last executing test programs: 5m15.661050723s ago: executing program 4 (id=910): fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) socket$kcm(0x15, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x24, 0x2004, @fd, 0x1, &(0x7f0000000c40)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000c00)=""/51, 0x33}], 0x2, 0x1b}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa3ff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c04100001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f986075065dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75cafaacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba5fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c000000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xffffffff, 0x9}, 0x10}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$kcm(0x10, 0x2, 0x4) 5m14.146138151s ago: executing program 4 (id=916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x8) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f0000000000)=0x6) 5m13.538638488s ago: executing program 2 (id=918): socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) fchdir(0xffffffffffffffff) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYRESDEC=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000180), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x779a}, 0x94) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe2(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x60000000000, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x40102) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x40e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) 5m11.419722581s ago: executing program 3 (id=922): mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x40a4021, &(0x7f0000000200)=ANY=[@ANYBLOB="6d61783d30303030383030303030303030ea0100003737332c00"]) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) clock_nanosleep(0x8, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) listen(0xffffffffffffffff, 0x0) io_setup(0xc, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xfff2, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)="02", 0x1}], 0x20) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000000), &(0x7f00000000c0)=0x8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "244cb303"}, 0x0, 0x1, {0x0}}) 5m10.069054185s ago: executing program 2 (id=923): mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x40a4021, &(0x7f0000000200)=ANY=[@ANYBLOB="6d61783d30303030383030303030303030ea0100003737332c00"]) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) clock_nanosleep(0x8, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) listen(0xffffffffffffffff, 0x0) io_setup(0xc, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xfff2, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)="02", 0x1}], 0x20) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "244cb303"}, 0x0, 0x1, {0x0}}) 5m9.758370992s ago: executing program 3 (id=924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x300) 5m9.650292587s ago: executing program 4 (id=925): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x20040011) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffd, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) 5m8.199398199s ago: executing program 2 (id=926): socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000180), 0xf6, 0x200000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r0, &(0x7f0000000500)="ed9b3d3895c8a6c8f04b24b19dc69ba08150cbdf52e34f1eb7687ca18dcd492805b84fe27b3992a17acc9df0cea7ceb4185c4ffa422b91e8b3dca71ca94229a23babe85112e280c3fdd2ca994feadede3a3826f9c376c59daa39c5548939fa6ef059ac71348a8035d69109d2a4aeb6d485751bdb35dc62588d4f1574a19968e80b14a23220", 0x0, 0x4}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000240)=0xfffffffe, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000003c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000400)=""/205, 0xcd, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @local, 0x1}, 0x1c) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x16f8c2, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 5m7.346022451s ago: executing program 4 (id=928): syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000856) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 5m6.383818059s ago: executing program 1 (id=929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="300000004a0001002bbd7000ffdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0700000014000100000000000000000088"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x200002) 5m6.27535816s ago: executing program 2 (id=930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) symlinkat(0x0, 0xffffffffffffff9c, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef91", 0x12) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r4) sendmmsg$alg(r4, &(0x7f0000001c40)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="9140a4bdea648a53aa2106b893d709c28a80626adee9be3050ded5cdd8b07ed1c91ec2a922bce0ce9acf5e5980f5fa9d10fa8ba4993c2ba42fa741ec6c7e01fa267cf6337991d69ec91e5d24d2284d63da302f287dcf255c1dbc0770eb8dec6ee2eb516795eeef969834e4d1583c16fe40ec9b2dc9318af13c37d83e7c708166f76a8668388f82", 0x87}, {&(0x7f0000000280)="4d6abafe26e0ed9e5d7a981f304ef2299086fc8630737e7c5bcc7f20596a2416ae27f012d759d1b5de8757704db50515dc2b78b32eb877ae6adc5f844d49dcc079dc4cb9fa6ba8e14452f31aaf765873edbcae393f1a64f02621cce2f390d08bbdf4adc448bab595b7ad48de0ea9a17c4f85db6cbdf93f10af", 0x79}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24000810) 5m6.240198142s ago: executing program 3 (id=931): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/186, 0xba) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r7 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r7, 0x40189206, &(0x7f0000000180)) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newtfilter={0xd8, 0x2c, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x7, 0xffe0}, {0xfff5, 0xfff1}, {0x1, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_RATE={0x6, 0x5, {0x1, 0xfa}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x4}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_u32={{0x8}, {0x4c, 0x2, [@TCA_U32_ACT={0x38, 0x7, [@m_xt={0x34, 0xe, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_U32_MARK={0x10, 0xa, {0xe4ce, 0xb}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x91a6e450b8191a43) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000574000/0x1000)=nil, 0x1000}}) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) mlockall(0x7) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110140000000000c2010c00000000009500090000000000c4e2a9c4cea4ac5561a7595261fd72ee5a918d5cea4d5d91159be95f02006187dce59e9e2ae47da87d098aafb8e5e87e44659d34d391a67b13162ceab5e9b7376047b5a55e90517f5d78febfa270e7b6cf2fed9a8957d79709305f32238c33fbe905454c24e4e877f131e4b91a67d64ade74499577e2256ee78e38dd7e17a1be21dc599320870aa7da26dfcddc4a4e2b5814193dbf08d84684fb0436e7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 5m5.196980755s ago: executing program 2 (id=934): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x0, 0x2}, 0xe) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) eventfd(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x22f, &(0x7f0000000200)={0x0, 0x0, 0x10000, 0x0, 0x100002d0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0xffffffffffffffff], 0x1, 0x0, 0x1, {0x0, r4}}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000fc0)=0x2000003, 0x4) r5 = socket(0x25, 0x5, 0x0) recvfrom$inet_nvme(r5, &(0x7f0000000000)=""/1, 0x1, 0xc24acb3efee62aae, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x4, @private1, 0x4}, 0x80) syz_io_uring_setup(0x83b, &(0x7f0000000d40)={0x0, 0x1484, 0x800, 0x0, 0xe4}, &(0x7f0000000d00), &(0x7f0000000140)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000100)=0x20000002, 0x4) socket$inet(0x2, 0x3, 0x3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000280)=0x90) write(r6, &(0x7f0000000000)="2e000400010002", 0x7) 5m5.140020739s ago: executing program 3 (id=935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x8) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f0000000000)=0x6) 5m4.894015922s ago: executing program 4 (id=937): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, &(0x7f0000000080)=0xfffffffffffffffb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r0) 5m4.107195107s ago: executing program 2 (id=938): socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) fchdir(0xffffffffffffffff) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYRESDEC=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000180), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x779a}, 0x94) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe2(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x60000000000, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x40102) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x40e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) 5m3.581816955s ago: executing program 1 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x5, 0x0) readv(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000000200)=""/167, 0xa7}, {0x0}], 0x2) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000fee000)=0x1, 0x4) 5m3.01986915s ago: executing program 1 (id=941): r0 = socket(0x11, 0x800000003, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000400), 0x4204c1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x50) mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f0000000140)=""/18}, 0x20) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_stall_count', 0xa00, 0x60) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000ac0)={r4, 0xd0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0x9}, {0x16}]}, 0x10) sendmmsg(r5, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r4, 0x9, 0x20ab, 0xa, 0x0, 0x4}, 0x14) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r7, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @empty}, &(0x7f0000000240)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="00040000", @ANYRES16=r8, @ANYBLOB="06132ba42e4116cabd7000fcdbdf250500000014000180080003000100000008000100", @ANYRES32=r9, @ANYBLOB="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"], 0x400}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r4, 0x42, 0x8}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}]}}]}, 0x8c}}, 0x0) 5m2.570379797s ago: executing program 4 (id=942): mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x40a4021, &(0x7f0000000200)=ANY=[@ANYBLOB="6d61783d30303030383030303030303030ea0100003737332c00"]) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) clock_nanosleep(0x8, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) listen(0xffffffffffffffff, 0x0) io_setup(0xc, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xfff2, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)="02", 0x1}], 0x20) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000000), &(0x7f00000000c0)=0x8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "244cb303"}, 0x0, 0x1, {0x0}}) 5m2.5644532s ago: executing program 1 (id=943): r0 = socket(0x6, 0x4, 0x8) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000021c0), 0x3, 0x100) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000002200)=""/31) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x26}}, 0x0) 5m2.120285993s ago: executing program 1 (id=945): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x28000, 0x1000, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000240)="020000", 0x3}, {&(0x7f0000000000)='\x00', 0x1}], 0x2, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x0, r3, 0x3d, r0}, 0x10) 5m2.059786006s ago: executing program 3 (id=946): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (fail_nth: 2) 5m1.627847982s ago: executing program 1 (id=947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r7 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x60000001}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0x7c, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x68, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r8, 0x80044dfe, &(0x7f0000000180)) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="65400f20463ef226662ed93f0f05670f01cbc74424008000c0fec744240271000000c7442406000000000f011c2466b885000f00d8c4e3b57e3700f30fc7710f460f0766b8f5000f00d0", 0x4a}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 5m1.62732469s ago: executing program 3 (id=948): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x0, 0x2}, 0xe) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) eventfd(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x22f, &(0x7f0000000200)={0x0, 0x0, 0x10000, 0x0, 0x100002d0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0xffffffffffffffff], 0x1, 0x0, 0x1, {0x0, r4}}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000fc0)=0x2000003, 0x4) r5 = socket(0x25, 0x5, 0x0) recvfrom$inet_nvme(r5, &(0x7f0000000000)=""/1, 0x1, 0xc24acb3efee62aae, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x4, @private1, 0x4}, 0x80) syz_io_uring_setup(0x83b, &(0x7f0000000d40)={0x0, 0x1484, 0x800, 0x0, 0xe4}, &(0x7f0000000d00), &(0x7f0000000140)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000100)=0x20000002, 0x4) socket$inet(0x2, 0x3, 0x3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000280)=0x90) write(r6, &(0x7f0000000000)="2e000400010002", 0x7) 4m25.515311783s ago: executing program 32 (id=949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 4m25.188206372s ago: executing program 33 (id=947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r7 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x60000001}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0x7c, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x68, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r8, 0x80044dfe, &(0x7f0000000180)) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="65400f20463ef226662ed93f0f05670f01cbc74424008000c0fec744240271000000c7442406000000000f011c2466b885000f00d8c4e3b57e3700f30fc7710f460f0766b8f5000f00d0", 0x4a}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 4m24.926748184s ago: executing program 34 (id=938): socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) fchdir(0xffffffffffffffff) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYRESDEC=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000180), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x779a}, 0x94) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe2(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x60000000000, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x40102) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x40e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) 4m24.745749644s ago: executing program 35 (id=948): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x0, 0x2}, 0xe) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) eventfd(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x22f, &(0x7f0000000200)={0x0, 0x0, 0x10000, 0x0, 0x100002d0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0xffffffffffffffff], 0x1, 0x0, 0x1, {0x0, r4}}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000fc0)=0x2000003, 0x4) r5 = socket(0x25, 0x5, 0x0) recvfrom$inet_nvme(r5, &(0x7f0000000000)=""/1, 0x1, 0xc24acb3efee62aae, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x4, @private1, 0x4}, 0x80) syz_io_uring_setup(0x83b, &(0x7f0000000d40)={0x0, 0x1484, 0x800, 0x0, 0xe4}, &(0x7f0000000d00), &(0x7f0000000140)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000100)=0x20000002, 0x4) socket$inet(0x2, 0x3, 0x3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000280)=0x90) write(r6, &(0x7f0000000000)="2e000400010002", 0x7) 4m24.59292314s ago: executing program 36 (id=942): mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x40a4021, &(0x7f0000000200)=ANY=[@ANYBLOB="6d61783d30303030383030303030303030ea0100003737332c00"]) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) clock_nanosleep(0x8, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) listen(0xffffffffffffffff, 0x0) io_setup(0xc, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[0x0]) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xfff2, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)="02", 0x1}], 0x20) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000000), &(0x7f00000000c0)=0x8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "244cb303"}, 0x0, 0x1, {0x0}}) 3m27.890309962s ago: executing program 5 (id=1040): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) mmap$xdp(&(0x7f0000154000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) setuid(0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde']}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x0, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x8, 0x4, 0x8000000, 0x5]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0x3) 3m24.756141481s ago: executing program 5 (id=1041): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000000c0)={{0x3, 0x2, 0xffff042c, 0x2, 0xf}, 0x3, 0x334, 0x2}) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, 0x0, 0x21) connect$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x4}}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = eventfd2(0x1, 0x801) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902", @ANYRESHEX=0x0], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="00030200000000036808"]}, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r5, 0x80000000}) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="0eda6708177edd88fab914bb63e0b9c0d5ee01a682a8f048e4f4d88448544438d1cee6fc9c93", 0x26}, {&(0x7f00000000c0)="65fa00d7db41a761f2eeb3ef2597ffbd22b0ee02cccdfd619550961579c8696f8fd70f23d1a160efffa434946eb174ecafeed62b50895ed094bc4ea429e9540895dd55795f754224e4c2966bf69f136214337a59ff1634b31dac", 0x5a}, {&(0x7f0000000140)}, {&(0x7f0000000180)="9f6bbdb565c0fe5c17420e551dd9fa5a98b7775ebdb44e8450cfc5ada1f505ebb77865fe0338de41f0756591ce56e891ce0f07f56197a2dc0c79de2cf4e2b5ecc648a18a49fdd4c25981690f1ccaf5ca581aaec0b3b1b92864219d3c1791f1be1c6c2a218f34f7e289ef5ddd5fb77fa16aa64559879d052ec35ffc38ea953ba8ab870f44906437cf1b9399cda72857547fa41b6cd7af9507adb82fc299b9c738763d4741834682d34395d938556cdf3ef8cca6c9ce9bff2603", 0xb9}, {&(0x7f0000000240)="893c922dca38e1bf6e421ea28f03018550df988418edde0505c7e1430d32fd8f3c6c36c4fafe4dfa932e7cab6b85144f7f38b56224e8b230aae73cb8f14164c6fcdede025ec00868fa0589a549127f241c341711f539dd35612ad17bdbace4d5a742d82a9757d94961124b49d1b12f37c73248c683543160547c84b5c47ceb61f31bd18e3305eb1b8a450b1c5b3b1b0dbd14ac9414c510859ebb7ba5791fb2a5789804668261", 0xa6}, {&(0x7f0000000300)="8b", 0x1}], 0x6, 0x8, 0xff) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f00000003c0)={'team_slave_0\x00', 0x10001}) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0xa, 0x4}, 0x8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000004c0)={r5, 0x4, 0x1}) 3m20.033611372s ago: executing program 5 (id=1055): openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) waitid(0x1, r0, 0x0, 0x8000000a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="181700003e000701fefffffffcffffff017c000008004280040008000c00018006000600800a0000f0160280ec1617801f"], 0x1718}, 0x1, 0x0, 0x0, 0xa6fdace091686b28}, 0xc000) sendmmsg$unix(r2, &(0x7f0000001a40), 0x0, 0x40) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) fsopen(0x0, 0x0) 3m13.684235454s ago: executing program 5 (id=1065): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000080)=""/146, &(0x7f0000000000)=0x92) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) pipe2$9p(0x0, 0x0) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB]) mkdir(0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file1\x00', 0x0, 0x8}, 0x18) r3 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r3, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002480)=""/9, 0x9}, {&(0x7f00000024c0)=""/225, 0xe1}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/139, 0x8b}], 0x4}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) name_to_handle_at(r1, &(0x7f0000000180)='./file1\x00', &(0x7f0000000240)=@isofs={0x14, 0x1, {0x5, 0x5, 0x7, 0x10000, 0x0, 0x6}}, &(0x7f0000000280), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) 3m12.242129704s ago: executing program 5 (id=1068): ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ppoll(&(0x7f0000000080)=[{r0, 0x90}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)={[0x6]}, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x1a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) 3m11.68723255s ago: executing program 5 (id=1070): socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cd970240ac054d027320010203010902120001000000000904b531950a74e7569538b3fed1b7c9900359e56465304765a53267cfacfd0de0b726956c8b74a119a9908ddd86742ce9bf6be5750a0f0dab855e6cf1093c6a679de6c80f728d5caf34368e99e3a09c2221ec74d4e28fc3ca5d7694f57aebfa72745a662471ea74d9d959e5e4b1f3ac5ea925f62ac1a661142dcee0561815655b25ea60c64b7a247caabe1fa5acba29772421c40e3224eca5d7120d829d568b43b9e85f031f8a8bcca94584a265ffe2edba28"], 0x0) 3m10.194138731s ago: executing program 37 (id=1070): socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cd970240ac054d027320010203010902120001000000000904b531950a74e7569538b3fed1b7c9900359e56465304765a53267cfacfd0de0b726956c8b74a119a9908ddd86742ce9bf6be5750a0f0dab855e6cf1093c6a679de6c80f728d5caf34368e99e3a09c2221ec74d4e28fc3ca5d7694f57aebfa72745a662471ea74d9d959e5e4b1f3ac5ea925f62ac1a661142dcee0561815655b25ea60c64b7a247caabe1fa5acba29772421c40e3224eca5d7120d829d568b43b9e85f031f8a8bcca94584a265ffe2edba28"], 0x0) 16.365938884s ago: executing program 7 (id=1444): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001200)={'#! ', './file0'}, 0xb) close(0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getpid() setns(0xffffffffffffffff, 0x66020000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x6}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) (fail_nth: 6) 13.383989355s ago: executing program 7 (id=1448): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) pipe2$9p(&(0x7f00000027c0), 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r6}) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='ubifs\x00', 0x200000, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa2741, 0x80) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a001c00", @ANYRES32, @ANYBLOB="0000000014000100"], 0x54}}, 0x0) 12.708207338s ago: executing program 9 (id=1449): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) 11.804384619s ago: executing program 9 (id=1451): socket(0x6, 0x4, 0x8) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r3, r3, 0x0, 0x40008) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000021c0), 0x3, 0x100) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000002200)=""/31) 11.79781707s ago: executing program 7 (id=1452): sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1cdfff", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x200488c1}, 0x850) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a32000000001400048008000240ff39000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10.600786981s ago: executing program 9 (id=1455): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) pipe2$9p(&(0x7f00000027c0), 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r6}) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='ubifs\x00', 0x200000, 0x0) (fail_nth: 2) close_range(r2, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa2741, 0x80) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a001c00", @ANYRES32, @ANYBLOB="0000000014000100"], 0x54}}, 0x0) 10.451839289s ago: executing program 8 (id=1456): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x25, 0xa}, 0x14) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x10}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000900)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9d4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x20, 0x24, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @alu={0x3, 0x1, 0xc, 0x5, 0x9, 0x30}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x65, &(0x7f0000000580)=""/101, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x5, 0x4, 0x800, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000a40)=[r0, r1, r2, r3, 0x1, r4, r5], &(0x7f0000000a80)=[{0x0, 0x5, 0x8, 0xa}, {0x2, 0x4, 0x8, 0x2}, {0x1, 0x1, 0x1, 0x2}], 0x10, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x32}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x20048000}, 0x6044005) r7 = socket$inet6(0xa, 0x80000, 0x2) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xe89c, 0x100, 0x2, 0x20002f5}) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0xfffffffffffffdf2, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x0, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_delete(r9) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/comedi0\x00', 0x8c40, 0x0) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x202, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r11, 0x4004510f, &(0x7f0000000380)=0x1000) ioctl$COMEDI_DEVINFO(r10, 0x80b06401, &(0x7f0000000180)) 9.867721948s ago: executing program 7 (id=1457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x117000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000001380)={{0xd000, 0x80a0000, 0x10, 0x0, 0xc1, 0x0, 0x4, 0x2, 0x2, 0x0, 0x1, 0xf7}, {0xd000, 0xd000, 0xd, 0x64, 0x40, 0x4, 0x4, 0x4, 0x81, 0x6, 0x81, 0xaa}, {0x11f00a, 0x8000000, 0xe, 0xef, 0x5, 0x2, 0x4, 0x8, 0x0, 0xd2, 0x8}, {0x6000, 0x1000, 0xe, 0xb, 0x7, 0x5, 0x1, 0x8, 0x0, 0xf1, 0x66, 0x3}, {0x11102000, 0x1, 0x3, 0x2, 0x6, 0x4, 0xd6, 0x0, 0x7, 0x5b, 0x6, 0x6}, {0x0, 0x4, 0xb, 0x77, 0x40, 0x6, 0x3, 0x3, 0x1, 0x1, 0x2, 0x7}, {0x4, 0x80a0000, 0x10, 0x1, 0x9, 0x4, 0xff, 0x7, 0xb5, 0x3, 0x9, 0x4}, {0xffff1000, 0xdddd0000, 0xe, 0x10, 0x4, 0x40, 0x8, 0x80, 0x2, 0x5, 0x5, 0x40}, {0x1, 0x6}, {0x2, 0x8}, 0xc0000021, 0x0, 0x8000000, 0x422a0, 0x11, 0x0, 0x8080000, 0x1, [0x8, 0x8000, 0xa0, 0x7]}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000002140)='maps\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) getpriority(0x2, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000001c0)={0x8d80000000000000, 0x2000, 0x1, 0x8, 0x15}) read$FUSE(r3, &(0x7f00000041c0)={0x2020}, 0x1ba0) syz_emit_vhci(0x0, 0x4) syz_usb_connect(0x0, 0xf5, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505240600010524007f000d240f0104000000080000000006241a03000a05240401", @ANYRESDEC], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r5 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmsg(r5, &(0x7f0000000400)={0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x0, 0x2e}, 0x102) 9.589194833s ago: executing program 9 (id=1458): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (fail_nth: 7) 8.783865873s ago: executing program 9 (id=1459): r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x200) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000300)={0x1, 0x7, 0x4, &(0x7f00000002c0)={0x1b, "a9257d05dacaf2de70ad1084e5506773300a4ba8498a1e2ba013a91d05adf92f06"}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getxattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x10100, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008814}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) ioctl$TIOCGSID(r5, 0x5429, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYRES32=r4, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 8.707687564s ago: executing program 8 (id=1460): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, &(0x7f0000000080)=0xfffffffffffffffb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r0) 7.744210633s ago: executing program 6 (id=1465): syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f20014"], 0x0) 7.506071513s ago: executing program 7 (id=1466): openat$nullb(0xffffffffffffff9c, 0x0, 0x2c240, 0x0) keyctl$join(0x1, 0xfffffffffffffffd) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='mmc_request_start\x00', r0, 0x0, 0xfffffffffffff800}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r3) 7.467116768s ago: executing program 6 (id=1467): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r4) r5 = add_key$keyring(&(0x7f00000009c0), &(0x7f0000002940)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r4, &(0x7f0000000100)='big_key\x00', &(0x7f0000000980)={'syz', 0x0}, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x141a82, 0xf) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0x40045542, &(0x7f00000001c0)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) sendfile(r6, r6, 0x0, 0x4) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r6, 0x80045104, &(0x7f0000002980)) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, r3, {0xd}, {}, {0x3, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x44) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r8, 0xc0505510, &(0x7f00000006c0)={0x4, 0x7, 0x3, 0x5, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x2, 0x5d7357a8c410e753}) r10 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x8000, 0x0, 0x0, 0x0, r6}, &(0x7f0000000a00), &(0x7f00000001c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x4e63, &(0x7f0000000640)={0x0, 0xd17f, 0x20, 0x2, 0x37d, 0x0, r10}, &(0x7f0000000dc0), &(0x7f0000000280)) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000001940)={r9, "79aafc6186b0c9560ebfefecf2939f70"}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x48, &(0x7f0000000000)={0x8, 0x5, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x3, 0x4, [0x7, 0x4, 0x9, 0x8001]}}]}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004c40)=@gettfilter={0x44, 0x2e, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xf, 0xffff}, {0x0, 0xfff1}, {0xb, 0xc}}, [{0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1ff}]}, 0x44}}, 0x0) 6.851312147s ago: executing program 8 (id=1468): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/xfrm_stat\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_uring_setup(0x1694, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) mkdir(0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 5.759868206s ago: executing program 6 (id=1470): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x26540, 0x2, 0x40}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes256, 0x4, @auto="e1e31d2cb2504e8c"}) r1 = accept4$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x80000) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x3) (async) r2 = accept$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000240)=0x1c) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='f2fs_gc_begin\x00', r0, 0x0, 0x10000}, 0x18) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000700, 0xee00, &(0x7f0000000300)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r1, 0x4, 0x1, 0xa8, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0]}, 0x40) r5 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0xc080) io_uring_enter(r0, 0x416, 0xf17f, 0x78, &(0x7f0000000500)={[0xfffffffffffffffa]}, 0x8) (async) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000540)={{r5}, "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"}) syz_emit_ethernet(0x56, &(0x7f0000001540)={@random="048605349ac1", @empty, @void, {@canfd={0xd, {{0x3, 0x0, 0x0, 0x1}, 0x36, 0x2, 0x0, 0x0, "2f10a220c5fb86b6caf0541813bfe27f80827256cf6f24cdfe0d38ad0b8e9528640a39789e643f1fe13b138cd411a1a4a94b07bede026c08b2e7708a942e178e"}}}}, &(0x7f00000015c0)={0x1, 0x1, [0x5fa, 0x35b, 0xcf0, 0xf77]}) (async, rerun: 32) ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000001680)={0x20, 0x0, 0x6, 0x0, &(0x7f0000001600)=[{}, {}, {}, {}, {}, {}]}) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000016c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000001740)={r6, 0x2, r0, 0xfffffff8}) (async) r7 = pidfd_getfd(r0, r3, 0x0) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001780)=0x10120, 0x4) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000017c0)=0x0, &(0x7f0000001800)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000018c0)={'syztnl1\x00', &(0x7f0000001840)={'ip6_vti0\x00', r8, 0x4, 0x2, 0x7f, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x0, 0x1, 0x5, 0x2}}) fsetxattr$security_ima(r3, &(0x7f0000001900), &(0x7f0000001940)=@v1={0x2, "09c631f10cb1600b79131971"}, 0xd, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000019c0)={0x7, &(0x7f0000001980)=[{0x4b9c, 0x7, 0x80, 0x1ff}, {0x6, 0x40, 0x0, 0x8}, {0x80, 0x40, 0x1, 0x800}, {0xa9b, 0x4, 0x5, 0x1}, {0x5, 0x8, 0x1, 0xa7}, {0x5, 0x9, 0x36, 0x5}, {0x1, 0x77, 0x8}]}) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001a40)={0x3, &(0x7f0000001a00)=[{0x8, 0x3, 0x5, 0xc7}, {0x8, 0x5c, 0x4, 0x6}, {0xff00, 0x48, 0x0, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000001a80)={r6, 0x0, 0xffffffffffffffff, 0x9, 0x80000}) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001ac0)={0x0, 0x0}) sched_setscheduler(r10, 0x0, &(0x7f0000001b00)) (async) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001b40), 0x101000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r11, 0xc0505405, &(0x7f0000001b80)={{0x0, 0x0, 0x7, 0x0, 0xffffffff}, 0x6, 0x6, 0x5}) (async, rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000001c00)={0x48}) (async, rerun: 32) pwrite64(r0, &(0x7f0000001c80)="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", 0x1000, 0x9) (async, rerun: 64) syz_open_pts(r4, 0x111000) (rerun: 64) 5.687397912s ago: executing program 8 (id=1471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40010100, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x3) ioctl$TCSETS(r0, 0x5432, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20004440) 5.120166618s ago: executing program 9 (id=1472): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x80001) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x65, 0x9]}, {}, {0x2f89, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, {}, {0x8, 0x6558, 0x1}}}}}}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = memfd_create(0x0, 0x5) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x20000000002, 0x140) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000540)=0x9) 4.883730894s ago: executing program 6 (id=1473): r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0xac0, 0x0, 0x28}, 0x18) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd2d, 0x2ddfdbba, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200488c1}, 0x850) syz_emit_ethernet(0x52, &(0x7f00000019c0)=ANY=[@ANYRESOCT=r0], 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000240)={r4, r2, r4}, &(0x7f0000000340)=""/56, 0x38, &(0x7f0000000780)={&(0x7f0000000380)={'blake2b-512-generic\x00'}, &(0x7f0000000880)="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", 0x1000}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x330, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x31f, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x240, 0x64, 0x0, 0x1, [@nested={0xd9, 0x121, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r6}, @nested={0x4d, 0x1d, 0x0, 0x1, [@generic="395659cbee1ee6766c7549af751fbf2eb8788253b47d23023a32d9788c32998ee026024e276914d0aae70d786e120337fe9cbc0c9e9e9008c238dd702409482c45a977476e6638789f"]}]}, @nested={0x15d, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64}, @generic="796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed234ea4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b16363323", @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f651e6ad3b3473949c0e79dcb948e0d4396e8c8a09ba50decb89def4523931fc20ba6e7ab5647f65f5ba45c278eec780cb651cd9c4ca1dc794060194b5f6e02947c12ad911895f1c0c5eee9b25581c2b4f2", @typed={0x8, 0x94, 0x0, 0x0, @fd=r6}, @nested={0x4, 0x30}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb64"]}]}, 0x330}], 0x1}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x7f, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e3406070000005c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r7 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00') r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001900), r7) getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000001940)={@private, @loopback, 0x0}, &(0x7f0000001980)=0xc) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000001a80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001c80)=ANY=[@ANYRES8=r5, @ANYRESOCT=r10, @ANYBLOB="08002dbd7000ffdbdf250600000038000680080006001200000014000400fe80000000000000000000000000003608000700", @ANYRES32=r11, @ANYBLOB="33f03e3314ffffffd80500020009000000080007011fc41256fd91b8f9e80a67d7c2ab32da177f2ca3a3bef8f393c770d03a93bbd3363ca4", @ANYRES32=0x0, @ANYBLOB="386317558aa592a7ca899e5d9f3c7952201c71f27a78fe7726cf0bd387eb34d9cb"], 0x4c}}, 0x6de5774ccc1e2287) syz_fuse_handle_req(r9, &(0x7f0000002180)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0x800, 0x5, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.868287433s ago: executing program 8 (id=1474): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000100000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000002000)={0xffffffffffffff63, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x39b39000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffffff4, 0x1}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41000}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x40, 0x21, 0x5, {0x5, 0x8, "77d1c4"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0031c60000009e7c081936d20e63e497be170f6eda93cfa7cdc168faa7de43236fe312b5339134e1f244c1c5107807250d6af82bc9d2e3e9796a935e8778c6a9f6e3a0c18609962aa7fff527c8277193442b615ce7d4ebb5cf123a74d55835d69f79fc6f937f9407ada5f9c6200215b88c6872db7f1a05c9845f93c2d06021816f85770abb278b90b3d1b6bbfbffbc4faf1b5f6916c244e4eca181dc724110a82c92b8fd055bdf92ea9849d78c2998b8777c18e9be8d017a6af3c592fac9e4e5b2b390b96f241ff2a5c50e88"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xf5}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0xe5, 0xec2, 0x1, 0xd53b, 0x8001, 0x3, 0x3000, 0x3, 0x6, 0xf, 0x2, 0x8}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0xffffcece}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x5}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x4) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000700)={0x2, 0xffffff38, {}, {0x0}, 0x5e6, 0x8}) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in=@multicast2, @in=@remote, 0x4e24, 0x977c, 0x4e22, 0x9, 0xa, 0x80, 0xa0, 0x2c, r5, r6}, {0x9, 0x78ca, 0x1, 0x7, 0x1c4, 0x9, 0xffff, 0x2}, {0x6, 0x5, 0xf33}, 0x8, 0x6e6bb5, 0x2, 0x0, 0x3}, {{@in6=@remote, 0x4d2, 0x3c}, 0xa, @in6=@private1, 0x3503, 0x0, 0x2, 0xa, 0x0, 0x3, 0x45c}}, 0xe8) setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000840)=0x8, 0x4) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x4048851}, 0x490) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$sock_qrtr_TIOCINQ(r8, 0x541b, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x1000e}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x10000}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000081}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r11 = socket$igmp(0x2, 0x3, 0x2) r12 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r12, 0x88, 0x1, &(0x7f0000000080), 0x4) sendmsg$inet(r12, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, 0x0}, 0x80c0) ioctl$sock_SIOCINQ(r11, 0x541b, &(0x7f00000004c0)) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xcb, &(0x7f0000000580)={0x0, 0x0, 0x1, r10, 0x8}, 0xc) 3.507928165s ago: executing program 0 (id=1476): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f000001c600)=[{{&(0x7f0000000340)=@ll={0x11, 0x5, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x80, &(0x7f00000019c0)=[{&(0x7f000001c240)="4a70f1bb6401bc1f6ccfd7ac53b651b70938cde457db6cc68aa531c0c973f65a82bcbbb687a6158af8eb76663e088afada149eb3370e7a140edca1129ec6fb3ebd43b19099d96a959739a5c0ff6bce96cc03b65c36ae9eff86c747ebf2b037f13e56a5d0f0ce4497f0f74c5b34a6abfa8de1dc938a3255db58b967cd5f6072f7caebe0c9bed44d32938aa3087a059eb70789c854f02c1b86912ec9a21ad9fb56a1bcfa33f966e98bc61c89a40a29d6d103d57833781ea9418981333bfe896187aa9295019a1ffb4ecce743c024b18f57a7f680624db6000787334586266d7ee750b86343a88895c9a6e60c3185", 0xed}, {&(0x7f000001c340)="758c11d27d28745cda93d91a2b258bddcaeae456a7420ce2189a107a1f5888138454edf01a008fa3baca4b5d24cab914c1ba811c8157fd6afcf0ecf69723fc93f9467bf3e07fc684b6bc96a17851029b3359b70707f3ee9eb290a5fb1b30d212f1eb4042c0d4b72f6f930b38697a64a3c982ea50631773eaa5819f6c8fb9424ce4262b44bbb302bc9a0f66", 0x8b}, {&(0x7f0000000600)="74dfad22e92ebf513062f7fdcd2d794489b1b1bbbff2e037fb686483257d8c0e88721cbb2973b90dd1afa60ff6501dd3825a757d52a767371abc5646", 0x3c}], 0x3}}, {{&(0x7f000001c400)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000001a00)=[{&(0x7f000001c480)="77038af30c2155d578dcc682f8caf2052ee9bd59fdeb68e3001ce2c457fde6e079c4015d3e3a93320d5251519488a3bdb2499ba3db9bdffb4a2da94a18781d846ef29f1adaf8d732d000d33f830d729071c299d7902b9faaec5c091a62a11dd8f36d3841bfda74f91ddb901141271dc78117902257843e803b8ad33b4e05ff6fc9fcfc5b46e0c9fa3e55cd929701adb6d8ee635b799f2a971d1d82e2a7a4437df424ff473f5feebb326ddb9666412bcfdefe90d64169df8613c5089fdcb2ead13efba81175a41135374ef44cd6213d3a653e3e99106bf4748347", 0xda}, {&(0x7f000001c580)="cc92a1094425e95aa45475d2176021580d5876edfae80054c4c1b01b4e4376acce0bb4a3a14f77958f964f499037f9e2b8cfbdf2c06c82c7cd42c7a64bb69e4038c274616278f0079b07a6", 0x4b}], 0x2}}], 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000002540)={0x2000, 0xffff1000, 0x6, 0x358cfa5c6090f344, 0x87f2}) r2 = socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r3, 0x8108}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000000)=[{r3, 0x8108}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000b, 0x8012, r3, 0x0) (async) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000b, 0x8012, r3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)=0x5) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x40000000, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x80}}, 0x8040050) sendmmsg(r2, &(0x7f0000000300)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x3fff}, 0x80, &(0x7f0000001740), 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="d8000000000000000e010000d6ba00009272d399157c6c002b3a5e40ec219886c22c7e23f1034b1468f902442c97561f2cf76ededa809d8d5f1bb0a197151bfa293a7c33ef14e866512bac1883eff309bb5ab328c5324ef6703296465fa71507276c16087736e85d91aef939b4167a0fbf14f2547e921f84e7c002016afe532d1d3f62d54387765cb321fb455909f24cdc2bc8958845bb6e52b603e45da47fb82b11f4e5417c58d89b28610fc14572e13e2ea8fbd57c326aca1578219680c89ef2c3d2def9ec54ebe16c6123f69be0447d00000000000000"], 0xd8}}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) 2.805583228s ago: executing program 0 (id=1477): syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe80000000000020"], 0x0) 2.648267253s ago: executing program 0 (id=1478): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40010100, 0x0) (fail_nth: 3) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20004440) 2.367791067s ago: executing program 8 (id=1479): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0xfffffffe}, 0x26}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) syz_usb_connect(0x2, 0x36f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0xc6, 0x5e, 0xb8, 0x78, 0x3149, 0x33ee, 0xc7ab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35d, 0x1, 0x5a, 0x7, 0x20, 0x6, [{{0x9, 0x4, 0x57, 0x6, 0x8, 0x9a, 0xec, 0x8a, 0x4, [@generic={0x29, 0xd, "19d78cc8d65f068bdfc844399bb60a60f8ce4b78432e3225befda61ef60e34e2c06de92c9b9321"}], [{{0x9, 0x5, 0x7, 0xe, 0x8, 0x2, 0xb, 0x1, [@generic={0xc1, 0xd, "8d1a5575867d8510a422205b8fae4d6a567f67f3ce25f9955d25e4f28103288155ed5c13e567cace8455ad57dea890165077bccd5e586f4870d58cf4006552e340df817fc6f12cb83ce3f435fe8dc9b7c07905680fcd5d94769dbd95bef4bc04b2c920e25ae0a37f70f61d5e046b04063d118e4e104a8df762b3e3cca1d8cceb35a83df6eb2a5638255a52b2ba06db8175980d97b7dd93a1637202050636ea1fb48cf96b68648091733f8a0cf22923a8e9df1211c6c4850037a9a0982462d1"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x5, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x2}]}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0x5, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xbd, 0x6}]}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x2, 0x4, 0x6}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x7f, 0x41, 0x4, [@generic={0xae, 0x4, "1b8cd58b7d2fbe5126d9d8256becc6cdac813e75de75d71b9cc2ccdccbb9b0bd4c3fc1e72107eb7a2365df27d429dc1bde1fa66eac8611a58691017a6a22c35f119fc3a090f4239200252ffa2f9dba512c12a0791221b4e3b57e5e56f851ded499c052a6612d4c048541c745b2d4034d250a2ed31fb62a9336c1b8f3f2dea8abdd4b6be97ad3ccce2e0b432e934d38e3f50a94dac64536f152f1f12c4be4935cf8b32f195c121dfc8cb4123a"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0xff, 0x1, 0xfc, [@generic={0x77, 0x0, "d14a254936173c6910d1708bcd03abaa6e87850b06d499bbfd7316dd2dc58d8a255c6f04bf07425f456a281bd956427b9f37b9d986e354f270fee34bbc36fd0a5d6ec9f62ed72bd2f15a3ee56b47228a2297594e639038a3ee6644e96bd5b5b3c92a426ec25f85ef2b4d02d13ecde46f9f215129c9"}, @generic={0x57, 0x9, "9bcdb7c45bae0d30c46a9af47c958635ef5474565549d8a0fe6334b03e96917ca37b287f76dc191040d71015a254ea6ee71345a499ae865fc004f6118aa961d06eb63199546ecd14be20d431ad9a71e46430b758d6"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0x3, 0x0, 0x5, [@generic={0x88, 0x7, "495fc6ddbf82bd97cc2f699ac115b5f19a118c7a2b3dddfe55dd6c644a2bcac8ba06ba7e9208304ba6a3df711019585311ba0d2414a28899871f6b202a61fc70a378a5059b55fbbf7eec5d21bb28e5ebe951360903ab4d4a0051f819a48bce91ca9d53ebea80806e8ed14288156319cf3a5d82952c707dd247fe3d77725e2349d29e90deee54"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x400, 0x8, 0x5, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x56, 0x3}]}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x250, 0xfb, 0x4, 0x0, 0x20, 0x80}, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="010500400089034ab8f2e98ed2c335a796ddf2b282a9c371a3cd6ee21f14f8f054b560fae4ad0ead4e2299aa439749b0026dfbdd73b654d394b21ae22f703247d94c2a0c1b30c873729e62265cf82afa6d355686f0ee7c54b7f3fff064990ea1ed49408cf4f8a2c4f3c52a5dc7ca4e03"], 0x1, [{0x55, &(0x7f0000000740)=@string={0x55, 0x3, "0b3315b0c43405c3c152484e6a4795e701c6c56328478836077778953ab0f5849f759bdda57e620518d22b0ed16513cdd2265742cf470a175a456e18ab8262ae99f8b045d928c6bf248c67b3cf58f1575a2d74"}}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xe}, @IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@multicast1]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) (fail_nth: 