last executing test programs: 11m34.96327435s ago: executing program 4 (id=16): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}], 0x1, 0x24040890) (async) sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}], 0x1, 0x24040890) setsockopt$sock_int(r1, 0x1, 0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x4b45, 0x1) (async) ioctl$TCXONC(0xffffffffffffffff, 0x4b45, 0x1) prlimit64(0x0, 0xe, &(0x7f0000003600)={0xa, 0x8b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) socket$igmp6(0xa, 0x3, 0x2) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa86082b1827c186dd607fa72700082c00fc0200000000000093d7780500000004fe8000000000000000000000000000aa3a00080168000000"], 0x0) sendmmsg$unix(r4, &(0x7f00000002c0), 0x0, 0x0) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/44, 0x2c}], 0x1, &(0x7f0000000340)=""/120, 0x78}, 0x7}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/25, 0x19}, {&(0x7f0000000580)=""/196, 0xc4}, {&(0x7f0000000400)=""/27, 0x1b}], 0x4}}, {{&(0x7f0000000680)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/138, 0x8a}, {&(0x7f0000000800)=""/181, 0xb5}, {&(0x7f00000008c0)=""/35, 0x23}], 0x3, &(0x7f0000000940)=""/190, 0xbe}, 0x8}, {{&(0x7f0000000a00)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/203, 0xcb}, {&(0x7f0000000b80)=""/153, 0x99}, {&(0x7f0000000c40)=""/89, 0x59}, {&(0x7f0000000cc0)=""/75, 0x4b}, {&(0x7f0000000d40)=""/45, 0x2d}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000d80)=""/121, 0x79}], 0x7}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000000e80)=""/72, 0x48}, {&(0x7f0000000f00)=""/224, 0xe0}, {&(0x7f0000001000)=""/79, 0x4f}, {&(0x7f0000001080)=""/96, 0x60}, {&(0x7f0000001100)=""/255, 0xff}, {&(0x7f0000003240)=""/238, 0xee}], 0x6, &(0x7f00000033c0)=""/241, 0xf1}}], 0x5, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/44, 0x2c}], 0x1, &(0x7f0000000340)=""/120, 0x78}, 0x7}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/25, 0x19}, {&(0x7f0000000580)=""/196, 0xc4}, {&(0x7f0000000400)=""/27, 0x1b}], 0x4}}, {{&(0x7f0000000680)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/138, 0x8a}, {&(0x7f0000000800)=""/181, 0xb5}, {&(0x7f00000008c0)=""/35, 0x23}], 0x3, &(0x7f0000000940)=""/190, 0xbe}, 0x8}, {{&(0x7f0000000a00)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/203, 0xcb}, {&(0x7f0000000b80)=""/153, 0x99}, {&(0x7f0000000c40)=""/89, 0x59}, {&(0x7f0000000cc0)=""/75, 0x4b}, {&(0x7f0000000d40)=""/45, 0x2d}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000d80)=""/121, 0x79}], 0x7}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000000e80)=""/72, 0x48}, {&(0x7f0000000f00)=""/224, 0xe0}, {&(0x7f0000001000)=""/79, 0x4f}, {&(0x7f0000001080)=""/96, 0x60}, {&(0x7f0000001100)=""/255, 0xff}, {&(0x7f0000003240)=""/238, 0xee}], 0x6, &(0x7f00000033c0)=""/241, 0xf1}}], 0x5, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='snd_soc_jack_notify\x00', r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8", 0x1}], 0x1}}], 0x1, 0x8000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 11m30.315315178s ago: executing program 4 (id=19): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x465e, 0x400, 0x3, 0x234}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000002c0)={0x0, 0x0, {0x43fc, 0x5, 0x1002, 0x3, 0x8, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) select(0x0, 0x0, &(0x7f00000000c0)={0x4}, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = gettid() sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) readv(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = socket$kcm(0x2d, 0x2, 0x0) sendmmsg(r7, &(0x7f00000004c0)=[{{&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x4, 0x7, "47af57ce8c8e5af84d109ee7a1488bd8c3df97e87f7e771f69ced4c5de6ddeb44ee59bdfb62866129f1338dba84b5d82a121c369a6837123e849c909c16b53", 0x2d}, 0x80, 0x0}}], 0x1, 0x8000) ptrace(0x11, r5) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x74, 0x2c, 0xd27, 0x870bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff3, 0x7}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x1}, {0x6, 0x3, 0xae8, 0x0, 0x0, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x6}, {0x1, 0x10000, 0x4, 0x2, 0xd, 0x2, 0x2}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040094}, 0x40010) 11m27.276380941s ago: executing program 4 (id=26): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0xee}}}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) 11m26.978023399s ago: executing program 4 (id=29): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\\\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x60, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) close(0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x2400c8c1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r5 = syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000002340)={0x24, 0x0, &(0x7f00000021c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r4, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xfffffffc}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYRESOCT=r1], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c000000b500000004000000020000000000000f0200000025ff000000000000000f02000000b83d00005f00"], &(0x7f0000000280)=""/153, 0x38, 0x99, 0x1}, 0x28) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) 11m23.705388758s ago: executing program 4 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) 11m23.039281043s ago: executing program 4 (id=40): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x100000000000000) 11m22.164201361s ago: executing program 32 (id=40): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x100000000000000) 4m50.511975267s ago: executing program 3 (id=1076): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 4m48.535756091s ago: executing program 3 (id=1078): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000006d000000000000000f20e035000040000f22e0450f95ec460f060f200000000f22d80f20c035200000000f22c0b805000000b9f2ffffff"], 0x6d}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x6f, 0xa, 0xb9, 0x0, 0x11, 0x6, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x81, 0x2, 0x2, 0xff, 0x10, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x0, 0x5}], 0xffffffff}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket(0x2000000015, 0x80005, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x102, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x2, 0xfffffffb, 0xfffffffe, 0x0, r3}, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x22, 0x0, r6, 0x0, &(0x7f0000000600)="5e704cc59f51940c387e0feeca6d58dce23761d8130faffbdbbe3abe73a51e90639a4b936adc6fb208c5a3593c01172cd9d5017c1ed96cfa1263b6dc971950e8b634979550f2bd505dd9ba3215c624e819181378f8f4f040b7d2b34f72aed5150fbacb9cf38ffd684963349b7722580a93b0aae3b005e57caacd039c55e6e478147668d2f7521cb359d894", 0x8b, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000010000, 0x8000000000000006, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffffc, 0x0, 0x68ff, 0x9, 0x0, 0x5, 0x0, 0x3], 0x1, 0x202}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40000000000000069107a000000000004000000000000009500000000000000cac3e437194889f8a32cb06ad9e07d64e9272c815edc9c1a7e380a3defce991f49a18b6a3c399bf7bbf9802c419e33199ea3c183bb2f734deb677238109c228ced299b38a37d27c420388ece0f399b69b8af2c4e870d3d33cb1748d50295bfba4bd46ed693f17cb8583c11a345470f06a5217f86a6d0617dd2434a07445396457997c60fb335c6e23bd4a8b1ed80fbc637a6743aaa8c649fd1aa7888aad7ca33bcaf46a623a9e687bfe86191856bce615e70bc4d98439ee440d9"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x20010, 0xffffffffffffffff, 0x8000000) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) 4m46.391181692s ago: executing program 3 (id=1085): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000940)=0x3) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000005180)={0x2020}, 0x2020) recvmsg$can_j1939(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)=""/223, 0xdf}, {&(0x7f00000007c0)=""/74, 0x4a}], 0x2, &(0x7f0000000840)=""/203, 0xcb}, 0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000780), r4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80006) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1, 0x29018000, 0x4, 0x4, 0x5, 0x6, 0x0, 0x0, 0x0, 0x4}}, 0x50) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 4m45.026635684s ago: executing program 3 (id=1087): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) (async) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) (async) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r7 = getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f0000002b80)=[{{&(0x7f0000000780)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001900)=[{&(0x7f0000002c00)=""/80, 0x50}, {&(0x7f0000000580)=""/178, 0xb2}, {&(0x7f0000000640)=""/153, 0x99}, {&(0x7f0000000700)=""/126, 0x7e}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/15, 0xf}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f00000019c0)=""/174, 0xae}], 0x8, &(0x7f0000001a80)=""/4096, 0x1000}, 0x134}, {{0x0, 0x0, &(0x7f0000002ac0), 0x0, &(0x7f0000000440)=""/76, 0x4c}, 0x1}], 0x2, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b4050000000000ef021010000000000800000000000000209500090000000000", @ANYRESHEX=r1, @ANYRES16=r7, @ANYRES64=r4, @ANYRES32=r6, @ANYRESDEC=r5], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4008040}, 0x2000c094) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) (async) syz_emit_ethernet(0x76, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd600002100010ccc6d05ed9157c00000000000000000000bbff0200000000000000000000000000010400907800000000608bb91d0000110000000000000000000000000000000000000000005e000519680000002f0000000000000200"/118], 0x0) (async) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000400)=0x1, r11, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xfffffffa, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff}, {0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @multicast1}}, r11}}, 0x48) 4m41.73075339s ago: executing program 3 (id=1096): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x31c000}) listen(r3, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e21, 0x401, @loopback, 0x4}, 0x80, 0x0}, 0x20000090) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) writev(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0502460c"], 0x8) 4m37.836933899s ago: executing program 3 (id=1105): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x100000000000000) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @loopback}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000003140)={@initdev, @broadcast}, &(0x7f0000003180)=0xc) 4m22.039270702s ago: executing program 33 (id=1105): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x100000000000000) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @loopback}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000003140)={@initdev, @broadcast}, &(0x7f0000003180)=0xc) 1m39.983800503s ago: executing program 5 (id=1718): mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x840, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448e1, &(0x7f0000000000)={0x0, 0x0, "957008"}) 1m38.993390437s ago: executing program 5 (id=1724): sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="140040001000000000000000f200b0fea921254c4d8f0000000e000000000000000000000700fbff82"], 0x5f}, 0x20004001) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x521) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f00000000c0)=0x80, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/17, 0x15}, 0x8e0f}], 0x400029c, 0x40010142, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x2400c101}, 0x4088c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000580)={0x1}) ioctl$UI_DEV_CREATE(r6, 0x5501) write$uinput_user_dev(r6, &(0x7f0000000000)={'syz0\x00', {0x8, 0x7, 0x3, 0x3ff}, 0x23, [0x10, 0x6, 0x3, 0x43, 0x0, 0xfffffff7, 0x5, 0x0, 0x2, 0x9, 0x10, 0x5, 0xfffffff7, 0x9, 0xf3, 0x5, 0x9, 0x80000000, 0x6, 0x2, 0x50000, 0x200, 0x1ff, 0x10000, 0xfffffff7, 0xd, 0x3, 0x6, 0x80000001, 0x4, 0x9, 0xc4, 0x4, 0x5, 0xd6, 0x101, 0x41, 0xb, 0x3, 0xe, 0x9, 0x6, 0xa0d, 0x4, 0x7f, 0x1d8, 0x9, 0x1, 0x80000001, 0xc, 0xe, 0x10, 0xe2, 0x7fff, 0x8, 0xff, 0x3, 0x5, 0xd072, 0x8, 0xfffffff8, 0x9, 0x100, 0x1000], [0x0, 0x1ff, 0xd0000000, 0x80000001, 0x1, 0x6, 0x0, 0x5, 0x6f, 0x0, 0x100, 0x1000, 0x3, 0x0, 0x9, 0x9, 0x4, 0x94, 0x8000, 0xb, 0x4, 0x1, 0x1ff, 0x8, 0x5, 0x9, 0xfffffffc, 0x4, 0x10000, 0x9, 0x5, 0x1, 0x5, 0x6, 0x7, 0xffff, 0x8, 0xe8d7, 0x3a2, 0x80, 0x3ff, 0x64, 0x1000, 0x4, 0x6, 0x8001, 0xfffffff8, 0x7, 0x0, 0x7, 0x1ff, 0x81, 0x1, 0x913, 0x9, 0x8, 0x122, 0x3, 0xe4a, 0x7fff, 0x0, 0x5, 0x6, 0x8], [0x4, 0x1000, 0x9, 0x80000001, 0x5, 0xfffffffa, 0x401, 0x7, 0x4, 0x6, 0x3, 0x9, 0x2, 0x1, 0x1a, 0xffffffff, 0x4, 0x1, 0x8, 0x5, 0xfffffffe, 0x10000, 0x9, 0x40, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x12, 0x5, 0x0, 0xac, 0x100, 0x200, 0x2, 0x2, 0xc73, 0x65c, 0x8, 0x7fffffff, 0x0, 0x6, 0x6, 0x401, 0x80000000, 0xf, 0x3, 0x401, 0x7fff, 0x6, 0xc9, 0x80000000, 0xb, 0x1000, 0x7, 0xfffffc01, 0x6, 0xfff], [0x59d, 0x1c7f4f6, 0x2, 0x0, 0x5, 0x3, 0x5, 0xffff7fff, 0x1, 0x8001, 0x4000000, 0x4, 0x80000001, 0x8, 0xaa1, 0xc57e, 0x6, 0x3, 0x1, 0x1ff, 0xfffffff7, 0x7fff, 0xd, 0xb60648b, 0x2, 0x1000, 0x7f, 0x8, 0x1973, 0x800, 0x0, 0x22b9, 0x2964, 0x5, 0x10000, 0x1, 0x80, 0x8, 0x7, 0x7, 0x801, 0x58, 0x80000001, 0x4, 0x2c75, 0x7fff, 0x7fff, 0x1, 0x8, 0x6, 0xc7d, 0x7, 0x7, 0x71b, 0x2, 0x2, 0x100, 0xb, 0x8001, 0x7, 0xfffff800, 0x7, 0x7, 0x8]}, 0x45c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 1m37.843536389s ago: executing program 5 (id=1728): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8004001201", 0x2e}], 0x1, 0x0, 0xfe}, 0x0) 1m37.682593652s ago: executing program 5 (id=1730): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000940)=0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000005180)={0x2020}, 0x2020) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x101f40a, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa06006, 0x0) setns(r4, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m36.459846352s ago: executing program 5 (id=1732): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x101000, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 1m32.796004562s ago: executing program 5 (id=1744): openat$kvm(0x0, 0x0, 0x400440, 0x0) userfaultfd(0x180801) eventfd2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff, 0x7, 0x80000}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a42, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x2b, 0x37, 0x1, {0x1, 0x100000001, 0x100, r3, 0xd, '/dev/net/tun\x00'}}, 0x2b) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) 1m31.351840897s ago: executing program 34 (id=1744): openat$kvm(0x0, 0x0, 0x400440, 0x0) userfaultfd(0x180801) eventfd2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff, 0x7, 0x80000}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a42, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x2b, 0x37, 0x1, {0x1, 0x100000001, 0x100, r3, 0xd, '/dev/net/tun\x00'}}, 0x2b) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) 1m9.903036662s ago: executing program 1 (id=1813): r0 = socket(0x2a, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000740)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x2}, 0x76, 0x1, 0x80, 0x2, 0x1d, 'syz1\x00', "75e4f8cd1ce4f04348e4622059a8c03fd84090119bdef747c01fe49ff6035707", "d09406a0e7096dd6d2395c19e8996b0c2cf760604e36dfa887202f45ec0153f8", [{0x1, 0x7, {0x2, 0x1}}, {0x7ff, 0x8, {0x3, 0xfffffff8}}, {0xed, 0x2dea, {0x2, 0x1}}, {0x2, 0x9, {0x0, 0x8d0}}, {0x4, 0x3, {0x2, 0x1df20000}}, {0x0, 0x3, {0x0, 0xb045}}, {0x89cb, 0x3, {0x0, 0x5}}, {0xaf, 0x6, {0x41998e8385e00d27, 0x4f}}, {0x4, 0x3, {0x1, 0x4}}, {0x7f, 0x666f, {0x0, 0xcf39}}, {0x8001, 0x9, {0x3, 0x8000}}, {0x101, 0x1000, {0x2, 0x8}}, {0xe, 0xfffa, {0x2, 0xf788}}, {0xed4, 0x80, {0x1, 0x8}}, {0x0, 0x9, {0x0, 0x5}}, {0x7ff, 0x901, {0x1, 0x401}}, {0x9, 0x5, {0x1, 0x80000000}}, {0x10, 0xae25, {0x0, 0x7633}}, {0x2, 0x1, {0x3, 0xfffffffd}}, {0x10, 0xfff8, {0x2, 0x8000}}, {0x8001, 0x9, {0x0, 0x10000}}, {0x4, 0x7, {0x2, 0xa0}}, {0x7ff, 0x0, {0x2, 0x9}}, {0x2, 0x3, {0x3, 0x3}}, {0x7fff, 0x1b0, {0x1, 0x6f5a}}, {0x5, 0x499, {0x0, 0x5}}, {0xfff, 0x3, {0x1, 0xa044}}, {0x0, 0xf0f9, {0x3}}, {0x73, 0xb4, {0x3, 0x4e}}, {0x7, 0x56, {0x1, 0x2}}, {0xf, 0x2, {0x1, 0x7}}, {0x2, 0xffff, {0x3, 0x1}}, {0x5, 0x400, {0x2, 0x80000001}}, {0xb81e, 0x6, {0x2, 0x8}}, {0x10, 0x2, {0x2, 0x8001}}, {0x7, 0x1, {0x3, 0x1}}, {0x8, 0x7, {0x2, 0x2}}, {0xab, 0x9, {0x1, 0x7ff}}, {0x0, 0x3, {0x3, 0x2}}, {0x8, 0x0, {0x0, 0x8001}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8010}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) unshare(0x8000600) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}], 0x58}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c, 0x2, 0x2, 0x101, 0x70bd29, 0x25dfdbfd, {0x1, 0x0, 0xa}, [@typed={0x8, 0x4b, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) connect$llc(r6, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r8 = dup3(r6, r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r6}, './bus\x00'}) 1m9.012059176s ago: executing program 1 (id=1816): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SET_SECCOMP(0xd, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0xd, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2ac00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) (async) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x400000b4, 0x0, 0x0}) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r4 = socket(0x1e, 0x5, 0x0) listen(r4, 0x0) (async) listen(r4, 0x0) r5 = gettid() io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x800}}, 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x0, 0xffff}}]}, 0xc4}}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x0, 0xffff}}]}, 0xc4}}, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) gettid() r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r9}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd603cf72f4496880020010000000000000000000000000002fe8000000000000000000000000000aa000000", @ANYRES32=0x41424344], 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd603cf72f4496880020010000000000000000000000000002fe8000000000000000000000000000aa000000", @ANYRES32=0x41424344], 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x0) 1m7.890864689s ago: executing program 1 (id=1820): socket$key(0xf, 0x3, 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x47de, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0x9, 0x2, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000200)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0x0, 0x7fffffff, 0x100002}, 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) 1m6.262479543s ago: executing program 1 (id=1824): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x8, 0x2, 0x0, 0x0, [0x0], [0x0, 0xfffffffc], [0xfffffffc]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000340)={r3}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) 1m6.113354252s ago: executing program 1 (id=1827): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000002580)=[{&(0x7f0000000400)="b4", 0x1}], 0x1) 1m2.940210616s ago: executing program 1 (id=1837): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2104541}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x10000000, 0x7f}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004080) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@enum64={0x4, 0x3, 0x0, 0x13, 0x1, 0x6, [{0x9, 0x40, 0x5}, {0x4, 0x1, 0x5d1e2f20}, {0x9, 0x6, 0x4}]}]}, {0x0, [0x61, 0x0, 0x61, 0x0, 0x30, 0x61, 0x5f, 0x61]}}, &(0x7f0000000280)=""/4096, 0x52, 0x1000, 0x0, 0x256}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x7, 0x8000, r1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0xd, @value=r2}, 0x50) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0xa0, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_COMMENT={0x8, 0x1a, '*\\&\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x3c}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000010) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x80010, r1, 0x0) socketpair(0x0, 0x1, 0xfffffffe, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000001480)={{r4}, "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"}) write$dsp(r1, &(0x7f0000002480)="aa7e8af22c7f2cddc2c1c85cd94cca04dfd92441ff0ff5477b769214815c73fc5a87c09f94201493bac5e90b5573aa307d8913ab32cf0bff345360f332110e53822e2a5954e34c7c0f8ca13952fcec430603aa89d9885512aae97d09e66408e6ae956847a7d35d1df61a2876eb6ab88bcbaab6a9823b184d3ec7454b8a7bb36d1999fea4c0e03e73df92eaec6ab4977f51c153bedd26a74d0c310c9e3bc6c25c17612fae640579218b888f5b4a19b2dff288dd96489aca8feca4b6fdbc9f2fb4bc0e212bf7dc04c0c3450e0d4990", 0xce) r5 = dup2(r4, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002580)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000002680)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f00000026c0)={0x3, 0x7fff, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x3}) setresuid(0xee01, r6, r7) r8 = inotify_init() r9 = inotify_add_watch(r5, &(0x7f0000002700)='./file0\x00', 0x81000864) inotify_rm_watch(r8, r9) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002740), 0x200, 0x0) write$P9_RSTAT(r10, &(0x7f0000002780)={0x4c, 0x7d, 0x2, {0x0, 0x45, 0x9, 0xd9, {0x40, 0x1, 0x1}, 0x8080000, 0x3, 0x5, 0x7, 0x6, '\xff\xff\xff\xff\xff\xff', 0x6, 'wlan1\x00', 0x4, '*\\&\x00', 0x2, '(\\'}}, 0x4c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002800)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r10, 0xc963, '\x00', 0x0, r5, 0x3, 0x5}, 0x50) openat$adsp1(0xffffffffffffff9c, &(0x7f0000002880), 0x880, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000002900)={0x4, 0x0, &(0x7f00000028c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r10, 0xc00464be, &(0x7f0000002940)={r11}) getsockname$packet(r1, &(0x7f0000002980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000029c0)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002ac0)={&(0x7f0000002a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xb, [@type_tag={0xf, 0x0, 0x0, 0x12, 0x4}, @typedef={0xa, 0x0, 0x0, 0x8, 0x4}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x63, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x1}, @var={0x8, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x5f, 0x61, 0x2e, 0x0, 0x2e, 0x30, 0x1e, 0x61, 0x61]}}, &(0x7f0000002a80)=""/43, 0x67, 0x2b, 0x1, 0x81, 0x10000, @value=r5}, 0x28) r12 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000002b00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc70a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf0, 0xe0, 0xd4, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0xb23}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0xd, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x3, 0x81, 0x80}}]}}}]}}]}}, &(0x7f0000002f00)={0xa, &(0x7f0000002b40)={0xa, 0x6, 0x310, 0x81, 0x2, 0xfe, 0x10, 0xfe}, 0xa0, &(0x7f0000002b80)={0x5, 0xf, 0xa0, 0x6, [@generic={0x60, 0x10, 