last executing test programs: 53m40.22103586s ago: executing program 32 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) setgroups(0x0, 0x0) lseek(r4, 0x10000000005, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a000000"], 0xd) 44m12.099955379s ago: executing program 3 (id=1688): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed", 0x50}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x232) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 44m11.751203785s ago: executing program 3 (id=1691): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781", 0x1d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6", 0x11}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200cfc2001000000000000000000000f313f6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9"], 0x232) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 44m11.451918418s ago: executing program 3 (id=1694): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0xffd, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x4898, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 44m10.018966823s ago: executing program 3 (id=1696): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4", 0x3a}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43f", 0x10}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x232) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 44m9.422381333s ago: executing program 3 (id=1698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x64000600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000000)='\x00\x00MB\xcdl\xf5\b\x00\x00\x00\x00\x00\x00\x00\xf5^\xdb=') 44m6.681356287s ago: executing program 3 (id=1706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x64000600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000000)='\x00\x00MB\xcdl\xf5\b\x00\x00\x00\x00\x00\x00\x00\xf5^\xdb=') 43m49.563340168s ago: executing program 33 (id=1706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x64000600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000000)='\x00\x00MB\xcdl\xf5\b\x00\x00\x00\x00\x00\x00\x00\xf5^\xdb=') 32m16.923126053s ago: executing program 1 (id=3412): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 32m14.406561404s ago: executing program 1 (id=3416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000180)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 32m12.291370151s ago: executing program 1 (id=3418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getrandom(0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000000)='./file1\x00') symlink(0x0, &(0x7f0000000240)='./file0\x00') mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2712, &(0x7f00000003c0)=""/102394, 0x0) 32m11.158547303s ago: executing program 1 (id=3420): syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80809, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0xffca}}, 0x1014) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000a80)={{r2}, "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"}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$vim2m(0x0, 0x7f, 0x2) 32m5.912814031s ago: executing program 1 (id=3428): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r4}, 0x38) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') getdents(r7, &(0x7f0000000380)=""/200, 0x1d) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}]}}]}, 0x38}}, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r9) 31m58.930571678s ago: executing program 1 (id=3442): syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80809, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0xffca}}, 0x1014) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) 31m42.922377405s ago: executing program 34 (id=3442): syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80809, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0xffca}}, 0x1014) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) 29m7.240782614s ago: executing program 2 (id=3828): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) memfd_create(0x0, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000d53000/0x2000)=nil, 0x2000, 0x3000002, 0x20012, 0xffffffffffffffff, 0x100000000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x20008000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf255c0000000800", @ANYRES32=0x0, @ANYBLOB="0800430b0000000000006b00f000000008006b001c02000008006b003c00000008006b000a000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "01019002", "9ecb592c6ee49fbd"}, 0x28) socket$kcm(0x10, 0xe90d7e3c28e7031, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x8) dup(0xffffffffffffffff) 29m4.894495063s ago: executing program 2 (id=3835): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a", 0x4b}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x232) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 29m4.566654875s ago: executing program 2 (id=3837): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0xffff, @multicast2}, {0x0, @local}, 0x2, {0x2, 0x4e23, @multicast1}, 'wg1\x00'}) 29m2.803400617s ago: executing program 2 (id=3840): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x7e) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='1-6:5/', @ANYRESOCT], 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x2004, &(0x7f0000000680)) 29m0.324387654s ago: executing program 2 (id=3847): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a", 0x4b}], 0x1}, 0x20048050) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x232) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 28m57.835951554s ago: executing program 2 (id=3852): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup(r3) ioctl$USBDEVFS_GET_SPEED(r4, 0x551f) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x8000000}) bpf$MAP_CREATE(0x3f000000, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r5, 0x0, 0xffffffff}, 0x18) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0xffffffff, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x50) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r7, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x81044d03, &(0x7f0000000000)) 28m41.684661482s ago: executing program 35 (id=3852): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup(r3) ioctl$USBDEVFS_GET_SPEED(r4, 0x551f) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x8000000}) bpf$MAP_CREATE(0x3f000000, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r5, 0x0, 0xffffffff}, 0x18) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0xffffffff, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x50) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r7, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x81044d03, &(0x7f0000000000)) 10m44.888435615s ago: executing program 7 (id=6807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @my=0x0, 0x0, 0x0, 0x420005e, 0x0, 0x9, 0x5, 0x200000}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000440)={@hyper}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @host, 0x0, 0x0, 0x20005e}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x2, {0x3}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000076000907010000000000000007020000", @ANYRES32=0x0, @ANYBLOB="07000d80"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x0, 0x8c}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) 10m43.736119484s ago: executing program 7 (id=6810): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4", 0x3a}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x232) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) 10m43.59669946s ago: executing program 7 (id=6813): r0 = socket(0xa, 0x3, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000005c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x18, 0x48810}}], 0x2, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x810, r0, 0x180000000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 10m42.787633242s ago: executing program 7 (id=6817): syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0xff2e) gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x8, 0x800000000004, @thr={&(0x7f0000000100)="d5e0054c1e2969827c5b55ea8f9acec534fe26916e253f93e2e2de8e30b6b620e46c605d81f35ada9acc933c3082fd3b12b7bf3f7aac912b2625028899cc96d4fd6ccf1f4042cab00d2fbe369a54ffcf6a58c6e8f626d2cee5237889b90daf3dcc69497e99c0ea5402444ae73701d5a6d049278b459fa29c1d9d19493a9b979e4e4958252f5cc8df7c88614e19ca4bb22cffe2854e891ea1f7e45b520bb1df741d224492f33a111058b783df808305da2e77a34265842a8af1fed085466350ad1931aacfb3dd800c", &(0x7f00000002c0)="d669ba889f2b227fe5c878600d97c37737184cac35fe9c304e7594ed2792dd4c447af18338b67605f05dca0edb21148741f49f4416210ae2c7b6e5aad5f706b897c054622fb1e465a2dfd3b3dcaf48e043b5fe3dd9b3d5619bd7dc67d8b41926e4813823931ff12bb0d02a3a41a061d72b73b8d79091e2b98aeb92cdac3388cae9a62aa7672c71cf8d8e1662929c560691181411708aa61acd7e4be52b7898b18db8a32e0e4ad58a5f3de72b42854c67eb6bdca18f02f489cb2b716a114febec98bbd31650aac808ba8e4b2e25841491634e527ae511cdd96fb59f392dfe126d0e41919570825abad16e65f94dd22a"}}, &(0x7f0000bbdffc)) rt_sigsuspend(&(0x7f0000000180)={[0x8]}, 0x8) unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000001400ffffffff850000000000000095000000000000009ead833b7a8f28cb9a6a99e68f90ed72333df0ebd46c390904cb7d6413b50330ee093eab42c4268d63d61b40a5b75058e153dc59be007200b2ab220b74a95b06b0785ca6439c03b344f14ccb0e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r4, 0x58, &(0x7f0000000200)}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xeca5, 0x0, 0x12, 0x6, 0x11, "bd6e0297ccb43f08cf8eff6979ec21afca95d108c28408fb4d8d905f4b4a0ee6edef391686ab864e5b8458fc86a96d489d4744211af48fa9eaccf654b2f0d6fb", "31beedb6f799deedf140962be6d9456eb13788f2bedfc70e5627e2436ec4127aab320c5398c1c60f1989976d6917b446c2330377bc9d91365173856552a813bd", "fd58fb3c55434a2bb74d22e43ed8b5d096876e1f50769c261bf0ce62d9ccd953", [0x6, 0x4]}) 10m41.539201726s ago: executing program 7 (id=6821): semget$private(0x0, 0x5, 0x0) semctl$GETNCNT(0x0, 0x4, 0xe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x5, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000140000000000000000000000040000000000", @ANYRESDEC=r1, @ANYRES32], 0x48) r2 = openat(r1, &(0x7f00000002c0)='./file0\x00', 0x481, 0x42) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000001100)={0x4000, 0x1000, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2608c500130d6eef, 0x50, r1, 0x137c0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1200000001000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000083101e666d123235ee1d6af4bdfc80e4a8c2da8d931ade4f42b3c8a81a4032925e75c104f640bc366747e84d0b5be0c38a0ef00d13f30788f1272f2ba83d6395fba862b9a08fa0c7a8bb54afb4bf0e808ff119c18a6e239ed56c61374fc2e5bf2dce13d1836c36b5a706044a30264b49d274197fad76614e83d7b8440cd88d66f44e98f742d7b3b504110bd63c26efa231f7d1227491b7eab1d2b659f4235425c6348bdc26bd0cb6eb6e5da5fb0c049ee0c572908c4d442fabdbeed72e772148d4d2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000180)=0x10) pread64(r4, &(0x7f0000001080)=""/80, 0x50, 0x8000000000000001) connect$unix(r3, &(0x7f0000001180)=@file={0x0, './file0\x00'}, 0xffffffffffffff11) getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@bloom_filter={0x1e, 0x0, 0x8001, 0x0, 0x400, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x5}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r7, 0x0, &(0x7f0000000200)=""/76}, 0x20) 10m41.399992159s ago: executing program 7 (id=6823): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4", 0x3a}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200cfc2001000000000000000000000f313f6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b17dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f39"], 0x232) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) 10m25.535989796s ago: executing program 36 (id=6823): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4", 0x3a}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x232) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) 2m41.690309596s ago: executing program 8 (id=7953): syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x8, 0x800000000004, @thr={&(0x7f0000000100)="d5e0054c1e2969827c5b55ea8f9acec534fe26916e253f93e2e2de8e30b6b620e46c605d81f35ada9acc933c3082fd3b12b7bf3f7aac912b2625028899cc96d4fd6ccf1f4042cab00d2fbe369a54ffcf6a58c6e8f626d2cee5237889b90daf3dcc69497e99c0ea5402444ae73701d5a6d049278b459fa29c1d9d19493a9b979e4e4958252f5cc8df7c88614e19ca4bb22cffe2854e891ea1f7e45b520bb1df741d224492f33a111058b783df808305da2e77a34265842a8af1fed085466350ad1931aacfb3dd800c", &(0x7f00000002c0)="d669ba889f2b227fe5c878600d97c37737184cac35fe9c304e7594ed2792dd4c447af18338b67605f05dca0edb21148741f49f4416210ae2c7b6e5aad5f706b897c054622fb1e465a2dfd3b3dcaf48e043b5fe3dd9b3d5619bd7dc67d8b41926e4813823931ff12bb0d02a3a41a061d72b73b8d79091e2b98aeb92cdac3388cae9a62aa7672c71cf8d8e1662929c560691181411708aa61acd7e4be52b7898b18db8a32e0e4ad58a5f3de72b42854c67eb6bdca18f02f489cb2b716a114febec98bbd31650aac808ba8e4b2e25841491634e527ae511cdd96fb59f392dfe126d0e41919570825abad16e65f94dd22a"}}, &(0x7f0000bbdffc)) rt_sigsuspend(&(0x7f0000000180)={[0x8]}, 0x8) unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000001400ffffffff850000000000000095000000000000009ead833b7a8f28cb9a6a99e68f90ed72333df0ebd46c390904cb7d6413b50330ee093eab42c4268d63d61b40a5b75058e153dc59be007200b2ab220b74a95b06b0785ca6439c03b344f14ccb0e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xeca5, 0x0, 0x12, 0x6, 0x11, "bd6e0297ccb43f08cf8eff6979ec21afca95d108c28408fb4d8d905f4b4a0ee6edef391686ab864e5b8458fc86a96d489d4744211af48fa9eaccf654b2f0d6fb", "31beedb6f799deedf140962be6d9456eb13788f2bedfc70e5627e2436ec4127aab320c5398c1c60f1989976d6917b446c2330377bc9d91365173856552a813bd", "fd58fb3c55434a2bb74d22e43ed8b5d096876e1f50769c261bf0ce62d9ccd953", [0x6, 0x4]}) 2m40.029723731s ago: executing program 8 (id=7955): fsopen(&(0x7f0000000140)='configfs\x00', 0x1) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0, 0x75}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[]) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ptrace$peeksig(0x4209, 0x0, &(0x7f00000000c0)={0x65, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f00003b7000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x24}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x104, 0x4, 0x3a0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x0}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) 2m37.850102784s ago: executing program 8 (id=7958): syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x8, 0x800000000004, @thr={&(0x7f0000000100)="d5e0054c1e2969827c5b55ea8f9acec534fe26916e253f93e2e2de8e30b6b620e46c605d81f35ada9acc933c3082fd3b12b7bf3f7aac912b2625028899cc96d4fd6ccf1f4042cab00d2fbe369a54ffcf6a58c6e8f626d2cee5237889b90daf3dcc69497e99c0ea5402444ae73701d5a6d049278b459fa29c1d9d19493a9b979e4e4958252f5cc8df7c88614e19ca4bb22cffe2854e891ea1f7e45b520bb1df741d224492f33a111058b783df808305da2e77a34265842a8af1fed085466350ad1931aacfb3dd800c", &(0x7f00000002c0)="d669ba889f2b227fe5c878600d97c37737184cac35fe9c304e7594ed2792dd4c447af18338b67605f05dca0edb21148741f49f4416210ae2c7b6e5aad5f706b897c054622fb1e465a2dfd3b3dcaf48e043b5fe3dd9b3d5619bd7dc67d8b41926e4813823931ff12bb0d02a3a41a061d72b73b8d79091e2b98aeb92cdac3388cae9a62aa7672c71cf8d8e1662929c560691181411708aa61acd7e4be52b7898b18db8a32e0e4ad58a5f3de72b42854c67eb6bdca18f02f489cb2b716a114febec98bbd31650aac808ba8e4b2e25841491634e527ae511cdd96fb59f392dfe126d0e41919570825abad16e65f94dd22a"}}, &(0x7f0000bbdffc)) rt_sigsuspend(&(0x7f0000000180)={[0x8]}, 0x8) unshare(0x2c020400) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xfffffffffffffff3, 0x80040) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xeca5, 0x0, 0x12, 0x6, 0x11, "bd6e0297ccb43f08cf8eff6979ec21afca95d108c28408fb4d8d905f4b4a0ee6edef391686ab864e5b8458fc86a96d489d4744211af48fa9eaccf654b2f0d6fb", "31beedb6f799deedf140962be6d9456eb13788f2bedfc70e5627e2436ec4127aab320c5398c1c60f1989976d6917b446c2330377bc9d91365173856552a813bd", "fd58fb3c55434a2bb74d22e43ed8b5d096876e1f50769c261bf0ce62d9ccd953", [0x6, 0x4]}) 2m36.168596123s ago: executing program 8 (id=7962): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xfffffffd, 0x61, 0x14, 0x90}, [@ldst={0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xc4b3, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000440)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10042008) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x49d0, &(0x7f00000005c0)={0x0, 0xfa56, 0x4, 0x1, 0x236, 0x0, r1}, &(0x7f0000000400), 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x24035, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) writev(r3, &(0x7f0000000500)=[{&(0x7f00000000c0)="e97c678e43bc10903e6ef9ab4640b5084cc97f6c033a1ca8e9f012f4afa7a71d6bdc914bf699107705a3599ccf061941524842e779f7c7c11c5223d7155cc2fb8071f8f5b5a722a06b0275974491e047e5913c6662724d33b7e097b12bee27086e70268aff05b3952724c4d22ec8f8e1659d94d9016fb813edee", 0x7a}, {&(0x7f00000001c0)="fe6ba556c55de2a66cded70eee574f17cce36eeed0b95b161f6cc36eac4d475d4ec4861a9c1119481bc6070f81031b6ef177d2d5a8b1c0d29c8f", 0x3a}, {&(0x7f0000000200)="202c7b93ac2dd87e5b6e92c12ba2aba3", 0x10}, {&(0x7f0000000280)="96b3a3198ae1", 0x6}, {&(0x7f0000000380)="fed891b2f1e95493f4b38f8a921996b18828b0263d12488adacdcffb319b2f3a55ae3962cd3c014fa4c2df6c2eb85559976644536676d54dc34efe5f4eea0d8a1af3bb70c6628d17a4cd3112e944051ccb8a8c274b59453a3da1d92f7e2b1cb40f20802a747abc9878b1a4ed16", 0x6d}, {&(0x7f0000000400)="1043866fecca092df09bbab51d1339962612a597ec8f7d67e6f54177b76a511decc72806185a6aa87fe073b4d1d5cc8807f4ee15e6004657443e502331159fdfaafdf074ad4526c121b7d62a471a01b9e07f92", 0x53}, {&(0x7f0000000480)="e05ca0f4c51c129b1b616fe6931ea18df41d2882d133b8e50b2c7cd9a68022213eb59056bd90cdafaa3149c425c274390c1e3e3b321de464b2a90da9c0a3219275c6cc686f620387b00fe7e754f84135a6652332228936d95a4cb9d5f13092404c6532c3bee1f0e042d758c18acaadc4d611c7aa653809febe6e", 0x7a}], 0x7) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000300)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x7, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000000)=0x2) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000080)={@any, 0x4}) 2m33.941539919s ago: executing program 8 (id=7969): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, r0, &(0x7f0000000000)=0x4, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x1e8, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x8, 0x300) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r7, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, 0xc, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000600)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000680)={0x48, 0x1, r9, 0x0, 0x3, 0x290}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r11 = geteuid() setuid(r11) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000700)={r0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)={0x1c, r8, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) 2m31.804963257s ago: executing program 8 (id=7973): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000206110110000000006977000000000005000100070000000900020073797a30000000000c00078008000600000000000d000300686173683a6e65740000000005000500000000000500040000000000"], 0x54}, 0x1, 0x0, 0x0, 0x8044}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r3], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) 2m15.773813568s ago: executing program 37 (id=7973): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000206110110000000006977000000000005000100070000000900020073797a30000000000c00078008000600000000000d000300686173683a6e65740000000005000500000000000500040000000000"], 0x54}, 0x1, 0x0, 0x0, 0x8044}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r3], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) 16.995318768s ago: executing program 6 (id=8298): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) creat(0x0, 0x10) mknod(0x0, 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000100)={0x141100}, 0x18) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file0\x00', &(0x7f00000000c0)={0x400000, 0x18, 0x4}, 0x18) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x3, {0x1, 0x1, 0x200000, 0x3, 0xfffffffe, 0x0, {0x4, 0xe, 0xfff7fffffffffffc, 0xffffffdffffffff7, 0x9, 0xfffffffffffffffe, 0x0, 0xfffffffb, 0x0, 0x2000, 0x7ff, 0x0, 0xee01, 0x6, 0x46}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.964655211s