3) 2.356413897s ago: executing program 6 (id=1480): r0 = memfd_secret(0xb7f2896bf0a9d7ad) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10142005}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2000) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) (async) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="76fe04107c4043a66b886c471b40782f45d5c5c8a83926076599977406653d076d1265c9cb92d1bc6d3285f2c2a35e77d55497a9", 0x34, 0xfffffffffffffffb) (async) r2 = add_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="94a7d838f0544ebc04a9ff8d6055959243bfefd42bb3ae196f6db2e2ba3d3bbf1a82590f1f66880262d4ecf7283af1a4a22815a7cc44101a967bb6423c9b71c12b49dcffd941e5e93149063d3e59fb96000ad0a2450e6b8bccd84aea5b90c2b84f30910f0e544cb1c42614401d9317461a05e71b4a7c75b1960ff7b8978f0a2a1f", 0x81, 0x0) (async) r3 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="41aa17edbfc8200053de2d7bd19539a0d6f7cb83b9d9c8f1e029a9c330dc5867c015127d6e4d44bcf6961d3a51db1cd814c0ac9d518b6d59e34767137a09abad00b416977230659863dd62a4067dce0a3bdc2bf75fc31d95023a7b274c9bb4e36ea2a844170fd5103b81000b0a704a5f7a62127588e3a5c003846d59afda566f6cd9023be9329f89db89851d43b84e4e86dc425ec42810d66cdaefe0cd", 0x9d, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000440)={r1, r2, r3}, &(0x7f0000000480)=""/75, 0x4b, &(0x7f0000000580)={&(0x7f0000000500)={'sha512-neon\x00'}, &(0x7f0000000540)="90867e", 0x3}) (async) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RLERRORu(r4, &(0x7f0000000600)={0xe, 0x7, 0x1, {{0x1, '\x00'}, 0x80000000}}, 0xe) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000640)=0x1, 0x4) (async) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x0, [0x0, 0x8, 0x1]}, &(0x7f0000000700)=0x44) (async) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, r2) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x8, 0x8, 0x2, @private2, @empty, 0x40, 0x20, 0xc9, 0xffff57ae}}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=@delqdisc={0x7c, 0x25, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xfff3, 0x10}, {0xfff2, 0x6}, {0x9, 0x8}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x32}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004844) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, 0x140e, 0x400, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000014) r8 = getpid() syz_clone3(&(0x7f0000000dc0)={0x200, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80), {0xb}, &(0x7f0000000bc0)=""/130, 0x82, &(0x7f0000000c80)=""/206, &(0x7f0000000d80)=[r8], 0x1, {r0}}, 0x58) write$P9_RLERRORu(r4, &(0x7f0000000e40)={0x15, 0x7, 0x1, {{0x8, 'keyring\x00'}, 0x99}}, 0x15) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x4c, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4040004) openat$cgroup_procs(r0, &(0x7f0000001040)='cgroup.threads\x00', 0x2, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000001080)=0xa4, 0x8) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f00000010c0), &(0x7f0000001100)=0x8) (async) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000001280), 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x16, 0x4, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, [@call={0x85, 0x0, 0x0, 0xb8}]}, &(0x7f0000001180)='syzkaller\x00', 0x4, 0x0, &(0x7f00000011c0), 0x40f00, 0xd, '\x00', r7, @fallback=0x20, r0, 0x8, &(0x7f0000001200)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001240)={0x3, 0x8, 0x9fb4, 0x7f}, 0x10, 0x0, r0, 0x6, &(0x7f00000012c0)=[r0, r0, 0x1, r0, r11, r0], &(0x7f0000001300)=[{0x5, 0x4, 0x7, 0xb}, {0x0, 0x2, 0x6, 0xa}, {0x3, 0x5, 0x0, 0xb}, {0x5, 0x3, 0x7, 0x5}, {0x3, 0x1, 0x0, 0x6}, {0x1, 0x4, 0x7, 0x2}], 0x10, 0x6}, 0x94) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x38, 0x2, 0x8, 0x5, 0x0, 0x0, {0x6, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x437e}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8880}, 0x41) 2.1500084s ago: executing program 0 (id=1481): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r0, &(0x7f00000000c0)="e1338d74c8f760f236", 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbb928ebbaaaaaaaaaaaa86dd6001010000481100fe8000000000000000000000000000bbfe800e2200489078030000000200000088c73ba1f267636d01dbe5712c1c941e1cdafbbb43f09c70e13808ca72381f41e5fff9621bdd1e9f8670dfaf9a2038083179cf6b7931c9b475907e01981fa4af109204b93644504f4e137ce22a20fcfc955b3fb02e3ed1961d5ce04b797e21d3ff24254719f8bd3290c6f42a5cbbf6c7ea4756539a001c40959c461078d0b3cb909fbee8567132efbb80a0f3174ef721c66ad6002854320de7572f3230cf9bc5e3a4c27487849a88591f19b8dea127a022b831068d9a2216"], 0x0) write$binfmt_register(r3, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB="240000003e0001000000080000000000000000000400c6000400018008000200", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x400c801}, 0x4850) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0xfffffffffffffdd2, 0x43, 0x101, 0x70bd2d, 0x25dfdbfb, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000400)={0x101, 0xffffffe, 0x8}, 0x10) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x9) 527.940037ms ago: executing program 0 (id=1482): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x5}}) (async) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video4linux(&(0x7f0000000280), 0x2ea, 0x2382) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000040)={0x0, {0xd214, 0x719}}) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000040)=0x8, 0x4) (async) recvmmsg(r0, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) (async, rerun: 32) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff34000480050003000100000005000300020000000500030005000000050003000500000005000300010000008a55049d4983a6200800020002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)) (rerun: 64) sync_file_range(r0, 0x5, 0x83d, 0x2) (async) r5 = socket$rds(0x15, 0x5, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) (async) ioctl$sock_proto_private(r5, 0x89e0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000380)={0x1}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) (async) fcntl$lock(r7, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0x1000000000, 0x10}) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) 318.133865ms ago: executing program 6 (id=1483): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x2004, &(0x7f0000000680)) (fail_nth: 6) 317.1933ms ago: executing program 7 (id=1484): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, 0x0, 0x6008005) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r7, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x303}}, 0x30) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) sendmsg$key(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x2, 0xa, 0x4, 0x9, 0x2, 0x0, 0x70bd2b, 0x25dfdbfd}, 0x10}}, 0x10) 0s ago: executing program 0 (id=1485): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="c4c1792e5b00b93d030000b80f00000066baf80cb814468282ef66bafc0cec0f30c4e3f917d3223e0f0766baf80cb8f12a7d82ef66bafc0cecfafaf54fb0b97c0ac4c37d1d61a2000832660fe08afcffffff0fc76e000fc73a", 0x36}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="080000000000000083000040"]) syz_usb_connect(0x0, 0x36, &(0x7f00000011c0)={{0x12, 0x1, 0x0, 0x8e, 0x77, 0xe3, 0x40, 0x1b5c, 0x105, 0x1f1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xa4, 0xd3, 0x6f, 0x0, [], [{{0x9, 0x5, 0x4}}, {{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): ed [ 571.237240][ T12] team0 (unregistering): Port device team_slave_0 removed [ 571.441656][ T9681] netlink: 'syz.8.1050': attribute type 21 has an invalid length. [ 572.141250][ T9647] team_slave_0: mtu greater than device maximum [ 572.178344][ T9681] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1050'. [ 572.331016][ T5839] usb 6-1: USB disconnect, device number 7 [ 572.491833][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1054'. [ 572.552022][ T9686] netlink: 'syz.9.1051': attribute type 1 has an invalid length. [ 572.575568][ T9686] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1051'. [ 572.756386][ T9264] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 572.775706][ T9703] FAULT_INJECTION: forcing a failure. [ 572.775706][ T9703] name failslab, interval 1, probability 0, space 0, times 0 [ 572.829163][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.6.1056 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 572.829197][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 572.829211][ T9703] Call Trace: [ 572.829220][ T9703] [ 572.829230][ T9703] dump_stack_lvl+0x189/0x250 [ 572.829262][ T9703] ? __pfx____ratelimit+0x10/0x10 [ 572.829285][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 572.829310][ T9703] ? __pfx__printk+0x10/0x10 [ 572.829344][ T9703] ? __pfx___might_resched+0x10/0x10 [ 572.829368][ T9703] ? fs_reclaim_acquire+0x7d/0x100 [ 572.829400][ T9703] should_fail_ex+0x414/0x560 [ 572.829429][ T9703] should_failslab+0xa8/0x100 [ 572.829466][ T9703] __kmalloc_noprof+0xcb/0x4f0 [ 572.829487][ T9703] ? ima_write_template_field_data+0x47/0x490 [ 572.829508][ T9703] ? process_measurement+0x11eb/0x1a40 [ 572.829539][ T9703] ima_write_template_field_data+0x47/0x490 [ 572.829560][ T9703] ? ima_eventdigest_init_common+0x286/0x3a0 [ 572.829601][ T9703] ima_eventdigest_init_common+0x2a1/0x3a0 [ 572.829638][ T9703] ? ima_eventdigest_init_common+0x211/0x3a0 [ 572.829674][ T9703] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 572.829738][ T9703] ? rcu_is_watching+0x15/0xb0 [ 572.829763][ T9703] ? trace_kmalloc+0x1f/0xd0 [ 572.829780][ T9703] ? __kmalloc_noprof+0x29b/0x4f0 [ 572.829800][ T9703] ? ima_alloc_init_template+0x172/0x6f0 [ 572.829829][ T9703] ? __pfx_ima_eventdigest_ng_init+0x10/0x10 [ 572.829863][ T9703] ima_alloc_init_template+0x30d/0x6f0 [ 572.829902][ T9703] ima_store_measurement+0x1b7/0x640 [ 572.829942][ T9703] ? __pfx_ima_store_measurement+0x10/0x10 [ 572.829968][ T9703] ? ima_d_path+0x189/0x250 [ 572.830006][ T9703] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 572.830039][ T9703] process_measurement+0x11eb/0x1a40 [ 572.830086][ T9703] ? __pfx_process_measurement+0x10/0x10 [ 572.830158][ T9703] ? rcu_read_lock_any_held+0xb3/0x120 [ 572.830203][ T9703] ima_file_mmap+0x1a2/0x1f0 [ 572.830228][ T9703] ? __pfx_ima_file_mmap+0x10/0x10 [ 572.830253][ T9703] ? ksys_write+0x1cb/0x250 [ 572.830283][ T9703] security_mmap_file+0x7a4/0xa60 [ 572.830311][ T9703] vm_mmap_pgoff+0x12c/0x4c0 [ 572.830348][ T9703] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 572.830381][ T9703] ? __fget_files+0x2a/0x420 [ 572.830410][ T9703] ? __fget_files+0x3a0/0x420 [ 572.830433][ T9703] ? __fget_files+0x2a/0x420 [ 572.830469][ T9703] ksys_mmap_pgoff+0x51f/0x760 [ 572.830499][ T9703] do_syscall_64+0xfa/0x3b0 [ 572.830522][ T9703] ? lockdep_hardirqs_on+0x9c/0x150 [ 572.830546][ T9703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.830568][ T9703] ? clear_bhb_loop+0x60/0xb0 [ 572.830594][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.830616][ T9703] RIP: 0033:0x7fc9e378ebe9 [ 572.830635][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.830654][ T9703] RSP: 002b:00007fc9e4524038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 572.830678][ T9703] RAX: ffffffffffffffda RBX: 00007fc9e39b5fa0 RCX: 00007fc9e378ebe9 [ 572.830694][ T9703] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000200000000000 [ 572.830708][ T9703] RBP: 00007fc9e4524090 R08: 0000000000000003 R09: 0000000000000000 [ 572.830721][ T9703] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 572.830734][ T9703] R13: 00007fc9e39b6038 R14: 00007fc9e39b5fa0 R15: 00007fff19121d08 [ 572.830769][ T9703] [ 573.166362][ C0] vkms_vblank_simulate: vblank timer overrun [ 573.267382][ T30] audit: type=1804 audit(1755727104.536:79): pid=9703 uid=0 auid=4294967295 ses=4294967295 subj=_ op=add_template_measure cause=ENOMEM comm="syz.6.1056" name="/newroot/23/cpu.stat" dev="tmpfs" ino=149 res=0 errno=0 [ 573.383437][ T12] IPVS: stop unused estimator thread 0... [ 573.398951][ T9264] usb 9-1: unable to get BOS descriptor or descriptor too short [ 573.605981][ T9264] usb 9-1: not running at top speed; connect to a high speed hub [ 573.645210][ T9264] usb 9-1: config 1 interface 0 has no altsetting 0 [ 573.665446][ T9264] usb 9-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 573.679649][ T9264] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.694146][ T9264] usb 9-1: Product: syz [ 573.744971][ T9711] gfs2: not a GFS2 filesystem [ 573.816093][ T5839] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 573.860681][ T9264] usb 9-1: Manufacturer: syz [ 573.891686][ T9264] usb 9-1: SerialNumber: syz [ 574.066087][ T5839] usb 10-1: Using ep0 maxpacket: 16 [ 574.178001][ T5839] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.237438][ T5839] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.281560][ T5839] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 574.298130][ T5839] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.358794][ T5839] usb 10-1: Product: syz [ 574.379385][ T9264] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input9 [ 574.405321][ T5839] usb 10-1: Manufacturer: syz [ 574.424229][ T5839] usb 10-1: SerialNumber: syz [ 574.440394][ T5194] bcm5974 9-1:1.0: could not read from device [ 574.474976][ T5194] bcm5974 9-1:1.0: could not read from device [ 574.493838][ T5194] bcm5974 9-1:1.0: could not read from device [ 574.525563][ T9264] usb 9-1: USB disconnect, device number 5 [ 574.553617][ T5194] bcm5974 9-1:1.0: could not read from device [ 574.676140][ T5839] usb 10-1: 0:2 : does not exist [ 574.694759][ T5839] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 574.735927][ T92] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 574.747895][ T5839] usb 10-1: USB disconnect, device number 4 [ 574.833947][ T9648] udevd[9648]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 574.912212][ T92] usb 7-1: Using ep0 maxpacket: 16 [ 574.932435][ T92] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.958914][ T92] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.998586][ T92] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 575.018521][ T92] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.044236][ T92] usb 7-1: Product: syz [ 575.056011][ T92] usb 7-1: Manufacturer: syz [ 575.065301][ T92] usb 7-1: SerialNumber: syz [ 575.788383][ T92] usb 7-1: 0:2 : does not exist [ 575.838777][ T92] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 575.893061][ T92] usb 7-1: USB disconnect, device number 8 [ 575.977112][ T9648] udevd[9648]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.821531][ T9730] netlink: 'syz.6.1064': attribute type 21 has an invalid length. [ 579.932624][ T9730] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1064'. [ 580.663904][ T9742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.627986][ T3573] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.766742][ T9754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.081311][ T3573] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.179586][ T3573] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.171044][ T3573] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.517684][ T9762] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 584.537758][ T9762] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 584.550048][ T9762] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 584.570426][ T9762] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 584.583144][ T9762] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 585.090596][ T3573] bridge_slave_1: left allmulticast mode [ 585.115917][ T3573] bridge_slave_1: left promiscuous mode [ 585.121767][ T3573] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.198617][ T3573] bridge_slave_0: left allmulticast mode [ 585.204325][ T3573] bridge_slave_0: left promiscuous mode [ 585.227814][ T3573] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.650726][ T9762] Bluetooth: hci1: command tx timeout [ 587.796868][ T5839] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 588.154920][ T5839] usb 7-1: Using ep0 maxpacket: 16 [ 588.173738][ T5839] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 588.198140][ T5839] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 588.209658][ T5839] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 588.246917][ T5839] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 588.267632][ T5839] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 588.295142][ T5839] usb 7-1: config 0 has no interface number 0 [ 588.354416][ T5839] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 588.384866][ T5839] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 588.421754][ T5839] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 588.432319][ T5839] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 588.472724][ T5839] usb 7-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 588.484405][ T5839] usb 7-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 588.504893][ T5839] usb 7-1: config 0 interface 125 has no altsetting 0 [ 588.512069][ T5839] usb 7-1: config 0 interface 125 has no altsetting 2 [ 588.537108][ T5839] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 588.555034][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.619532][ T9791] binder: BINDER_SET_CONTEXT_MGR already set [ 588.626681][ T9791] binder: 9789:9791 ioctl 4018620d 200000000200 returned -16 [ 588.647422][ T5839] usb 7-1: Product: syz [ 588.651685][ T5839] usb 7-1: Manufacturer: syz [ 588.697522][ T5855] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 588.742750][ T9792] binder: 9789:9792 ioctl c028aa03 200000000480 returned -22 [ 588.770172][ T9762] Bluetooth: hci1: command tx timeout [ 588.786868][ T9791] binder: 9789:9791 unknown command 1953002597 [ 588.793615][ T9791] binder: 9789:9791 ioctl c0306201 2000000003c0 returned -22 [ 588.809652][ T5839] usb 7-1: SerialNumber: syz [ 588.840515][ T5839] usb 7-1: config 0 descriptor?? [ 588.961113][ T5839] usb 7-1: selecting invalid altsetting 2 [ 589.013552][ T5855] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.062061][ T5855] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 589.075161][ T5855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.080769][ C0] usb 7-1: async_complete: urb error -71 [ 589.089164][ C0] usb 7-1: async_complete: urb error -71 [ 589.094967][ C0] usb 7-1: async_complete: urb error -71 [ 589.100777][ C0] usb 7-1: async_complete: urb error -71 [ 589.105520][ T5855] usb 9-1: config 0 descriptor?? [ 589.108973][ T5839] get_1284_register: usb error -71 [ 589.154627][ T5839] uss720 7-1:0.125: probe with driver uss720 failed with error -71 [ 589.280705][ T5839] usb 7-1: USB disconnect, device number 9 [ 589.343018][ T3573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.354685][ T3573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.367111][ T3573] bond0 (unregistering): Released all slaves [ 589.611375][ T30] audit: type=1800 audit(1755727120.916:80): pid=9792 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.1085" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 589.618948][ T9792] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 589.630819][ C1] vkms_vblank_simulate: vblank timer overrun [ 589.646934][ T9792] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 589.657323][ T9792] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 589.908868][ T5855] lua 0003:1E7D:2C2E.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.8-1/input0 [ 590.676464][ T5855] usb 9-1: USB disconnect, device number 6 [ 590.876079][ T9762] Bluetooth: hci1: command tx timeout [ 590.947453][ T9801] fido_id[9801]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 591.536526][ T9816] PKCS8: Unsupported PKCS#8 version [ 591.813588][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 592.075553][ T24] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 592.096644][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.104741][ T24] usb 8-1: Product: syz [ 592.125849][ T24] usb 8-1: Manufacturer: syz [ 592.142139][ T24] usb 8-1: SerialNumber: syz [ 592.182304][ T24] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 592.409375][ T9761] chnl_net:caif_netlink_parms(): no params data found [ 592.419089][ T92] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 592.486794][ T9827] PKCS8: Unsupported PKCS#8 version [ 593.056902][ T9762] Bluetooth: hci1: command tx timeout [ 593.752643][ T3573] hsr_slave_0: left promiscuous mode [ 594.311087][ T92] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 594.459846][ T92] ath9k_htc: Failed to initialize the device [ 594.676168][ T3573] hsr_slave_1: left promiscuous mode [ 594.691500][ T3573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.743357][ T3573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.781576][ T92] usb 8-1: ath9k_htc: USB layer deinitialized [ 594.855045][ T3573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.167242][ T3573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.332957][ T3573] veth1_macvtap: left promiscuous mode [ 595.385135][ T3573] veth0_macvtap: left promiscuous mode [ 595.447781][ T3573] veth1_vlan: left promiscuous mode [ 595.491345][ T3573] veth0_vlan: left promiscuous mode [ 596.850146][ T24] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 597.024403][ T24] usb 10-1: device descriptor read/64, error -71 [ 597.204007][ T3573] team0 (unregistering): Port device team_slave_1 removed [ 597.301113][ T3573] team0 (unregistering): Port device team_slave_0 removed [ 597.316313][ T24] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 597.476198][ T24] usb 10-1: device descriptor read/64, error -71 [ 597.606319][ T24] usb usb10-port1: attempt power cycle [ 597.958075][ T24] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 597.999377][ T24] usb 10-1: device descriptor read/8, error -71 [ 598.051496][ T9837] syzkaller1: entered promiscuous mode [ 598.060024][ T9837] syzkaller1: entered allmulticast mode [ 598.198555][ T9264] usb 8-1: USB disconnect, device number 4 [ 598.268500][ T24] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 598.326316][ T24] usb 10-1: device descriptor read/8, error -71 [ 598.664916][ T24] usb usb10-port1: unable to enumerate USB device [ 598.685047][ T9761] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.693360][ T9761] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.360907][ T9761] bridge_slave_0: entered allmulticast mode [ 599.378243][ T9761] bridge_slave_0: entered promiscuous mode [ 599.397528][ T9761] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.404757][ T9761] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.419031][ T9761] bridge_slave_1: entered allmulticast mode [ 599.435547][ T9761] bridge_slave_1: entered promiscuous mode [ 601.641233][ T9885] PKCS8: Unsupported PKCS#8 version [ 602.738343][ T9761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.896361][ T9761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.037960][ T9899] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 607.460108][ T9761] team0: Port device team_slave_0 added [ 608.586013][ T9761] team0: Port device team_slave_1 added [ 608.782533][ T9761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.795304][ T9761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.958953][ T9761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.054421][ T9927] gfs2: not a GFS2 filesystem [ 609.746984][ T9761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.754737][ T9761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.002761][ T9761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.517056][ T9761] hsr_slave_0: entered promiscuous mode [ 611.559912][ T9761] hsr_slave_1: entered promiscuous mode [ 612.072922][ T9761] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.234624][ T9761] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.376244][ T24] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 612.387873][ T9761] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.343492][ T9761] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.387893][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 614.412479][ T24] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 614.454206][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 614.524440][ T24] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 614.605849][ T24] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 614.633994][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.682611][ T24] usb 10-1: config 0 descriptor?? [ 614.816012][ T9761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 614.854259][ T9761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 614.872215][ T9761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 614.901805][ T24] hdpvr 10-1:0.0: unexpected answer of status request, len -71 [ 614.914331][ T9761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 614.921698][ T24] hdpvr 10-1:0.0: device init failed [ 614.939820][ T24] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -12 [ 614.999496][ T24] usb 10-1: USB disconnect, device number 9 [ 615.737453][ T9761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.850998][ T9964] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1120'. [ 615.970866][ T9964] netlink: zone id is out of range [ 616.136753][ T9964] netlink: zone id is out of range [ 616.161326][ T9264] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 616.277732][ T9964] netlink: get zone limit has 8 unknown bytes [ 616.298259][ T9966] IPv6: sit1: Disabled Multicast RS [ 616.349675][ T9761] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.388965][ T9264] usb 8-1: config 0 has an invalid interface number: 217 but max is 0 [ 616.426402][ T9264] usb 8-1: config 0 has no interface number 0 [ 616.444596][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.451877][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.453208][ T9264] usb 8-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 616.471664][ T9264] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.480744][ T9264] usb 8-1: Product: syz [ 616.485292][ T9264] usb 8-1: Manufacturer: syz [ 616.494939][ T9264] usb 8-1: SerialNumber: syz [ 617.094407][ T9264] usb 8-1: config 0 descriptor?? [ 617.117240][ T9264] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 617.222327][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.229584][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.413777][ T9761] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 617.468925][ T9761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.710555][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1121'. [ 617.795835][ T9982] PKCS8: Unsupported PKCS#8 version [ 618.409350][ T9264] gspca_sn9c20x: Write register 1001 failed -110 [ 618.454280][ T9264] gspca_sn9c20x: Device initialization failed [ 618.495904][ T9264] gspca_sn9c20x 8-1:0.217: probe with driver gspca_sn9c20x failed with error -110 [ 618.709247][ T9990] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.1126'. [ 618.719375][ T9990] netlink: zone id is out of range [ 618.724874][ T9990] netlink: zone id is out of range [ 618.730555][ T9990] netlink: get zone limit has 8 unknown bytes [ 619.143596][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1121'. [ 619.205930][ T9264] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 619.499428][ T9264] usb 7-1: config index 0 descriptor too short (expected 30768, got 18) [ 619.510089][ T9264] usb 7-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 619.575939][ T9264] usb 7-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 619.647030][ T9264] usb 7-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 619.725232][ T9264] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 619.750001][ T9264] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.935396][ T9992] team0 (unregistering): Port device team_slave_0 removed [ 619.985033][ T9264] usb 7-1: string descriptor 0 read error: -22 [ 620.033873][ T9992] team0 (unregistering): Port device team_slave_1 removed [ 620.195587][ T9981] team_slave_0: mtu greater than device maximum [ 620.235869][ T9332] usb 7-1: USB disconnect, device number 10 [ 620.278670][ T9761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.340041][ T9264] usb 8-1: USB disconnect, device number 5 [ 621.210813][T10010] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1129'. [ 621.719781][T10015] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1130'. [ 621.796283][ T9761] veth0_vlan: entered promiscuous mode [ 622.727814][ T9761] veth1_vlan: entered promiscuous mode [ 622.876224][ T9967] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 623.045852][ T9967] usb 10-1: Using ep0 maxpacket: 16 [ 623.053465][ T9967] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 623.138394][ T9967] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 623.161871][ T9967] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 623.185134][ T9761] veth0_macvtap: entered promiscuous mode [ 623.191000][ T9967] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 623.191068][ T9967] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 623.883321][ T9967] usb 10-1: config 0 has no interface number 0 [ 623.928444][ T9967] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 623.990027][ T9967] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 624.012007][ T9967] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 624.060457][ T9761] veth1_macvtap: entered promiscuous mode [ 624.076928][ T9967] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.131958][ T9967] usb 10-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 624.163096][ T9761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.184525][ T9967] usb 10-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 624.214200][ T9967] usb 10-1: config 0 interface 125 has no altsetting 0 [ 624.224633][ T9761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.270860][ T9761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.283849][ T9967] usb 10-1: config 0 interface 125 has no altsetting 2 [ 624.306980][ T9761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.317450][ T9761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.327167][ T9967] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 624.337160][ T9967] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.345412][ T9967] usb 10-1: Product: syz [ 624.357612][ T9967] usb 10-1: Manufacturer: syz [ 624.362465][ T9967] usb 10-1: SerialNumber: syz [ 624.367988][ T9761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.391461][ T9967] usb 10-1: config 0 descriptor?? [ 624.502582][ T9967] usb 10-1: selecting invalid altsetting 2 [ 624.648277][ C1] usb 10-1: async_complete: urb error -71 [ 624.654237][ C1] usb 10-1: async_complete: urb error -71 [ 624.660132][ C1] usb 10-1: async_complete: urb error -71 [ 624.666116][ C1] usb 10-1: async_complete: urb error -71 [ 624.706146][ T9967] get_1284_register: usb error -71 [ 624.718766][ T9967] uss720 10-1:0.125: probe with driver uss720 failed with error -71 [ 624.759537][ T9967] usb 10-1: USB disconnect, device number 10 [ 624.767018][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.835882][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.863302][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.069094][T10041] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1137'. [ 625.555510][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.045901][ T9967] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 626.556130][ T9967] usb 10-1: device descriptor read/64, error -71 [ 627.016872][ T9967] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 627.186017][ T9967] usb 10-1: device descriptor read/64, error -71 [ 627.299512][ T9967] usb usb10-port1: attempt power cycle [ 627.464122][ T9264] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 627.724673][ T9967] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 627.725397][T10056] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1140'. [ 627.911556][ T9264] usb 9-1: Using ep0 maxpacket: 16 [ 627.939940][ T9264] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.959902][ T9264] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 628.003380][ T9967] usb 10-1: device descriptor read/8, error -71 [ 628.007309][ T9264] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 628.041119][ T9264] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.080931][ T9264] usb 9-1: Product: syz [ 628.098249][ T9264] usb 9-1: Manufacturer: syz [ 628.130006][ T9264] usb 9-1: SerialNumber: syz [ 628.276978][ T9967] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 628.312249][ T9967] usb 10-1: device descriptor read/8, error -71 [ 628.343647][ T9264] usb 9-1: 0:2 : does not exist [ 628.504143][ T9967] usb usb10-port1: unable to enumerate USB device [ 628.635627][ T9264] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 628.709507][T10060] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1141'. [ 628.842166][T10060] netlink: zone id is out of range [ 628.885500][T10060] netlink: zone id is out of range [ 628.929613][T10060] netlink: get zone limit has 8 unknown bytes [ 628.972227][ T9264] usb 9-1: USB disconnect, device number 7 [ 629.148966][ T9989] udevd[9989]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.175996][T10065] loop2: detected capacity change from 0 to 7 [ 629.253196][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.262488][ C0] buffer_io_error: 7 callbacks suppressed [ 629.262500][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 629.315660][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.324964][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 629.347501][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.356932][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 629.385159][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.394407][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 629.403713][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.412976][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 629.442361][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.451796][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 629.469043][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 629.480115][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 629.685965][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.992933][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 630.002150][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 630.026181][T10065] ldm_validate_partition_table(): Disk read failed. [ 630.026255][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.055504][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 630.064790][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 630.078919][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 630.088186][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 630.288166][T10065] Dev loop2: unable to read RDB block 0 [ 630.520821][T10065] loop2: unable to read partition table [ 630.548340][T10065] loop2: partition table beyond EOD, truncated [ 630.687047][T10065] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 631.216077][ T43] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 631.376067][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 631.508455][T10094] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1150'. [ 631.819708][ T43] usb 8-1: Using ep0 maxpacket: 16 [ 631.857464][ T43] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 631.869518][ T43] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 631.880990][ T43] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 631.892813][ T43] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 631.902458][ T43] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 631.915056][ T43] usb 8-1: config 0 has no interface number 0 [ 631.915886][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 631.921597][ T43] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 631.929770][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.949958][ T43] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 631.955171][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 631.960470][ T43] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 631.981082][ T43] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 631.981836][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 632.004512][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.012848][ T9] usb 7-1: Product: syz [ 632.013039][ T43] usb 8-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 632.033130][ T43] usb 8-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 632.046987][ T9] usb 7-1: Manufacturer: syz [ 632.052369][ T43] usb 8-1: config 0 interface 125 has no altsetting 0 [ 632.052923][ T9] usb 7-1: SerialNumber: syz [ 632.065124][ T5842] Bluetooth: hci6: command 0x0406 tx timeout [ 632.071456][ T43] usb 8-1: config 0 interface 125 has no altsetting 2 [ 632.071551][T10074] Bluetooth: hci2: command 0x0406 tx timeout [ 632.087920][ T9762] Bluetooth: hci0: command 0x0406 tx timeout [ 632.200742][ T43] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 632.214611][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.234906][ T43] usb 8-1: Product: syz [ 632.240702][ T43] usb 8-1: Manufacturer: syz [ 632.251229][ T43] usb 8-1: SerialNumber: syz [ 632.326842][ T9] usb 7-1: 0:2 : does not exist [ 632.396176][ T43] usb 8-1: config 0 descriptor?? [ 632.398184][ T9] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 632.438501][ T43] usb 8-1: selecting invalid altsetting 2 [ 632.556038][ T9] usb 7-1: USB disconnect, device number 11 [ 632.616325][ C1] usb 8-1: async_complete: urb error -71 [ 632.622109][ C1] usb 8-1: async_complete: urb error -71 [ 632.627824][ C1] usb 8-1: async_complete: urb error -71 [ 632.633522][ C1] usb 8-1: async_complete: urb error -71 [ 632.670072][ T43] get_1284_register: usb error -71 [ 632.690184][ T43] uss720 8-1:0.125: probe with driver uss720 failed with error -71 [ 632.751622][ T43] usb 8-1: USB disconnect, device number 6 [ 632.753877][ T9989] udevd[9989]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 636.996103][ T43] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 637.000437][T10108] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.1154'. [ 637.017330][T10108] netlink: zone id is out of range [ 637.024032][T10108] netlink: zone id is out of range [ 637.030493][T10108] netlink: get zone limit has 8 unknown bytes [ 637.698246][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 637.729971][T10110] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1155'. [ 637.970023][ T43] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.986344][ T43] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 638.090917][ T43] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 638.100705][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.112214][ T43] usb 7-1: Product: syz [ 638.131107][ T43] usb 7-1: Manufacturer: syz [ 638.137176][ T43] usb 7-1: SerialNumber: syz [ 638.202759][T10105] IPv6: sit1: Disabled Multicast RS [ 638.437124][ T43] usb 7-1: 0:2 : does not exist [ 638.458607][ T43] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 638.626615][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 639.625980][ T43] usb 7-1: USB disconnect, device number 12 [ 640.607216][T10122] loop2: detected capacity change from 0 to 7 [ 640.807038][ C1] blk_print_req_error: 11 callbacks suppressed [ 640.807058][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 640.834773][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 640.844089][ C1] buffer_io_error: 11 callbacks suppressed [ 640.844107][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 641.629602][ T9989] udevd[9989]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.636423][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 641.654663][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 641.663403][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 641.672699][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 641.682010][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 641.691328][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 641.714451][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 641.723849][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 641.732949][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 641.742229][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 641.753780][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 641.763143][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 641.771434][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 641.780728][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 641.789054][T10122] ldm_validate_partition_table(): Disk read failed. [ 641.819519][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 641.828884][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 641.831419][T10129] xt_CONNSECMARK: invalid mode: 0 [ 641.846677][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 641.919875][T10122] Dev loop2: unable to read RDB block 0 [ 641.942042][T10122] loop2: unable to read partition table [ 641.972117][T10122] loop2: partition table beyond EOD, truncated [ 641.998278][T10122] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 644.695922][T10179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1166'. [ 645.196253][ T24] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 645.387753][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.563943][T10182] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1170'. [ 645.892872][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.912579][ T24] usb 8-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 645.938839][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.967915][ T24] usb 8-1: config 0 descriptor?? [ 646.168996][ T43] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 646.376207][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 646.420283][ T43] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 646.436201][ T43] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 646.629125][ T43] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 646.652933][T10074] Bluetooth: hci2: Dropping invalid advertising data [ 646.661266][T10074] Bluetooth: hci2: Malformed LE Event: 0x02 [ 646.687274][ T24] semitek 0003:1EA7:0907.0005: hidraw0: USB HID vf5.a3 Device [HID 1ea7:0907] on usb-dummy_hcd.7-1/input0 [ 646.721837][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.795095][ T43] usb 7-1: Product: syz [ 646.809258][ T43] usb 7-1: Manufacturer: syz [ 646.815284][ T43] usb 7-1: SerialNumber: syz [ 646.820452][ T24] usb 8-1: USB disconnect, device number 7 [ 647.071821][ T43] usb 7-1: 0:2 : does not exist [ 647.133497][ T43] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 647.302182][ T43] usb 7-1: USB disconnect, device number 13 [ 648.548261][T10200] FAULT_INJECTION: forcing a failure. [ 648.548261][T10200] name failslab, interval 1, probability 0, space 0, times 0 [ 648.561379][T10200] CPU: 0 UID: 0 PID: 10200 Comm: syz.6.1175 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 648.561399][T10200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 648.561421][T10200] Call Trace: [ 648.561427][T10200] [ 648.561433][T10200] dump_stack_lvl+0x189/0x250 [ 648.561456][T10200] ? __pfx____ratelimit+0x10/0x10 [ 648.561473][T10200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.561491][T10200] ? __pfx__printk+0x10/0x10 [ 648.561516][T10200] ? __pfx___might_resched+0x10/0x10 [ 648.561533][T10200] ? fs_reclaim_acquire+0x7d/0x100 [ 648.561555][T10200] should_fail_ex+0x414/0x560 [ 648.561575][T10200] should_failslab+0xa8/0x100 [ 648.561594][T10200] __kmalloc_noprof+0xcb/0x4f0 [ 648.561607][T10200] ? kfree+0x4d/0x440 [ 648.561628][T10200] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 648.561653][T10200] tomoyo_realpath_from_path+0xe3/0x5d0 [ 648.561685][T10200] tomoyo_check_open_permission+0x1c1/0x3b0 [ 648.561703][T10200] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 648.561719][T10200] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 648.561766][T10200] ? tomoyo_file_open+0x166/0x220 [ 648.561791][T10200] security_file_open+0xb1/0x270 [ 648.561810][T10200] do_dentry_open+0x35e/0x1970 [ 648.561843][T10200] vfs_open+0x3b/0x340 [ 648.561860][T10200] ? path_openat+0x2ecd/0x3830 [ 648.561885][T10200] path_openat+0x2ee5/0x3830 [ 648.561906][T10200] ? arch_stack_walk+0xfc/0x150 [ 648.561951][T10200] ? __pfx_path_openat+0x10/0x10 [ 648.561971][T10200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.562002][T10200] do_filp_open+0x1fa/0x410 [ 648.562023][T10200] ? __lock_acquire+0xab9/0xd20 [ 648.562039][T10200] ? __pfx_do_filp_open+0x10/0x10 [ 648.562080][T10200] ? _raw_spin_unlock+0x28/0x50 [ 648.562103][T10200] ? alloc_fd+0x64c/0x6c0 [ 648.562128][T10200] do_sys_openat2+0x121/0x1c0 [ 648.562151][T10200] ? __pfx_do_sys_openat2+0x10/0x10 [ 648.562172][T10200] ? ksys_write+0x22a/0x250 [ 648.562188][T10200] ? __pfx_ksys_write+0x10/0x10 [ 648.562205][T10200] __x64_sys_openat+0x138/0x170 [ 648.562230][T10200] do_syscall_64+0xfa/0x3b0 [ 648.562246][T10200] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.562262][T10200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.562277][T10200] ? clear_bhb_loop+0x60/0xb0 [ 648.562296][T10200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.562311][T10200] RIP: 0033:0x7fc9e378ebe9 [ 648.562325][T10200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.562339][T10200] RSP: 002b:00007fc9e4524038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 648.562355][T10200] RAX: ffffffffffffffda RBX: 00007fc9e39b5fa0 RCX: 00007fc9e378ebe9 [ 648.562366][T10200] RDX: 000000000008417f RSI: 0000200000000140 RDI: ffffffffffffff9c [ 648.562377][T10200] RBP: 00007fc9e4524090 R08: 0000000000000000 R09: 0000000000000000 [ 648.562387][T10200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.562396][T10200] R13: 00007fc9e39b6038 R14: 00007fc9e39b5fa0 R15: 00007fff19121d08 [ 648.562424][T10200] [ 648.562431][T10200] ERROR: Out of memory at tomoyo_realpath_from_path. [ 649.054647][T10204] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.1176'. [ 649.079010][T10204] netlink: zone id is out of range [ 649.084393][T10204] netlink: zone