0xb, "cb0587a483eb7a7cd88a09b850a7a1c7702021ebdc57c8a41393127f3c6dfadd7487799e8d7d0954db4ca6b7b5b3a036070c543d1281ea3217e1615baae25e03814367baa06326e7a21c08ba19e90c3235f9ae4403d6c589c0f12bd1de"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x8000, 0xf000, 0x4, [0xfe4f, 0x30, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x4, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x1, 0x800}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6, 0xb, 0xa, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x8, 0xb111}]}, 0x5, [{0x55, &(0x7f0000002c40)=@string={0x55, 0x3, "819e8958eecf8fc2965228b83c9821fce129d91a4d7eaa93ae0a8f02566e2f386e89bcbed46ca19da1582f340baaa607004fed9bd5d94d046e11e6f0f039f01c5812c69d79c83a289db6992b7705047a0b560d"}}, {0xcb, &(0x7f0000002cc0)=@string={0xcb, 0x3, "d295e31dd92201f74328256df1505bbce73938c0833cce42da05a398e0924d438d10dac268411812bfd64a0ee4c61ff9b6e85792a2d130d2404b97fa35f6c20bc181e0171421ca21adcf8059b3e324fd07353d8f4c614903670ecb3346ef4041a71d1ecd8a39189eff203d0f42bd43d992f037d21b0d25733191f72a43d5a492a6f3d340c64e439ccdfa83305151b25767be1d597977019f0e2cf3f937cc375765875180d781318fb908c313a8e6350e3052e47d5a98944b067a8ae04a287b9cba7721b65ed395ce95"}}, {0x4, &(0x7f0000002dc0)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000002e00)=@lang_id={0x4, 0x3, 0x180a}}, {0x9d, &(0x7f0000002e40)=@string={0x9d, 0x3, "b111a4a824b2dbed59f34314aa998dd7b02dac843a6817ae6457bdbfb887b76059110735698e428d5b4ca7da249409ec8d7e1899d316239cb15d894b97bd0f2a0e4c813ba75824673c1e42e31b1f87be12a994a607bec7356a4c482ac4cf9b7612c004da20d46d86112587c648eb8d26e6bddaf68f279cb7e13fd1566812d4445c694df8c6727bbbad206a3dcbf71c2bcd1e44d352289e48573bce"}}]}) syz_usb_disconnect(r12) listen(r10, 0x4) 47.248219005s ago: executing program 35 (id=1837): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2104541}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x10000000, 0x7f}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004080) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@enum64={0x4, 0x3, 0x0, 0x13, 0x1, 0x6, [{0x9, 0x40, 0x5}, {0x4, 0x1, 0x5d1e2f20}, {0x9, 0x6, 0x4}]}]}, {0x0, [0x61, 0x0, 0x61, 0x0, 0x30, 0x61, 0x5f, 0x61]}}, &(0x7f0000000280)=""/4096, 0x52, 0x1000, 0x0, 0x256}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x7, 0x8000, r1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0xd, @value=r2}, 0x50) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0xa0, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_COMMENT={0x8, 0x1a, '*\\&\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x3c}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000010) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x80010, r1, 0x0) socketpair(0x0, 0x1, 0xfffffffe, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000001480)={{r4}, "854da3a01b1f157e11453ee66c1d059c48c02be09ced812893f4dce0a41d98472c6a643e204d984a5ae717ea00478d4f1ad49b26e67e84c79671329da293f4b20ca07d4dc4f93dd1cc38a15ff883c2e06a82547bdfb59a9d1243d54a481443bec53856dfd74bdcbba5342137a3c080beb831d53ce38e1b592a448cc139224943dbaac071afe5624f04428fd3ce87c5a11f50fe62119494ab5d4e2babd30cb9cf8b0909158cdae189fa7335b261b5e2fbda6fd5a4d5abe011592a5c27ada2fd910485d7fb9c4340815f6ed0fe7a485eac2e93f9ba69f98ca99933612b5f4477357b7d9dfaa724ac33c99844b2e743b16802997db3e6b5220f6b53079e49b670d020cf4d97819b73d338f6de5e28df585cff7f19b7265e231107636ca2a3d9132537d5d88fd7fe4ba048431faf8853c7a6cc3e9358140bc7898e3dec630d34eccf82cd53a1abd332ca079a04c47b160eeb0c25f0d2de4c1f42682ba68daa68b4574361425c115728dd35f87e055cc41468cc478b3f56c1812a103f0994c5db3b26cb206bec84cb02c0171842dede2de48ffdddb451b9769e2a96ce7b7389fc27d5f3d9efa6f0b2f68c15d36757a8c94a5c4892e5ff87034ed69844f408b854df128d0c28c28fb93c346d8932c3c3f7c74c82bde5348ecdd68972e19a783299a22a4749a62f3c703072b6725aab3fbd0254c7e2ae1a62067d1381f390739c7e3fd4166e1406f0d6b93c213b7e7a5c61f9e635625e92df4112227e1a95fc054f693f993c64c9d3a3391a213ee49f463365ebea953c2e29ab971c7d8dac3fc1de54467595a1c9dd944ad4f8eaeaff87737d8e15ef545fcd4d598b9a697103e9d40f9338afc60bf1f3cb3187a61213aab004fd176e41de4a937fbcd211d82322f40c40d33086ac8cee0cdc12272a0adb522a56fb6747516a0992983149b5e471d3e0f12f7a2a784bf6486a63382d74f64bdd91584754cf5c8b5008cfea1daf6beb870f959e72bc4b64bff40bb97b97c93913974462490c51ab126778fa4a6ce50d3aa2f6422e951af01ddbcb01b469fff73bc17b45abb7c3d11c8dc0e11e2eb8f98c8e5dd1f83bf5438f7786b6a5f1297e7a1a44eb12eab2d0e813677d632b1c59f2fd6b0c5efad520c271904e180f4463fb98d293f7cdc35f4cd34e826943e3be68e069888fe352d6de60b4c1409382724756e0f249877f00a4b528008834b5f7439d5d6286d6fa4021928279c89ae241310e135267ec6a1504d294f449b5ecbed63cd2f0fe19dd9533c8fff1c16176e99bd87f67899ab754789a19fe8b383fc821ad234f08f3259dd49a33350e30fb80beec17204c08c46b39b0960ac5d8ddaaa320f29aa46626846885014df07a737f54535621ddc87ecd8ecf33144e41720460deb8af4eced7536b2a7fbbd82999ca9c377faa94e80bb81bb3a947743e6527cd2e9a6bec9c6ab95e31602739c6f70256d52042d1803e431a28bb7bbf5e46089107276caea2a3ef05569c99402623e3a574bb5141ecc8aba934522bc74ba9e78e43e178c2333ef3d20345a92ea801e61230c317a2f2ead0e95f544534dc12c2475dc4f5f9395e383dc5f1a67ae495afde7900bbf565170c629fad1775cdea4c80cb4a771b3a8fa4302611789490e851aac0d10f1e27c474b1b055ab30823fca30106e2030662f0129708404fd13abbc56369c78aed5407f296f03a438f7040a14f69cdd2b3efc909cc156a81d7088e1a7bb8f3479eef9a6403a97da70126f7fc02884ddcd6ab68ba9a1f75d1f29939d5a5b46ff00b9d76aec9c7435a04afc79bccbb2a922dfdf54237eecd6bb6a8942b82576ef3a4827bbc12d1c7dd6a4b17e11eb7393ff1ce4fd3825e23713889759a0d56a7079004db6567d50e70526345d869bb7e9e65cdde58675360794c643e4a809898d3085045a8092e463d7e6a28d756f01bb5298357a487016f9375e5a8cdc8b49d7dfab0a464ba44354d2973d87ac49865eb6ca85da7df3eec627ba31e5e4535e4145df9adc777ea97abc774e5132134860f271fea3d56671963eb3f586211003b7a8b066d3b751710d38b30aef59b499234fa8166211abe8cc3e1b383618284903c99653016331b59f5e0a2e5f1d7aab8d4d56832d6e402c583be7fc0a583f8f0d7785bf2e25c3a082965ef1b54a7eaa4ef22556ac041fd282659bcbba65d3ebffb2e74a1904b988b2ae98152c63abc01a5661cd9040c37b0cf84a2406d2680c515b7eea73cc6c3a3078868cf7385984b83e5053b8e1d63928109ff0d09505464bd2f215f8992fbcaa45f9ee1013437575299b3e628ce1ba1e29cee8f86295b2d23b91db50a204ecd5587d66eb9303f8f779839a0f9ce83d837bf57be2fc689ac84a7e762f0ed01eb511d1a2c029c6cc207584d26cdfbc28d723bd5e6081f62aeb52dc42e70329aba67250753ce4e605fdf006e9a399a8f7ebf2cd63e869596f8e8967b47901bfc35e9a2868b90163a0643e593a832774a94930475bd820ef89cab512cb34ddc4eb5ddb7ab22c1bc660c073a686e89faac79e96411b48ece7f7582433a5801b08c40b7a6aa6e0b102b0173daf77e7da5b62a622377abde8f2df3a094f070ecbd79dec1e67cae42e5645dabc12099314c4ca5a590c23e7537e59857215ba4055560bd9730c18ad9c47ae682ab146387785067815cf3ca7368a33b0be51560090a85f91c3db4dfae4d629b1ef208e1476843bff5df0d707c1fd7371f7c63af18deccf43a9af53017eb35181242863fda444d7b27c54b54acab253fda57adf53ffc420ffbec54bd3d082b17d8388568a581a23e204cddd52c82dbde5a8fb4c3547dcfdca832f551032efb826590f41326cf086eb19cb0e4c0d5fa5e543d835b102d1ee66c17e988eeb694f7c3bb3b6a09b4e5a2a10d001d33c1f7e0870da7a3e3a10b8ff52a03174fc850a46013a95b72b03d40227b3a0bf08fa067aae90b0da1990fbc0b050969837937f2d918c7c754ff730d8d41b712224bd63bc5f7c412f57b44760b94bc26e66fecd4cabc9c1bf5f28d870743fc77e808846615075ca4bf20037b5112afca052f7a589118ce297c30cb557dbe7e21f62f028842fd9935b80b1b4b485eae80f6146b6b1c24b7f1cc7c615dfe29a80e806c4fe23733a20fc2c60ef1dac6b65c98e3f287d98e4dc6b34b9e24acea7bead698255ed0e5fd9f98e44ef7c606bb97055c0253669430ae91d856079bffe125178cdb802a4cf3e4f028aa697bcbb8b3712d9801a6a1644146e2aa9122320de19841654a2597e9bb9ca47f5cc7b850ce5ba421c6e0f597e13e731fcaacdb5899ace6b1494adb5b39776ee626e2b8f6ca222a85f44d4e814d84ec3da2b070c29b687c05d34405cc15a393b540b5386478de9847dd763e664e0da1f52dda1d493ae565d56f17f5049ddc7233453db1b1f788031a08410c75da5a655a659ec8be8e4923231aed9199aad6e60f9d4bea5cc1075a7cae597396da7204a0b0ec1a9d23b8ebacc29c77d8bd572d39f89ecfb471c30b52d29d5b972978233d904ece9129c53c1efe6cfeee56d14944aa5261ba1a2849233450e9d74507eca434d6c37737a6ec9321cfda43498d5ecc9092812ff9104ca4edd2a08cce394da3d23ec720656ea66d62694496a43d98f2a67d76ef3af9c3693d82bb009f3d3ee2afa9958d7d5127828c5695c8fc6f0e4fb7fda22c5bc8a86916ea3eee72088fcd97b3a39dc7902c88ea21d099a16a93d299caa9f9a151fd73d99e8f6fd5ca9936565db555a84ac678deeb2dd249ef1921ea47ed3498f3460a4582b150774e19c265b067bda277386ac4e15c1a27635a21556aa83231f77125fc23a568ee9a59f39ceef30c8f0ced9642a61d868c55c67aac559831838395c0677f2893debfd4b4414c8b379c8a476167d9ea0046597bae8ea2fe8896493f84a0072b185a97ac9eb268c083b0393ac17631fa1f9f401337fc9385447d4c0257bf5687dc0fc5eebccaca4a9fa065503eec2174b05f94483f7e98e523b949512e46e0a71b59ffdbbd9f80f961c5c31f224a23805a99838c36a8a6552c92d9638af91087445ac4c505dbb7dec733d894289363de23ee9ab2e949537c671ee5382e2f8b9621e0841524f4dbc88b91f2b747a961783b0c8a49e60e1ebe83a14c6c8d69c4830f10bd0ee3ceb5a086e17fb49f5510ddfac7e63430b51eb731dfdcfd2cb80362999f13910cd1c63d43aabe0d4469f1ffbb0c824faaa8d5436bdb2754cb1c710c6b842e4af444c9aed326e96904d85c83c66040e329e1f2fe72cfafa44fa2745fc45abba3e13d47617cc1b96c5a624190d5ff409749daacc5819b1ab5e91ae9c8d49193e0d4141730b90d68e8c4e4273f45332d0fd74b9a7ebc52abb832cc37b8ae3872c1d88e4d2a0ee8e5684f8b45df0dfca334860ff14b038a0ef65373240ac5527627c11d6c2d8cd38f6c955ac353d0c1b99155a86cd7d7d7808d820b43e0ac6d2c3e85281083e1c5b5529a8774223a6f7976cba27bcaf385656bf4da646207783b6ce98fa3ac3bd4d8dee8e40f9d7f7e1f0cc6d160e1fc4f89e8db79940f5ff347a3cbf458bc7ed20c55d74e98ad040432f63ac77bcfeea59821d6d2e961d58595c8a6085e2afba6a1a023b63a43565aad40354c31fe37c67cf3ae8799ad0b147a1358da59b0a0f9f81a79210e8e8727a4dd095be579a37442df688e07aa8f7059443428cda9549e88a0f88f2860552a680e9d29bc58b43c932940441ccb0df517d14123d6d21b469a1d200cb6380ef7b411407b7cc5c058287a1856b65e3995a941e6eed0750b4cb4c06c957d439a1575ae246492a09ad8e5d72bebd2af53a6b0766c2fe2fc884d37bf69a37ff43040a56bbd2e0d343d2b16e3a98b3e9f8c2a3b37165c9bdd90b69497a6286abefb8af472058fe4d04f053853c8096b53f8443324d88eb03815d4d3b27c3f57b7fdeab630fd2f70cfcb640a2a8562d4ba9d982957eb06800761d15cefdb485b246e5fcf8bc6c4b6e1cc48132f09f83939640359811efaecb8dfb77b0c48cf658474e148bac867818b908de714c27c93982d9ac8a1bedf893914517187496a7dc2a701b003ed097c39747be343bd698b83f483655c5356c88f7f9da5a7f1acd7d33b5ee831c344224991baead9cfa46c7a82baab955e97ece99779b472ec59f78c5d8a3ce31c83b4621015f2adeb466e41d53e0649c23b954badf3b1aabb431b17d280a697b1f6aeaf4f33f57a8b916c1e2cb3128de9fa581c2d2293667eef6a3c8c2f5eb1470797af679face81ada23300171b2c58f61bd71a3ce71cdae8b5d4c15a1d598cd4556981fa65265bdb02ff4251a293b590db3529580b6a4a209851f1a171ee50a66d1738cd74d51ca3faa629ca9bca91b6a70e2b6a516fc131995b8b7730020628fdce8f869a04675dcdeb587bc9514af2123f06d9cd3ce635b29a7ac5080f3793aaf77debc83586a32cc43484cda660c4b2467d0162c1709e7bcd1eea1d3aaa885550055fc81543f9b59d2e7a562310c1cf4d33389c5540ace22e3a23797b4f14411805dda592cf0e3f476fcb6ce611bea3d08f098b6eb2d13b6b36c3d4c93737e844988412d01fec81e290cea51f7bb98c8b9e5e941257731d96b15e0c462f966b0186445acabbd254d93c2356145a0178c92fc2c60197d881dcd45772fe72a2212484a89959db9813ab0e2d61831b8b031eed55765bc093db45044ca85e6696641e07dbc74503fe0991139454e25319634623a216ee38a24eea5ed911bc23"}) write$dsp(r1, &(0x7f0000002480)="aa7e8af22c7f2cddc2c1c85cd94cca04dfd92441ff0ff5477b769214815c73fc5a87c09f94201493bac5e90b5573aa307d8913ab32cf0bff345360f332110e53822e2a5954e34c7c0f8ca13952fcec430603aa89d9885512aae97d09e66408e6ae956847a7d35d1df61a2876eb6ab88bcbaab6a9823b184d3ec7454b8a7bb36d1999fea4c0e03e73df92eaec6ab4977f51c153bedd26a74d0c310c9e3bc6c25c17612fae640579218b888f5b4a19b2dff288dd96489aca8feca4b6fdbc9f2fb4bc0e212bf7dc04c0c3450e0d4990", 0xce) r5 = dup2(r4, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002580)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000002680)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f00000026c0)={0x3, 0x7fff, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x3}) setresuid(0xee01, r6, r7) r8 = inotify_init() r9 = inotify_add_watch(r5, &(0x7f0000002700)='./file0\x00', 0x81000864) inotify_rm_watch(r8, r9) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002740), 0x200, 0x0) write$P9_RSTAT(r10, &(0x7f0000002780)={0x4c, 0x7d, 0x2, {0x0, 0x45, 0x9, 0xd9, {0x40, 0x1, 0x1}, 0x8080000, 0x3, 0x5, 0x7, 0x6, '\xff\xff\xff\xff\xff\xff', 0x6, 'wlan1\x00', 0x4, '*\\&\x00', 0x2, '(\\'}}, 0x4c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002800)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r10, 0xc963, '\x00', 0x0, r5, 0x3, 0x5}, 0x50) openat$adsp1(0xffffffffffffff9c, &(0x7f0000002880), 0x880, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000002900)={0x4, 0x0, &(0x7f00000028c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r10, 0xc00464be, &(0x7f0000002940)={r11}) getsockname$packet(r1, &(0x7f0000002980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000029c0)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002ac0)={&(0x7f0000002a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xb, [@type_tag={0xf, 0x0, 0x0, 0x12, 0x4}, @typedef={0xa, 0x0, 0x0, 0x8, 0x4}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x63, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x1}, @var={0x8, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x5f, 0x61, 0x2e, 0x0, 0x2e, 0x30, 0x1e, 0x61, 0x61]}}, &(0x7f0000002a80)=""/43, 0x67, 0x2b, 0x1, 0x81, 0x10000, @value=r5}, 0x28) r12 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000002b00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc70a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf0, 0xe0, 0xd4, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0xb23}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0xd, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x3, 0x81, 0x80}}]}}}]}}]}}, &(0x7f0000002f00)={0xa, &(0x7f0000002b40)={0xa, 0x6, 0x310, 0x81, 0x2, 0xfe, 0x10, 0xfe}, 0xa0, &(0x7f0000002b80)={0x5, 0xf, 0xa0, 0x6, [@generic={0x60, 0x10, 0xb, "cb0587a483eb7a7cd88a09b850a7a1c7702021ebdc57c8a41393127f3c6dfadd7487799e8d7d0954db4ca6b7b5b3a036070c543d1281ea3217e1615baae25e03814367baa06326e7a21c08ba19e90c3235f9ae4403d6c589c0f12bd1de"}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x8000, 0xf000, 0x4, [0xfe4f, 0x30, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x4, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x1, 0x800}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6, 0xb, 0xa, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x8, 0xb111}]}, 0x5, [{0x55, &(0x7f0000002c40)=@string={0x55, 0x3, "819e8958eecf8fc2965228b83c9821fce129d91a4d7eaa93ae0a8f02566e2f386e89bcbed46ca19da1582f340baaa607004fed9bd5d94d046e11e6f0f039f01c5812c69d79c83a289db6992b7705047a0b560d"}}, {0xcb, &(0x7f0000002cc0)=@string={0xcb, 0x3, "d295e31dd92201f74328256df1505bbce73938c0833cce42da05a398e0924d438d10dac268411812bfd64a0ee4c61ff9b6e85792a2d130d2404b97fa35f6c20bc181e0171421ca21adcf8059b3e324fd07353d8f4c614903670ecb3346ef4041a71d1ecd8a39189eff203d0f42bd43d992f037d21b0d25733191f72a43d5a492a6f3d340c64e439ccdfa83305151b25767be1d597977019f0e2cf3f937cc375765875180d781318fb908c313a8e6350e3052e47d5a98944b067a8ae04a287b9cba7721b65ed395ce95"}}, {0x4, &(0x7f0000002dc0)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000002e00)=@lang_id={0x4, 0x3, 0x180a}}, {0x9d, &(0x7f0000002e40)=@string={0x9d, 0x3, "b111a4a824b2dbed59f34314aa998dd7b02dac843a6817ae6457bdbfb887b76059110735698e428d5b4ca7da249409ec8d7e1899d316239cb15d894b97bd0f2a0e4c813ba75824673c1e42e31b1f87be12a994a607bec7356a4c482ac4cf9b7612c004da20d46d86112587c648eb8d26e6bddaf68f279cb7e13fd1566812d4445c694df8c6727bbbad206a3dcbf71c2bcd1e44d352289e48573bce"}}]}) syz_usb_disconnect(r12) listen(r10, 0x4) 12.303214106s ago: executing program 0 (id=1963): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/186, 0xba) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r6, 0x89f0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="92010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589", @ANYRES8], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000380), 0x100) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r8 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r8, 0x40189206, &(0x7f0000000180)) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r10, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) 10.413080778s ago: executing program 6 (id=1969): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x31c000}) listen(0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e21, 0x401, @loopback, 0x4}, 0x80, 0x0}, 0x20000090) connect$unix(r3, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) writev(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0502460c"], 0x8) 7.235907133s ago: executing program 7 (id=1972): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000300)=""/85, 0x55, 0x81ffffffbfffff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0xc090) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x9, &(0x7f0000000280)=ANY=[@ANYRES64=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc4c85513, &(0x7f0000000000)={0x2, 0x5, 0x1, 0xffffffff, 'syz1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x24, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) getpriority(0x2, r3) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ec}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) 7.187942253s ago: executing program 0 (id=1973): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, 0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae03, 0xa3) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2, "5fb9"}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x20, 0x5, 0xee, {0xee, 0x8, "e789d1d27b2c06192ffec3ba55393d7a04358bad158450853d5b119d2f04d61064b167747cfe6cc0be50165914be7c67dd032f5e901667fa36cec66302d72c8b867138eb06deeb1b180daf16c8eb63f9fc7de7f9195b9f551e5b1c71086f34d4ebc1afb95d97967bfbc84bd7b228a3280969ee4215e4e0627eb751067c933d71ca68c6204a5e3fbac59c168a13b84eeabaf995795039f8cd90fc92723791ddd50dfdbf075bf8942b446efcd732b83bc050168d216aa868966029763865894be81564a303f596fc328136f5e3e409b31459ca80d2d4c1fe2898f94b9ccfb03ecb6defd851f86182cc68d0efdb"}}, &(0x7f0000000680)={0x0, 0x3, 0xd5, @string={0xd5, 0x3, "72a7afaeaa5a43dd4770180f267737f1886a8af38c8157e18b1197c9783e6bfe7eaf9036be81c4f0023a001c891e131b80a642c16fc93981fd33e2c2ac356bd590ba51498bd65a06877b88fb3955e45d64735087b8af39c300f4f7494c519be77585296fa8a681a8206c527f4a02f5a0a5e525b045966dbc7e3af2463af1830248b970d6ba2513c056bb2a25b423aa00e43d34ef9695b51de3d24afda9355dad73615fcb937743fa0905b857c3de3867570a767adfc00191f0641963f1244b5debedd7e78a57c5d060ec0db23855689bb72460"}}, &(0x7f0000000080)={0x0, 0xf, 0x6a, {0x5, 0xf, 0x6a, 0x3, [@generic={0x2b, 0x10, 0x3, "9635aa012ee902560ffc7d3020a224606ae4a6a64bf7700ca7c096de685fcbab5d126e66ca635dd6"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0xa, 0xba0}, @generic={0x33, 0x10, 0x3, "0e649ee2c498b932c7ba0a0dffdc1137a78c2c61b4041cddbadac2def9f49cc63a060cf7b42a79550f61282227147e21"}]}}, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf8, 0x0, 0x3c, 0x5, "443824b8", "76c1d67f"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x3, 0x2, 0x2, 0x9c99, 0x3}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000780)={0x40, 0x9, 0x9a, "cc84e446d5212a35bccfe65e683eb7af8f50a920cea4bbbddbb54e5124d11934de5dae616c8898c5100c0da54a6f7d05528d1c389e3555605ed18afa3a443768dd2c4fb1c7d8361c619d712178484111d49993ba335a724a24dd3c1f9b3169d938bc29519ff0a8806a0f2d6d265bf10184c75a51abac53910cb7da292c25d1362479e54d1e14f693fe478c3b89db29c400445a81c6cd4bcd8b92"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x27}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x0, 0x4, [0xf00]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x6cf}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x91}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "d06e"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000940)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, &(0x7f0000000980)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "8779"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x23b}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0xd}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x6a}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000e00)=ANY=[@ANYBLOB="601e290000003fe7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000200)={0x40, 0xd, 0x2, {0x2, 0x23}}, 0x0}, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x81, 0x1, "8d"}, &(0x7f00000003c0)=ANY=[@ANYBLOB="208253b1da5770"], 0x0, &(0x7f0000000440)={0x20, 0x84, 0x2, "c915"}, 0x0}) 6.835497851s ago: executing program 2 (id=1974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x8000000, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 6.607473929s ago: executing program 2 (id=1975): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0xf, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) 6.334323649s ago: executing program 2 (id=1976): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x31c000}) listen(r4, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e21, 0x401, @loopback, 0x4}, 0x80, 0x0}, 0x20000090) connect$unix(r3, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) writev(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0502460c"], 0x8) 6.203444006s ago: executing program 7 (id=1977): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3}, 0x0) select(0x0, 0x0, &(0x7f00000000c0)={0x4}, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) gettid() sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) readv(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80302, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x200003, 0x200003, 0x0, 0x0, 0x7, 0x3}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000000)='map_files\x00') getdents(r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) 6.169696426s ago: executing program 6 (id=1978): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f00000007c0)=""/160, 0xa0) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) preadv(r7, &(0x7f0000003780)=[{0x0}], 0x1, 0xffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f00000000c0), 0x0) recvfrom$inet_nvme(r7, 0x0, 0x0, 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000040601020000000000000000020000020500010007000000c40e9d1680f29bfbdb698999759b6a826d9406af66d52fd0f62553a34de9f9ec2d384d95937d1ffef3886b81c75805ca6af2e4846d5c7286f92a3e54aff04412e533b1"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) syz_io_uring_setup(0x57a, &(0x7f0000000140)={0x0, 0x114df, 0x400, 0x2, 0x288}, &(0x7f00000001c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd, 0x6, 0x0, 0x4, 0x1}) unshare(0x24020400) socket$phonet_pipe(0x23, 0x5, 0x2) 5.745035244s ago: executing program 0 (id=1979): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x3, 0x0, &(0x7f0000000040)) 3.394121717s ago: executing program 8 (id=1876): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) r1 = socket(0x14, 0x2, 0x40) accept4$inet6(r1, 0x0, 0x0, 0x80000) 3.360711368s ago: executing program 6 (id=1980): socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x10000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) 3.185884302s ago: executing program 7 (id=1981): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, 0x0, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x180000000) 2.758386281s ago: executing program 6 (id=1982): write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0xfe, 0x4}, {0x4, 0x6}, @time=@tick=0xcd}, {0x0, 