211][ T49] bridge_slave_0: left promiscuous mode [ 1185.169804][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.993052][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1186.032930][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1186.092035][ T49] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1186.125633][ T49] bond0 (unregistering): Released all slaves [ 1186.242448][ T51] Bluetooth: hci1: command tx timeout [ 1186.372741][ T49] bond1 (unregistering): Released all slaves [ 1186.855921][T16202] chnl_net:caif_netlink_parms(): no params data found [ 1188.048999][T16202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.066681][T16202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.104556][T16202] bridge_slave_0: entered allmulticast mode [ 1188.125449][T16202] bridge_slave_0: entered promiscuous mode [ 1188.140160][T16202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.159618][T16202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.193395][T16202] bridge_slave_1: entered allmulticast mode [ 1188.214392][T16202] bridge_slave_1: entered promiscuous mode [ 1188.334010][ T51] Bluetooth: hci1: command tx timeout [ 1188.551675][T16202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.588551][T16202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.713936][ T49] hsr_slave_0: left promiscuous mode [ 1188.720074][ T49] hsr_slave_1: left promiscuous mode [ 1189.893992][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1190.284956][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1190.410783][ T51] Bluetooth: hci1: command tx timeout [ 1191.381394][T16202] team0: Port device team_slave_0 added [ 1191.404824][T16202] team0: Port device team_slave_1 added [ 1191.858442][T16202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.866501][T16202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.892413][ C0] vkms_vblank_simulate: vblank timer overrun [ 1191.918388][T16202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.950356][T16202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.978013][T16202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1192.003994][ C0] vkms_vblank_simulate: vblank timer overrun [ 1192.030726][T16202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1192.491242][ T51] Bluetooth: hci1: command tx timeout [ 1193.006640][T16202] hsr_slave_0: entered promiscuous mode [ 1193.031705][T16202] hsr_slave_1: entered promiscuous mode [ 1193.054987][T16202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1193.073228][T16202] Cannot create hsr debugfs directory [ 1193.924759][ T49] IPVS: stop unused estimator thread 0... [ 1194.949652][T16375] netlink: 'syz.8.3007': attribute type 4 has an invalid length. [ 1300.120554][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1300.127547][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16375/1:b..l P16381/1:b..l [ 1300.137297][ C1] rcu: (detected by 1, t=10502 jiffies, g=84121, q=238 ncpus=2) [ 1300.145038][ C1] task:modprobe state:R running task stack:24104 pid:16381 tgid:16381 ppid:12883 task_flags:0x400000 flags:0x00004000 [ 1300.159393][ C1] Call Trace: [ 1300.162675][ C1] [ 1300.165611][ C1] __schedule+0x16a2/0x4cb0 [ 1300.170146][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 1300.175439][ C1] ? __pfx___schedule+0x10/0x10 [ 1300.180316][ C1] ? irqentry_exit+0x74/0x90 [ 1300.184937][ C1] preempt_schedule_irq+0xb5/0x150 [ 1300.190053][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1300.195781][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1300.201596][ C1] irqentry_exit+0x6f/0x90 [ 1300.206014][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1300.211998][ C1] RIP: 0010:unwind_next_frame+0x223/0x2390 [ 1300.217818][ C1] Code: 86 