id is out of range [ 649.132207][T10204] netlink: get zone limit has 8 unknown bytes [ 649.171616][ T30] audit: type=1326 audit(1755727180.476:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10190 comm="syz.0.1173" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f78e5785ba7 code=0x0 [ 650.604748][T10210] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1178'. [ 650.674045][T10215] netlink: 'syz.6.1180': attribute type 21 has an invalid length. [ 650.723871][T10215] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1180'. [ 651.679386][T10228] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1184'. [ 652.735972][ T9264] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 653.127028][ T9264] usb 9-1: Using ep0 maxpacket: 16 [ 653.633621][ T9264] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.801041][ T9264] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 654.987217][ T9264] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 655.290552][ T9264] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.341848][ T9264] usb 9-1: Product: syz [ 655.365574][ T9264] usb 9-1: Manufacturer: syz [ 655.388320][ T9264] usb 9-1: SerialNumber: syz [ 656.561852][T10241] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1187'. [ 656.751676][ T9264] usb 9-1: can't set config #1, error -71 [ 656.760560][ T9264] usb 9-1: USB disconnect, device number 8 [ 657.140445][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1189'. [ 657.316437][T10244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1188'. [ 657.995155][T10261] netlink: 'syz.6.1193': attribute type 21 has an invalid length. [ 658.003578][T10261] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1193'. [ 661.926119][ T9264] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 661.935899][ T24] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 662.115954][ T9264] usb 8-1: Using ep0 maxpacket: 16 [ 662.130125][ T24] usb 10-1: config index 0 descriptor too short (expected 30768, got 18) [ 662.162562][ T9264] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 662.170998][ T24] usb 10-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 662.181199][ T9264] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 662.215851][ T24] usb 10-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 662.238186][ T9264] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 662.243779][ T24] usb 10-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 662.255927][ T9264] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.265211][ T9264] usb 8-1: Product: syz [ 662.275855][ T24] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 662.296420][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.524763][T10283] team_slave_0: mtu greater than device maximum [ 662.531312][ T9264] usb 8-1: Manufacturer: syz [ 662.536099][ T9264] usb 8-1: SerialNumber: syz [ 663.035447][ T24] usb 10-1: string descriptor 0 read error: -71 [ 663.124515][ T24] usb 10-1: USB disconnect, device number 15 [ 663.268360][ T9264] usb 8-1: 0:2 : does not exist [ 663.279786][ T9264] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 663.364048][ T9264] usb 8-1: USB disconnect, device number 8 [ 663.366170][ T9332] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 663.693116][ T9989] udevd[9989]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 663.761934][ T9332] usb 9-1: config 0 has no interfaces? [ 663.865441][ T9332] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 664.086737][ T9332] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.649661][T10304] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 664.669323][ T9332] usb 9-1: config 0 descriptor?? [ 664.849945][T10309] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 665.062512][T10309] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 666.097833][T10309] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 666.115109][T10309] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 666.167579][T10309] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 666.185269][T10309] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 666.267247][T10309] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 666.273232][T10309] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 666.336133][T10309] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 666.370411][T10309] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 666.822225][T10333] gfs2: not a GFS2 filesystem [ 667.640783][T10334] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1208'. [ 669.166054][ T43] usb 9-1: USB disconnect, device number 9 [ 669.317442][T10349] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 671.216243][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 671.367723][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.402109][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 671.442524][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.963459][ T9] usb 7-1: config 0 descriptor?? [ 671.972333][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 672.519317][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 672.557475][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 672.828622][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 672.863265][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 672.883592][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 672.901807][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 672.933347][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 672.945314][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 673.168130][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 673.204150][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 673.226623][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 673.233636][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 673.273749][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 673.293986][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 673.311512][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 673.355920][ T9] pwc: Registered as video103. [ 673.374950][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input10 [ 673.422081][ T9] usb 7-1: USB disconnect, device number 14 [ 673.447501][ T43] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 673.578745][T10385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1223'. [ 673.635879][ T43] usb 9-1: Using ep0 maxpacket: 8 [ 673.662283][ T43] usb 9-1: config 0 has an invalid interface number: 56 but max is 0 [ 673.709653][ T43] usb 9-1: config 0 has no interface number 0 [ 673.753038][ T43] usb 9-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 673.799668][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.839311][ T43] usb 9-1: Product: syz [ 673.854051][ T43] usb 9-1: Manufacturer: syz [ 674.630071][ T43] usb 9-1: SerialNumber: syz [ 674.722365][ T43] usb 9-1: config 0 descriptor?? [ 674.992102][T10379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.192095][T10379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.316730][ T43] peak_usb 9-1:0.56 can0: unable to request usb[type=0 value=1] err=-32 [ 675.329402][ T43] peak_usb 9-1:0.56: unable to read PCAN-USB X6 firmware info (err -32) [ 675.567060][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 675.693670][ T43] peak_usb 9-1:0.56: probe with driver peak_usb failed with error -32 [ 675.875272][ T43] usb 9-1: USB disconnect, device number 10 [ 675.950001][ T9] usb 8-1: config 0 has an invalid interface number: 217 but max is 0 [ 675.967382][ T9] usb 8-1: config 0 has no interface number 0 [ 675.981787][ T9] usb 8-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 676.012318][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.040714][ T9] usb 8-1: Product: syz [ 676.061128][ T9] usb 8-1: Manufacturer: syz [ 676.088009][ T9] usb 8-1: SerialNumber: syz [ 676.259300][ T9] usb 8-1: config 0 descriptor?? [ 676.307749][ T9] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 676.635879][ T5839] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 676.731251][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1225'. [ 676.793459][ T5839] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.822545][ T5839] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 676.846339][ T5839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.868028][ T9264] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 676.887315][ T5839] usb 9-1: config 0 descriptor?? [ 676.969585][ T5839] pwc: Askey VC010 type 2 USB webcam detected. [ 677.069180][ T9264] usb 10-1: config index 0 descriptor too short (expected 30768, got 18) [ 677.078326][ T9264] usb 10-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 677.148008][ T9] gspca_sn9c20x: Write register 1002 failed -71 [ 677.154463][ T9] gspca_sn9c20x: Device initialization failed [ 677.183977][ T9264] usb 10-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 677.195286][ T9] gspca_sn9c20x 8-1:0.217: probe with driver gspca_sn9c20x failed with error -71 [ 677.225398][ T9264] usb 10-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 677.242781][ T9] usb 8-1: USB disconnect, device number 9 [ 677.269173][ T9264] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 677.295883][ T9264] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.386151][ T5839] pwc: recv_control_msg error -32 req 02 val 2b00 [ 677.405564][ T5839] pwc: recv_control_msg error -32 req 02 val 2700 [ 677.413258][ T5839] pwc: recv_control_msg error -32 req 02 val 2c00 [ 677.426893][ T5839] pwc: recv_control_msg error -32 req 04 val 1000 [ 677.442661][ T5839] pwc: recv_control_msg error -32 req 04 val 1300 [ 677.460684][ T5839] pwc: recv_control_msg error -32 req 04 val 1400 [ 677.480546][ T5839] pwc: recv_control_msg error -32 req 02 val 2000 [ 677.503812][ T5839] pwc: recv_control_msg error -32 req 02 val 2100 [ 677.526314][ T5839] pwc: recv_control_msg error -32 req 04 val 1500 [ 677.545967][ T9264] usb 10-1: string descriptor 0 read error: -22 [ 677.552506][ T5839] pwc: recv_control_msg error -32 req 02 val 2500 [ 677.568574][ T5839] pwc: recv_control_msg error -32 req 02 val 2400 [ 677.578590][ T5839] pwc: recv_control_msg error -32 req 02 val 2600 [ 677.596761][ T5839] pwc: recv_control_msg error -32 req 02 val 2900 [ 677.605613][ T5839] pwc: recv_control_msg error -32 req 02 val 2800 [ 677.757245][T10412] team_slave_0: mtu greater than device maximum [ 677.780590][ T9] usb 10-1: USB disconnect, device number 16 [ 677.828616][ T5839] pwc: recv_control_msg error -71 req 04 val 1200 [ 677.860634][ T5839] pwc: Registered as video103. [ 677.992397][ T5839] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input11 [ 678.423022][ T5839] usb 9-1: USB disconnect, device number 11 [ 680.167160][T10431] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1233'. [ 681.157029][T10451] [U]  [ 682.361531][T10464] tipc: Started in network mode [ 682.394961][T10464] tipc: Node identity 3a245bb2cb3d, cluster identity 4711 [ 682.474111][T10464] tipc: Enabled bearer , priority 0 [ 682.610896][T10465] syzkaller0: entered promiscuous mode [ 682.684692][T10465] syzkaller0: entered allmulticast mode [ 683.146060][T10466] tipc: Resetting bearer [ 683.317310][T10466] tipc: Disabling bearer [ 683.665987][ T5939] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 683.832140][ T5939] usb 10-1: config 0 has no interfaces? [ 683.861862][ T5939] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 683.920495][ T5939] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.027395][ T5939] usb 10-1: config 0 descriptor?? [ 684.328740][ T9967] usb 10-1: USB disconnect, device number 17 [ 685.753313][T10488] overlay: ./bus is not a directory [ 686.182409][ T9967] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 686.564925][ T9967] usb 7-1: Using ep0 maxpacket: 16 [ 686.572173][ T9967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.584673][ T9967] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 686.594118][ T9967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.613644][ T9967] usb 7-1: config 0 descriptor?? [ 687.575895][T10481] 9pnet: Could not find request transport: rfdno= [ 687.615897][ T9967] usbhid 7-1:0.0: can't add hid device: -71 [ 687.642824][ T9967] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 687.723520][ T9967] usb 7-1: USB disconnect, device number 15 [ 688.133349][T10508] overlayfs: missing 'lowerdir' [ 690.326571][T10518] block device autoloading is deprecated and will be removed. [ 690.788932][T10508] netlink: 'syz.0.1254': attribute type 10 has an invalid length. [ 691.106317][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.112699][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.133005][T10508] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.288247][T10508] bridge_slave_1: left allmulticast mode [ 691.293958][T10508] bridge_slave_1: left promiscuous mode [ 691.303718][T10508] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.511673][T10508] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 692.640954][T10538] Bluetooth: MGMT ver 1.23 [ 693.190885][T10548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 695.806169][ T5939] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 696.187777][ T5939] usb 10-1: config 0 has no interfaces? [ 696.193698][ T5939] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 696.205923][ T5939] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.218788][ T5939] usb 10-1: config 0 descriptor?? [ 696.321484][T10588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 697.013238][T10585] netlink: 4860 bytes leftover after parsing attributes in process `syz.7.1276'. [ 697.058471][ T5939] usb 10-1: USB disconnect, device number 18 [ 697.452656][T10596] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 697.945313][T10603] lo speed is unknown, defaulting to 1000 [ 697.952258][T10603] lo speed is unknown, defaulting to 1000 [ 698.006740][T10603] lo speed is unknown, defaulting to 1000 [ 698.126782][T10603] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 698.642039][T10603] lo speed is unknown, defaulting to 1000 [ 698.650624][T10603] lo speed is unknown, defaulting to 1000 [ 698.657981][T10603] lo speed is unknown, defaulting to 1000 [ 698.665541][T10603] lo speed is unknown, defaulting to 1000 [ 698.672829][T10603] lo speed is unknown, defaulting to 1000 [ 698.680265][T10603] lo speed is unknown, defaulting to 1000 [ 699.069175][T10605] syz.0.1279: attempt to access beyond end of device [ 699.069175][T10605] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 699.807654][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1281'. [ 699.817923][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1281'. [ 699.832280][T10614] netlink: 'syz.0.1284': attribute type 1 has an invalid length. [ 699.921885][T10614] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1284'. [ 700.195995][ T9332] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 700.365966][ T9332] usb 8-1: Using ep0 maxpacket: 32 [ 700.423128][ T9332] usb 8-1: config 0 has an invalid interface number: 231 but max is 0 [ 700.450649][ T9332] usb 8-1: config 0 has no interface number 0 [ 700.496055][ T9332] usb 8-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 700.544320][ T9332] usb 8-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 700.606174][ T9332] usb 8-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 700.664614][ T9332] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.676352][ T9332] usb 8-1: Product: syz [ 700.680828][ T9332] usb 8-1: Manufacturer: syz [ 700.703971][ T9332] usb 8-1: SerialNumber: syz [ 700.882552][ T9332] usb 8-1: config 0 descriptor?? [ 700.921337][T10617] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 701.003824][T10617] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 701.711871][ T9332] plusb 8-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.7-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 7e:43:a9:59:4c:40 [ 702.313788][T10635] PKCS8: Unsupported PKCS#8 version [ 702.787320][T10634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 702.810329][ T9332] usb 8-1: USB disconnect, device number 10 [ 702.940153][ T9332] plusb 8-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.7-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 703.289362][T10640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1290'. [ 703.408402][T10640] team0: No ports can be present during mode change [ 706.969662][T10675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 709.089088][T10690] bridge_slave_0: left allmulticast mode [ 709.094897][T10690] bridge_slave_0: left promiscuous mode [ 709.838334][T10690] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.354264][T10690] bridge_slave_1: left allmulticast mode [ 710.507728][T10701] random: crng reseeded on system resumption [ 710.573998][T10690] bridge_slave_1: left promiscuous mode [ 710.585191][T10690] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.008195][T10690] bond0: (slave bond_slave_0): Releasing backup interface [ 711.053472][T10690] bond0: (slave bond_slave_1): Releasing backup interface [ 711.187386][T10690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.195195][T10690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.378939][T10690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.460727][T10690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.532478][ T5839] lo speed is unknown, defaulting to 1000 [ 711.542986][T10694] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 711.557404][ T30] audit: type=1800 audit(1755727242.846:82): pid=10694 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1304" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 711.577551][T10694] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 711.591812][T10703] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 711.601255][T10694] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 711.655858][ T9332] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 711.855917][ T9967] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 711.864226][ T9332] usb 10-1: Using ep0 maxpacket: 16 [ 711.893100][ T9332] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 711.916136][ T9332] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 711.940234][ T9332] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 711.990382][ T9332] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 712.015197][ T9332] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 712.063064][ T9332] usb 10-1: config 0 has no interface number 0 [ 712.069794][ T9967] usb 7-1: Using ep0 maxpacket: 16 [ 712.080468][ T9332] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 712.096111][ T9967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.118572][ T9332] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 712.132141][ T9967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.162486][ T9332] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 712.176741][ T9967] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 712.194505][ T9332] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 712.213926][ T9967] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 712.229002][ T9332] usb 10-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 712.241952][ T9967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.263986][ T9332] usb 10-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 712.285534][ T9967] usb 7-1: config 0 descriptor?? [ 712.293354][ T9332] usb 10-1: config 0 interface 125 has no altsetting 0 [ 712.329348][ T9332] usb 10-1: config 0 interface 125 has no altsetting 2 [ 712.368130][ T9332] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 712.379515][ T9332] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.398950][ T9332] usb 10-1: Product: syz [ 712.410216][ T9332] usb 10-1: Manufacturer: syz [ 712.426108][ T9332] usb 10-1: SerialNumber: syz [ 712.453171][ T9332] usb 10-1: config 0 descriptor?? [ 712.477171][ T9332] usb 10-1: selecting invalid altsetting 2 [ 712.676004][ C1] usb 10-1: async_complete: urb error -71 [ 712.682320][ C1] usb 10-1: async_complete: urb error -71 [ 712.688564][ C1] usb 10-1: async_complete: urb error -71 [ 712.694528][ C1] usb 10-1: async_complete: urb error -71 [ 712.734472][ T9332] get_1284_register: usb error -71 [ 712.763731][ T9332] uss720 10-1:0.125: probe with driver uss720 failed with error -71 [ 712.796208][ T9332] usb 10-1: USB disconnect, device number 19 [ 713.146740][ T9967] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 713.154589][ T9967] hid-multitouch 0003:0457:07DA.0006: item fetching failed at offset 2/34 [ 713.205640][ T9967] hid-multitouch 0003:0457:07DA.0006: probe with driver hid-multitouch failed with error -22 [ 713.317051][T10724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 713.616064][ T5957] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 713.778571][ T5957] usb 9-1: Using ep0 maxpacket: 16 [ 713.809665][ T5957] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 713.840036][ T5957] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 713.858724][ T5957] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 713.873543][ T5957] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 714.001953][ T5957] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 714.024886][ T5957] usb 9-1: config 0 has no interface number 0 [ 714.038697][ T5957] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 714.052392][ T5957] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 714.176344][ T5957] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 714.562665][ T5957] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 714.609123][ T5957] usb 9-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 714.644452][ T5957] usb 9-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 714.680060][ T5957] usb 9-1: config 0 interface 125 has no altsetting 0 [ 714.702133][ T5957] usb 9-1: config 0 interface 125 has no altsetting 2 [ 714.736754][ T5957] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 714.776621][ T5957] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.837654][ T9332] usb 7-1: USB disconnect, device number 16 [ 714.892024][ T5957] usb 9-1: Product: syz [ 714.909070][ T5957] usb 9-1: Manufacturer: syz [ 714.935654][ T5957] usb 9-1: SerialNumber: syz [ 714.976647][ T5957] usb 9-1: config 0 descriptor?? [ 715.003929][ T5957] usb 9-1: selecting invalid altsetting 2 [ 715.022544][T10740] netlink: 'syz.6.1318': attribute type 1 has an invalid length. [ 715.058153][T10740] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1318'. [ 715.115592][T10741] netlink: 'syz.6.1318': attribute type 10 has an invalid length. [ 715.193493][T10740] netlink: 'syz.6.1318': attribute type 4 has an invalid length. [ 715.206934][ C0] usb 9-1: async_complete: urb error -71 [ 715.213055][ C0] usb 9-1: async_complete: urb error -71 [ 715.218907][ C0] usb 9-1: async_complete: urb error -71 [ 715.224686][ C0] usb 9-1: async_complete: urb error -71 [ 715.232036][ T5957] get_1284_register: usb error -71 [ 715.237331][ T5957] uss720 9-1:0.125: probe with driver uss720 failed with error -71 [ 715.252757][ T5957] usb 9-1: USB