ago: executing program 5 (id=8300): syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0xff2e) gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x8, 0x800000000004, @thr={&(0x7f0000000100)="d5e0054c1e2969827c5b55ea8f9acec534fe26916e253f93e2e2de8e30b6b620e46c605d81f35ada9acc933c3082fd3b12b7bf3f7aac912b2625028899cc96d4fd6ccf1f4042cab00d2fbe369a54ffcf6a58c6e8f626d2cee5237889b90daf3dcc69497e99c0ea5402444ae73701d5a6d049278b459fa29c1d9d19493a9b979e4e4958252f5cc8df7c88614e19ca4bb22cffe2854e891ea1f7e45b520bb1df741d224492f33a111058b783df808305da2e77a34265842a8af1fed085466350ad1931aacfb3dd800c", &(0x7f00000002c0)="d669ba889f2b227fe5c878600d97c37737184cac35fe9c304e7594ed2792dd4c447af18338b67605f05dca0edb21148741f49f4416210ae2c7b6e5aad5f706b897c054622fb1e465a2dfd3b3dcaf48e043b5fe3dd9b3d5619bd7dc67d8b41926e4813823931ff12bb0d02a3a41a061d72b73b8d79091e2b98aeb92cdac3388cae9a62aa7672c71cf8d8e1662929c560691181411708aa61acd7e4be52b7898b18db8a32e0e4ad58a5f3de72b42854c67eb6bdca18f02f489cb2b716a114febec98bbd31650aac808ba8e4b2e25841491634e527ae511cdd96fb59f392dfe126d0e41919570825abad16e65f94dd22a"}}, &(0x7f0000bbdffc)) rt_sigsuspend(&(0x7f0000000180)={[0x8]}, 0x8) unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000001400ffffffff850000000000000095000000000000009ead833b7a8f28cb9a6a99e68f90ed72333df0ebd46c390904cb7d6413b50330ee093eab42c4268d63d61b40a5b75058e153dc59be007200b2ab220b74a95b06b0785ca6439c03b344f14ccb0e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xeca5, 0x0, 0x12, 0x6, 0x11, "bd6e0297ccb43f08cf8eff6979ec21afca95d108c28408fb4d8d905f4b4a0ee6edef391686ab864e5b8458fc86a96d489d4744211af48fa9eaccf654b2f0d6fb", "31beedb6f799deedf140962be6d9456eb13788f2bedfc70e5627e2436ec4127aab320c5398c1c60f1989976d6917b446c2330377bc9d91365173856552a813bd", "fd58fb3c55434a2bb74d22e43ed8b5d096876e1f50769c261bf0ce62d9ccd953", [0x6, 0x4]}) 15.879451864s ago: executing program 6 (id=8301): fsopen(&(0x7f0000000140)='configfs\x00', 0x1) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0, 0x75}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[]) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x80800, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ptrace$peeksig(0x4209, 0x0, &(0x7f00000000c0)={0x65, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f00003b7000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x24}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x104, 0x4, 0x3a0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x0}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) 14.707906872s ago: executing program 5 (id=8304): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0xb, 0x1761, 0x10, 0x2, 0x1, 0x1, 0x4, {0x0, @in={{0x2, 0x4e23, @multicast2}}, 0xffffff2b, 0x80000000, 0x7ff, 0x7fffffff, 0x400}}, &(0x7f00000000c0)=0xb0) 13.542625259s ago: executing program 5 (id=8306): syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000300)=r3, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 13.096268041s ago: executing program 6 (id=8309): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0022220000002b1e79b9f754a3d4fb927590ee"], 0x0}, 0x0) 9.955937499s ago: executing program 5 (id=8316): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401fc9bf44f5848c11a08"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x54) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r7, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5}) 9.562161122s ago: executing program 5 (id=8318): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0xf0, 0x71, 0x10, 0x4c}}, &(0x7f0000000480)='GPL\x00'}, 0x80) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x84000) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) r8 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r8, &(0x7f0000000340)="994a61dec106cf3b9752a4f88bcfa35318f84e83af0d68b3730b9e6ec5b27ce09bed7748740e0322e6cba2c7cb953c5d30f0ec103be590d65461ca91309b2ae58f32924577b27a7ce1c8f00616ba9b095906840ab269ab2dddcc99ed58883fa9316f01fa8243ab304474b2695fa96195db5795a8375313ac8970118d6a91ad57e3ca3e6b4ba80a5dfcc33c60cefc585b7d3bbcf98893330d0e151dfdeb9d566ee64312faca723c058b9d521dd76f89586cdeab40f8d64fe22ccb866d7c95dbc383a0ace22358bda295ee5163b4fe035855767ea197c0", 0xd6, 0xc041, &(0x7f0000000100)={0x23, 0x9, 0xf7, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 8.656054233s ago: executing program 4 (id=8319): syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f0000000600), &(0x7f00000006c0)=@v3={0x3000000, [{0x0, 0x6}, {0x400, 0x7}], r1}, 0x18, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r3, &(0x7f0000000000), 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f00000004c0)={0x0}}, 0x404004c) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x1}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, 0x0) 8.624323802s ago: executing program 9 (id=8320): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2ac8c0, 0x0) ioctl$COMEDI_UNLOCK(r0, 0x6406) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x29, 0x81, 0x8, 0x8, 0x0, @loopback, @rand_addr=' \x01\x00', 0x7, 0x80, 0x3ae, 0x3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r3, &(0x7f0000002180)=""/4101, 0x1005, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c1000000000", 0x53}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010612b06d77e680ae0d1717e00cc6016915a44a3d99bcd1426366a4da581ef9"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2004090) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000000000001a000000071000000000000000"], 0x34}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x2b, 0x8, 0x1e}, 0x2c) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 8.600052271s ago: executing program 0 (id=8321): rt_sigaction(0x41, &(0x7f0000000080)={0x0, 0x14000000, 0x0, {[0x963]}}, 0x0, 0x8, &(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0414060bc8000310008627e767d78bd3e8"], 0x9) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) sendto$inet6(r0, 0x0, 0x0, 0x200000c1, &(0x7f00000000c0)={0xa, 0x4e1d, 0xff, @remote}, 0x1c) 7.31970534s ago: executing program 6 (id=8322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) write$smackfs_ptrace(r4, &(0x7f0000000080)=0x1, 0x14) 6.144552146s ago: executing program 9 (id=8323): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='contention_end\x00', r0}, 0x18) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 6.077435224s ago: executing program 0 (id=8324): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) creat(0x0, 0x10) mknod(0x0, 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000100)={0x141100}, 0x18) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file0\x00', &(0x7f00000000c0)={0x400000, 0x18, 0x4}, 0x18) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x3, {0x1, 0x1, 0x200000, 0x3, 0xfffffffe, 0x0, {0x4, 0xe, 0xfff7fffffffffffc, 0xffffffdffffffff7, 0x9, 0xfffffffffffffffe, 0x0, 0xfffffffb, 0x0, 0x2000, 0x7ff, 0x0, 0xee01, 0x6, 0x46}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.044056139s ago: executing program 9 (id=8325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = fanotify_init(0xf00, 0x1000) fanotify_mark(r3, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r3, &(0x7f0000000c40), 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000280)={'gretap0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)) 4.965011762s ago: executing program 5 (id=8326): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000401c1b1e1c0000000000010902240001000000000904000001030002000921000000f2210700090581031000000200"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x2003, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x3d9a, 0x4) sendfile(r1, r2, 0x0, 0x11000002) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,') syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a440000102030109"], 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.962653809s ago: executing program 0 (id=8327): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r4, 0x1000000, 0x0) 4.961879696s ago: executing program 6 (id=8328): socket$nl_generic(0x10, 0x3, 0x10) openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4.876110587s ago: executing program 4 (id=8329): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0xfffffffc}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x1, {{0xa, 0x4204, 0xffffffff, @mcast1, 0x8}}}, 0x90) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 3.733189958s ago: executing program 9 (id=8330): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0xc, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x8) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='sys_enter\x00'}, 0x18) r1 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000600)={'#! ', './file0', [{0x20, '%\'[*'}, {0x20, '\x00'}]}, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x7e1a, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000540)=@ethtool_ts_info}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) socketpair(0x1, 0x2, 0x1ffc0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x8, 0x1, 0x4}, {0x6, 0xfc, 0x6, 0x7}]}) write(r8, &(0x7f0000000280)="4591c28e8b83", 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r5, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r5, &(0x7f0000000140)="aa", &(0x7f0000000000)=@tcp6=r6}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) 3.696353425s ago: executing program 0 (id=8331): clock_getres(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600083c00fc020000000000543400000000000000fe0800000000000000000000000000aa84000100f5000000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0xa8202, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) r3 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000001180)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c1286306ff6ee45265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b8da13c4e7bbeedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce070", 0xc2, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r4, r3}, &(0x7f0000000280)=""/190, 0xbe, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64-generic\x00'}}) keyctl$setperm(0x5, r4, 0x2000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.452005484s ago: executing program 6 (id=8332): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xf}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "2e2992dd"}]}}, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000400)={0x88, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x39}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x44, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x90e}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x8000}, {0x8, 0x0, 0x8f04}, {0x8, 0x0, 0x100}, {0x8}, {0x8, 0x0, 0x90000000}, {0x8, 0x0, 0x2}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x940}]}, 0x88}, 0x1, 0x0, 0x0, 0x805}, 0x40084) io_setup(0x3ff, &(0x7f00000000c0)) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000300), 0x0}, 0x20) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0xfffffffffffffff7, 0x4, 0x8, 0xc12, 0x100000000, 0xfffffffffffffffc, 0x3, 0x0, 0x10}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d2, &(0x7f0000000100)) 3.39256937s ago: executing program 4 (id=8333): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'bond_slave_1\x00', &(0x7f0000000380)=@ethtool_gstrings={0x1b, 0x2}}) 2.526728404s ago: executing program 0 (id=8334): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2ac8c0, 0x0) ioctl$COMEDI_UNLOCK(r0, 0x6406) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x29, 0x81, 0x8, 0x8, 0x0, @loopback, @rand_addr=' \x01\x00', 0x7, 0x80, 0x3ae, 0x3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r3, &(0x7f0000002180)=""/4101, 0x1005, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c1000000000", 0x53}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010612b06d77e680ae0d1717e00cc6016915a44a3d99bcd1426366a4da581ef9"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2004090) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000000000001a000000071000000000000000"], 0x34}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x2b, 0x8, 0x1e}, 0x2c) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 2.380463197s ago: executing program 4 (id=8335): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x4, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x84, 0x0, 0x4, 0x0, "c4f40c848d97a447"}}, 0x48}}, 0x0) 1.62780029s ago: executing program 9 (id=8336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (fail_nth: 1) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close_range(r5, 0xffffffffffffffff, 0x0) 938.853692ms ago: executing program 4 (id=8337): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0xb3, @local, 0x4}, @in6={0xa, 0x4e21, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18}], 0x58) socket$isdn_base(0x22, 0x3, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) socket$key(0xf, 0x3, 0x2) (async) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0xfffffff0}], 0x1, 0x40000021, 0x0) (async) recvmmsg(r2, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0xfffffff0}], 0x1, 0x40000021, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r1, 0x1) sendmmsg$alg(r1, &(0x7f00000054c0)=[{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f00000008c0)="65008bee898379aed6607aba31c31a0d5aa54b360c152f76caa974764664ec5738c155f03a7e56161095f8d68b5bd3776163ccf8b187359ed5239eb78a8868cc5281faeb936945c835f0665785710558383c11644e47cbf729b5860a25758e5c854aeba07f9327ac08c1c50de6823e5f850f2959b630232794b4d925f10cd2cd07e982f764ecf44172c4333f86576186b9b2b482448e", 0x34000}], 0x2, 0x0, 0x0, 0x40800}], 0x1, 0x20000844) 710.219218ms ago: executing program 0 (id=8338): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) creat(0x0, 0x10) mknod(0x0, 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000100)={0x141100}, 0x18) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file0\x00', &(0x7f00000000c0)={0x400000, 0x18, 0x4}, 0x18) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x3, {0x1, 0x1, 0x200000, 0x3, 0xfffffffe, 0x0, {0x4, 0xe, 0xfff7fffffffffffc, 0xffffffdffffffff7, 0x9, 0xfffffffffffffffe, 0x0, 0xfffffffb, 0x0, 0x2000, 0x7ff, 0x0, 0xee01, 0x6, 0x46}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 71.819019ms ago: executing program 9 (id=8339): syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f0000000600), &(0x7f00000006c0)=@v3={0x3000000, [{0x0, 0x6}, {0x400, 0x7}], r1}, 0x18, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r3, &(0x7f0000000000), 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f00000004c0)={0x0}}, 0x404004c) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x1}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, 0x0) 0s ago: executing program 4 (id=8340): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff3115"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000340)="8f289318095723757f9982d8e8d18db5f36715645b7e636aa9a0adbafe85baf85736fda371b737e581bb0db1c3bb1f30a77ac6eab1f16586", 0x38, r4) r5 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000003340), 0x2, 0x0) writev(r8, &(0x7f00000035c0)=[{&(0x7f00000033c0)="5ea8", 0x2}], 0x1) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000400)=[@request_death={0x400c630e, 0x2}], 0x4e, 0xfcff, &(0x7f0000000000)="9ed646a64d550efb35abaaced876b46f3de042d2013ce50ce6e182ffdac27eb6c929f8e2d617bbb4a90dd47c549f69092749c3e939e497a2819c9aa2d7c36384a61b3180609ca6934c9e16ac3b36"}) ioctl$RTC_VL_READ(r5, 0x80047013, &(0x7f00000005c0)) kernel console output (not intermixed with test programs): 44.081160][ T2878] ? clear_bhb_loop+0x60/0xb0 [ 3244.081188][ T2878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3244.081210][ T2878] RIP: 0033:0x7f758c58d5fc [ 3244.081236][ T2878] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3244.081256][ T2878] RSP: 002b:00007f758d342030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3244.081281][ T2878] RAX: ffffffffffffffda RBX: 00007f758c7b5fa0 RCX: 00007f758c58d5fc [ 3244.081306][ T2878] RDX: 000000000000000f RSI: 00007f758d3420a0 RDI: 0000000000000006 [ 3244.081321][ T2878] RBP: 00007f758d342090 R08: 0000000000000000 R09: 0000000000000000 [ 3244.081336][ T2878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3244.081350][ T2878] R13: 00007f758c7b6038 R14: 00007f758c7b5fa0 R15: 00007fffb036f3d8 [ 3244.081386][ T2878] [ 3244.321401][ C1] vkms_vblank_simulate: vblank timer overrun [ 3245.703145][ T2890] FAULT_INJECTION: forcing a failure. [ 3245.703145][ T2890] name failslab, interval 1, probability 0, space 0, times 0 [ 3245.757808][ T2890] CPU: 0 UID: 0 PID: 2890 Comm: syz.5.7880 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3245.757841][ T2890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3245.757856][ T2890] Call Trace: [ 3245.757865][ T2890] [ 3245.757877][ T2890] dump_stack_lvl+0x189/0x250 [ 3245.757909][ T2890] ? __pfx____ratelimit+0x10/0x10 [ 3245.757934][ T2890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3245.757959][ T2890] ? __pfx__printk+0x10/0x10 [ 3245.757994][ T2890] ? __pfx___might_resched+0x10/0x10 [ 3245.758025][ T2890] should_fail_ex+0x414/0x560 [ 3245.758062][ T2890] should_failslab+0xa8/0x100 [ 3245.758090][ T2890] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3245.758115][ T2890] ? __alloc_skb+0x112/0x2d0 [ 3245.758152][ T2890] __alloc_skb+0x112/0x2d0 [ 3245.758188][ T2890] netlink_sendmsg+0x5c6/0xb30 [ 3245.758232][ T2890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3245.758281][ T2890] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3245.758304][ T2890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3245.758337][ T2890] __sock_sendmsg+0x21c/0x270 [ 3245.758367][ T2890] ____sys_sendmsg+0x505/0x830 [ 3245.758409][ T2890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3245.758456][ T2890] ? import_iovec+0x74/0xa0 [ 3245.758492][ T2890] ___sys_sendmsg+0x21f/0x2a0 [ 3245.758530][ T2890] ? __pfx____sys_sendmsg+0x10/0x10 [ 3245.758646][ T2890] ? __fget_files+0x2a/0x420 [ 3245.758676][ T2890] ? __fget_files+0x3a0/0x420 [ 3245.758715][ T2890] __x64_sys_sendmsg+0x19b/0x260 [ 3245.758754][ T2890] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3245.758802][ T2890] ? __pfx_ksys_write+0x10/0x10 [ 3245.758823][ T2890] ? rcu_is_watching+0x15/0xb0 [ 3245.758853][ T2890] ? do_syscall_64+0xbe/0x3b0 [ 3245.758884][ T2890] do_syscall_64+0xfa/0x3b0 [ 3245.758919][ T2890] ? lockdep_hardirqs_on+0x9c/0x150 [ 3245.758944][ T2890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3245.758967][ T2890] ? clear_bhb_loop+0x60/0xb0 [ 3245.758995][ T2890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3245.759019][ T2890] RIP: 0033:0x7f758c58ebe9 [ 3245.759040][ T2890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3245.759069][ T2890] RSP: 002b:00007f758d342038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3245.759094][ T2890] RAX: ffffffffffffffda RBX: 00007f758c7b5fa0 RCX: 00007f758c58ebe9 [ 3245.759112][ T2890] RDX: 0000000004040014 RSI: 0000200000000240 RDI: 0000000000000004 [ 3245.759129][ T2890] RBP: 00007f758d342090 R08: 0000000000000000 R09: 0000000000000000 [ 3245.759145][ T2890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3245.759160][ T2890] R13: 00007f758c7b6038 R14: 00007f758c7b5fa0 R15: 00007fffb036f3d8 [ 3245.759198][ T2890] [ 3246.304507][ T2898] netlink: 'syz.6.7882': attribute type 6 has an invalid length. [ 3246.313918][ T2898] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7882'. [ 3246.999969][ T2908] syz.5.7885: attempt to access beyond end of device [ 3246.999969][ T2908] nbd5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 3247.732601][ T2920] sock: sock_timestamping_bind_phc: sock not bind to device [ 3248.839123][ T30] audit: type=1326 audit(1755720318.847:1249): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=2932 comm="syz.5.7893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758c58ebe9 code=0x7ffc0000 [ 3249.056240][ T30] audit: type=1326 audit(1755720318.847:1250): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=2932 comm="syz.5.7893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758c58ebe9 code=0x7ffc0000 [ 3249.201375][ T30] audit: type=1326 audit(1755720318.847:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2932 comm="syz.5.7893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758c58ebe9 