65 18 00 00 44 89 f8 4c 8d 2c 85 f4 bb d9 90 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 48 89 eb 0f 85 1c 1c 00 00 45 8b 6d 00 <44> 89 f8 ff c0 48 8d 2c 85 f4 bb d9 90 48 89 e8 48 c1 e8 03 0f b6 [ 1300.237424][ C1] RSP: 0018:ffffc9000b866ef8 EFLAGS: 00000246 [ 1300.243494][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 3771518cd2b55a00 [ 1300.251474][ C1] RDX: 00000000000a6144 RSI: ffffffff8be1a060 RDI: ffffffff8be1a020 [ 1300.259438][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff81728e15 [ 1300.267403][ C1] R10: ffffc9000b867018 R11: ffffffff81ace490 R12: ffffffff8216acb0 [ 1300.275370][ C1] R13: 00000000000387d8 R14: ffffc9000b866fc8 R15: 00000000000116ac [ 1300.283341][ C1] ? kmem_cache_alloc_noprof+0x1c0/0x3c0 [ 1300.288971][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1300.295124][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1300.300251][ C1] ? unwind_next_frame+0xd4/0x2390 [ 1300.305378][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1300.310517][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1300.316171][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1300.322340][ C1] arch_stack_walk+0x11c/0x150 [ 1300.327122][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1300.332765][ C1] stack_trace_save+0x9c/0xe0 [ 1300.337454][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1300.342837][ C1] kasan_save_track+0x3e/0x80 [ 1300.347522][ C1] ? kasan_save_track+0x3e/0x80 [ 1300.352374][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1300.357396][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1300.363068][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1300.367930][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1300.373393][ C1] ? mas_alloc_nodes+0x2e9/0x8e0 [ 1300.378346][ C1] mas_alloc_nodes+0x2e9/0x8e0 [ 1300.383120][ C1] mas_preallocate+0x39e/0x6b0 [ 1300.387888][ C1] ? __pfx_mas_preallocate+0x10/0x10 [ 1300.393180][ C1] ? __asan_memset+0x22/0x50 [ 1300.397777][ C1] commit_merge+0x1f1/0x6e0 [ 1300.402283][ C1] ? __vma_enter_locked+0x1f4/0x380 [ 1300.407509][ C1] ? __pfx_commit_merge+0x10/0x10 [ 1300.412539][ C1] ? vma_expand+0x1e7/0x7d0 [ 1300.417047][ C1] vma_expand+0x41c/0x7d0 [ 1300.421378][ C1] vma_merge_new_range+0x5dc/0x7a0 [ 1300.426501][ C1] mmap_region+0xc4f/0x1f30 [ 1300.431017][ C1] ? __pfx_mmap_region+0x10/0x10 [ 1300.435972][ C1] ? __lock_acquire+0xab9/0xd20 [ 1300.440834][ C1] ? page_table_check_set+0x18d/0x730 [ 1300.446255][ C1] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 1300.452862][ C1] ? bpf_lsm_mmap_addr+0x9/0x20 [ 1300.457719][ C1] ? security_mmap_addr+0x71/0x270 [ 1300.462832][ C1] do_mmap+0xc45/0x10d0 [ 1300.466998][ C1] ? __pfx_do_mmap+0x10/0x10 [ 1300.471582][ C1] ? down_write_killable+0x178/0x230 [ 1300.476867][ C1] ? count_memcg_event_mm+0x21/0x260 [ 1300.482152][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 1300.487784][ C1] vm_mmap_pgoff+0x31b/0x4c0 [ 1300.492382][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1300.497499][ C1] ? ksys_mmap_pgoff+0xf4/0x760 [ 1300.502351][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 1300.507122][ C1] do_syscall_64+0xfa/0x3b0 [ 1300.511633][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1300.516833][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.522900][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1300.527575][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.533464][ C1] RIP: 0033:0x7f80a952f242 [ 1300.537912][ C1] RSP: 002b:00007fff7d2c69a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1300.546325][ C1] RAX: ffffffffffffffda RBX: 00007f80a9205000 RCX: 00007f80a952f242 [ 1300.554296][ C1] RDX: 0000000000000003 RSI: 0000000000000088 RDI: 00007f80a9205000 [ 1300.562269][ C1] RBP: 0000000000000032 R08: 00000000ffffffff R09: 0000000000000000 [ 1300.570234][ C1] R10: 0000000000000032 R11: 0000000000000206 R12: 00007fff7d2c6a68 [ 1300.578197][ C1] R13: 00007f80a92060c0 R14: 00007fff7d2c6de0 R15: 00007f80a9205000 [ 1300.586175][ C1] [ 1300.589196][ C1] task:syz.8.3007 state:R running task stack:22416 pid:16375 tgid:16369 ppid:12353 task_flags:0x400140 flags:0x00004000 [ 1300.602690][ C1] Call Trace: [ 1300.605961][ C1] [ 1300.608892][ C1] __schedule+0x16a2/0x4cb0 [ 1300.613402][ C1] ? psi_group_change+0xbc7/0x1210 [ 1300.618526][ C1] ? psi_task_change+0xe5/0x250 [ 1300.623465][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 1300.628765][ C1] ? __pfx___schedule+0x10/0x10 [ 1300.633617][ C1] ? irqentry_exit+0x74/0x90 [ 1300.638223][ C1] preempt_schedule_irq+0xb5/0x150 [ 1300.643338][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1300.649058][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1300.654893][ C1] irqentry_exit+0x6f/0x90 [ 1300.659314][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1300.664782][ C1] RIP: 0010:queue_work_on+0x1f7/0x270 [ 1300.670162][ C1] Code: 4d 85 ff 75 16 e8 f9 92 35 00 eb 15 e8 f2 92 35 00 e8 1d d2 d2 09 4d 85 ff 74 ea e8 e3 92 35 00 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 04 2e 00 00 00 00 66 43 c7 44 2e 09 00 00 43 c6 44 2e 0b 00 [ 1300.689775][ C1] RSP: 0000:ffffc9000431e240 EFLAGS: 00000287 [ 1300.695848][ C1] RAX: ffffffff818ab6fd RBX: ffff888145b39301 RCX: 0000000000080000 [ 1300.703824][ C1] RDX: ffffc90023bf1000 RSI: 0000000000007b58 RDI: 0000000000007b59 [ 1300.711796][ C1] RBP: ffffc9000431e338 R08: ffffffff8f9fb6f7 R09: 1ffffffff1f3f6de [ 1300.719778][ C1] R10: dffffc0000000000 R11: fffffbfff1f3f6df R12: 0000000000000000 [ 1300.727744][ C1] R13: dffffc0000000000 R14: 1ffff92000863c50 R15: 0000000000000200 [ 1300.735719][ C1] ? queue_work_on+0x1ed/0x270 [ 1300.740522][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1300.745746][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 1300.750861][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1300.756256][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1300.761994][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1300.767191][ C1] nsim_fib_event_nb+0xe0d/0x1080 [ 1300.772227][ C1] notifier_call_chain+0x1b6/0x3e0 [ 1300.777345][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 1300.783164][ C1] atomic_notifier_call_chain+0xda/0x180 [ 1300.788798][ C1] call_fib_notifiers+0x31/0x60 [ 1300.793658][ C1] fib_table_delete+0xc65/0xf80 [ 1300.798511][ C1] ? trace_irq_disable+0x37/0x110 [ 1300.803548][ C1] ? __pfx_fib_table_delete+0x10/0x10 [ 1300.808923][ C1] ? fib_new_table+0x74/0x2d0 [ 1300.813600][ C1] ? fib_new_table+0x10a/0x2d0 [ 1300.818365][ C1] fib_magic+0x2e4/0x390 [ 1300.822611][ C1] ? __pfx_fib_magic+0x10/0x10 [ 1300.827381][ C1] ? trace_irq_disable+0x37/0x110 [ 1300.832400][ C1] ? preempt_schedule_irq+0xde/0x150 [ 1300.837684][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1300.843404][ C1] fib_del_ifaddr+0x28b/0x1480 [ 1300.848235][ C1] ? irqentry_exit+0x74/0x90 [ 1300.852829][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1300.858054][ C1] fib_inetaddr_event+0xbb/0x190 [ 1300.862999][ C1] notifier_call_chain+0x1b6/0x3e0 [ 1300.868127][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 1300.873862][ C1] __inet_del_ifa+0x87d/0x1040 [ 1300.878662][ C1] inetdev_event+0x632/0x15b0 [ 1300.883353][ C1] ? __pfx_inetdev_event+0x10/0x10 [ 1300.888482][ C1] notifier_call_chain+0x1b6/0x3e0 [ 1300.893610][ C1] netif_set_mtu_ext+0x438/0x620 [ 1300.898577][ C1] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 1300.904033][ C1] ? irqentry_exit+0x74/0x90 [ 