0x0, 0x0, 0x4, @time={0x10001, 0x3ff}, {0x6, 0x4}, {0x0, 0xfe}, @result={0xd, 0x4}}], 0x38) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r6 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xc, 0x8580) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x0, 0x10000, 0x3e12, 0x1}) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 2.447149553s ago: executing program 0 (id=1983): sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="140040001000000000000000f200b0fea921254c4d8f0000000e000000000000000000000700fbff82"], 0x5f}, 0x20004001) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x521) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f00000000c0)=0x80, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/17, 0x15}, 0x8e0f}], 0x400029c, 0x40010142, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/284], 0x114}, 0x1, 0x0, 0x0, 0x2400c101}, 0x4088c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000580)={0x1}) ioctl$UI_DEV_CREATE(r6, 0x5501) write$uinput_user_dev(r6, &(0x7f0000000000)={'syz0\x00', {0x8, 0x7, 0x3, 0x3ff}, 0x23, [0x10, 0x6, 0x3, 0x43, 0x0, 0xfffffff7, 0x5, 0x0, 0x2, 0x9, 0x10, 0x5, 0xfffffff7, 0x9, 0xf3, 0x5, 0x9, 0x80000000, 0x6, 0x2, 0x50000, 0x200, 0x1ff, 0x10000, 0xfffffff7, 0xd, 0x3, 0x6, 0x80000001, 0x4, 0x9, 0xc4, 0x4, 0x5, 0xd6, 0x101, 0x41, 0xb, 0x3, 0xe, 0x9, 0x6, 0xa0d, 0x4, 0x7f, 0x1d8, 0x9, 0x1, 0x80000001, 0xc, 0xe, 0x10, 0xe2, 0x7fff, 0x8, 0xff, 0x3, 0x5, 0xd072, 0x8, 0xfffffff8, 0x9, 0x100, 0x1000], [0x0, 0x1ff, 0xd0000000, 0x80000001, 0x1, 0x6, 0x0, 0x5, 0x6f, 0x0, 0x100, 0x1000, 0x3, 0x0, 0x9, 0x9, 0x4, 0x94, 0x8000, 0xb, 0x4, 0x1, 0x1ff, 0x8, 0x5, 0x9, 0xfffffffc, 0x4, 0x10000, 0x9, 0x5, 0x1, 0x5, 0x6, 0x7, 0xffff, 0x8, 0xe8d7, 0x3a2, 0x80, 0x3ff, 0x64, 0x1000, 0x4, 0x6, 0x8001, 0xfffffff8, 0x7, 0x0, 0x7, 0x1ff, 0x81, 0x1, 0x913, 0x9, 0x8, 0x122, 0x3, 0xe4a, 0x7fff, 0x0, 0x5, 0x6, 0x8], [0x4, 0x1000, 0x9, 0x80000001, 0x5, 0xfffffffa, 0x401, 0x7, 0x4, 0x6, 0x3, 0x9, 0x2, 0x1, 0x1a, 0xffffffff, 0x4, 0x1, 0x8, 0x5, 0xfffffffe, 0x10000, 0x9, 0x40, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x12, 0x5, 0x0, 0xac, 0x100, 0x200, 0x2, 0x2, 0xc73, 0x65c, 0x8, 0x7fffffff, 0x0, 0x6, 0x6, 0x401, 0x80000000, 0xf, 0x3, 0x401, 0x7fff, 0x6, 0xc9, 0x80000000, 0xb, 0x1000, 0x7, 0xfffffc01, 0x6, 0xfff], [0x59d, 0x1c7f4f6, 0x2, 0x0, 0x5, 0x3, 0x5, 0xffff7fff, 0x1, 0x8001, 0x4000000, 0x4, 0x80000001, 0x8, 0xaa1, 0xc57e, 0x6, 0x3, 0x1, 0x1ff, 0xfffffff7, 0x7fff, 0xd, 0xb60648b, 0x2, 0x1000, 0x7f, 0x8, 0x1973, 0x800, 0x0, 0x22b9, 0x2964, 0x5, 0x10000, 0x1, 0x80, 0x8, 0x7, 0x7, 0x801, 0x58, 0x80000001, 0x4, 0x2c75, 0x7fff, 0x7fff, 0x1, 0x8, 0x6, 0xc7d, 0x7, 0x7, 0x71b, 0x2, 0x2, 0x100, 0xb, 0x8001, 0x7, 0xfffff800, 0x7, 0x7, 0x8]}, 0x45c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 2.411625653s ago: executing program 2 (id=1984): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 2.31176792s ago: executing program 7 (id=1985): getpid() (async) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='00::/', 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) 1.571457134s ago: executing program 7 (id=1986): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 1.571138541s ago: executing program 6 (id=1987): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x30, 0x18, 0x0, 0x0, @binary="09ac0f0002ac0f005608936caaf06bec869c1eba340c8e5349c00de3bf542907da861ef4bbab00d0043522c1"}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (fail_nth: 7) 1.472282728s ago: executing program 0 (id=1988): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/148, &(0x7f00000002c0)=""/8}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = dup(r1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000480)={0x0, 0x5, 0x7}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000001c0)={0x0, r3}) read$watch_queue(r3, &(0x7f0000000100)=""/158, 0x9e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0xc00}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 1.019750093s ago: executing program 2 (id=1989): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000006f30bd3f72faf24276e21587c432b6b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000340), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x5, 0x200, 0x8, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "d79186a4e022ac21"}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x40) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x20000408}}, 0x0) 1.014655629s ago: executing program 6 (id=1990): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000380)={0xf94, [0x8, 0x9, 0x3], [{0xfffff17b, 0xc2a, 0x0, 0x0, 0x1}, {0x5, 0x10001, 0x0, 0x0, 0x1}, {0x1, 0x2, 0x0, 0x0, 0x1}, {0x3, 0x400, 0x1}, {0x2d, 0x9cb, 0x0, 0x1}, {0x4, 0x40, 0x0, 0x0, 0x1, 0x1}, {0xf5, 0x80000000, 0x0, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x0, 0x1}, {0xc1, 0x9, 0x1, 0x1, 0x0, 0x1}, {0xc, 0x8, 0x0, 0x1, 0x1}], 0x4a46ac0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x0, 0x6, 0x1d, 0x0, 0x0, 0x63, 0x6, 0x8, 0x6, 0xa0, 0x2, 0xfe, 0x0, 0x2, 0x1, 0xef, 0x8, 0x81, 0x5, '\x00', 0x1, 0x7fff}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x3}}, './bus\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r5}, &(0x7f0000000400), &(0x7f0000000440)=r4}, 0x20) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) bind$can_j1939(r6, 0x0, 0x0) connect$can_j1939(r6, 0x0, 0x0) sendmsg$can_j1939(r6, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x0, 0xff}, 0xfe}, 0x18) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 1.013296839s ago: executing program 7 (id=1991): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a001540080014", 0x23}], 0x1, 0x0, 0x0, 0x6000}, 0x20008064) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="5325fe62eadfcd503499f5ca4780df115b50bd852d259d07edb459c966654f8da05f245f973363f97e419ad2ffac876f7cfd0ff4ced4bcc38424d74e295ffa06a7f618393e5bf75b", 0x48}, {&(0x7f0000000600)="e3111bae9dadb1ae3819e037b89699965c97a974d0d110437c5437d8d6d6e91071b59ac7ee9363627a371f7b5cd2dd0d8c745e33e58c724392ec4b56121d1c3a01ea9a21a4bdba75c6e9cb73df2a844fb4b5ed5e98453698a3b6c1239f91e4fc4389db3114cac28b10199ed5f25ceedba807c399dc932658c24e7f4920707fc4623da730ef222a78948562d08a47bd00d81444d86c97d880944c8c33e67977e35ce86f7f1e2bcd79935af9f0374eddd3ee7c5d519d6b6e6292dac8d1b24211cce70b29152d938602ff8e20ffc7ecafa3a7aa2238bf36228d1788d75a27e655c799dcd525e85b9a", 0xe7}, {&(0x7f0000000700)="de06965ef66dc6268abae58348930cf844351a92d95f1b1567575241d142a62f946ae667ddcee554c25060a4ba11c536c86eabc753e36d1b84fbe5ff48f4742eda638146c9e85a6420e2268c5dd23633e95fde39afa4c7f20977b2811658e96a9a2b", 0x62}, {&(0x7f0000000780)="41e0bdfb8fe3284649b687fdbe4aceb27cf21a11c16da50475eee53695dbc50d7ce5b71e57130b26e4b2e1f2c7b6ed34c6baff658e3dab501ad9403df8e23c680d6ff821961b9915262e030feae27d19617ecb37994bfbe0b545e2247410d0f3751bbc0a18a85eb7bc63f85bc03676b57f1a284066aaf07ec3443ee2a55fdb78c7d99ceda53ce8a3f11417fc7a1068332c98c2c04aac4f686df5fff2cffad626ecbb9dd44edb79f8032f8eb0de92ab75cb8181", 0xb3}, {&(0x7f0000000880)="b0937c3a7e8f7167a7d19fefb4d4b0aa783f332c86fde49e805ca7156533d4abb1613f3eebd3d05c5f211d4ad36b129b4423a88ca792d3e2c3e19ce706ec8f5f249c51a10af0ace40210fdce27ec0f1fa99a4f964462f6e1c8919752fc6c983c95d67e6297beb654e4640f149c8fe1937de880ca26be0d6bc5d57e327f7e0ceb776da01cd25d4f9993fbc13a19324a1aaf", 0x91}, {&(0x7f0000000240)="24974f15ff766a", 0x7}], 0x6}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0600000004000000080000000d00000000010000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100ffffffffffff0000000000000000000000000000000000006d"], 0x50) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x9, 0x200000001, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x100000000, 0x5, 0x7, 0x2], 0xffff3000, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f4b"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRES32=r3, @ANYRESOCT=r2], 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x200000000000000}, 0x18) socket$kcm(0x10, 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000fedbdf251d0000000c000600010000000100000030002f80180003800800010000005f8e9c86c86ebd2800000c00038006000100"], 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) 691.110646ms ago: executing program 8 (id=1992): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x4}}}, 0x84) r4 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r8 = getpid() dup2(r6, r3) sched_setscheduler(r8, 0x0, &(0x7f0000000200)=0x4) prlimit64(r8, 0xb, &(0x7f0000000180)={0x9, 0x7b38}, &(0x7f0000000200)) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) sendto$inet6(r6, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x9}, 0x1c) syz_fuse_handle_req(r4, &(0x7f0000000300)="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", 0x2000, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r7, 0x4, 0x18000, &(0x7f0000002340)="c668094659065823f172380891b57df490358f085dfc3b2f7b1b76f2b0fd7c3b76c323510e59bf17a724777c638641ca8e77e5bb0006b55957755a73132c7cfd2ac94869615c5fc8f16d2a9b589d4c3941848fcca63b51080cd65c009e4f72758bb9231547ad17176e5b3e88f8d9215cafe3a0dd743fd385fd41301fb80412ffeb2a6d6b1ff27cdc4f635ea472f3d7664a5b13f6c56a149dca1b242402d21331551f7ab1100118b4ec98548f91a13087a7dbe9543b52130bbf751a1c5f62cba84008825563a84f6fd614af200b1c37ae96ae5825fffc59f0623dc247b26c23d0463469323f4ced68d37ed6d39a94cf6be886f479f1388199507c2aba16be031589e4481bcff578d311794fa5bc193b0547c7a667c5e8367e191c79dccadd0aaefb1cd22948a8d6778ca643785e873237f0eb8285438d34212fa836a029518bea9978dd4731bfd19a8b6a95ccc5de8a37e282d430a318a05cd810d26dce1ce956d3b7ff3de9d5f34b94e575b3fadc0143f0e8b2af796157cfbc199b91da6a83ec2e761329b484b9435febbc0b2204f7c511d3acf5136dc06b6b1b1ecdc82b56a186a197f69136ba476e12eeac85c8fdddac21fe378eea6d2eab4f682dd6e55c318fe12400e8707ad9dea45f2674533d60deea9e79167bde7e4e4dc3de8f9a29b99e1213914174ce9d0e8c1a32488567f5bc3f9d688e83f4b12498a2199aab46c44a6e66cb062e2f4f38b6adfb6e7089f70808cb1deb1a87794fa30c8629f32de43afb4003af100c9f986df2fd29e39b04c558c6ceb830540e8d965fdcd092fc64a6e6db582d237bf647fbcf893fb325bca20a0330d19fce013b631ee5f7e38451a0ecc82d37fc3b92cf111964234b107a8c62c05c3a24046e670bd725b177187706143ac1093879fff33396fe181c3511631432142f69dd10b8ba5fcf389e01218e5a3d0d517235b1d995b6776a15649725156d3e31e23fc71dcb128dfbf73d8896cf3646e5a601dc8aead76006f8420b152fbf983fbbf6781a0ec3172a8753298b4b55bd6b93572ee1adf136d266017314b209d9fc551199b933b01d045bb6bc1437f1ad6aa737e149782833bacb32ed9f33c3a21e1a39efc452d20c5e3919ca008b5e2fc63b895e8effc418a361a1c39393213f0009016fdc5bb4a46a4cb3e1382e8b051aa698288d646afa71a0fde4eb9a60cd90aebdcc7371b6e54743c9afa0ea26d3254a72df7b8b08dafe32e9cc1946548d166d7b54ae48ede4412dfa0c965f8c0905109b9014ab8335ace3ae0963899a7d4e3e5aa8a72ad4bf50a406ce8a405b63d40003697b4e8725aec2d6e4a4628be026f2cf0dc2ac038593546b384f24525613252ed4ac937f0d69fd3b2e71497fb0a73c76bdf5267bb2cb8ae570822859731cf9fe5563d71ae61b214c65fc3740682b2cffc24aff7ab96129078814aca99a0fb79d80aba7df35e5023963dd126f8097d8d6e330b2a6ff1916fcc2cfc434ab1398f31794237847609b99f7b49f0475aaa5bad7ab51de53b3cc1a40d6a62562b3cfa710fbf78dfd2ad1427021d69719890e57bcc02f7d04a5b7644852526566fbc0fdf582216d2455d13bd2b76c0812edadc4c283871232cd2c1723c7594a039e220d13c1a04517c8dc32bf655d2d45395a1e2927738854c8a84754ef3fe2c7a1ca35a2a477b414737561a8d98d712c03a2023fcc99337e08331476d06c90c2dd61849e1edb1026d1a4cef89b10818d7b179395df84b8308482744242ab0a89e8203b6af18c2594ce009c4884b43c88ddfa0ab710c3a752841d42dbbf3a4592db61ddd8580176e5cfc6c12d9d82eadb7d4f7fbb4bbe35db2d238bd0331459542698b461cd0713acf75b2111f28f5c746609100d26583ba3ceb4c524420a5d700802d39b859c87b0bab53f2ff2df8022b8c5686043ac149258e18e56a8128302c1c1efa135e96237cfd8a5047b16f4838035b0c248552ecb5e6e9b3b5e169bce4e770b52c247a0b5936eefaab7e9994b0d9f92ea6e7645af647cbe6bedf06247ebd282ac8d916ef9f4c68d33ef4f0c72755e97a8135b5cfc573d2402930061977676817dcad57332b1f1ff2dbc25faa62f58b633e60cc05154cbb165572719879d17a7a74062ba6514338bd8cbdc2959c843c9e395c64c7538d5cf2689df181089e164850697e855155a01e73d4a1a6b84aa6f9f845b860a3a3bfe1152f0d8fe00ab232c4fcacb9ed86951fc19b3c400909d56aa8749bade37dccca43a4b03796d655f74e5403e56c41b19c25c8372889d08c41d9b0056e9dac23d54dc9b798fda5645140823e2fa9592446b6917921bda98a41f53dce87c4dcc9a75c9afc1081c734d44e6c19d8e67f8654fda638b4573084fb7a3a19b5381adaec651dd4b4d1bb4af8ee2fc737081a6ece0418509ec55428f43db0b9613b1590edf8554b6073373531aca8180b1cd920fdc6e9b124f443b390505dc08405ec815c787072998c93d6c78d32c23882e878a16c2856d53e2bc40ce1bc8b6830e5b887a17ada3ca24fee56e5a49dbbfeb997ea8b4fa0c1bb38c20311e3916f18929d1d253cd0cf8cc09488e7b958258af08339921d37d5415934002b007fa50204dab94a8243dad21cc074836acde89dfd325505877d4e073771d6f388c92c37307f6d8fca1154eea7ae01d1e12e525af9befdad6c776f6df591191d23dfe101d20627780c36bb9b38ff972276789e0d76fdd8d04252328112d81739c21646b422c1da85937d4944747a4d4532b525508c1dda1a5d1ff03128314f33af68fcc510ffd95f3c587cbad45e4c42d3e4266ec575e89f579d8373de3369c6ff84dde2068ce6df2096a61c6508dfc4ca5929baf4e73cdb0205236385b27dbee19dc8704ecf2780625cc58256468ce6089c2ab499b8e77ca23201928bba7f9c9b74533fd0f9b11a8159283923509eb07926bc7e288578df74e743c51833c2f9a3be6d724606e8bc13b5b1b6bbc3b81656b6d0f83ac257670d17e05f0eab09d0f8221165faef9ae3071885dc1d8fc230720e2a71e75ee3423170c9af9591a6579a51c2060adac42cbafc577a20385605b9ddcd6796f1d7c2a44c3fc570a3980bce145c0bda31317d8079f918e70a267b3db7828875cef792bccc0719c0c653fd4aa142c184516b93d1f61d95958981d161cf0245e957b67ac86e06263516538a115ba903286cc2739b782f5ab8a281c5d0c87b5d786b8a9d07e4fde6a1507319de7f913495e14c4aafb6d6deae8e909d762895d2ef1cd34fe1012229bb5a844d9f69d7404577b13cc802b548d7cd5717a496812c60cec0aadbb64d7becb3a0fc80fd3ca90f84fde9520e63d7abdfb105bbec4155eaf7631102f8f3dd7ac8b574a1cee7c6a0b263d24149ca203d6580be6ea420cb0dd56ada93d8c3be9e2091b5d1d116bd1ef474202300fd9a441e796fbfbfecc289447ce154803da0ae305366856edfd232403c5a167f2e5c85f52702d9a6b2493e2f46c8face81208abe0daf3469eec307e35eb1b411baaec7d2a8452bacfc4c70820ed80b41640326bea6a5a142d0e44c10cfb2a174094f15dc48c9f2af592001014d14d5ddf93222cfdc53ec178cae2f42e12e1a41397250ee95b5def3d01d52600ba96a9ff80f1ffdb2400672fda6d2b86c0f986dbbf677f79d5821c5d89cb62e1718da5b86937c3184569c828897b947adf14171c2b274bc786b55aaa821804c500fee7561f99a298ea293745c80150287c57dc87b5a1407aebe10dc73817f983f160442dc45dabcf22c22c1e3f1c4cefffc33cc01e70f3cd10adc8e5f4f3287d3e90766c605ce07082d2e2d2222c971f090970636f9646656ba2d66571a9499b73971f6de2d079fc61f24fb1cad38c9125dd170aa9eb05cfe8fbd6edbc611eb2580227dc140406e3a3296fda3072744aeb9c452bb843b8cc450837eaa67d613e3740ee14979f2bde806ee5eab2361428ecd9ecee6d04c593b1a0b6ea0026d16e5adfa116b0a48a4ebe06721c5546ebdf3dd9f78359d8891cf241f18b8e6fe8923246dae83f11cdb81aeb3dac8f1098891b280f9a63f360e07551f07dff10333e4b5e64f586402f7d656eae6ef4e12cc86ffb6b55410782ac704cb39574b9ce84268c69ff236a4a8453e27f81cb8f930d4f728c98bb41331c4a6b2b3ee44c09569cbb27137eeaab03951f819275ed4306125e76b3e61e57f0cc4096f730d2a2c82f3899ad3b1b229daf879052d07dd086c08733c171b82984e24c355c61a829393b626a52f38bf4212c050c41beaca860b58912018056eb9dde9e283b03c4b9425f33a01f369b49ee349cf5340ecb8127df9e32d3ddf6f19b0b1ada0a7d952b80b798c1fff719e59f87f73fa21a7e5bbc899cfa4c022dcf0ea079d536e35d67d960f2f038b5c4c3f377066e00d04f7ce4bd4a866eda9cd5595845e0cfada02469d77808a3bd90f1251e37cabb5ff33f461fef71fb1b952a8bda54acaf441ae1e65f19fbeb4640e2a6acd77c8d029f3f8f7eac682866a2e420076f3f084c2e71049bf52af5d07e5a78861293b4ba79c6e86ab4d8533bcab232b8f0ca04ab79b24305fab5964c89b6411a04865ef981fa1f200cc04e4f7b950e7fbd4fc96aca00c1e704b5f81f1c884b460e6a7578ae9729fc772289c3e75905cff5ea0135e729e7f02bf6725d61c76d6fc0714b679ae4c34cd0970fb67c00b5900b0267de5766f5bfff0c15a456f2538e5acba4dd0927505ecea36beafde9cd9a5de5fb033931b4bfb0790f50091072380f5306a858a75275a51da87c6e9009fbaef1157e328eb425ab5e1d0d057a55c83d2f9306c1c81143c36776a88324a2c6d521cae131619925c10521a0a5e3e9914c7101f62ffa1fc0569c54c4d05cd5e89e630afdeb3271d55894a83a345bff0b441ccf19e5b88c2dab8f8de9315ecfca779093c4eeb71146cea95f936a4717a1675ebee5d742223f704ff69dcf35278ecd99fa17c80520ac8a0be3b89affe9f0fe3e1a59fdd85033739d70395339d2b7724d4fc1810433e4248ba1736feaee24508760ee79ee3b4567dfdc91b55193ae05b7a21d096313fce57ed22bd91ab03c215dd3e4aedd267df2c07dcecddad5a0c3b62d4c074362b3c82197f7df1e15d2a79fa4a7ac99e63dd1b1f9653ca6ee11614a57cb629a078516c55444c55cc5a5f1e300e0ff5a6d52577f3b14ffa08670a248ac29314280aa04c25e908d22ab9a05773b483dedea36200d084f6fb484626782545f5d085b11b08f521988c4d4db569e34597ad0efbc5cc66f450f8db344ec14ca6f3e4e8f05354f4d1dda567d079432f0860334d601b8cac5f4bef5226c4d16a2d9c7bea13c3b5c96368076e1ff0a5b9c9a575783cd14b372869cba075930078b48ca0174455e696eef93cbbfe54a2608c8886a6fe7bd77c66b26a1a3deef5433d9a1bcf336fbfd2c6547f76c983464b02317288420bc33cd4dc0e7996d8beac79de570c42b32ebe099561821e40b392fdbe33140dad552e57e50e4ed0abda8d48bd1938a1133430f5a2ca915ae82acb1f2af25e7d71d267cd0457becd0a859c25747f4196c5f6c239107532ee13c4725b55081a14f4d70ad5c795abd097f007b7479f1ad9baf2f5e115fe2ed93b56d2bad06b07e002f590bc0a991bf83cd6b1c67e72ef59b1a7ad474c06556f0737f1a8b385091526cacf7d0427c1c52285f1321e89d599807da6b6bd8a7866edd4e0dd2d4e77ff8d98f216693555e8063145888ccc82cdb62bdeda6e19bc64b76ff207001572f1f", 0x1000) fcntl$lock(r9, 0x26, &(0x7f0000000380)={0x1, 0x2, 0x0, 0x4, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x2f, 0xe8, 0xa, 0xa5, 0x44, @mcast1, @local, 0x700, 0x700, 0x2e6c, 0x5}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002300)=@getrule={0x14, 0x22, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20004000) 982.813µs ago: executing program 0 (id=1993): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x3, 0x0, &(0x7f0000000040)) 0s ago: executing program 2 (id=1994): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) syz_io_uring_setup(0x3730, &(0x7f0000000240)={0x0, 0x507, 0x0, 0x0, 0x200214, 0x0, r2}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000540)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000300)={0x2, @vbi={0xfffffffd, 0x6, 0x42474752, 0x3234564e, [0x800, 0x4], [0x527, 0x2]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000300ff000022850000000e0000003f0001000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) kernel console output (not intermixed with test programs): fig 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 605.075842][ T5947] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 605.083908][T12138] bond1: entered promiscuous mode [ 605.094361][T12138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 605.103048][T11540] udevd[11540]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.168561][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 605.222692][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 605.250382][T12141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 605.264157][ T5946] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 605.311346][T12156] FAULT_INJECTION: forcing a failure. [ 605.311346][T12156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.325426][T12141] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 605.337248][ T5946] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 605.353580][ T5946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.364243][T12156] CPU: 1 UID: 0 PID: 12156 Comm: syz.1.1421 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 605.364268][T12156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.364279][T12156] Call Trace: [ 605.364286][T12156] [ 605.364295][T12156] dump_stack_lvl+0x189/0x250 [ 605.364321][T12156] ? __pfx____ratelimit+0x10/0x10 [ 605.364341][T12156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.364362][T12156] ? __pfx__printk+0x10/0x10 [ 605.364385][T12156] ? __might_fault+0xb0/0x130 [ 605.364414][T12156] should_fail_ex+0x414/0x560 [ 605.364439][T12156] _copy_from_iter+0x1db/0x16f0 [ 605.364465][T12156] ? rcu_is_watching+0x15/0xb0 [ 605.364486][T12156] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 605.364505][T12156] ? __pfx__copy_from_iter+0x10/0x10 [ 605.364528][T12156] ? __build_skb_around+0x257/0x3e0 [ 605.364555][T12156] ? netlink_sendmsg+0x642/0xb30 [ 605.364578][T12156] ? skb_put+0x11b/0x210 [ 605.364606][T12156] netlink_sendmsg+0x6b2/0xb30 [ 605.364639][T12156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.364670][T12156] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 605.364688][T12156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.364722][T12156] __sock_sendmsg+0x21c/0x270 [ 605.364748][T12156] ____sys_sendmsg+0x505/0x830 [ 605.364782][T12156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 605.364819][T12156] ? import_iovec+0x74/0xa0 [ 605.364847][T12156] ___sys_sendmsg+0x21f/0x2a0 [ 605.364876][T12156] ? __pfx____sys_sendmsg+0x10/0x10 [ 605.364943][T12156] ? __fget_files+0x2a/0x420 [ 605.364962][T12156] ? __fget_files+0x3a0/0x420 [ 605.364994][T12156] __x64_sys_sendmsg+0x19b/0x260 [ 605.365027][T12156] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 605.365066][T12156] ? __pfx_ksys_write+0x10/0x10 [ 605.365082][T12156] ? rcu_is_watching+0x15/0xb0 [ 605.365108][T12156] ? do_syscall_64+0xbe/0x3b0 [ 605.365134][T12156] do_syscall_64+0xfa/0x3b0 [ 605.365154][T12156] ? lockdep_hardirqs_on+0x9c/0x150 [ 605.365174][T12156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.365193][T12156] ? clear_bhb_loop+0x60/0xb0 [ 605.365216][T12156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.365235][T12156] RIP: 0033:0x7f383398ebe9 [ 605.365252][T12156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.365270][T12156] RSP: 002b:00007f3834781038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.365291][T12156] RAX: ffffffffffffffda RBX: 00007f3833bb5fa0 RCX: 00007f383398ebe9 [ 605.365306][T12156] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 605.365319][T12156] RBP: 00007f3834781090 R08: 0000000000000000 R09: 0000000000000000 [ 605.365332][T12156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.365344][T12156] R13: 00007f3833bb6038 R14: 00007f3833bb5fa0 R15: 00007ffd35bd0d68 [ 605.365375][T12156] [ 606.007282][T12162] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 606.046380][T12162] input: syz0 as /devices/virtual/input/input47 [ 606.296888][T12141] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 606.534584][ T5946] usb 7-1: config 0 descriptor?? [ 606.716038][T12141] bond1: (slave vcan1): making interface the new active one [ 607.002599][T12141] vcan1: entered promiscuous mode [ 607.323897][ T5946] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max [ 607.340342][ T5946] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 607.380675][T12141] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 608.013584][T12187] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1430'. [ 608.023115][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1430'. [ 609.472703][ T24] usb 7-1: USB disconnect, device number 5 [ 609.675704][T12192] netlink: 'syz.1.1435': attribute type 25 has an invalid length. [ 609.698331][ T5946] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 609.797957][T12195] input: syz0 as /devices/virtual/input/input48 [ 609.840832][ T5946] usb 6-1: device descriptor read/64, error -71 [ 609.926472][T12207] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 610.056688][T12213] FAULT_INJECTION: forcing