disconnect, device number 12 [ 715.332704][T10740] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1318'. [ 715.499377][T10740] : renamed from bond0 (while UP) [ 716.433657][T10754] overlayfs: missing 'lowerdir' [ 717.251168][ T9967] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 717.440995][ T9967] usb 7-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 717.474294][ T9967] usb 7-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 717.537174][ T9967] usb 7-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 717.607748][ T9967] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice= 0.06 [ 717.635319][ T9967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 717.674482][ T9967] usb 7-1: SerialNumber: syz [ 717.917646][ T9967] yealink 7-1:36.0: invalid payload size 0, expected 16 [ 717.930741][ T9967] input: Yealink usb-p1k as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:36.0/input/input12 [ 717.983191][ C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71 [ 717.990843][ C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71 [ 717.998586][ C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71 [ 718.005613][ C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71 [ 718.012669][ C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71 [ 718.019764][ C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71 [ 718.026982][ C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71 [ 718.033983][ C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71 [ 718.041411][ C1] yealink 7-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 718.075904][ T9967] usb 7-1: USB disconnect, device number 17 [ 718.349780][T10768] Device name cannot be null; rc = [-22] [ 720.559617][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1328'. [ 720.798180][T10785] sit0: entered promiscuous mode [ 720.818569][T10785] netlink: 'syz.9.1333': attribute type 1 has an invalid length. [ 720.851709][T10785] netlink: 1 bytes leftover after parsing attributes in process `syz.9.1333'. [ 721.127595][ T9967] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 721.213043][T10791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 721.489832][ T9967] usb 8-1: config 0 has an invalid interface number: 217 but max is 0 [ 721.570006][ T9967] usb 8-1: config 0 has no interface number 0 [ 721.725540][ T9967] usb 8-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 722.075229][T10165] bridge_slave_1: left allmulticast mode [ 722.122181][ T9967] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.134034][ T9967] usb 8-1: Product: syz [ 722.142035][ T9967] usb 8-1: Manufacturer: syz [ 722.147153][ T9967] usb 8-1: SerialNumber: syz [ 722.153875][T10165] bridge_slave_1: left promiscuous mode [ 722.166229][T10165] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.192861][ T9967] usb 8-1: config 0 descriptor?? [ 722.203730][T10165] bridge_slave_0: left allmulticast mode [ 722.236147][ T9967] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 722.243009][T10165] bridge_slave_0: left promiscuous mode [ 722.255989][T10165] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.474457][ T9967] gspca_sn9c20x: Write register 1001 failed -110 [ 723.481263][ T9967] gspca_sn9c20x: Device initialization failed [ 723.488133][ T9967] gspca_sn9c20x 8-1:0.217: probe with driver gspca_sn9c20x failed with error -110 [ 723.489095][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1332'. [ 724.093227][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1332'. [ 724.255835][ T5957] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 724.405885][ T5957] usb 10-1: Using ep0 maxpacket: 16 [ 724.423617][ T5957] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.477559][ T5957] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 724.528010][ T5957] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 724.550468][ T5957] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.594334][ T5957] usb 10-1: Product: syz [ 724.615803][ T5957] usb 10-1: Manufacturer: syz [ 724.626145][ T5957] usb 10-1: SerialNumber: syz [ 724.863713][ T5957] usb 10-1: 0:2 : does not exist [ 724.889755][ T5957] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 724.961309][ T5957] usb 10-1: USB disconnect, device number 20 [ 725.077273][ T9989] udevd[9989]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 725.188435][T10815] netlink: 'syz.0.1339': attribute type 6 has an invalid length. [ 725.214242][T10165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.232753][T10165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.253991][T10165] bond0 (unregistering): Released all slaves [ 725.586108][T10165] bond1 (unregistering): Released all slaves [ 725.682294][ T92] usb 8-1: USB disconnect, device number 11 [ 725.855012][T10819] bridge1: entered promiscuous mode [ 725.860446][T10819] bridge1: entered allmulticast mode [ 725.882754][T10819] team0: Port device bridge1 added [ 725.916587][T10824] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1341'. [ 726.286390][ T92] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 726.357012][T10824] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 726.380716][ C1] vcan0: j1939_tp_rxtimer: 0xffff888067370800: rx timeout, send abort [ 726.392497][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888067370800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 726.803838][T10824] gretap1: entered promiscuous mode [ 726.823844][T10824] gretap1: entered allmulticast mode [ 726.945087][ T92] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 726.956156][ T92] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 726.968033][ T92] usb 8-1: config 0 has no interface number 0 [ 726.974228][ T92] usb 8-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 727.004366][ T92] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 727.032480][ T92] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 727.095010][ T92] usb 8-1: config 0 interface 52 has no altsetting 0 [ 727.140373][ T92] usb 8-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 727.154173][ T92] usb 8-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 727.164484][ T92] usb 8-1: Product: syz [ 727.171121][ T92] usb 8-1: SerialNumber: syz [ 727.193805][ T92] usb 8-1: config 0 descriptor?? [ 727.259158][T10165] hsr_slave_0: left promiscuous mode [ 727.279621][T10165] hsr_slave_1: left promiscuous mode [ 727.299364][T10165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.315867][T10165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.317816][ T9967] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 727.342427][T10165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.371228][T10165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.466144][ T92] input: syz (Stick) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.52/input/input13 [ 727.510574][T10165] veth1_macvtap: left promiscuous mode [ 727.518768][ T9967] usb 7-1: Using ep0 maxpacket: 16 [ 727.540419][ T9967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 10829, setting to 1024 [ 727.553033][T10165] veth0_macvtap: left promiscuous mode [ 727.572279][ T9967] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 727.582791][T10165] veth1_vlan: left promiscuous mode [ 727.597551][T10165] veth0_vlan: left promiscuous mode [ 727.635526][ T9967] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 727.660636][ T92] usb 8-1: USB disconnect, device number 12 [ 727.675987][ T9967] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.706889][ T9967] usb 7-1: Product: syz [ 727.711188][ T9967] usb 7-1: Manufacturer: syz [ 727.738409][ T9967] usb 7-1: SerialNumber: syz [ 727.762004][ T9967] usb 7-1: config 0 descriptor?? [ 727.779532][T10836] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 727.828034][ T9967] hub 7-1:0.0: bad descriptor, ignoring hub [ 727.844824][ T9967] hub 7-1:0.0: probe with driver hub failed with error -5 [ 727.890870][ T9967] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input14 [ 728.006215][ T9332] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 728.165896][ T9332] usb 9-1: device descriptor read/64, error -71 [ 728.213374][T10849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 728.465818][ T9332] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 728.595853][ T9332] usb 9-1: device descriptor read/64, error -71 [ 728.635983][ T5957] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 728.714939][ T9332] usb usb9-port1: attempt power cycle [ 728.806737][ T5957] usb 8-1: Using ep0 maxpacket: 16 [ 728.909289][ T5957] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.935099][ T5957] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 728.976679][ T5957] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 728.988273][ T5957] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.086690][ T5957] usb 8-1: Product: syz [ 729.106067][ T5957] usb 8-1: Manufacturer: syz [ 729.117554][ T5957] usb 8-1: SerialNumber: syz [ 729.139401][ T9332] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 729.187057][ T9332] usb 9-1: device descriptor read/8, error -71 [ 729.359751][ T5957] usb 8-1: 0:2 : does not exist [ 729.439014][ T9332] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 729.447570][ T5957] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 729.527343][ T9332] usb 9-1: device descriptor read/8, error -71 [ 729.572388][ T5957] usb 8-1: USB disconnect, device number 13 [ 729.672683][ T9332] usb usb9-port1: unable to enumerate USB device [ 729.714435][ T9989] udevd[9989]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 729.867609][T10165] team0 (unregistering): Port device team_slave_1 removed [ 729.943429][T10165] team0 (unregistering): Port device team_slave_0 removed [ 729.981783][ T9] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 730.194378][ T9] usb 10-1: config 0 has an invalid interface number: 217 but max is 0 [ 730.217983][ T9] usb 10-1: config 0 has no interface number 0 [ 730.230102][ T9] usb 10-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 730.247327][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.259671][ T9] usb 10-1: Product: syz [ 730.264117][ T9] usb 10-1: Manufacturer: syz [ 730.294067][ T9] usb 10-1: SerialNumber: syz [ 730.305738][ T9] usb 10-1: config 0 descriptor?? [ 730.344258][ T9] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 730.504908][T10042] usb 7-1: reset high-speed USB device number 18 using dummy_hcd [ 730.553703][T10042] usb 7-1: device reset changed ep0 maxpacket size! [ 730.581963][ T92] usb 7-1: USB disconnect, device number 18 [ 730.704905][T10864] x_tables: duplicate underflow at hook 3 [ 730.748908][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1353'. [ 730.816004][ T92] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 730.899389][T10866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1356'. [ 731.187841][ T92] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.199335][ T92] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.211209][ T92] usb 7-1: config 0 interface 0 has no altsetting 0 [ 731.218424][ T92] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 731.229416][ T92] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.246092][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1353'. [ 731.268825][ T92] usb 7-1: config 0 descriptor?? [ 731.316194][ T9] gspca_sn9c20x: Write register 1002 failed -110 [ 731.328251][ T9] gspca_sn9c20x: Device initialization failed [ 731.350304][ T9] gspca_sn9c20x 10-1:0.217: probe with driver gspca_sn9c20x failed with error -110 [ 732.914293][ T92] usbhid 7-1:0.0: can't add hid device: -71 [ 732.925880][ T92] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 732.944706][ T92] usb 7-1: USB disconnect, device number 19 [ 733.487191][T10866] vlan2: entered promiscuous mode [ 733.492483][T10866] batadv0: entered promiscuous mode [ 734.147425][T10879] FAULT_INJECTION: forcing a failure. [ 734.147425][T10879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.199799][T10879] CPU: 1 UID: 0 PID: 10879 Comm: syz.0.1359 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 734.199829][T10879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 734.199840][T10879] Call Trace: [ 734.199847][T10879] [ 734.199856][T10879] dump_stack_lvl+0x189/0x250 [ 734.199883][T10879] ? __pfx____ratelimit+0x10/0x10 [ 734.199901][T10879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.199919][T10879] ? __pfx__printk+0x10/0x10 [ 734.199949][T10879] should_fail_ex+0x414/0x560 [ 734.199970][T10879] _copy_to_user+0x31/0xb0 [ 734.199994][T10879] simple_read_from_buffer+0xe1/0x170 [ 734.200014][T10879] proc_fail_nth_read+0x1df/0x250 [ 734.200036][T10879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 734.200058][T10879] ? rw_verify_area+0x258/0x650 [ 734.200082][T10879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 734.200102][T10879] vfs_read+0x200/0x980 [ 734.200138][T10879] ? __pfx___mutex_lock+0x10/0x10 [ 734.200157][T10879] ? __pfx_vfs_read+0x10/0x10 [ 734.200182][T10879] ? __fget_files+0x2a/0x420 [ 734.200203][T10879] ? __fget_files+0x3a0/0x420 [ 734.200219][T10879] ? __fget_files+0x2a/0x420 [ 734.200244][T10879] ksys_read+0x145/0x250 [ 734.200260][T10879] ? __pfx_ksys_read+0x10/0x10 [ 734.200274][T10879] ? rcu_is_watching+0x15/0xb0 [ 734.200292][T10879] ? trace_sys_enter+0x25/0x120 [ 734.200310][T10879] do_syscall_64+0xfa/0x3b0 [ 734.200327][T10879] ? lockdep_hardirqs_on+0x9c/0x150 [ 734.200343][T10879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.200358][T10879] ? clear_bhb_loop+0x60/0xb0 [ 734.200376][T10879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.200391][T10879] RIP: 0033:0x7f78e578d5fc [ 734.200406][T10879] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 734.200419][T10879] RSP: 002b:00007f78e653b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 734.200436][T10879] RAX: ffffffffffffffda RBX: 00007f78e59b5fa0 RCX: 00007f78e578d5fc [ 734.200447][T10879] RDX: 000000000000000f RSI: 00007f78e653b0a0 RDI: 0000000000000005 [ 734.200457][T10879] RBP: 00007f78e653b090 R08: 0000000000000000 R09: 0000000000000000 [ 734.200466][T10879] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 734.200475][T10879] R13: 00007f78e59b6038 R14: 00007f78e59b5fa0 R15: 00007ffc51353ea8 [ 734.200499][T10879] [ 734.524685][T10856] team0 (unregistering): Port device team_slave_0 removed [ 734.714384][T10856] team0 (unregistering): Port device team_slave_1 removed [ 734.765392][T10856] team0 (unregistering): Port device bridge1 removed [ 735.026047][T10890] xt_l2tp: missing protocol rule (udp|l2tpip) [ 735.581267][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 735.585314][T10893] FAULT_INJECTION: forcing a failure. [ 735.585314][T10893] name failslab, interval 1, probability 0, space 0, times 0 [ 735.615958][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 735.625091][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 735.635617][T10893] CPU: 0 UID: 0 PID: 10893 Comm: syz.8.1364 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 735.635647][T10893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 735.635660][T10893] Call Trace: [ 735.635669][T10893] [ 735.635683][T10893] dump_stack_lvl+0x189/0x250 [ 735.635712][T10893] ? __pfx____ratelimit+0x10/0x10 [ 735.635736][T10893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.635759][T10893] ? __pfx__printk+0x10/0x10 [ 735.635795][T10893] ? __pfx___might_resched+0x10/0x10 [ 735.635817][T10893] ? fs_reclaim_acquire+0x7d/0x100 [ 735.635850][T10893] should_fail_ex+0x414/0x560 [ 735.635877][T10893] should_failslab+0xa8/0x100 [ 735.635903][T10893] __kmalloc_cache_noprof+0x70/0x3d0 [ 735.635924][T10893] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 735.635955][T10893] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 735.636003][T10893] sctp_association_new+0x15d3/0x25f0 [ 735.636054][T10893] sctp_connect_new_asoc+0x2c5/0x690 [ 735.636092][T10893] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 735.636121][T10893] ? __local_bh_enable_ip+0x12d/0x1c0 [ 735.636152][T10893] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 735.636176][T10893] ? security_sctp_bind_connect+0x7e/0x2e0 [ 735.636205][T10893] sctp_sendmsg+0x155c/0x2810 [ 735.636251][T10893] ? __pfx_sctp_sendmsg+0x10/0x10 [ 735.636305][T10893] ? sock_rps_record_flow+0x19/0x410 [ 735.636334][T10893] ? inet_sendmsg+0x2f4/0x370 [ 735.636363][T10893] __sock_sendmsg+0x19c/0x270 [ 735.636395][T10893] ____sys_sendmsg+0x52d/0x830 [ 735.636435][T10893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 735.636481][T10893] ? import_iovec+0x74/0xa0 [ 735.636517][T10893] ___sys_sendmsg+0x21f/0x2a0 [ 735.636554][T10893] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.636632][T10893] ? __fget_files+0x2a/0x420 [ 735.636656][T10893] ? __fget_files+0x3a0/0x420 [ 735.636693][T10893] __sys_sendmmsg+0x227/0x430 [ 735.636734][T10893] ? __pfx___sys_sendmmsg+0x10/0x10 [ 735.636766][T10893] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 735.636822][T10893] ? ksys_write+0x22a/0x250 [ 735.636847][T10893] ? __pfx_ksys_write+0x10/0x10 [ 735.636864][T10893] ? rcu_is_watching+0x15/0xb0 [ 735.636897][T10893] __x64_sys_sendmmsg+0xa0/0xc0 [ 735.636934][T10893] do_syscall_64+0xfa/0x3b0 [ 735.636958][T10893] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.636980][T10893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.637011][T10893] ? clear_bhb_loop+0x60/0xb0 [ 735.637037][T10893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.637059][T10893] RIP: 0033:0x7f280cd8ebe9 [ 735.637078][T10893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.637097][T10893] RSP: 002b:00007f280dc3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 735.637120][T10893] RAX: ffffffffffffffda RBX: 00007f280cfb5fa0 RCX: 00007f280cd8ebe9 [ 735.637136][T10893] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 735.637150][T10893] RBP: 00007f280dc3c090 R08: 0000000000000000 R09: 0000000000000000 [ 735.637163][T10893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.637176][T10893] R13: 00007f280cfb6038 R14: 00007f280cfb5fa0 R15: 00007ffd68287628 [ 735.637211][T10893] [ 735.954019][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.006322][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 736.016735][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 736.026798][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 736.035945][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 736.044986][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 736.054193][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 736.128990][ T9] usb 10-1: USB disconnect, device number 21 [ 736.399644][T10899] pim6reg: entered allmulticast mode [ 736.444999][T10899] pim6reg: left allmulticast mode [ 736.707773][T10909] __nla_validate_parse: 45 callbacks suppressed [ 736.707794][T10909] netlink: 360 bytes leftover after parsing attributes in process `syz.9.1370'. [ 737.156567][T10915] tipc: Started in network mode [ 737.161600][T10915] tipc: Node identity , cluster identity 4711 [ 737.168012][T10915] tipc: Failed to obtain node identity [ 737.174287][T10915] tipc: Enabling of bearer rejected, failed to enable media [ 737.415195][T10922] ipt_ECN: cannot use operation on non-tcp rule [ 738.075825][ T5939] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 738.960396][ T5939] usb 7-1: config 0 has an invalid interface number: 217 but max is 0 [ 739.051704][ T5939] usb 7-1: config 0 has no interface number 0 [ 739.115716][ T5939] usb 7-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 739.569755][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.665879][ T5939] usb 7-1: Product: syz [ 739.798347][ T5939] usb 7-1: Manufacturer: syz [ 739.871502][ T5939] usb 7-1: SerialNumber: syz [ 740.136450][ T5939] usb 7-1: config 0 descriptor?? [ 740.212513][T10946] netlink: 'syz.7.1379': attribute type 1 has an invalid length. [ 740.288032][ T5939] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 740.334187][T10946] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 740.622698][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1375'. [ 741.135907][ T5939] gspca_sn9c20x: Write register 1001 failed -110 [ 741.159832][ T5939] gspca_sn9c20x: Device initialization failed [ 741.166907][ T5939] gspca_sn9c20x 7-1:0.217: probe with driver gspca_sn9c20x failed with error -110 [ 741.799466][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1375'. [ 742.163608][T10975] 9pnet_fd: Insufficient options for proto=fd [ 742.253406][T10975] fuse: Bad value for 'fd' [ 742.306400][T10963] team0 (unregistering): Port device team_slave_0 removed [ 742.330507][T10963] team0 (unregistering): Port device team_slave_1 removed [ 742.691527][ T92] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 742.823641][T10980] netlink: 'syz.8.1390': attribute type 3 has an invalid length. [ 743.223045][T10980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 743.248938][T10982] bond1: (slave ip6gretap1): making interface the new active one [ 743.259356][T10982] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 743.537766][ T92] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 743.605960][ T92] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18089, setting to 1024 [ 743.635644][ T9967] usb 7-1: USB disconnect, device number 20 [ 743.644411][ T92] usb 10-1: New USB device found, idVendor=046d, idProduct=c13f, bcdDevice= 0.00 [ 743.659713][ T92] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.682133][ T92] usb 10-1: config 0 descriptor?? [ 743.696285][T10975] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 743.759691][T10990] ip6_vti0: entered promiscuous mode [ 743.766325][ T5957] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 743.789661][T10990] batadv1: entered promiscuous mode [ 743.929622][T10995] FAULT_INJECTION: forcing a failure. [ 743.929622][T10995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.951635][T10995] CPU: 0 UID: 0 PID: 10995 Comm: syz.6.1395 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 743.951666][T10995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 743.951680][T10995] Call Trace: [ 743.951692][T10995] [ 743.951701][T10995] dump_stack_lvl+0x189/0x250 [ 743.951733][T10995] ? __pfx____ratelimit+0x10/0x10 [ 743.951756][T10995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 743.951777][T10995] ? __pfx__printk+0x10/0x10 [ 743.951802][T10995] ? __might_fault+0xb0/0x130 [ 743.951832][T10995] should_fail_ex+0x414/0x560 [ 743.951859][T10995] _copy_from_iter+0x1db/0x16f0 [ 743.951884][T10995] ? sock_alloc_send_pskb+0x875/0x990 [ 743.951907][T10995] ? __pfx__copy_from_iter+0x10/0x10 [ 743.951958][T10995] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 743.951984][T10995] skb_copy_datagram_from_iter+0xf5/0x720 [ 743.952014][T10995] ? skb_put+0x11b/0x210 [ 743.952048][T10995] tun_get_user+0x15c3/0x3ce0 [ 743.952093][T10995] ? __might_fault+0xb0/0x130 [ 743.952117][T10995] ? __pfx_tun_get_user+0x10/0x10 [ 743.952152][T10995] ? __lock_acquire+0xab9/0xd20 [ 743.952179][T10995] ? ref_tracker_alloc+0x318/0x460 [ 743.952202][T10995] ? __lock_acquire+0xab9/0xd20 [ 743.952218][T10995] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 