code=0x7ffc0000 [ 3249.331013][ T30] audit: type=1326 audit(1755720318.847:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2932 comm="syz.5.7893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758c58ebe9 code=0x7ffc0000 [ 3249.486008][ T30] audit: type=1326 audit(1755720318.877:1253): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=2932 comm="syz.5.7893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f758c58ebe9 code=0x7ffc0000 [ 3249.662569][ T30] audit: type=1326 audit(1755720318.877:1254): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=2932 comm="syz.5.7893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758c58ebe9 code=0x7ffc0000 [ 3249.793985][ T30] audit: type=1326 audit(1755720318.877:1255): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=2932 comm="syz.5.7893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758c58ebe9 code=0x7ffc0000 [ 3249.929408][ T2941] FAULT_INJECTION: forcing a failure. [ 3249.929408][ T2941] name failslab, interval 1, probability 0, space 0, times 0 [ 3249.956823][ T30] audit: type=1326 audit(1755720318.877:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2932 comm="syz.5.7893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758c58ebe9 code=0x7ffc0000 [ 3250.002377][ T2941] CPU: 1 UID: 0 PID: 2941 Comm: syz.8.7895 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3250.002410][ T2941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3250.002425][ T2941] Call Trace: [ 3250.002435][ T2941] [ 3250.002445][ T2941] dump_stack_lvl+0x189/0x250 [ 3250.002477][ T2941] ? __pfx____ratelimit+0x10/0x10 [ 3250.002502][ T2941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3250.002528][ T2941] ? __pfx__printk+0x10/0x10 [ 3250.002561][ T2941] ? __pfx___might_resched+0x10/0x10 [ 3250.002587][ T2941] ? fs_reclaim_acquire+0x7d/0x100 [ 3250.002620][ T2941] should_fail_ex+0x414/0x560 [ 3250.002651][ T2941] should_failslab+0xa8/0x100 [ 3250.002679][ T2941] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3250.002702][ T2941] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 3250.002733][ T2941] ? __alloc_skb+0x112/0x2d0 [ 3250.002770][ T2941] __alloc_skb+0x112/0x2d0 [ 3250.002806][ T2941] alloc_skb_with_frags+0xca/0x890 [ 3250.002842][ T2941] ? __lock_acquire+0xab9/0xd20 [ 3250.002876][ T2941] ? __lock_acquire+0xab9/0xd20 [ 3250.002900][ T2941] sock_alloc_send_pskb+0x857/0x990 [ 3250.002947][ T2941] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 3250.002977][ T2941] ? dev_get_by_index+0x22/0x2e0 [ 3250.003003][ T2941] ? dev_get_by_index+0x22/0x2e0 [ 3250.003036][ T2941] packet_sendmsg+0x3383/0x5060 [ 3250.003096][ T2941] ? irqentry_exit+0x74/0x90 [ 3250.003119][ T2941] ? lockdep_hardirqs_on+0x9c/0x150 [ 3250.003153][ T2941] ? smack_socket_sendmsg+0x1fa/0x520 [ 3250.003184][ T2941] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 3250.003218][ T2941] ? __lock_acquire+0xab9/0xd20 [ 3250.003239][ T2941] ? __pfx_packet_sendmsg+0x10/0x10 [ 3250.003282][ T2941] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 3250.003325][ T2941] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3250.003347][ T2941] ? __pfx_packet_sendmsg+0x10/0x10 [ 3250.003381][ T2941] __sock_sendmsg+0x21c/0x270 [ 3250.003417][ T2941] __sys_sendto+0x3bd/0x520 [ 3250.003452][ T2941] ? __pfx___sys_sendto+0x10/0x10 [ 3250.003498][ T2941] ? __might_fault+0xb0/0x130 [ 3250.003518][ T2941] ? bpf_trace_run2+0x186/0x4b0 [ 3250.003570][ T2941] ? rcu_is_watching+0x15/0xb0 [ 3250.003599][ T2941] __x64_sys_sendto+0xde/0x100 [ 3250.003636][ T2941] do_syscall_64+0xfa/0x3b0 [ 3250.003660][ T2941] ? lockdep_hardirqs_on+0x9c/0x150 [ 3250.003684][ T2941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3250.003707][ T2941] ? clear_bhb_loop+0x60/0xb0 [ 3250.003746][ T2941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3250.003769][ T2941] RIP: 0033:0x7f63f478ebe9 [ 3250.003788][ T2941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3250.003806][ T2941] RSP: 002b:00007f63f5549038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 3250.003829][ T2941] RAX: ffffffffffffffda RBX: 00007f63f49b5fa0 RCX: 00007f63f478ebe9 [ 3250.003845][ T2941] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 3250.003859][ T2941] RBP: 00007f63f5549090 R08: 0000200000000200 R09: 0000000000000014 [ 3250.003874][ T2941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3250.003888][ T2941] R13: 00007f63f49b6038 R14: 00007f63f49b5fa0 R15: 00007ffe1cecbc08 [ 3250.003923][ T2941] [ 3250.099859][ T30] audit: type=1326 audit(1755720318.877:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2932 comm="syz.5.7893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758c58ebe9 code=0x7ffc0000 [ 3250.406592][ T30] audit: type=1326 audit(1755720318.877:1258): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=2932 comm="syz.5.7893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f758c58ebe9 code=0x7ffc0000 [ 3250.654632][ T2950] FAULT_INJECTION: forcing a failure. [ 3250.654632][ T2950] name failslab, interval 1, probability 0, space 0, times 0 [ 3250.669371][T13109] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 3250.795694][ T2950] CPU: 0 UID: 0 PID: 2950 Comm: syz.8.7898 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3250.795727][ T2950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3250.795742][ T2950] Call Trace: [ 3250.795752][ T2950] [ 3250.795762][ T2950] dump_stack_lvl+0x189/0x250 [ 3250.795794][ T2950] ? __pfx____ratelimit+0x10/0x10 [ 3250.795819][ T2950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3250.795845][ T2950] ? __pfx__printk+0x10/0x10 [ 3250.795889][ T2950] ? __pfx___might_resched+0x10/0x10 [ 3250.795920][ T2950] should_fail_ex+0x414/0x560 [ 3250.795953][ T2950] should_failslab+0xa8/0x100 [ 3250.795981][ T2950] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3250.796005][ T2950] ? __alloc_skb+0x112/0x2d0 [ 3250.796042][ T2950] __alloc_skb+0x112/0x2d0 [ 3250.796079][ T2950] netlink_sendmsg+0x5c6/0xb30 [ 3250.796123][ T2950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3250.796166][ T2950] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3250.796188][ T2950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3250.796222][ T2950] __sock_sendmsg+0x21c/0x270 [ 3250.796253][ T2950] ____sys_sendmsg+0x505/0x830 [ 3250.796295][ T2950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3250.796340][ T2950] ? import_iovec+0x74/0xa0 [ 3250.796388][ T2950] ___sys_sendmsg+0x21f/0x2a0 [ 3250.796426][ T2950] ? __pfx____sys_sendmsg+0x10/0x10 [ 3250.796503][ T2950] ? __fget_files+0x2a/0x420 [ 3250.796528][ T2950] ? __fget_files+0x3a0/0x420 [ 3250.796577][ T2950] __x64_sys_sendmsg+0x19b/0x260 [ 3250.796615][ T2950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3250.796665][ T2950] ? rcu_is_watching+0x15/0xb0 [ 3250.796690][ T2950] ? trace_sys_enter+0x25/0x120 [ 3250.796719][ T2950] do_syscall_64+0xfa/0x3b0 [ 3250.796743][ T2950] ? lockdep_hardirqs_on+0x9c/0x150 [ 3250.796768][ T2950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3250.796790][ T2950] ? clear_bhb_loop+0x60/0xb0 [ 3250.796818][ T2950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3250.796840][ T2950] RIP: 0033:0x7f63f478ebe9 [ 3250.796861][ T2950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3250.796881][ T2950] RSP: 002b:00007f63f5549038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3250.796905][ T2950] RAX: ffffffffffffffda RBX: 00007f63f49b5fa0 RCX: 00007f63f478ebe9 [ 3250.796922][ T2950] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 3250.796937][ T2950] RBP: 00007f63f5549090 R08: 0000000000000000 R09: 0000000000000000 [ 3250.796958][ T2950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3250.796973][ T2950] R13: 00007f63f49b6038 R14: 00007f63f49b5fa0 R15: 00007ffe1cecbc08 [ 3250.797009][ T2950] [ 3251.095020][T13109] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3251.131087][T13109] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3251.166178][T13109] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3251.315565][T13109] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3251.344878][ T2944] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 3251.368970][T13109] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 3251.419919][ T2958] sock: sock_timestamping_bind_phc: sock not bind to device [ 3251.688550][ T2944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3251.724655][ T2944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3251.852568][T13109] usb 10-1: USB disconnect, device number 26 [ 3252.345204][ T2970] tmpfs: Unknown parameter 'quÆ' [ 3252.396488][T13109] libceph: connect (1)[c::]:6789 error -101 [ 3252.424350][T13109] libceph: mon0 (1)[c::]:6789 connect error [ 3252.738162][T13109] libceph: connect (1)[c::]:6789 error -101 [ 3252.909447][T13109] libceph: mon0 (1)[c::]:6789 connect error [ 3253.548073][T27715] libceph: connect (1)[c::]:6789 error -101 [ 3253.562765][ T2970] ceph: No mds server is up or the cluster is laggy [ 3253.592497][T27715] libceph: mon0 (1)[c::]:6789 connect error [ 3253.843437][T30073] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 3254.161528][ T2992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7907'. [ 3254.262476][T30073] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3254.309616][T30073] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3254.336488][T22231] usb 9-1: new full-speed USB device number 80 using dummy_hcd [ 3254.440574][T30073] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3254.551969][T22231] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3254.918362][T30073] usb 6-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 3254.940657][T22231] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3254.981830][T30073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3255.001966][T22231] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3255.008945][T22231] usb 9-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 3255.033112][T30073] usb 6-1: config 0 descriptor?? [ 3255.038540][T22231] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3255.107738][T22231] usb 9-1: config 0 descriptor?? [ 3255.175982][T30073] usb 6-1: can't set config #0, error -71 [ 3255.267659][T30073] usb 6-1: USB disconnect, device number 7 [ 3255.328334][ T2997] tipc: Started in network mode [ 3255.375437][ T2997] tipc: Node identity 7ec2da96242a, cluster identity 4711 [ 3255.405973][ T2997] tipc: Enabled bearer , priority 0 [ 3255.446400][ T2998] syzkaller0: entered promiscuous mode [ 3255.476110][T22231] usbhid 9-1:0.0: can't add hid device: -71 [ 3255.479951][ T2998] syzkaller0: entered allmulticast mode [ 3255.508273][T22231] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 3255.566046][T22231] usb 9-1: USB disconnect, device number 80 [ 3255.631594][ T2997] tipc: Resetting bearer [ 3255.686026][ T2996] tipc: Resetting bearer [ 3255.798649][ T2996] tipc: Disabling bearer [ 3255.904295][ T3011] sock: sock_timestamping_bind_phc: sock not bind to device [ 3257.346785][ T3023] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7916'. [ 3257.587737][ T3032] FAULT_INJECTION: forcing a failure. [ 3257.587737][ T3032] name failslab, interval 1, probability 0, space 0, times 0 [ 3257.613786][ T3032] CPU: 1 UID: 0 PID: 3032 Comm: syz.8.7922 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3257.613819][ T3032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3257.613834][ T3032] Call Trace: [ 3257.613844][ T3032] [ 3257.613855][ T3032] dump_stack_lvl+0x189/0x250 [ 3257.613888][ T3032] ? __pfx____ratelimit+0x10/0x10 [ 3257.614001][ T3032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3257.614027][ T3032] ? __pfx__printk+0x10/0x10 [ 3257.614064][ T3032] ? __pfx___might_resched+0x10/0x10 [ 3257.614096][ T3032] should_fail_ex+0x414/0x560 [ 3257.614126][ T3032] should_failslab+0xa8/0x100 [ 3257.614153][ T3032] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3257.614172][ T3032] ? __alloc_skb+0x112/0x2d0 [ 3257.614208][ T3032] __alloc_skb+0x112/0x2d0 [ 3257.614245][ T3032] netlink_sendmsg+0x5c6/0xb30 [ 3257.614289][ T3032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3257.614331][ T3032] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3257.614354][ T3032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3257.614388][ T3032] __sock_sendmsg+0x21c/0x270 [ 3257.614419][ T3032] ____sys_sendmsg+0x505/0x830 [ 3257.614462][ T3032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3257.614507][ T3032] ? import_iovec+0x74/0xa0 [ 3257.614544][ T3032] ___sys_sendmsg+0x21f/0x2a0 [ 3257.614582][ T3032] ? __pfx____sys_sendmsg+0x10/0x10 [ 3257.614659][ T3032] ? __fget_files+0x2a/0x420 [ 3257.614685][ T3032] ? __fget_files+0x3a0/0x420 [ 3257.614722][ T3032] __x64_sys_sendmsg+0x19b/0x260 [ 3257.614761][ T3032] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3257.614808][ T3032] ? __pfx_ksys_write+0x10/0x10 [ 3257.614827][ T3032] ? rcu_is_watching+0x15/0xb0 [ 3257.614858][ T3032] ? do_syscall_64+0xbe/0x3b0 [ 3257.614892][ T3032] do_syscall_64+0xfa/0x3b0 [ 3257.614924][ T3032] ? lockdep_hardirqs_on+0x9c/0x150 [ 3257.614954][ T3032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3257.614977][ T3032] ? clear_bhb_loop+0x60/0xb0 [ 3257.615005][ T3032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3257.615028][ T3032] RIP: 0033:0x7f63f478ebe9 [ 3257.615049][ T3032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3257.615069][ T3032] RSP: 002b:00007f63f5549038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3257.615094][ T3032] RAX: ffffffffffffffda RBX: 00007f63f49b5fa0 RCX: 00007f63f478ebe9 [ 3257.615111][ T3032] RDX: 0000000000000040 RSI: 0000200000000540 RDI: 0000000000000003 [ 3257.615126][ T3032] RBP: 00007f63f5549090 R08: 0000000000000000 R09: 0000000000000000 [ 3257.615141][ T3032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3257.615155][ T3032] R13: 00007f63f49b6038 R14: 00007f63f49b5fa0 R15: 00007ffe1cecbc08 [ 3257.615191][ T3032] [ 3257.773560][T13109] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 3258.323294][ T3037] (syz.5.7919,3037,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 3258.332786][ T3037] (syz.5.7919,3037,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 3258.868511][T13109] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3258.973766][T13109] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3259.516488][T13109] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3259.747197][T13109] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3260.434624][T13109] usb 7-1: SerialNumber: syz [ 3260.714739][T13109] usb 7-1: can't set config #1, error -71 [ 3260.726785][T13109] usb 7-1: USB disconnect, device number 10 [ 3260.807622][ T3050] FAULT_INJECTION: forcing a failure. [ 3260.807622][ T3050] name failslab, interval 1, probability 0, space 0, times 0 [ 3260.835183][ T3048] FAULT_INJECTION: forcing a failure. [ 3260.835183][ T3048] name failslab, interval 1, probability 0, space 0, times 0 [ 3260.850641][ T3050] CPU: 0 UID: 0 PID: 3050 Comm: syz.9.7925 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3260.850671][ T3050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3260.850686][ T3050] Call Trace: [ 3260.850696][ T3050] [ 3260.850706][ T3050] dump_stack_lvl+0x189/0x250 [ 3260.850737][ T3050] ? __pfx____ratelimit+0x10/0x10 [ 3260.850762][ T3050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3260.850787][ T3050] ? __pfx__printk+0x10/0x10 [ 3260.850823][ T3050] ? __pfx___might_resched+0x10/0x10 [ 3260.850852][ T3050] should_fail_ex+0x414/0x560 [ 3260.850881][ T3050] should_failslab+0xa8/0x100 [ 3260.850908][ T3050] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3260.850933][ T3050] ? __alloc_skb+0x112/0x2d0 [ 3260.850969][ T3050] __alloc_skb+0x112/0x2d0 [ 3260.851003][ T3050] netlink_sendmsg+0x5c6/0xb30 [ 3260.851046][ T3050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3260.851087][ T3050] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3260.851109][ T3050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3260.851137][ T3050] __sock_sendmsg+0x21c/0x270 [ 3260.851161][ T3050] ____sys_sendmsg+0x505/0x830 [ 3260.851193][ T3050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3260.851228][ T3050] ? import_iovec+0x74/0xa0 [ 3260.851256][ T3050] ___sys_sendmsg+0x21f/0x2a0 [ 3260.851285][ T3050] ? __pfx____sys_sendmsg+0x10/0x10 [ 3260.851344][ T3050] ? __fget_files+0x2a/0x420 [ 3260.851363][ T3050] ? __fget_files+0x3a0/0x420 [ 3260.851391][ T3050] __x64_sys_sendmsg+0x19b/0x260 [ 3260.851421][ T3050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3260.851457][ T3050] ? __pfx_ksys_write+0x10/0x10 [ 3260.851471][ T3050] ? rcu_is_watching+0x15/0xb0 [ 3260.851496][ T3050] ? do_syscall_64+0xbe/0x3b0 [ 3260.851519][ T3050] do_syscall_64+0xfa/0x3b0 [ 3260.851538][ T3050] ? lockdep_hardirqs_on+0x9c/0x150 [ 3260.851564][ T3050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3260.851582][ T3050] ? clear_bhb_loop+0x60/0xb0 [ 3260.851603][ T3050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3260.851621][ T3050] RIP: 0033:0x7f4ab398ebe9 [ 3260.851637][ T3050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3260.851654][ T3050] RSP: 002b:00007f4ab47f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3260.851673][ T3050] RAX: ffffffffffffffda RBX: 00007f4ab3bb5fa0 RCX: 00007f4ab398ebe9 [ 3260.851687][ T3050] RDX: 0000000000008880 RSI: 00002000000005c0 RDI: 0000000000000003 [ 3260.851699][ T3050] RBP: 00007f4ab47f4090 R08: 0000000000000000 R09: 0000000000000000 [ 3260.851710][ T3050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3260.851721][ T3050] R13: 00007f4ab3bb6038 R14: 00007f4ab3bb5fa0 R15: 00007ffe85baf458 [ 3260.851748][ T3050] [ 3261.113767][ C0] vkms_vblank_simulate: vblank timer overrun [ 3262.008803][ T3048] CPU: 1 UID: 0 PID: 3048 Comm: syz.4.7926 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3262.008836][ T3048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3262.008852][ T3048] Call Trace: [ 3262.008863][ T3048] [ 3262.008875][ T3048] dump_stack_lvl+0x189/0x250 [ 3262.008906][ T3048] ? __pfx____ratelimit+0x10/0x10 [ 3262.008931][ T3048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3262.008962][ T3048] ? __pfx__printk+0x10/0x10 [ 3262.008997][ T3048] ? __pfx___might_resched+0x10/0x10 [ 3262.009021][ T3048] ? fs_reclaim_acquire+0x7d/0x100 [ 3262.009054][ T3048] should_fail_ex+0x414/0x560 [ 3262.009084][ T3048] should_failslab+0xa8/0x100 [ 3262.009110][ T3048] __kmalloc_cache_noprof+0x70/0x3d0 [ 3262.009133][ T3048] ? alloc_fdtable+0xa7/0x2a0 [ 3262.009161][ T3048] alloc_fdtable+0xa7/0x2a0 [ 3262.009183][ T3048] ? dup_fd+0x864/0xb60 [ 3262.009208][ T3048] dup_fd+0x86c/0xb60 [ 3262.009245][ T3048] __se_sys_close_range+0x1a4/0x650 [ 3262.009272][ T3048] ? ksys_write+0x22a/0x250 [ 3262.009297][ T3048] ? __pfx___se_sys_close_range+0x10/0x10 [ 3262.009334][ T3048] ? rcu_is_watching+0x15/0xb0 [ 3262.009365][ T3048] ? do_syscall_64+0xbe/0x3b0 [ 3262.009395][ T3048] do_syscall_64+0xfa/0x3b0 [ 3262.009419][ T3048] ? lockdep_hardirqs_on+0x9c/0x150 [ 3262.009443][ T3048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3262.009466][ T3048] ? clear_bhb_loop+0x60/0xb0 [ 3262.009501][ T3048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3262.009524][ T3048] RIP: 0033:0x7f0dc798ebe9 [ 3262.009545][ T3048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3262.009565][ T3048] RSP: 002b:00007f0dc8756038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 3262.009589][ T3048] RAX: ffffffffffffffda RBX: 00007f0dc7bb5fa0 RCX: 00007f0dc798ebe9 [ 3262.009606][ T3048] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000003 [ 3262.009628][ T3048] RBP: 00007f0dc8756090 R08: 0000000000000000 R09: 0000000000000000 [ 3262.009642][ T3048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3262.009656][ T3048] R13: 00007f0dc7bb6038 R14: 00007f0dc7bb5fa0 R15: 00007ffe8a6ddb18 [ 3262.009692][ T3048] [ 3262.525339][ T3064] FAULT_INJECTION: forcing a failure. [ 3262.525339][ T3064] name failslab, interval 1, probability 0, space 0, times 0 [ 3262.638616][ T3064] CPU: 0 UID: 0 PID: 3064 Comm: syz.9.7929 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3262.638648][ T3064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3262.638690][ T3064] Call