last executing test programs: 2m57.249919868s ago: executing program 2 (id=486): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f00000006c0)=""/262, 0x0, 0x106, 0x1}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) sendmsg$nl_generic(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009602"]) 2m54.985598124s ago: executing program 2 (id=494): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x110a, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000580), 0x80400, 0x0) readv(r4, &(0x7f0000000b00)=[{&(0x7f00000005c0)=""/111, 0x6f}, {&(0x7f0000000640)=""/79, 0x4f}, {&(0x7f00000006c0)=""/205, 0xcd}, {&(0x7f00000007c0)=""/193, 0xc1}, {&(0x7f00000008c0)=""/243, 0xf3}, {&(0x7f00000009c0)=""/41, 0x29}, {&(0x7f0000000a00)=""/202, 0xca}], 0x7) read$FUSE(0xffffffffffffffff, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004280)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x2, 0x4, 0xb, 0x0, {0x1, 0xfffffffffffffffd, 0x80000000000, 0x80000000004, 0x400000000000, 0x6, 0x5, 0xfffffffd, 0x1, 0x4000, 0x7, r6, r7, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000056c0)={0x4, 0x7f5, {0x0}, {0xee00}, 0xe, 0x3}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r9, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e1100d6704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6ccb0e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f41c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111ff6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab43fa6104d5a99aa36b73ac3622ccae12252457cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd4132290b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc408a1258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a16d470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="50010000000000000000000000000000060000000000000002000000000000000600000000000000060000000000000005000000ffffffff090000000000000003000000000000000e010000000000000400000000000000000000000000000008000000000000000001000003000000040000000020000005000000", @ANYRES32, @ANYRES8=r1, @ANYBLOB="030000000700000000000000040000"], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000005700)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000005740)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r14 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r16 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r16, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r16, 0xc05064a7, &(0x7f0000000a00)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[{}, {}, {}, {}], &(0x7f0000024140)=[0x0, 0x0, 0x0], &(0x7f00000009c0), 0x42, 0x42, 0x1, 0x0, r15}) r17 = getpgrp(0xffffffffffffffff) lstat(&(0x7f0000006a40)='./file0\x00', &(0x7f0000006a80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006d80)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c40)="d80789314e7a38b16db3fafe44e9a4d70c64f1cc45d2c76683ab29caeff5d57af865b4123e1749242db0d19fd2a289b130ebc97e8f393d671c826fb0e6cfdc2443a2717e6e2034a300292d1cb56aacddce3432beeeb2cb59d4f4eab4b57f7445ba9ed81abfa561ab87009f462e73de14dffd6c05d62aec6d3cdcbac3e3e81844aff94069a5f41c391872300a9b6a94fd6be362e173399e58e1fd93632ba78b9e827da16666bc7de2f260e522a5e2129c8414fe20380f8cfcc06b4ee30c86f52a4bf1fdf2ab85bd70743d994f079fe8c52679df3c09efd2e299e484152d527869", 0xe0}, {&(0x7f0000000d40)}, {&(0x7f0000000d80)="77ef667a261baa7dc40fb024647d0adee5a4cb0e0aa6def8678980fa6825f894955435523b44105143a49639041b7be0964f61b85a5cd544d86a162f69ed741bfefbe6661ac9afae7b7867baec707f421bdbac380e05680dd0260262253143e6ef681ff046678c05", 0x68}], 0x3, &(0x7f00000020c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r4, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r4, r4]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r4, r4, r4, r0, r4, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0xd8, 0xc438}}, {{&(0x7f00000021c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000002240)="0685266301638d2170c586b5a8c75613a144a4b1da70b2b89bba30ffd4c6b79f50fe5697d7fc9960a5ebfeefd628704c3410da93a3c367dc99ddd56655b1ad7469eedc07292747066a477ca52c6669acb818087ece1143a3f4ae2adac631dd5c985f345da9094463726c1812ebb79d83206cfdc47207199c231d8c7581f9822bc123deb39d667f7453c648619237862008d1e5e7e087685ca99aad191243395d297401809a7999d98d97388f78cec3cb1c46b9068af65d42ae7b2feddcb7d188b79f382ea04e009319e8d1113779f4162dc83f4296ab49d1fe1f2c20530d2b37d81c1741f7ca480c283ebb9b352e8d1a2af1b0a74e2b35", 0xf7}, {&(0x7f0000002340)="a256aed14695ab4dd1f0d87e21a0bb85216eb2adb1649750cda808b85b9d6981bc5e180c88f359dbfb245ccdbf4b56650b175d4939ec4a4d71d0e7aa7223a463c5e521e78f068d8a97bb7c279284f66fe8ee8cf6f858cc3a58e16a2471b86495edf03693c1371e8997a64aa8a24d8a22d80c435a9ab4d75d44f1a5436f5c", 0x7e}, {&(0x7f00000023c0)="61c4bacaced2e1459fd645a751852d655db27288210f095cf8eb81c34f04e4c0acbf6b7e901eeda493adef43967271770aa2c75e6cdd15fc62d8a710d6969021494a0dab53104f4a108b1e8290daf7404c9fd81b462ed0c37d36f4bf752df760d7debfba118b65a50289e1cc792d5a62d7e3c5aa31ae901de722c9d8e8e3411b528cba286931bee42cb2c6fb78057fbfe6514a4775622120ae978c92dc0aec2c1ece0de1e1e502fb6582d9147c54e635bcde90ac068d314f8b2e2803a4732f7d30e6d857c0951031f5ddc0c8661ccbb0186488b0c2b1c3b81657d08ad6c9479d93c14eedfedef29e", 0xe8}], 0x3, &(0x7f0000002600)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, r0, r4, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r4, r4, r0, r4, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0xc0, 0x4044084}}, {{&(0x7f00000026c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002780)=[{&(0x7f0000002740)="277851cc9c9dd3a863297110cd1180fca390c4f30e4989078761", 0x1a}], 0x1, &(0x7f0000002a00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r4, r4, 0xffffffffffffffff, r0]}}, @rights={{0x38, 0x1, 0x1, [r1, r4, r4, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r0]}}], 0x98, 0x40040}}, {{&(0x7f0000002ac0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002b40)="ac92f0b5faeb22cfc6c712b17d705d78bc87445feb7e74b257df6b6c5ea04e6bcb8683489a81117a5afe1cbc8afb735cc1f3e2e59ca9f269e5f8a859ebdeb74d593e6967bb7bf43822ae245c271046dddabc351ae882832855851a77dbc5dc32a038cc187db9985670ce674ff0b94c6ba51cc105cab780963f16c69fb5c7588b8526f226", 0x84}, {&(0x7f0000002c00)="ff4a4d3401c1789a8d9344d70ac38e7447d6da863f73685511cb7fa2e71fbb6166b7e86376314e95f7156e9f7f682895bc14a445545f580a550d25ead40547adea23bbc86c4a9bfc1a6cbb1c08d40c7a2f907244b3ec0469a9a81b62369d98cf174236c3f930dfd98032896758", 0x6d}, {&(0x7f0000002c80)="03f3aba832e4c62363326540db7d234fbe098c8d2c78fcdd547f4e9207a8ffd7bfb9cd484f24a35c65b0239e7e5566abb92685bb45ea6c5f253cc869ee28410d1b", 0x41}, {&(0x7f0000002d00)="5971adda834ee535103eb526b9d3170fa3da1c2a5ee99f39d57a3a7a8e1c4c7fcb35d57b8efb8c7e13db00a20087e2b64c3749a4cd724b67ef6f853fc9a0d2b816eed5b2f488550465889e69e086d6660e62442f71f68a70b9b4bfdec66c37104909bfc2e5daa53353764f9e85d6e72aa96cc6e134fafaccf0c898cd60ea991093f6aa64a46ac55cbafbd3f7d76b922d90b099701a075ede6be3c3e4e1363ba8bf8f42f49fd8484c93916f", 0xab}, {&(0x7f0000002dc0)="f464b1f1151e95c5255081b15347dd825d297c31870cbe51102178911426944823fefc90489e0e77e63da9c23a4e63b56b540adcba21fc6d7d1d8bbcd50a49e285a2172bb362b2ed6ad99c84130d62fe04e5fe57cf4d35ee241ddee1da0ed2b4c7f853216581851c63737026e38ea152ab25b0ec70a1d7f0d95533c09d0940552efdfd3c924d371540ec6a924fb2f9e0f34f15ec86b46f54f5940170800099c7bd8e4312623173e76a3ba10e7b074fd92e3051ec1a9188af60f12c34a9f700759094375a4f9c9ca20fbf1bd6f978f40bf15f056f48f8816dc61349a960ef3e2e51e8004d42150ac02bcb26727b6a36ee3231e2", 0xf3}, {&(0x7f0000002ec0)="f540fa84fe6551c32e2f6a3c6a382acf87e3b0520f2205b678057934d7194626e915670c", 0x24}], 0x6, 0x0, 0x0, 0x24008040}}, {{&(0x7f0000002f80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003100)=[{&(0x7f0000003000)="9fa6d8d58eb88a86f29836059abc26388e1c955d0bce4fa17635532b4f99c2fd15dd305080bf567de7a222de027d5dfadc1945c8b4ea5c3ef09476a1972de0d79daccac4202683e1fe33985cc20d9d7e21a199f8fd5bb3be41d03e08d97f9b3839814cabf038bee3bc437d9cb5ab731600f0ece580581c7a79573534db67e8d10b6e16787a27e9356c66ae37134df55cc90cd5de972920239a1b78fa00d7c23d974e13166acdd5b582cfe92a8f10e768d7d6ff379d5fc59053c4db5cf00d5440942687791a7fb1b338be44172f663fb44629fa10aa2c1604", 0xd8}], 0x1, &(0x7f0000003380)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r1, r4, r0, r4, r0]}}], 0x70, 0x80}}, {{&(0x7f0000003400)=@file={0xfffffffffffffffe, './file0\x00'}, 0x6e, &(0x7f0000003500)=[{&(0x7f0000003480)="01e4cb8da15ce5d687868c98be7b0fee69547d1cf60970ef8c424af2985c5a0cf3d8168ab5eace72daf326d7291e03836b6061d72503cf82f24c9e2a7a3908721e089a669fcecc2a351f3ea62daeb80f297b71dee7e2b5448cc0fa760e96c596b2baec31dac2d8b5977ebf3692ea967ce8", 0x71}], 0x1, &(0x7f0000005780)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r4, r4, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r13}}}], 0xd0, 0x14008040}}, {{&(0x7f0000005880)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000006a00)=[{&(0x7f0000005900)="aef9", 0x2}, {&(0x7f0000005940)="e6d8fd0101660181209e24cb24d73412e612f96ffb63f99f61d84af0c5cc054720fac019ec537e81d212a1b2b18b6d23470349222bb6ada4150d70f2b527065e00edfdae0d071d6a793a6064472237d2a59c6b62e5a888eb1cc0e15866e91521ebe21074c942e98e31631ea57bba4321c4e61b9afed0265cda2b108efc539b3199697d6d073bc21f0d9c47443b1ec343f6b8c2d599434e63a64f976764bf6a11c402922e61135419e44cdc7676ea791160bcf97f50c3", 0xb6}, {&(0x7f0000005a00)="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", 0x1000}], 0x3, &(0x7f0000006b00)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r16]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, 0xee01}}}], 0x88, 0x220580c4}}, {{&(0x7f0000006bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006d40)=[{&(0x7f0000006c40)="5f7892264d5a5b7df1d1d9347c203830861f036f48b02aa5fe70874aaf6d74105186dab380652696ecffe88f4abcc89478ec6851a56759738a1a5237c456613745a149d08fe892bb3b2b40ea541968bdd3d05926cb5297bb7d26f2b2b75a01", 0x5f}, {&(0x7f0000006cc0)="ddb20eb04c4b5c420489281d0c9df186bcc9d06e2350a8f114920a6b2c16e811023634157cd04d1dd2cfd1f383b6a760f5c07a971a74ca920b08eba925272db1348dc503080025f752ad2fcdbdba", 0x4e}], 0x2, 0x0, 0x0, 0x8840}}], 0x8, 0x1) r19 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x27, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1a92, 0x0, 0x0, 0x0, 0xe5}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x10000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x29, &(0x7f0000000040)=""/41, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x1, 0x8, 0x40}, 0x10, 0x4cc6, 0xffffffffffffffff, 0x7, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000240)=[{0x1, 0x3, 0x9, 0xc}, {0x4, 0x4, 0xc, 0x3}, {0x0, 0x3, 0xa, 0x2}, {0x5, 0x1, 0x5, 0xb}, {0x0, 0x3, 0x10, 0x9}, {0x5, 0x3, 0x9, 0x7}, {0x2, 0x3, 0x7, 0x1}], 0x10, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r19}, 0x10) 2m53.956435102s ago: executing program 2 (id=496): prctl$PR_GET_CHILD_SUBREAPER(0x25) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e60, @multicast1}, 0x10) sendmmsg$inet(r3, 0x0, 0x0, 0x401eb94) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000100)={0x2}, 0x1) r6 = msgget(0x2, 0x14) msgctl$IPC_RMID(r6, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'veth1_to_bridge\x00', &(0x7f0000000480)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {}]}}) r7 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459", 0x53}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/84, 0x54}, {&(0x7f0000000280)=""/99, 0x63}], 0x2}, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = accept4$llc(r8, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000340)=0x10, 0x800) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x0, &(0x7f0000000440)=0x1, 0x4) 2m52.807691023s ago: executing program 2 (id=499): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x2, 0xf, 0x9e8f) r0 = signalfd(0xffffffffffffffff, 0x0, 0xfffffffffffffe82) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x449b}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000cc0)=""/102400, 0x19000) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x0, 0x1}, &(0x7f00000004c0)=0x20) gettid() r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x164}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="0a0001000000648a"], 0x48}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 2m49.758638803s ago: executing program 2 (id=502): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0xffffffffffffff7f) setsockopt$MRT_PIM(r0, 0x0, 0xd0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, 0xc, "339f180900000000000000000000000000080d0ec0c15116b1c4369d03740250ceaac594b1b30000dd17c1c50d38ef2a565ef1e83323691c58d66500080000f0", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c1100, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) r3 = dup(r1) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000ac0)={0x14, 0x5f, 0x101, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x10) r5 = getpid() syz_pidfd_open(r5, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000340)={0x0, 0x1, 0x1, 0x1, 0x7fffffff}) setns(r3, 0x40000000) syz_clone3(&(0x7f0000000000)={0x13824400, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x12, 0xffffffffffffffff, 0x26121000) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r3, 0x4068aea3, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d3a, 0x20007b93, 0x32, 0x0, 0x0) 2m49.395012835s ago: executing program 2 (id=506): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000040201, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = signalfd4(r2, &(0x7f00000002c0)={[0x3]}, 0x8, 0x80000) ioctl$I2C_SLAVE(r4, 0x703, 0x12b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) r5 = gettid() tgkill(0x0, r5, 0x3f) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m33.422995297s ago: executing program 32 (id=506): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000040201, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = signalfd4(r2, &(0x7f00000002c0)={[0x3]}, 0x8, 0x80000) ioctl$I2C_SLAVE(r4, 0x703, 0x12b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) r5 = gettid() tgkill(0x0, r5, 0x3f) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.607682049s ago: executing program 0 (id=924): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x2, 0xf, 0x9e8f) r0 = signalfd(0xffffffffffffffff, 0x0, 0xfffffffffffffe82) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x449b}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000cc0)=""/102400, 0x19000) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1, 0x4}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x0, 0x1}, &(0x7f00000004c0)=0x20) gettid() r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="0a0001000000648a"], 0x48}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 9.39636649s ago: executing program 0 (id=927): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0xe, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, @in6={0xa, 0x0, 0x0, @loopback}], 0x38) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2400, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x47) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="060000010004001c0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a464357177330772"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) 8.726793719s ago: executing program 5 (id=929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000040201, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = signalfd4(r2, &(0x7f00000002c0)={[0x3]}, 0x8, 0x80000) ioctl$I2C_SLAVE(r4, 0x703, 0x12b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) r5 = gettid() tgkill(0x0, r5, 0x3f) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.417171083s ago: executing program 5 (id=933): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000040000000951e000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1c2725e7", 0x5}], 0x2}, 0x4000000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r3, 0x400, 0x1) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001380)) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x4, 0x5, 0x1ff}}, 0x28) getdents(r5, &(0x7f0000001000)=""/4075, 0xfeb) semtimedop(0x0, &(0x7f0000000440)=[{0x4, 0x9}, {0x3, 0x6, 0x1000}], 0x2, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x8c) 8.380290244s ago: executing program 0 (id=934): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x0, 0x0, &(0x7f0000000140)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x19, &(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRES16=r1, @ANYRESHEX=r1], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00', 0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000040)={0x0, 0x5, "1c861d", 0x4, 0x8}) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r10 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r10}}, 0x3c) open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x0) 7.961571115s ago: executing program 1 (id=938): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f00000006c0)=""/262, 0x0, 0x106, 0x1}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) sendmsg$nl_generic(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009602"]) 7.306654654s ago: executing program 5 (id=940): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0xa) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) syz_io_uring_setup(0x2310, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x7, 0x2aa}, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 7.242050686s ago: executing program 0 (id=941): r0 = syz_open_dev$swradio(&(0x7f0000000900), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000009c0)={0x9d0000, 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0}) (fail_nth: 2) 6.720984817s ago: executing program 1 (id=942): r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x9, 0x4, 0x2, 0x4800}) read(r1, &(0x7f0000000400)=""/58, 0x3a) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}, 0x1}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000ffff070200"/44, @ANYRES32=0x0, @ANYBLOB="18000000000000"], 0x48}], 0x1, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) r5 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000b7b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006bd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x6) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa86dd608a37f2007f0000008000000000000000000000000000bbfe8000000000000000000000000000aa060000053448105741548336d86ff3416ebecc6a7e1200ccfc21d8707326e5ebc4a42f6ae15a6cd0733a1d0d966f4dbc67ec53ad18cb01ec9bbf836c064407a253eaeeb4a344b65c772d4f5ef364807c3e292394d135bab217454b97e6fe08b18acfd06e19546ee93bc10977b0905308c73826230f00aabd1c49c2c5178eab8efd30f718fdc5647c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P\x00\x00\x00'], 