743.952239][T10995] ? tun_get+0x1c/0x2f0 [ 743.952262][T10995] ? tun_get+0x1c/0x2f0 [ 743.952281][T10995] ? tun_get+0x1c/0x2f0 [ 743.952304][T10995] tun_chr_write_iter+0x113/0x200 [ 743.952326][T10995] vfs_write+0x54b/0xa90 [ 743.952370][T10995] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 743.952398][T10995] ? __pfx_vfs_write+0x10/0x10 [ 743.952430][T10995] ? __fget_files+0x2a/0x420 [ 743.952465][T10995] ksys_write+0x145/0x250 [ 743.952481][T10995] ? __pfx_ksys_write+0x10/0x10 [ 743.952494][T10995] ? rcu_is_watching+0x15/0xb0 [ 743.952515][T10995] ? do_syscall_64+0xbe/0x3b0 [ 743.952535][T10995] do_syscall_64+0xfa/0x3b0 [ 743.952551][T10995] ? lockdep_hardirqs_on+0x9c/0x150 [ 743.952567][T10995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.952582][T10995] ? clear_bhb_loop+0x60/0xb0 [ 743.952601][T10995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.952616][T10995] RIP: 0033:0x7fc9e378ebe9 [ 743.952631][T10995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.952644][T10995] RSP: 002b:00007fc9e4524038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 743.952661][T10995] RAX: ffffffffffffffda RBX: 00007fc9e39b5fa0 RCX: 00007fc9e378ebe9 [ 743.952673][T10995] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 743.952683][T10995] RBP: 00007fc9e4524090 R08: 0000000000000000 R09: 0000000000000000 [ 743.952693][T10995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.952702][T10995] R13: 00007fc9e39b6038 R14: 00007fc9e39b5fa0 R15: 00007fff19121d08 [ 743.952725][T10995] [ 743.954835][ T5957] usb 8-1: config 0 has no interfaces? [ 744.258648][ T5957] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 744.268203][ T5957] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.279488][ T5957] usb 8-1: config 0 descriptor?? [ 744.313608][ T5957] usb 10-1: USB disconnect, device number 22 [ 744.517911][T10985] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1391'. [ 744.530704][ T5957] usb 8-1: USB disconnect, device number 14 [ 744.634845][T11000] loop8: detected capacity change from 0 to 8 [ 744.649903][T11000] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 [ 744.657002][T11000] loop8: p1 start 3674210304 is beyond EOD, truncated [ 744.663953][T11000] loop8: p2 start 2946521549 is beyond EOD, truncated [ 744.671240][T11000] loop8: p3 start 3210040201 is beyond EOD, truncated [ 744.682522][T11000] loop8: p4 start 2187423751 is beyond EOD, truncated [ 744.690905][T11000] loop8: p5 start 1210360614 is beyond EOD, truncated [ 744.728992][T11000] loop8: p6 start 4163130221 is beyond EOD, truncated [ 744.754722][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1397'. [ 744.779223][T11000] loop8: p7 start 65302515 is beyond EOD, truncated [ 744.873171][T11000] loop8: p8 start 365161308 is beyond EOD, truncated [ 744.973643][T11000] loop8: p9 start 986802111 is beyond EOD, truncated [ 745.412570][T11023] fuse: Bad value for 'user_id' [ 745.449538][T11023] fuse: Bad value for 'user_id' [ 745.526164][ T92] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 745.686139][ T92] usb 10-1: Using ep0 maxpacket: 16 [ 745.696933][ T92] usb 10-1: config 53 has an invalid interface number: 240 but max is 0 [ 745.711811][ T92] usb 10-1: config 53 has no interface number 0 [ 745.715822][ T5957] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 745.721782][ T92] usb 10-1: config 53 interface 240 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 745.811690][ T92] usb 10-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89 [ 745.833155][ T92] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.850393][ T92] usb 10-1: Product: syz [ 745.855646][ T92] usb 10-1: Manufacturer: syz [ 745.885483][ T92] usb 10-1: SerialNumber: syz [ 745.896283][ T5957] usb 8-1: Using ep0 maxpacket: 16 [ 746.053438][ T5957] usb 8-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=51.90 [ 746.070312][T11019] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 746.073463][ T5957] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.139031][ T5957] usb 8-1: Product: syz [ 746.149196][ T5957] usb 8-1: Manufacturer: syz [ 746.167293][ T5957] usb 8-1: SerialNumber: syz [ 746.204768][ T5957] r8152-cfgselector 8-1: Unknown version 0x0000 [ 746.213269][ T5957] r8152-cfgselector 8-1: config 0 descriptor?? [ 746.321137][ T92] kvaser_usb 10-1:53.240: error -ENODEV: Cannot get usb endpoint(s) [ 746.373966][ T92] usb 10-1: USB disconnect, device number 23 [ 746.453698][T11023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.467563][T11023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.690178][ T5957] r8152-cfgselector 8-1: USB disconnect, device number 15 [ 747.029889][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1411'. [ 747.453368][ T92] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 747.726839][ T9332] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 747.814266][ T92] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 747.859068][ T92] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 747.903457][ T92] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 747.923132][ T9332] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 747.948772][ T92] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.970580][ T9332] usb 10-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 748.032393][ T9332] usb 10-1: config 220 interface 0 has no altsetting 0 [ 748.083082][T11037] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 748.216171][ T9332] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 748.318693][ T9332] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.425279][ T9332] usb 10-1: Product: syz [ 748.445010][ T92] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 748.461351][ T9332] usb 10-1: Manufacturer: syz [ 748.494285][ T9332] usb 10-1: SerialNumber: syz [ 748.643257][T11037] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 748.835499][ T92] usb 7-1: USB disconnect, device number 21 [ 748.864013][ T9332] usb 10-1: Found UVC 0.00 device syz (8086:0b07) [ 749.239703][T11070] bridge0: entered allmulticast mode [ 749.255792][ T9332] usb 10-1: No valid video chain found. [ 749.488237][ T9332] usb 10-1: USB disconnect, device number 24 [ 750.082269][T11075] overlayfs: missing 'lowerdir' [ 750.304688][T11078] tipc: Started in network mode [ 750.327277][T11078] tipc: Node identity 5667d7a0bf87, cluster identity 4711 [ 750.334660][T11078] tipc: Enabled bearer , priority 0 [ 750.386256][T11083] syzkaller0: entered promiscuous mode [ 750.391806][T11083] syzkaller0: entered allmulticast mode [ 750.538457][T11078] FAULT_INJECTION: forcing a failure. [ 750.538457][T11078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.556464][T11078] CPU: 1 UID: 0 PID: 11078 Comm: syz.7.1421 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 750.556496][T11078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 750.556510][T11078] Call Trace: [ 750.556519][T11078] [ 750.556528][T11078] dump_stack_lvl+0x189/0x250 [ 750.556566][T11078] ? __pfx____ratelimit+0x10/0x10 [ 750.556591][T11078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 750.556616][T11078] ? __pfx__printk+0x10/0x10 [ 750.556652][T11078] ? __might_fault+0xb0/0x130 [ 750.556687][T11078] should_fail_ex+0x414/0x560 [ 750.556716][T11078] _copy_from_user+0x2d/0xb0 [ 750.556748][T11078] sock_do_ioctl+0x182/0x300 [ 750.556777][T11078] ? __pfx_sock_do_ioctl+0x10/0x10 [ 750.556800][T11078] ? __lock_acquire+0xab9/0xd20 [ 750.556826][T11078] ? __asan_memset+0x22/0x50 [ 750.556858][T11078] ? smack_file_ioctl+0x24a/0x340 [ 750.556887][T11078] sock_ioctl+0x576/0x790 [ 750.556914][T11078] ? __pfx_sock_ioctl+0x10/0x10 [ 750.556939][T11078] ? __fget_files+0x2a/0x420 [ 750.556962][T11078] ? __fget_files+0x3a0/0x420 [ 750.556986][T11078] ? __fget_files+0x2a/0x420 [ 750.557014][T11078] ? bpf_lsm_file_ioctl+0x9/0x20 [ 750.557039][T11078] ? __pfx_sock_ioctl+0x10/0x10 [ 750.557062][T11078] __se_sys_ioctl+0xfc/0x170 [ 750.557097][T11078] do_syscall_64+0xfa/0x3b0 [ 750.557121][T11078] ? lockdep_hardirqs_on+0x9c/0x150 [ 750.557145][T11078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.557166][T11078] ? clear_bhb_loop+0x60/0xb0 [ 750.557194][T11078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.557215][T11078] RIP: 0033:0x7f15d198ebe9 [ 750.557235][T11078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.557255][T11078] RSP: 002b:00007f15d2812038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 750.557277][T11078] RAX: ffffffffffffffda RBX: 00007f15d1bb5fa0 RCX: 00007f15d198ebe9 [ 750.557294][T11078] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 750.557308][T11078] RBP: 00007f15d2812090 R08: 0000000000000000 R09: 0000000000000000 [ 750.557321][T11078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.557334][T11078] R13: 00007f15d1bb6038 R14: 00007f15d1bb5fa0 R15: 00007fff5dfce248 [ 750.557369][T11078] [ 750.854243][T11077] tipc: Resetting bearer [ 750.983548][T11092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 750.997929][T11077] tipc: Disabling bearer [ 751.130832][T11094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 751.806652][ T5839] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 751.990365][ T5839] usb 9-1: config 0 has an invalid interface number: 207 but max is 0 [ 752.000154][ T5839] usb 9-1: config 0 has no interface number 0 [ 752.019875][ T5839] usb 9-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 752.033475][ T5839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.047671][ T5839] usb 9-1: Product: syz [ 752.055886][ T5839] usb 9-1: Manufacturer: syz [ 752.066955][ T5839] usb 9-1: SerialNumber: syz [ 752.083649][ T5839] usb 9-1: config 0 descriptor?? [ 752.111198][ T5839] qmi_wwan 9-1:0.207: bogus CDC Union: master=0, slave=1 [ 752.588863][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.595365][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.584089][ T5839] qmi_wwan 9-1:0.207: probe with driver qmi_wwan failed with error -22 [ 754.684042][ T9332] usb 9-1: USB disconnect, device number 17 [ 755.216169][ T5939] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 755.429872][ T5939] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 755.458112][ T5939] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 755.494735][ T5939] usb 7-1: config 220 interface 0 has no altsetting 0 [ 755.505632][ T5939] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 755.525297][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.555804][ T5939] usb 7-1: Product: syz [ 755.568683][ T5939] usb 7-1: Manufacturer: syz [ 755.590975][ T5939] usb 7-1: SerialNumber: syz [ 755.746912][T11135] FAULT_INJECTION: forcing a failure. [ 755.746912][T11135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.762561][T11135] CPU: 0 UID: 0 PID: 11135 Comm: syz.7.1440 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 755.762592][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 755.762606][T11135] Call Trace: [ 755.762617][T11135] [ 755.762629][T11135] dump_stack_lvl+0x189/0x250 [ 755.762663][T11135] ? __pfx____ratelimit+0x10/0x10 [ 755.762688][T11135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 755.762714][T11135] ? __pfx__printk+0x10/0x10 [ 755.762756][T11135] should_fail_ex+0x414/0x560 [ 755.762787][T11135] _copy_to_user+0x31/0xb0 [ 755.762821][T11135] simple_read_from_buffer+0xe1/0x170 [ 755.762851][T11135] proc_fail_nth_read+0x1df/0x250 [ 755.762883][T11135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 755.762915][T11135] ? rw_verify_area+0x258/0x650 [ 755.762948][T11135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 755.762977][T11135] vfs_read+0x200/0x980 [ 755.763010][T11135] ? lockdep_hardirqs_on+0x9c/0x150 [ 755.763038][T11135] ? __pfx___mutex_lock+0x10/0x10 [ 755.763064][T11135] ? __pfx_vfs_read+0x10/0x10 [ 755.763099][T11135] ? __fget_files+0x2a/0x420 [ 755.763130][T11135] ? __fget_files+0x3a0/0x420 [ 755.763153][T11135] ? __fget_files+0x2a/0x420 [ 755.763188][T11135] ksys_read+0x145/0x250 [ 755.763211][T11135] ? __pfx_ksys_read+0x10/0x10 [ 755.763238][T11135] ? do_syscall_64+0xbe/0x3b0 [ 755.763267][T11135] do_syscall_64+0xfa/0x3b0 [ 755.763291][T11135] ? lockdep_hardirqs_on+0x9c/0x150 [ 755.763314][T11135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.763336][T11135] ? clear_bhb_loop+0x60/0xb0 [ 755.763371][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.763394][T11135] RIP: 0033:0x7f15d198d5fc [ 755.763415][T11135] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 755.763434][T11135] RSP: 002b:00007f15d27f1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 755.763458][T11135] RAX: ffffffffffffffda RBX: 00007f15d1bb6090 RCX: 00007f15d198d5fc [ 755.763474][T11135] RDX: 000000000000000f RSI: 00007f15d27f10a0 RDI: 0000000000000007 [ 755.763488][T11135] RBP: 00007f15d27f1090 R08: 0000000000000000 R09: 0000000000000000 [ 755.763502][T11135] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.763516][T11135] R13: 00007f15d1bb6128 R14: 00007f15d1bb6090 R15: 00007fff5dfce248 [ 755.763552][T11135] [ 756.275948][ T5939] usb 7-1: Found UVC 0.00 device syz (8086:0b07) [ 756.282405][ T5939] usb 7-1: No valid video chain found. [ 756.355454][ T5939] usb 7-1: USB disconnect, device number 22 [ 757.101034][T11145] FAULT_INJECTION: forcing a failure. [ 757.101034][T11145] name failslab, interval 1, probability 0, space 0, times 0 [ 757.116069][T11145] CPU: 0 UID: 0 PID: 11145 Comm: syz.7.1444 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 757.116099][T11145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 757.116113][T11145] Call Trace: [ 757.116122][T11145] [ 757.116132][T11145] dump_stack_lvl+0x189/0x250 [ 757.116163][T11145] ? __pfx____ratelimit+0x10/0x10 [ 757.116188][T11145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 757.116214][T11145] ? __pfx__printk+0x10/0x10 [ 757.116253][T11145] ? __pfx___might_resched+0x10/0x10 [ 757.116279][T11145] ? fs_reclaim_acquire+0x7d/0x100 [ 757.116312][T11145] should_fail_ex+0x414/0x560 [ 757.116343][T11145] should_failslab+0xa8/0x100 [ 757.116370][T11145] __kmalloc_cache_noprof+0x70/0x3d0 [ 757.116392][T11145] ? nh_notifier_info_init+0x2cb/0xe80 [ 757.116433][T11145] nh_notifier_info_init+0x2cb/0xe80 [ 757.116478][T11145] call_nexthop_notifiers+0xff/0x240 [ 757.116517][T11145] ? __pfx_call_nexthop_notifiers+0x10/0x10 [ 757.116571][T11145] remove_nexthop+0x27/0x180 [ 757.116609][T11145] rtm_del_nexthop+0x4c6/0x5b0 [ 757.116633][T11145] ? __pfx_rtm_del_nexthop+0x10/0x10 [ 757.116665][T11145] ? __pfx_rtm_del_nexthop+0x10/0x10 [ 757.116687][T11145] rtnetlink_rcv_msg+0x7cc/0xb70 [ 757.116721][T11145] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 757.116750][T11145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 757.116777][T11145] ? ref_tracker_free+0x63a/0x7d0 [ 757.116805][T11145] ? __copy_skb_header+0xa7/0x550 [ 757.116829][T11145] ? __pfx_ref_tracker_free+0x10/0x10 [ 757.116854][T11145] ? __skb_clone+0x63/0x7a0 [ 757.116885][T11145] netlink_rcv_skb+0x205/0x470 [ 757.116918][T11145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 757.116950][T11145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 757.116997][T11145] ? netlink_deliver_tap+0x2e/0x1b0 [ 757.117028][T11145] ? netlink_deliver_tap+0x2e/0x1b0 [ 757.117067][T11145] netlink_unicast+0x75c/0x8e0 [ 757.117108][T11145] netlink_sendmsg+0x805/0xb30 [ 757.117152][T11145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.117194][T11145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 757.117217][T11145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.117258][T11145] __sock_sendmsg+0x21c/0x270 [ 757.117289][T11145] ____sys_sendmsg+0x505/0x830 [ 757.117330][T11145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 757.117376][T11145] ? import_iovec+0x74/0xa0 [ 757.117411][T11145] ___sys_sendmsg+0x21f/0x2a0 [ 757.117449][T11145] ? __pfx____sys_sendmsg+0x10/0x10 [ 757.117568][T11145] ? __fget_files+0x2a/0x420 [ 757.117593][T11145] ? __fget_files+0x3a0/0x420 [ 757.117631][T11145] __x64_sys_sendmsg+0x19b/0x260 [ 757.117670][T11145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 757.117716][T11145] ? __pfx_ksys_write+0x10/0x10 [ 757.117735][T11145] ? rcu_is_watching+0x15/0xb0 [ 757.117766][T11145] ? do_syscall_64+0xbe/0x3b0 [ 757.117796][T11145] do_syscall_64+0xfa/0x3b0 [ 757.117819][T11145] ? lockdep_hardirqs_on+0x9c/0x150 [ 757.117842][T11145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.117865][T11145] ? clear_bhb_loop+0x60/0xb0 [ 757.117892][T11145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.117914][T11145] RIP: 0033:0x7f15d198ebe9 [ 757.117935][T11145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.117954][T11145] RSP: 002b:00007f15d27d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.117977][T11145] RAX: ffffffffffffffda RBX: 00007f15d1bb6180 RCX: 00007f15d198ebe9 [ 757.117994][T11145] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000a [ 757.118007][T11145] RBP: 00007f15d27d0090 R08: 0000000000000000 R09: 0000000000000000 [ 757.118022][T11145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.118035][T11145] R13: 00007f15d1bb6218 R14: 00007f15d1bb6180 R15: 00007fff5dfce248 [ 757.118071][T11145] [ 760.100813][T11161] Invalid source name [ 760.104925][T11161] UBIFS error (pid: 11161): cannot open "/dev/sg0", error -22 [ 760.128803][T11161] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1448'. [ 762.230182][T11186] FAULT_INJECTION: forcing a failure. [ 762.230182][T11186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.244049][T11186] CPU: 0 UID: 0 PID: 11186 Comm: syz.9.1455 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 762.244078][T11186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 762.244091][T11186] Call Trace: [ 762.244099][T11186] [ 762.244108][T11186] dump_stack_lvl+0x189/0x250 [ 762.244136][T11186] ? __pfx____ratelimit+0x10/0x10 [ 762.244159][T11186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 762.244182][T11186] ? __pfx__printk+0x10/0x10 [ 762.244209][T11186] ? __might_fault+0xb0/0x130 [ 762.244240][T11186] should_fail_ex+0x414/0x560 [ 762.244267][T11186] _copy_from_user+0x2d/0xb0 [ 762.244298][T11186] memdup_user+0x5e/0xd0 [ 762.244326][T11186] strndup_user+0x68/0xd0 [ 762.244354][T11186] __se_sys_mount+0x9c/0x410 [ 762.244378][T11186] ? ksys_write+0x22a/0x250 [ 762.244400][T11186] ? __pfx___se_sys_mount+0x10/0x10 [ 762.244430][T11186] ? do_syscall_64+0xbe/0x3b0 [ 762.244453][T11186] ? __x64_sys_mount+0x20/0xc0 [ 762.244479][T11186] do_syscall_64+0xfa/0x3b0 [ 762.244504][T11186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.244524][T11186] ? asm_sysvec_call_function_single+0x1a/0x20 [ 762.244556][T11186] ? clear_bhb_loop+0x60/0xb0 [ 762.244583][T11186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.244605][T11186] RIP: 0033:0x7f57fd18ebe9 [ 762.244624][T11186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.244644][T11186] RSP: 002b:00007f57fdf13038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 762.244667][T11186] RAX: ffffffffffffffda RBX: 00007f57fd3b6090 RCX: 00007f57fd18ebe9 [ 762.244684][T11186] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 762.244699][T11186] RBP: 00007f57fdf13090 R08: 0000000000000000 R09: 0000000000000000 [ 762.244713][T11186] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 762.244726][T11186] R13: 00007f57fd3b6128 R14: 00007f57fd3b6090 R15: 00007ffd78b9cb28 [ 762.244760][T11186] [ 762.349886][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1456'. [ 762.412424][T11190] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1455'. [ 763.344661][T11196] FAULT_INJECTION: forcing a failure. [ 763.344661][T11196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.365903][T11196] CPU: 1 UID: 0 PID: 11196 Comm: syz.9.1458 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 763.365936][T11196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 763.365950][T11196] Call Trace: [ 763.365959][T11196] [ 763.365969][T11196] dump_stack_lvl+0x189/0x250 [ 763.366001][T11196] ? __pfx____ratelimit+0x10/0x10 [ 763.366025][T11196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 763.366051][T11196] ? __pfx__printk+0x10/0x10 [ 763.366094][T11196] should_fail_ex+0x414/0x560 [ 763.366124][T11196] _copy_to_user+0x31/0xb0 [ 763.366159][T11196] simple_read_from_buffer+0xe1/0x170 [ 763.366189][T11196] proc_fail_nth_read+0x1df/0x250 [ 763.366221][T11196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 763.366252][T11196] ? rw_verify_area+0x258/0x650 [ 763.366286][T11196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 763.366315][T11196] vfs_read+0x200/0x980 [ 763.366356][T11196] ? __pfx___mutex_lock+0x10/0x10 [ 763.366382][T11196] ? __pfx_vfs_read+0x10/0x10 [ 763.366419][T11196] ? __fget_files+0x2a/0x420 [ 763.366450][T11196] ? __fget_files+0x3a0/0x420 [ 763.366473][T11196] ? __fget_files+0x2a/0x420 [ 763.366519][T11196] ksys_read+0x145/0x250 [ 763.366539][T11196] ? __fget_files+0x3a0/0x420 [ 763.366564][T11196] ? __pfx_ksys_read+0x10/0x10 [ 763.366591][T11196] ? do_syscall_64+0xbe/0x3b0 [ 763.366620][T11196] do_syscall_64+0xfa/0x3b0 [ 763.366643][T11196] ? lockdep_hardirqs_on+0x9c/0x150 [ 763.366666][T11196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.366688][T11196] ? clear_bhb_loop+0x60/0xb0 [ 763.366716][T11196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.366736][T11196] RIP: 0033:0x7f57fd18d5fc [ 763.366757][T11196] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 763.366777][T11196] RSP: 002b:00007f57fdf34030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 763.366801][T11196] RAX: ffffffffffffffda RBX: 00007f57fd3b5fa0 RCX: 00007f57fd18d5fc [ 763.366817][T11196] RDX: 000000000000000f RSI: 00007f57fdf340a0 RDI: 0000000000000007 [ 763.366831][T11196] RBP: 00007f57fdf34090 R08: 0000000000000000 R09: 0000000000000000 [ 763.366844][T11196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.366857][T11196] R13: 00007f57fd3b6038 R14: 00007f57fd3b5fa0 R15: 00007ffd78b9cb28 [ 763.366893][T11196] [ 763.785941][ T5957] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 763.813990][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1459'. [ 763.970841][ T5957] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 763.986165][ T5957] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 764.004757][ T5957] usb 8-1: config 220 interface 0 has no altsetting 0 [ 764.026764][ T5957] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 764.056528][ T5957] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.064813][ T5957] usb 8-1: Product: syz [ 764.075586][ T5957] usb 8-1: Manufacturer: syz [ 764.085856][ T5957] usb 8-1: SerialNumber: syz [ 764.095895][ T92] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 764.134210][T11204] FAULT_INJECTION: forcing a failure. [ 764.134210][T11204] name failslab, interval 1, probability 0, space 0, times 0 [ 764.169214][T11204] CPU: 0 UID: 0 PID: 11204 Comm: syz.6.1461 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 764.169248][T11204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 764.169266][T11204] Call Trace: [ 764.169275][T11204] [ 764.169285][T11204] dump_stack_lvl+0x189/0x250 [ 764.169316][T11204] ? __pfx____ratelimit+0x10/0x10 [ 