Trace: [ 3262.638700][ T3064] [ 3262.638709][ T3064] dump_stack_lvl+0x189/0x250 [ 3262.638740][ T3064] ? __pfx____ratelimit+0x10/0x10 [ 3262.638763][ T3064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3262.638788][ T3064] ? __pfx__printk+0x10/0x10 [ 3262.638820][ T3064] ? __pfx___might_resched+0x10/0x10 [ 3262.638845][ T3064] ? fs_reclaim_acquire+0x7d/0x100 [ 3262.638876][ T3064] should_fail_ex+0x414/0x560 [ 3262.638907][ T3064] should_failslab+0xa8/0x100 [ 3262.638933][ T3064] __kmalloc_noprof+0xcb/0x4f0 [ 3262.638954][ T3064] ? tomoyo_encode+0x28b/0x550 [ 3262.638988][ T3064] tomoyo_encode+0x28b/0x550 [ 3262.639024][ T3064] tomoyo_realpath_from_path+0x58d/0x5d0 [ 3262.639055][ T3064] ? tomoyo_domain+0xda/0x130 [ 3262.639091][ T3064] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3262.639115][ T3064] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3262.639143][ T3064] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3262.639186][ T3064] ? __lock_acquire+0xab9/0xd20 [ 3262.639231][ T3064] ? __fget_files+0x2a/0x420 [ 3262.639260][ T3064] ? __fget_files+0x2a/0x420 [ 3262.639288][ T3064] ? __fget_files+0x3a0/0x420 [ 3262.639312][ T3064] ? __fget_files+0x2a/0x420 [ 3262.639343][ T3064] security_file_ioctl+0xcb/0x2d0 [ 3262.639372][ T3064] __se_sys_ioctl+0x47/0x170 [ 3262.639409][ T3064] do_syscall_64+0xfa/0x3b0 [ 3262.639433][ T3064] ? lockdep_hardirqs_on+0x9c/0x150 [ 3262.639456][ T3064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3262.639478][ T3064] ? clear_bhb_loop+0x60/0xb0 [ 3262.639505][ T3064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3262.639527][ T3064] RIP: 0033:0x7f4ab398ebe9 [ 3262.639547][ T3064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3262.639567][ T3064] RSP: 002b:00007f4ab47f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3262.639591][ T3064] RAX: ffffffffffffffda RBX: 00007f4ab3bb5fa0 RCX: 00007f4ab398ebe9 [ 3262.639608][ T3064] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 3262.639622][ T3064] RBP: 00007f4ab47f4090 R08: 0000000000000000 R09: 0000000000000000 [ 3262.639637][ T3064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3262.639651][ T3064] R13: 00007f4ab3bb6038 R14: 00007f4ab3bb5fa0 R15: 00007ffe85baf458 [ 3262.639694][ T3064] [ 3262.642068][ T3063] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7930'. [ 3262.671037][ T3064] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3262.833284][ T3070] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 3262.841975][ C0] vkms_vblank_simulate: vblank timer overrun [ 3262.928228][ T3074] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7933'. [ 3262.953052][ T3074] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7933'. [ 3262.975180][ T3074] syzkaller0: entered promiscuous mode [ 3263.010824][ T3074] syzkaller0: entered allmulticast mode [ 3263.207560][ T3082] sock: sock_timestamping_bind_phc: sock not bind to device [ 3263.577313][T30662] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 3263.940252][T30662] usb 10-1: Using ep0 maxpacket: 16 [ 3263.948449][T30662] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3263.985663][T30662] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3264.018992][T30662] usb 10-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3264.049917][T30662] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3264.059823][T30662] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3264.079941][T30662] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3264.122274][T30662] usb 10-1: config 0 descriptor?? [ 3264.887705][ T3092] FAULT_INJECTION: forcing a failure. [ 3264.887705][ T3092] name failslab, interval 1, probability 0, space 0, times 0 [ 3264.900843][ T3092] CPU: 1 UID: 0 PID: 3092 Comm: syz.8.7938 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3264.900871][ T3092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3264.900886][ T3092] Call Trace: [ 3264.900894][ T3092] [ 3264.900905][ T3092] dump_stack_lvl+0x189/0x250 [ 3264.900936][ T3092] ? __pfx____ratelimit+0x10/0x10 [ 3264.900960][ T3092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3264.900982][ T3092] ? __pfx__printk+0x10/0x10 [ 3264.901017][ T3092] ? __pfx___might_resched+0x10/0x10 [ 3264.901046][ T3092] should_fail_ex+0x414/0x560 [ 3264.901073][ T3092] should_failslab+0xa8/0x100 [ 3264.901097][ T3092] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3264.901117][ T3092] ? __alloc_skb+0x112/0x2d0 [ 3264.901153][ T3092] __alloc_skb+0x112/0x2d0 [ 3264.901187][ T3092] netlink_sendmsg+0x5c6/0xb30 [ 3264.901229][ T3092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3264.901271][ T3092] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3264.901294][ T3092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3264.901327][ T3092] __sock_sendmsg+0x21c/0x270 [ 3264.901358][ T3092] ____sys_sendmsg+0x505/0x830 [ 3264.901398][ T3092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3264.901441][ T3092] ? import_iovec+0x74/0xa0 [ 3264.901487][ T3092] ___sys_sendmsg+0x21f/0x2a0 [ 3264.901525][ T3092] ? __pfx____sys_sendmsg+0x10/0x10 [ 3264.901594][ T3092] ? __fget_files+0x2a/0x420 [ 3264.901618][ T3092] ? __fget_files+0x3a0/0x420 [ 3264.901654][ T3092] __x64_sys_sendmsg+0x19b/0x260 [ 3264.901690][ T3092] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3264.901731][ T3092] ? __pfx_ksys_write+0x10/0x10 [ 3264.901749][ T3092] ? rcu_is_watching+0x15/0xb0 [ 3264.901778][ T3092] ? do_syscall_64+0xbe/0x3b0 [ 3264.901808][ T3092] do_syscall_64+0xfa/0x3b0 [ 3264.901832][ T3092] ? lockdep_hardirqs_on+0x9c/0x150 [ 3264.901856][ T3092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3264.901878][ T3092] ? clear_bhb_loop+0x60/0xb0 [ 3264.901905][ T3092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3264.901926][ T3092] RIP: 0033:0x7f63f478ebe9 [ 3264.901949][ T3092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3264.901969][ T3092] RSP: 002b:00007f63f5549038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3264.901994][ T3092] RAX: ffffffffffffffda RBX: 00007f63f49b5fa0 RCX: 00007f63f478ebe9 [ 3264.902038][ T3092] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 3264.902054][ T3092] RBP: 00007f63f5549090 R08: 0000000000000000 R09: 0000000000000000 [ 3264.902069][ T3092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3264.902083][ T3092] R13: 00007f63f49b6038 R14: 00007f63f49b5fa0 R15: 00007ffe1cecbc08 [ 3264.902118][ T3092] [ 3264.940220][T30662] usbhid 10-1:0.0: can't add hid device: -71 [ 3265.233446][T30662] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 3265.268835][T30662] usb 10-1: USB disconnect, device number 27 [ 3265.287263][ T3096] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7939'. [ 3268.277363][ T3125] sock: sock_timestamping_bind_phc: sock not bind to device [ 3268.292845][ T3118] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20002 [ 3268.309089][ T3128] FAULT_INJECTION: forcing a failure. [ 3268.309089][ T3128] name failslab, interval 1, probability 0, space 0, times 0 [ 3268.624641][ T3128] CPU: 0 UID: 0 PID: 3128 Comm: syz.5.7947 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3268.624674][ T3128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3268.624689][ T3128] Call Trace: [ 3268.624698][ T3128] [ 3268.624709][ T3128] dump_stack_lvl+0x189/0x250 [ 3268.624742][ T3128] ? __pfx____ratelimit+0x10/0x10 [ 3268.624766][ T3128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3268.624793][ T3128] ? __pfx__printk+0x10/0x10 [ 3268.624827][ T3128] ? __pfx___might_resched+0x10/0x10 [ 3268.624858][ T3128] should_fail_ex+0x414/0x560 [ 3268.624888][ T3128] should_failslab+0xa8/0x100 [ 3268.624916][ T3128] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 3268.624940][ T3128] ? __get_vm_area_node+0x13f/0x300 [ 3268.624968][ T3128] __get_vm_area_node+0x13f/0x300 [ 3268.624997][ T3128] __vmalloc_node_range_noprof+0x301/0x12f0 [ 3268.625024][ T3128] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 3268.625061][ T3128] ? is_bpf_text_address+0x26/0x2b0 [ 3268.625111][ T3128] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 3268.625135][ T3128] ? __might_fault+0xb0/0x130 [ 3268.625166][ T3128] ? _parse_integer_limit+0x1ae/0x1f0 [ 3268.625198][ T3128] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 3268.625230][ T3128] __vmalloc_noprof+0xb1/0xf0 [ 3268.625255][ T3128] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 3268.625293][ T3128] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 3268.625333][ T3128] bpf_prog_alloc+0x3c/0x1a0 [ 3268.625371][ T3128] bpf_prog_load+0x735/0x1930 [ 3268.625419][ T3128] ? __pfx_bpf_prog_load+0x10/0x10 [ 3268.625478][ T3128] ? bpf_lsm_bpf+0x9/0x20 [ 3268.625503][ T3128] ? security_bpf+0x7e/0x300 [ 3268.625533][ T3128] __sys_bpf+0x5f1/0x860 [ 3268.625568][ T3128] ? __pfx___sys_bpf+0x10/0x10 [ 3268.625614][ T3128] ? ksys_write+0x22a/0x250 [ 3268.625638][ T3128] ? __pfx_ksys_write+0x10/0x10 [ 3268.625657][ T3128] ? rcu_is_watching+0x15/0xb0 [ 3268.625690][ T3128] __x64_sys_bpf+0x7c/0x90 [ 3268.625720][ T3128] do_syscall_64+0xfa/0x3b0 [ 3268.625744][ T3128] ? lockdep_hardirqs_on+0x9c/0x150 [ 3268.625766][ T3128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3268.625788][ T3128] ? clear_bhb_loop+0x60/0xb0 [ 3268.625816][ T3128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3268.625838][ T3128] RIP: 0033:0x7f758c58ebe9 [ 3268.625857][ T3128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3268.625876][ T3128] RSP: 002b:00007f758d342038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3268.625900][ T3128] RAX: ffffffffffffffda RBX: 00007f758c7b5fa0 RCX: 00007f758c58ebe9 [ 3268.625915][ T3128] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 3268.625928][ T3128] RBP: 00007f758d342090 R08: 0000000000000000 R09: 0000000000000000 [ 3268.625941][ T3128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3268.625953][ T3128] R13: 00007f758c7b6038 R14: 00007f758c7b5fa0 R15: 00007fffb036f3d8 [ 3268.625988][ T3128] [ 3268.916552][ C0] vkms_vblank_simulate: vblank timer overrun [ 3268.989614][ T3128] syz.5.7947: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 3269.052783][ T3128] CPU: 1 UID: 0 PID: 3128 Comm: syz.5.7947 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3269.052817][ T3128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3269.052832][ T3128] Call Trace: [ 3269.052841][ T3128] [ 3269.052851][ T3128] dump_stack_lvl+0x189/0x250 [ 3269.052888][ T3128] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 3269.052914][ T3128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3269.052932][ T3128] ? __pfx__printk+0x10/0x10 [ 3269.052952][ T3128] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 3269.052972][ T3128] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 3269.052998][ T3128] warn_alloc+0x214/0x310 [ 3269.053024][ T3128] ? __pfx_warn_alloc+0x10/0x10 [ 3269.053044][ T3128] ? __get_vm_area_node+0x13f/0x300 [ 3269.053063][ T3128] ? __get_vm_area_node+0x2b5/0x300 [ 3269.053085][ T3128] __vmalloc_node_range_noprof+0x326/0x12f0 [ 3269.053104][ T3128] ? is_bpf_text_address+0x26/0x2b0 [ 3269.053139][ T3128] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 3269.053156][ T3128] ? __might_fault+0xb0/0x130 [ 3269.053172][ T3128] ? _parse_integer_limit+0x1ae/0x1f0 [ 3269.053195][ T3128] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 3269.053218][ T3128] __vmalloc_noprof+0xb1/0xf0 [ 3269.053235][ T3128] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 3269.053263][ T3128] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 3269.053292][ T3128] bpf_prog_alloc+0x3c/0x1a0 [ 3269.053318][ T3128] bpf_prog_load+0x735/0x1930 [ 3269.053353][ T3128] ? __pfx_bpf_prog_load+0x10/0x10 [ 3269.053395][ T3128] ? bpf_lsm_bpf+0x9/0x20 [ 3269.053413][ T3128] ? security_bpf+0x7e/0x300 [ 3269.053435][ T3128] __sys_bpf+0x5f1/0x860 [ 3269.053460][ T3128] ? __pfx___sys_bpf+0x10/0x10 [ 3269.053493][ T3128] ? ksys_write+0x22a/0x250 [ 3269.053509][ T3128] ? __pfx_ksys_write+0x10/0x10 [ 3269.053522][ T3128] ? rcu_is_watching+0x15/0xb0 [ 3269.053545][ T3128] __x64_sys_bpf+0x7c/0x90 [ 3269.053567][ T3128] do_syscall_64+0xfa/0x3b0 [ 3269.053585][ T3128] ? lockdep_hardirqs_on+0x9c/0x150 [ 3269.053601][ T3128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3269.053617][ T3128] ? clear_bhb_loop+0x60/0xb0 [ 3269.053636][ T3128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3269.053652][ T3128] RIP: 0033:0x7f758c58ebe9 [ 3269.053666][ T3128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3269.053680][ T3128] RSP: 002b:00007f758d342038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3269.053697][ T3128] RAX: ffffffffffffffda RBX: 00007f758c7b5fa0 RCX: 00007f758c58ebe9 [ 3269.053709][ T3128] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 3269.053720][ T3128] RBP: 00007f758d342090 R08: 0000000000000000 R09: 0000000000000000 [ 3269.053730][ T3128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3269.053740][ T3128] R13: 00007f758c7b6038 R14: 00007f758c7b5fa0 R15: 00007fffb036f3d8 [ 3269.053771][ T3128] [ 3269.053813][ T3128] Mem-Info: [ 3269.636421][ T3128] active_anon:317 inactive_anon:7514 isolated_anon:0 [ 3269.636421][ T3128] active_file:18811 inactive_file:35999 isolated_file:0 [ 3269.636421][ T3128] unevictable:777 dirty:108 writeback:0 [ 3269.636421][ T3128] slab_reclaimable:10677 slab_unreclaimable:107367 [ 3269.636421][ T3128] mapped:35052 shmem:4282 pagetables:1125 [ 3269.636421][ T3128] sec_pagetables:0 bounce:0 [ 3269.636421][ T3128] kernel_misc_reclaimable:0 [ 3269.636421][ T3128] free:1296517 free_pcp:17250 free_cma:0 [ 3269.694181][ T3128] Node 0 active_anon:1268kB inactive_anon:30056kB active_file:74932kB inactive_file:143996kB unevictable:1572kB isolated(anon):0kB isolated(file):0kB mapped:140244kB dirty:432kB writeback:0kB shmem:15592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13028kB pagetables:4336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 3269.733903][ T3128] Node 1 active_anon:0kB inactive_anon:0kB active_file:312kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 3269.933533][ T3145] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 3269.942962][ T3145] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 3269.957913][ T3145] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 3269.967713][ T3145] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 3269.977542][ T3145] geneve2: entered allmulticast mode [ 3270.923787][ T3128] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 3271.881119][ T3128] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 3271.890404][ T3128] Node 0 DMA32 free:1258712kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1260kB inactive_anon:30452kB active_file:73172kB inactive_file:155304kB unevictable:1572kB writepending:508kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:40812kB local_pcp:19840kB free_cma:0kB [ 3271.900365][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3271.923372][ C0] vkms_vblank_simulate: vblank timer overrun [ 3272.220209][ T3128] lowmem_reserve[]: 0 0 1 1 1 [ 3272.236385][ T3128] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:48kB active_file:1768kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 3272.265588][ C0] vkms_vblank_simulate: vblank timer overrun [ 3272.365630][ T3128] lowmem_reserve[]: 0 0 0 0 0 [ 3272.384325][ T3128] Node 1 Normal free:3906012kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:312kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20200kB local_pcp:11008kB free_cma:0kB [ 3272.613607][ T3128] lowmem_reserve[]: 0 0 0 0 0 [ 3272.625573][ T3128] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 3272.673494][ T3128] Node 0 DMA32: 1278*4kB (UME) 335*8kB (UME) 224*16kB (UME) 627*32kB (UME) 406*64kB (UME) 222*128kB (UME) 129*256kB (UME) 40*512kB (UME) 28*1024kB (UM) 11*2048kB (U) 261*4096kB (UM) = 1259600kB [ 3272.963537][ T3128] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 3272.988042][ T3128] Node 1 Normal: 157*4kB (U) 35*8kB (UME) 35*16kB (UE) 145*32kB (UE) 46*64kB (UME) 7*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 949*4096kB (M) = 3906012kB [ 3273.034430][ T3128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3273.078995][ T3128] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 3273.102790][ T3128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3273.129932][ T3128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3273.160385][ T3128] 59111 total pagecache pages [ 3273.199669][ T3128] 0 pages in swap cache [ 3273.204008][ T3128] Free swap = 124996kB [ 3273.208201][ T3128] Total swap = 124996kB [ 3273.229799][ T3128] 2097051 pages RAM [ 3273.233686][ T3128] 0 pages HighMem/MovableOnly [ 3273.238391][ T3128] 424695 pages reserved [ 3273.301785][ T3128] 0 pages cma reserved [ 3274.887833][ T3176] FAULT_INJECTION: forcing a failure. [ 3274.887833][ T3176] name failslab, interval 1, probability 0, space 0, times 0 [ 3275.624909][ T3176] CPU: 0 UID: 0 PID: 3176 Comm: syz.6.7959 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3275.624940][ T3176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3275.624954][ T3176] Call Trace: [ 3275.624963][ T3176] [ 3275.624973][ T3176] dump_stack_lvl+0x189/0x250 [ 3275.625006][ T3176] ? __pfx____ratelimit+0x10/0x10 [ 3275.625030][ T3176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3275.625054][ T3176] ? __pfx__printk+0x10/0x10 [ 3275.625087][ T3176] ? __pfx___might_resched+0x10/0x10 [ 3275.625117][ T3176] should_fail_ex+0x414/0x560 [ 3275.625145][ T3176] should_failslab+0xa8/0x100 [ 3275.625173][ T3176] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3275.625204][ T3176] ? __alloc_skb+0x112/0x2d0 [ 3275.625239][ T3176] __alloc_skb+0x112/0x2d0 [ 3275.625275][ T3176] netlink_sendmsg+0x5c6/0xb30 [ 3275.625317][ T3176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3275.625357][ T3176] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3275.625380][ T3176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3275.625411][ T3176] __sock_sendmsg+0x21c/0x270 [ 3275.625439][ T3176] ____sys_sendmsg+0x505/0x830 [ 3275.625478][ T3176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3275.625522][ T3176] ? import_iovec+0x74/0xa0 [ 3275.625559][ T3176] ___sys_sendmsg+0x21f/0x2a0 [ 3275.625596][ T3176] ? __pfx____sys_sendmsg+0x10/0x10 [ 3275.625665][ T3176] ? __fget_files+0x2a/0x420 [ 3275.625683][ T3176] ? __fget_files+0x3a0/0x420 [ 3275.625709][ T3176] __x64_sys_sendmsg+0x19b/0x260 [ 3275.625736][ T3176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3275.625768][ T3176] ? __pfx_ksys_write+0x10/0x10 [ 3275.625782][ T3176] ? rcu_is_watching+0x15/0xb0 [ 3275.625803][ T3176] ? do_syscall_64+0xbe/0x3b0 [ 3275.625824][ T3176] do_syscall_64+0xfa/0x3b0 [ 3275.625841][ T3176] ? lockdep_hardirqs_on+0x9c/0x150 [ 3275.625858][ T3176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3275.625874][ T3176] ? clear_bhb_loop+0x60/0xb0 [ 3275.625893][ T3176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3275.625909][ T3176] RIP: 0033:0x7fa5ab38ebe9 [ 3275.625924][ T3176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3275.625943][ T3176] RSP: 002b:00007fa5ac143038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3275.625960][ T3176] RAX: ffffffffffffffda RBX: 00007fa5ab5b5fa0 RCX: 00007fa5ab38ebe9 [ 3275.625972][ T3176] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 3275.625983][ T3176] RBP: 00007fa5ac143090 R08: 0000000000000000 R09: 0000000000000000 [ 3275.625993][ T3176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3275.626003][ T3176] R13: 00007fa5ab5b6038 R14: 00007fa5ab5b5fa0 R15: 00007ffdd4a724f8 [ 3275.626027][ T3176] [ 3275.891427][ C0] vkms_vblank_simulate: vblank timer overrun [ 3275.921184][ T3189] FAULT_INJECTION: forcing a failure. [ 3275.921184][ T3189] name failslab, interval 1, probability 0, space 0, times 0 [ 3275.934475][ T3189] CPU: 1 UID: 0 PID: 3189 Comm: syz.5.7960 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3275.934507][ T3189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3275.934522][ T3189] Call Trace: [ 3275.934531][ T3189] [ 3275.934541][ T3189] dump_stack_lvl+0x189/0x250 [ 3275.934572][ T3189] ? __pfx____ratelimit+0x10/0x10 [ 3275.934598][ T3189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3275.934622][ T3189] ? __pfx__printk+0x10/0x10 [ 3275.934658][ T3189] ? __pfx___might_resched+0x10/0x10 [ 3275.934688][ T3189] should_fail_ex+0x414/0x560 [ 3275.934717][ T3189] should_failslab+0xa8/0x100 [ 3275.934744][ T3189] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3275.934768][ T3189] ? __alloc_skb+0x112/0x2d0 [ 3275.934803][ T3189] __alloc_skb+0x112/0x2d0 [ 3275.934838][ T3189] netlink_sendmsg+0x5c6/0xb30 [ 3275.934882][ T3189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3275.934923][ T3189] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3275.934946][ T3189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3275.934980][ T3189] __sock_sendmsg+0x21c/0x270 [ 3275.935010][ T3189] ____sys_sendmsg+0x505/0x830 [ 3275.935051][ T3189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3275.935095][ T3189] ? import_iovec+0x74/0xa0 [ 3275.935129][ T3189] ___sys_sendmsg+0x21f/0x2a0 [ 3275.935168][ T3189] ? __pfx____sys_sendmsg+0x10/0x10 [ 3275.935243][ T3189] ? __fget_files+0x2a/0x420 [ 3275.935283][ T3189] ? __fget_files+0x3a0/0x420 [ 3275.935319][ T3189] __x64_sys_sendmsg+0x19b/0x260 [ 3275.935356][ T3189] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3275.935407][ T3189] ? __pfx_ksys_write+0x10/0x10 [ 3275.935426][ T3189] ? rcu_is_watching+0x15/0xb0 [ 3275.935457][ T3189] ? do_syscall_64+0xbe/0x3b0 [ 3275.935486][ T3189] do_syscall_64+0xfa/0x3b0 [ 3275.935510][ T3189] ? lockdep_hardirqs_on+0x9c/0x150 [ 3275.935534][ T3189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3275.935556][ T3189] ? clear_bhb_loop+0x60/0xb0 [ 3275.935582][ T3189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3275.935604][ T3189] RIP: 0033:0x7f758c58ebe9 [ 3275.935624][ T3189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3275.935645][ T3189] RSP: 002b:00007f758d342038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3275.935669][ T3189] RAX: ffffffffffffffda RBX: 00007f758c7b5fa0 RCX: 00007f758c58ebe9 [ 3275.935686][ T3189] RDX: 0000000004004080 RSI: 0000200000000380 RDI: 0000000000000004 [ 3275.935701][ T3189] RBP: 00007f758d342090 R08: 0000000000000000 R09: 0000000000000000 [ 3275.935716][ T3189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3275.935730][ T3189] R13: 00007f758c7b6038 R14: 00007f758c7b5fa0 R15: 00007fffb036f3d8 [ 3275.935765][ T3189] [ 3276.480788][ T3193] syz.4.7963: attempt to access beyond end of device [ 3276.480788][ T3193] nbd4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 3276.662793][ T3196] sock: sock_timestamping_bind_phc: sock not bind to device [ 3281.019805][ T3230] nbd8: detected capacity change from 0 to 4 [ 3282.622307][ T2054] block nbd8: Receive control failed (result -104) [ 3282.645453][ T3254] syz.6.7976: attempt to access beyond end of device [ 3282.645453][ T3254] nbd6: rw=0, sector=2, nr_sectors = 1 limit=0 [ 3283.339653][ T3260] sock: sock_timestamping_bind_phc: sock not bind to device [ 3284.260167][T22231] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 3284.445973][T22231] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3284.469552][T22231] usb 7-1: not running at top speed; connect to a high speed hub [ 3284.521962][T22231] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 3284.545697][T22231] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 3284.575870][T17438] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 3284.599248][T22231] usb 7-1: config 4 has no interface number 0 [ 3284.636116][T22231] usb 7-1: string descriptor 0 read error: -22 [ 3284.647732][T22231] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 3284.674444][T22231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3284.758851][T22231] usb 7-1: Found UVC 0.00 device (04f2:b746) [ 3284.768720][T22231] usb 7-1: No valid video chain found. [ 3284.774637][T17438] usb 10-1: Using ep0 maxpacket: 16 [ 3284.787872][T17438] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3284.827393][T17438] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3284.929375][T17438] usb 10-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3285.092017][ T5959] usb 7-1: USB disconnect, device number 11 [ 3285.179272][T17438] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3285.390847][T17438] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3285.579805][T17438] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3285.832258][T17438] usb 10-1: config 0 descriptor?? [ 3286.474986][T17438] hid (null): global environment stack underflow [ 3286.538556][T17438] hid (null): unknown global tag 0xc [ 3286.576256][T17438] hid (null): invalid report_size 25705 [ 3287.164598][T17438] usb 10-1: USB disconnect, device number 28 [ 3287.213703][ T3316] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7987'. [ 3288.805671][ T3336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7991'. [ 3289.903412][ T3343] sock: sock_timestamping_bind_phc: sock not bind to device [ 3291.255963][ T3350] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7995'. [ 3292.729098][ T3350] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7995'. [ 3294.009431][ T3367] bond7: entered allmulticast mode [ 3296.679908][ T3390] sock: sock_timestamping_bind_phc: sock not bind to device [ 3297.474663][ T3399] geneve2: entered allmulticast mode [ 3298.750536][ T3405] geneve2: entered allmulticast mode [ 3298.970491][T17438] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 3299.328145][T17438] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3299.350655][T17438] usb 10-1: not running at top speed; connect to a high speed hub [ 3299.402049][T17438] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 3299.442930][T17438] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3299.455592][ T2054] Bluetooth: hci0: command 0x0406 tx timeout [ 3299.466120][T17438] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3299.694049][T17438] usb 10-1: Product: syz [ 3299.699487][T17438] usb 10-1: Manufacturer: syz [ 3299.704878][T17438] usb 10-1: SerialNumber: syz [ 3300.190735][ T3428] (syz.6.8014,3428,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 3300.199564][ T3428] (syz.6.8014,3428,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 3300.293968][T17438] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3300.440014][T17438] usb 10-1: unit 2 not found! [ 3300.449661][ T2054] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3300.462377][ T2054] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3300.475435][ T2054] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3300.488582][ T2054] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3300.501800][ T2054] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3300.552414][T17438] usb 10-1: USB disconnect, device number 29 [ 3300.635567][ T3435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8017'. [ 3300.845851][ T3440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8018'. [ 3302.376726][ T3429] chnl_net:caif_netlink_parms(): no params data found [ 3302.466571][ T3447] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8020'. [ 3302.571055][T27635] Bluetooth: hci4: command tx timeout [ 3302.599930][ T3448] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8020'. [ 3302.817314][ T3452] syz.4.8021: attempt to access beyond end of device [ 3302.817314][ T3452] nbd4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 3303.310334][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state [ 3303.317938][ T3429] bridge0: port 1(bridge_slave_0) entered disabled state [ 3303.325483][ T3429] bridge_slave_0: entered allmulticast mode [ 3303.337262][ T3429] bridge_slave_0: entered promiscuous mode [ 3303.346901][ T3429] bridge0: port 2(bridge_slave_1) entered blocking state [ 3303.354726][ T3429] bridge0: port 2(bridge_slave_1) entered disabled state [ 3303.374527][ T3429] bridge_slave_1: entered allmulticast mode [ 3303.384062][ T3429] bridge_slave_1: entered promiscuous mode [ 3304.113293][ T3429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3304.406304][ T3467] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 3304.649798][T27635] Bluetooth: hci4: command tx timeout [ 3304.689095][ T3467] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 3304.728846][ T3467] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 3304.760265][ T3467] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 3304.774659][ T3467] geneve2: entered allmulticast mode [ 3304.792331][ T3429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3306.195282][ T3429] team0: Port device team_slave_0 added [ 3306.222897][ T3429] team0: Port device team_slave_1 added [ 3306.921672][T27635] Bluetooth: hci4: command tx timeout [ 3306.925185][ T3490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8031'. [ 3307.161015][ T5959] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 3307.433861][ T3489] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 3307.476265][ T3489] bond1: entered promiscuous mode [ 3307.481518][ T3489] bond1: entered allmulticast mode [ 3307.486977][ T3489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3307.566460][ T3429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3307.623915][ T3429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3308.569582][ T3429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3308.585992][ T3429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3308.594823][ T3429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3308.621597][ T3429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3308.683733][ T3495] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 3308.698044][ T3495] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 3308.713773][ T3495] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 3308.727889][ T3495] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 3308.746327][ T3495] geneve2: entered allmulticast mode [ 3309.494421][ T2054] Bluetooth: hci4: command tx timeout [ 3309.658793][ T3429] hsr_slave_0: entered promiscuous mode [ 3309.667556][ T3429] hsr_slave_1: entered promiscuous mode [ 3309.684106][ T3429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3309.698841][ T3429] Cannot create hsr debugfs directory [ 3310.663188][ T3515] FAULT_INJECTION: forcing a failure. [ 3310.663188][ T3515] name failslab, interval 1, probability 0, space 0, times 0 [ 3310.677423][ T3515] CPU: 0 UID: 0 PID: 3515 Comm: syz.4.8038 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3310.677453][ T3515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3310.677468][ T3515] Call Trace: [ 3310.677478][ T3515] [ 3310.677488][ T3515] dump_stack_lvl+0x189/0x250 [ 3310.677520][ T3515] ? __pfx____ratelimit+0x10/0x10 [ 3310.677545][ T3515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3310.677572][ T3515] ? __pfx__printk+0x10/0x10 [ 3310.677607][ T3515] ? __pfx___might_resched+0x10/0x10 [ 3310.677639][ T3515] should_fail_ex+0x414/0x560 [ 3310.677669][ T3515] should_failslab+0xa8/0x100 [ 3310.677696][ T3515] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3310.677729][ T3515] ? __alloc_skb+0x112/0x2d0 [ 3310.677766][ T3515] __alloc_skb+0x112/0x2d0 [ 3310.677802][ T3515] netlink_sendmsg+0x5c6/0xb30 [ 3310.677846][ T3515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3310.677888][ T3515] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3310.677911][ T3515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3310.677944][ T3515] __sock_sendmsg+0x21c/0x270 [ 3310.677975][ T3515] ____sys_sendmsg+0x505/0x830 [ 3310.678017][ T3515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3310.678062][ T3515] ? import_iovec+0x74/0xa0 [ 3310.678100][ T3515] ___sys_sendmsg+0x21f/0x2a0 [ 3310.678138][ T3515] ? __pfx____sys_sendmsg+0x10/0x10 [ 3310.678214][ T3515] ? __fget_files+0x2a/0x420 [ 3310.678239][ T3515] ? __fget_files+0x3a0/0x420 [ 3310.678277][ T3515] __x64_sys_sendmsg+0x19b/0x260 [ 3310.678316][ T3515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3310.678362][ T3515] ? __pfx_ksys_write+0x10/0x10 [ 3310.678381][ T3515] ? rcu_is_watching+0x15/0xb0 [ 3310.678412][ T3515] ? do_syscall_64+0xbe/0x3b0 [ 3310.678442][ T3515] do_syscall_64+0xfa/0x3b0 [ 3310.678466][ T3515] ? lockdep_hardirqs_on+0x9c/0x150 [ 3310.678490][ T3515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3310.678513][ T3515] ? clear_bhb_loop+0x60/0xb0 [ 3310.678540][ T3515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3310.678562][ T3515] RIP: 0033:0x7f0dc798ebe9 [ 3310.678582][ T3515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3310.678602][ T3515] RSP: 002b:00007f0dc8756038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3310.678626][ T3515] RAX: ffffffffffffffda RBX: 00007f0dc7bb5fa0 RCX: 00007f0dc798ebe9 [ 3310.678643][ T3515] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 3310.678658][ T3515] RBP: 00007f0dc8756090 R08: 0000000000000000 R09: 0000000000000000 [ 3310.678672][ T3515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3310.678686][ T3515] R13: 00007f0dc7bb6038 R14: 00007f0dc7bb5fa0 R15: 00007ffe8a6ddb18 [ 3310.678727][ T3515] [ 3311.505167][ T493] block nbd8: Possible stuck request ffff8880257ce000: control (read@0,2048B). Runtime 30 seconds [ 3314.552311][ T3548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8047'. [ 3314.562734][ T3548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8047'. [ 3314.594737][ T3539] vlan2: entered promiscuous mode [ 3314.603925][ T3539] dummy0: entered promiscuous mode [ 3314.609267][ T3539] vlan2: entered allmulticast mode [ 3314.614605][ T3539] dummy0: entered allmulticast mode [ 3316.519038][ T3551] vlan2: entered promiscuous mode [ 3316.535681][ T3551] vlan2: entered allmulticast mode [ 3316.550411][ T3551] dummy0: entered allmulticast mode [ 3316.570280][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 3316.570301][ T30] audit: type=1326 audit(1755720386.578:1353): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=3565 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3316.689029][ T30] audit: type=1326 audit(1755720386.578:1354): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=3565 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3316.777520][ T30] audit: type=1326 audit(1755720386.578:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3565 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3317.206439][ T3575] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8055'. [ 3317.232056][ T30] audit: type=1326 audit(1755720386.578:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3565 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3317.499883][ T30] audit: type=1326 audit(1755720386.578:1357): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=3565 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3317.820248][ T30] audit: type=1326 audit(1755720386.578:1358): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=3565 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3317.940005][ T30] audit: type=1326 audit(1755720386.578:1359): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=3565 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3318.098116][ T30] audit: type=1326 audit(1755720386.578:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3565 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3318.133259][ T3583] 9pnet_fd: Insufficient options for proto=fd [ 3318.144361][ T30] audit: type=1326 audit(1755720386.578:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3565 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3318.210695][ T30] audit: type=1326 audit(1755720386.578:1362): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=3565 comm="syz.6.8053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3318.372371][ T3595] FAULT_INJECTION: forcing a failure. [ 3318.372371][ T3595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3318.389094][ T3595] CPU: 1 UID: 0 PID: 3595 Comm: syz.4.8060 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3318.389125][ T3595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3318.389139][ T3595] Call Trace: [ 3318.389149][ T3595] [ 3318.389160][ T3595] dump_stack_lvl+0x189/0x250 [ 3318.389192][ T3595] ? __pfx____ratelimit+0x10/0x10 [ 3318.389216][ T3595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3318.389243][ T3595] ? __pfx__printk+0x10/0x10 [ 3318.389286][ T3595] should_fail_ex+0x414/0x560 [ 3318.389317][ T3595] _copy_to_user+0x31/0xb0 [ 3318.389353][ T3595] simple_read_from_buffer+0xe1/0x170 [ 3318.389384][ T3595] proc_fail_nth_read+0x1df/0x250 [ 3318.389416][ T3595] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3318.389448][ T3595] ? rw_verify_area+0x258/0x650 [ 3318.389482][ T3595] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3318.389511][ T3595] vfs_read+0x200/0x980 [ 3318.389552][ T3595] ? __pfx___mutex_lock+0x10/0x10 [ 3318.389579][ T3595] ? __pfx_vfs_read+0x10/0x10 [ 3318.389616][ T3595] ? __fget_files+0x2a/0x420 [ 3318.389648][ T3595] ? __fget_files+0x3a0/0x420 [ 3318.389675][ T3595] ? __fget_files+0x2a/0x420 [ 3318.389707][ T3595] ksys_read+0x145/0x250 [ 3318.389730][ T3595] ? __pfx_ksys_read+0x10/0x10 [ 3318.389756][ T3595] ? do_syscall_64+0xbe/0x3b0 [ 3318.389784][ T3595] do_syscall_64+0xfa/0x3b0 [ 3318.389807][ T3595] ? lockdep_hardirqs_on+0x9c/0x150 [ 3318.389831][ T3595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3318.389854][ T3595] ? clear_bhb_loop+0x60/0xb0 [ 3318.389882][ T3595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3318.389904][ T3595] RIP: 0033:0x7f0dc798d5fc [ 3318.389924][ T3595] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3318.389944][ T3595] RSP: 002b:00007f0dc8756030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3318.389980][ T3595] RAX: ffffffffffffffda RBX: 00007f0dc7bb5fa0 RCX: 00007f0dc798d5fc [ 3318.389997][ T3595] RDX: 000000000000000f RSI: 00007f0dc87560a0 RDI: 0000000000000004 [ 3318.390011][ T3595] RBP: 00007f0dc8756090 R08: 0000000000000000 R09: 0000000000000000 [ 3318.390026][ T3595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3318.390040][ T3595] R13: 00007f0dc7bb6038 R14: 00007f0dc7bb5fa0 R15: 00007ffe8a6ddb18 [ 3318.390077][ T3595] [ 3319.365439][ T3572] syzkaller1: entered promiscuous mode [ 3319.388629][ T3572] syzkaller1: entered allmulticast mode [ 3320.617381][ T3429] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3321.591691][ T3429] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3321.815583][ T3429] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3322.655373][ T3429] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3322.785816][ T3637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8068'. [ 3322.791446][ T3638] netlink: 'syz.5.8070': attribute type 16 has an invalid length. [ 3322.907367][ T3638] netlink: 'syz.5.8070': attribute type 17 has an invalid length. [ 3323.295515][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 3323.302762][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3323.310316][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 3323.317449][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3323.337372][ T3638] bridge0: left allmulticast mode [ 3323.354572][ T3638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3323.928373][ T3656] syz.5.8073: attempt to access beyond end of device [ 3323.928373][ T3656] nbd5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 3326.299996][T22231] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 3326.573355][T22231] usb 7-1: Using ep0 maxpacket: 16 [ 3326.733479][T22231] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 3326.747143][ T3429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3326.797750][T22231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3326.851652][T22231] usb 7-1: Product: syz [ 3326.868007][ T3429] 8021q: adding VLAN 0 to HW filter on device team0 [ 3326.880417][T22231] usb 7-1: Manufacturer: syz [ 3326.885429][T22231] usb 7-1: SerialNumber: syz [ 3327.004212][T22231] usb 7-1: config 0 descriptor?? [ 3327.114426][T22231] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 3327.853635][T22231] usb 7-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 3328.061841][T28325] bridge0: port 1(bridge_slave_0) entered blocking state [ 3328.069053][T28325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3328.701944][T28325] bridge0: port 2(bridge_slave_1) entered blocking state [ 