0x0) ptrace(0x10, r0) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xa4000) 5.54183598s ago: executing program 0 (id=944): syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x2ff0, 0x10}, 0x0, &(0x7f0000000140)) socket$inet6(0xa, 0x3, 0x1d) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r1, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/25, 0x19) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x8000) add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') 4.93399864s ago: executing program 4 (id=947): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x18, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x283}, &(0x7f00000004c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @mcast2, 0x6}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x108, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f00000029c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r8, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000010140), 0x48c02, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000010440)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r9, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) sendto$inet6(r6, 0x0, 0x0, 0x20000841, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.576477085s ago: executing program 3 (id=948): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x2, 0x4) pread64(r0, &(0x7f0000000000)=""/233, 0xe9, 0x8001) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000008800)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="2b13a13b89043276e7f0fbdfbb55007aa69d6ebe92c41176590a11ffc9e78779ef6dc4e0", 0x24}, {&(0x7f0000002300)="9c2e7ba9a830ea93888a42f1670f79e672e0b680bcb1ae2958039ef2", 0x1c}], 0x2}}], 0x1, 0x20000080) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x400461f5, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045035, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0xffffffff) 4.121828013s ago: executing program 0 (id=949): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x2, 0xf, 0x9e8f) r0 = signalfd(0xffffffffffffffff, 0x0, 0xfffffffffffffe82) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x449b}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000cc0)=""/102400, 0x19000) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1, 0x4}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x0, 0x1}, &(0x7f00000004c0)=0x20) gettid() r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="0a0001000000648a"], 0x48}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 3.997248825s ago: executing program 3 (id=950): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000040000000951e000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1c2725e7", 0x5}], 0x2}, 0x4000000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r3, 0x400, 0x1) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001380)) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x4, 0x5, 0x1ff}}, 0x28) getdents(r5, &(0x7f0000001000)=""/4075, 0xfeb) semtimedop(0x0, &(0x7f0000000440)=[{0x4, 0x9}, {0x3, 0x6, 0x1000}], 0x2, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x8c) 3.904251251s ago: executing program 4 (id=951): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$evdev(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/disk', 0x21a02, 0x13a) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214050, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chroot(&(0x7f0000000000)='./bus\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_es_remove_extent\x00', r4, 0x0, 0xeaf}, 0x18) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20000000}, 0x10}, 0x94) sendfile(r1, r3, 0x0, 0x101) fdatasync(r2) r5 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[3\xa9\xfd\xfa\xae\xd1m\x81\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\t\x00\x00\x00\x00\x00\x00\x00\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf88ZG\xf0\x00\x00\x00\x00\x00\x00\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00\x00\x00', 0x7) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.826072629s ago: executing program 4 (id=952): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f00000006c0)=""/262, 0x0, 0x106, 0x1}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) sendmsg$nl_generic(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009602"]) 2.734379853s ago: executing program 3 (id=953): read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8f}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x35, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local, [], "fafb17c133"}}}}}}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r3, 0x0, 0x80) r4 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_PEC(r4, 0x703, 0x1060) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd2c, 0x0, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7, 0xb}, [@FRA_SRC={0x14, 0x2, @loopback}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2.613814625s ago: executing program 1 (id=954): unshare(0x20000400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1_macvtap\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x1, 0x16d1, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4000842) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x15, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x3, 0x2, 0x4, 0x3, 0xa, 0xffffffffffffffe0, 0x4}, @jmp={0x5, 0x0, 0x2a3763ada63cd643, 0x7, 0x9, 0x2, 0x1}, @exit, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @alu={0x4, 0x1, 0xb, 0x9, 0x8, 0x1, 0xfffffffffffffff4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x496c}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x400}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffe8000000000700"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa000000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x4, 0x28}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xd, &(0x7f0000000100)=@raw=[@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4855ceba}}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @func], &(0x7f0000000080)='GPL\x00', 0x6, 0xe8, &(0x7f0000000180)=""/232, 0x41000, 0x7, '\x00', r1, 0x0, r5, 0x8, &(0x7f0000000300)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xd, 0x120000, 0x200}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r6, 0xffffffffffffffff, r9, r10, r12, 0xffffffffffffffff, r13], &(0x7f0000000540)=[{0x3, 0x3, 0x8, 0xa}, {0x3, 0x1, 0x3, 0x9}, {0x0, 0x4, 0x6, 0xb}], 0x10, 0x7}, 0x94) r14 = socket$packet(0x11, 0x3, 0x300) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) clock_settime(0xfffffffffffffffb, &(0x7f0000000000)={0x77359400}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000740), 0x8) setsockopt$ALG_SET_KEY(r15, 0x117, 0x1, &(0x7f00000000c0)="ef88e425f0f365dbbfcf18a82f8b7a1977bd1f00"/33, 0x21) r16 = accept4(r15, 0x0, 0x0, 0x80800) sendmmsg$alg(r16, &(0x7f0000001a40), 0x0, 0x0) setsockopt$packet_int(r14, 0x107, 0x14, 0x0, 0x0) 1.533181681s ago: executing program 1 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000040201, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = signalfd4(r2, &(0x7f00000002c0)={[0x3]}, 0x8, 0x80000) ioctl$I2C_SLAVE(r4, 0x703, 0x12b) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) r5 = gettid() tgkill(0x0, r5, 0x3f) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.499220004s ago: executing program 3 (id=956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) (fail_nth: 9) 1.438122866s ago: executing program 5 (id=957): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0xffffffffffffff7f) setsockopt$MRT_PIM(r0, 0x0, 0xd0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, 0xc, "339f180900000000000000000000000000080d0ec0c15116b1c4369d03740250ceaac594b1b30000dd17c1c50d38ef2a565ef1e83323691c58d66500080000f0", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c1100, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) r3 = dup(r1) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000ac0)={0x14, 0x5f, 0x101, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x10) r5 = getpid() syz_pidfd_open(r5, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000340)={0x0, 0x1, 0x1, 0x1, 0x7fffffff}) setns(r3, 0x40000000) syz_clone3(&(0x7f0000000000)={0x13824400, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x12, 0xffffffffffffffff, 0x26121000) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r3, 0x4068aea3, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d3a, 0x20007b93, 0x32, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 1.346484157s ago: executing program 4 (id=958): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0xb00, 0x0, 0x0, {[@mss={0x1e, 0x4, 0x2101}, @mptcp=@ack={0x1e, 0x5, 0x11, 0x4, '~'}]}}}}}}}}, 0x0) 977.795963ms ago: executing program 5 (id=959): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r4}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, 0x0, 0x1c, &(0x7f00000003c0)=""/28}) socket$packet(0x11, 0x2, 0x300) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1}) close(r0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x54}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x234c60e5305c9311}, 0x10) 977.405806ms ago: executing program 4 (id=960): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010001fff00000568000800", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280", @ANYRES8=0x0, @ANYBLOB="6d64adcf821487bc41da6c3eb03ecd693cc154d2de464db7caf0176593f891949cc3feae837ea43e3fd3a323f6a940208c8104f3296350f0a525218eee46034a4588d0372ffe8d37c9c2838b"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x0) mount(0x0, 0x0, 0x0, 0x2080000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x82, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001012, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x800) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@private=0xa010101, 0x0, 0x967, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80008000, 0x100000000006, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x21}, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@private=0xa010101, 0x0, 0x32}, 0x2, @in=@multicast1, 0x14fe, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f00000003c0)=0x7) open_tree(0xffffffffffffffff, 0x0, 0x89000) syz_clone3(0x0, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 902.787618ms ago: executing program 1 (id=961): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) unshare(0x2040400) r2 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f00000003c0)=0x800000001, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRESOCT=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000055}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x8a}}, 0x40) 902.27375ms ago: executing program 3 (id=962): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000000c0)={0x0, 0x0, 0x7}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x3c}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x7, 0x0, 0x8300}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc9, &(0x7f0000000500)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r1, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) open$dir(&(0x7f0000000240)='./file0\x00', 0x8080, 0xc404c4b3e45207da) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r8, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r8, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_DESTROY$hwpt(r7, 0x3b80, &(0x7f0000000340)={0x8, r10}) ioctl$IOMMU_DESTROY$hwpt(r4, 0x3b80, &(0x7f0000000300)={0x8, r10}) ioctl$IOMMU_DESTROY$hwpt(r4, 0x3b80, &(0x7f0000000340)={0x8, r6}) socket$packet(0x11, 0x2, 0x300) ioctl$IOMMU_DESTROY$stdev(r4, 0x3b80, &(0x7f0000000400)={0x8}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f0000000440)={0x8, r5}) close(r4) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x54}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x234c60e5305c9311}, 0x10) 273.880988ms ago: executing program 1 (id=963): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) memfd_create(0x0, 0x3) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 230.892426ms ago: executing program 3 (id=964): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7fffffe, 0x4, 0x3c8, 0x1f8, 0xe0, 0x0, 0x2e0, 0x110, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f000000f140), 0x2, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f000000f280)=@multiplanar_userptr={0x1, 0xa, 0x4, 0x10000, 0x1, {}, {0x2, 0x0, 0x5, 0x7, 0x8, 0x9, "525067fc"}, 0x79, 0x2, {0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0x1, 0x4051, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000600000000000000009502000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000440)='cpuhp_enter\x00', r7, 0x0, 0x9000000}, 0x18) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000009e02"]) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 180.369486ms ago: executing program 5 (id=965): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setregid(0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) ioctl$sock_ifreq(r0, 0x89a2, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x5, @empty, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 0s ago: executing program 4 (id=966): ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) sendmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000008c0)="89e62494ef80ce9d03e999b5169cd79c65", 0x11}], 0x1}}], 0x1, 0x20000040) io_submit(r6, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r5, &(0x7f0000000080)='=', 0x11}]) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) (fail_nth: 5) kernel console output (not intermixed with test programs): security_capable+0xa9/0x1a0 [ 250.233905][ T7181] ? bpf_lsm_capable+0x9/0x20 [ 250.233930][ T7181] ? security_capable+0x7e/0x2e0 [ 250.233962][ T7181] vt_ioctl+0x112d/0x1f00 [ 250.233992][ T7181] ? __pfx_vt_ioctl+0x10/0x10 [ 250.234012][ T7181] ? __asan_memset+0x22/0x50 [ 250.234028][ T7181] ? smack_file_ioctl+0x24a/0x340 [ 250.234050][ T7181] ? __pfx_smack_file_ioctl+0x10/0x10 [ 250.234083][ T7181] ? __fget_files+0x3a0/0x420 [ 250.234105][ T7181] ? __fget_files+0x2a/0x420 [ 250.234130][ T7181] tty_ioctl+0x929/0xde0 [ 250.234147][ T7181] ? __pfx_tty_ioctl+0x10/0x10 [ 250.234163][ T7181] __se_sys_ioctl+0xf9/0x170 [ 250.234185][ T7181] do_syscall_64+0xfa/0x3b0 [ 250.234208][ T7181] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.234232][ T7181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.234248][ T7181] ? clear_bhb_loop+0x60/0xb0 [ 250.234270][ T7181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.234286][ T7181] RIP: 0033:0x7ff1e0d8e929 [ 250.234301][ T7181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.234314][ T7181] RSP: 002b:00007ff1e1b9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.234330][ T7181] RAX: ffffffffffffffda RBX: 00007ff1e0fb5fa0 RCX: 00007ff1e0d8e929 [ 250.234342][ T7181] RDX: 0000200000000040 RSI: 0000000000004b40 RDI: 0000000000000003 [ 250.234353][ T7181] RBP: 00007ff1e1b9e090 R08: 0000000000000000 R09: 0000000000000000 [ 250.234363][ T7181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.234373][ T7181] R13: 0000000000000000 R14: 00007ff1e0fb5fa0 R15: 00007fff6ca629f8 [ 250.234403][ T7181] [ 250.619493][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 250.651780][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 250.660487][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 250.666664][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 250.672898][ T5139] Bluetooth: hci0: command 0x0401 tx timeout [ 251.410050][ T5905] hid (null): report_id 351185184 is invalid [ 251.428591][ T5905] hid (null): invalid report_count 2145683319 [ 251.447553][ T5905] hid (null): invalid report_size 51096 [ 251.476026][ T5905] hid (null): unknown global tag 0xe [ 251.504235][ T7193] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.520040][ T43] usb 3-1: USB disconnect, device number 8 [ 251.525066][ T5905] hid (null): invalid report_count 61702 [ 251.539057][ T7195] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 251.553802][ T5905] hid (null): invalid report_size 37127 [ 251.559429][ T5905] hid (null): unknown global tag 0xe [ 251.596022][ T5905] hid (null): report_id 2406778715 is invalid [ 251.597130][ T7193] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 251.607323][ T5905] hid-generic 0002:7FFFFFFF:0005.0003: report_id 351185184 is invalid [ 251.642928][ T7195] iommufd_mock iommufd_mock3: Adding to iommu group 0 [ 251.646485][ T5905] hid-generic 0002:7FFFFFFF:0005.0003: item 0 4 1 8 parsing failed [ 251.774459][ T5905] hid-generic 0002:7FFFFFFF:0005.0003: probe with driver hid-generic failed with error -22 [ 253.538899][ T7219] netlink: 60 bytes leftover after parsing attributes in process `syz.1.307'. [ 253.635865][ T7222] Unsupported ieee802154 address type: 0 [ 255.274223][ T5836] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 256.362277][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.368740][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.535239][ T7251] hsr0: entered allmulticast mode [ 256.550136][ T7255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.558383][ T7251] hsr_slave_0: entered allmulticast mode [ 256.606094][ T7251] hsr_slave_1: entered allmulticast mode [ 257.284007][ T7257] hsr_slave_0: left promiscuous mode [ 257.321322][ T7257] hsr_slave_1: left promiscuous mode [ 257.607373][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 259.756262][ T7257] hsr0 (unregistering): left allmulticast mode [ 261.123283][ T7278] netlink: 'syz.3.324': attribute type 2 has an invalid length. [ 261.389795][ T7281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.325'. [ 261.456624][ T7281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.325'. [ 261.578903][ T5884] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 261.851589][ T5884] usb 4-1: device descriptor read/64, error -71 [ 263.015935][ T5884] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 263.152799][ T5884] usb 4-1: device descriptor read/64, error -71 [ 263.216861][ T7295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.301997][ T5884] usb usb4-port1: attempt power cycle [ 263.671590][ T5884] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 263.702539][ T5884] usb 4-1: device descriptor read/8, error -71 [ 264.121653][ T5884] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 266.189618][ T5884] usb 4-1: device descriptor read/8, error -71 [ 266.631758][ T5884] usb usb4-port1: unable to enumerate USB device [ 267.183415][ T7325] FAULT_INJECTION: forcing a failure. [ 267.183415][ T7325] name failslab, interval 1, probability 0, space 0, times 0 [ 267.780647][ T7325] CPU: 1 UID: 0 PID: 7325 Comm: syz.1.339 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 267.780675][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.780685][ T7325] Call Trace: [ 267.780693][ T7325] [ 267.780701][ T7325] dump_stack_lvl+0x189/0x250 [ 267.780724][ T7325] ? __pfx____ratelimit+0x10/0x10 [ 267.780740][ T7325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.780762][ T7325] ? __pfx__printk+0x10/0x10 [ 267.780777][ T7325] ? __pfx___might_resched+0x10/0x10 [ 267.780795][ T7325] should_fail_ex+0x414/0x560 [ 267.780812][ T7325] should_failslab+0xa8/0x100 [ 267.780827][ T7325] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 267.780841][ T7325] ? __alloc_skb+0x112/0x2d0 [ 267.780855][ T7325] __alloc_skb+0x112/0x2d0 [ 267.780869][ T7325] __ip_append_data+0x2d99/0x40f0 [ 267.780897][ T7325] ? __pfx_raw_getfrag+0x10/0x10 [ 267.780925][ T7325] ? __pfx___ip_append_data+0x10/0x10 [ 267.780940][ T7325] ? ipv4_mtu+0x4b2/0x5c0 [ 267.780952][ T7325] ? ipv4_mtu+0x23/0x5c0 [ 267.780965][ T7325] ? __pfx_ipv4_mtu+0x10/0x10 [ 267.780978][ T7325] ? ip_setup_cork+0x577/0x9a0 [ 267.780991][ T7325] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.781007][ T7325] ip_append_data+0x10e/0x190 [ 267.781025][ T7325] ? __pfx_raw_getfrag+0x10/0x10 [ 267.781041][ T7325] raw_sendmsg+0x13d7/0x18b0 [ 267.781067][ T7325] ? __pfx_raw_sendmsg+0x10/0x10 [ 267.781083][ T7325] ? smack_socket_sendmsg+0x1a7/0x520 [ 267.781100][ T7325] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 267.781141][ T7325] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 267.781171][ T7325] ? sock_rps_record_flow+0x19/0x410 [ 267.781202][ T7325] ? inet_sendmsg+0x2f4/0x370 [ 267.781226][ T7325] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.781253][ T7325] __sock_sendmsg+0x19c/0x270 [ 267.781284][ T7325] ____sys_sendmsg+0x52d/0x830 [ 267.781313][ T7325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.781346][ T7325] ? import_iovec+0x74/0xa0 [ 267.781368][ T7325] ___sys_sendmsg+0x21f/0x2a0 [ 267.781392][ T7325] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.781482][ T7325] ? __might_fault+0xb0/0x130 [ 267.781508][ T7325] __sys_sendmmsg+0x227/0x430 [ 267.781537][ T7325] ? __pfx___sys_sendmmsg+0x10/0x10 [ 267.781556][ T7325] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 267.781610][ T7325] ? ksys_write+0x22a/0x250 [ 267.781633][ T7325] ? __pfx_ksys_write+0x10/0x10 [ 267.781650][ T7325] ? rcu_is_watching+0x15/0xb0 [ 267.781683][ T7325] __x64_sys_sendmmsg+0xa0/0xc0 [ 267.781707][ T7325] do_syscall_64+0xfa/0x3b0 [ 267.781731][ T7325] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.781764][ T7325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.781782][ T7325] ? clear_bhb_loop+0x60/0xb0 [ 267.781805][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.781823][ T7325] RIP: 0033:0x7fa0d3b8e929 [ 267.781840][ T7325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.781855][ T7325] RSP: 002b:00007fa0d4a32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 267.781876][ T7325] RAX: ffffffffffffffda RBX: 00007fa0d3db5fa0 RCX: 00007fa0d3b8e929 [ 267.781889][ T7325] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 267.781900][ T7325] RBP: 00007fa0d4a32090 R08: 0000000000000000 R09: 0000000000000000 [ 267.781912][ T7325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.781923][ T7325] R13: 0000000000000000 R14: 00007fa0d3db5fa0 R15: 00007ffd2c726468 [ 267.781955][ T7325] [ 267.810974][ T7329] netlink: 'syz.1.339': attribute type 4 has an invalid length. [ 268.011693][ T7332] program syz.3.340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.586830][ T7335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.845645][ T7357] netlink: 'syz.0.349': attribute type 29 has an invalid length. [ 269.869125][ T7357] netlink: 'syz.0.349': attribute type 29 has an invalid length. [ 269.886650][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'. [ 270.014618][ T5905] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 270.269696][ T5905] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 270.309454][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.331492][ T5905] usb 3-1: Product: syz [ 270.409520][ T5905] usb 3-1: Manufacturer: syz [ 270.427980][ T5905] usb 3-1: SerialNumber: syz [ 272.211343][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 272.466239][ T7381] Zero length message leads to an empty skb [ 272.522170][ T7381] capability: warning: `syz.0.355' uses 32-bit capabilities (legacy support in use) [ 272.877590][ T5905] gspca_main: pac207-2.14.0 probing 093a:2476 [ 272.921797][ T5905] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 272.930498][ T5905] usb 3-1: Found UVC 0.00 device syz (093a:2476) [ 272.974531][ T5905] usb 3-1: No valid video chain found. [ 272.997898][ T5905] usb 3-1: USB disconnect, device number 9 [ 274.603138][ T7396] netlink: 'syz.2.360': attribute type 2 has an invalid length. [ 276.998263][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'. [ 277.040516][ T7426] overlayfs: failed to resolve './file0': -2 [ 277.089223][ T7426] openvswitch: netlink: Flow key attr not present in new flow. [ 277.121929][ T7418] tc_dump_action: action bad kind [ 280.473674][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 282.062949][ T5877] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 282.902202][ T5877] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.912547][ T5877] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.966768][ T5877] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 282.984649][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 283.002114][ T5877] usb 4-1: SerialNumber: syz [ 283.076123][ T7502] netlink: 'syz.0.389': attribute type 1 has an invalid length. [ 283.084432][ T7502] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.389'. [ 283.430900][ T5824] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 283.759427][ T5877] usb 4-1: 0:2 : does not exist [ 283.874114][ T5877] usb 4-1: USB disconnect, device number 9 [ 283.899173][ T5824] usb 1-1: Using ep0 maxpacket: 8 [ 283.914990][ T5824] usb 1-1: unable to get BOS descriptor or descriptor too short [ 283.930852][ T5824] usb 1-1: config 1 has an invalid descriptor of length 164, skipping remainder of the config [ 283.961568][ T5824] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.995858][ T5824] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 284.013436][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.080471][ T5824] usb 1-1: Product: syz [ 284.088351][ T5824] usb 1-1: Manufacturer: syz [ 284.104903][ T5824] usb 1-1: SerialNumber: syz [ 285.211671][ T5820] Bluetooth: hci4: command 0x0406 tx timeout [ 286.132684][ T5824] usb 1-1: 0:2 : does not exist [ 286.194402][ T5824] usb 1-1: USB disconnect, device number 8 [ 288.064966][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 296.449927][ T7623] CIFS mount error: No usable UNC path provided in device string! [ 296.449927][ T7623] [ 296.536544][ T7623] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 296.822375][ T30] audit: type=1326 audit(1750852974.160:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7613 comm="syz.0.418" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5e2f8e929 code=0x0 [ 299.157383][ T5884] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 299.371672][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 299.411720][ T5884] usb 1-1: config 0 interface 0 has no altsetting 0 [ 299.452144][ T5884] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 299.526754][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.585694][ T5884] usb 1-1: config 0 descriptor?? [ 302.056100][ T5884] usbhid 1-1:0.0: can't add hid device: -71 [ 302.071613][ T5884] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 302.121912][ T5884] usb 1-1: USB disconnect, device number 9 [ 303.167794][ T7675] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 303.886769][ T7690] netlink: 'syz.4.437': attribute type 1 has an invalid length. [ 303.897189][ T7688] netlink: 36 bytes leftover after parsing attributes in process `syz.0.436'. [ 303.940531][ T7690] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.437'. [ 304.221572][ T5956] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 304.251713][ T5820] Bluetooth: hci0: command 0x0401 tx timeout [ 304.286366][ T7696] tipc: Started in network mode [ 304.305236][ T7696] tipc: Node identity , cluster identity 4711 [ 304.401669][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 304.444882][ T5956] usb 5-1: unable to get BOS descriptor or descriptor too short [ 304.465949][ T5956] usb 5-1: config 1 has an invalid descriptor of length 164, skipping remainder of the config [ 304.782189][ T5956] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.831553][ T5877] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 304.837778][ T5956] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.935403][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.177097][ T5956] usb 5-1: Product: syz [ 305.191349][ T5956] usb 5-1: Manufacturer: syz [ 305.288030][ T5956] usb 5-1: SerialNumber: syz [ 305.307970][ T5877] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 305.358591][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.382651][ T5877] usb 3-1: Product: syz [ 305.395227][ T5877] usb 3-1: Manufacturer: syz [ 305.415908][ T5877] usb 3-1: SerialNumber: syz [ 305.429432][ T5877] usb 3-1: config 0 descriptor?? [ 305.449842][ T5877] usb 3-1: selecting invalid altsetting 1 [ 305.455772][ T5877] comedi comedi0: could not switch to alternate setting 1 [ 305.465695][ T5877] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 306.733514][ T7706] overlayfs: missing 'lowerdir' [ 309.198282][ T5956] usb 5-1: 0:2 : does not exist [ 309.231852][ T5956] usb 5-1: USB disconnect, device number 6 [ 309.891050][ T5877] usb 3-1: USB disconnect, device number 10 [ 311.068984][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.445'. [ 314.564381][ T7733] FAULT_INJECTION: forcing a failure. [ 314.564381][ T7733] name failslab, interval 1, probability 0, space 0, times 0 [ 314.581827][ T7733] CPU: 0 UID: 0 PID: 7733 Comm: syz.2.449 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 314.581853][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.581863][ T7733] Call Trace: [ 314.581871][ T7733] [ 314.581880][ T7733] dump_stack_lvl+0x189/0x250 [ 314.581913][ T7733] ? __pfx____ratelimit+0x10/0x10 [ 314.581938][ T7733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.581969][ T7733] ? __pfx__printk+0x10/0x10 [ 314.581994][ T7733] ? ref_tracker_alloc+0x318/0x460 [ 314.582021][ T7733] should_fail_ex+0x414/0x560 [ 314.582049][ T7733] should_failslab+0xa8/0x100 [ 314.582075][ T7733] kmem_cache_alloc_noprof+0x73/0x3c0 [ 314.582103][ T7733] ? skb_clone+0x212/0x3a0 [ 314.582132][ T7733] skb_clone+0x212/0x3a0 [ 314.582158][ T7733] __netlink_deliver_tap+0x404/0x850 [ 314.582194][ T7733] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.582217][ T7733] netlink_deliver_tap+0x19c/0x1b0 [ 314.582238][ T7733] __netlink_sendskb+0x47/0x90 [ 314.582268][ T7733] netlink_dump+0xa12/0xe20 [ 314.582303][ T7733] ? __pfx_netlink_dump+0x10/0x10 [ 314.582334][ T7733] ? netlink_lookup+0x30/0x200 [ 314.582350][ T7733] ? netlink_lookup+0x30/0x200 [ 314.582365][ T7733] ? netlink_lookup+0x30/0x200 [ 314.582388][ T7733] __netlink_dump_start+0x5cb/0x7e0 [ 314.582418][ T7733] ip_set_dump+0x13e/0x1c0 [ 314.582444][ T7733] ? __pfx_ip_set_dump+0x10/0x10 [ 314.582466][ T7733] ? __pfx_ip_set_dump_start+0x10/0x10 [ 314.582488][ T7733] ? __pfx_ip_set_dump_do+0x10/0x10 [ 314.582511][ T7733] ? __pfx_ip_set_dump_done+0x10/0x10 [ 314.582554][ T7733] nfnetlink_rcv_msg+0xb4a/0x1130 [ 314.582582][ T7733] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 314.582630][ T7733] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 314.582653][ T7733] ? kasan_save_free_info+0x46/0x50 [ 314.582740][ T7733] netlink_rcv_skb+0x208/0x470 [ 314.582762][ T7733] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 314.582789][ T7733] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.582822][ T7733] ? bpf_lsm_capable+0x9/0x20 [ 314.582848][ T7733] ? security_capable+0x7e/0x2e0 [ 314.582884][ T7733] nfnetlink_rcv+0x26a/0x2520 [ 314.582913][ T7733] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 314.582943][ T7733] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 314.582967][ T7733] ? __dev_queue_xmit+0x27e/0x3a70 [ 314.582991][ T7733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.583024][ T7733] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 314.583049][ T7733] ? __pfx___dev_queue_xmit+0x10/0x10 [ 314.583118][ T7733] ? ref_tracker_free+0x63a/0x7d0 [ 314.583137][ T7733] ? __copy_skb_header+0xa7/0x550 [ 314.583160][ T7733] ? __pfx_ref_tracker_free+0x10/0x10 [ 314.583180][ T7733] ? __skb_clone+0x63/0x7a0 [ 314.583204][ T7733] ? __skb_clone+0x483/0x7a0 [ 314.583233][ T7733] ? skb_clone+0x246/0x3a0 [ 314.583260][ T7733] ? __netlink_deliver_tap+0x807/0x850 [ 314.583278][ T7733] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.583304][ T7733] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.583322][ T7733] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.583346][ T7733] netlink_unicast+0x75b/0x8d0 [ 314.583386][ T7733] netlink_sendmsg+0x805/0xb30 [ 314.583416][ T7733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.583446][ T7733] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 314.583465][ T7733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.583487][ T7733] __sock_sendmsg+0x219/0x270 [ 314.583515][ T7733] ____sys_sendmsg+0x505/0x830 [ 314.583543][ T7733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.583576][ T7733] ? import_iovec+0x74/0xa0 [ 314.583599][ T7733] ___sys_sendmsg+0x21f/0x2a0 [ 314.583623][ T7733] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.583689][ T7733] ? __fget_files+0x2a/0x420 [ 314.583712][ T7733] ? __fget_files+0x3a0/0x420 [ 314.583748][ T7733] __x64_sys_sendmsg+0x19b/0x260 [ 314.583774][ T7733] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.583808][ T7733] ? __pfx_ksys_write+0x10/0x10 [ 314.583826][ T7733] ? rcu_is_watching+0x15/0xb0 [ 314.583858][ T7733] ? do_syscall_64+0xbe/0x3b0 [ 314.583888][ T7733] do_syscall_64+0xfa/0x3b0 [ 314.583912][ T7733] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.583935][ T7733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.583953][ T7733] ? clear_bhb_loop+0x60/0xb0 [ 314.583976][ T7733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.583993][ T7733] RIP: 0033:0x7f805058e929 [ 314.584011][ T7733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.584026][ T7733] RSP: 002b:00007f805136a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.584047][ T7733] RAX: ffffffffffffffda RBX: 00007f80507b5fa0 RCX: 00007f805058e929 [ 314.584060][ T7733] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 314.584071][ T7733] RBP: 00007f805136a090 R08: 0000000000000000 R09: 0000000000000000 [ 314.584081][ T7733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.584101][ T7733] R13: 0000000000000000 R14: 00007f80507b5fa0 R15: 00007ffc609fd618 [ 314.584134][ T7733] [ 315.806891][ T7754] CIFS mount error: No usable UNC path provided in device string! [ 315.806891][ T7754] [ 315.864445][ T7754] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 315.914407][ T30] audit: type=1326 audit(1750852993.230:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7743 comm="syz.1.454" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0d3b8e929 code=0x0 [ 317.446556][ T7773] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 317.536462][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.542964][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.061564][ T5956] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 318.570612][ T5956] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 318.581151][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.592924][ T5956] usb 2-1: Product: syz [ 318.597142][ T5956] usb 2-1: Manufacturer: syz [ 318.631910][ T5956] usb 2-1: SerialNumber: syz [ 318.654115][ T5956] usb 2-1: config 0 descriptor?? [ 318.697028][ T5956] usb 2-1: selecting invalid altsetting 1 [ 318.704169][ T5956] comedi comedi0: could not switch to alternate setting 1 [ 318.716587][ T5956] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 318.983138][ T7781] overlayfs: missing 'lowerdir' [ 320.765624][ T5905] usb 2-1: USB disconnect, device number 7 [ 322.298103][ T7799] usb usb9: usbfs: process 7799 (syz.2.464) did not claim interface 0 before use [ 323.381506][ T5824] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 323.573737][ T5824] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.641229][ T5824] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.662925][ T5824] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 323.674149][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 323.686398][ T5824] usb 3-1: SerialNumber: syz [ 324.358228][ T5824] usb 3-1: 0:2 : does not exist [ 324.427746][ T5824] usb 3-1: USB disconnect, device number 11 [ 324.609327][ T5820] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 324.692209][ T7817] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 325.201510][ T5824] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 325.871673][ T5824] usb 4-1: Using ep0 maxpacket: 32 [ 326.104295][ T5891] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 326.492448][ T5824] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 326.575232][ T5824] usb 4-1: config 0 has no interface number 0 [ 326.866060][ T5824] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 326.901680][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.916853][ T5824] usb 4-1: Product: syz [ 326.921804][ T5824] usb 4-1: Manufacturer: syz [ 326.935202][ T5824] usb 4-1: SerialNumber: syz [ 327.423846][ T5824] usb 4-1: config 0 descriptor?? [ 327.423902][ T5891] usb 5-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 327.438493][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.454290][ T5891] usb 5-1: Product: syz [ 327.460425][ T5824] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 327.462803][ T5891] usb 5-1: Manufacturer: syz [ 327.483282][ T5891] usb 5-1: SerialNumber: syz [ 327.493098][ T5824] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 327.493977][ T5891] usb 5-1: config 0 descriptor?? [ 327.518562][ T5891] usb 5-1: selecting invalid altsetting 1 [ 328.402296][ T5891] comedi comedi0: could not switch to alternate setting 1 [ 328.405114][ T5824] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 328.421475][ T5824] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 328.462345][ T5891] usbduxfast 5-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 328.705013][ T7843] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 328.717234][ T7843] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 330.415021][ T5824] usb 4-1: USB disconnect, device number 10 [ 332.146658][ T5891] usb 5-1: USB disconnect, device number 7 [ 333.299082][ T7873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.828672][ T7873] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 341.015936][ T5820] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 341.829225][ T7948] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 341.889176][ T7951] FAULT_INJECTION: forcing a failure. [ 341.889176][ T7951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.626312][ T7951] CPU: 1 UID: 0 PID: 7951 Comm: syz.3.508 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 342.626331][ T7951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.626338][ T7951] Call Trace: [ 342.626343][ T7951] [ 342.626348][ T7951] dump_stack_lvl+0x189/0x250 [ 342.626370][ T7951] ? __pfx____ratelimit+0x10/0x10 [ 342.626386][ T7951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.626403][ T7951] ? __pfx__printk+0x10/0x10 [ 342.626422][ T7951] should_fail_ex+0x414/0x560 [ 342.626440][ T7951] _copy_to_user+0x31/0xb0 [ 342.626452][ T7951] simple_read_from_buffer+0xe1/0x170 [ 342.626469][ T7951] proc_fail_nth_read+0x1df/0x250 [ 342.626486][ T7951] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 342.626504][ T7951] ? rw_verify_area+0x258/0x650 [ 342.626515][ T7951] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 342.626531][ T7951] vfs_read+0x1fd/0x980 [ 342.626547][ T7951] ? __pfx___mutex_lock+0x10/0x10 [ 342.626563][ T7951] ? __pfx_vfs_read+0x10/0x10 [ 342.626576][ T7951] ? __fget_files+0x2a/0x420 [ 342.626592][ T7951] ? __fget_files+0x3a0/0x420 [ 342.626605][ T7951] ? __fget_files+0x2a/0x420 [ 342.626625][ T7951] ksys_read+0x145/0x250 [ 342.626636][ T7951] ? __fget_files+0x3a0/0x420 [ 342.626651][ T7951] ? __pfx_ksys_read+0x10/0x10 [ 342.626666][ T7951] ? do_syscall_64+0xbe/0x3b0 [ 342.626684][ T7951] do_syscall_64+0xfa/0x3b0 [ 342.626699][ T7951] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.626713][ T7951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.626723][ T7951] ? clear_bhb_loop+0x60/0xb0 [ 342.626737][ T7951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.626747][ T7951] RIP: 0033:0x7f7ef918d33c [ 342.626758][ T7951] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 342.626766][ T7951] RSP: 002b:00007f7efa018030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 342.626779][ T7951] RAX: ffffffffffffffda RBX: 00007f7ef93b5fa0 RCX: 00007f7ef918d33c [ 342.626787][ T7951] RDX: 000000000000000f RSI: 00007f7efa0180a0 RDI: 0000000000000004 [ 342.626793][ T7951] RBP: 00007f7efa018090 R08: 0000000000000000 R09: 0000000000000000 [ 342.626800][ T7951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.626806][ T7951] R13: 0000000000000000 R14: 00007f7ef93b5fa0 R15: 00007fff9f388448 [ 342.626824][ T7951] [ 342.862149][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.622155][ T5820] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 350.876351][ T8015] CIFS mount error: No usable UNC path provided in device string! [ 350.876351][ T8015] [ 350.893148][ T8015] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 351.370448][ T30] audit: type=1326 audit(1750853028.260:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8002 comm="syz.1.521" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0d3b8e929 code=0x0 [ 353.857370][ T8037] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.528'. [ 354.458319][ T8041] netlink: 56 bytes leftover after parsing attributes in process `syz.0.529'. [ 354.736617][ T8041] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 355.950929][ T8041] 9pnet_fd: Insufficient options for proto=fd [ 356.017114][ T8041] sg_write: process 362 (syz.0.529) changed security contexts after opening file descriptor, this is not allowed. [ 356.040806][ T8046] sctp: failed to load transform for md5: -2 [ 356.190558][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'. [ 358.260891][ T8083] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.541'. [ 360.572823][ T8099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.546'. [ 360.618293][ T8099] netlink: 'syz.1.546': attribute type 3 has an invalid length. [ 360.645791][ T8099] FAULT_INJECTION: forcing a failure. [ 360.645791][ T8099] name failslab, interval 1, probability 0, space 0, times 0 [ 360.678102][ T8099] CPU: 0 UID: 0 PID: 8099 Comm: syz.1.546 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 360.678131][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 360.678142][ T8099] Call Trace: [ 360.678150][ T8099] [ 360.678158][ T8099] dump_stack_lvl+0x189/0x250 [ 360.678191][ T8099] ? __pfx____ratelimit+0x10/0x10 [ 360.678217][ T8099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.678243][ T8099] ? __pfx__printk+0x10/0x10 [ 360.678280][ T8099] should_fail_ex+0x414/0x560 [ 360.678309][ T8099] should_failslab+0xa8/0x100 [ 360.678335][ T8099] kmem_cache_alloc_noprof+0x73/0x3c0 [ 360.678356][ T8099] ? skb_clone+0x212/0x3a0 [ 360.678385][ T8099] skb_clone+0x212/0x3a0 [ 360.678412][ T8099] __netlink_deliver_tap+0x404/0x850 [ 360.678449][ T8099] ? netlink_deliver_tap+0x2e/0x1b0 [ 360.678471][ T8099] netlink_deliver_tap+0x19c/0x1b0 [ 360.678493][ T8099] netlink_sendskb+0x68/0x140 [ 360.678524][ T8099] netlink_rcv_skb+0x28c/0x470 [ 360.678546][ T8099] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 360.678574][ T8099] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 360.678609][ T8099] ? bpf_lsm_capable+0x9/0x20 [ 360.678634][ T8099] ? security_capable+0x7e/0x2e0 [ 360.678669][ T8099] nfnetlink_rcv+0x26a/0x2520 [ 360.678708][ T8099] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 360.678737][ T8099] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 360.678761][ T8099] ? __dev_queue_xmit+0x27e/0x3a70 [ 360.678785][ T8099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.678816][ T8099] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 360.678841][ T8099] ? __pfx___dev_queue_xmit+0x10/0x10 [ 360.678881][ T8099] ? ref_tracker_free+0x63a/0x7d0 [ 360.678901][ T8099] ? __copy_skb_header+0xa7/0x550 [ 360.678926][ T8099] ? __pfx_ref_tracker_free+0x10/0x10 [ 360.678947][ T8099] ? __skb_clone+0x63/0x7a0 [ 360.678975][ T8099] ? __skb_clone+0x483/0x7a0 [ 360.679011][ T8099] ? skb_clone+0x246/0x3a0 [ 360.679037][ T8099] ? __netlink_deliver_tap+0x807/0x850 [ 360.679057][ T8099] ? netlink_deliver_tap+0x2e/0x1b0 [ 360.679084][ T8099] ? netlink_deliver_tap+0x2e/0x1b0 [ 360.679103][ T8099] ? netlink_deliver_tap+0x2e/0x1b0 [ 360.679129][ T8099] netlink_unicast+0x75b/0x8d0 [ 360.679171][ T8099] netlink_sendmsg+0x805/0xb30 [ 360.679203][ T8099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.679227][ T8099] ? __lock_acquire+0xab9/0xd20 [ 360.679253][ T8099] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 360.679274][ T8099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.679302][ T8099] __sock_sendmsg+0x219/0x270 [ 360.679333][ T8099] ____sys_sendmsg+0x505/0x830 [ 360.679362][ T8099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.679395][ T8099] ? import_iovec+0x74/0xa0 [ 360.679417][ T8099] ___sys_sendmsg+0x21f/0x2a0 [ 360.679442][ T8099] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.679508][ T8099] ? __fget_files+0x2a/0x420 [ 360.679531][ T8099] ? __fget_files+0x3a0/0x420 [ 360.679567][ T8099] __x64_sys_sendmsg+0x19b/0x260 [ 360.679593][ T8099] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.679627][ T8099] ? __pfx_ksys_write+0x10/0x10 [ 360.679645][ T8099] ? rcu_is_watching+0x15/0xb0 [ 360.679678][ T8099] ? do_syscall_64+0xbe/0x3b0 [ 360.679715][ T8099] do_syscall_64+0xfa/0x3b0 [ 360.679739][ T8099] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.679764][ T8099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.679782][ T8099] ? clear_bhb_loop+0x60/0xb0 [ 360.679805][ T8099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.679821][ T8099] RIP: 0033:0x7fa0d3b8e929 [ 360.679838][ T8099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.679854][ T8099] RSP: 002b:00007fa0d4a32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.679874][ T8099] RAX: ffffffffffffffda RBX: 00007fa0d3db5fa0 RCX: 00007fa0d3b8e929 [ 360.679887][ T8099] RDX: 0000000000008000 RSI: 0000200000000340 RDI: 0000000000000003 [ 360.679899][ T8099] RBP: 00007fa0d4a32090 R08: 0000000000000000 R09: 0000000000000000 [ 360.679910][ T8099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.679920][ T8099] R13: 0000000000000000 R14: 00007fa0d3db5fa0 R15: 00007ffd2c726468 [ 360.679951][ T8099] [ 360.783713][ T8106] netlink: 'syz.0.549': attribute type 4 has an invalid length. [ 360.864981][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.179868][ T8109] netlink: 32 bytes leftover after parsing attributes in process `syz.0.549'. [ 361.279212][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.287621][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.304175][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.312072][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.513016][ T8116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.581162][ T8116] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 361.644159][ T6818] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.332062][ T8122] binder: 8118:8122 ioctl 4018620d 0 returned -22 [ 363.072912][ T6818] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.321155][ T6818] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.371516][ T5820] Bluetooth: hci2: command tx timeout [ 364.044795][ T6818] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.134884][ T8145] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 365.451627][ T5820] Bluetooth: hci2: command tx timeout [ 365.589863][ T8163] netlink: 'syz.0.564': attribute type 1 has an invalid length. [ 365.713619][ T8163] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.564'. [ 366.421574][ T5820] Bluetooth: hci0: command 0x0401 tx timeout [ 366.504861][ T5824] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 366.661578][ T6818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.694935][ T5824] usb 1-1: Using ep0 maxpacket: 8 [ 366.704325][ T5824] usb 1-1: unable to get BOS descriptor or descriptor too short [ 366.716910][ T6818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.722890][ T5824] usb 1-1: config 1 has an invalid descriptor of length 164, skipping remainder of the config [ 366.759648][ T5824] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.761851][ T6818] bond0 (unregistering): Released all slaves [ 366.796450][ T5824] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.821489][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.841498][ T5824] usb 1-1: Product: syz [ 366.845931][ T8107] chnl_net:caif_netlink_parms(): no params data found [ 366.954255][ T5824] usb 1-1: Manufacturer: syz [ 366.959742][ T5824] usb 1-1: SerialNumber: syz [ 367.030323][ T5820] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 367.542276][ T5820] Bluetooth: hci2: command tx timeout [ 368.026495][ T8107] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.050232][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.060816][ T8107] bridge_slave_0: entered allmulticast mode [ 368.102377][ T8107] bridge_slave_0: entered promiscuous mode [ 368.119241][ T8107] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.131976][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.143394][ T8107] bridge_slave_1: entered allmulticast mode [ 368.154924][ T8107] bridge_slave_1: entered promiscuous mode [ 368.731564][ T8107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.683144][ T5820] Bluetooth: hci2: command tx timeout [ 370.821774][ T8107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.954452][ T6818] hsr_slave_0: left promiscuous mode [ 370.981064][ T6818] hsr_slave_1: left promiscuous mode [ 370.984623][ T5824] usb 1-1: 0:2 : does not exist [ 371.002994][ T6818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.039260][ T6818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.065573][ T5824] usb 1-1: USB disconnect, device number 10 [ 371.075958][ T6818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.103433][ T6818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.230225][ T6818] veth1_macvtap: left promiscuous mode [ 371.259098][ T6818] veth0_macvtap: left promiscuous mode [ 371.267488][ T5820] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 371.283688][ T6818] veth1_vlan: left promiscuous mode [ 371.324732][ T6818] veth0_vlan: left promiscuous mode [ 371.554924][ T8200] netlink: 44 bytes leftover after parsing attributes in process `syz.3.573'. [ 372.039654][ T30] audit: type=1326 audit(1750853049.370:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.3.574" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ef918e929 code=0x0 [ 372.149677][ T8219] netlink: 'syz.1.575': attribute type 3 has an invalid length. [ 374.637796][ T6818] team0 (unregistering): Port device team_slave_1 removed [ 374.748600][ T6818] team0 (unregistering): Port device team_slave_0 removed [ 375.721704][ T8107] team0: Port device team_slave_0 added [ 375.752968][ T8107] team0: Port device team_slave_1 added [ 376.065055][ T8107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.090877][ T8107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.185643][ T8107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.213224][ T8107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.225144][ T8107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.266346][ T8107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.169962][ T8107] hsr_slave_0: entered promiscuous mode [ 377.190510][ T8107] hsr_slave_1: entered promiscuous mode [ 377.205971][ T8107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.713633][ T8107] Cannot create hsr debugfs directory [ 377.909137][ T5820] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 377.928355][ T8265] netlink: 27 bytes leftover after parsing attributes in process `syz.3.586'. [ 378.224399][ T8271] CIFS mount error: No usable UNC path provided in device string! [ 378.224399][ T8271] [ 378.297392][ T8271] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 378.382686][ T30] audit: type=1326 audit(1750853055.670:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8266 comm="syz.4.587" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1e0d8e929 code=0x0 [ 378.976456][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.989286][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.647099][ T8107] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 379.675336][ T8107] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 380.321852][ T8107] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 380.852589][ T8107] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 383.119934][ T8326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.140693][ T8107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.340281][ T8107] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.660629][ T6631] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.667969][ T6631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.964641][ T6631] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.971936][ T6631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.594677][ T8351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.622948][ T8351] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 387.824831][ T8367] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.607'. [ 389.069193][ T8378] 9pnet_fd: p9_fd_create_unix (8378): problem connecting socket: ./file0/../file0/../file0: -111 [ 389.087366][ T8377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.950248][ T8107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.163369][ T8377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.955600][ T8412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.970328][ T8412] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 393.121174][ T8417] netlink: 'syz.4.619': attribute type 14 has an invalid length. [ 393.331684][ T5956] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 393.731928][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.745076][ T5956] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 393.763844][ T8107] veth0_vlan: entered promiscuous mode [ 393.794441][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.884471][ T8107] veth1_vlan: entered promiscuous mode [ 394.553573][ T5956] usb 4-1: config 0 descriptor?? [ 394.592876][ T5956] pwc: Askey VC010 type 2 USB webcam detected. [ 395.218919][ T8107] veth0_macvtap: entered promiscuous mode [ 395.328871][ T8107] veth1_macvtap: entered promiscuous mode [ 395.417038][ T5956] pwc: recv_control_msg error -32 req 02 val 2b00 [ 395.425337][ T8107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.476158][ T5956] pwc: recv_control_msg error -32 req 02 val 2700 [ 395.513374][ T5956] pwc: recv_control_msg error -32 req 02 val 2c00 [ 395.528025][ T8107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.539652][ T5956] pwc: recv_control_msg error -32 req 04 val 1000 [ 395.788106][ T8436] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.623'. [ 395.854596][ T5956] pwc: recv_control_msg error -32 req 04 val 1300 [ 396.182538][ T5956] pwc: recv_control_msg error -32 req 04 val 1400 [ 396.250754][ T8107] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.446566][ T8107] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.552429][ T8107] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.569221][ T8107] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.994673][ T5956] pwc: recv_control_msg error -71 req 02 val 2000 [ 399.081648][ T6631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.129654][ T6631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.227818][ T5956] pwc: recv_control_msg error -71 req 02 val 2100 [ 399.242070][ T5956] pwc: recv_control_msg error -71 req 04 val 1500 [ 399.258556][ T5956] pwc: recv_control_msg error -71 req 02 val 2500 [ 399.271777][ T5956] pwc: recv_control_msg error -71 req 02 val 2400 [ 400.336513][ T5956] pwc: recv_control_msg error -71 req 02 val 2600 [ 400.348207][ T5956] pwc: recv_control_msg error -71 req 02 val 2900 [ 400.355566][ T5956] pwc: recv_control_msg error -71 req 02 val 2800 [ 400.363776][ T5956] pwc: recv_control_msg error -71 req 04 val 1100 [ 400.372076][ T5956] pwc: recv_control_msg error -71 req 04 val 1200 [ 400.385527][ T5956] pwc: Registered as video103. [ 400.610260][ T5956] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 400.768989][ T5956] usb 4-1: USB disconnect, device number 11 [ 401.191050][ T6917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.250774][ T6917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.413691][ T5820] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 402.367423][ T8477] input: syz1 as /devices/virtual/input/input7 [ 403.936557][ T8488] CIFS mount error: No usable UNC path provided in device string! [ 403.936557][ T8488] [ 403.969364][ T8488] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 404.948345][ T30] audit: type=1326 audit(1750853082.280:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8481 comm="syz.4.634" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1e0d8e929 code=0x0 [ 408.454659][ T8527] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 410.274688][ T8548] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 410.899062][ T8555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.652'. [ 413.551678][ T8572] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.656'. [ 414.348492][ T8583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.411631][ T8595] CIFS mount error: No usable UNC path provided in device string! [ 414.411631][ T8595] [ 414.462679][ T5956] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 415.128358][ T8595] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 415.138588][ T30] audit: type=1326 audit(1750853092.470:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8577 comm="syz.5.658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96fcf8e929 code=0x0 [ 415.159291][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.240909][ T5820] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 415.302606][ T5956] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 415.302707][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.346963][ T5956] usb 5-1: config 0 descriptor?? [ 415.769249][ T5956] cp210x 5-1:0.0: cp210x converter detected [ 416.030240][ T5956] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 416.060626][ T5956] cp210x 5-1:0.0: querying part number failed [ 416.082269][ T8608] FAULT_INJECTION: forcing a failure. [ 416.082269][ T8608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.131514][ T8608] CPU: 1 UID: 0 PID: 8608 Comm: syz.1.664 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 416.131542][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.131552][ T8608] Call Trace: [ 416.131560][ T8608] [ 416.131568][ T8608] dump_stack_lvl+0x189/0x250 [ 416.131600][ T8608] ? __pfx____ratelimit+0x10/0x10 [ 416.131626][ T8608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.131653][ T8608] ? __pfx__printk+0x10/0x10 [ 416.131672][ T8608] ? __might_fault+0xb0/0x130 [ 416.131712][ T8608] should_fail_ex+0x414/0x560 [ 416.131740][ T8608] _copy_from_user+0x2d/0xb0 [ 416.131759][ T8608] ___sys_recvmsg+0x12e/0x510 [ 416.131789][ T8608] ? __pfx____sys_recvmsg+0x10/0x10 [ 416.131840][ T8608] ? __fget_files+0x3a0/0x420 [ 416.131876][ T8608] do_recvmmsg+0x307/0x770 [ 416.131909][ T8608] ? __pfx_do_recvmmsg+0x10/0x10 [ 416.131945][ T8608] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 416.131987][ T8608] __x64_sys_recvmmsg+0x190/0x240 [ 416.132014][ T8608] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 416.132034][ T8608] ? rcu_is_watching+0x15/0xb0 [ 416.132066][ T8608] ? do_syscall_64+0xbe/0x3b0 [ 416.132097][ T8608] do_syscall_64+0xfa/0x3b0 [ 416.132121][ T8608] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.132145][ T8608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.132163][ T8608] ? clear_bhb_loop+0x60/0xb0 [ 416.132186][ T8608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.132202][ T8608] RIP: 0033:0x7fa0d3b8e929 [ 416.132219][ T8608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.132234][ T8608] RSP: 002b:00007fa0d4a32038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 416.132256][ T8608] RAX: ffffffffffffffda RBX: 00007fa0d3db5fa0 RCX: 00007fa0d3b8e929 [ 416.132269][ T8608] RDX: 0000000000000001 RSI: 00002000000050c0 RDI: 0000000000000004 [ 416.132280][ T8608] RBP: 00007fa0d4a32090 R08: 0000000000000000 R09: 0000000000000000 [ 416.132291][ T8608] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 416.132302][ T8608] R13: 0000000000000000 R14: 00007fa0d3db5fa0 R15: 00007ffd2c726468 [ 416.132333][ T8608] [ 416.417663][ T5956] usb 5-1: cp210x converter now attached to ttyUSB0 [ 416.518359][ T5956] usb 5-1: USB disconnect, device number 8 [ 416.593071][ T5956] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 416.714177][ T5956] cp210x 5-1:0.0: device disconnected [ 418.116162][ T8627] FAULT_INJECTION: forcing a failure. [ 418.116162][ T8627] name failslab, interval 1, probability 0, space 0, times 0 [ 418.146893][ T8627] CPU: 0 UID: 0 PID: 8627 Comm: syz.1.669 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 418.146922][ T8627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 418.146932][ T8627] Call Trace: [ 418.146939][ T8627] [ 418.146948][ T8627] dump_stack_lvl+0x189/0x250 [ 418.146978][ T8627] ? __pfx____ratelimit+0x10/0x10 [ 418.147003][ T8627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.147028][ T8627] ? __pfx__printk+0x10/0x10 [ 418.147054][ T8627] ? __pfx___might_resched+0x10/0x10 [ 418.147078][ T8627] ? fs_reclaim_acquire+0x7d/0x100 [ 418.147106][ T8627] should_fail_ex+0x414/0x560 [ 418.147132][ T8627] should_failslab+0xa8/0x100 [ 418.147158][ T8627] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 418.147179][ T8627] ? __d_alloc+0x31/0x6f0 [ 418.147202][ T8627] ? __lock_acquire+0xab9/0xd20 [ 418.147228][ T8627] __d_alloc+0x31/0x6f0 [ 418.147258][ T8627] d_alloc_pseudo+0x1f/0xb0 [ 418.147285][ T8627] alloc_file_pseudo+0xcc/0x210 [ 418.147315][ T8627] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 418.147347][ T8627] ? do_raw_spin_unlock+0x122/0x240 [ 418.147370][ T8627] ? _raw_spin_unlock+0x28/0x50 [ 418.147402][ T8627] sock_alloc_file+0xb8/0x2e0 [ 418.147424][ T8627] ? __sys_socket+0x12c/0x1b0 [ 418.147454][ T8627] __sys_socket+0x13d/0x1b0 [ 418.147486][ T8627] __x64_sys_socket+0x7a/0x90 [ 418.147521][ T8627] do_syscall_64+0xfa/0x3b0 [ 418.147544][ T8627] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.147575][ T8627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.147599][ T8627] ? clear_bhb_loop+0x60/0xb0 [ 418.147618][ T8627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.147632][ T8627] RIP: 0033:0x7fa0d3b8e929 [ 418.147647][ T8627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.147659][ T8627] RSP: 002b:00007fa0d4a32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 418.147677][ T8627] RAX: ffffffffffffffda RBX: 00007fa0d3db5fa0 RCX: 00007fa0d3b8e929 [ 418.147688][ T8627] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 418.147696][ T8627] RBP: 00007fa0d4a32090 R08: 0000000000000000 R09: 0000000000000000 [ 418.147706][ T8627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.147715][ T8627] R13: 0000000000000000 R14: 00007fa0d3db5fa0 R15: 00007ffd2c726468 [ 418.147741][ T8627] [ 418.383964][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.577101][ T8632] netlink: 388 bytes leftover after parsing attributes in process `syz.5.671'. [ 418.684055][ T8630] delete_channel: no stack [ 419.081864][ T8646] FAULT_INJECTION: forcing a failure. [ 419.081864][ T8646] name failslab, interval 1, probability 0, space 0, times 0 [ 419.157530][ T8646] CPU: 1 UID: 0 PID: 8646 Comm: syz.0.675 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 419.157557][ T8646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.157567][ T8646] Call Trace: [ 419.157575][ T8646] [ 419.157582][ T8646] dump_stack_lvl+0x189/0x250 [ 419.157612][ T8646] ? __pfx____ratelimit+0x10/0x10 [ 419.157638][ T8646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.157664][ T8646] ? __pfx__printk+0x10/0x10 [ 419.157690][ T8646] ? __pfx___might_resched+0x10/0x10 [ 419.157714][ T8646] ? fs_reclaim_acquire+0x7d/0x100 [ 419.157744][ T8646] should_fail_ex+0x414/0x560 [ 419.157771][ T8646] ? __pfx_sock_alloc_inode+0x10/0x10 [ 419.157796][ T8646] should_failslab+0xa8/0x100 [ 419.157820][ T8646] ? __pfx_sock_alloc_inode+0x10/0x10 [ 419.157842][ T8646] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 419.157864][ T8646] ? sock_alloc_inode+0x28/0xc0 [ 419.157893][ T8646] ? __pfx_sock_alloc_inode+0x10/0x10 [ 419.157916][ T8646] sock_alloc_inode+0x28/0xc0 [ 419.157939][ T8646] alloc_inode+0x6a/0x1b0 [ 419.157964][ T8646] __sock_create+0x12d/0x9f0 [ 419.158003][ T8646] udp_sock_create6+0xcb/0x690 [ 419.158032][ T8646] ? __pfx_udp_sock_create6+0x10/0x10 [ 419.158056][ T8646] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 419.158085][ T8646] ? l2tp_tunnel_register+0x4de/0x1320 [ 419.158112][ T8646] l2tp_tunnel_register+0x775/0x1320 [ 419.158149][ T8646] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 419.158195][ T8646] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 419.158219][ T8646] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.158245][ T8646] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 419.158268][ T8646] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 419.158303][ T8646] ? l2tp_tunnel_create+0x249/0x3e0 [ 419.158321][ T8646] ? l2tp_tunnel_create+0x2d3/0x3e0 [ 419.158346][ T8646] l2tp_nl_cmd_tunnel_create+0x331/0x950 [ 419.158380][ T8646] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 419.158415][ T8646] ? __nla_parse+0x40/0x60 [ 419.158444][ T8646] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 419.158479][ T8646] genl_family_rcv_msg_doit+0x212/0x300 [ 419.158512][ T8646] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 419.158553][ T8646] ? bpf_lsm_capable+0x9/0x20 [ 419.158577][ T8646] ? security_capable+0x7e/0x2e0 [ 419.158611][ T8646] genl_rcv_msg+0x60e/0x790 [ 419.158644][ T8646] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.158666][ T8646] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 419.158709][ T8646] netlink_rcv_skb+0x208/0x470 [ 419.158729][ T8646] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.158754][ T8646] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.158793][ T8646] ? down_read+0x1ad/0x2e0 [ 419.158813][ T8646] genl_rcv+0x28/0x40 [ 419.158833][ T8646] netlink_unicast+0x75b/0x8d0 [ 419.158864][ T8646] netlink_sendmsg+0x805/0xb30 [ 419.158889][ T8646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.158911][ T8646] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.158927][ T8646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.158942][ T8646] __sock_sendmsg+0x219/0x270 [ 419.158968][ T8646] ____sys_sendmsg+0x505/0x830 [ 419.158992][ T8646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.159017][ T8646] ? import_iovec+0x74/0xa0 [ 419.159034][ T8646] ___sys_sendmsg+0x21f/0x2a0 [ 419.159052][ T8646] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.159102][ T8646] ? __fget_files+0x2a/0x420 [ 419.159118][ T8646] ? __fget_files+0x3a0/0x420 [ 419.159145][ T8646] __x64_sys_sendmsg+0x19b/0x260 [ 419.159172][ T8646] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.159198][ T8646] ? __pfx_ksys_write+0x10/0x10 [ 419.159212][ T8646] ? rcu_is_watching+0x15/0xb0 [ 419.159235][ T8646] ? do_syscall_64+0xbe/0x3b0 [ 419.159258][ T8646] do_syscall_64+0xfa/0x3b0 [ 419.159276][ T8646] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.159293][ T8646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.159307][ T8646] ? clear_bhb_loop+0x60/0xb0 [ 419.159325][ T8646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.159338][ T8646] RIP: 0033:0x7fa5e2f8e929 [ 419.159351][ T8646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.159363][ T8646] RSP: 002b:00007fa5e3da2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.159380][ T8646] RAX: ffffffffffffffda RBX: 00007fa5e31b5fa0 RCX: 00007fa5e2f8e929 [ 419.159390][ T8646] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 419.159398][ T8646] RBP: 00007fa5e3da2090 R08: 0000000000000000 R09: 0000000000000000 [ 419.159407][ T8646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.159416][ T8646] R13: 0000000000000000 R14: 00007fa5e31b5fa0 R15: 00007ffef4b7dbd8 [ 419.159442][ T8646] [ 419.692986][ T8646] socket: no more sockets [ 420.266933][ T8654] netlink: 'syz.5.677': attribute type 12 has an invalid length. [ 420.286769][ T8654] netlink: 'syz.5.677': attribute type 29 has an invalid length. [ 420.296881][ T8654] netlink: 148 bytes leftover after parsing attributes in process `syz.5.677'. [ 420.316463][ T8654] netlink: 51 bytes leftover after parsing attributes in process `syz.5.677'. [ 421.760696][ T8671] CIFS mount error: No usable UNC path provided in device string! [ 421.760696][ T8671] [ 421.854027][ T8671] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 422.498123][ T30] audit: type=1326 audit(1750853099.730:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8664 comm="syz.0.681" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5e2f8e929 code=0x0 [ 422.966132][ T8688] (syz.4.684,8688,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 423.137675][ T8694] netlink: 388 bytes leftover after parsing attributes in process `syz.5.686'. [ 423.216607][ T8696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.247261][ T8696] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 423.393023][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 427.633860][ T30] audit: type=1326 audit(1750853104.960:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8724 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e0d8e929 code=0x7ffc0000 [ 427.960801][ T30] audit: type=1326 audit(1750853104.960:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8724 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e0d8e929 code=0x7ffc0000 [ 428.093187][ T30] audit: type=1326 audit(1750853104.960:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8724 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1e0d8e929 code=0x7ffc0000 [ 428.237417][ T30] audit: type=1326 audit(1750853104.960:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8724 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e0d8e929 code=0x7ffc0000 [ 428.272410][ T30] audit: type=1326 audit(1750853105.020:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8724 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e0d8e929 code=0x7ffc0000 [ 428.311631][ T8745] CIFS mount error: No usable UNC path provided in device string! [ 428.311631][ T8745] [ 428.504184][ T8745] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 428.889642][ T8752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.935705][ T30] audit: type=1326 audit(1750853106.260:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8738 comm="syz.1.699" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0d3b8e929 code=0x0 [ 430.396349][ T8770] netlink: 388 bytes leftover after parsing attributes in process `syz.3.706'. [ 430.778337][ T8780] FAULT_INJECTION: forcing a failure. [ 430.778337][ T8780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.811514][ T8780] CPU: 1 UID: 0 PID: 8780 Comm: syz.1.710 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 430.811542][ T8780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.811552][ T8780] Call Trace: [ 430.811559][ T8780] [ 430.811566][ T8780] dump_stack_lvl+0x189/0x250 [ 430.811596][ T8780] ? __pfx____ratelimit+0x10/0x10 [ 430.811623][ T8780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.811649][ T8780] ? __pfx__printk+0x10/0x10 [ 430.811684][ T8780] should_fail_ex+0x414/0x560 [ 430.811711][ T8780] _copy_to_user+0x31/0xb0 [ 430.811731][ T8780] simple_read_from_buffer+0xe1/0x170 [ 430.811759][ T8780] proc_fail_nth_read+0x1df/0x250 [ 430.811789][ T8780] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.811819][ T8780] ? rw_verify_area+0x258/0x650 [ 430.811839][ T8780] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.811867][ T8780] vfs_read+0x1fd/0x980 [ 430.811893][ T8780] ? __pfx___mutex_lock+0x10/0x10 [ 430.811918][ T8780] ? __pfx_vfs_read+0x10/0x10 [ 430.811940][ T8780] ? __fget_files+0x2a/0x420 [ 430.811968][ T8780] ? __fget_files+0x3a0/0x420 [ 430.811989][ T8780] ? __fget_files+0x2a/0x420 [ 430.812023][ T8780] ksys_read+0x145/0x250 [ 430.812047][ T8780] ? __pfx_ksys_read+0x10/0x10 [ 430.812063][ T8780] ? rcu_is_watching+0x15/0xb0 [ 430.812096][ T8780] ? do_syscall_64+0xbe/0x3b0 [ 430.812127][ T8780] do_syscall_64+0xfa/0x3b0 [ 430.812151][ T8780] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.812176][ T8780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.812195][ T8780] ? clear_bhb_loop+0x60/0xb0 [ 430.812218][ T8780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.812236][ T8780] RIP: 0033:0x7fa0d3b8d33c [ 430.812254][ T8780] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 430.812270][ T8780] RSP: 002b:00007fa0d4a32030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 430.812290][ T8780] RAX: ffffffffffffffda RBX: 00007fa0d3db5fa0 RCX: 00007fa0d3b8d33c [ 430.812314][ T8780] RDX: 000000000000000f RSI: 00007fa0d4a320a0 RDI: 0000000000000004 [ 430.812325][ T8780] RBP: 00007fa0d4a32090 R08: 0000000000000000 R09: 0000000000000000 [ 430.812336][ T8780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.812347][ T8780] R13: 0000000000000000 R14: 00007fa0d3db5fa0 R15: 00007ffd2c726468 [ 430.812380][ T8780] [ 432.303428][ T8791] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 434.365958][ T5820] Bluetooth: hci0: command 0x0401 tx timeout [ 434.440145][ T8812] xt_hashlimit: max too large, truncated to 1048576 [ 434.521773][ T8812] netlink: 'syz.3.719': attribute type 10 has an invalid length. [ 434.813938][ T8815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.849148][ T8815] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 434.985414][ T8812] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 