a failure. [ 610.056688][T12213] name failslab, interval 1, probability 0, space 0, times 0 [ 610.073043][T12213] CPU: 0 UID: 0 PID: 12213 Comm: syz.1.1439 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 610.073070][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 610.073082][T12213] Call Trace: [ 610.073089][T12213] [ 610.073098][T12213] dump_stack_lvl+0x189/0x250 [ 610.073125][T12213] ? __pfx____ratelimit+0x10/0x10 [ 610.073145][T12213] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.073167][T12213] ? __pfx__printk+0x10/0x10 [ 610.073197][T12213] ? __pfx___might_resched+0x10/0x10 [ 610.073217][T12213] ? fs_reclaim_acquire+0x7d/0x100 [ 610.073246][T12213] should_fail_ex+0x414/0x560 [ 610.073272][T12213] should_failslab+0xa8/0x100 [ 610.073295][T12213] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 610.073314][T12213] ? __d_alloc+0x31/0x6f0 [ 610.073344][T12213] __d_alloc+0x31/0x6f0 [ 610.073375][T12213] d_alloc_parallel+0xe0/0x14e0 [ 610.073430][T12213] ? __lock_acquire+0xab9/0xd20 [ 610.073449][T12213] ? __pfx_d_alloc_parallel+0x10/0x10 [ 610.073481][T12213] ? __raw_spin_lock_init+0x45/0x100 [ 610.073508][T12213] ? __init_waitqueue_head+0xa9/0x150 [ 610.073540][T12213] __lookup_slow+0x116/0x3d0 [ 610.073569][T12213] ? __pfx___lookup_slow+0x10/0x10 [ 610.073610][T12213] ? down_read+0x1ad/0x2e0 [ 610.073636][T12213] lookup_one_unlocked+0x127/0x250 [ 610.073668][T12213] ovl_lookup_single+0x220/0xb60 [ 610.073708][T12213] ? __pfx_ovl_lookup_single+0x10/0x10 [ 610.073751][T12213] ovl_lookup_layer+0x377/0x450 [ 610.073784][T12213] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 610.073814][T12213] ovl_lookup+0x471/0x1bc0 [ 610.073849][T12213] ? d_alloc_parallel+0x2e0/0x14e0 [ 610.073880][T12213] ? d_alloc_parallel+0x13d0/0x14e0 [ 610.073909][T12213] ? d_alloc_parallel+0x2e0/0x14e0 [ 610.073943][T12213] ? __pfx_ovl_lookup+0x10/0x10 [ 610.073969][T12213] ? __lock_acquire+0xab9/0xd20 [ 610.073988][T12213] ? __pfx_d_alloc_parallel+0x10/0x10 [ 610.074012][T12213] ? look_up_lock_class+0x74/0x170 [ 610.074040][T12213] ? __raw_spin_lock_init+0x45/0x100 [ 610.074067][T12213] ? __init_waitqueue_head+0xa9/0x150 [ 610.074098][T12213] __lookup_slow+0x297/0x3d0 [ 610.074127][T12213] ? __pfx___lookup_slow+0x10/0x10 [ 610.074159][T12213] ? bpf_lsm_inode_permission+0x9/0x20 [ 610.074178][T12213] ? security_inode_permission+0xb7/0x310 [ 610.074203][T12213] ? down_read+0x1ad/0x2e0 [ 610.074227][T12213] lookup_slow+0x53/0x70 [ 610.074252][T12213] walk_component+0x2d2/0x400 [ 610.074274][T12213] ? path_lookupat+0x156/0x430 [ 610.074299][T12213] path_lookupat+0x163/0x430 [ 610.074331][T12213] filename_lookup+0x212/0x570 [ 610.074352][T12213] ? kasan_save_track+0x3e/0x80 [ 610.074376][T12213] ? __kasan_slab_alloc+0x6c/0x80 [ 610.074399][T12213] ? __pfx_filename_lookup+0x10/0x10 [ 610.074458][T12213] ? __might_fault+0xb0/0x130 [ 610.074485][T12213] filename_setxattr+0xb6/0x600 [ 610.074517][T12213] ? __pfx_filename_setxattr+0x10/0x10 [ 610.074541][T12213] ? getname_flags+0x1e5/0x540 [ 610.074568][T12213] path_setxattrat+0x364/0x3a0 [ 610.074603][T12213] ? __pfx_path_setxattrat+0x10/0x10 [ 610.074626][T12213] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 610.074675][T12213] ? ksys_write+0x22a/0x250 [ 610.074695][T12213] ? __pfx_ksys_write+0x10/0x10 [ 610.074710][T12213] ? rcu_is_watching+0x15/0xb0 [ 610.074735][T12213] __x64_sys_setxattr+0xbc/0xe0 [ 610.074761][T12213] do_syscall_64+0xfa/0x3b0 [ 610.074781][T12213] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.074800][T12213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.074821][T12213] ? clear_bhb_loop+0x60/0xb0 [ 610.074845][T12213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.074863][T12213] RIP: 0033:0x7f383398ebe9 [ 610.074881][T12213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.074898][T12213] RSP: 002b:00007f3834781038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 610.074919][T12213] RAX: ffffffffffffffda RBX: 00007f3833bb5fa0 RCX: 00007f383398ebe9 [ 610.074934][T12213] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000080 [ 610.074946][T12213] RBP: 00007f3834781090 R08: 0000000000000001 R09: 0000000000000000 [ 610.074958][T12213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.074970][T12213] R13: 00007f3833bb6038 R14: 00007f3833bb5fa0 R15: 00007ffd35bd0d68 [ 610.075020][T12213] [ 610.493493][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.505534][ T5946] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 610.675756][T12217] FAULT_INJECTION: forcing a failure. [ 610.675756][T12217] name failslab, interval 1, probability 0, space 0, times 0 [ 610.688889][T12217] CPU: 0 UID: 0 PID: 12217 Comm: syz.0.1440 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 610.688916][T12217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 610.688927][T12217] Call Trace: [ 610.688936][T12217] [ 610.688944][T12217] dump_stack_lvl+0x189/0x250 [ 610.688971][T12217] ? __pfx____ratelimit+0x10/0x10 [ 610.688993][T12217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.689015][T12217] ? __pfx__printk+0x10/0x10 [ 610.689046][T12217] ? __pfx___might_resched+0x10/0x10 [ 610.689073][T12217] should_fail_ex+0x414/0x560 [ 610.689096][T12217] should_failslab+0xa8/0x100 [ 610.689119][T12217] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 610.689140][T12217] ? __alloc_skb+0x112/0x2d0 [ 610.689171][T12217] __alloc_skb+0x112/0x2d0 [ 610.689201][T12217] netlink_sendmsg+0x5c6/0xb30 [ 610.689226][T12217] ? rcu_is_watching+0x15/0xb0 [ 610.689256][T12217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.689285][T12217] ? irqentry_exit+0x74/0x90 [ 610.689309][T12217] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 610.689327][T12217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.689362][T12217] __sock_sendmsg+0x21c/0x270 [ 610.689388][T12217] ____sys_sendmsg+0x505/0x830 [ 610.689423][T12217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.689462][T12217] ? import_iovec+0x74/0xa0 [ 610.689493][T12217] ___sys_sendmsg+0x21f/0x2a0 [ 610.689524][T12217] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.689560][T12217] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 610.689615][T12217] ? __fget_files+0x2a/0x420 [ 610.689636][T12217] ? __fget_files+0x3a0/0x420 [ 610.689668][T12217] __x64_sys_sendmsg+0x19b/0x260 [ 610.689695][T12217] ? schedule+0x165/0x360 [ 610.689715][T12217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 610.689755][T12217] ? rcu_is_watching+0x15/0xb0 [ 610.689781][T12217] ? do_syscall_64+0xbe/0x3b0 [ 610.689806][T12217] do_syscall_64+0xfa/0x3b0 [ 610.689832][T12217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.689850][T12217] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 610.689868][T12217] ? clear_bhb_loop+0x60/0xb0 [ 610.689892][T12217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.689910][T12217] RIP: 0033:0x7f6a28b8ebe9 [ 610.689927][T12217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.689944][T12217] RSP: 002b:00007f6a299f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.689965][T12217] RAX: ffffffffffffffda RBX: 00007f6a28db6180 RCX: 00007f6a28b8ebe9 [ 610.689980][T12217] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 610.689993][T12217] RBP: 00007f6a299f9090 R08: 0000000000000000 R09: 0000000000000000 [ 610.690004][T12217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.690016][T12217] R13: 00007f6a28db6218 R14: 00007f6a28db6180 R15: 00007fff542b94e8 [ 610.690047][T12217] [ 610.973455][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.988120][T12216] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 610.989926][ T5946] usb 6-1: device descriptor read/64, error -71 [ 611.108460][ T5946] usb usb6-port1: attempt power cycle [ 611.261718][T12225] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 611.478501][ T5946] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 611.488371][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 611.518989][ T5844] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 611.552811][ T5946] usb 6-1: device descriptor read/8, error -71 [ 611.609003][T12232] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 611.719378][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 611.754123][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 611.817273][ T5946] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 611.854258][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 611.905638][ T5946] usb 6-1: device descriptor read/8, error -71 [ 611.919889][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 611.943408][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 611.947253][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 611.960635][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.980122][ T5844] usb 2-1: config 147 has an invalid descriptor of length 0, skipping remainder of the config [ 611.998428][ T5844] usb 2-1: config 147 has 0 interfaces, different from the descriptor's value: 1 [ 611.999616][ T24] usb 3-1: config 0 descriptor?? [ 612.038462][ T5844] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice=62.ad [ 612.047562][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.056390][ T5946] usb usb6-port1: unable to enumerate USB device [ 612.062140][ T5844] usb 2-1: Product: syz [ 612.074385][ T5844] usb 2-1: Manufacturer: syz [ 612.079434][ T5844] usb 2-1: SerialNumber: syz [ 612.356768][ T5844] usb 2-1: USB disconnect, device number 26 [ 612.532906][ T24] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 612.564658][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'. [ 612.579589][T12242] xfrm0: entered promiscuous mode [ 612.584650][T12242] xfrm0: entered allmulticast mode [ 612.644751][ T24] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 613.171801][T12248] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 613.242952][T12253] input: syz0 as /devices/virtual/input/input49 [ 613.255914][T12254] No control pipe specified [ 613.721148][ T5844] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 613.919055][ T5844] usb 6-1: Using ep0 maxpacket: 16 [ 613.988533][ T5844] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.006664][ T5844] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 614.425309][T12263] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 614.592401][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 614.617177][ T5844] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 614.643767][ T5844] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 614.979028][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 614.987082][ T5844] usb 6-1: SerialNumber: syz [ 615.013006][T12254] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 615.022593][ T5844] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 615.041912][ T10] usb 3-1: USB disconnect, device number 21 [ 615.755111][T12284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1462'. [ 616.266040][ T5844] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 616.376996][ T5844] usb 6-1: USB disconnect, device number 31 [ 617.402876][T12299] tipc: Enabled bearer , priority 0 [ 617.465336][T12300] syzkaller0: entered promiscuous mode [ 617.509147][T12300] syzkaller0: entered allmulticast mode [ 617.595424][T12303] binder: 12301:12303 ioctl 4018620d 2000000000c0 returned -22 [ 617.668744][T12303] binder: 12301:12303 ioctl c0306201 200000000180 returned -14 [ 619.124106][ T5844] tipc: Node number set to 4216545717 [ 619.353081][T12297] tipc: Resetting bearer [ 619.422786][T12297] tipc: Disabling bearer [ 619.769930][T12320] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1477'. [ 619.872158][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 621.049275][ T5916] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 621.308322][ T5916] usb 7-1: Using ep0 maxpacket: 16 [ 621.323761][ T5916] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 621.341295][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.356831][ T5916] usb 7-1: Product: syz [ 621.368652][ T5916] usb 7-1: Manufacturer: syz [ 621.380557][ T5916] usb 7-1: SerialNumber: syz [ 621.399932][ T5916] usb 7-1: config 0 descriptor?? [ 622.058249][ T5916] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 622.096061][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 622.568824][ T5916] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 622.600393][ T5916] usb 7-1: media controller created [ 622.758453][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 622.952593][ T5916] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 622.999814][ T5916] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 623.151348][ T5916] usb 7-1: USB disconnect, device number 6 [ 624.056661][ T5916] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 624.494550][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.503536][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.797454][T12399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.098263][ T5916] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 625.618388][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 625.647751][ T5916] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 625.698858][ T5916] usb 3-1: config 0 has no interface number 0 [ 625.708665][ T5916] usb 3-1: config 0 interface 18 has no altsetting 0 [ 625.864390][ T5916] usb 3-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=7a.1a [ 625.874146][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.883376][ T5916] usb 3-1: Product: syz [ 626.116070][ T5916] usb 3-1: Manufacturer: syz [ 626.120921][ T5916] usb 3-1: SerialNumber: syz [ 626.130093][ T5916] usb 3-1: config 0 descriptor?? [ 626.139508][ T5916] ums-sddr55 3-1:0.18: USB Mass Storage device detected [ 626.355287][ T5916] usb 3-1: USB disconnect, device number 22 [ 627.568056][T12426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.248076][T12433] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1509'. [ 628.911772][T12442] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 628.950712][T12442] input: syz0 as /devices/virtual/input/input50 [ 629.862181][T12460] FAULT_INJECTION: forcing a failure. [ 629.862181][T12460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.018415][ T5916] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 630.056389][T12460] CPU: 0 UID: 0 PID: 12460 Comm: syz.0.1518 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 630.056407][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 630.056414][T12460] Call Trace: [ 630.056420][T12460] [ 630.056426][T12460] dump_stack_lvl+0x189/0x250 [ 630.056443][T12460] ? __pfx____ratelimit+0x10/0x10 [ 630.056455][T12460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.056467][T12460] ? __pfx__printk+0x10/0x10 [ 630.056487][T12460] should_fail_ex+0x414/0x560 [ 630.056501][T12460] _copy_to_user+0x31/0xb0 [ 630.056517][T12460] simple_read_from_buffer+0xe1/0x170 [ 630.056532][T12460] proc_fail_nth_read+0x1df/0x250 [ 630.056547][T12460] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 630.056562][T12460] ? rw_verify_area+0x258/0x650 [ 630.056578][T12460] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 630.056591][T12460] vfs_read+0x200/0x980 [ 630.056609][T12460] ? __pfx___mutex_lock+0x10/0x10 [ 630.056622][T12460] ? __pfx_vfs_read+0x10/0x10 [ 630.056638][T12460] ? __fget_files+0x2a/0x420 [ 630.056652][T12460] ? __fget_files+0x3a0/0x420 [ 630.056662][T12460] ? __fget_files+0x2a/0x420 [ 630.056678][T12460] ksys_read+0x145/0x250 [ 630.056689][T12460] ? __pfx_ksys_read+0x10/0x10 [ 630.056701][T12460] ? do_syscall_64+0xbe/0x3b0 [ 630.056715][T12460] do_syscall_64+0xfa/0x3b0 [ 630.056726][T12460] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.056736][T12460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.056746][T12460] ? clear_bhb_loop+0x60/0xb0 [ 630.056759][T12460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.056769][T12460] RIP: 0033:0x7f6a28b8d5fc [ 630.056779][T12460] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 630.056788][T12460] RSP: 002b:00007f6a29a3b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 630.056800][T12460] RAX: ffffffffffffffda RBX: 00007f6a28db5fa0 RCX: 00007f6a28b8d5fc [ 630.056814][T12460] RDX: 000000000000000f RSI: 00007f6a29a3b0a0 RDI: 0000000000000003 [ 630.056820][T12460] RBP: 00007f6a29a3b090 R08: 0000000000000000 R09: 0000000000000000 [ 630.056826][T12460] R10: 0000000000000046 R11: 0000000000000246 R12: 0000000000000001 [ 630.056833][T12460] R13: 00007f6a28db6038 R14: 00007f6a28db5fa0 R15: 00007fff542b94e8 [ 630.056849][T12460] [ 630.518271][ T5916] usb 7-1: Using ep0 maxpacket: 32 [ 630.557450][ T5916] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=88.ea [ 630.590911][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.607937][ T5916] usb 7-1: Product: syz [ 630.616804][ T5916] usb 7-1: Manufacturer: syz [ 630.633287][ T5916] usb 7-1: SerialNumber: syz [ 630.655377][ T5916] usb 7-1: config 0 descriptor?? [ 631.096911][ T5916] ati_remote 7-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 631.316321][ T24] usb 7-1: USB disconnect, device number 7 [ 632.372232][T12489] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1526'. [ 632.473408][T12489] netlink: 'syz.1.1526': attribute type 10 has an invalid length. [ 632.498919][T12489] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.535517][T12489] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.543006][T12489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.720863][T12498] netlink: 'syz.5.1530': attribute type 10 has an invalid length. [ 633.034107][ T5946] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 634.176754][T12489] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 634.317577][ T5946] usb 1-1: Using ep0 maxpacket: 16 [ 634.344342][ T5946] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.368477][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 634.388234][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 634.397933][ T5946] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 634.454776][ T5946] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 634.508841][ T5946] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 634.508876][ T5946] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 634.508897][ T5946] usb 1-1: Manufacturer: syz [ 634.544877][ T5946] usb 1-1: config 0 descriptor?? [ 634.580475][T12498] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 635.152716][T12509] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 635.432515][ T5946] rc_core: IR keymap rc-hauppauge not found [ 635.438692][ T5946] Registered IR keymap rc-empty [ 635.444039][ T5946] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 635.997887][ T5946] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 636.070013][ T5946] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 636.233537][ T5946] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input51 [ 636.487284][ T5946] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 636.579397][ T5946] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 636.638328][ T5946] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 636.791863][ T5946] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 636.848494][ T5946] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 637.198324][ T5946] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 637.248765][ T5946] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 637.288427][ T5946] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 637.288586][ T5893] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 637.356084][ T5946] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 637.438222][ T5946] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 637.557930][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 637.561658][ T5946] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 637.574831][ T5893] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 637.608138][ T5893] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 637.611995][ T5946] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 637.653994][ T5893] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 637.675120][ T5946] usb 1-1: USB disconnect, device number 35 [ 637.882567][ T5893] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 637.896503][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 637.906148][ T5893] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 638.936282][ T5893] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 638.948175][ T5893] usb 2-1: Product: syz [ 638.952385][ T5893] usb 2-1: Manufacturer: syz [ 638.957012][ T5893] usb 2-1: SerialNumber: syz [ 638.966109][ T5893] usb 2-1: config 0 descriptor?? [ 638.975158][ T5893] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 638.988357][ T5893] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 640.257533][T12560] FAULT_INJECTION: forcing a failure. [ 640.257533][T12560] name failslab, interval 1, probability 0, space 0, times 0 [ 640.287040][T12560] CPU: 0 UID: 0 PID: 12560 Comm: syz.6.1551 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 640.287067][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 640.287079][T12560] Call Trace: [ 640.287086][T12560] [ 640.287094][T12560] dump_stack_lvl+0x189/0x250 [ 640.287120][T12560] ? __pfx____ratelimit+0x10/0x10 [ 640.287141][T12560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.287162][T12560] ? __pfx__printk+0x10/0x10 [ 640.287188][T12560] ? __pfx___might_resched+0x10/0x10 [ 640.287207][T12560] ? fs_reclaim_acquire+0x7d/0x100 [ 640.287234][T12560] should_fail_ex+0x414/0x560 [ 640.287260][T12560] should_failslab+0xa8/0x100 [ 640.287282][T12560] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 640.287311][T12560] ? vfs_parse_fs_string+0xcb/0x170 [ 640.287336][T12560] kmemdup_nul+0x36/0xf0 [ 640.287361][T12560] vfs_parse_fs_string+0xcb/0x170 [ 640.287382][T12560] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 640.287401][T12560] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 640.287424][T12560] ? legacy_init_fs_context+0x7e/0xc0 [ 640.287448][T12560] ? alloc_fs_context+0x665/0x7d0 [ 640.287477][T12560] do_new_mount+0x1c6/0xa40 [ 640.287507][T12560] __se_sys_mount+0x317/0x410 [ 640.287535][T12560] ? __pfx___se_sys_mount+0x10/0x10 [ 640.287563][T12560] ? do_syscall_64+0xbe/0x3b0 [ 640.287582][T12560] ? __x64_sys_mount+0x20/0xc0 [ 640.287605][T12560] do_syscall_64+0xfa/0x3b0 [ 640.287623][T12560] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.287641][T12560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.287659][T12560] ? clear_bhb_loop+0x60/0xb0 [ 640.287681][T12560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.287698][T12560] RIP: 0033:0x7fa767f8ebe9 [ 640.287715][T12560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.287731][T12560] RSP: 002b:00007fa7661ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 640.287751][T12560] RAX: ffffffffffffffda RBX: 00007fa7681b5fa0 RCX: 00007fa767f8ebe9 [ 640.287765][T12560] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 00002000000013c0 [ 640.287777][T12560] RBP: 