3328.709224][T28325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3330.863837][ T3429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3331.080109][T30548] usb 7-1: USB disconnect, device number 13 [ 3331.099945][T30548] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 3331.147687][T30548] visor 7-1:0.0: device disconnected [ 3331.289948][T22231] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 3331.429385][ T3429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3331.476278][T22231] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3331.523118][T22231] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3331.838923][T22231] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3331.954645][T22231] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3331.987660][T22231] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3333.083195][T22231] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3333.138990][T22231] usb 6-1: invalid MIDI out EP 0 [ 3333.215783][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3334.792578][T22231] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 3334.841869][ T3429] veth0_vlan: entered promiscuous mode [ 3334.848445][ T3719] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 3334.878433][ T3719] bond8: entered promiscuous mode [ 3334.883679][ T3719] bond8: entered allmulticast mode [ 3334.889188][ T3719] 8021q: adding VLAN 0 to HW filter on device bond8 [ 3334.964460][T22231] usb 6-1: USB disconnect, device number 8 [ 3335.173161][ T3429] veth1_vlan: entered promiscuous mode [ 3335.407803][ T3429] veth0_macvtap: entered promiscuous mode [ 3335.724967][ T3429] veth1_macvtap: entered promiscuous mode [ 3336.200716][ T3727] bridge0: port 2(bridge_slave_1) entered disabled state [ 3336.208333][ T3727] bridge0: port 1(bridge_slave_0) entered disabled state [ 3336.229182][ T3727] bridge0: entered allmulticast mode [ 3336.643890][ T3429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3336.951743][ T3429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3337.245521][ T3429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3337.266124][ T3735] netlink: 'syz.6.8093': attribute type 64 has an invalid length. [ 3337.290219][ T3429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3337.319410][ T3730] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8092'. [ 3337.334847][ T3735] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8093'. [ 3337.346099][ T3429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3337.371259][ T3429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3337.626654][ T3742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8094'. [ 3337.678446][ T3744] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8095'. [ 3337.763275][ T3748] FAULT_INJECTION: forcing a failure. [ 3337.763275][ T3748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3337.776649][ T3744] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8095'. [ 3337.804902][ T3748] CPU: 1 UID: 0 PID: 3748 Comm: syz.6.8095 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3337.804936][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3337.804951][ T3748] Call Trace: [ 3337.804961][ T3748] [ 3337.804971][ T3748] dump_stack_lvl+0x189/0x250 [ 3337.805003][ T3748] ? __pfx____ratelimit+0x10/0x10 [ 3337.805029][ T3748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3337.805056][ T3748] ? __pfx__printk+0x10/0x10 [ 3337.805101][ T3748] should_fail_ex+0x414/0x560 [ 3337.805131][ T3748] _copy_to_user+0x31/0xb0 [ 3337.805166][ T3748] simple_read_from_buffer+0xe1/0x170 [ 3337.805196][ T3748] proc_fail_nth_read+0x1df/0x250 [ 3337.805229][ T3748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3337.805262][ T3748] ? rw_verify_area+0x258/0x650 [ 3337.805297][ T3748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3337.805327][ T3748] vfs_read+0x200/0x980 [ 3337.805378][ T3748] ? __pfx___mutex_lock+0x10/0x10 [ 3337.805407][ T3748] ? __pfx_vfs_read+0x10/0x10 [ 3337.805444][ T3748] ? __fget_files+0x2a/0x420 [ 3337.805476][ T3748] ? __fget_files+0x3a0/0x420 [ 3337.805501][ T3748] ? __fget_files+0x2a/0x420 [ 3337.805538][ T3748] ksys_read+0x145/0x250 [ 3337.805563][ T3748] ? __pfx_ksys_read+0x10/0x10 [ 3337.805591][ T3748] ? do_syscall_64+0xbe/0x3b0 [ 3337.805622][ T3748] do_syscall_64+0xfa/0x3b0 [ 3337.805646][ T3748] ? lockdep_hardirqs_on+0x9c/0x150 [ 3337.805670][ T3748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3337.805694][ T3748] ? clear_bhb_loop+0x60/0xb0 [ 3337.805722][ T3748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3337.805745][ T3748] RIP: 0033:0x7fa5ab38d5fc [ 3337.805767][ T3748] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3337.805788][ T3748] RSP: 002b:00007fa5ac122030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3337.805813][ T3748] RAX: ffffffffffffffda RBX: 00007fa5ab5b6090 RCX: 00007fa5ab38d5fc [ 3337.805830][ T3748] RDX: 000000000000000f RSI: 00007fa5ac1220a0 RDI: 0000000000000004 [ 3337.805846][ T3748] RBP: 00007fa5ac122090 R08: 0000000000000000 R09: 0000000000000000 [ 3337.805859][ T3748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3337.805873][ T3748] R13: 00007fa5ab5b6128 R14: 00007fa5ab5b6090 R15: 00007ffdd4a724f8 [ 3337.805908][ T3748] [ 3338.087594][T19933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3338.107529][T19933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3338.132917][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3338.230075][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3338.313195][ T3751] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 3338.319806][ T3751] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3338.413790][ T3751] vhci_hcd vhci_hcd.0: Device attached [ 3338.470978][ T3759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8098'. [ 3338.531105][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8098'. [ 3339.453164][T30662] usb 52-1: SetAddress Request (2) to port 0 [ 3339.461837][T30662] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 3340.159581][ T3752] vhci_hcd: connection reset by peer [ 3340.177235][ T1370] vhci_hcd: stop threads [ 3340.182949][ T1370] vhci_hcd: release socket [ 3340.187626][ T1370] vhci_hcd: disconnect device [ 3340.893752][ T3781] FAULT_INJECTION: forcing a failure. [ 3340.893752][ T3781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3340.913558][ T3781] CPU: 1 UID: 0 PID: 3781 Comm: syz.6.8104 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3340.913590][ T3781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3340.913604][ T3781] Call Trace: [ 3340.913614][ T3781] [ 3340.913625][ T3781] dump_stack_lvl+0x189/0x250 [ 3340.913657][ T3781] ? __pfx____ratelimit+0x10/0x10 [ 3340.913682][ T3781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3340.913708][ T3781] ? __pfx__printk+0x10/0x10 [ 3340.913751][ T3781] should_fail_ex+0x414/0x560 [ 3340.913781][ T3781] _copy_to_user+0x31/0xb0 [ 3340.913815][ T3781] simple_read_from_buffer+0xe1/0x170 [ 3340.913855][ T3781] proc_fail_nth_read+0x1df/0x250 [ 3340.913887][ T3781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3340.913918][ T3781] ? rw_verify_area+0x258/0x650 [ 3340.913951][ T3781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3340.913981][ T3781] vfs_read+0x200/0x980 [ 3340.914022][ T3781] ? __pfx___mutex_lock+0x10/0x10 [ 3340.914049][ T3781] ? __pfx_vfs_read+0x10/0x10 [ 3340.914084][ T3781] ? __fget_files+0x2a/0x420 [ 3340.914116][ T3781] ? __fget_files+0x3a0/0x420 [ 3340.914139][ T3781] ? __fget_files+0x2a/0x420 [ 3340.914175][ T3781] ksys_read+0x145/0x250 [ 3340.914199][ T3781] ? __pfx_ksys_read+0x10/0x10 [ 3340.914215][ T3781] ? rcu_is_watching+0x15/0xb0 [ 3340.914243][ T3781] ? do_syscall_64+0xbe/0x3b0 [ 3340.914268][ T3781] do_syscall_64+0xfa/0x3b0 [ 3340.914290][ T3781] ? lockdep_hardirqs_on+0x9c/0x150 [ 3340.914313][ T3781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3340.914335][ T3781] ? clear_bhb_loop+0x60/0xb0 [ 3340.914361][ T3781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3340.914383][ T3781] RIP: 0033:0x7fa5ab38d5fc [ 3340.914403][ T3781] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3340.914423][ T3781] RSP: 002b:00007fa5ac143030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3340.914447][ T3781] RAX: ffffffffffffffda RBX: 00007fa5ab5b5fa0 RCX: 00007fa5ab38d5fc [ 3340.914463][ T3781] RDX: 000000000000000f RSI: 00007fa5ac1430a0 RDI: 0000000000000006 [ 3340.914476][ T3781] RBP: 00007fa5ac143090 R08: 0000000000000000 R09: 0000000000000000 [ 3340.914491][ T3781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3340.914504][ T3781] R13: 00007fa5ab5b6038 R14: 00007fa5ab5b5fa0 R15: 00007ffdd4a724f8 [ 3340.914541][ T3781] [ 3341.547423][ T493] block nbd8: Possible stuck request ffff8880257ce000: control (read@0,2048B). Runtime 60 seconds [ 3342.082750][ T3801] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 3342.335838][ T3801] bond3: entered promiscuous mode [ 3342.341320][ T3801] bond3: entered allmulticast mode [ 3342.347385][ T3801] 8021q: adding VLAN 0 to HW filter on device bond3 [ 3342.559844][T17438] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 3344.580581][T30662] usb 52-1: device descriptor read/8, error -110 [ 3345.204068][T30662] usb usb52-port1: attempt power cycle [ 3345.242222][ T3824] syz.0.8116: attempt to access beyond end of device [ 3345.242222][ T3824] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 3346.698441][T30662] usb usb52-port1: unable to enumerate USB device [ 3346.722734][ T3826] pim6reg1: entered promiscuous mode [ 3347.108668][ T3836] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 3347.374332][ T3836] bond1: entered promiscuous mode [ 3347.379445][ T3836] bond1: entered allmulticast mode [ 3347.385028][ T3836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3347.408878][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 3347.408930][ T30] audit: type=1326 audit(1755720417.378:1407): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=3837 comm="syz.6.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3347.428401][ T3844] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8122'. [ 3347.440975][ T30] audit: type=1326 audit(1755720417.378:1408): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=3837 comm="syz.6.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3347.484522][ T30] audit: type=1326 audit(1755720417.378:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3837 comm="syz.6.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3347.512556][ T30] audit: type=1326 audit(1755720417.378:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3837 comm="syz.6.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3347.537522][ T30] audit: type=1326 audit(1755720417.418:1411): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=3837 comm="syz.6.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3347.560907][ T30] audit: type=1326 audit(1755720417.418:1412): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=3837 comm="syz.6.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3347.586297][ T30] audit: type=1326 audit(1755720417.418:1413): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=3837 comm="syz.6.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3347.616419][ T30] audit: type=1326 audit(1755720417.418:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3837 comm="syz.6.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3347.764206][ T3846] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8120'. [ 3347.775999][ T30] audit: type=1326 audit(1755720417.418:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3837 comm="syz.6.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3348.081285][ T30] audit: type=1326 audit(1755720417.418:1416): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=3837 comm="syz.6.8119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fa5ab38ebe9 code=0x7ffc0000 [ 3348.517696][ T3851] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8123'. [ 3349.719287][ T3864] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 3350.344673][ T3864] bond9: entered promiscuous mode [ 3350.349957][ T3864] bond9: entered allmulticast mode [ 3350.355448][ T3864] 8021q: adding VLAN 0 to HW filter on device bond9 [ 3352.117777][ T3879] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.8131'. [ 3352.215355][ T3882] syz.6.8132: attempt to access beyond end of device [ 3352.215355][ T3882] nbd6: rw=0, sector=2, nr_sectors = 1 limit=0 [ 3354.387103][ T3894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8135'. [ 3354.701067][ T3904] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 3359.725319][ T3944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8149'. [ 3360.452420][ T3953] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3363.519793][ T3979] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8160'. [ 3365.288668][ T3996] overlayfs: overlapping lowerdir path [ 3366.082342][ T3998] Bluetooth: MGMT ver 1.23 [ 3368.432231][ T2054] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 3368.438245][T27635] Bluetooth: hci2: command 0x0406 tx timeout [ 3368.486716][ T4015] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8170'. [ 3369.110154][ T4015] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8170'. [ 3369.138135][ T4017] geneve2: entered allmulticast mode [ 3371.629578][ T493] block nbd8: Possible stuck request ffff8880257ce000: control (read@0,2048B). Runtime 90 seconds [ 3372.187876][ T4053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8182'. [ 3372.489402][ T4061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8186'. [ 3372.537577][ T4061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8186'. [ 3372.721263][ T4068] 9pnet_fd: Insufficient options for proto=fd [ 3373.548679][ T4073] FAULT_INJECTION: forcing a failure. [ 3373.548679][ T4073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3373.765207][ T4073] CPU: 1 UID: 0 PID: 4073 Comm: syz.5.8190 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3373.765242][ T4073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3373.765256][ T4073] Call Trace: [ 3373.765266][ T4073] [ 3373.765276][ T4073] dump_stack_lvl+0x189/0x250 [ 3373.765308][ T4073] ? __pfx____ratelimit+0x10/0x10 [ 3373.765334][ T4073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3373.765359][ T4073] ? __pfx__printk+0x10/0x10 [ 3373.765389][ T4073] ? __might_fault+0xb0/0x130 [ 3373.765425][ T4073] should_fail_ex+0x414/0x560 [ 3373.765454][ T4073] _copy_from_user+0x2d/0xb0 [ 3373.765487][ T4073] kstrtouint_from_user+0xc4/0x170 [ 3373.765517][ T4073] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 3373.765563][ T4073] proc_fail_nth_write+0x88/0x240 [ 3373.765592][ T4073] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 3373.765627][ T4073] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 3373.765657][ T4073] vfs_write+0x27e/0xa90 [ 3373.765690][ T4073] ? __pfx_vfs_write+0x10/0x10 [ 3373.765713][ T4073] ? __fget_files+0x2a/0x420 [ 3373.765744][ T4073] ? __fget_files+0x3a0/0x420 [ 3373.765767][ T4073] ? __fget_files+0x2a/0x420 [ 3373.765803][ T4073] ksys_write+0x145/0x250 [ 3373.765828][ T4073] ? __pfx_ksys_write+0x10/0x10 [ 3373.765846][ T4073] ? rcu_is_watching+0x15/0xb0 [ 3373.765877][ T4073] ? do_syscall_64+0xbe/0x3b0 [ 3373.765914][ T4073] do_syscall_64+0xfa/0x3b0 [ 3373.765937][ T4073] ? lockdep_hardirqs_on+0x9c/0x150 [ 3373.765960][ T4073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3373.765983][ T4073] ? clear_bhb_loop+0x60/0xb0 [ 3373.766010][ T4073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3373.766032][ T4073] RIP: 0033:0x7f758c58d69f [ 3373.766053][ T4073] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 3373.766073][ T4073] RSP: 002b:00007f758d342030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3373.766097][ T4073] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f758c58d69f [ 3373.766114][ T4073] RDX: 0000000000000001 RSI: 00007f758d3420a0 RDI: 0000000000000005 [ 3373.766128][ T4073] RBP: 00007f758d342090 R08: 0000000000000000 R09: 0000000000000000 [ 3373.766142][ T4073] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3373.766156][ T4073] R13: 00007f758c7b6038 R14: 00007f758c7b5fa0 R15: 00007fffb036f3d8 [ 3373.766192][ T4073] [ 3375.426268][ T4064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8185'. [ 3375.921930][ T4084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8196'. [ 3377.496913][ T4102] FAULT_INJECTION: forcing a failure. [ 3377.496913][ T4102] name failslab, interval 1, probability 0, space 0, times 0 [ 3377.548071][ T4102] CPU: 0 UID: 0 PID: 4102 Comm: syz.5.8197 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3377.548104][ T4102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3377.548120][ T4102] Call Trace: [ 3377.548130][ T4102] [ 3377.548140][ T4102] dump_stack_lvl+0x189/0x250 [ 3377.548171][ T4102] ? __pfx____ratelimit+0x10/0x10 [ 3377.548196][ T4102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3377.548223][ T4102] ? __pfx__printk+0x10/0x10 [ 3377.548255][ T4102] ? __pfx___might_resched+0x10/0x10 [ 3377.548279][ T4102] ? fs_reclaim_acquire+0x7d/0x100 [ 3377.548314][ T4102] should_fail_ex+0x414/0x560 [ 3377.548346][ T4102] should_failslab+0xa8/0x100 [ 3377.548374][ T4102] __kmalloc_noprof+0xcb/0x4f0 [ 3377.548397][ T4102] ? tomoyo_encode+0x28b/0x550 [ 3377.548432][ T4102] tomoyo_encode+0x28b/0x550 [ 3377.548469][ T4102] tomoyo_realpath_from_path+0x58d/0x5d0 [ 3377.548512][ T4102] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3377.548546][ T4102] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3377.548575][ T4102] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3377.548620][ T4102] ? __lock_acquire+0xab9/0xd20 [ 3377.548666][ T4102] ? __fget_files+0x2a/0x420 [ 3377.548696][ T4102] ? __fget_files+0x2a/0x420 [ 3377.548720][ T4102] ? __fget_files+0x3a0/0x420 [ 3377.548745][ T4102] ? __fget_files+0x2a/0x420 [ 3377.548777][ T4102] security_file_ioctl+0xcb/0x2d0 [ 3377.548806][ T4102] __se_sys_ioctl+0x47/0x170 [ 3377.548843][ T4102] do_syscall_64+0xfa/0x3b0 [ 3377.548870][ T4102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3377.548892][ T4102] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 3377.548914][ T4102] ? clear_bhb_loop+0x60/0xb0 [ 3377.548943][ T4102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3377.548966][ T4102] RIP: 0033:0x7f758c58ebe9 [ 3377.548986][ T4102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3377.549007][ T4102] RSP: 002b:00007f758d342038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3377.549031][ T4102] RAX: ffffffffffffffda RBX: 00007f758c7b5fa0 RCX: 00007f758c58ebe9 [ 3377.549046][ T4102] RDX: 0000200000000280 RSI: 0000000040605346 RDI: 0000000000000006 [ 3377.549061][ T4102] RBP: 00007f758d342090 R08: 0000000000000000 R09: 0000000000000000 [ 3377.549075][ T4102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3377.549088][ T4102] R13: 00007f758c7b6038 R14: 00007f758c7b5fa0 R15: 00007fffb036f3d8 [ 3377.549121][ T4102] [ 3377.549144][ T4102] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3377.907989][ T4110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8201'. [ 3378.098786][ T4115] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 3378.289823][T17438] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 3378.450963][T17438] usb 7-1: Using ep0 maxpacket: 16 [ 3378.527027][T17438] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3378.579306][T17438] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3378.682998][T17438] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3379.060520][T17438] usb 7-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 3379.069713][T17438] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3379.080738][T17438] usb 7-1: config 0 descriptor?? [ 3379.887459][T17438] usbhid 7-1:0.0: can't add hid device: -71 [ 3379.929909][T17438] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 3380.534060][T17438] usb 7-1: USB disconnect, device number 14 [ 3381.562899][ T4138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8209'. [ 3383.468411][ T4147] FAULT_INJECTION: forcing a failure. [ 3383.468411][ T4147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3383.534243][ T4147] CPU: 0 UID: 0 PID: 4147 Comm: syz.0.8212 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3383.534278][ T4147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3383.534292][ T4147] Call Trace: [ 3383.534301][ T4147] [ 3383.534310][ T4147] dump_stack_lvl+0x189/0x250 [ 3383.534340][ T4147] ? __pfx____ratelimit+0x10/0x10 [ 3383.534363][ T4147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3383.534386][ T4147] ? __pfx__printk+0x10/0x10 [ 3383.534423][ T4147] should_fail_ex+0x414/0x560 [ 3383.534449][ T4147] _copy_to_user+0x31/0xb0 [ 3383.534479][ T4147] simple_read_from_buffer+0xe1/0x170 [ 3383.534505][ T4147] proc_fail_nth_read+0x1df/0x250 [ 3383.534533][ T4147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3383.534560][ T4147] ? rw_verify_area+0x258/0x650 [ 3383.534589][ T4147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3383.534614][ T4147] vfs_read+0x200/0x980 [ 3383.534649][ T4147] ? __pfx___mutex_lock+0x10/0x10 [ 3383.534671][ T4147] ? __pfx_vfs_read+0x10/0x10 [ 3383.534863][ T4147] ? __fget_files+0x2a/0x420 [ 3383.534893][ T4147] ? __fget_files+0x3a0/0x420 [ 3383.534914][ T4147] ? __fget_files+0x2a/0x420 [ 3383.534946][ T4147] ksys_read+0x145/0x250 [ 3383.534970][ T4147] ? __pfx_ksys_read+0x10/0x10 [ 3383.534986][ T4147] ? rcu_is_watching+0x15/0xb0 [ 3383.535118][ T4147] ? do_syscall_64+0xbe/0x3b0 [ 3383.535158][ T4147] do_syscall_64+0xfa/0x3b0 [ 3383.535186][ T4147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3383.535205][ T4147] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 3383.535225][ T4147] ? clear_bhb_loop+0x60/0xb0 [ 3383.535249][ T4147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3383.535269][ T4147] RIP: 0033:0x7f654638d5fc [ 3383.535291][ T4147] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3383.535310][ T4147] RSP: 002b:00007f65471f2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3383.535332][ T4147] RAX: ffffffffffffffda RBX: 00007f65465b5fa0 RCX: 00007f654638d5fc [ 3383.535348][ T4147] RDX: 000000000000000f RSI: 00007f65471f20a0 RDI: 0000000000000004 [ 3383.535361][ T4147] RBP: 00007f65471f2090 R08: 0000000000000000 R09: 0000000000000000 [ 3383.535374][ T4147] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 3383.535386][ T4147] R13: 00007f65465b6038 R14: 00007f65465b5fa0 R15: 00007ffee400ccb8 [ 3383.535418][ T4147] [ 3383.981766][ T4158] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 3383.999983][T30073] IPVS: starting estimator thread 0... [ 3384.099185][ T4161] IPVS: using max 23 ests per chain, 55200 per kthread [ 3385.764423][ T4181] FAULT_INJECTION: forcing a failure. [ 3385.764423][ T4181] name failslab, interval 1, probability 0, space 0, times 0 [ 3385.777370][ T4181] CPU: 1 UID: 0 PID: 4181 Comm: syz.4.8222 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3385.777400][ T4181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3385.777414][ T4181] Call Trace: [ 3385.777423][ T4181] [ 3385.777434][ T4181] dump_stack_lvl+0x189/0x250 [ 3385.777465][ T4181] ? __pfx____ratelimit+0x10/0x10 [ 3385.777491][ T4181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3385.777516][ T4181] ? __pfx__printk+0x10/0x10 [ 3385.777550][ T4181] ? __pfx___might_resched+0x10/0x10 [ 3385.777575][ T4181] ? fs_reclaim_acquire+0x7d/0x100 [ 3385.777608][ T4181] should_fail_ex+0x414/0x560 [ 3385.777639][ T4181] should_failslab+0xa8/0x100 [ 3385.777665][ T4181] __kmalloc_noprof+0xcb/0x4f0 [ 3385.777687][ T4181] ? tomoyo_encode+0x28b/0x550 [ 3385.777722][ T4181] tomoyo_encode+0x28b/0x550 [ 3385.777766][ T4181] tomoyo_realpath_from_path+0x58d/0x5d0 [ 3385.777809][ T4181] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3385.777835][ T4181] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3385.777863][ T4181] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3385.777907][ T4181] ? __lock_acquire+0xab9/0xd20 [ 3385.777952][ T4181] ? __fget_files+0x2a/0x420 [ 3385.777982][ T4181] ? __fget_files+0x2a/0x420 [ 3385.778005][ T4181] ? __fget_files+0x3a0/0x420 [ 3385.778029][ T4181] ? __fget_files+0x2a/0x420 [ 3385.778060][ T4181] security_file_ioctl+0xcb/0x2d0 [ 3385.778089][ T4181] __se_sys_ioctl+0x47/0x170 [ 3385.778126][ T4181] do_syscall_64+0xfa/0x3b0 [ 3385.778151][ T4181] ? lockdep_hardirqs_on+0x9c/0x150 [ 3385.778175][ T4181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3385.778199][ T4181] ? clear_bhb_loop+0x60/0xb0 [ 3385.778227][ T4181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3385.778250][ T4181] RIP: 0033:0x7f0dc798ebe9 [ 3385.778270][ T4181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3385.778291][ T4181] RSP: 002b:00007f0dc8714038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3385.778315][ T4181] RAX: ffffffffffffffda RBX: 00007f0dc7bb6180 RCX: 00007f0dc798ebe9 [ 3385.778332][ T4181] RDX: 0000200000001600 RSI: 0000000000004c0a RDI: 0000000000000006 [ 3385.778348][ T4181] RBP: 00007f0dc8714090 R08: 0000000000000000 R09: 0000000000000000 [ 3385.778363][ T4181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3385.778377][ T4181] R13: 00007f0dc7bb6218 R14: 00007f0dc7bb6180 R15: 00007ffe8a6ddb18 [ 3385.778413][ T4181] [ 3386.018016][ C1] vkms_vblank_simulate: vblank timer overrun [ 3386.024946][ T4181] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3386.039945][ T4181] loop9: detected capacity change from 0 to 7 [ 3386.054884][ T4181] buffer_io_error: 23 callbacks suppressed [ 3386.061008][ T4181] Buffer I/O error on dev loop9, logical block 0, async page read [ 3386.069809][ T4181] Buffer I/O error on dev loop9, logical block 0, async page read [ 3386.079947][ T4181] Buffer I/O error on dev loop9, logical block 0, async page read [ 3386.089691][ T4181] Buffer I/O error on dev loop9, logical block 0, async page read [ 3386.099489][ T4181] Buffer I/O error on dev loop9, logical block 0, async page read [ 3386.109174][ T4181] Buffer I/O error on dev loop9, logical block 0, async page read [ 3386.118731][ T4181] Buffer I/O error on dev loop9, logical block 0, async page read [ 3386.127060][ T4181] ldm_validate_partition_table(): Disk read failed. [ 3386.133852][ T4181] Buffer I/O error on dev loop9, logical block 0, async page read [ 3386.142139][ T4181] Buffer I/O error on dev loop9, logical block 0, async page read [ 3386.150479][ T4181] Buffer I/O error on dev loop9, logical block 0, async page read [ 3386.158690][ T4181] Dev loop9: unable to read RDB block 0 [ 3386.164938][ T4181] loop9: unable to read partition table [ 3386.171080][ T4181] loop9: partition table beyond EOD, truncated [ 3386.177596][ T4181] loop_reread_partitions: partition scan of loop9 (þ被x½d|¤´à–‘) failed (rc=-5) [ 3386.638399][ T4184] FAULT_INJECTION: forcing a failure. [ 3386.638399][ T4184] name failslab, interval 1, probability 0, space 0, times 0 [ 3386.687026][ T4184] CPU: 1 UID: 0 PID: 4184 Comm: syz.6.8223 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3386.687058][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3386.687073][ T4184] Call Trace: [ 3386.687084][ T4184] [ 3386.687095][ T4184] dump_stack_lvl+0x189/0x250 [ 3386.687128][ T4184] ? __pfx____ratelimit+0x10/0x10 [ 3386.687152][ T4184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3386.687177][ T4184] ? __pfx__printk+0x10/0x10 [ 3386.687210][ T4184] ? __pfx___might_resched+0x10/0x10 [ 3386.687240][ T4184] should_fail_ex+0x414/0x560 [ 3386.687270][ T4184] should_failslab+0xa8/0x100 [ 3386.687297][ T4184] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3386.687319][ T4184] ? __alloc_skb+0x112/0x2d0 [ 3386.687354][ T4184] __alloc_skb+0x112/0x2d0 [ 3386.687389][ T4184] netlink_sendmsg+0x5c6/0xb30 [ 3386.687433][ T4184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3386.687475][ T4184] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3386.687499][ T4184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3386.687532][ T4184] __sock_sendmsg+0x21c/0x270 [ 3386.687563][ T4184] ____sys_sendmsg+0x505/0x830 [ 3386.687604][ T4184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3386.687660][ T4184] ? import_iovec+0x74/0xa0 [ 3386.687695][ T4184] ___sys_sendmsg+0x21f/0x2a0 [ 3386.687733][ T4184] ? __pfx____sys_sendmsg+0x10/0x10 [ 3386.687831][ T4184] ? __fget_files+0x2a/0x420 [ 3386.687857][ T4184] ? __fget_files+0x3a0/0x420 [ 3386.687894][ T4184] __x64_sys_sendmsg+0x19b/0x260 [ 3386.687933][ T4184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3386.687978][ T4184] ? __pfx_ksys_write+0x10/0x10 [ 3386.687996][ T4184] ? rcu_is_watching+0x15/0xb0 [ 3386.688028][ T4184] ? do_syscall_64+0xbe/0x3b0 [ 3386.688063][ T4184] do_syscall_64+0xfa/0x3b0 [ 3386.688086][ T4184] ? lockdep_hardirqs_on+0x9c/0x150 [ 3386.688110][ T4184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3386.688133][ T4184] ? clear_bhb_loop+0x60/0xb0 [ 3386.688161][ T4184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3386.688182][ T4184] RIP: 0033:0x7fa5ab38ebe9 [ 3386.688203][ T4184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3386.688223][ T4184] RSP: 002b:00007fa5ac143038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3386.688246][ T4184] RAX: ffffffffffffffda RBX: 00007fa5ab5b5fa0 RCX: 00007fa5ab38ebe9 [ 3386.688263][ T4184] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 3386.688276][ T4184] RBP: 00007fa5ac143090 R08: 0000000000000000 R09: 0000000000000000 [ 3386.688290][ T4184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3386.688303][ T4184] R13: 00007fa5ab5b6038 R14: 00007fa5ab5b5fa0 R15: 00007ffdd4a724f8 [ 3386.688336][ T4184] [ 3386.951656][ C1] vkms_vblank_simulate: vblank timer overrun [ 3387.126219][ T4195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8226'. [ 3387.787180][ T4205] binder: 4203:4205 ioctl c018620c 200000000000 returned -22 [ 3388.150235][ T4213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3389.823493][ T4220] FAULT_INJECTION: forcing a failure. [ 3389.823493][ T4220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3389.836990][ T4220] CPU: 1 UID: 0 PID: 4220 Comm: syz.0.8233 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3389.837019][ T4220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3389.837033][ T4220] Call Trace: [ 3389.837043][ T4220] [ 3389.837053][ T4220] dump_stack_lvl+0x189/0x250 [ 3389.837086][ T4220] ? __pfx____ratelimit+0x10/0x10 [ 3389.837112][ T4220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3389.837138][ T4220] ? __pfx__printk+0x10/0x10 [ 3389.837169][ T4220] ? __might_fault+0xb0/0x130 [ 3389.837206][ T4220] should_fail_ex+0x414/0x560 [ 3389.837237][ T4220] _copy_from_user+0x2d/0xb0 [ 3389.837271][ T4220] kstrtouint_from_user+0xc4/0x170 [ 3389.837301][ T4220] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 3389.837355][ T4220] proc_fail_nth_write+0x88/0x240 [ 3389.837385][ T4220] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 3389.837421][ T4220] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 3389.837451][ T4220] vfs_write+0x27e/0xa90 [ 3389.837485][ T4220] ? __pfx_vfs_write+0x10/0x10 [ 3389.837509][ T4220] ? __fget_files+0x2a/0x420 [ 3389.837541][ T4220] ? __fget_files+0x3a0/0x420 [ 3389.837565][ T4220] ? __fget_files+0x2a/0x420 [ 3389.837602][ T4220] ksys_write+0x145/0x250 [ 3389.837628][ T4220] ? __pfx_ksys_write+0x10/0x10 [ 3389.837647][ T4220] ? rcu_is_watching+0x15/0xb0 [ 3389.837679][ T4220] ? do_syscall_64+0xbe/0x3b0 [ 3389.837710][ T4220] do_syscall_64+0xfa/0x3b0 [ 3389.837734][ T4220] ? lockdep_hardirqs_on+0x9c/0x150 [ 3389.837758][ T4220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3389.837781][ T4220] ? clear_bhb_loop+0x60/0xb0 [ 3389.837810][ T4220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3389.837833][ T4220] RIP: 0033:0x7f654638d69f [ 3389.837854][ T4220] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 3389.837874][ T4220] RSP: 002b:00007f65471b0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3389.837899][ T4220] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f654638d69f [ 3389.837915][ T4220] RDX: 0000000000000001 RSI: 00007f65471b00a0 RDI: 0000000000000007 [ 3389.837930][ T4220] RBP: 00007f65471b0090 R08: 0000000000000000 R09: 0000000000000000 [ 3389.837945][ T4220] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3389.837959][ T4220] R13: 00007f65465b6218 R14: 00007f65465b6180 R15: 00007ffee400ccb8 [ 3389.837997][ T4220] [ 3390.275804][ T4226] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8235'. [ 3390.285494][ T4226] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8235'. [ 3390.300146][ T4226] sit1: entered allmulticast mode [ 3390.679097][ T4239] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 3391.358043][ T4239] bond11: entered promiscuous mode [ 3391.363364][ T4239] bond11: entered allmulticast mode [ 3391.368934][ T4239] 8021q: adding VLAN 0 to HW filter on device bond11 [ 3391.510261][T30073] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 3393.530147][T31701] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 3393.664949][ T4266] syz.6.8246: attempt to access beyond end of device [ 3393.664949][ T4266] nbd6: rw=0, sector=2, nr_sectors = 1 limit=0 [ 3393.909714][T31701] usb 10-1: Using ep0 maxpacket: 32 [ 3394.654551][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3395.412801][T31701] usb 10-1: config 0 has an invalid interface number: 57 but max is 0 [ 3395.508416][T31701] usb 10-1: config 0 has no interface number 0 [ 3395.537579][T31701] usb 10-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=c7.5c [ 3395.547440][T31701] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3395.555732][T31701] usb 10-1: Product: syz [ 3395.560359][T31701] usb 10-1: Manufacturer: syz [ 3395.565126][T31701] usb 10-1: SerialNumber: syz [ 3395.916401][T31701] usb 10-1: config 0 descriptor?? [ 3396.207103][T31701] kaweth 10-1:0.57: Firmware present in device. [ 3396.337546][ T4275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8250'. [ 3396.392228][T31701] kaweth 10-1:0.57: Statistics collection: 0 [ 3396.418634][T31701] kaweth 10-1:0.57: Multicast filter limit: 0 [ 3396.444588][T31701] kaweth 10-1:0.57: MTU: 0 [ 3396.459017][T31701] kaweth 10-1:0.57: Read MAC address 00:00:00:00:00:00 [ 3397.546491][T31701] kaweth 10-1:0.57: probe with driver kaweth failed with error -5 [ 3397.573847][T31701] usb 10-1: USB disconnect, device number 31 [ 3399.665460][ T4310] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8258'. [ 3400.182951][ T4315] syz.0.8260: attempt to access beyond end of device [ 3400.182951][ T4315] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 3402.068112][ T493] block nbd8: Possible stuck request ffff8880257ce000: control (read@0,2048B). Runtime 120 seconds [ 3402.814371][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 3402.814388][ T30] audit: type=1107 audit(1755720472.828:1431): pid=4323 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 3403.045190][T30073] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 3404.030928][T30073] usb 7-1: config 16 has an invalid interface number: 33 but max is 0 [ 3404.065508][T30073] usb 7-1: config 16 has no interface number 0 [ 3404.368954][T30073] usb 7-1: config 16 interface 33 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 3404.468987][T30073] usb 7-1: config 16 interface 33 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 3404.513431][T30073] usb 7-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=26.fe [ 3404.552734][T30073] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3404.648083][ T4346] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8267'. [ 3405.047273][ T4348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8268'. [ 3405.578058][T30073] usb 7-1: can't set config #16, error -71 [ 3405.609956][T30073] usb 7-1: USB disconnect, device number 15 [ 3406.954898][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8273'. [ 3406.984359][T27635] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 3409.503901][T24751] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 3409.578634][ T4403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8283'. [ 3409.746370][T24751] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 3409.786704][T24751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3409.864746][T24751] usb 1-1: config 0 descriptor?? [ 3411.646512][T24751] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 3411.692751][T24751] [drm:udl_init] *ERROR* Selecting channel failed [ 3411.744364][T24751] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 3411.825209][T24751] [drm] Initialized udl on minor 2 [ 3411.991615][ T4414] FAULT_INJECTION: forcing a failure. [ 3411.991615][ T4414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3412.004846][ T4414] CPU: 1 UID: 0 PID: 4414 Comm: syz.0.8285 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3412.004867][ T4414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3412.004878][ T4414] Call Trace: [ 3412.004887][ T4414] [ 3412.004895][ T4414] dump_stack_lvl+0x189/0x250 [ 3412.004919][ T4414] ? __pfx____ratelimit+0x10/0x10 [ 3412.004937][ T4414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3412.004956][ T4414] ? __pfx__printk+0x10/0x10 [ 3412.004986][ T4414] should_fail_ex+0x414/0x560 [ 3412.005008][ T4414] _copy_to_user+0x31/0xb0 [ 3412.005032][ T4414] simple_read_from_buffer+0xe1/0x170 [ 3412.005053][ T4414] proc_fail_nth_read+0x1df/0x250 [ 3412.005076][ T4414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3412.005098][ T4414] ? rw_verify_area+0x258/0x650 [ 3412.005122][ T4414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3412.005143][ T4414] vfs_read+0x200/0x980 [ 3412.005179][ T4414] ? __pfx___mutex_lock+0x10/0x10 [ 3412.005198][ T4414] ? __pfx_vfs_read+0x10/0x10 [ 3412.005224][ T4414] ? __fget_files+0x2a/0x420 [ 3412.005246][ T4414] ? __fget_files+0x3a0/0x420 [ 3412.005263][ T4414] ? __fget_files+0x2a/0x420 [ 3412.005287][ T4414] ksys_read+0x145/0x250 [ 3412.005304][ T4414] ? __pfx_ksys_read+0x10/0x10 [ 3412.005317][ T4414] ? fput+0xa0/0xd0 [ 3412.005340][ T4414] ? do_syscall_64+0xbe/0x3b0 [ 3412.005361][ T4414] do_syscall_64+0xfa/0x3b0 [ 3412.005378][ T4414] ? lockdep_hardirqs_on+0x9c/0x150 [ 3412.005395][ T4414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3412.005411][ T4414] ? clear_bhb_loop+0x60/0xb0 [ 3412.005430][ T4414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3412.005446][ T4414] RIP: 0033:0x7f654638d5fc [ 3412.005461][ T4414] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3412.005475][ T4414] RSP: 002b:00007f65471f2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3412.005491][ T4414] RAX: ffffffffffffffda RBX: 00007f65465b5fa0 RCX: 00007f654638d5fc [ 3412.005504][ T4414] RDX: 000000000000000f RSI: 00007f65471f20a0 RDI: 0000000000000009 [ 3412.005514][ T4414] RBP: 00007f65471f2090 R08: 0000000000000000 R09: 0000000000000000 [ 3412.005524][ T4414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3412.005534][ T4414] R13: 00007f65465b6038 R14: 00007f65465b5fa0 R15: 00007ffee400ccb8 [ 3412.005559][ T4414] [ 3412.239141][ C1] vkms_vblank_simulate: vblank timer overrun [ 3412.492307][T24751] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3412.676271][T24751] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 3412.705210][T31701] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3412.804135][T24751] usb 1-1: USB disconnect, device number 2 [ 3412.887599][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8287'. [ 3412.996513][T31701] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 3413.064281][T31701] libceph: connect (1)[c::]:6789 error -101 [ 3413.071357][T31701] libceph: mon0 (1)[c::]:6789 connect error [ 3413.331453][T30662] libceph: connect (1)[c::]:6789 error -101 [ 3413.340265][T24751] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 3413.350424][T30662] libceph: mon0 (1)[c::]:6789 connect error [ 3413.474027][ T4443] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 3413.633202][ T4443] bond12: entered promiscuous mode [ 3413.638481][ T4443] bond12: entered allmulticast mode [ 3413.647109][ T4443] 8021q: adding VLAN 0 to HW filter on device bond12 [ 3413.829743][T30548] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 3414.056922][ T3831] libceph: connect (1)[c::]:6789 error -101 [ 3414.066018][ T3831] libceph: mon0 (1)[c::]:6789 connect error [ 3414.135202][T24751] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3414.162074][T24751] usb 1-1: not running at top speed; connect