435.059562][ T8824] netlink: 388 bytes leftover after parsing attributes in process `syz.5.722'. [ 435.242896][ T8829] netlink: 'syz.3.724': attribute type 1 has an invalid length. [ 435.294438][ T8829] netlink: 144 bytes leftover after parsing attributes in process `syz.3.724'. [ 435.349221][ T8829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.724'. [ 435.438676][ T8832] netlink: 76 bytes leftover after parsing attributes in process `syz.4.725'. [ 435.507213][ T8837] netlink: 40 bytes leftover after parsing attributes in process `syz.4.725'. [ 436.019900][ T8853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.046222][ T8853] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 436.388902][ T8841] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 437.360089][ T8862] FAULT_INJECTION: forcing a failure. [ 437.360089][ T8862] name failslab, interval 1, probability 0, space 0, times 0 [ 437.373509][ T8862] CPU: 0 UID: 0 PID: 8862 Comm: syz.4.735 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 437.373537][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.373547][ T8862] Call Trace: [ 437.373555][ T8862] [ 437.373560][ T8862] dump_stack_lvl+0x189/0x250 [ 437.373581][ T8862] ? __pfx____ratelimit+0x10/0x10 [ 437.373598][ T8862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.373614][ T8862] ? __pfx__printk+0x10/0x10 [ 437.373629][ T8862] ? __pfx___might_resched+0x10/0x10 [ 437.373649][ T8862] should_fail_ex+0x414/0x560 [ 437.373666][ T8862] should_failslab+0xa8/0x100 [ 437.373681][ T8862] __kmalloc_noprof+0xcb/0x4f0 [ 437.373694][ T8862] ? security_sk_alloc+0x52/0x390 [ 437.373710][ T8862] security_sk_alloc+0x52/0x390 [ 437.373724][ T8862] sk_prot_alloc+0x101/0x220 [ 437.373740][ T8862] sk_alloc+0x3a/0x370 [ 437.373755][ T8862] inet6_create+0x7fd/0x12a0 [ 437.373765][ T8862] ? inet6_create+0x71/0x12a0 [ 437.373780][ T8862] __sock_create+0x4b0/0x9f0 [ 437.373802][ T8862] mptcp_subflow_create_socket+0xfd/0xb40 [ 437.373815][ T8862] ? preempt_schedule_irq+0xb5/0x150 [ 437.373833][ T8862] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 437.373844][ T8862] ? irqentry_exit+0x74/0x90 [ 437.373864][ T8862] __mptcp_nmpc_sk+0x148/0x750 [ 437.373878][ T8862] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 437.373893][ T8862] ? preempt_schedule_irq+0xde/0x150 [ 437.373907][ T8862] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 437.373924][ T8862] mptcp_connect+0x70/0xc10 [ 437.373943][ T8862] __inet_stream_connect+0x298/0xf10 [ 437.373961][ T8862] ? inet_stream_connect+0x51/0xa0 [ 437.373982][ T8862] ? __pfx___inet_stream_connect+0x10/0x10 [ 437.373996][ T8862] ? __local_bh_enable_ip+0x135/0x1c0 [ 437.374014][ T8862] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 437.374036][ T8862] inet_stream_connect+0x66/0xa0 [ 437.374055][ T8862] __sys_connect+0x313/0x440 [ 437.374066][ T8862] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 437.374087][ T8862] ? __pfx___sys_connect+0x10/0x10 [ 437.374113][ T8862] __x64_sys_connect+0x7a/0x90 [ 437.374125][ T8862] do_syscall_64+0xfa/0x3b0 [ 437.374142][ T8862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.374152][ T8862] ? asm_sysvec_call_function_single+0x1a/0x20 [ 437.374162][ T8862] ? clear_bhb_loop+0x60/0xb0 [ 437.374175][ T8862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.374186][ T8862] RIP: 0033:0x7ff1e0d8e929 [ 437.374197][ T8862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.374206][ T8862] RSP: 002b:00007ff1e1b7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 437.374219][ T8862] RAX: ffffffffffffffda RBX: 00007ff1e0fb6080 RCX: 00007ff1e0d8e929 [ 437.374226][ T8862] RDX: 000000000000001c RSI: 0000200000000180 RDI: 000000000000000b [ 437.374234][ T8862] RBP: 00007ff1e1b7d090 R08: 0000000000000000 R09: 0000000000000000 [ 437.374241][ T8862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.374247][ T8862] R13: 0000000000000000 R14: 00007ff1e0fb6080 R15: 00007fff6ca629f8 [ 437.374265][ T8862] [ 437.776621][ T5820] Bluetooth: hci0: command 0x0401 tx timeout [ 439.136506][ T8875] netlink: 388 bytes leftover after parsing attributes in process `syz.4.737'. [ 439.164548][ T8873] loop5: detected capacity change from 0 to 14 [ 439.208526][ T8873] Dev loop5: unable to read RDB block 14 [ 439.231490][ T8873] loop5: AHDI p3 p4 [ 439.276050][ T8879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.739'. [ 439.287337][ T8873] loop5: partition table partially beyond EOD, truncated [ 439.322571][ T8873] loop5: p3 start 1886353253 is beyond EOD, truncated [ 439.338934][ T8882] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 439.509739][ T8885] input: syz1 as /devices/virtual/input/input9 [ 439.888960][ T8894] warning: `syz.4.744' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 439.920062][ T8894] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 440.431711][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.438091][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.582659][ T5877] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 440.594853][ T979] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 441.063405][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 441.119272][ T979] usb 4-1: config 0 has an invalid interface number: 187 but max is 0 [ 441.217579][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.247645][ T979] usb 4-1: config 0 has no interface number 0 [ 441.260338][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.274465][ T979] usb 4-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 441.334895][ T5877] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 441.344898][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.356600][ T979] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 441.373480][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.403917][ T979] usb 4-1: Product: syz [ 441.408345][ T979] usb 4-1: Manufacturer: syz [ 441.414590][ T5877] usb 1-1: config 0 descriptor?? [ 441.420178][ T979] usb 4-1: SerialNumber: syz [ 441.441143][ T979] usb 4-1: config 0 descriptor?? [ 441.464498][ T8903] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 442.034720][ T5956] usb 4-1: USB disconnect, device number 12 [ 442.237789][ T8902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.264589][ T6631] wlan1: Trigger new scan to find an IBSS to join [ 442.394222][ T8902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.579128][ T5877] usbhid 1-1:0.0: can't add hid device: -71 [ 442.585436][ T5877] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 442.596213][ T5877] usb 1-1: USB disconnect, device number 11 [ 444.792594][ T8944] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.758'. [ 445.913517][ T8951] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 446.091582][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 446.930092][ T6609] wlan1: Trigger new scan to find an IBSS to join [ 446.995381][ T8956] FAULT_INJECTION: forcing a failure. [ 446.995381][ T8956] name failslab, interval 1, probability 0, space 0, times 0 [ 447.012384][ T8956] CPU: 1 UID: 0 PID: 8956 Comm: syz.4.759 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 447.012411][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 447.012422][ T8956] Call Trace: [ 447.012429][ T8956] [ 447.012438][ T8956] dump_stack_lvl+0x189/0x250 [ 447.012470][ T8956] ? __pfx____ratelimit+0x10/0x10 [ 447.012497][ T8956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.012524][ T8956] ? __pfx__printk+0x10/0x10 [ 447.012551][ T8956] ? __pfx___might_resched+0x10/0x10 [ 447.012575][ T8956] ? fs_reclaim_acquire+0x7d/0x100 [ 447.012606][ T8956] should_fail_ex+0x414/0x560 [ 447.012635][ T8956] should_failslab+0xa8/0x100 [ 447.012660][ T8956] kmem_cache_alloc_noprof+0x73/0x3c0 [ 447.012680][ T8956] ? vm_area_dup+0x2b/0x680 [ 447.012710][ T8956] vm_area_dup+0x2b/0x680 [ 447.012739][ T8956] __split_vma+0x1a9/0xa00 [ 447.012771][ T8956] ? __pfx___split_vma+0x10/0x10 [ 447.012799][ T8956] ? __pfx_find_vma+0x10/0x10 [ 447.012835][ T8956] vma_modify+0x13b3/0x1970 [ 447.012855][ T8956] ? vma_modify+0x40/0x1970 [ 447.012891][ T8956] vma_modify_policy+0x1e8/0x230 [ 447.012913][ T8956] ? __pfx_vma_modify_policy+0x10/0x10 [ 447.012959][ T8956] mbind_range+0x2bb/0x800 [ 447.012983][ T8956] ? mas_find+0x9e7/0xc10 [ 447.013013][ T8956] __se_sys_mbind+0x730/0xc30 [ 447.013033][ T8956] ? __pfx_vfs_write+0x10/0x10 [ 447.013059][ T8956] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 447.013088][ T8956] ? __pfx___se_sys_mbind+0x10/0x10 [ 447.013132][ T8956] ? rcu_is_watching+0x15/0xb0 [ 447.013165][ T8956] ? __x64_sys_mbind+0x21/0xf0 [ 447.013190][ T8956] do_syscall_64+0xfa/0x3b0 [ 447.013215][ T8956] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.013240][ T8956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.013267][ T8956] ? clear_bhb_loop+0x60/0xb0 [ 447.013290][ T8956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.013307][ T8956] RIP: 0033:0x7ff1e0d8e929 [ 447.013325][ T8956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.013339][ T8956] RSP: 002b:00007ff1e1b9e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 447.013360][ T8956] RAX: ffffffffffffffda RBX: 00007ff1e0fb5fa0 RCX: 00007ff1e0d8e929 [ 447.013372][ T8956] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 00002000005f7000 [ 447.013383][ T8956] RBP: 00007ff1e1b9e090 R08: 0000000000000000 R09: 0000000000000000 [ 447.013394][ T8956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.013405][ T8956] R13: 0000000000000000 R14: 00007ff1e0fb5fa0 R15: 00007fff6ca629f8 [ 447.013437][ T8956] [ 448.895732][ T6609] wlan1: Creating new IBSS network, BSSID de:d7:ee:5e:ea:7c [ 449.117947][ T8986] tipc: Started in network mode [ 449.123947][ T8986] tipc: Node identity ., cluster identity 4711 [ 449.130321][ T8986] tipc: Enabling of bearer rejected, failed to enable media [ 449.773364][ T8994] FAULT_INJECTION: forcing a failure. [ 449.773364][ T8994] name failslab, interval 1, probability 0, space 0, times 0 [ 449.806205][ T8994] CPU: 0 UID: 0 PID: 8994 Comm: syz.0.771 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 449.806235][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 449.806246][ T8994] Call Trace: [ 449.806253][ T8994] [ 449.806262][ T8994] dump_stack_lvl+0x189/0x250 [ 449.806300][ T8994] ? __pfx____ratelimit+0x10/0x10 [ 449.806327][ T8994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.806353][ T8994] ? __pfx__printk+0x10/0x10 [ 449.806379][ T8994] ? ref_tracker_alloc+0x318/0x460 [ 449.806407][ T8994] should_fail_ex+0x414/0x560 [ 449.806435][ T8994] should_failslab+0xa8/0x100 [ 449.806462][ T8994] kmem_cache_alloc_noprof+0x73/0x3c0 [ 449.806483][ T8994] ? skb_clone+0x212/0x3a0 [ 449.806511][ T8994] skb_clone+0x212/0x3a0 [ 449.806539][ T8994] __netlink_deliver_tap+0x404/0x850 [ 449.806574][ T8994] ? netlink_deliver_tap+0x2e/0x1b0 [ 449.806597][ T8994] netlink_deliver_tap+0x19c/0x1b0 [ 449.806619][ T8994] netlink_unicast+0x72f/0x8d0 [ 449.806661][ T8994] netlink_sendmsg+0x805/0xb30 [ 449.806693][ T8994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.806724][ T8994] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.806745][ T8994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.806767][ T8994] __sock_sendmsg+0x219/0x270 [ 449.806797][ T8994] ____sys_sendmsg+0x505/0x830 [ 449.806827][ T8994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.806860][ T8994] ? import_iovec+0x74/0xa0 [ 449.806882][ T8994] ___sys_sendmsg+0x21f/0x2a0 [ 449.806907][ T8994] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.806972][ T8994] ? __fget_files+0x2a/0x420 [ 449.806995][ T8994] ? __fget_files+0x3a0/0x420 [ 449.807029][ T8994] __x64_sys_sendmsg+0x19b/0x260 [ 449.807054][ T8994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.807088][ T8994] ? __pfx_ksys_write+0x10/0x10 [ 449.807106][ T8994] ? rcu_is_watching+0x15/0xb0 [ 449.807138][ T8994] ? do_syscall_64+0xbe/0x3b0 [ 449.807177][ T8994] do_syscall_64+0xfa/0x3b0 [ 449.807201][ T8994] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.807226][ T8994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.807244][ T8994] ? clear_bhb_loop+0x60/0xb0 [ 449.807268][ T8994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.807285][ T8994] RIP: 0033:0x7fa5e2f8e929 [ 449.807302][ T8994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.807319][ T8994] RSP: 002b:00007fa5e3da2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.807340][ T8994] RAX: ffffffffffffffda RBX: 00007fa5e31b5fa0 RCX: 00007fa5e2f8e929 [ 449.807354][ T8994] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 449.807366][ T8994] RBP: 00007fa5e3da2090 R08: 0000000000000000 R09: 0000000000000000 [ 449.807378][ T8994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.807389][ T8994] R13: 0000000000000000 R14: 00007fa5e31b5fa0 R15: 00007ffef4b7dbd8 [ 449.807421][ T8994] [ 450.962021][ T5956] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 451.696814][ T9011] netlink: 40 bytes leftover after parsing attributes in process `syz.0.778'. [ 451.758023][ T5956] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 451.783130][ T5956] usb 6-1: can't read configurations, error -71 [ 454.367992][ T9036] FAULT_INJECTION: forcing a failure. [ 454.367992][ T9036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.997947][ T9036] CPU: 1 UID: 0 PID: 9036 Comm: syz.4.785 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 454.997971][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 454.997977][ T9036] Call Trace: [ 454.997982][ T9036] [ 454.997987][ T9036] dump_stack_lvl+0x189/0x250 [ 454.998009][ T9036] ? __pfx____ratelimit+0x10/0x10 [ 454.998027][ T9036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.998045][ T9036] ? __pfx__printk+0x10/0x10 [ 454.998056][ T9036] ? __might_fault+0xb0/0x130 [ 454.998077][ T9036] should_fail_ex+0x414/0x560 [ 454.998094][ T9036] _copy_from_iter+0x1db/0x16f0 [ 454.998116][ T9036] ? rcu_is_watching+0x15/0xb0 [ 454.998134][ T9036] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 454.998149][ T9036] ? __pfx__copy_from_iter+0x10/0x10 [ 454.998166][ T9036] ? __build_skb_around+0x257/0x3e0 [ 454.998180][ T9036] ? netlink_sendmsg+0x642/0xb30 [ 454.998192][ T9036] ? skb_put+0x11b/0x210 [ 454.998205][ T9036] netlink_sendmsg+0x6b2/0xb30 [ 454.998223][ T9036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.998243][ T9036] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.998255][ T9036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.998268][ T9036] __sock_sendmsg+0x219/0x270 [ 454.998286][ T9036] ____sys_sendmsg+0x505/0x830 [ 454.998303][ T9036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.998321][ T9036] ? import_iovec+0x74/0xa0 [ 454.998333][ T9036] ___sys_sendmsg+0x21f/0x2a0 [ 454.998348][ T9036] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.998382][ T9036] ? __fget_files+0x2a/0x420 [ 454.998396][ T9036] ? __fget_files+0x3a0/0x420 [ 454.998417][ T9036] __x64_sys_sendmsg+0x19b/0x260 [ 454.998432][ T9036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 454.998450][ T9036] ? __pfx_ksys_write+0x10/0x10 [ 454.998462][ T9036] ? rcu_is_watching+0x15/0xb0 [ 454.998481][ T9036] ? do_syscall_64+0xbe/0x3b0 [ 454.998498][ T9036] do_syscall_64+0xfa/0x3b0 [ 454.998513][ T9036] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.998529][ T9036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.998540][ T9036] ? clear_bhb_loop+0x60/0xb0 [ 454.998553][ T9036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.998563][ T9036] RIP: 0033:0x7ff1e0d8e929 [ 454.998574][ T9036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.998583][ T9036] RSP: 002b:00007ff1e1b9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.998597][ T9036] RAX: ffffffffffffffda RBX: 00007ff1e0fb5fa0 RCX: 00007ff1e0d8e929 [ 454.998605][ T9036] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 454.998611][ T9036] RBP: 00007ff1e1b9e090 R08: 0000000000000000 R09: 0000000000000000 [ 454.998618][ T9036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.998624][ T9036] R13: 0000000000000000 R14: 00007ff1e0fb5fa0 R15: 00007fff6ca629f8 [ 454.998641][ T9036] [ 455.545473][ T5820] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 457.185051][ T5820] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 459.815127][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.800'. [ 460.135097][ T9082] futex_wake_op: syz.3.800 tries to shift op by 32; fix this program [ 461.276771][ T9088] random: crng reseeded on system resumption [ 461.661897][ T9094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.780306][ T9101] FAULT_INJECTION: forcing a failure. [ 461.780306][ T9101] name failslab, interval 1, probability 0, space 0, times 0 [ 461.808689][ T9101] CPU: 1 UID: 0 PID: 9101 Comm: syz.3.806 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 461.808718][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 461.808729][ T9101] Call Trace: [ 461.808736][ T9101] [ 461.808745][ T9101] dump_stack_lvl+0x189/0x250 [ 461.808777][ T9101] ? __pfx____ratelimit+0x10/0x10 [ 461.808803][ T9101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.808827][ T9101] ? __pfx__printk+0x10/0x10 [ 461.808853][ T9101] ? ref_tracker_alloc+0x318/0x460 [ 461.808880][ T9101] should_fail_ex+0x414/0x560 [ 461.808904][ T9101] should_failslab+0xa8/0x100 [ 461.808928][ T9101] kmem_cache_alloc_noprof+0x73/0x3c0 [ 461.808949][ T9101] ? skb_clone+0x212/0x3a0 [ 461.808975][ T9101] skb_clone+0x212/0x3a0 [ 461.809002][ T9101] __netlink_deliver_tap+0x404/0x850 [ 461.809039][ T9101] ? netlink_deliver_tap+0x2e/0x1b0 [ 461.809061][ T9101] netlink_deliver_tap+0x19c/0x1b0 [ 461.809092][ T9101] netlink_unicast+0x72f/0x8d0 [ 461.809133][ T9101] netlink_sendmsg+0x805/0xb30 [ 461.809166][ T9101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.809197][ T9101] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 461.809219][ T9101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.809241][ T9101] __sock_sendmsg+0x219/0x270 [ 461.809273][ T9101] ____sys_sendmsg+0x505/0x830 [ 461.809303][ T9101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.809337][ T9101] ? import_iovec+0x74/0xa0 [ 461.809366][ T9101] ___sys_sendmsg+0x21f/0x2a0 [ 461.809392][ T9101] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.809458][ T9101] ? __fget_files+0x2a/0x420 [ 461.809481][ T9101] ? __fget_files+0x3a0/0x420 [ 461.809518][ T9101] __x64_sys_sendmsg+0x19b/0x260 [ 461.809544][ T9101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.809577][ T9101] ? __pfx_ksys_write+0x10/0x10 [ 461.809595][ T9101] ? rcu_is_watching+0x15/0xb0 [ 461.809626][ T9101] ? do_syscall_64+0xbe/0x3b0 [ 461.809657][ T9101] do_syscall_64+0xfa/0x3b0 [ 461.809687][ T9101] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.809712][ T9101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.809731][ T9101] ? clear_bhb_loop+0x60/0xb0 [ 461.809754][ T9101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.809772][ T9101] RIP: 0033:0x7f7ef918e929 [ 461.809790][ T9101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.809807][ T9101] RSP: 002b:00007f7efa018038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.809827][ T9101] RAX: ffffffffffffffda RBX: 00007f7ef93b5fa0 RCX: 00007f7ef918e929 [ 461.809841][ T9101] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 461.809853][ T9101] RBP: 00007f7efa018090 R08: 0000000000000000 R09: 0000000000000000 [ 461.809865][ T9101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.809876][ T9101] R13: 0000000000000000 R14: 00007f7ef93b5fa0 R15: 00007fff9f388448 [ 461.809909][ T9101] [ 463.029328][ T976] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 463.583914][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.587496][ T9103] netlink: 40 bytes leftover after parsing attributes in process `syz.0.802'. [ 464.099624][ T976] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 464.141536][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.169343][ T976] usb 2-1: config 0 descriptor?? [ 466.055951][ T976] usbhid 2-1:0.0: can't add hid device: -71 [ 466.080452][ T976] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 466.139802][ T976] usb 2-1: USB disconnect, device number 8 [ 466.200499][ T9136] netlink: 'syz.0.817': attribute type 3 has an invalid length. [ 466.208703][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 466.219123][ T9136] netlink: 'syz.0.817': attribute type 3 has an invalid length. [ 466.249864][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 466.344881][ T9144] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.820'. [ 469.238236][ T30] audit: type=1326 audit(1750853146.570:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.5.