00007fa7661ee090 R08: 0000200000000240 R09: 0000000000000000 [ 640.287788][T12560] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 640.287799][T12560] R13: 00007fa7681b6038 R14: 00007fa7681b5fa0 R15: 00007ffcdd7a1d08 [ 640.287830][T12560] [ 640.521192][ C0] vkms_vblank_simulate: vblank timer overrun [ 640.546317][T12562] netlink: 'syz.2.1552': attribute type 10 has an invalid length. [ 640.555197][T12562] bridge0: port 3(syz_tun) entered disabled state [ 640.562227][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.950218][ T5893] usb 2-1: USB disconnect, device number 27 [ 640.962816][ T5893] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 640.973903][T12562] bridge0: port 3(syz_tun) entered blocking state [ 640.980566][T12562] bridge0: port 3(syz_tun) entered forwarding state [ 640.987553][T12562] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.994843][T12562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.032371][T12562] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 650.433127][T12615] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1568'. [ 652.866321][T12629] FAULT_INJECTION: forcing a failure. [ 652.866321][T12629] name failslab, interval 1, probability 0, space 0, times 0 [ 652.938351][T12629] CPU: 0 UID: 0 PID: 12629 Comm: syz.2.1574 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 652.938389][T12629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 652.938400][T12629] Call Trace: [ 652.938407][T12629] [ 652.938415][T12629] dump_stack_lvl+0x189/0x250 [ 652.938443][T12629] ? __pfx____ratelimit+0x10/0x10 [ 652.938469][T12629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.938489][T12629] ? __pfx__printk+0x10/0x10 [ 652.938515][T12629] ? __pfx___might_resched+0x10/0x10 [ 652.938534][T12629] ? fs_reclaim_acquire+0x7d/0x100 [ 652.938559][T12629] should_fail_ex+0x414/0x560 [ 652.938582][T12629] should_failslab+0xa8/0x100 [ 652.938604][T12629] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 652.938630][T12629] ? __lock_acquire+0xab9/0xd20 [ 652.938645][T12629] ? __alloc_skb+0x112/0x2d0 [ 652.938673][T12629] __alloc_skb+0x112/0x2d0 [ 652.938702][T12629] netlink_ack+0x146/0xa50 [ 652.938726][T12629] ? __up_read+0x280/0x680 [ 652.938751][T12629] ? __pfx___up_read+0x10/0x10 [ 652.938786][T12629] rdma_nl_rcv+0x3c8/0x980 [ 652.938827][T12629] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 652.938856][T12629] ? __lock_acquire+0xab9/0xd20 [ 652.938896][T12629] ? netlink_deliver_tap+0x2e/0x1b0 [ 652.938922][T12629] ? netlink_deliver_tap+0x2e/0x1b0 [ 652.938952][T12629] netlink_unicast+0x75c/0x8e0 [ 652.938986][T12629] netlink_sendmsg+0x805/0xb30 [ 652.939025][T12629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.939059][T12629] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 652.939075][T12629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.939102][T12629] __sock_sendmsg+0x21c/0x270 [ 652.939128][T12629] ____sys_sendmsg+0x505/0x830 [ 652.939160][T12629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 652.939198][T12629] ? import_iovec+0x74/0xa0 [ 652.939227][T12629] ___sys_sendmsg+0x21f/0x2a0 [ 652.939258][T12629] ? __pfx____sys_sendmsg+0x10/0x10 [ 652.939322][T12629] ? __fget_files+0x2a/0x420 [ 652.939346][T12629] ? __fget_files+0x3a0/0x420 [ 652.939375][T12629] __x64_sys_sendmsg+0x19b/0x260 [ 652.939403][T12629] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 652.939436][T12629] ? __pfx_ksys_write+0x10/0x10 [ 652.939450][T12629] ? rcu_is_watching+0x15/0xb0 [ 652.939482][T12629] ? do_syscall_64+0xbe/0x3b0 [ 652.939506][T12629] do_syscall_64+0xfa/0x3b0 [ 652.939532][T12629] ? lockdep_hardirqs_on+0x9c/0x150 [ 652.939551][T12629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.939569][T12629] ? clear_bhb_loop+0x60/0xb0 [ 652.939592][T12629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.939609][T12629] RIP: 0033:0x7f50e918ebe9 [ 652.939625][T12629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.939642][T12629] RSP: 002b:00007f50ea067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.939662][T12629] RAX: ffffffffffffffda RBX: 00007f50e93b5fa0 RCX: 00007f50e918ebe9 [ 652.939677][T12629] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 652.939688][T12629] RBP: 00007f50ea067090 R08: 0000000000000000 R09: 0000000000000000 [ 652.939697][T12629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.939707][T12629] R13: 00007f50e93b6038 R14: 00007f50e93b5fa0 R15: 00007ffcfec812b8 [ 652.939737][T12629] [ 652.941004][T12638] netlink: 'syz.1.1576': attribute type 10 has an invalid length. [ 653.402708][T12638] veth1_vlan: entered allmulticast mode [ 653.485111][T12638] team0: Device veth1_vlan failed to register rx_handler [ 654.312161][T12644] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 655.159596][T12668] fuse: Bad value for 'fd' [ 655.278137][ T24] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 655.315438][T12670] fuse: Bad value for 'group_id' [ 655.320681][T12670] fuse: Bad value for 'group_id' [ 655.521680][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 655.536004][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.552228][ T24] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 655.567625][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.612841][ T24] usb 7-1: config 0 descriptor?? [ 655.711412][T12677] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1587'. [ 655.822677][T12677] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 657.082388][T12690] netlink: 'syz.5.1591': attribute type 5 has an invalid length. [ 657.163004][T12691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.978128][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 657.994439][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 658.034085][ T24] usb 7-1: USB disconnect, device number 8 [ 659.318649][T12708] netlink: 'syz.6.1595': attribute type 10 has an invalid length. [ 659.360495][T12710] fuse: Bad value for 'fd' [ 659.372069][T12701] netlink: 'syz.6.1595': attribute type 4 has an invalid length. [ 659.388864][T12701] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1595'. [ 659.421918][T12708] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 659.475600][T12701] : renamed from bond0 (while UP) [ 660.025103][T12731] FAULT_INJECTION: forcing a failure. [ 660.025103][T12731] name failslab, interval 1, probability 0, space 0, times 0 [ 660.037858][T12731] CPU: 1 UID: 0 PID: 12731 Comm: syz.2.1603 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 660.037884][T12731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 660.037895][T12731] Call Trace: [ 660.037903][T12731] [ 660.037911][T12731] dump_stack_lvl+0x189/0x250 [ 660.037954][T12731] ? __pfx____ratelimit+0x10/0x10 [ 660.037975][T12731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.038004][T12731] ? __pfx__printk+0x10/0x10 [ 660.038034][T12731] ? __pfx___might_resched+0x10/0x10 [ 660.038053][T12731] ? fs_reclaim_acquire+0x7d/0x100 [ 660.038080][T12731] should_fail_ex+0x414/0x560 [ 660.038106][T12731] should_failslab+0xa8/0x100 [ 660.038129][T12731] kmem_cache_alloc_noprof+0x73/0x3c0 [ 660.038147][T12731] ? getname_kernel+0x5a/0x2f0 [ 660.038174][T12731] getname_kernel+0x5a/0x2f0 [ 660.038200][T12731] kern_path+0x1d/0x50 [ 660.038224][T12731] unix_find_other+0x183/0xb40 [ 660.038259][T12731] ? __pfx_unix_find_other+0x10/0x10 [ 660.038289][T12731] ? skb_set_owner_w+0x25b/0x3a0 [ 660.038311][T12731] ? sock_wmalloc+0xca/0x130 [ 660.038333][T12731] unix_stream_connect+0x433/0x1030 [ 660.038369][T12731] ? bpf_lsm_socket_connect+0x9/0x20 [ 660.038397][T12731] __sys_connect+0x316/0x440 [ 660.038423][T12731] ? __fget_files+0x3a0/0x420 [ 660.038445][T12731] ? __pfx___sys_connect+0x10/0x10 [ 660.038484][T12731] ? __pfx_ksys_write+0x10/0x10 [ 660.038500][T12731] ? rcu_is_watching+0x15/0xb0 [ 660.038530][T12731] __x64_sys_connect+0x7a/0x90 [ 660.038557][T12731] do_syscall_64+0xfa/0x3b0 [ 660.038577][T12731] ? lockdep_hardirqs_on+0x9c/0x150 [ 660.038598][T12731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.038617][T12731] ? clear_bhb_loop+0x60/0xb0 [ 660.038641][T12731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.038660][T12731] RIP: 0033:0x7f50e918ebe9 [ 660.038678][T12731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.038696][T12731] RSP: 002b:00007f50ea025038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 660.038717][T12731] RAX: ffffffffffffffda RBX: 00007f50e93b6180 RCX: 00007f50e918ebe9 [ 660.038732][T12731] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000007 [ 660.038744][T12731] RBP: 00007f50ea025090 R08: 0000000000000000 R09: 0000000000000000 [ 660.038756][T12731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.038767][T12731] R13: 00007f50e93b6218 R14: 00007f50e93b6180 R15: 00007ffcfec812b8 [ 660.038799][T12731] [ 660.283417][ C1] vkms_vblank_simulate: vblank timer overrun [ 660.345831][T12732] SET target dimension over the limit! [ 661.242228][T12733] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 661.551942][T12743] FAULT_INJECTION: forcing a failure. [ 661.551942][T12743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.566160][T12743] CPU: 1 UID: 0 PID: 12743 Comm: syz.5.1608 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 661.566184][T12743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 661.566195][T12743] Call Trace: [ 661.566202][T12743] [ 661.566211][T12743] dump_stack_lvl+0x189/0x250 [ 661.566235][T12743] ? __pfx____ratelimit+0x10/0x10 [ 661.566253][T12743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.566271][T12743] ? __pfx__printk+0x10/0x10 [ 661.566292][T12743] ? __might_fault+0xb0/0x130 [ 661.566319][T12743] should_fail_ex+0x414/0x560 [ 661.566341][T12743] _copy_from_user+0x2d/0xb0 [ 661.566365][T12743] ___sys_sendmsg+0x158/0x2a0 [ 661.566394][T12743] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.566451][T12743] ? __fget_files+0x2a/0x420 [ 661.566469][T12743] ? __fget_files+0x3a0/0x420 [ 661.566496][T12743] __x64_sys_sendmsg+0x19b/0x260 [ 661.566524][T12743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.566572][T12743] do_syscall_64+0xfa/0x3b0 [ 661.566591][T12743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.566607][T12743] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 661.566624][T12743] ? clear_bhb_loop+0x60/0xb0 [ 661.566644][T12743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.566660][T12743] RIP: 0033:0x7f21e4f8ebe9 [ 661.566676][T12743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.566692][T12743] RSP: 002b:00007f21e31b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.566710][T12743] RAX: ffffffffffffffda RBX: 00007f21e51b6180 RCX: 00007f21e4f8ebe9 [ 661.566722][T12743] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000005 [ 661.566732][T12743] RBP: 00007f21e31b4090 R08: 0000000000000000 R09: 0000000000000000 [ 661.566743][T12743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.566752][T12743] R13: 00007f21e51b6218 R14: 00007f21e51b6180 R15: 00007ffe26a34e48 [ 661.566779][T12743] [ 661.759027][ C1] vkms_vblank_simulate: vblank timer overrun [ 661.937185][ T5946] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 662.179591][ T5946] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 662.185163][T12750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.205791][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 662.394426][T12748] fuse: Bad value for 'fd' [ 662.524688][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 662.558276][ T5946] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 663.009137][ T5946] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 663.018982][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.088766][ T5946] usb 3-1: config 0 descriptor?? [ 663.628247][ T5946] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 663.795679][T12766] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 663.805521][T12766] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 663.813781][T12766] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 663.821705][T12766] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 663.829336][T12766] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 663.836268][T12766] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 663.844384][T12766] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 663.851764][T12766] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 663.859579][T12766] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 663.870206][T12766] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 663.877542][T12766] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 663.887353][T12766] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 663.900695][T12766] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 663.911538][T12766] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 663.918598][ T5946] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 664.464077][T12776] pim6reg: entered allmulticast mode [ 664.497046][ T5844] usb 3-1: USB disconnect, device number 23 [ 664.625268][T12781] o2cb: This node has not been configured. [ 664.631516][T12781] o2cb: Cluster check failed. Fix errors before retrying. [ 664.638901][T12781] (syz.6.1619,12781,0):user_dlm_register:674 ERROR: status = -22 [ 664.646710][T12781] (syz.6.1619,12781,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 664.662228][T12781] o2cb: This node has not been configured. [ 664.668186][T12781] o2cb: Cluster check failed. Fix errors before retrying. [ 664.675509][T12781] (syz.6.1619,12781,0):user_dlm_register:674 ERROR: status = -22 [ 664.683385][T12781] (syz.6.1619,12781,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 665.596636][T12787] netlink: 'syz.1.1622': attribute type 17 has an invalid length. [ 665.798355][ T5844] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 665.808665][T12799] FAULT_INJECTION: forcing a failure. [ 665.808665][T12799] name failslab, interval 1, probability 0, space 0, times 0 [ 665.859418][T12799] CPU: 0 UID: 0 PID: 12799 Comm: syz.2.1626 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 665.859447][T12799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 665.859459][T12799] Call Trace: [ 665.859468][T12799] [ 665.859479][T12799] dump_stack_lvl+0x189/0x250 [ 665.859506][T12799] ? __pfx____ratelimit+0x10/0x10 [ 665.859527][T12799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.859550][T12799] ? __pfx__printk+0x10/0x10 [ 665.859582][T12799] ? ref_tracker_alloc+0x318/0x460 [ 665.859608][T12799] should_fail_ex+0x414/0x560 [ 665.859632][T12799] should_failslab+0xa8/0x100 [ 665.859656][T12799] kmem_cache_alloc_noprof+0x73/0x3c0 [ 665.859675][T12799] ? skb_clone+0x212/0x3a0 [ 665.859700][T12799] skb_clone+0x212/0x3a0 [ 665.859723][T12799] __netlink_deliver_tap+0x404/0x850 [ 665.859764][T12799] ? netlink_deliver_tap+0x2e/0x1b0 [ 665.859792][T12799] netlink_deliver_tap+0x19c/0x1b0 [ 665.859819][T12799] netlink_unicast+0x730/0x8e0 [ 665.859856][T12799] netlink_sendmsg+0x805/0xb30 [ 665.859896][T12799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 665.859933][T12799] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 665.859953][T12799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 665.859981][T12799] __sock_sendmsg+0x21c/0x270 [ 665.860008][T12799] ____sys_sendmsg+0x505/0x830 [ 665.860044][T12799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 665.860080][T12799] ? import_iovec+0x74/0xa0 [ 665.860110][T12799] ___sys_sendmsg+0x21f/0x2a0 [ 665.860143][T12799] ? __pfx____sys_sendmsg+0x10/0x10 [ 665.860213][T12799] ? __fget_files+0x2a/0x420 [ 665.860234][T12799] ? __fget_files+0x3a0/0x420 [ 665.860267][T12799] __x64_sys_sendmsg+0x19b/0x260 [ 665.860299][T12799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 665.860338][T12799] ? __pfx_ksys_write+0x10/0x10 [ 665.860354][T12799] ? rcu_is_watching+0x15/0xb0 [ 665.860388][T12799] ? do_syscall_64+0xbe/0x3b0 [ 665.860414][T12799] do_syscall_64+0xfa/0x3b0 [ 665.860434][T12799] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.860455][T12799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.860474][T12799] ? clear_bhb_loop+0x60/0xb0 [ 665.860498][T12799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.860517][T12799] RIP: 0033:0x7f50e918ebe9 [ 665.860536][T12799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.860552][T12799] RSP: 002b:00007f50ea067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.860573][T12799] RAX: ffffffffffffffda RBX: 00007f50e93b5fa0 RCX: 00007f50e918ebe9 [ 665.860587][T12799] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 665.860598][T12799] RBP: 00007f50ea067090 R08: 0000000000000000 R09: 0000000000000000 [ 665.860611][T12799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.860622][T12799] R13: 00007f50e93b6038 R14: 00007f50e93b5fa0 R15: 00007ffcfec812b8 [ 665.860655][T12799] [ 666.329198][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 666.345831][ T5844] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 666.357496][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.365787][ T5844] usb 1-1: Product: syz [ 666.369959][ T5844] usb 1-1: Manufacturer: syz [ 666.374547][ T5844] usb 1-1: SerialNumber: syz [ 666.382306][ T5844] r8152-cfgselector 1-1: Unknown version 0x0000 [ 666.388669][ T5844] r8152-cfgselector 1-1: config 0 descriptor?? [ 666.417809][T12809] syz_tun: entered allmulticast mode [ 666.432104][T12804] syz_tun: left allmulticast mode [ 666.927077][T12819] netlink: 'syz.2.1631': attribute type 4 has an invalid length. [ 667.920715][ T5844] r8152-cfgselector 1-1: Unknown version 0x0000 [ 667.927320][ T5844] r8152-cfgselector 1-1: bad CDC descriptors [ 667.982157][ T5844] r8152-cfgselector 1-1: USB disconnect, device number 36 [ 668.008247][ T5893] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 668.166282][T12831] netlink: 'syz.6.1636': attribute type 4 has an invalid length. [ 668.240059][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 668.303407][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 668.365382][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 668.428538][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 668.463858][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 668.463878][ T30] audit: type=1326 audit(1755104755.056:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12836 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a28b8ebe9 code=0x7ffc0000 [ 668.514829][ T5893] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 668.551442][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.586467][ T30] audit: type=1326 audit(1755104755.056:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12836 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a28b8ebe9 code=0x7ffc0000 [ 668.600841][ T5893] usb 3-1: config 0 descriptor?? [ 668.724665][ T30] audit: type=1326 audit(1755104755.066:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12836 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6a28b8ebe9 code=0x7ffc0000 [ 668.833149][ T30] audit: type=1326 audit(1755104755.066:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12836 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a28b8ebe9 code=0x7ffc0000 [ 668.907779][ T30] audit: type=1326 audit(1755104755.066:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12836 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a28b8d550 code=0x7ffc0000 [ 668.945912][ T30] audit: type=1326 audit(1755104755.066:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12836 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a28b8ebe9 code=0x7ffc0000 [ 668.971511][ T30] audit: type=1326 audit(1755104755.066:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12836 comm="syz.0.