to a high speed hub [ 3414.175074][T24751] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 3414.188425][ T4432] ceph: No mds server is up or the cluster is laggy [ 3414.202325][T24751] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 3414.242417][T24751] usb 1-1: config 4 has no interface number 0 [ 3414.281247][T24751] usb 1-1: string descriptor 0 read error: -22 [ 3414.288244][T24751] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 3414.318852][T24751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3414.370861][T24751] usb 1-1: Found UVC 0.00 device (04f2:b746) [ 3414.393741][T24751] usb 1-1: No valid video chain found. [ 3414.601518][ T4448] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8294'. [ 3415.111619][ T3715] usb 1-1: USB disconnect, device number 3 [ 3415.560768][ T3831] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 3416.512641][ T3831] usb 10-1: Using ep0 maxpacket: 8 [ 3416.537948][ T3831] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 3416.592165][ T3831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3416.654619][ T3831] pvrusb2: Hardware description: Terratec Grabster AV400 [ 3417.582243][ T3831] pvrusb2: ********** [ 3417.592343][ T3831] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 3417.620847][ T3831] pvrusb2: Important functionality might not be entirely working. [ 3417.631726][ T3831] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 3417.643654][ T3831] pvrusb2: ********** [ 3417.655164][ T2344] pvrusb2: Invalid write control endpoint [ 3418.460364][ T2344] pvrusb2: Invalid write control endpoint [ 3418.473260][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 3418.542388][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 3418.553404][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 3418.802705][ T2344] pvrusb2: Device being rendered inoperable [ 3418.842939][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 3418.871060][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 3418.888679][ T2344] pvrusb2: Attached sub-driver cx25840 [ 3418.925831][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 3418.978775][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 3418.995013][ T4491] FAULT_INJECTION: forcing a failure. [ 3418.995013][ T4491] name failslab, interval 1, probability 0, space 0, times 0 [ 3419.003729][T30662] usb 10-1: USB disconnect, device number 32 [ 3419.050361][ T4491] CPU: 1 UID: 0 PID: 4491 Comm: syz.0.8305 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3419.050396][ T4491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3419.050411][ T4491] Call Trace: [ 3419.050421][ T4491] [ 3419.050432][ T4491] dump_stack_lvl+0x189/0x250 [ 3419.050462][ T4491] ? __pfx____ratelimit+0x10/0x10 [ 3419.050487][ T4491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3419.050512][ T4491] ? __pfx__printk+0x10/0x10 [ 3419.050546][ T4491] ? __pfx___might_resched+0x10/0x10 [ 3419.050583][ T4491] should_fail_ex+0x414/0x560 [ 3419.050612][ T4491] should_failslab+0xa8/0x100 [ 3419.050638][ T4491] kmem_cache_alloc_noprof+0x73/0x3c0 [ 3419.050659][ T4491] ? getname_flags+0xb8/0x540 [ 3419.050690][ T4491] getname_flags+0xb8/0x540 [ 3419.050716][ T4491] ? __fget_files+0x3a0/0x420 [ 3419.050747][ T4491] user_path_at+0x24/0x60 [ 3419.050780][ T4491] do_fchmodat+0xef/0x200 [ 3419.050816][ T4491] ? __pfx_do_fchmodat+0x10/0x10 [ 3419.050845][ T4491] ? __pfx_ksys_write+0x10/0x10 [ 3419.050871][ T4491] __x64_sys_chmod+0x62/0x70 [ 3419.050898][ T4491] do_syscall_64+0xfa/0x3b0 [ 3419.050921][ T4491] ? lockdep_hardirqs_on+0x9c/0x150 [ 3419.050942][ T4491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3419.050964][ T4491] ? clear_bhb_loop+0x60/0xb0 [ 3419.050991][ T4491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3419.051013][ T4491] RIP: 0033:0x7f654638ebe9 [ 3419.051033][ T4491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3419.051052][ T4491] RSP: 002b:00007f65471f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 3419.051075][ T4491] RAX: ffffffffffffffda RBX: 00007f65465b5fa0 RCX: 00007f654638ebe9 [ 3419.051093][ T4491] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000140 [ 3419.051107][ T4491] RBP: 00007f65471f2090 R08: 0000000000000000 R09: 0000000000000000 [ 3419.051121][ T4491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3419.051135][ T4491] R13: 00007f65465b6038 R14: 00007f65465b5fa0 R15: 00007ffee400ccb8 [ 3419.051169][ T4491] [ 3419.264756][ C1] vkms_vblank_simulate: vblank timer overrun [ 3419.470172][T17438] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 3419.653220][T17438] usb 6-1: config 0 has no interfaces? [ 3419.719757][T30548] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 3419.917699][T17438] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3420.565509][T17438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3420.637152][T17438] usb 6-1: config 0 descriptor?? [ 3420.648063][T30548] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3420.672661][ T4506] syz.4.8311: attempt to access beyond end of device [ 3420.672661][ T4506] nbd4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 3420.680113][T30548] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3420.725426][T30548] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3420.796244][T30548] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3420.847463][T30548] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3420.860664][ T4505] geneve2: entered allmulticast mode [ 3421.210641][T30073] usb 6-1: USB disconnect, device number 11 [ 3421.228874][T30548] usb 7-1: config 0 descriptor?? [ 3422.368694][T30548] plantronics 0003:047F:FFFF.004C: ignoring exceeding usage max [ 3422.410191][ T4517] netlink: 'syz.9.8313': attribute type 29 has an invalid length. [ 3422.433014][ T4517] netlink: 'syz.9.8313': attribute type 29 has an invalid length. [ 3422.444069][T30548] plantronics 0003:047F:FFFF.004C: unbalanced collection at end of report description [ 3422.471258][T30548] plantronics 0003:047F:FFFF.004C: parse failed [ 3422.478068][T30548] plantronics 0003:047F:FFFF.004C: probe with driver plantronics failed with error -22 [ 3422.504562][ T4517] netlink: 248 bytes leftover after parsing attributes in process `syz.9.8313'. [ 3422.618025][ T4525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8316'. [ 3422.806527][T30548] usb 7-1: USB disconnect, device number 16 [ 3422.931702][ T4534] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8318'. [ 3422.941997][ T4534] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8318'. [ 3422.951080][ T4534] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8318'. [ 3422.960492][ T4534] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8318'. [ 3422.969459][ T4534] netlink: 'syz.5.8318': attribute type 6 has an invalid length. [ 3424.001188][T31701] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 3425.039127][T31701] usb 6-1: Using ep0 maxpacket: 32 [ 3425.121867][T31701] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 3425.258183][ T4544] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8320'. [ 3426.851560][T31701] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 3426.862059][T31701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3427.274289][T31701] usb 6-1: Product: syz [ 3427.530784][T31701] usb 6-1: config 0 descriptor?? [ 3427.565108][T31701] usb 6-1: can't set config #0, error -71 [ 3427.612600][T31701] usb 6-1: USB disconnect, device number 12 [ 3428.036376][T27635] Bluetooth: hci4: command 0x0406 tx timeout [ 3428.780198][T31701] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 3428.823903][T27635] Bluetooth: hci1: Dropping invalid advertising data [ 3428.831043][T27635] Bluetooth: hci1: Malformed LE Event: 0x02 [ 3428.965992][T31701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3429.004593][T31701] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00 [ 3429.015989][T31701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3429.038050][T31701] usb 6-1: config 0 descriptor?? [ 3429.205963][T31701] usbhid 6-1:0.0: can't add hid device: -22 [ 3429.241914][T31701] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 3430.533048][ T4584] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8334'. [ 3430.872194][ T4590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3430.886715][ T4590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3431.820699][ T4596] FAULT_INJECTION: forcing a failure. [ 3431.820699][ T4596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3431.834108][ T4596] CPU: 1 UID: 0 PID: 4596 Comm: syz.9.8336 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3431.834137][ T4596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3431.834152][ T4596] Call Trace: [ 3431.834161][ T4596] [ 3431.834171][ T4596] dump_stack_lvl+0x189/0x250 [ 3431.834203][ T4596] ? __pfx____ratelimit+0x10/0x10 [ 3431.834228][ T4596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3431.834261][ T4596] ? __pfx__printk+0x10/0x10 [ 3431.834291][ T4596] ? __might_fault+0xb0/0x130 [ 3431.834326][ T4596] should_fail_ex+0x414/0x560 [ 3431.834356][ T4596] _copy_from_user+0x2d/0xb0 [ 3431.834389][ T4596] ___sys_sendmsg+0x158/0x2a0 [ 3431.834427][ T4596] ? __pfx____sys_sendmsg+0x10/0x10 [ 3431.834460][ T4596] ? irqentry_exit+0x74/0x90 [ 3431.834533][ T4596] ? __x64_sys_sendmsg+0x180/0x260 [ 3431.834576][ T4596] __x64_sys_sendmsg+0x19b/0x260 [ 3431.834609][ T4596] ? schedule+0x165/0x360 [ 3431.834632][ T4596] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3431.834695][ T4596] ? do_syscall_64+0xbe/0x3b0 [ 3431.834725][ T4596] do_syscall_64+0xfa/0x3b0 [ 3431.834752][ T4596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3431.834775][ T4596] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 3431.834797][ T4596] ? clear_bhb_loop+0x60/0xb0 [ 3431.834824][ T4596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3431.834847][ T4596] RIP: 0033:0x7f4ab398ebe9 [ 3431.834869][ T4596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3431.834890][ T4596] RSP: 002b:00007f4ab47b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3431.834915][ T4596] RAX: ffffffffffffffda RBX: 00007f4ab3bb6180 RCX: 00007f4ab398ebe9 [ 3431.834932][ T4596] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000006 [ 3431.834948][ T4596] RBP: 00007f4ab47b2090 R08: 0000000000000000 R09: 0000000000000000 [ 3431.834963][ T4596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3431.834977][ T4596] R13: 00007f4ab3bb6218 R14: 00007f4ab3bb6180 R15: 00007ffe85baf458 [ 3431.835014][ T4596] [ 3432.037198][ C1] vkms_vblank_simulate: vblank timer overrun [ 3432.415173][ T493] block nbd8: Possible stuck request ffff8880257ce000: control (read@0,2048B). Runtime 150 seconds [ 3432.510616][T24751] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 3433.255381][ T31] INFO: task syz.8.7973:3230 blocked for more than 143 seconds. [ 3433.463402][ T31] Not tainted 6.16.0-syzkaller #0 [ 3433.469196][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3433.687258][ T31] task:syz.8.7973 state:D stack:25592 pid:3230 tgid:3229 ppid:32012 task_flags:0x400140 flags:0x00004006 [ 3433.864125][ T31] Call Trace: [ 3433.868793][ T31] [ 3433.878912][ T31] __schedule+0x16aa/0x4c90 [ 3433.894256][ T31] ? schedule+0x165/0x360 [ 3433.905058][T30073] usb 6-1: USB disconnect, device number 13 [ 3433.926418][ T31] ? __pfx___schedule+0x10/0x10 [ 3433.937707][ T31] ? schedule+0x91/0x360 [ 3433.939149][T24751] usb 7-1: device descriptor read/all, error -71 [ 3433.965424][ T31] schedule+0x165/0x360 [ 3433.981893][ T31] schedule_preempt_disabled+0x13/0x30 [ 3434.009689][ T31] __mutex_lock+0x724/0xe80 [ 3434.014848][ T31] ? __mutex_lock+0x51b/0xe80 [ 3434.020491][ T31] ? bdev_release+0x1a9/0x650 [ 3434.051091][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3434.068666][ T31] ? dput+0x80/0x2b0 [ 3434.080999][ T31] ? __pfx___fsnotify_parent+0x10/0x10 [ 3434.094628][ T31] ? do_raw_spin_lock+0x121/0x290 [ 3434.108357][ T31] bdev_release+0x1a9/0x650 [ 3434.118782][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 3434.153555][ T31] blkdev_release+0x15/0x20 [ 3434.168763][ T31] __fput+0x449/0xa70 [ 3434.173116][ T31] task_work_run+0x1d1/0x260 [ 3434.177823][ T31] ? __pfx_task_work_run+0x10/0x10 [ 3434.183226][ T31] get_signal+0x11c5/0x1310 [ 3434.187820][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 3434.193640][ T31] ? __pfx_task_work_add+0x10/0x10 [ 3434.200271][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 3434.206518][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 3434.211741][ T31] ? __fget_files+0x2a/0x420 [ 3434.216418][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 3434.222014][ T31] exit_to_user_mode_loop+0x75/0x110 [ 3434.231771][ T31] do_syscall_64+0x2bd/0x3b0 [ 3434.236449][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3434.241835][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3434.247954][ T31] ? clear_bhb_loop+0x60/0xb0 [ 3434.252808][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3434.258754][ T31] RIP: 0033:0x7f63f478ebe9 [ 3434.263260][ T31] RSP: 002b:00007f63f5549038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3434.271905][ T31] RAX: 0000000000000000 RBX: 00007f63f49b5fa0 RCX: 00007f63f478ebe9 [ 3434.280271][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 3434.288289][ T31] RBP: 00007f63f4811e19 R08: 0000000000000000 R09: 0000000000000000 [ 3434.296489][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3434.307081][ T31] R13: 00007f63f49b6038 R14: 00007f63f49b5fa0 R15: 00007ffe1cecbc08 [ 3434.315265][ T31] [ 3434.318399][ T31] [ 3434.318399][ T31] Showing all locks held in the system: [ 3434.328565][ T31] 1 lock held by khungtaskd/31: [ 3434.333868][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3434.343992][ T31] 2 locks held by syslogd/5187: [ 3434.348890][ T31] #0: ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 3434.358993][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 3434.370832][ T31] 2 locks held by getty/5598: [ 3434.375558][ T31] #0: ffff88814ca6b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3434.408492][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 3434.421241][ T31] 6 locks held by kworker/0:2/24751: [ 3434.427718][ T31] #0: ffff888143af7d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 3434.440097][ T31] #1: ffffc9000b357bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 3434.452089][ T31] #2: ffff88802883a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 3434.464947][ T31] #3: ffff88802883d510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 3434.475797][ T31] #4: ffff888143f72f68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 3434.488313][ T31] #5: ffffffff8edc8670 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1750 [ 3434.504759][ T31] 1 lock held by syz.8.7973/3230: [ 3434.514119][ T31] #0: ffff8880256db358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 3434.528539][ T31] 1 lock held by udevd/3247: [ 3434.534915][ T31] #0: ffff8880256db358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 3434.547548][ T31] 1 lock held by syz.4.8340/4612: [ 3434.552862][ T31] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 3434.564028][ T31] [ 3434.566414][ T31] ============================================= [ 3434.566414][ T31] [ 3434.599744][ T31] NMI backtrace for cpu 1 [ 3434.599773][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3434.599798][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3434.599812][ T31] Call Trace: [ 3434.599822][ T31] [ 3434.599831][ T31] dump_stack_lvl+0x189/0x250 [ 3434.599859][ T31] ? __wake_up_klogd+0xd9/0x110 [ 3434.599892][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3434.599918][ T31] ? __pfx__printk+0x10/0x10 [ 3434.599960][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 3434.599998][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3434.600028][ T31] ? _printk+0xcf/0x120 [ 3434.600068][ T31] ? __pfx__printk+0x10/0x10 [ 3434.600100][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3434.600137][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 3434.600174][ T31] watchdog+0xfee/0x1030 [ 3434.600210][ T31] ? watchdog+0x1de/0x1030 [ 3434.600252][ T31] kthread+0x70e/0x8a0 [ 3434.600285][ T31] ? __pfx_watchdog+0x10/0x10 [ 3434.600316][ T31] ? __pfx_kthread+0x10/0x10 [ 3434.600348][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3434.600369][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3434.600390][ T31] ? __pfx_kthread+0x10/0x10 [ 3434.600420][ T31] ret_from_fork+0x3fc/0x770 [ 3434.600446][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3434.600474][ T31] ? __switch_to_asm+0x39/0x70 [ 3434.600500][ T31] ? __switch_to_asm+0x33/0x70 [ 3434.600526][ T31] ? __pfx_kthread+0x10/0x10 [ 3434.600557][ T31] ret_from_fork_asm+0x1a/0x30 [ 3434.600602][ T31] [ 3434.600611][ T31] Sending NMI from CPU 1 to CPUs 0: [ 3434.758751][ C0] NMI backtrace for cpu 0 [ 3434.758770][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3434.758791][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3434.758804][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 3434.758831][ C0] Code: 53 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 3434.758848][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 3434.758865][ C0] RAX: a6c3a3e7340e9c00 RBX: ffffffff81976918 RCX: a6c3a3e7340e9c00 [ 3434.758880][ C0] RDX: 0000000000000001 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40 [ 3434.758894][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 3434.758908][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa0b3f0 [ 3434.758923][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 3434.758937][ C0] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 3434.758953][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3434.758966][ C0] CR2: 00007f0dc7b86358 CR3: 0000000027016000 CR4: 00000000003526f0 [ 3434.758984][ C0] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 3434.758996][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3434.759008][ C0] Call Trace: [ 3434.759019][ C0] [ 3434.759027][ C0] default_idle+0x13/0x20 [ 3434.759051][ C0] default_idle_call+0x74/0xb0 [ 3434.759075][ C0] do_idle+0x1e8/0x510 [ 3434.759100][ C0] ? __pfx_do_idle+0x10/0x10 [ 3434.759129][ C0] cpu_startup_entry+0x44/0x60 [ 3434.759150][ C0] rest_init+0x2de/0x300 [ 3434.759173][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 3434.759288][ C0] start_kernel+0x47d/0x500 [ 3434.759338][ C0] x86_64_start_reservations+0x24/0x30 [ 3434.759366][ C0] x86_64_start_kernel+0x143/0x1c0 [ 3434.759394][ C0] common_startup_64+0x13e/0x147 [ 3434.759428][ C0] [ 3434.760536][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 3434.760565][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 3434.760596][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3434.760614][ T31] Call Trace: [ 3434.760625][ T31] [ 3434.760637][ T31] dump_stack_lvl+0x99/0x250 [ 3434.760673][ T31] ? __asan_memcpy+0x40/0x70 [ 3434.760711][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3434.760740][ T31] ? __pfx__printk+0x10/0x10 [ 3434.760788][ T31] panic+0x2db/0x790 [ 3434.760823][ T31] ? __pfx_panic+0x10/0x10 [ 3434.760848][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 3434.760884][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 3434.760920][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 3434.760968][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 3434.761017][ T31] watchdog+0x102d/0x1030 [ 3434.761058][ T31] ? watchdog+0x1de/0x1030 [ 3434.761106][ T31] kthread+0x70e/0x8a0 [ 3434.761147][ T31] ? __pfx_watchdog+0x10/0x10 [ 3434.761184][ T31] ? __pfx_kthread+0x10/0x10 [ 3434.761222][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3434.761246][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3434.761272][ T31] ? __pfx_kthread+0x10/0x10 [ 3434.761307][ T31] ret_from_fork+0x3fc/0x770 [ 3434.761346][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3434.761379][ T31] ? __switch_to_asm+0x39/0x70 [ 3434.761409][ T31] ? __switch_to_asm+0x33/0x70 [ 3434.761441][ T31] ? __pfx_kthread+0x10/0x10 [ 3434.761476][ T31] ret_from_fork_asm+0x1a/0x30 [ 3434.761526][ T31] [ 3435.108631][ T31] Kernel Offset: disabled [ 3435.112975][ T31] Rebooting in 86400 seconds..