764.169341][T11204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.169367][T11204] ? __pfx__printk+0x10/0x10 [ 764.169402][T11204] ? __pfx___might_resched+0x10/0x10 [ 764.169425][T11204] ? fs_reclaim_acquire+0x7d/0x100 [ 764.169457][T11204] should_fail_ex+0x414/0x560 [ 764.169487][T11204] should_failslab+0xa8/0x100 [ 764.169514][T11204] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 764.169538][T11204] ? smk_parse_smack+0x1b1/0x1f0 [ 764.169577][T11204] kstrndup+0x80/0x160 [ 764.169607][T11204] smk_parse_smack+0x1b1/0x1f0 [ 764.169650][T11204] smk_import_entry+0x20/0x1d0 [ 764.169686][T11204] smk_write_syslog+0x93/0xd0 [ 764.169713][T11204] vfs_writev+0x4b3/0x960 [ 764.169744][T11204] ? __pfx_smk_write_syslog+0x10/0x10 [ 764.169773][T11204] ? __pfx_vfs_writev+0x10/0x10 [ 764.169818][T11204] ? __fget_files+0x2a/0x420 [ 764.169848][T11204] ? __fget_files+0x3a0/0x420 [ 764.169871][T11204] ? __fget_files+0x2a/0x420 [ 764.169907][T11204] do_writev+0x14d/0x2d0 [ 764.169936][T11204] ? __pfx_do_writev+0x10/0x10 [ 764.169960][T11204] ? rcu_is_watching+0x15/0xb0 [ 764.169991][T11204] ? do_syscall_64+0xbe/0x3b0 [ 764.170020][T11204] do_syscall_64+0xfa/0x3b0 [ 764.170047][T11204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.170068][T11204] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 764.170090][T11204] ? clear_bhb_loop+0x60/0xb0 [ 764.170117][T11204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.170139][T11204] RIP: 0033:0x7fc9e378ebe9 [ 764.170158][T11204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.170178][T11204] RSP: 002b:00007fc9e4524038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 764.170201][T11204] RAX: ffffffffffffffda RBX: 00007fc9e39b5fa0 RCX: 00007fc9e378ebe9 [ 764.170235][T11204] RDX: 0000000000000001 RSI: 00002000000035c0 RDI: 0000000000000003 [ 764.170249][T11204] RBP: 00007fc9e4524090 R08: 0000000000000000 R09: 0000000000000000 [ 764.170263][T11204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.170276][T11204] R13: 00007fc9e39b6038 R14: 00007fc9e39b5fa0 R15: 00007fff19121d08 [ 764.170311][T11204] [ 764.427366][ T92] usb 10-1: device descriptor read/64, error -71 [ 764.521843][ T5957] usb 8-1: Found UVC 0.00 device syz (8086:0b07) [ 764.529187][ T5957] usb 8-1: No valid video chain found. [ 764.538096][ T5957] usb 8-1: USB disconnect, device number 16 [ 764.705954][ T92] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 764.855953][ T92] usb 10-1: device descriptor read/64, error -71 [ 765.092559][ T92] usb usb10-port1: attempt power cycle [ 765.482030][T11223] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1467'. [ 765.505786][ T92] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 765.536755][ T92] usb 10-1: device descriptor read/8, error -71 [ 765.573406][T11224] PKCS8: Unsupported PKCS#8 version [ 765.807864][ T92] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 766.077036][ T92] usb 10-1: device descriptor read/8, error -71 [ 766.728449][ T92] usb usb10-port1: unable to enumerate USB device [ 767.397305][T11232] Invalid source name [ 767.401829][T11232] UBIFS error (pid: 11232): cannot open "/dev/sg0", error -22 [ 767.648757][T11230] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1469'. [ 768.126357][T11240] random: crng reseeded on system resumption [ 769.062811][T11248] netlink: 'syz.6.1473': attribute type 1 has an invalid length. [ 769.152419][T11248] netlink: 208 bytes leftover after parsing attributes in process `syz.6.1473'. [ 770.173530][T11266] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1478'. [ 770.905964][ T9967] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 771.313109][T11270] could not allocate digest TFM handle sha512-neon [ 772.325368][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'. [ 772.628791][T11294] veth0_to_team: entered promiscuous mode [ 772.635371][T11294] veth0_to_team: entered allmulticast mode [ 772.734291][T11295] FAULT_INJECTION: forcing a failure. [ 772.734291][T11295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.736217][T11295] [ 772.736228][T11295] ====================================================== [ 772.736238][T11295] WARNING: possible circular locking dependency detected [ 772.736254][T11295] 6.16.0-syzkaller #0 Not tainted [ 772.736264][T11295] ------------------------------------------------------ [ 772.736273][T11295] syz.6.1483/11295 is trying to acquire lock: [ 772.736285][T11295] ffffffff8e133300 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 772.736351][T11295] [ 772.736351][T11295] but task is already holding lock: [ 772.736358][T11295] ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 772.736406][T11295] [ 772.736406][T11295] which lock already depends on the new lock. [ 772.736406][T11295] [ 772.736414][T11295] [ 772.736414][T11295] the existing dependency chain (in reverse order) is: [ 772.736422][T11295] [ 772.736422][T11295] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 772.736451][T11295] lock_acquire+0x120/0x360 [ 772.736469][T11295] _raw_spin_lock_nested+0x32/0x50 [ 772.736490][T11295] raw_spin_rq_lock_nested+0x2a/0x140 [ 772.736510][T11295] task_rq_lock+0xbc/0x470 [ 772.736529][T11295] cgroup_move_task+0x9a/0x590 [ 772.736552][T11295] css_set_move_task+0x658/0x9e0 [ 772.736576][T11295] cgroup_post_fork+0x1ef/0x790 [ 772.736600][T11295] copy_process+0x37e6/0x3b80 [ 772.736622][T11295] kernel_clone+0x224/0x7f0 [ 772.736646][T11295] user_mode_thread+0xdd/0x140 [ 772.736678][T11295] rest_init+0x23/0x300 [ 772.736703][T11295] start_kernel+0x47d/0x500 [ 772.736725][T11295] x86_64_start_reservations+0x24/0x30 [ 772.736754][T11295] x86_64_start_kernel+0x143/0x1c0 [ 772.736783][T11295] common_startup_64+0x13e/0x147 [ 772.736809][T11295] [ 772.736809][T11295] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 772.736838][T11295] lock_acquire+0x120/0x360 [ 772.736854][T11295] _raw_spin_lock_irqsave+0xa7/0xf0 [ 772.736885][T11295] try_to_wake_up+0x6e/0x1290 [ 772.736911][T11295] __wake_up_common_lock+0x137/0x1f0 [ 772.736940][T11295] pty_unthrottle+0x3c/0x60 [ 772.736965][T11295] tty_unthrottle_safe+0x111/0x160 [ 772.736988][T11295] n_tty_receive_buf_common+0xf5f/0x12f0 [ 772.737011][T11295] tiocsti+0x23c/0x2c0 [ 772.737037][T11295] tty_ioctl+0x626/0xde0 [ 772.737063][T11295] __se_sys_ioctl+0xfc/0x170 [ 772.737092][T11295] do_syscall_64+0xfa/0x3b0 [ 772.737115][T11295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.737135][T11295] [ 772.737135][T11295] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 772.737164][T11295] lock_acquire+0x120/0x360 [ 772.737180][T11295] _raw_spin_lock_irqsave+0xa7/0xf0 [ 772.737212][T11295] __wake_up_common_lock+0x2f/0x1f0 [ 772.737239][T11295] tty_port_default_wakeup+0xa2/0xf0 [ 772.737271][T11295] serial8250_tx_chars+0x72e/0x970 [ 772.737299][T11295] serial8250_handle_irq+0x633/0xbb0 [ 772.737328][T11295] serial8250_default_handle_irq+0xbf/0x1b0 [ 772.737347][T11295] serial8250_interrupt+0xa2/0x1d0 [ 772.737387][T11295] __handle_irq_event_percpu+0x289/0x980 [ 772.737414][T11295] handle_irq_event+0x8b/0x1e0 [ 772.737440][T11295] handle_edge_irq+0x267/0x9c0 [ 772.737462][T11295] __common_interrupt+0x140/0x250 [ 772.737493][T11295] common_interrupt+0xb6/0xe0 [ 772.737519][T11295] asm_common_interrupt+0x26/0x40 [ 772.737538][T11295] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 772.737570][T11295] uart_port_unlock_deref+0x111/0x2f0 [ 772.737597][T11295] uart_write+0xe8/0x130 [ 772.737622][T11295] n_tty_write+0xd35/0x11d0 [ 772.737641][T11295] file_tty_write+0x500/0x990 [ 772.737673][T11295] vfs_write+0x54b/0xa90 [ 772.737690][T11295] ksys_write+0x145/0x250 [ 772.737707][T11295] do_syscall_64+0xfa/0x3b0 [ 772.737728][T11295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.737749][T11295] [ 772.737749][T11295] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 772.737777][T11295] lock_acquire+0x120/0x360 [ 772.737793][T11295] _raw_spin_lock_irqsave+0xa7/0xf0 [ 772.737824][T11295] serial8250_console_write+0x17e/0x1ba0 [ 772.737854][T11295] console_flush_all+0x728/0xc40 [ 772.737879][T11295] console_unlock+0xc4/0x270 [ 772.737901][T11295] vprintk_emit+0x5b7/0x7a0 [ 772.737923][T11295] _printk+0xcf/0x120 [ 772.737946][T11295] register_console+0xa8b/0xf90 [ 772.737972][T11295] univ8250_console_init+0x52/0x90 [ 772.737997][T11295] console_init+0x1a1/0x670 [ 772.738023][T11295] start_kernel+0x2cc/0x500 [ 772.738043][T11295] x86_64_start_reservations+0x24/0x30 [ 772.738071][T11295] x86_64_start_kernel+0x143/0x1c0 [ 772.738100][T11295] common_startup_64+0x13e/0x147 [ 772.738126][T11295] [ 772.738126][T11295] -> #0 (console_owner){-.-.}-{0:0}: [ 772.738154][T11295] validate_chain+0xb9b/0x2140 [ 772.738177][T11295] __lock_acquire+0xab9/0xd20 [ 772.738195][T11295] lock_acquire+0x120/0x360 [ 772.738211][T11295] console_flush_all+0x6d2/0xc40 [ 772.738236][T11295] console_unlock+0xc4/0x270 [ 772.738258][T11295] vprintk_emit+0x5b7/0x7a0 [ 772.738280][T11295] _printk+0xcf/0x120 [ 772.738303][T11295] should_fail_ex+0x3f5/0x560 [ 772.738321][T11295] strncpy_from_user+0x36/0x290 [ 772.738352][T11295] strncpy_from_user_nofault+0x72/0x150 [ 772.738373][T11295] bpf_bprintf_prepare+0xb9b/0x1410 [ 772.738400][T11295] bpf_trace_printk+0xdb/0x190 [ 772.738420][T11295] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 772.738436][T11295] bpf_trace_run2+0x284/0x4b0 [ 772.738462][T11295] __bpf_trace_contention_begin+0xdc/0x130 [ 772.738485][T11295] trace_contention_begin+0x114/0x140 [ 772.738510][T11295] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 772.738533][T11295] queued_spin_lock_slowpath+0x43/0x50 [ 772.738560][T11295] do_raw_spin_lock+0x21f/0x290 [ 772.738586][T11295] raw_spin_rq_lock_nested+0xad/0x140 [ 772.738607][T11295] __schedule+0x330/0x4c90 [ 772.738624][T11295] preempt_schedule_irq+0xb5/0x150 [ 772.738642][T11295] irqentry_exit+0x6f/0x90 [ 772.738661][T11295] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 772.738688][T11295] kasan_check_range+0x9f/0x2c0 [ 772.738709][T11295] __asan_memset+0x22/0x50 [ 772.738737][T11295] pcpu_alloc_noprof+0xe43/0x16b0 [ 772.738757][T11295] percpu_ref_init+0x42/0x360 [ 772.738778][T11295] ioctx_alloc+0x256/0x7a0 [ 772.738798][T11295] __se_sys_io_setup+0x7b/0x1a0 [ 772.738816][T11295] do_syscall_64+0xfa/0x3b0 [ 772.738837][T11295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.738858][T11295] [ 772.738858][T11295] other info that might help us debug this: [ 772.738858][T11295] [ 772.738865][T11295] Chain exists of: [ 772.738865][T11295] console_owner --> &p->pi_lock --> &rq->__lock [ 772.738865][T11295] [ 772.738899][T11295] Possible unsafe locking scenario: [ 772.738899][T11295] [ 772.738906][T11295] CPU0 CPU1 [ 772.738913][T11295] ---- ---- [ 772.738919][T11295] lock(&rq->__lock); [ 772.738933][T11295] lock(&p->pi_lock); [ 772.738949][T11295] lock(&rq->__lock); [ 772.738964][T11295] lock(console_owner); [ 772.738979][T11295] [ 772.738979][T11295] *** DEADLOCK *** [ 772.738979][T11295] [ 772.738985][T11295] 5 locks held by syz.6.1483/11295: [ 772.738998][T11295] #0: ffff88805da79fe8 (&ctx->ring_lock){+.+.}-{4:4}, at: ioctx_alloc+0x19e/0x7a0 [ 772.739049][T11295] #1: ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 772.739100][T11295] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 772.739156][T11295] #3: ffffffff8e133360 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 772.739208][T11295] #4: ffffffff8e01ac30 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 772.739263][T11295] [ 772.739263][T11295] stack backtrace: [ 772.739275][T11295] CPU: 1 UID: 0 PID: 11295 Comm: syz.6.1483 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 772.739299][T11295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 772.739313][T11295] Call Trace: [ 772.739322][T11295] [ 772.739331][T11295] dump_stack_lvl+0x189/0x250 [ 772.739358][T11295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 772.739399][T11295] ? __pfx__printk+0x10/0x10 [ 772.739437][T11295] ? print_lock_name+0xde/0x100 [ 772.739466][T11295] print_circular_bug+0x2ee/0x310 [ 772.739494][T11295] check_noncircular+0x134/0x160 [ 772.739523][T11295] validate_chain+0xb9b/0x2140 [ 772.739561][T11295] __lock_acquire+0xab9/0xd20 [ 772.739584][T11295] ? console_flush_all+0x13a/0xc40 [ 772.739611][T11295] lock_acquire+0x120/0x360 [ 772.739630][T11295] ? console_flush_all+0x13a/0xc40 [ 772.739661][T11295] ? do_raw_spin_unlock+0x122/0x240 [ 772.739696][T11295] ? console_flush_all+0x13a/0xc40 [ 772.739724][T11295] console_flush_all+0x6d2/0xc40 [ 772.739751][T11295] ? console_flush_all+0x13a/0xc40 [ 772.739779][T11295] ? console_flush_all+0x13a/0xc40 [ 772.739810][T11295] ? __pfx_console_flush_all+0x10/0x10 [ 772.739843][T11295] ? is_printk_cpu_sync_owner+0x32/0x40 [ 772.739877][T11295] console_unlock+0xc4/0x270 [ 772.739903][T11295] ? __pfx_console_unlock+0x10/0x10 [ 772.739927][T11295] ? is_printk_cpu_sync_owner+0x32/0x40 [ 772.739954][T11295] vprintk_emit+0x5b7/0x7a0 [ 772.739979][T11295] ? __pfx_vprintk_emit+0x10/0x10 [ 772.740003][T11295] ? rcu_is_watching+0x15/0xb0 [ 772.740027][T11295] ? trace_sched_exit_tp+0x38/0x120 [ 772.740059][T11295] ? __schedule+0x16c8/0x4c90 [ 772.740083][T11295] _printk+0xcf/0x120 [ 772.740109][T11295] ? __pfx____ratelimit+0x10/0x10 [ 772.740132][T11295] ? __pfx__printk+0x10/0x10 [ 772.740160][T11295] ? __pfx___schedule+0x10/0x10 [ 772.740178][T11295] ? strncpy_from_user+0x1bc/0x290 [ 772.740217][T11295] should_fail_ex+0x3f5/0x560 [ 772.740240][T11295] strncpy_from_user+0x36/0x290 [ 772.740276][T11295] strncpy_from_user_nofault+0x72/0x150 [ 772.740301][T11295] bpf_bprintf_prepare+0xb9b/0x1410 [ 772.740330][T11295] ? __pfx_cmp_ex_search+0x10/0x10 [ 772.740353][T11295] ? strncpy_from_user+0x1bc/0x290 [ 772.740389][T11295] ? strncpy_from_user+0x1bc/0x290 [ 772.740423][T11295] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 772.740456][T11295] ? bpf_trace_printk+0xc1/0x190 [ 772.740479][T11295] bpf_trace_printk+0xdb/0x190 [ 772.740500][T11295] ? __lock_acquire+0xab9/0xd20 [ 772.740520][T11295] ? __pfx_bpf_trace_printk+0x10/0x10 [ 772.740543][T11295] ? bpf_trace_run2+0x186/0x4b0 [ 772.740580][T11295] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 772.740598][T11295] bpf_trace_run2+0x284/0x4b0 [ 772.740627][T11295] ? bpf_trace_run2+0x186/0x4b0 [ 772.740655][T11295] ? __pfx_bpf_trace_run2+0x10/0x10 [ 772.740697][T11295] ? __bpf_trace_contention_begin+0xcd/0x130 [ 772.740725][T11295] __bpf_trace_contention_begin+0xdc/0x130 [ 772.740751][T11295] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 772.740777][T11295] ? rcu_qs+0xc4/0x170 [ 772.740799][T11295] ? __switch_to+0xd74/0x1600 [ 772.740832][T11295] trace_contention_begin+0x114/0x140 [ 772.740860][T11295] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 772.740885][T11295] ? rcu_qs+0xc4/0x170 [ 772.740905][T11295] ? __pfx_rcu_qs+0x10/0x10 [ 772.740927][T11295] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 772.740960][T11295] queued_spin_lock_slowpath+0x43/0x50 [ 772.740990][T11295] do_raw_spin_lock+0x21f/0x290 [ 772.741019][T11295] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 772.741053][T11295] raw_spin_rq_lock_nested+0xad/0x140 [ 772.741078][T11295] __schedule+0x330/0x4c90 [ 772.741099][T11295] ? __pfx___schedule+0x10/0x10 [ 772.741117][T11295] ? bpf_trace_run2+0x322/0x4b0 [ 772.741151][T11295] ? preempt_schedule_irq+0xb5/0x150 [ 772.741173][T11295] ? __bpf_trace_contention_begin+0xcd/0x130 [ 772.741199][T11295] ? __pfx___schedule+0x10/0x10 [ 772.741218][T11295] ? preempt_schedule_common+0x83/0xd0 [ 772.741240][T11295] ? preempt_schedule+0xae/0xc0 [ 772.741260][T11295] ? __mutex_trylock_common+0x153/0x260 [ 772.741290][T11295] ? preempt_schedule_irq+0xaa/0x150 [ 772.741314][T11295] preempt_schedule_irq+0xb5/0x150 [ 772.741335][T11295] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 772.741362][T11295] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 772.741387][T11295] irqentry_exit+0x6f/0x90 [ 772.741408][T11295] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 772.741430][T11295] RIP: 0010:kasan_check_range+0x9f/0x2c0 [ 772.741455][T11295] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd [ 772.741475][T11295] RSP: 0018:ffffc90003067cf8 EFLAGS: 00000246 [ 772.741493][T11295] RAX: 1ffff11047ffde01 RBX: ffffffffffffffff RCX: ffffffff8200d903 [ 772.741510][T11295] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffe8ffffc22cd0 [ 772.741524][T11295] RBP: 0000000000000000 R08: ffffe8ffffc22cd7 R09: 1ffffd1ffff8459a [ 772.741540][T11295] R10: dffffc0000000000 R11: fffff91ffff8459a R12: 0000000000000001 [ 772.741555][T11295] R13: 0000000000022cd0 R14: fffff91ffff8459b R15: 1ffffd1ffff8459a [ 772.741576][T11295] ? pcpu_alloc_noprof+0xe43/0x16b0 [ 772.741605][T11295] __asan_memset+0x22/0x50 [ 772.741634][T11295] pcpu_alloc_noprof+0xe43/0x16b0 [ 772.741669][T11295] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 772.741693][T11295] percpu_ref_init+0x42/0x360 [ 772.741717][T11295] ? __pfx_free_ioctx_users+0x10/0x10 [ 772.741741][T11295] ioctx_alloc+0x256/0x7a0 [ 772.741767][T11295] __se_sys_io_setup+0x7b/0x1a0 [ 772.741789][T11295] do_syscall_64+0xfa/0x3b0 [ 772.741812][T11295] ? lockdep_hardirqs_on+0x9c/0x150 [ 772.741834][T11295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.741855][T11295] ? clear_bhb_loop+0x60/0xb0 [ 772.741879][T11295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.741901][T11295] RIP: 0033:0x7fc9e378ebe9 [ 772.741921][T11295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.741940][T11295] RSP: 002b:00007fc9e19d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 772.741962][T11295] RAX: ffffffffffffffda RBX: 00007fc9e39b6180 RCX: 00007fc9e378ebe9 [ 772.741978][T11295] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 772.741991][T11295] RBP: 00007fc9e19d5090 R08: 0000000000000000 R09: 0000000000000000 [ 772.742005][T11295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.742018][T11295] R13: 00007fc9e39b6218 R14: 00007fc9e39b6180 R15: 00007fff19121d08 [ 772.742043][T11295] [ 774.214873][T11295] CPU: 1 UID: 0 PID: 11295 Comm: syz.6.1483 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 774.214899][T11295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 774.214910][T11295] Call Trace: [ 774.214920][T11295] [ 774.214931][T11295] dump_stack_lvl+0x189/0x250 [ 774.214957][T11295] ? __pfx____ratelimit+0x10/0x10 [ 774.214975][T11295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 774.214994][T11295] ? __pfx__printk+0x10/0x10 [ 774.215028][T11295] ? __pfx___schedule+0x10/0x10 [ 774.215043][T11295] ? strncpy_from_user+0x1bc/0x290 [ 774.215074][T11295] should_fail_ex+0x414/0x560 [ 774.215094][T11295] strncpy_from_user+0x36/0x290 [ 774.215123][T11295] strncpy_from_user_nofault+0x72/0x150 [ 774.215144][T11295] bpf_bprintf_prepare+0xb9b/0x1410 [ 774.215169][T11295] ? __pfx_cmp_ex_search+0x10/0x10 [ 774.215187][T11295] ? strncpy_from_user+0x1bc/0x290 [ 774.215217][T11295] ? strncpy_from_user+0x1bc/0x290 [ 774.215244][T11295] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 774.215271][T11295] ? bpf_trace_printk+0xc1/0x190 [ 774.215290][T11295] bpf_trace_printk+0xdb/0x190 [ 774.215307][T11295] ? __lock_acquire+0xab9/0xd20 [ 774.215324][T11295] ? __pfx_bpf_trace_printk+0x10/0x10 [ 774.215343][T11295] ? bpf_trace_run2+0x186/0x4b0 [ 774.215372][T11295] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 774.215388][T11295] bpf_trace_run2+0x284/0x4b0 [ 774.215411][T11295] ? bpf_trace_run2+0x186/0x4b0 [ 774.215437][T11295] ? __pfx_bpf_trace_run2+0x10/0x10 [ 774.215462][T11295] ? __bpf_trace_contention_begin+0xcd/0x130 [ 774.215485][T11295] __bpf_trace_contention_begin+0xdc/0x130 [ 774.215506][T11295] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 774.215528][T11295] ? rcu_qs+0xc4/0x170 [ 774.215547][T11295] ? __switch_to+0xd74/0x1600 [ 774.215575][T11295] trace_contention_begin+0x114/0x140 [ 774.215598][T11295] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 774.215619][T11295] ? rcu_qs+0xc4/0x170 [ 774.215635][T11295] ? __pfx_rcu_qs+0x10/0x10 [ 774.215659][T11295] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 774.215688][T11295] queued_spin_lock_slowpath+0x43/0x50 [ 774.215716][T11295] do_raw_spin_lock+0x21f/0x290 [ 774.215743][T11295] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 774.215775][T11295] raw_spin_rq_lock_nested+0xad/0x140 [ 774.215809][T11295] __schedule+0x330/0x4c90 [ 774.215830][T11295] ? __pfx___schedule+0x10/0x10 [ 774.215847][T11295] ? bpf_trace_run2+0x322/0x4b0 [ 774.215885][T11295] ? preempt_schedule_irq+0xb5/0x150 [ 774.215908][T11295] ? __bpf_trace_contention_begin+0xcd/0x130 [ 774.215935][T11295] ? __pfx___schedule+0x10/0x10 [ 774.215955][T11295] ? preempt_schedule_common+0x83/0xd0 [ 774.215977][T11295] ? preempt_schedule+0xae/0xc0 [ 774.215998][T11295] ? __mutex_trylock_common+0x153/0x260 [ 774.216028][T11295] ? preempt_schedule_irq+0xaa/0x150 [ 774.216052][T11295] preempt_schedule_irq+0xb5/0x150 [ 774.216073][T11295] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 774.216101][T11295] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 774.216127][T11295] irqentry_exit+0x6f/0x90 [ 774.216150][T11295] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 774.216173][T11295] RIP: 0010:kasan_check_range+0x9f/0x2c0 [ 774.216196][T11295] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd [ 774.216214][T11295] RSP: 0018:ffffc90003067cf8 EFLAGS: 00000246 [ 774.216231][T11295] RAX: 1ffff11047ffde01 RBX: ffffffffffffffff RCX: ffffffff8200d903 [ 774.216245][T11295] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffe8ffffc22cd0 [ 774.216256][T11295] RBP: 0000000000000000 R08: ffffe8ffffc22cd7 R09: 1ffffd1ffff8459a [ 774.216269][T11295] R10: dffffc0000000000 R11: fffff91ffff8459a R12: 0000000000000001 [ 774.216282][T11295] R13: 0000000000022cd0 R14: fffff91ffff8459b R15: 1ffffd1ffff8459a [ 774.216299][T11295] ? pcpu_alloc_noprof+0xe43/0x16b0 [ 774.216324][T11295] __asan_memset+0x22/0x50 [ 774.216348][T11295] pcpu_alloc_noprof+0xe43/0x16b0 [ 774.216373][T11295] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 774.216392][T11295] percpu_ref_init+0x42/0x360 [ 774.216413][T11295] ? __pfx_free_ioctx_users+0x10/0x10 [ 774.216433][T11295] ioctx_alloc+0x256/0x7a0 [ 774.216454][T11295] __se_sys_io_setup+0x7b/0x1a0 [ 774.216472][T11295] do_syscall_64+0xfa/0x3b0 [ 774.216490][T11295] ? lockdep_hardirqs_on+0x9c/0x150 [ 774.216508][T11295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.216525][T11295] ? clear_bhb_loop+0x60/0xb0 [ 774.216546][T11295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.216564][T11295] RIP: 0033:0x7fc9e378ebe9 [ 774.216579][T11295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.216595][T11295] RSP: 002b:00007fc9e19d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 774.216612][T11295] RAX: ffffffffffffffda RBX: 00007fc9e39b6180 RCX: 00007fc9e378ebe9 [ 774.216626][T11295] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 774.216637][T11295] RBP: 00007fc9e19d5090 R08: 0000000000000000 R09: 0000000000000000 [ 774.216648][T11295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.216659][T11295] R13: 00007fc9e39b6218 R14: 00007fc9e39b6180 R15: 00007fff19121d08 [ 774.216679][T11295]