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6a28b8ebe9 code=0x7ffc0000 [ 669.192398][ T5893] plantronics 0003:047F:FFFF.000F: ignoring exceeding usage max [ 669.442457][ T30] audit: type=1326 audit(1755104755.266:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12841 comm="syz.5.1639" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21e4f8ebe9 code=0x0 [ 669.467653][ T5893] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 669.673262][T12861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 670.211421][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'. [ 670.231583][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'. [ 670.305603][T12870] Process accounting resumed [ 670.515874][T12873] netlink: 'syz.6.1648': attribute type 1 has an invalid length. [ 670.561627][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1648'. [ 671.169552][ T10] usb 3-1: USB disconnect, device number 24 [ 671.224729][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1650'. [ 671.401450][T12887] FAULT_INJECTION: forcing a failure. [ 671.401450][T12887] name failslab, interval 1, probability 0, space 0, times 0 [ 671.459216][T12887] CPU: 1 UID: 0 PID: 12887 Comm: syz.6.1652 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 671.459244][T12887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 671.459256][T12887] Call Trace: [ 671.459264][T12887] [ 671.459273][T12887] dump_stack_lvl+0x189/0x250 [ 671.459300][T12887] ? __pfx____ratelimit+0x10/0x10 [ 671.459321][T12887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.459343][T12887] ? __pfx__printk+0x10/0x10 [ 671.459372][T12887] ? __pfx___might_resched+0x10/0x10 [ 671.459393][T12887] ? fs_reclaim_acquire+0x7d/0x100 [ 671.459422][T12887] should_fail_ex+0x414/0x560 [ 671.459447][T12887] should_failslab+0xa8/0x100 [ 671.459471][T12887] __kmalloc_noprof+0xcb/0x4f0 [ 671.459489][T12887] ? ovl_lookup+0x5f7/0x1bc0 [ 671.459522][T12887] ovl_lookup+0x5f7/0x1bc0 [ 671.459556][T12887] ? d_alloc_parallel+0x2e0/0x14e0 [ 671.459587][T12887] ? d_alloc_parallel+0x13d0/0x14e0 [ 671.459618][T12887] ? d_alloc_parallel+0x2e0/0x14e0 [ 671.459654][T12887] ? __pfx_ovl_lookup+0x10/0x10 [ 671.459680][T12887] ? __lock_acquire+0xab9/0xd20 [ 671.459700][T12887] ? __pfx_d_alloc_parallel+0x10/0x10 [ 671.459724][T12887] ? look_up_lock_class+0x74/0x170 [ 671.459750][T12887] ? __raw_spin_lock_init+0x45/0x100 [ 671.459778][T12887] ? __init_waitqueue_head+0xa9/0x150 [ 671.459810][T12887] __lookup_slow+0x297/0x3d0 [ 671.459840][T12887] ? __pfx___lookup_slow+0x10/0x10 [ 671.459872][T12887] ? bpf_lsm_inode_permission+0x9/0x20 [ 671.459890][T12887] ? security_inode_permission+0xb7/0x310 [ 671.459915][T12887] ? down_read+0x1ad/0x2e0 [ 671.459938][T12887] lookup_slow+0x53/0x70 [ 671.459962][T12887] walk_component+0x2d2/0x400 [ 671.459984][T12887] ? path_lookupat+0x156/0x430 [ 671.460009][T12887] path_lookupat+0x163/0x430 [ 671.460040][T12887] filename_lookup+0x212/0x570 [ 671.460061][T12887] ? kasan_save_track+0x3e/0x80 [ 671.460086][T12887] ? __kasan_slab_alloc+0x6c/0x80 [ 671.460109][T12887] ? __pfx_filename_lookup+0x10/0x10 [ 671.460160][T12887] ? __might_fault+0xb0/0x130 [ 671.460187][T12887] filename_setxattr+0xb6/0x600 [ 671.460224][T12887] ? __pfx_filename_setxattr+0x10/0x10 [ 671.460252][T12887] ? getname_flags+0x1e5/0x540 [ 671.460278][T12887] path_setxattrat+0x364/0x3a0 [ 671.460314][T12887] ? __pfx_path_setxattrat+0x10/0x10 [ 671.460337][T12887] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 671.460389][T12887] ? ksys_write+0x22a/0x250 [ 671.460410][T12887] ? __pfx_ksys_write+0x10/0x10 [ 671.460425][T12887] ? rcu_is_watching+0x15/0xb0 [ 671.460452][T12887] __x64_sys_setxattr+0xbc/0xe0 [ 671.460478][T12887] do_syscall_64+0xfa/0x3b0 [ 671.460499][T12887] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.460518][T12887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.460538][T12887] ? clear_bhb_loop+0x60/0xb0 [ 671.460560][T12887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.460578][T12887] RIP: 0033:0x7fa767f8ebe9 [ 671.460594][T12887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.460610][T12887] RSP: 002b:00007fa7661ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 671.460631][T12887] RAX: ffffffffffffffda RBX: 00007fa7681b5fa0 RCX: 00007fa767f8ebe9 [ 671.460645][T12887] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000080 [ 671.460658][T12887] RBP: 00007fa7661ee090 R08: 0000000000000001 R09: 0000000000000000 [ 671.460671][T12887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.460682][T12887] R13: 00007fa7681b6038 R14: 00007fa7681b5fa0 R15: 00007ffcdd7a1d08 [ 671.460716][T12887] [ 671.958142][ T5946] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 671.968140][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 672.108221][ T5946] usb 3-1: Using ep0 maxpacket: 8 [ 672.129100][ T5946] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 672.131256][T12899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.139144][ T5946] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 672.139178][ T5946] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 672.139201][ T5946] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 672.139271][ T5946] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 672.149905][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 672.159466][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.329067][ T5844] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 672.525072][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 672.535106][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 672.549905][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 672.560185][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 672.573455][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 672.593458][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.678238][ T5844] usb 6-1: Using ep0 maxpacket: 8 [ 672.685983][ T5844] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 672.694301][ T5844] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 672.706178][ T5844] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 672.721413][ T5844] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 672.745036][ T5844] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 672.760967][ T5844] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 672.771624][ T5844] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 672.791814][ T5844] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 672.807464][ T5844] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 673.782109][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 673.811281][ T5844] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 673.825530][ T5946] usb 3-1: GET_CAPABILITIES returned 0 [ 673.825671][ T10] usbtmc 2-1:16.0: can't read capabilities [ 673.831164][ T5946] usbtmc 3-1:16.0: can't read capabilities [ 673.898601][ T5844] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 673.941566][ T5844] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 673.972212][ T10] usb 2-1: USB disconnect, device number 28 [ 673.983384][ T5844] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 674.051280][ T5844] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 674.118144][ T5844] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 674.134451][ T5844] usb 6-1: string descriptor 0 read error: -22 [ 674.141063][ T5844] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 674.151532][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.163430][T12913] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1662'. [ 674.196502][ T5947] usb 3-1: USB disconnect, device number 25 [ 674.222213][ T5844] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 674.338341][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 674.450567][T12919] netlink: 'syz.0.1663': attribute type 1 has an invalid length. [ 674.552700][ T5947] usb 6-1: USB disconnect, device number 32 [ 674.583677][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 674.615255][T12923] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 674.627546][T12923] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 674.640183][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 674.706750][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 674.957604][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 674.992127][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 675.143745][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.189343][ T24] usb 7-1: config 0 descriptor?? [ 675.503971][T12919] bond1: (slave gretap1): making interface the new active one [ 675.516219][T12919] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 675.834316][ T24] plantronics 0003:047F:FFFF.0010: ignoring exceeding usage max [ 675.952535][ T24] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 676.068783][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1668'. [ 676.377991][ T24] usb 7-1: USB disconnect, device number 9 [ 676.526031][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1671'. [ 677.160476][T12961] 9pnet_fd: Insufficient options for proto=fd [ 677.300752][T12967] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 677.328662][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 677.361337][T12967] CIFS mount error: No usable UNC path provided in device string! [ 677.361337][T12967] [ 677.386801][T12967] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 677.548205][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 677.555517][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 677.596479][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 677.625769][T12981] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[12981] [ 677.636244][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 677.646482][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.656618][T12978] bridge0: port 4(macsec0) entered blocking state [ 677.659769][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 677.675603][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.693058][T12978] bridge0: port 4(macsec0) entered disabled state [ 677.701480][T12978] macsec0: entered allmulticast mode [ 677.712018][T12978] veth1_macvtap: entered allmulticast mode [ 677.811428][T12978] macsec0: entered promiscuous mode [ 678.291707][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 678.297408][ T24] usbtmc 7-1:16.0: can't read capabilities [ 678.544681][ T24] usb 7-1: USB disconnect, device number 10 [ 678.667135][T12995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.683535][T12995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.908404][ T5844] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 678.948217][ T43] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 679.073433][ T5844] usb 3-1: Using ep0 maxpacket: 8 [ 679.103419][ T5844] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 679.123777][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 679.137507][ T43] usb 2-1: config index 0 descriptor too short (expected 20260, got 36) [ 679.139379][ T5844] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 679.163587][ T43] usb 2-1: config 152 has an invalid descriptor of length 213, skipping remainder of the config [ 679.193349][ T43] usb 2-1: config 152 has 0 interfaces, different from the descriptor's value: 8 [ 679.197177][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 679.215641][ T43] usb 2-1: New USB device found, idVendor=1608, idProduct=030b, bcdDevice=40.85 [ 679.230694][ T5844] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.243722][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.243749][ T43] usb 2-1: Product: syz [ 679.268212][ T43] usb 2-1: Manufacturer: syz [ 679.268522][ T5844] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 679.281423][ T43] usb 2-1: SerialNumber: syz [ 679.282601][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.295976][ T5844] usb 3-1: Product: syz [ 679.300705][ T5844] usb 3-1: Manufacturer: syz [ 679.305583][ T5844] usb 3-1: SerialNumber: syz [ 679.314182][T13009] netlink: 'syz.6.1690': attribute type 9 has an invalid length. [ 679.322554][T13009] netlink: 'syz.6.1690': attribute type 6 has an invalid length. [ 679.361605][ T5844] usb 3-1: config 0 descriptor?? [ 679.424280][ T5844] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input52 [ 679.591969][ T5844] imon:send_packet: packet tx failed (-71) [ 679.617824][T13016] tipc: Enabling of bearer rejected, failed to enable media [ 679.627710][ T5844] imon 3-1:0.0: panel buttons/knobs setup failed [ 679.799274][ T5844] rc_core: IR keymap rc-imon-pad not found [ 679.821194][ T5844] Registered IR keymap rc-empty [ 679.828826][ T5844] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 679.843610][ T5844] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 679.856800][ T5844] imon:send_packet: packet tx failed (-71) [ 679.890699][ T5844] imon 3-1:0.0: remote input dev register failed [ 679.944681][ T5844] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 680.034571][ T5844] imon 3-1:0.0: unable to initialize intf0, err 0 [ 680.052176][ T5844] imon:imon_probe: failed to initialize context! [ 680.070208][ T5844] imon 3-1:0.0: unable to register, err -19 [ 680.113214][ T5844] usb 3-1: USB disconnect, device number 26 [ 681.586100][T13040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.819105][ T43] usb 2-1: USB disconnect, device number 29 [ 683.088762][T13044] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1701'. [ 684.028219][ T43] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 684.213215][ T43] usb 7-1: config 7 has an invalid interface number: 101 but max is 0 [ 684.243258][ T43] usb 7-1: config 7 has no interface number 0 [ 684.261160][ T43] usb 7-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 684.282233][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.296260][ T43] usb 7-1: Product: syz [ 684.408140][ T43] usb 7-1: Manufacturer: syz [ 685.286773][ T43] usb 7-1: SerialNumber: syz [ 685.934514][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.085341][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.614472][ T43] as10x_usb: device has been detected [ 686.621221][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 686.643581][ T43] usb 7-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 686.878981][ T43] as10x_usb: error during firmware upload part1 [ 687.118614][ T43] Registered device Elgato EyeTV DTT Deluxe [ 687.135822][ T43] usb 7-1: USB disconnect, device number 11 [ 687.458207][T13099] ubi31: attaching mtd0 [ 687.518814][T13099] ubi31: scanning is finished [ 687.522695][ T43] Unregistered device Elgato EyeTV DTT Deluxe [ 687.523692][T13099] ubi31: empty MTD device detected [ 687.704355][ T43] as10x_usb: device has been disconnected [ 688.326341][T13099] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 688.500233][T13107] tipc: Enabled bearer , priority 0 [ 688.537366][T13107] syzkaller0: entered promiscuous mode [ 688.545954][T13107] syzkaller0: entered allmulticast mode [ 688.607350][T13107] tipc: Resetting bearer [ 688.647731][T13106] tipc: Resetting bearer [ 688.750223][T13106] tipc: Disabling bearer [ 689.249330][T13105] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 690.085220][T13126] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 690.142449][T13126] input: syz0 as /devices/virtual/input/input54 [ 690.838859][ T5893] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 692.233176][ T6103] bond0: (slave syz_tun): Releasing backup interface [ 692.270991][ T5893] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 692.310786][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.348156][ T5893] usb 7-1: Product: syz [ 692.352376][ T5893] usb 7-1: Manufacturer: syz [ 692.393773][T13140] pim6reg: entered allmulticast mode [ 692.399372][ T5893] usb 7-1: SerialNumber: syz [ 692.467236][ T5893] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 692.600602][ T5844] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 692.716855][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.078674][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.596156][T13161] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 693.654393][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.776278][T13142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.863857][T13142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.105085][ T5844] usb 7-1: Service connection timeout for: 256 [ 694.284950][ T5844] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 694.374573][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1729'. [ 694.419106][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.420319][ T5844] ath9k_htc: Failed to initialize the device [ 694.659691][ T5844] usb 7-1: ath9k_htc: USB layer deinitialized [ 694.759406][T13174] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 694.792591][T13174] input: syz0 as /devices/virtual/input/input55 [ 695.441091][ T5947] usb 7-1: USB disconnect, device number 12 [ 695.849335][T13182] fuse: Bad value for 'fd' [ 695.891445][ T36] bridge_slave_1: left allmulticast mode [ 696.044747][ T36] bridge_slave_1: left promiscuous mode [ 696.281908][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.600433][ T36] bridge_slave_0: left allmulticast mode [ 696.643265][ T36] bridge_slave_0: left promiscuous mode [ 696.663570][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.257844][T13189] overlayfs: missing 'lowerdir' [ 699.589058][T13216] loop9: detected capacity change from 0 to 7 [ 699.599176][T13216] buffer_io_error: 43 callbacks suppressed [ 699.599213][T13216] Buffer I/O error on dev loop9, logical block 0, async page read [ 699.613629][T13216] Buffer I/O error on dev loop9, logical block 0, async page read [ 699.622171][T13216] Buffer I/O error on dev loop9, logical block 0, async page read [ 699.630809][T13216] Buffer I/O error on dev loop9, logical block 0, async page read [ 699.639459][T13216] Buffer I/O error on dev loop9, logical block 0, async page read [ 699.647564][T13216] Buffer I/O error on dev loop9, logical block 0, async page read [ 699.655649][T13216] Buffer I/O error on dev loop9, logical block 0, async page read [ 699.663605][T13216] ldm_validate_partition_table(): Disk read failed. [ 699.670335][T13216] Buffer I/O error on dev loop9, logical block 0, async page read [ 699.678893][T13216] Buffer I/O error on dev loop9, logical block 0, async page read [ 699.687275][T13216] Buffer I/O error on dev loop9, logical block 0, async page read [ 699.696078][T13216] Dev loop9: unable to read RDB block 0 [ 699.702164][T13216] loop9: unable to read partition table [ 699.708111][T13216] loop9: partition table beyond EOD, truncated [ 699.714315][T13216] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 699.714315][T13216] ) failed (rc=-5) [ 700.052430][T11086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 700.067196][T11086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 700.095781][T11086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 700.121635][T11086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 700.146587][T11086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 700.482359][ T36] erspan0 (unregistering): left promiscuous mode [ 701.374003][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.385129][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.396808][ T36] bond0 (unregistering): Released all slaves [ 702.102911][T13229] delete_channel: no stack [ 702.255944][T11086] Bluetooth: hci1: command tx timeout [ 702.335873][ T36] bond1 (unregistering): Released all slaves [ 702.599394][T13246] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1761'. [ 702.713233][ T36] tipc: Left network mode [ 703.005769][ T36] IPVS: stopping master sync thread 11064 ... [ 704.328135][T11086] Bluetooth: hci1: command tx timeout [ 705.502155][ T36] batadv_slave_0: left promiscuous mode [ 706.025962][T13285] FAULT_INJECTION: forcing a failure. [ 706.025962][T13285] name failslab, interval 1, probability 0, space 0, times 0 [ 706.039523][T13285] CPU: 0 UID: 0 PID: 13285 Comm: syz.2.1773 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 706.039558][T13285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 706.039571][T13285] Call Trace: [ 706.039579][T13285] [ 706.039588][T13285] dump_stack_lvl+0x189/0x250 [ 706.039614][T13285] ? __pfx____ratelimit+0x10/0x10 [ 706.039635][T13285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 706.039657][T13285] ? __pfx__printk+0x10/0x10 [ 706.039685][T13285] ? __pfx___might_resched+0x10/0x10 [ 706.039707][T13285] ? fs_reclaim_acquire+0x7d/0x100 [ 706.039737][T13285] should_fail_ex+0x414/0x560 [ 706.039762][T13285] should_failslab+0xa8/0x100 [ 706.039789][T13285] __kmalloc_cache_noprof+0x70/0x3d0 [ 706.039807][T13285] ? snd_mixer_oss_put_volume1_sw+0xba/0x3c0 [ 706.039833][T13285] snd_mixer_oss_put_volume1_sw+0xba/0x3c0 [ 706.039858][T13285] snd_mixer_oss_put_recsrc1_sw+0x65/0x90 [ 706.039879][T13285] ? __pfx_snd_mixer_oss_put_recsrc1_sw+0x10/0x10 [ 706.039897][T13285] snd_mixer_oss_set_recsrc+0x269/0x400 [ 706.039923][T13285] ? __pfx_snd_mixer_oss_set_recsrc+0x10/0x10 [ 706.039947][T13285] ? __might_fault+0xb0/0x130 [ 706.039971][T13285] snd_mixer_oss_ioctl1+0xebd/0x18b0 [ 706.039995][T13285] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 706.040016][T13285] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 706.040036][T13285] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 706.040053][T13285] ? smack_log+0xef/0x3f0 [ 706.040082][T13285] ? __pfx_smack_log+0x10/0x10 [ 706.040106][T13285] ? smk_access+0x14c/0x4e0 [ 706.040139][T13285] ? smk_tskacc+0x2fc/0x370 [ 706.040179][T13285] snd_mixer_oss_ioctl_card+0x10b/0x160 [ 706.040203][T13285] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 706.040227][T13285] ? __fget_files+0x2a/0x420 [ 706.040247][T13285] ? __fget_files+0x3a0/0x420 [ 706.040272][T13285] snd_pcm_oss_ioctl+0x264/0xdd0 [ 706.040294][T13285] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 706.040317][T13285] __se_sys_ioctl+0xfc/0x170 [ 706.040349][T13285] do_syscall_64+0xfa/0x3b0 [ 706.040369][T13285] ? lockdep_hardirqs_on+0x9c/0x150 [ 706.040389][T13285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.040408][T13285] ? clear_bhb_loop+0x60/0xb0 [ 706.040432][T13285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.040450][T13285] RIP: 0033:0x7f50e918ebe9 [ 706.040469][T13285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.040486][T13285] RSP: 002b:00007f50ea046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 706.040507][T13285] RAX: ffffffffffffffda RBX: 00007f50e93b6090 RCX: 00007f50e918ebe9 [ 706.040522][T13285] RDX: 0000200000000100 RSI: 00000000c0044dff RDI: 000000000000000a [ 706.040535][T13285] RBP: 00007f50ea046090 R08: 0000000000000000 R09: 0000000000000000 [ 706.040554][T13285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.040566][T13285] R13: 00007f50e93b6128 R14: 00007f50e93b6090 R15: 00007ffcfec812b8 [ 706.040599][T13285] [ 706.044932][ T36] hsr_slave_0: left promiscuous mode [ 706.408935][T11086] Bluetooth: hci1: command tx timeout [ 706.442160][ T36] hsr_slave_1: left promiscuous mode [ 706.513210][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.577237][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.652427][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.664873][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.696668][ T36] veth1_macvtap: left promiscuous mode [ 706.702666][ T36] veth0_macvtap: left promiscuous mode [ 706.708518][ T36] veth1_vlan: left promiscuous mode [ 706.714021][ T36] veth0_vlan: left promiscuous mode [ 706.873492][ T36] pim6reg (unregistering): left allmulticast mode [ 706.888178][ T5946] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 707.214623][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 707.774804][ T5946] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 707.786918][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 707.837000][ T5946] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 707.848180][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.876784][ T5946] usb 3-1: Product: syz [ 707.887044][ T5946] usb 3-1: Manufacturer: syz [ 707.908713][ T5946] usb 3-1: SerialNumber: syz [ 707.949239][ T5946] usb 3-1: config 0 descriptor?? [ 707.956347][T13295] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 707.964762][T13295] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 707.982643][ T5946] usb 3-1: ucan: probing device on interface #0 [ 708.255854][T13311] FAULT_INJECTION: forcing a failure. [ 708.255854][T13311] name failslab, interval 1, probability 0, space 0, times 0 [ 708.271662][T13311] CPU: 0 UID: 0 PID: 13311 Comm: syz.6.1782 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 708.271697][T13311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 708.271709][T13311] Call Trace: [ 708.271718][T13311] [ 708.271727][T13311] dump_stack_lvl+0x189/0x250 [ 708.271755][T13311] ? __pfx____ratelimit+0x10/0x10 [ 708.271777][T13311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 708.271799][T13311] ? __pfx__printk+0x10/0x10 [ 708.271829][T13311] ? __pfx___might_resched+0x10/0x10 [ 708.271850][T13311] ? fs_reclaim_acquire+0x7d/0x100 [ 708.271879][T13311] should_fail_ex+0x414/0x560 [ 708.271905][T13311] should_failslab+0xa8/0x100 [ 708.271929][T13311] __kmalloc_noprof+0xcb/0x4f0 [ 708.271946][T13311] ? tomoyo_encode2+0x27f/0x530 [ 708.271977][T13311] tomoyo_encode2+0x27f/0x530 [ 708.272009][T13311] tomoyo_check_unix_address+0x3c3/0x7b0 [ 708.272034][T13311] ? put_pid+0xee/0x160 [ 708.272062][T13311] ? tomoyo_check_unix_address+0x15a/0x7b0 [ 708.272086][T13311] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 708.272138][T13311] tomoyo_socket_sendmsg_permission+0x1da/0x300 [ 708.272177][T13311] security_socket_sendmsg+0x9b/0x2b0 [ 708.272200][T13311] __sock_sendmsg+0x49/0x270 [ 708.272221][T13311] ? ____sys_sendmsg+0x519/0x830 [ 708.272252][T13311] ____sys_sendmsg+0x52d/0x830 [ 708.272286][T13311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 708.272325][T13311] ? import_iovec+0x74/0xa0 [ 708.272355][T13311] ___sys_sendmsg+0x21f/0x2a0 [ 708.272387][T13311] ? __pfx____sys_sendmsg+0x10/0x10 [ 708.272464][T13311] ? __might_fault+0xb0/0x130 [ 708.272487][T13311] __sys_sendmmsg+0x227/0x430 [ 708.272522][T13311] ? __pfx___sys_sendmmsg+0x10/0x10 [ 708.272548][T13311] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 