1300.908622][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1300.913829][ C1] ? validate_linkmsg+0x765/0x950 [ 1300.918867][ C1] do_setlink+0x91a/0x41c0 [ 1300.923284][ C1] ? trace_sched_exit_tp+0x38/0x120 [ 1300.928494][ C1] ? __pfx_do_setlink+0x10/0x10 [ 1300.933445][ C1] ? __lock_acquire+0xab9/0xd20 [ 1300.938301][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1300.943332][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1300.949316][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1300.954541][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1300.960486][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1300.966857][ C1] ? rcu_is_watching+0x15/0xb0 [ 1300.971634][ C1] ? __mutex_lock+0xa6d/0xe80 [ 1300.976334][ C1] ? rcu_is_watching+0x15/0xb0 [ 1300.981129][ C1] ? __mutex_lock+0x51b/0xe80 [ 1300.985818][ C1] ? rtnl_setlink+0x4ea/0x900 [ 1300.990588][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1300.995626][ C1] ? ns_capable+0x8a/0xf0 [ 1300.999982][ C1] rtnl_setlink+0x604/0x900 [ 1301.004507][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1301.009714][ C1] ? __pfx_rtnl_setlink+0x10/0x10 [ 1301.014741][ C1] ? rcu_is_watching+0x15/0xb0 [ 1301.019513][ C1] ? trace_sched_exit_tp+0x38/0x120 [ 1301.024715][ C1] ? __schedule+0x16c0/0x4cb0 [ 1301.029455][ C1] ? irqentry_exit+0x74/0x90 [ 1301.034054][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1301.039255][ C1] ? __pfx_rtnl_setlink+0x10/0x10 [ 1301.044274][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1301.049374][ C1] ? rtnetlink_rcv_msg+0x7b9/0xb70 [ 1301.054518][ C1] ? __pfx_rtnl_setlink+0x10/0x10 [ 1301.059542][ C1] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1301.064476][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1301.069604][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1301.075072][ C1] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1301.082019][ C1] netlink_rcv_skb+0x208/0x470 [ 1301.086791][ C1] ? rcu_is_watching+0x15/0xb0 [ 1301.091559][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1301.097037][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1301.102368][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1301.107570][ C1] netlink_unicast+0x75b/0x8d0 [ 1301.112339][ C1] netlink_sendmsg+0x805/0xb30 [ 1301.117107][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1301.122394][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1301.127677][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1301.132960][ C1] __sock_sendmsg+0x219/0x270 [ 1301.137647][ C1] sock_write_iter+0x258/0x330 [ 1301.142466][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 1301.147764][ C1] ? trace_irq_disable+0x37/0x110 [ 1301.152808][ C1] ? preempt_schedule_irq+0xde/0x150 [ 1301.158105][ C1] do_iter_readv_writev+0x518/0x6e0 [ 1301.163310][ C1] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1301.169052][ C1] vfs_writev+0x31a/0x960 [ 1301.173404][ C1] ? __lock_acquire+0xab9/0xd20 [ 1301.178292][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 1301.183166][ C1] ? __fget_files+0x2a/0x420 [ 1301.187768][ C1] ? __fget_files+0x3a0/0x420 [ 1301.192450][ C1] ? __fget_files+0x2a/0x420 [ 1301.197054][ C1] do_writev+0x14d/0x2d0 [ 1301.201308][ C1] ? __pfx_do_writev+0x10/0x10 [ 1301.206082][ C1] ? __x64_sys_writev+0xe/0x90 [ 1301.210854][ C1] do_syscall_64+0xfa/0x3b0 [ 1301.215366][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.221435][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1301.227064][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1301.231745][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.237636][ C1] RIP: 0033:0x7f17b2b8e969 [ 1301.242082][ C1] RSP: 002b:00007f17b3a93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1301.250491][ C1] RAX: ffffffffffffffda RBX: 00007f17b2db6160 RCX: 00007f17b2b8e969 [ 1301.258453][ C1] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000008 [ 1301.266418][ C1] RBP: 00007f17b2c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1301.274383][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1301.282346][ C1] R13: 0000000000000000 R14: 00007f17b2db6160 R15: 00007fff8de25338 [ 1301.290321][ C1] [ 1301.293337][ C1] rcu: rcu_preempt kthread starved for 10602 jiffies! g84121 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1301.304702][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1301.314672][ C1] rcu: RCU grace-period kthread stack dump: [ 1301.320558][ C1] task:rcu_preempt state:I stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1301.332479][ C1] Call Trace: [ 1301.335786][ C1] [ 1301.338723][ C1] __schedule+0x16a2/0x4cb0 [ 1301.343243][ C1] ? preempt_schedule_common+0x83/0xd0 [ 1301.348744][ C1] ? __pfx___schedule+0x10/0x10 [ 1301.353606][ C1] ? __free_object+0x4d4/0x6c0 [ 1301.358397][ C1] ? preempt_schedule+0xae/0xc0 [ 1301.363262][ C1] preempt_schedule_common+0x83/0xd0 [ 1301.368554][ C1] preempt_schedule+0xae/0xc0 [ 1301.373231][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 1301.378621][ C1] preempt_schedule_thunk+0x16/0x30 [ 1301.383835][ C1] _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1301.389562][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1301.395893][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1301.401191][ C1] prepare_to_swait_event+0x341/0x380 [ 1301.406568][ C1] rcu_gp_fqs_loop+0x2cc/0x1540 [ 1301.411425][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1301.416618][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1301.422807][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1301.428121][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1301.434012][ C1] ? finish_swait+0xcd/0x1f0 [ 1301.438614][ C1] rcu_gp_kthread+0x99/0x390 [ 1301.443204][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1301.448400][ C1] ? __kthread_parkme+0x7b/0x200 [ 1301.453340][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1301.458392][ C1] kthread+0x711/0x8a0 [ 1301.462494][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1301.467704][ C1] ? __pfx_kthread+0x10/0x10 [ 1301.472307][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1301.477511][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1301.482724][ C1] ? __pfx_kthread+0x10/0x10 [ 1301.487328][ C1] ret_from_fork+0x3f9/0x770 [ 1301.491927][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1301.497058][ C1] ? __switch_to_asm+0x39/0x70 [ 1301.501832][ C1] ? __switch_to_asm+0x33/0x70 [ 1301.506590][ C1] ? __pfx_kthread+0x10/0x10 [ 1301.511175][ C1] ret_from_fork_asm+0x1a/0x30 [ 1301.515943][ C1] [ 1301.518955][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1301.525330][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1301.530556][ C0] NMI backtrace for cpu 0 [ 1301.530570][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 1301.530596][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1301.530610][ C0] RIP: 0010:queued_write_lock_slowpath+0x120/0x260 [ 1301.530637][ C0] Code: c1 f6 f0 81 0b 00 01 00 00 43 0f b6 04 27 84 c0 74 35 89 d9 80 e1 07 80 c1 03 38 c1 7c 29 48 89 df e8 44 71 c1 f6 eb 1f f3 90 <43> 0f b6 04 27 84 c0 74 14 89 d9 80 e1 07 80 c1 03 38 c1 7c 08 48 [ 1301.530651][ C0] RSP: 0018:ffffc900000079c0 EFLAGS: 00000206 [ 1301.530665][ C0] RAX: 0000000000000300 RBX: ffff88807b6532e8 RCX: ffffffff8b603618 [ 1301.530677][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88807b6532e8 [ 1301.530687][ C0] RBP: ffffc90000007a70 R08: ffff88807b6532eb R09: 1ffff1100f6ca65d [ 1301.530698][ C0] R10: dffffc0000000000 R11: ffffed100f6ca65e R12: dffffc0000000000 [ 1301.530709][ C0] R13: 1ffff92000000f3c R14: ffffc90000007a10 R15: 1ffff1100f6ca65d [ 1301.530721][ C0] FS: 0000000000000000(0000) GS:ffff888125c93000(0000) knlGS:0000000000000000 [ 1301.530734][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1301.530745][ C0] CR2: 0000200000001e80 CR3: 000000003136a000 CR4: 00000000003526f0 [ 1301.530759][ C0] DR0: 0000000000000007 DR1: ffffffffffffffff DR2: 0000000000000008 [ 1301.530769][ C0] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1301.530779][ C0] Call Trace: [ 1301.530787][ C0] [ 1301.530795][ C0] ? __pfx_queued_write_lock_slowpath+0x10/0x10 [ 1301.530817][ C0] ? __lock_acquire+0xab9/0xd20 [ 1301.530841][ C0] do_raw_write_lock+0x1f2/0x260 [ 1301.530856][ C0] ? wg_socket_clear_peer_endpoint_src+0x1e/0x50 [ 1301.530876][ C0] ? __pfx_do_raw_write_lock+0x10/0x10 [ 1301.530891][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1301.530912][ C0] ? wg_socket_clear_peer_endpoint_src+0x1e/0x50 [ 1301.530931][ C0] wg_socket_clear_peer_endpoint_src+0x1e/0x50 [ 1301.530948][ C0] wg_expired_retransmit_handshake+0xd4/0x2d0 [ 1301.530972][ C0] ? call_timer_fn+0x155/0x5f0 [ 1301.530996][ C0] call_timer_fn+0x17e/0x5f0 [ 1301.531015][ C0] ? __pfx_wg_expired_retransmit_handshake+0x10/0x10 [ 1301.531039][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1301.531057][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1301.531079][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1301.531098][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1301.531117][ C0] ? __pfx_wg_expired_retransmit_handshake+0x10/0x10 [ 1301.531142][ C0] __run_timer_base+0x61a/0x860 [ 1301.531159][ C0] ? ktime_get+0x3e/0x1f0 [ 1301.531179][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1301.531194][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1301.531217][ C0] run_timer_softirq+0xb7/0x180 [ 1301.531235][ C0] handle_softirqs+0x283/0x870 [ 1301.531257][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1301.531280][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1301.531303][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1301.531321][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1301.531341][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1301.531366][ C0] irq_exit_rcu+0x9/0x30 [ 1301.531385][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1301.531405][ C0] [ 1301.531411][ C0] [ 1301.531416][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1301.531433][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1301.531453][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 a5 2a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1301.531465][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 1301.531478][ C0] RAX: 463b41559438bf00 RBX: ffffffff81974cf8 RCX: 463b41559438bf00 [ 1301.531490][ C0] RDX: 0000000000000001 RSI: ffffffff8d95ca94 RDI: ffffffff8be1a080 [ 1301.531500][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 1301.531512][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8f9fb6f0 [ 1301.531523][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 1301.531535][ C0] ? do_idle+0x1e8/0x510 [ 1301.531561][ C0] default_idle+0x13/0x20 [ 1301.531574][ C0] default_idle_call+0x74/0xb0 [ 1301.531588][ C0] do_idle+0x1e8/0x510 [ 1301.531612][ C0] ? __pfx_do_idle+0x10/0x10 [ 1301.531640][ C0] cpu_startup_entry+0x44/0x60 [ 1301.531661][ C0] rest_init+0x2de/0x300 [ 1301.531676][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1301.531699][ C0] start_kernel+0x47d/0x500 [ 1301.531717][ C0] x86_64_start_reservations+0x24/0x30 [ 1301.531739][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1301.531759][ C0] common_startup_64+0x13e/0x147 [ 1301.531781][ C0]