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fcf8e929 code=0x7ffc0000 [ 469.288336][ T30] audit: type=1326 audit(1750853146.570:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.5.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fcf8e929 code=0x7ffc0000 [ 469.342799][ T30] audit: type=1326 audit(1750853146.570:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.5.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f96fcf8e929 code=0x7ffc0000 [ 469.367636][ T30] audit: type=1326 audit(1750853146.570:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.5.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fcf8e929 code=0x7ffc0000 [ 469.525959][ T30] audit: type=1326 audit(1750853146.570:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.5.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fcf8e929 code=0x7ffc0000 [ 469.548817][ T30] audit: type=1326 audit(1750853146.570:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.5.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96fcf8e929 code=0x7ffc0000 [ 469.570447][ T30] audit: type=1326 audit(1750853146.570:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.5.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fcf8e929 code=0x7ffc0000 [ 469.604971][ T30] audit: type=1326 audit(1750853146.570:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.5.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f96fcf8e929 code=0x7ffc0000 [ 469.629631][ T30] audit: type=1326 audit(1750853146.570:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.5.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fcf8e929 code=0x7ffc0000 [ 469.652905][ T30] audit: type=1326 audit(1750853146.570:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.5.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f96fcf8e929 code=0x7ffc0000 [ 470.752637][ T9182] ptrace attach of "./syz-executor exec"[5817] was attempted by ""[9182] [ 474.221597][ T976] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 474.443559][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 474.534414][ T976] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 474.571640][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.750937][ T976] usb 5-1: Product: syz [ 474.756953][ T976] usb 5-1: Manufacturer: syz [ 474.762018][ T976] usb 5-1: SerialNumber: syz [ 474.770396][ T976] usb 5-1: config 0 descriptor?? [ 474.808567][ T9207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.825754][ T9207] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 475.227978][ T976] airspy 5-1:0.0: Board ID: 00 [ 475.264116][ T976] airspy 5-1:0.0: Firmware version: [ 475.991894][ T9210] ALSA: mixer_oss: invalid OSS volume 'pTG8\>Pxi9 h~' [ 475.999815][ T9210] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 476.008256][ T9210] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 476.016683][ T9210] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 476.025141][ T9210] ALSA: mixer_oss: invalid OSS volume '"P޸ۜo[8>7|YMepq' [ 476.033652][ T9210] ALSA: mixer_oss: invalid OSS volume 'wI׷#t\W,bP=&e' [ 476.043269][ T9210] ALSA: mixer_oss: invalid OSS volume ']za-!)ϻvCYps' [ 476.051745][ T9210] ALSA: mixer_oss: invalid OSS volume 'LE]Dxt݂OY3fk$T "' [ 476.060126][ T9210] ALSA: mixer_oss: invalid OSS volume '[' [ 476.066195][ T9210] ALSA: mixer_oss: invalid OSS volume '3A14IN+|\' [ 476.073400][ T9210] ALSA: mixer_oss: invalid OSS volume '$ [ 488.932033][ T9369] dump_stack_lvl+0x189/0x250 [ 488.932066][ T9369] ? __pfx____ratelimit+0x10/0x10 [ 488.932093][ T9369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.932120][ T9369] ? __pfx__printk+0x10/0x10 [ 488.932145][ T9369] ? __pfx___might_resched+0x10/0x10 [ 488.932171][ T9369] ? fs_reclaim_acquire+0x7d/0x100 [ 488.932202][ T9369] should_fail_ex+0x414/0x560 [ 488.932227][ T9369] should_failslab+0xa8/0x100 [ 488.932251][ T9369] kmem_cache_alloc_noprof+0x73/0x3c0 [ 488.932269][ T9369] ? alloc_file_pseudo_noaccount+0x144/0x2c0 [ 488.932299][ T9369] alloc_file_pseudo_noaccount+0x144/0x2c0 [ 488.932330][ T9369] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 488.932375][ T9369] bdev_file_open_by_dev+0x181/0x240 [ 488.932406][ T9369] disk_scan_partitions+0x1c1/0x2c0 [ 488.932438][ T9369] blkdev_common_ioctl+0x159a/0x2450 [ 488.932463][ T9369] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 488.932486][ T9369] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 488.932508][ T9369] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 488.932530][ T9369] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 488.932549][ T9369] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 488.932572][ T9369] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 488.932615][ T9369] ? __lock_acquire+0xab9/0xd20 [ 488.932640][ T9369] ? __asan_memset+0x22/0x50 [ 488.932654][ T9369] ? smack_file_ioctl+0x24a/0x340 [ 488.932677][ T9369] ? __pfx_smack_file_ioctl+0x10/0x10 [ 488.932706][ T9369] blkdev_ioctl+0x4ef/0x6d0 [ 488.932733][ T9369] ? __pfx_blkdev_ioctl+0x10/0x10 [ 488.932754][ T9369] ? __fget_files+0x2a/0x420 [ 488.932780][ T9369] ? bpf_lsm_file_ioctl+0x9/0x20 [ 488.932823][ T9369] ? __pfx_blkdev_ioctl+0x10/0x10 [ 488.932853][ T9369] __se_sys_ioctl+0xf9/0x170 [ 488.932876][ T9369] do_syscall_64+0xfa/0x3b0 [ 488.932907][ T9369] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.932932][ T9369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.932951][ T9369] ? clear_bhb_loop+0x60/0xb0 [ 488.932972][ T9369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.932991][ T9369] RIP: 0033:0x7fa0d3b8e929 [ 488.933008][ T9369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.933024][ T9369] RSP: 002b:00007fa0d4a32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.933042][ T9369] RAX: ffffffffffffffda RBX: 00007fa0d3db5fa0 RCX: 00007fa0d3b8e929 [ 488.933054][ T9369] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 488.933064][ T9369] RBP: 00007fa0d4a32090 R08: 0000000000000000 R09: 0000000000000000 [ 488.933074][ T9369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.933084][ T9369] R13: 0000000000000000 R14: 00007fa0d3db5fa0 R15: 00007ffd2c726468 [ 488.933114][ T9369] [ 489.743947][ T5836] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 489.759130][ T9363] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 490.735583][ T5836] Bluetooth: hci0: command 0x0401 tx timeout [ 490.975201][ T9393] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 491.180713][ T9393] nvme_fabrics: unknown parameter or missing value 'Zi*3zwxAaguWK9d3!mcʞPV KJyŝ7e1' in ctrl creation request [ 494.573540][ T9414] FAULT_INJECTION: forcing a failure. [ 494.573540][ T9414] name failslab, interval 1, probability 0, space 0, times 0 [ 494.586468][ T9414] CPU: 1 UID: 0 PID: 9414 Comm: syz.3.901 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 494.586493][ T9414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 494.586504][ T9414] Call Trace: [ 494.586512][ T9414] [ 494.586521][ T9414] dump_stack_lvl+0x189/0x250 [ 494.586561][ T9414] ? __pfx____ratelimit+0x10/0x10 [ 494.586587][ T9414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.586614][ T9414] ? __pfx__printk+0x10/0x10 [ 494.586637][ T9414] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 494.586673][ T9414] should_fail_ex+0x414/0x560 [ 494.586701][ T9414] should_failslab+0xa8/0x100 [ 494.586725][ T9414] ? __pfx_ip6_dst_gc+0x10/0x10 [ 494.586752][ T9414] kmem_cache_alloc_noprof+0x73/0x3c0 [ 494.586773][ T9414] ? dst_alloc+0x105/0x170 [ 494.586796][ T9414] ? __pfx_ip6_dst_gc+0x10/0x10 [ 494.586823][ T9414] dst_alloc+0x105/0x170 [ 494.586852][ T9414] ip6_pol_route+0xa21/0x1180 [ 494.586871][ T9414] ? ip6_pol_route+0x162/0x1180 [ 494.586894][ T9414] ? __pfx_ip6_pol_route+0x10/0x10 [ 494.586910][ T9414] ? ip6_addr_string+0x246/0x2e0 [ 494.586938][ T9414] ? __pfx_ip6_addr_string+0x10/0x10 [ 494.586975][ T9414] fib6_rule_lookup+0x1fc/0x6f0 [ 494.586996][ T9414] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 494.587017][ T9414] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 494.587062][ T9414] ip6_route_output_flags+0x364/0x5d0 [ 494.587082][ T9414] ? ip6_route_output_flags+0x2e/0x5d0 [ 494.587105][ T9414] ip6_dst_lookup_tail+0x1ae/0x1510 [ 494.587143][ T9414] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 494.587177][ T9414] ? l2tp_ip6_sendmsg+0x9d1/0x17c0 [ 494.587206][ T9414] ip6_dst_lookup_flow+0x47/0xe0 [ 494.587233][ T9414] l2tp_ip6_sendmsg+0xfc6/0x17c0 [ 494.587251][ T9414] ? smack_ipv6host_label+0x824/0x8e0 [ 494.587277][ T9414] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 494.587316][ T9414] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 494.587332][ T9414] ? smack_socket_sendmsg+0x460/0x520 [ 494.587384][ T9414] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 494.587419][ T9414] ? inet_sendmsg+0x2f4/0x370 [ 494.587444][ T9414] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.587470][ T9414] __sock_sendmsg+0x19c/0x270 [ 494.587500][ T9414] ____sys_sendmsg+0x52d/0x830 [ 494.587539][ T9414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.587572][ T9414] ? import_iovec+0x74/0xa0 [ 494.587594][ T9414] ___sys_sendmsg+0x21f/0x2a0 [ 494.587619][ T9414] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.587682][ T9414] ? __fget_files+0x2a/0x420 [ 494.587704][ T9414] ? __fget_files+0x3a0/0x420 [ 494.587740][ T9414] __sys_sendmmsg+0x227/0x430 [ 494.587768][ T9414] ? __pfx___sys_sendmmsg+0x10/0x10 [ 494.587785][ T9414] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 494.587843][ T9414] ? ksys_write+0x22a/0x250 [ 494.587868][ T9414] ? __pfx_ksys_write+0x10/0x10 [ 494.587885][ T9414] ? rcu_is_watching+0x15/0xb0 [ 494.587918][ T9414] __x64_sys_sendmmsg+0xa0/0xc0 [ 494.587943][ T9414] do_syscall_64+0xfa/0x3b0 [ 494.587967][ T9414] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.587992][ T9414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.588011][ T9414] ? clear_bhb_loop+0x60/0xb0 [ 494.588035][ T9414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.588053][ T9414] RIP: 0033:0x7f7ef918e929 [ 494.588070][ T9414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.588086][ T9414] RSP: 002b:00007f7efa018038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 494.588108][ T9414] RAX: ffffffffffffffda RBX: 00007f7ef93b5fa0 RCX: 00007f7ef918e929 [ 494.588122][ T9414] RDX: 0000000000000001 RSI: 0000200000002a80 RDI: 0000000000000003 [ 494.588134][ T9414] RBP: 00007f7efa018090 R08: 0000000000000000 R09: 0000000000000000 [ 494.588145][ T9414] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000001 [ 494.588156][ T9414] R13: 0000000000000000 R14: 00007f7ef93b5fa0 R15: 00007fff9f388448 [ 494.588188][ T9414] [ 495.429003][ T9427] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 496.196274][ T9417] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 496.259614][ T9433] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 496.286955][ T9433] nvme_fabrics: unknown parameter or missing value 'Zi*3zwxAaguWK9d3!mcʞPV KJyŝ7e1' in ctrl creation request [ 496.348030][ T9435] FAULT_INJECTION: forcing a failure. [ 496.348030][ T9435] name failslab, interval 1, probability 0, space 0, times 0 [ 496.377301][ T9435] CPU: 0 UID: 0 PID: 9435 Comm: syz.4.909 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 496.377331][ T9435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.377342][ T9435] Call Trace: [ 496.377349][ T9435] [ 496.377358][ T9435] dump_stack_lvl+0x189/0x250 [ 496.377391][ T9435] ? __pfx____ratelimit+0x10/0x10 [ 496.377418][ T9435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.377444][ T9435] ? __pfx__printk+0x10/0x10 [ 496.377471][ T9435] ? __pfx___might_resched+0x10/0x10 [ 496.377493][ T9435] ? fs_reclaim_acquire+0x7d/0x100 [ 496.377524][ T9435] should_fail_ex+0x414/0x560 [ 496.377553][ T9435] should_failslab+0xa8/0x100 [ 496.377578][ T9435] __kmalloc_cache_noprof+0x70/0x3d0 [ 496.377600][ T9435] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 496.377633][ T9435] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 496.377674][ T9435] sctp_association_new+0x15d3/0x25f0 [ 496.377715][ T9435] sctp_connect_new_asoc+0x2c5/0x690 [ 496.377751][ T9435] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 496.377776][ T9435] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 496.377798][ T9435] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 496.377818][ T9435] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 496.377840][ T9435] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 496.377863][ T9435] ? security_sctp_bind_connect+0x7e/0x2e0 [ 496.377890][ T9435] sctp_sendmsg+0x155c/0x2810 [ 496.377927][ T9435] ? __pfx_sctp_sendmsg+0x10/0x10 [ 496.377948][ T9435] ? __lock_acquire+0xab9/0xd20 [ 496.377992][ T9435] ? sock_rps_record_flow+0x19/0x410 [ 496.378022][ T9435] ? inet_sendmsg+0x2f4/0x370 [ 496.378046][ T9435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 496.378072][ T9435] __sock_sendmsg+0x19c/0x270 [ 496.378103][ T9435] __sys_sendto+0x3bd/0x520 [ 496.378127][ T9435] ? __pfx___sys_sendto+0x10/0x10 [ 496.378144][ T9435] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 496.378186][ T9435] ? __fget_files+0x3a0/0x420 [ 496.378223][ T9435] ? ksys_write+0x22a/0x250 [ 496.378247][ T9435] ? __pfx_ksys_write+0x10/0x10 [ 496.378265][ T9435] ? rcu_is_watching+0x15/0xb0 [ 496.378297][ T9435] __x64_sys_sendto+0xde/0x100 [ 496.378322][ T9435] do_syscall_64+0xfa/0x3b0 [ 496.378346][ T9435] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.378371][ T9435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.378389][ T9435] ? clear_bhb_loop+0x60/0xb0 [ 496.378412][ T9435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.378430][ T9435] RIP: 0033:0x7ff1e0d8e929 [ 496.378447][ T9435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.378463][ T9435] RSP: 002b:00007ff1e1b9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 496.378484][ T9435] RAX: ffffffffffffffda RBX: 00007ff1e0fb5fa0 RCX: 00007ff1e0d8e929 [ 496.378497][ T9435] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 496.378509][ T9435] RBP: 00007ff1e1b9e090 R08: 0000200000000140 R09: 000000000000001c [ 496.378522][ T9435] R10: 000000000400c0d4 R11: 0000000000000246 R12: 0000000000000001 [ 496.378534][ T9435] R13: 0000000000000000 R14: 00007ff1e0fb5fa0 R15: 00007fff6ca629f8 [ 496.378567][ T9435] [ 496.690685][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.131951][ T5836] Bluetooth: hci0: command 0x0401 tx timeout [ 498.112420][ T9453] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.914'. [ 498.834106][ T9461] FAULT_INJECTION: forcing a failure. [ 498.834106][ T9461] name failslab, interval 1, probability 0, space 0, times 0 [ 498.867275][ T9461] CPU: 1 UID: 0 PID: 9461 Comm: syz.4.917 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 498.867303][ T9461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.867314][ T9461] Call Trace: [ 498.867322][ T9461] [ 498.867331][ T9461] dump_stack_lvl+0x189/0x250 [ 498.867362][ T9461] ? __pfx____ratelimit+0x10/0x10 [ 498.867396][ T9461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.867422][ T9461] ? __pfx__printk+0x10/0x10 [ 498.867448][ T9461] ? ref_tracker_alloc+0x318/0x460 [ 498.867474][ T9461] should_fail_ex+0x414/0x560 [ 498.867499][ T9461] should_failslab+0xa8/0x100 [ 498.867524][ T9461] kmem_cache_alloc_noprof+0x73/0x3c0 [ 498.867545][ T9461] ? skb_clone+0x212/0x3a0 [ 498.867592][ T9461] skb_clone+0x212/0x3a0 [ 498.867639][ T9461] __netlink_deliver_tap+0x404/0x850 [ 498.867697][ T9461] ? netlink_deliver_tap+0x2e/0x1b0 [ 498.867725][ T9461] netlink_deliver_tap+0x19c/0x1b0 [ 498.867755][ T9461] netlink_unicast+0x72f/0x8d0 [ 498.867813][ T9461] netlink_sendmsg+0x805/0xb30 [ 498.867845][ T9461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.867879][ T9461] ? __lock_acquire+0xab9/0xd20 [ 498.867906][ T9461] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 498.867927][ T9461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.867945][ T9461] __sock_sendmsg+0x219/0x270 [ 498.867973][ T9461] sock_write_iter+0x258/0x330 [ 498.868001][ T9461] ? __pfx_sock_write_iter+0x10/0x10 [ 498.868036][ T9461] ? bpf_lsm_file_permission+0x9/0x20 [ 498.868059][ T9461] ? security_file_permission+0x75/0x290 [ 498.868092][ T9461] vfs_write+0x54b/0xa90 [ 498.868119][ T9461] ? __pfx_sock_write_iter+0x10/0x10 [ 498.868142][ T9461] ? __pfx_vfs_write+0x10/0x10 [ 498.868172][ T9461] ? __fget_files+0x2a/0x420 [ 498.868204][ T9461] ksys_write+0x145/0x250 [ 498.868225][ T9461] ? __pfx_ksys_write+0x10/0x10 [ 498.868241][ T9461] ? rcu_is_watching+0x15/0xb0 [ 498.868270][ T9461] ? do_syscall_64+0xbe/0x3b0 [ 498.868297][ T9461] do_syscall_64+0xfa/0x3b0 [ 498.868319][ T9461] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.868343][ T9461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.868361][ T9461] ? clear_bhb_loop+0x60/0xb0 [ 498.868384][ T9461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.868401][ T9461] RIP: 0033:0x7ff1e0d8e929 [ 498.868419][ T9461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.868435][ T9461] RSP: 002b:00007ff1e1b9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 498.868456][ T9461] RAX: ffffffffffffffda RBX: 00007ff1e0fb5fa0 RCX: 00007ff1e0d8e929 [ 498.868470][ T9461] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 498.868480][ T9461] RBP: 00007ff1e1b9e090 R08: 0000000000000000 R09: 0000000000000000 [ 498.868491][ T9461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.868501][ T9461] R13: 0000000000000000 R14: 00007ff1e0fb5fa0 R15: 00007fff6ca629f8 [ 498.868533][ T9461] [ 499.256188][ T9471] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 499.270384][ T9471] nvme_fabrics: unknown parameter or missing value 'Zi*3zwxAaguWK9d3!mcʞPV KJyŝ7e1' in ctrl creation request [ 500.046158][ T9466] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 500.372162][ T9481] FAULT_INJECTION: forcing a failure. [ 500.372162][ T9481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.391561][ T9481] CPU: 1 UID: 0 PID: 9481 Comm: syz.3.923 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 500.391592][ T9481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 500.391603][ T9481] Call Trace: [ 500.391611][ T9481] [ 500.391619][ T9481] dump_stack_lvl+0x189/0x250 [ 500.391652][ T9481] ? __pfx____ratelimit+0x10/0x10 [ 500.391677][ T9481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.391711][ T9481] ? __pfx__printk+0x10/0x10 [ 500.391730][ T9481] ? __might_fault+0xb0/0x130 [ 500.391764][ T9481] should_fail_ex+0x414/0x560 [ 500.391792][ T9481] _copy_from_user+0x2d/0xb0 [ 500.391811][ T9481] binder_ioctl_write_read+0xa61/0xa000 [ 500.391849][ T9481] ? is_bpf_text_address+0x26/0x2b0 [ 500.391884][ T9481] ? kernel_text_address+0xa5/0xe0 [ 500.391911][ T9481] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 500.391947][ T9481] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 500.391967][ T9481] ? stack_trace_save+0x9c/0xe0 [ 500.391988][ T9481] ? stack_depot_save_flags+0x40/0x900 [ 500.392021][ T9481] ? kasan_save_track+0x4f/0x80 [ 500.392039][ T9481] ? kasan_save_track+0x3e/0x80 [ 500.392055][ T9481] ? kasan_save_free_info+0x46/0x50 [ 500.392077][ T9481] ? __kasan_slab_free+0x62/0x70 [ 500.392094][ T9481] ? kfree+0x18e/0x440 [ 500.392112][ T9481] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 500.392132][ T9481] ? security_file_ioctl+0xcb/0x2d0 [ 500.392152][ T9481] ? __se_sys_ioctl+0x47/0x170 [ 500.392167][ T9481] ? do_syscall_64+0xfa/0x3b0 [ 500.392189][ T9481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.392228][ T9481] ? __pfx_binder_debug+0x10/0x10 [ 500.392246][ T9481] ? do_raw_spin_lock+0x121/0x290 [ 500.392284][ T9481] ? _raw_spin_unlock+0x28/0x50 [ 500.392306][ T9481] ? binder_get_thread+0x178/0x6d0 [ 500.392350][ T9481] binder_ioctl+0x3e0/0x19c0 [ 500.392370][ T9481] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 500.392394][ T9481] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 500.392417][ T9481] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 500.392437][ T9481] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 500.392459][ T9481] ? __pfx_binder_ioctl+0x10/0x10 [ 500.392477][ T9481] ? smack_log+0xef/0x3f0 [ 500.392496][ T9481] ? __pfx_smack_log+0x10/0x10 [ 500.392515][ T9481] ? smk_access+0x14c/0x4e0 [ 500.392540][ T9481] ? smk_tskacc+0x2fc/0x370 [ 500.392563][ T9481] ? smack_file_ioctl+0x2a9/0x340 [ 500.392586][ T9481] ? __pfx_smack_file_ioctl+0x10/0x10 [ 500.392619][ T9481] ? __fget_files+0x2a/0x420 [ 500.392641][ T9481] ? __fget_files+0x3a0/0x420 [ 500.392663][ T9481] ? __fget_files+0x2a/0x420 [ 500.392691][ T9481] ? bpf_lsm_file_ioctl+0x9/0x20 [ 500.392724][ T9481] ? __pfx_binder_ioctl+0x10/0x10 [ 500.392744][ T9481] __se_sys_ioctl+0xf9/0x170 [ 500.392766][ T9481] do_syscall_64+0xfa/0x3b0 [ 500.392789][ T9481] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.392814][ T9481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.392832][ T9481] ? clear_bhb_loop+0x60/0xb0 [ 500.392855][ T9481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.392873][ T9481] RIP: 0033:0x7f7ef918e929 [ 500.392891][ T9481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.392908][ T9481] RSP: 002b:00007f7efa018038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.392931][ T9481] RAX: ffffffffffffffda RBX: 00007f7ef93b5fa0 RCX: 00007f7ef918e929 [ 500.392944][ T9481] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 500.392956][ T9481] RBP: 00007f7efa018090 R08: 0000000000000000 R09: 0000000000000000 [ 500.392967][ T9481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.392978][ T9481] R13: 0000000000000000 R14: 00007f7ef93b5fa0 R15: 00007fff9f388448 [ 500.393010][ T9481] [ 500.393051][ T9481] binder: 9480:9481 ioctl c0306201 2000000001c0 returned -14 [ 501.222112][ T5836] Bluetooth: hci0: command 0x0401 tx timeout [ 501.865474][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.873516][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.905054][ T9494] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.926'. [ 502.440221][ T9501] fuse: Bad value for 'user_id' [ 502.540296][ T9501] fuse: Bad value for 'user_id' [ 502.738110][ T9514] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 502.793782][ T9514] nvme_fabrics: unknown parameter or missing value 'Zi*3zwxAaguWK9d3!mcʞPV KJyŝ7e1' in ctrl creation request [ 503.201728][ T5824] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 503.684608][ T5824] usb 4-1: Using ep0 maxpacket: 32 [ 503.733353][ T9518] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 503.752452][ T5824] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 503.760940][ T5824] usb 4-1: config 0 has no interface number 0 [ 503.791551][ T5824] usb 4-1: config 0 interface 184 has no altsetting 0 [ 503.807967][ T5824] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 503.828476][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.850519][ T5824] usb 4-1: Product: syz [ 503.886719][ T5824] usb 4-1: Manufacturer: syz [ 503.908622][ T5824] usb 4-1: SerialNumber: syz [ 503.910319][ T9534] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.939'. [ 504.351607][ T5824] usb 4-1: config 0 descriptor?? [ 504.371012][ T5824] smsc75xx v1.0.0 [ 504.430884][ T9538] FAULT_INJECTION: forcing a failure. [ 504.430884][ T9538] name failslab, interval 1, probability 0, space 0, times 0 [ 504.494853][ T9538] CPU: 0 UID: 0 PID: 9538 Comm: syz.0.941 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 504.494882][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.494893][ T9538] Call Trace: [ 504.494901][ T9538] [ 504.494910][ T9538] dump_stack_lvl+0x189/0x250 [ 504.494941][ T9538] ? __pfx____ratelimit+0x10/0x10 [ 504.494965][ T9538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.494991][ T9538] ? __pfx__printk+0x10/0x10 [ 504.495013][ T9538] ? __pfx___might_resched+0x10/0x10 [ 504.495039][ T9538] ? fs_reclaim_acquire+0x7d/0x100 [ 504.495070][ T9538] should_fail_ex+0x414/0x560 [ 504.495096][ T9538] should_failslab+0xa8/0x100 [ 504.495121][ T9538] __kmalloc_noprof+0xcb/0x4f0 [ 504.495143][ T9538] ? tomoyo_encode+0x28b/0x550 [ 504.495174][ T9538] tomoyo_encode+0x28b/0x550 [ 504.495207][ T9538] tomoyo_realpath_from_path+0x58d/0x5d0 [ 504.495243][ T9538] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 504.495266][ T9538] tomoyo_path_number_perm+0x1e8/0x5a0 [ 504.495292][ T9538] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 504.495335][ T9538] ? __lock_acquire+0xab9/0xd20 [ 504.495381][ T9538] ? __fget_files+0x2a/0x420 [ 504.495408][ T9538] ? __fget_files+0x2a/0x420 [ 504.495429][ T9538] ? __fget_files+0x3a0/0x420 [ 504.495451][ T9538] ? __fget_files+0x2a/0x420 [ 504.495478][ T9538] security_file_ioctl+0xcb/0x2d0 [ 504.495505][ T9538] __se_sys_ioctl+0x47/0x170 [ 504.495526][ T9538] do_syscall_64+0xfa/0x3b0 [ 504.495551][ T9538] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.495576][ T9538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.495594][ T9538] ? clear_bhb_loop+0x60/0xb0 [ 504.495617][ T9538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.495635][ T9538] RIP: 0033:0x7fa5e2f8e929 [ 504.495652][ T9538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.495667][ T9538] RSP: 002b:00007fa5e3da2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 504.495688][ T9538] RAX: ffffffffffffffda RBX: 00007fa5e31b5fa0 RCX: 00007fa5e2f8e929 [ 504.495701][ T9538] RDX: 00002000000009c0 RSI: 00000000c0205647 RDI: 0000000000000003 [ 504.495722][ T9538] RBP: 00007fa5e3da2090 R08: 0000000000000000 R09: 0000000000000000 [ 504.495733][ T9538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.495744][ T9538] R13: 0000000000000000 R14: 00007fa5e31b5fa0 R15: 00007ffef4b7dbd8 [ 504.495776][ T9538] [ 504.495800][ T9538] ERROR: Out of memory at tomoyo_realpath_from_path. [ 504.891653][ T5836] Bluetooth: hci0: command 0x0401 tx timeout [ 504.941753][ T976] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 505.631446][ T976] usb 2-1: device descriptor read/64, error -71 [ 505.776477][ T9554] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 506.121785][ T9554] nvme_fabrics: unknown parameter or missing value 'Zi*3zwxAaguWK9d3!mcʞPV KJyŝ7e1' in ctrl creation request [ 506.425490][ T976] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 506.520119][ T5824] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 506.545342][ T5824] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 506.567338][ T5824] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 506.591424][ T976] usb 2-1: device descriptor read/64, error -71 [ 506.600807][ T5824] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 506.618040][ T5824] usb 4-1: USB disconnect, device number 13 [ 506.712173][ T976] usb usb2-port1: attempt power cycle [ 507.051430][ T976] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 507.087949][ T976] usb 2-1: device descriptor read/8, error -71 [ 507.471896][ T976] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 508.382506][ T976] usb 2-1: device descriptor read/8, error -71 [ 508.512655][ T976] usb usb2-port1: unable to enumerate USB device [ 509.069869][ T9585] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.953'. [ 509.798558][ T9592] FAULT_INJECTION: forcing a failure. [ 509.798558][ T9592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.815990][ T9592] CPU: 0 UID: 0 PID: 9592 Comm: syz.3.956 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 509.816018][ T9592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 509.816029][ T9592] Call Trace: [ 509.816038][ T9592] [ 509.816046][ T9592] dump_stack_lvl+0x189/0x250 [ 509.816078][ T9592] ? __pfx____ratelimit+0x10/0x10 [ 509.816105][ T9592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.816132][ T9592] ? __pfx__printk+0x10/0x10 [ 509.816166][ T9592] should_fail_ex+0x414/0x560 [ 509.816196][ T9592] _copy_to_user+0x31/0xb0 [ 509.816217][ T9592] simple_read_from_buffer+0xe1/0x170 [ 509.816247][ T9592] proc_fail_nth_read+0x1df/0x250 [ 509.816279][ T9592] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 509.816308][ T9592] ? rw_verify_area+0x258/0x650 [ 509.816328][ T9592] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 509.816355][ T9592] vfs_read+0x1fd/0x980 [ 509.816383][ T9592] ? __pfx___mutex_lock+0x10/0x10 [ 509.816411][ T9592] ? __pfx_vfs_read+0x10/0x10 [ 509.816434][ T9592] ? __fget_files+0x2a/0x420 [ 509.816474][ T9592] ? __fget_files+0x3a0/0x420 [ 509.816496][ T9592] ? __fget_files+0x2a/0x420 [ 509.816530][ T9592] ksys_read+0x145/0x250 [ 509.816555][ T9592] ? __pfx_ksys_read+0x10/0x10 [ 509.816572][ T9592] ? rcu_is_watching+0x15/0xb0 [ 509.816606][ T9592] ? do_syscall_64+0xbe/0x3b0 [ 509.816638][ T9592] do_syscall_64+0xfa/0x3b0 [ 509.816663][ T9592] ? lockdep_hardirqs_on+0x9c/0x150 [ 509.816688][ T9592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.816705][ T9592] ? clear_bhb_loop+0x60/0xb0 [ 509.816730][ T9592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.816747][ T9592] RIP: 0033:0x7f7ef918d33c [ 509.816765][ T9592] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 509.816782][ T9592] RSP: 002b:00007f7efa018030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 509.816803][ T9592] RAX: ffffffffffffffda RBX: 00007f7ef93b5fa0 RCX: 00007f7ef918d33c [ 509.816816][ T9592] RDX: 000000000000000f RSI: 00007f7efa0180a0 RDI: 0000000000000004 [ 509.816828][ T9592] RBP: 00007f7efa018090 R08: 0000000000000000 R09: 0000000000000000 [ 509.816839][ T9592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.816850][ T9592] R13: 0000000000000000 R14: 00007f7ef93b5fa0 R15: 00007fff9f388448 [ 509.816883][ T9592] [ 510.220551][ T9602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.760673][ T9603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.069824][ T6124] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 511.085671][ T6124] ------------[ cut here ]------------ [ 511.091241][ T6124] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 511.099238][ T6124] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 511.114119][ T6124] CPU: 0 UID: 0 PID: 6124 Comm: kworker/u8:21 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 511.114148][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.114160][ T6124] Workqueue: events_unbound cfg80211_wiphy_work [ 511.114185][ T6124] Call Trace: [ 511.114193][ T6124] [ 511.114201][ T6124] dump_stack_lvl+0x189/0x250 [ 511.114233][ T6124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.114260][ T6124] ? __pfx__printk+0x10/0x10 [ 511.114295][ T6124] ubsan_epilogue+0xa/0x40 [ 511.114314][ T6124] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 511.114351][ T6124] ieee80211_request_ibss_scan+0x600/0x8b0 [ 511.114396][ T6124] ieee80211_ibss_work+0xd85/0x1060 [ 511.114431][ T6124] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.114459][ T6124] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 511.114484][ T6124] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 511.114506][ T6124] ? kcov_remote_stop+0x17e/0x6d0 [ 511.114529][ T6124] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 511.114561][ T6124] ? skb_dequeue+0x10e/0x150 [ 511.114585][ T6124] ? ieee80211_iface_work+0xcd4/0xfe0 [ 511.114615][ T6124] ? ieee80211_iface_work+0xf39/0xfe0 [ 511.114654][ T6124] cfg80211_wiphy_work+0x2df/0x460 [ 511.114673][ T6124] ? process_scheduled_works+0x9ef/0x17b0 [ 511.114701][ T6124] process_scheduled_works+0xade/0x17b0 [ 511.114763][ T6124] ? __pfx_process_scheduled_works+0x10/0x10 [ 511.114811][ T6124] worker_thread+0x8a0/0xda0 [ 511.114870][ T6124] kthread+0x70e/0x8a0 [ 511.114896][ T6124] ? __pfx_worker_thread+0x10/0x10 [ 511.114921][ T6124] ? __pfx_kthread+0x10/0x10 [ 511.114943][ T6124] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.114966][ T6124] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.114987][ T6124] ? __pfx_kthread+0x10/0x10 [ 511.115007][ T6124] ret_from_fork+0x3fc/0x770 [ 511.115036][ T6124] ? __pfx_ret_from_fork+0x10/0x10 [ 511.115069][ T6124] ? __switch_to_asm+0x39/0x70 [ 511.115084][ T6124] ? __switch_to_asm+0x33/0x70 [ 511.115100][ T6124] ? __pfx_kthread+0x10/0x10 [ 511.115121][ T6124] ret_from_fork_asm+0x1a/0x30 [ 511.115159][ T6124] [ 511.115166][ T6124] ---[ end trace ]--- [ 512.336020][ T6124] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 512.343316][ T6124] CPU: 0 UID: 0 PID: 6124 Comm: kworker/u8:21 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 512.355556][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 512.365612][ T6124] Workqueue: events_unbound cfg80211_wiphy_work [ 512.372050][ T6124] Call Trace: [ 512.375425][ T6124] [ 512.378353][ T6124] dump_stack_lvl+0x99/0x250 [ 512.382981][ T6124] ? __asan_memcpy+0x40/0x70 [ 512.387582][ T6124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.392794][ T6124] ? __pfx__printk+0x10/0x10 [ 512.397405][ T6124] panic+0x2db/0x790 [ 512.401319][ T6124] ? __pfx_panic+0x10/0x10 [ 512.405755][ T6124] ? _printk+0xcf/0x120 [ 512.409921][ T6124] ? __pfx__printk+0x10/0x10 [ 512.414530][ T6124] check_panic_on_warn+0x89/0xb0 [ 512.419480][ T6124] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 512.425220][ T6124] ieee80211_request_ibss_scan+0x600/0x8b0 [ 512.431223][ T6124] ieee80211_ibss_work+0xd85/0x1060 [ 512.436433][ T6124] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.441656][ T6124] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 512.447665][ T6124] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 512.454008][ T6124] ? kcov_remote_stop+0x17e/0x6d0 [ 512.459129][ T6124] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 512.464784][ T6124] ? skb_dequeue+0x10e/0x150 [ 512.469475][ T6124] ? ieee80211_iface_work+0xcd4/0xfe0 [ 512.474863][ T6124] ? ieee80211_iface_work+0xf39/0xfe0 [ 512.480264][ T6124] cfg80211_wiphy_work+0x2df/0x460 [ 512.485418][ T6124] ? process_scheduled_works+0x9ef/0x17b0 [ 512.491153][ T6124] process_scheduled_works+0xade/0x17b0 [ 512.496739][ T6124] ? __pfx_process_scheduled_works+0x10/0x10 [ 512.502747][ T6124] worker_thread+0x8a0/0xda0 [ 512.507377][ T6124] kthread+0x70e/0x8a0 [ 512.511545][ T6124] ? __pfx_worker_thread+0x10/0x10 [ 512.516674][ T6124] ? __pfx_kthread+0x10/0x10 [ 512.521809][ T6124] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.527056][ T6124] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.532261][ T6124] ? __pfx_kthread+0x10/0x10 [ 512.536861][ T6124] ret_from_fork+0x3fc/0x770 [ 512.541491][ T6124] ? __pfx_ret_from_fork+0x10/0x10 [ 512.546649][ T6124] ? __switch_to_asm+0x39/0x70 [ 512.551461][ T6124] ? __switch_to_asm+0x33/0x70 [ 512.556239][ T6124] ? __pfx_kthread+0x10/0x10 [ 512.561102][ T6124] ret_from_fork_asm+0x1a/0x30 [ 512.565888][ T6124] [ 512.569181][ T6124] Kernel Offset: disabled [ 512.573562][ T6124] Rebooting in 86400 seconds..