708.272600][T13311] ? ksys_write+0x22a/0x250 [ 708.272621][T13311] ? __pfx_ksys_write+0x10/0x10 [ 708.272637][T13311] ? rcu_is_watching+0x15/0xb0 [ 708.272666][T13311] __x64_sys_sendmmsg+0xa0/0xc0 [ 708.272703][T13311] do_syscall_64+0xfa/0x3b0 [ 708.272724][T13311] ? lockdep_hardirqs_on+0x9c/0x150 [ 708.272744][T13311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.272763][T13311] ? clear_bhb_loop+0x60/0xb0 [ 708.272787][T13311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.272806][T13311] RIP: 0033:0x7fa767f8ebe9 [ 708.272823][T13311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.272841][T13311] RSP: 002b:00007fa7661cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 708.272862][T13311] RAX: ffffffffffffffda RBX: 00007fa7681b6090 RCX: 00007fa767f8ebe9 [ 708.272877][T13311] RDX: 0000000000000002 RSI: 0000200000007980 RDI: 0000000000000003 [ 708.272890][T13311] RBP: 00007fa7661cd090 R08: 0000000000000000 R09: 0000000000000000 [ 708.272902][T13311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.272914][T13311] R13: 00007fa7681b6128 R14: 00007fa7681b6090 R15: 00007ffcdd7a1d08 [ 708.272946][T13311] [ 708.569147][T11086] Bluetooth: hci1: command tx timeout [ 708.703939][ T36] team0 (unregistering): Port device team_slave_1 removed [ 708.760375][ T36] team0 (unregistering): Port device team_slave_0 removed [ 708.781405][ T5946] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 708.799207][ T5946] usb 3-1: USB disconnect, device number 27 [ 710.338309][ T5946] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 711.548234][ T5946] usb 3-1: device descriptor read/64, error -71 [ 711.848251][ T5946] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 711.953319][T13217] chnl_net:caif_netlink_parms(): no params data found [ 711.998332][ T5946] usb 3-1: device descriptor read/64, error -71 [ 712.198435][ T5946] usb usb3-port1: attempt power cycle [ 712.340040][T13217] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.362850][T13217] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.378460][T13217] bridge_slave_0: entered allmulticast mode [ 712.545020][T13349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.558543][ T5946] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 712.565529][T13217] bridge_slave_0: entered promiscuous mode [ 712.600995][ T5946] usb 3-1: device descriptor read/8, error -71 [ 712.679113][T13217] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.714978][T13217] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.801845][T13217] bridge_slave_1: entered allmulticast mode [ 712.869765][ T5946] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 712.906789][ T5946] usb 3-1: device descriptor read/8, error -71 [ 712.906891][T13217] bridge_slave_1: entered promiscuous mode [ 712.959829][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 713.017619][ T36] IPVS: stop unused estimator thread 0... [ 713.018893][T13217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.023841][ T5946] usb usb3-port1: unable to enumerate USB device [ 713.042375][T13217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.597370][T13217] team0: Port device team_slave_0 added [ 713.598488][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 713.651303][T13217] team0: Port device team_slave_1 added [ 713.769418][T11086] Bluetooth: hci5: command 0x0405 tx timeout [ 714.519558][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 714.527139][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 714.538748][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 714.550512][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 714.562162][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 714.577479][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 714.585353][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 714.597405][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 714.609342][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 714.620704][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 714.724767][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 714.748331][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 714.787095][T13217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.813047][T13217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.819852][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 714.838971][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.839419][T13217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.872626][T13217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.880104][T13217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.013281][T13217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.593571][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 715.605506][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 715.624446][ T24] usb 7-1: string descriptor 0 read error: -22 [ 715.630966][ T24] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 715.655550][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.681067][ T24] usb 7-1: can't set config #168, error -71 [ 715.710863][ T24] usb 7-1: USB disconnect, device number 13 [ 716.425912][T13217] hsr_slave_0: entered promiscuous mode [ 716.451850][T13217] hsr_slave_1: entered promiscuous mode [ 716.468669][T13217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 716.476308][T13217] Cannot create hsr debugfs directory [ 716.824755][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 717.008429][ T10] usb 3-1: device descriptor read/64, error -71 [ 718.020946][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 718.238130][ T10] usb 3-1: device descriptor read/64, error -71 [ 718.353158][ T10] usb usb3-port1: attempt power cycle [ 718.419587][T13217] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 718.446193][T13217] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 718.797022][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 718.874755][T13217] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 718.886592][T13217] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 718.902171][ T10] usb 3-1: device descriptor read/8, error -71 [ 718.986566][T13406] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 718.997228][T13217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.036680][T13217] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.065375][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.072686][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.113127][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.120445][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.148558][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 719.169836][ T10] usb 3-1: device descriptor read/8, error -71 [ 719.296333][ T10] usb usb3-port1: unable to enumerate USB device [ 720.383882][T13217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.109211][ T5916] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 722.280111][ T5916] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 722.300398][ T5916] usb 3-1: config 7 has no interface number 0 [ 722.326624][ T5916] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 722.348217][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.356356][ T5916] usb 3-1: Product: syz [ 722.387542][ T5916] usb 3-1: Manufacturer: syz [ 722.392757][ T5916] usb 3-1: SerialNumber: syz [ 722.427996][T13217] veth0_vlan: entered promiscuous mode [ 722.446670][T13217] veth1_vlan: entered promiscuous mode [ 723.074210][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 723.259090][ T10] usb 2-1: device descriptor read/64, error -71 [ 723.329542][ T5916] as10x_usb: device has been detected [ 723.335795][ T5916] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 723.346144][T13217] veth0_macvtap: entered promiscuous mode [ 723.371579][ T5916] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 723.374255][T13217] veth1_macvtap: entered promiscuous mode [ 723.415085][T13217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.437868][T13217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.480216][T13217] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.489585][T13217] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.498479][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 723.509257][T13217] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.519398][T13217] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.539045][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 723.608598][ T5916] as10x_usb: error during firmware upload part1 [ 723.619495][ T5916] Registered device Elgato EyeTV DTT Deluxe [ 723.648149][ T10] usb 2-1: device descriptor read/64, error -71 [ 723.672951][ T5916] usb 3-1: USB disconnect, device number 36 [ 723.783779][ T5916] Unregistered device Elgato EyeTV DTT Deluxe [ 723.807899][ T5916] as10x_usb: device has been disconnected [ 723.854985][ T10] usb usb2-port1: attempt power cycle [ 723.890700][ T5962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.926758][ T5962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.017784][ T5962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.027522][ T5962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.218187][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 724.259676][ T10] usb 2-1: device descriptor read/8, error -71 [ 724.651885][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 724.659267][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 724.666343][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 724.678997][ T24] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 724.688951][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.690343][ T10] usb 2-1: device descriptor read/8, error -71 [ 724.697515][ T24] usb 7-1: Product: syz [ 724.747916][ T24] usb 7-1: Manufacturer: syz [ 724.753031][ T24] usb 7-1: SerialNumber: syz [ 724.804297][ T24] usb 7-1: config 0 descriptor?? [ 724.828331][T13474] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 724.855216][ T10] usb usb2-port1: unable to enumerate USB device [ 724.947615][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 725.013989][ T926] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 725.282407][ T926] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 725.326273][ T926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.351077][ T926] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 725.368696][ T926] usb 3-1: config 1 has no interface number 1 [ 725.386454][ T24] usb 7-1: USB disconnect, device number 14 [ 725.396288][ T926] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 725.436614][ T926] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 725.512615][ T926] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 725.523773][T11483] udevd[11483]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 725.558756][ T926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.599955][ T926] usb 3-1: Product: syz [ 725.612879][ T926] usb 3-1: Manufacturer: syz [ 725.634131][ T926] usb 3-1: SerialNumber: syz [ 726.594923][T13506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1835'. [ 726.778291][ T5946] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 726.928405][ T5946] usb 2-1: Using ep0 maxpacket: 16 [ 726.937022][ T5946] usb 2-1: config 1 interface 0 has no altsetting 0 [ 726.947650][ T5946] usb 2-1: New USB device found, idVendor=046d, idProduct=c70a, bcdDevice= 0.40 [ 726.956828][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.965512][ T5946] usb 2-1: Product: П [ 727.103900][ T5946] usb 2-1: Manufacturer: 闒ᷣ⋙⡃津僱뱛㧧쀸㲃䋎ך颣鋠䍍ႍ싚䅨መ횿๊웤蘭鉗톢툰䭀流ூ臁០℔⇊쾭妀ﴤ㔇輽慌͉๧㏋䅀ᶧ촞㦊鸘⃿༽뵂툷ഛ猥鄱⫷핃銤䃓仆鱃鬒ゃ兑垲빧夝睹鼁Ⰾ麟찷圷蝥聑臗輱ࢹᏃี到緤顚䮔稆⡊鱻瞺똡퍞캕 [ 727.137776][ T5946] usb 2-1: SerialNumber: ᠊ [ 727.248089][ T30] audit: type=1326 audit(1755104813.856:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a28b8ebe9 code=0x7ffc0000 [ 727.301934][ T30] audit: type=1326 audit(1755104813.866:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a28b8ebe9 code=0x7ffc0000 [ 727.364539][ T30] audit: type=1326 audit(1755104813.876:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a28b8ebe9 code=0x7ffc0000 [ 727.418388][ T30] audit: type=1326 audit(1755104813.876:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a28b8ebe9 code=0x7ffc0000 [ 727.458599][ T5946] usbhid 2-1:1.0: can't add hid device: -71 [ 727.464660][ T5946] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 727.488472][ T5946] usb 2-1: USB disconnect, device number 34 [ 727.512626][ T30] audit: type=1326 audit(1755104813.886:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6a28b8ebe9 code=0x7ffc0000 [ 727.665383][ T30] audit: type=1326 audit(1755104813.886:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a28b8ebe9 code=0x7ffc0000 [ 727.692955][ T30] audit: type=1326 audit(1755104813.886:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6a28b8ebe9 code=0x7ffc0000 [ 728.375494][ T30] audit: type=1326 audit(1755104813.886:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a28b8ebe9 code=0x7ffc0000 [ 728.449391][ T926] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 728.459205][ T30] audit: type=1326 audit(1755104813.886:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a28b8ebe9 code=0x7ffc0000 [ 728.480788][ T926] usb 3-1: MIDIStreaming interface descriptor not found [ 728.573779][ T926] usb 3-1: USB disconnect, device number 37 [ 729.725558][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 729.749446][ T30] audit: type=1326 audit(1755104813.886:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13512 comm="syz.0.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f6a28b8ebe9 code=0x7ffc0000 [ 729.774378][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 734.392338][T13547] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1851'. [ 735.520597][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 735.680893][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 735.697447][ T24] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 735.718121][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.726248][ T24] usb 8-1: Product: syz [ 735.738281][ T24] usb 8-1: Manufacturer: syz [ 735.742935][ T24] usb 8-1: SerialNumber: syz [ 735.785550][ T24] r8152-cfgselector 8-1: Unknown version 0x0000 [ 735.798941][ T24] r8152-cfgselector 8-1: config 0 descriptor?? [ 736.058279][ T5893] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 736.320253][ T5893] usb 3-1: config 0 has no interfaces? [ 736.347686][ T5893] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 736.367126][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.385581][ T5893] usb 3-1: Product: syz [ 736.387410][T13570] fuse: Bad value for 'fd' [ 736.397626][ T5893] usb 3-1: Manufacturer: syz [ 736.410961][ T5893] usb 3-1: SerialNumber: syz [ 736.441993][ T5893] usb 3-1: config 0 descriptor?? [ 736.585521][ T24] r8152-cfgselector 8-1: Unknown version 0x0000 [ 736.612964][ T24] r8152-cfgselector 8-1: bad CDC descriptors [ 736.646604][ T24] r8152-cfgselector 8-1: USB disconnect, device number 2 [ 738.011842][T13581] overlayfs: failed to clone upperpath [ 738.241725][T13594] netlink: 'syz.6.1868': attribute type 10 has an invalid length. [ 738.745236][T13594] team0: Port device geneve1 added [ 738.807169][ T926] usb 3-1: USB disconnect, device number 38 [ 739.234576][T13604] fuse: Bad value for 'fd' [ 743.224799][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 743.235669][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 743.262473][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 743.274769][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 743.282744][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 743.386373][T13645] fuse: Bad value for 'fd' [ 743.485828][T13648] afs: Unknown parameter 'smackfsdefB&@$-}&_p [ 743.485828][T13648] U;͏ d+-o9Jw7ic9I/h' [ 743.500583][T13496] bond0: (slave syz_tun): Releasing backup interface [ 743.559702][T13652] tipc: Enabling of bearer rejected, failed to enable media [ 743.639691][T13653] 9pnet_fd: Insufficient options for proto=fd [ 743.737443][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.344788][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1887'. [ 745.142659][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.185685][T13667] netlink: 212360 bytes leftover after parsing attributes in process `syz.7.1891'. [ 745.489097][ T51] Bluetooth: hci3: command tx timeout [ 745.768145][ T5893] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 745.799935][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.349382][ T5893] usb 8-1: config 0 has an invalid interface number: 176 but max is 0 [ 746.408112][ T5893] usb 8-1: config 0 has no interface number 0 [ 746.455375][ T5893] usb 8-1: config 0 interface 176 altsetting 25 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 746.722107][ T5893] usb 8-1: config 0 interface 176 has no altsetting 0 [ 746.812826][ T5893] usb 8-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 746.859269][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.917027][ T5893] usb 8-1: Product: syz [ 746.941487][ T5893] usb 8-1: Manufacturer: syz [ 746.973834][ T5893] usb 8-1: SerialNumber: syz [ 747.024963][ T5893] usb 8-1: config 0 descriptor?? [ 747.067215][T13667] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 747.473189][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.479931][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.528301][ T51] Bluetooth: hci3: command tx timeout [ 747.738472][ T5893] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 747.747658][T13691] fuse: Bad value for 'fd' [ 747.770252][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.828311][ T5893] usb 8-1: USB disconnect, device number 3 [ 748.439367][ T926] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 748.735003][ T926] usb 7-1: Using ep0 maxpacket: 8 [ 748.828413][ T926] usb 7-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 749.004624][ T926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.618347][ T51] Bluetooth: hci3: command tx timeout [ 750.065933][ T926] usb 7-1: config 0 descriptor?? [ 750.311982][ T926] ums-jumpshot 7-1:0.0: USB Mass Storage device detected [ 750.425276][ T926] ums-jumpshot 7-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 750.466676][ T12] bridge_slave_1: left allmulticast mode [ 750.490630][ T12] bridge_slave_1: left promiscuous mode [ 750.532009][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.598685][ T12] bridge_slave_0: left allmulticast mode [ 750.604394][ T12] bridge_slave_0: left promiscuous mode [ 751.052782][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.101703][ T926] usb 7-1: USB disconnect, device number 15 [ 752.155464][ T51] Bluetooth: hci3: command tx timeout [ 753.409830][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1907'. [ 753.552681][T13735] fuse: Bad value for 'fd' [ 753.794392][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 754.080177][ T12] team0: Port device bridge1 removed [ 755.185900][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.658000][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.674569][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 755.686934][ T12] bond0 (unregistering): Released all slaves [ 755.860730][ T12] bond1 (unregistering): Released all slaves [ 756.077993][ T12] bond2 (unregistering): Released all slaves [ 756.090881][ T12] bond3 (unregistering): Released all slaves [ 756.127909][T13638] chnl_net:caif_netlink_parms(): no params data found [ 756.315146][T13750] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 756.330541][T13750] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 756.351683][T13750] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 756.379545][ T12] tipc: Left network mode [ 756.389482][T13765] 9pnet_fd: Insufficient options for proto=fd [ 756.418509][T13750] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 756.461649][T13750] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 756.475736][T13750] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 756.520110][T13750] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 756.681890][T13638] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.722934][T13638] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.770497][T13638] bridge_slave_0: entered allmulticast mode [ 756.798339][ T5946] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 756.818867][T13638] bridge_slave_0: entered promiscuous mode [ 756.865060][T13638] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.984326][ T5946] usb 8-1: Using ep0 maxpacket: 8 [ 757.019578][ T5946] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 757.072407][ T5946] usb 8-1: config 179 has no interface number 0 [ 757.117984][ T5946] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 757.198595][ T5946] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 757.275646][ T5946] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 757.356264][ T5946] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 757.424983][ T5946] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 757.514097][ T5946] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 757.586160][ T5946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.664923][T13764] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 757.730533][ T5946] xpad 8-1:179.65: probe with driver xpad failed with error -5 [ 757.799284][T13638] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.806642][T13638] bridge_slave_1: entered allmulticast mode [ 757.827069][T13638] bridge_slave_1: entered promiscuous mode [ 757.984639][T13787] FAULT_INJECTION: forcing a failure. [ 757.984639][T13787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 758.052197][T13787] CPU: 0 UID: 0 PID: 13787 Comm: syz.6.1924 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 758.052227][T13787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 758.052240][T13787] Call Trace: [ 758.052248][T13787] [ 758.052257][T13787] dump_stack_lvl+0x189/0x250 [ 758.052286][T13787] ? __pfx____ratelimit+0x10/0x10 [ 758.052307][T13787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 758.052330][T13787] ? __pfx__printk+0x10/0x10 [ 758.052354][T13787] ? __might_fault+0xb0/0x130 [ 758.052386][T13787] should_fail_ex+0x414/0x560 [ 758.052413][T13787] _copy_to_iter+0x1db/0x16f0 [ 758.052447][T13787] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 758.052469][T13787] ? __pfx__copy_to_iter+0x10/0x10 [ 758.052492][T13787] ? __pfx_woken_wake_function+0x10/0x10 [ 758.052522][T13787] ? __lock_acquire+0xab9/0xd20 [ 758.052552][T13787] tty_read+0x29b/0x660 [ 758.052578][T13787] ? __pfx_tty_read+0x10/0x10 [ 758.052617][T13787] do_iter_readv_writev+0x56b/0x7f0 [ 758.052643][T13787] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 758.052669][T13787] ? bpf_lsm_file_permission+0x9/0x20 [ 758.052690][T13787] ? security_file_permission+0x75/0x290 [ 758.052714][T13787] ? rw_verify_area+0x258/0x650 [ 758.052749][T13787] vfs_readv+0x253/0x850 [ 758.052779][T13787] ? __pfx_vfs_readv+0x10/0x10 [ 758.052821][T13787] ? __fget_files+0x2a/0x420 [ 758.052848][T13787] ? __fget_files+0x3a0/0x420 [ 758.052869][T13787] ? __fget_files+0x2a/0x420 [ 758.052900][T13787] do_readv+0x14d/0x2d0 [ 758.052926][T13787] ? __pfx_do_readv+0x10/0x10 [ 758.052946][T13787] ? rcu_is_watching+0x15/0xb0 [ 758.052974][T13787] ? do_syscall_64+0xbe/0x3b0 [ 758.053000][T13787] do_syscall_64+0xfa/0x3b0 [ 758.053021][T13787] ? lockdep_hardirqs_on+0x9c/0x150 [ 758.053042][T13787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.053062][T13787] ? clear_bhb_loop+0x60/0xb0 [ 758.053087][T13787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.053110][T13787] RIP: 0033:0x7fa767f8ebe9 [ 758.053128][T13787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 758.053146][T13787] RSP: 002b:00007fa7661cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 758.053177][T13787] RAX: ffffffffffffffda RBX: 00007fa7681b6090 RCX: 00007fa767f8ebe9 [ 758.053193][T13787] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 758.053205][T13787] RBP: 00007fa7661cd090 R08: 0000000000000000 R09: 0000000000000000 [ 758.053218][T13787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.053230][T13787] R13: 00007fa7681b6128 R14: 00007fa7681b6090 R15: 00007ffcdd7a1d08 [ 758.053263][T13787] [ 758.328298][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 758.410935][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 758.488401][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 758.983177][ T5997] usb 8-1: USB disconnect, device number 4 [ 759.511306][T13638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.620730][T13638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.488133][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 760.597583][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 760.685485][T13792] : entered promiscuous mode [ 760.819201][T13803] 9pnet_fd: Insufficient options for proto=fd [ 760.932340][T13638] team0: Port device team_slave_0 added [ 760.984909][T13638] team0: Port device team_slave_1 added [ 761.025900][T13808] kvm: pic: non byte write [ 761.065984][ T12] hsr_slave_0: left promiscuous mode [ 761.209401][ T12] hsr_slave_1: left promiscuous mode [ 761.217390][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.225617][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.242163][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.834349][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.882703][ T12] veth1_macvtap: left promiscuous mode [ 761.892811][ T12] veth0_macvtap: left promiscuous mode [ 761.900814][ T12] veth0_vlan: left promiscuous mode [ 762.578427][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 762.658669][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 763.003884][ T12] pim6reg (unregistering): left allmulticast mode [ 763.004795][T13831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1936'. [ 763.026153][T13831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1936'. [ 763.852302][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 763.852324][ T30] audit: type=1804 audit(1755104850.436:109): pid=13835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1938" name="file0" dev="tmpfs" ino=2505 res=1 errno=0 [ 764.460020][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 766.816331][T13850] 9pnet_fd: Insufficient options for proto=fd [ 767.328514][T13852] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1942'. [ 769.445057][ T12] team0 (unregistering): Port device team_slave_1 removed [ 769.532921][ T12] team0 (unregistering): Port device team_slave_0 removed [ 771.026323][T13638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.058381][T13638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.533392][T13638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.819354][T13638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.855954][T13638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.192982][T13638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.237228][T13876] --map-set only usable from mangle table [ 772.588539][ T5965] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 772.808879][T13638] hsr_slave_0: entered promiscuous mode [ 772.831789][T13638] hsr_slave_1: entered promiscuous mode [ 772.861719][T13884] tipc: New replicast peer: 255.255.255.255 [ 772.884752][T13884] tipc: Enabled bearer , priority 10 [ 772.933761][ T5965] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.952074][ T5965] usb 7-1: config 0 has no interfaces? [ 773.427885][ T5965] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 773.482167][ T5965] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 773.516242][ T5965] usb 7-1: Product: syz [ 773.537167][ T5965] usb 7-1: Manufacturer: syz [ 773.552587][ T5965] usb 7-1: SerialNumber: syz [ 773.581570][ T5965] usb 7-1: config 0 descriptor?? [ 773.748977][T13895] ======================================================= [ 773.748977][T13895] WARNING: The mand mount option has been deprecated and [ 773.748977][T13895] and is ignored by this kernel. Remove the mand [ 773.748977][T13895] option from the mount to silence this warning. [ 773.748977][T13895] ======================================================= [ 773.836497][ T12] IPVS: stop unused estimator thread 0... [ 774.612871][T13902] binder: 13901:13902 ioctl c0306201 0 returned -14 [ 774.988168][ T926] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 774.995971][T13638] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 775.015279][T13638] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 775.044420][T13638] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 775.096762][T13638] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 775.180642][ T10] usb 7-1: USB disconnect, device number 16 [ 775.261153][ T926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.276246][ T926] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 775.286752][ T926] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 775.296180][ T926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.300586][T13638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.322532][ T926] usb 3-1: config 0 descriptor?? [ 775.327453][T13638] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.870295][ T8465] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.877483][ T8465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.899300][ T8465] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.906467][ T8465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.043410][ T5916] usb 3-1: USB disconnect, device number 39 [ 776.248716][T13930] FAULT_INJECTION: forcing a failure. [ 776.248716][T13930] name failslab, interval 1, probability 0, space 0, times 0 [ 776.268776][T13930] CPU: 1 UID: 0 PID: 13930 Comm: syz.7.1962 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 776.268805][T13930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 776.268818][T13930] Call Trace: [ 776.268827][T13930] [ 776.268836][T13930] dump_stack_lvl+0x189/0x250 [ 776.268863][T13930] ? __pfx____ratelimit+0x10/0x10 [ 776.268885][T13930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 776.268908][T13930] ? __pfx__printk+0x10/0x10 [ 776.268940][T13930] ? __pfx___might_resched+0x10/0x10 [ 776.268961][T13930] ? fs_reclaim_acquire+0x7d/0x100 [ 776.268990][T13930] should_fail_ex+0x414/0x560 [ 776.269017][T13930] should_failslab+0xa8/0x100 [ 776.269042][T13930] __kmalloc_noprof+0xcb/0x4f0 [ 776.269060][T13930] ? kfree+0x4d/0x440 [ 776.269086][T13930] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 776.269116][T13930] tomoyo_realpath_from_path+0xe3/0x5d0 [ 776.269143][T13930] ? tomoyo_domain+0xda/0x130 [ 776.269174][T13930] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 776.269196][T13930] tomoyo_path_number_perm+0x1e8/0x5a0 [ 776.269221][T13930] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 776.269262][T13930] ? __lock_acquire+0xab9/0xd20 [ 776.269305][T13930] ? __fget_files+0x2a/0x420 [ 776.269331][T13930] ? __fget_files+0x2a/0x420 [ 776.269352][T13930] ? __fget_files+0x3a0/0x420 [ 776.269373][T13930] ? __fget_files+0x2a/0x420 [ 776.269400][T13930] security_file_ioctl+0xcb/0x2d0 [ 776.269426][T13930] __se_sys_ioctl+0x47/0x170 [ 776.269458][T13930] do_syscall_64+0xfa/0x3b0 [ 776.269478][T13930] ? lockdep_hardirqs_on+0x9c/0x150 [ 776.269500][T13930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.269520][T13930] ? clear_bhb_loop+0x60/0xb0 [ 776.269544][T13930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.269563][T13930] RIP: 0033:0x7f3a2818ebe9 [ 776.269581][T13930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.269598][T13930] RSP: 002b:00007f3a28f1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.269620][T13930] RAX: ffffffffffffffda RBX: 00007f3a283b6090 RCX: 00007f3a2818ebe9 [ 776.269635][T13930] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 776.269648][T13930] RBP: 00007f3a28f1b090 R08: 0000000000000000 R09: 0000000000000000 [ 776.269661][T13930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.269673][T13930] R13: 00007f3a283b6128 R14: 00007f3a283b6090 R15: 00007ffd0be0fec8 [ 776.269713][T13930] [ 776.269722][T13930] ERROR: Out of memory at tomoyo_realpath_from_path. [ 776.506260][T13935] loop4: detected capacity change from 0 to 524255232 [ 777.294395][T13638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.995924][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 780.590085][T13638] veth0_vlan: entered promiscuous mode [ 780.735353][T13638] veth1_vlan: entered promiscuous mode [ 781.134345][T13638] veth0_macvtap: entered promiscuous mode [ 781.297831][T13638] veth1_macvtap: entered promiscuous mode [ 781.320366][T13638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.545909][T13638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.571185][T13638] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.596273][T13638] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.615182][T13638] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.628609][T13638] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.817870][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.845560][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.900337][ T8465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.909495][ T8465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.085053][T14017] libceph: resolve '00' (ret=-3): failed [ 786.164428][T14020] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 786.852488][T14026] FAULT_INJECTION: forcing a failure. [ 786.852488][T14026] name failslab, interval 1, probability 0, space 0, times 0 [ 786.875521][T14026] CPU: 0 UID: 0 PID: 14026 Comm: syz.6.1987 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 786.875549][T14026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 786.875563][T14026] Call Trace: [ 786.875572][T14026] [ 786.875581][T14026] dump_stack_lvl+0x189/0x250 [ 786.875609][T14026] ? __pfx____ratelimit+0x10/0x10 [ 786.875631][T14026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 786.875654][T14026] ? __pfx__printk+0x10/0x10 [ 786.875687][T14026] ? __pfx___might_resched+0x10/0x10 [ 786.875709][T14026] ? fs_reclaim_acquire+0x7d/0x100 [ 786.875738][T14026] should_fail_ex+0x414/0x560 [ 786.875766][T14026] should_failslab+0xa8/0x100 [ 786.875791][T14026] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 786.875812][T14026] ? __alloc_skb+0x112/0x2d0 [ 786.875844][T14026] __alloc_skb+0x112/0x2d0 [ 786.875876][T14026] netlink_ack+0x146/0xa50 [ 786.875900][T14026] ? __pfx_genl_rcv_msg+0x10/0x10 [ 786.875919][T14026] ? ref_tracker_free+0x63a/0x7d0 [ 786.875943][T14026] ? __pfx_ref_tracker_free+0x10/0x10 [ 786.875978][T14026] netlink_rcv_skb+0x28c/0x470 [ 786.876005][T14026] ? __pfx_genl_rcv_msg+0x10/0x10 [ 786.876028][T14026] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 786.876074][T14026] ? down_read+0x1ad/0x2e0 [ 786.876101][T14026] genl_rcv+0x28/0x40 [ 786.876120][T14026] netlink_unicast+0x75c/0x8e0 [ 786.876158][T14026] netlink_sendmsg+0x805/0xb30 [ 786.876204][T14026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 786.876241][T14026] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 786.876261][T14026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 786.876290][T14026] __sock_sendmsg+0x21c/0x270 [ 786.876318][T14026] ____sys_sendmsg+0x505/0x830 [ 786.876354][T14026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 786.876394][T14026] ? import_iovec+0x74/0xa0 [ 786.876425][T14026] ___sys_sendmsg+0x21f/0x2a0 [ 786.876459][T14026] ? __pfx____sys_sendmsg+0x10/0x10 [ 786.876529][T14026] ? __fget_files+0x2a/0x420 [ 786.876551][T14026] ? __fget_files+0x3a0/0x420 [ 786.876585][T14026] __x64_sys_sendmsg+0x19b/0x260 [ 786.876618][T14026] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 786.876659][T14026] ? __pfx_ksys_write+0x10/0x10 [ 786.876676][T14026] ? rcu_is_watching+0x15/0xb0 [ 786.876704][T14026] ? do_syscall_64+0xbe/0x3b0 [ 786.876731][T14026] do_syscall_64+0xfa/0x3b0 [ 786.876752][T14026] ? lockdep_hardirqs_on+0x9c/0x150 [ 786.876773][T14026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.876793][T14026] ? clear_bhb_loop+0x60/0xb0 [ 786.876818][T14026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.876837][T14026] RIP: 0033:0x7fa767f8ebe9 [ 786.876856][T14026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.876873][T14026] RSP: 002b:00007fa7661ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 786.876894][T14026] RAX: ffffffffffffffda RBX: 00007fa7681b5fa0 RCX: 00007fa767f8ebe9 [ 786.876909][T14026] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 786.876923][T14026] RBP: 00007fa7661ee090 R08: 0000000000000000 R09: 0000000000000000 [ 786.876936][T14026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.876947][T14026] R13: 00007fa7681b6038 R14: 00007fa7681b5fa0 R15: 00007ffcdd7a1d08 [ 786.876981][T14026] [ 787.414169][T14031] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 788.294801][T14043] ------------[ cut here ]------------ [ 788.301177][T14043] WARNING: CPU: 0 PID: 14043 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 788.311205][T14043] Modules linked in: [ 788.315586][T14043] CPU: 0 UID: 0 PID: 14043 Comm: syz.7.1991 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 788.325793][T14043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 788.339380][T14043] RIP: 0010:folio_memcg+0x1a8/0x310 [ 788.344747][T14043] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 788.348229][T14045] netlink: 'syz.7.1991': attribute type 1 has an invalid length. [ 788.364492][T14043] RSP: 0018:ffffc90004a27250 EFLAGS: 00010283 [ 788.364547][T14043] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 788.387037][T14043] RDX: ffffc900116b9000 RSI: 0000000000001c91 RDI: 0000000000001c92 [ 788.395190][T14043] RBP: 0000000000000000 R08: ffffea0001de5b07 R09: 1ffffd40003bcb60 [ 788.403332][T14043] R10: dffffc0000000000 R11: fffff940003bcb61 R12: ffffea0001de5b30 [ 788.413004][T14043] R13: dffffc0000000000 R14: ffff888059517b00 R15: 0000000000000002 [ 788.421387][T14043] FS: 00007f3a28f1b6c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 788.430671][T14043] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 788.437466][T14043] CR2: 0000000000000000 CR3: 0000000044560000 CR4: 00000000003526f0 [ 788.445596][T14043] Call Trace: [ 788.449076][T14043] [ 788.452086][T14043] workingset_activation+0x5f/0x4a0 [ 788.457366][T14043] ? folio_mark_accessed+0x361/0x4a0 [ 788.463083][T14043] folio_mark_accessed+0x3b5/0x4a0 [ 788.468388][T14043] kvm_release_page_clean+0x9a/0xe0 [ 788.473672][T14043] kvm_tdp_page_fault+0x2dd/0x370 [ 788.478957][T14043] kvm_mmu_do_page_fault+0x2c5/0x640 [ 788.484773][T14043] ? vmx_vcpu_run+0xd8b/0x25d0 [ 788.489792][T14043] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 788.495743][T14043] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 788.501444][T14043] kvm_mmu_page_fault+0x22f/0xb70 [ 788.506559][T14043] ? __pfx_handle_ept_violation+0x10/0x10 [ 788.512470][T14043] vmx_handle_exit+0x1090/0x18a0 [ 788.517488][T14043] ? vcpu_run+0x361c/0x6f70 [ 788.522205][T14043] vcpu_run+0x432e/0x6f70 [ 788.526656][T14043] ? vcpu_run+0x361c/0x6f70 [ 788.531357][T14043] ? __pfx_vcpu_run+0x10/0x10 [ 788.536088][T14043] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 788.542074][T14043] ? rcu_is_watching+0x15/0xb0 [ 788.546901][T14043] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 788.552804][T14043] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 788.558715][T14043] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 788.564771][T14043] ? rcu_is_watching+0x15/0xb0 [ 788.569757][T14043] ? look_up_lock_class+0x74/0x170 [ 788.574931][T14043] ? register_lock_class+0x51/0x320 [ 788.580315][T14043] ? __lock_acquire+0xab9/0xd20 [ 788.585390][T14043] kvm_vcpu_ioctl+0x95c/0xe90 [ 788.590736][T14043] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 788.596096][T14043] ? __lock_acquire+0xab9/0xd20 [ 788.601182][T14043] ? __asan_memset+0x22/0x50 [ 788.605870][T14043] ? smack_file_ioctl+0x302/0x340 [ 788.611098][T14043] ? __pfx_smack_file_ioctl+0x10/0x10 [ 788.616557][T14043] ? __fget_files+0x2a/0x420 [ 788.621298][T14043] ? __fget_files+0x3a0/0x420 [ 788.626066][T14043] ? __fget_files+0x2a/0x420 [ 788.631024][T14043] ? bpf_lsm_file_ioctl+0x9/0x20 [ 788.636031][T14043] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 788.641410][T14043] __se_sys_ioctl+0xfc/0x170 [ 788.646083][T14043] do_syscall_64+0xfa/0x3b0 [ 788.652397][T14043] ? lockdep_hardirqs_on+0x9c/0x150 [ 788.657663][T14043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.663947][T14043] ? clear_bhb_loop+0x60/0xb0 [ 788.668779][T14043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.674756][T14043] RIP: 0033:0x7f3a2818ebe9 [ 788.679363][T14043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.699876][T14043] RSP: 002b:00007f3a28f1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 788.708529][T14043] RAX: ffffffffffffffda RBX: 00007f3a283b6090 RCX: 00007f3a2818ebe9 [ 788.716554][T14043] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 788.724800][T14043] RBP: 00007f3a28211e19 R08: 0000000000000000 R09: 0000000000000000 [ 788.732951][T14043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.741070][T14043] R13: 00007f3a283b6128 R14: 00007f3a283b6090 R15: 00007ffd0be0fec8 [ 788.749314][T14043] [ 788.752387][T14043] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 788.759677][T14043] CPU: 0 UID: 0 PID: 14043 Comm: syz.7.1991 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 788.769644][T14043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 788.779716][T14043] Call Trace: [ 788.782994][T14043] [ 788.785915][T14043] dump_stack_lvl+0x99/0x250 [ 788.790501][T14043] ? __asan_memcpy+0x40/0x70 [ 788.795099][T14043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 788.800327][T14043] ? __pfx__printk+0x10/0x10 [ 788.804915][T14043] panic+0x2db/0x790 [ 788.808890][T14043] ? __pfx_panic+0x10/0x10 [ 788.813387][T14043] __warn+0x31b/0x4b0 [ 788.817385][T14043] ? folio_memcg+0x1a8/0x310 [ 788.821980][T14043] ? folio_memcg+0x1a8/0x310 [ 788.826577][T14043] report_bug+0x2be/0x4f0 [ 788.830899][T14043] ? folio_memcg+0x1a8/0x310 [ 788.835478][T14043] ? folio_memcg+0x1a8/0x310 [ 788.840053][T14043] ? folio_memcg+0x1aa/0x310 [ 788.844632][T14043] handle_bug+0x84/0x160 [ 788.848885][T14043] exc_invalid_op+0x1a/0x50 [ 788.853428][T14043] asm_exc_invalid_op+0x1a/0x20 [ 788.858268][T14043] RIP: 0010:folio_memcg+0x1a8/0x310 [ 788.863462][T14043] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 788.883063][T14043] RSP: 0018:ffffc90004a27250 EFLAGS: 00010283 [ 788.889122][T14043] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 788.897087][T14043] RDX: ffffc900116b9000 RSI: 0000000000001c91 RDI: 0000000000001c92 [ 788.905054][T14043] RBP: 0000000000000000 R08: ffffea0001de5b07 R09: 1ffffd40003bcb60 [ 788.913021][T14043] R10: dffffc0000000000 R11: fffff940003bcb61 R12: ffffea0001de5b30 [ 788.921004][T14043] R13: dffffc0000000000 R14: ffff888059517b00 R15: 0000000000000002 [ 788.929079][T14043] ? folio_memcg+0x1a7/0x310 [ 788.933669][T14043] workingset_activation+0x5f/0x4a0 [ 788.938895][T14043] ? folio_mark_accessed+0x361/0x4a0 [ 788.944197][T14043] folio_mark_accessed+0x3b5/0x4a0 [ 788.949318][T14043] kvm_release_page_clean+0x9a/0xe0 [ 788.954512][T14043] kvm_tdp_page_fault+0x2dd/0x370 [ 788.959535][T14043] kvm_mmu_do_page_fault+0x2c5/0x640 [ 788.964813][T14043] ? vmx_vcpu_run+0xd8b/0x25d0 [ 788.969581][T14043] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 788.975390][T14043] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 788.980925][T14043] kvm_mmu_page_fault+0x22f/0xb70 [ 788.985942][T14043] ? __pfx_handle_ept_violation+0x10/0x10 [ 788.991651][T14043] vmx_handle_exit+0x1090/0x18a0 [ 788.996635][T14043] ? vcpu_run+0x361c/0x6f70 [ 789.001137][T14043] vcpu_run+0x432e/0x6f70 [ 789.005475][T14043] ? vcpu_run+0x361c/0x6f70 [ 789.009992][T14043] ? __pfx_vcpu_run+0x10/0x10 [ 789.014677][T14043] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 789.020402][T14043] ? rcu_is_watching+0x15/0xb0 [ 789.025154][T14043] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 789.030711][T14043] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 789.036418][T14043] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 789.042392][T14043] ? rcu_is_watching+0x15/0xb0 [ 789.047159][T14043] ? look_up_lock_class+0x74/0x170 [ 789.052263][T14043] ? register_lock_class+0x51/0x320 [ 789.057890][T14043] ? __lock_acquire+0xab9/0xd20 [ 789.062744][T14043] kvm_vcpu_ioctl+0x95c/0xe90 [ 789.067419][T14043] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 789.072606][T14043] ? __lock_acquire+0xab9/0xd20 [ 789.077445][T14043] ? __asan_memset+0x22/0x50 [ 789.082030][T14043] ? smack_file_ioctl+0x302/0x340 [ 789.087069][T14043] ? __pfx_smack_file_ioctl+0x10/0x10 [ 789.092450][T14043] ? __fget_files+0x2a/0x420 [ 789.097041][T14043] ? __fget_files+0x3a0/0x420 [ 789.101708][T14043] ? __fget_files+0x2a/0x420 [ 789.106315][T14043] ? bpf_lsm_file_ioctl+0x9/0x20 [ 789.111255][T14043] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 789.116444][T14043] __se_sys_ioctl+0xfc/0x170 [ 789.121041][T14043] do_syscall_64+0xfa/0x3b0 [ 789.125530][T14043] ? lockdep_hardirqs_on+0x9c/0x150 [ 789.130715][T14043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.136765][T14043] ? clear_bhb_loop+0x60/0xb0 [ 789.141428][T14043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.147318][T14043] RIP: 0033:0x7f3a2818ebe9 [ 789.151721][T14043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 789.171493][T14043] RSP: 002b:00007f3a28f1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 789.179896][T14043] RAX: ffffffffffffffda RBX: 00007f3a283b6090 RCX: 00007f3a2818ebe9 [ 789.187854][T14043] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 789.195843][T14043] RBP: 00007f3a28211e19 R08: 0000000000000000 R09: 0000000000000000 [ 789.203809][T14043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.211779][T14043] R13: 00007f3a283b6128 R14: 00007f3a283b6090 R15: 00007ffd0be0fec8 [ 789.219751][T14043] [ 789.223035][T14043] Kernel Offset: disabled [ 789.227359][T14043] Rebooting in 86400 seconds..