last executing test programs: 20m19.720448289s ago: executing program 32 (id=30): r0 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "9f72278027c1d28d4c03376c9ea125e7126c04d01d93ad3b87c89d5c0b0c4de6f93f4dbd6912ed5a27fae9675080ce819d29385c8508f326e65821cefa9aa70b", 0x31}, 0x48, 0xfffffffffffffffc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x618bc2, 0x0) ioctl$TCFLSH(r1, 0x8924, 0x20001116) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='#%', r0) syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xd6d4}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x21, 0x2, 0x2) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) unshare(0x22020400) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8040000, 0x2) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x1, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x76, 0x7, [@default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000300), 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x2004040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 18m2.436752279s ago: executing program 33 (id=407): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60938, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 16m16.931119171s ago: executing program 34 (id=690): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd2c, 0x25dfdbfc, 0x3ff, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008040}, 0x800) (fail_nth: 1) 16m16.171216438s ago: executing program 35 (id=693): userfaultfd(0x80001) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) io_cancel(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x6, @remote, 0xffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x1d, 0x2, 0x0, 0x95, 0x0, [@remote]}}}], 0x28}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000300)="9fa7b39eeefec9f6362ca8e6d04d1f65ebb4ff2f5be8363e8994a22b52f161e0a369f0698c03553285ea6fc13914ace4828668412f09a71e8d33d833b5069397c4a47796d62759849014020cd2330dfc24", 0x51}, {&(0x7f0000000500)="c51cf2dde7a003a4e65d5d1ca70cbacf6299b1497fdc5ffdc38a16485c3e37ea1c808adddb68c3ba44254956366d70fac38d4d398e6919be030e4baa737b871edf742203d2784ab17deae88ffb3013964f52b62e8aab15584a9ca27d3487", 0x5e}, {&(0x7f0000000600)="9321e2eb2c683aa29bffc78ac820d2a723ba5b7efb3c2633f3731d6bb7775fcf590815cf45ce30841006b5e0060effe4619d94ad4dfb41f9b2938f162fb3fb912e761224eeb2d6ed87f2c431d509a775fcf4b1661d7b7b08e4fcab8f84e89132a5f1b9bac4ccb804e213806dc64cf697776d5fbb9fa112a9e81f03f2b44344815b00e916d6e2772c085bffa68a553ef4aaebaa18f8b1bd80c9033122a20e70e42fc6af3fafcd0a8ca0e800aa4a1a4fd7c65f40d58e7b28db", 0xb8}], 0x3, &(0x7f00000006c0)=[@dstopts_2292={{0x48, 0x29, 0x4, {0x4, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x2fa0}, @enc_lim={0x4, 0x1, 0x34}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x13}}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @padn={0x1, 0x1, [0x0]}]}}}, @hopopts={{0x38, 0x29, 0x36, {0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1f}}, @pad1, @jumbo={0xc2, 0x4, 0x3ff}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0xa6e}}, @dstopts={{0x20, 0x29, 0x37, {0x84, 0x0, '\x00', [@ra={0x5, 0x2, 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0xe8}}], 0x2, 0x4041080) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 16m16.107822231s ago: executing program 36 (id=695): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpriority(0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[], 0x20) r0 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r2 = dup2(r1, r1) preadv(r0, &(0x7f00000033c0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1, 0x10006, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x7fffffff, @loopback, 0xe}, 0x1c) sendmsg$nl_generic(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000c000}, 0x404c804) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x1) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f00000001c0)=0xc, 0x4) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) sendmsg$inet(r3, 0x0, 0x4010) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x280408b1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000480)="2cee2ef229e0615088cbf9f450ee20b8825876858e9f3d3d4b17d0d20c6fad741f13f02c3c0c811f62de0ba76b15d02a46c128eabbc0b23b28f4bce3764ffc07a4f250955ff5e3b540a186f14cec7dc4ef5313eb72df0c0fb334c7ae8edee9ec1f2e66c5ee39672799db0d86eb64a1eb1413", 0xfffffffffffffea4}, {&(0x7f0000000340)="c0c96fb9b7843ac5ff18198d8633bb831c9523a404b204c4304161c3a9ac6adeee1fc5065f7bd65b25cea0dfcee2cc1af65de670d917b7d3bb06a2c9608893f5ca3222938b379f158d3b8caaca99283dbe4af9586eedd5f659ae7167d6761cbdd8de05299271b6896d2bb4740add8997ccab453e7c45f9afc2d89ef1d119c986da848c08a48b986abf9fbca325981250eccbc3396d9c8255cfe117f68981f4717d3ef10afa78c5f0cae9e6c571178faeda3bf91e1deb0812e20eb548ddd5a43e0f64a34d886097173b7c6b", 0xfffffffffffffdb6}], 0x1) 16m15.350117837s ago: executing program 37 (id=697): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x20, 0x9, 0x2, "ccfc"}, 0x0, 0x0}) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) chown(&(0x7f0000001140)='./cgroup.cpu/cgroup.procs\x00', 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @rand_addr=0x64010101}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="08001efb3e6f00", 0x7}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd}) r3 = syz_io_uring_setup(0x63ab, &(0x7f00000006c0)={0x0, 0x1d11, 0x10000}, &(0x7f0000010080), &(0x7f0000000400)) setrlimit(0x40000000000008, &(0x7f0000000000)={0x0, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000080)=[{&(0x7f0000001100)=""/4096, 0x1000}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) 15m40.094598801s ago: executing program 38 (id=768): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (fail_nth: 1) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 15m34.992445346s ago: executing program 39 (id=780): socket$nl_route(0x10, 0x3, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xfe47, 0x400, 0x1, 0x226}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x68, 0x1, 0xa1e00000, 0x3, 0x5, 0x800]}, &(0x7f0000000080)=0x78) r6 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) r8 = dup(r7) r9 = syz_io_uring_setup(0x198d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x20000}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r8, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r9, 0x47f5, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x82) pwritev2(r12, &(0x7f0000000140)=[{&(0x7f0000000000)='_', 0x1}], 0x1, 0x81, 0x0, 0x82) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000180)={'syzkaller0\x00'}) 15m28.174738201s ago: executing program 40 (id=794): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000380)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x10}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000180)={"b645563c45bcc7e181fad43c40fc603ebaf6ab65a29e23546aad0281b3aff5eb", r8, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) syz_emit_ethernet(0xfc0, &(0x7f00000002c0)={@local, @random="ffffffff00", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7377c2", 0xf8a, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x74d12e036ae6666d, 0xffff}], {0x0, 0x0, 0xf82, 0x0, @opaque="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"}}}}}}, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) r10 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r2, 0x0, 0x0, 'syz0\x00', 0x0}) r11 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r11, 0x2, &(0x7f0000000240)={0x3, 0x3}, 0x0) 15m23.962434386s ago: executing program 41 (id=802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) syz_usb_connect(0x6, 0x2d0, &(0x7f0000000a80)=ANY=[], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x4, 0x2, 0xf4, 0x20, 0x93}, 0x27, &(0x7f00000001c0)=ANY=[], 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x406}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020001000000000000000702000000ff05000500000000000a00000000000000ff01000000000000000000000000000100000000000000000200080008"], 0x80}}, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r4, 0x7, 0x0, 0x0) socket(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r9 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) socket$inet_sctp(0x2, 0x1, 0x84) write$P9_RSTATu(r9, 0x0, 0x5a) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0xa08410, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8) ioctl$FS_IOC_SETFLAGS(r8, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r3, 0x24020000) 15m9.226094074s ago: executing program 1 (id=816): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 15m8.811573795s ago: executing program 1 (id=818): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000f100000000000000feffffff8500000027000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000009b00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x50, r5, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r7, 0x0, 0x0, 0x200000000}) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x410000, 0x51, 0x8}, 0x18) getdents(r8, &(0x7f0000000140)=""/26, 0x1a) 15m7.737951769s ago: executing program 1 (id=819): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f000001f9c0)={0x2, {0x8000, 0x200, 0x0, 0x294}}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_rdma(0x0, 0x0, 0x0, 0x800a8, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_open_dev$video4linux(&(0x7f0000000100), 0x8001, 0x121001) getsockname(r2, &(0x7f0000000380)=@xdp, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)) sendto$inet(r2, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0ffffff1000010000000000000000000000000a3c000000120a090000000000000000000200f29488af177856a3b31200000900020073797a3100000900010073797a3000000000080003400000001a28000000140a0300000000000000000002000000090200007300000800034000000001140000000a000000000000000000000000000000f3128f9397ddfee8f2ff84f82a8b93b1ec3066965bbcdc0082360c855ebc7d6b88308e9281c1c037dbccec694bcfafac5d62dec1f529d4aec8ef75d9ef0904265a05a4ab9f982828344de1493f50898f2b050156f599e6339ab5310321c1ec90515a7a42bd9b78aa00"/250], 0x8c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 15m6.748227168s ago: executing program 1 (id=821): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0800010012000000"], 0x20}, 0x1, 0xf00}, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000001600)=[0x0], 0x0, 0x0, 0x0, 0x1}) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x183183, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f0000000080)='syzkaller\x00', 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='qgroup_meta_convert\x00', r4, 0x0, 0x4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r5, 0x0, 0x4}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 15m5.433716092s ago: executing program 1 (id=823): ioctl$BLKRASET(0xffffffffffffffff, 0x1262, &(0x7f0000000140)=0x9) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x8a, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000506000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000980)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x3}, @ptr={0x70742a85, 0x3, 0x0, 0x0, 0x800000, 0x22}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x7}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 15m2.94876289s ago: executing program 1 (id=832): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0800010012000000"], 0x20}, 0x1, 0xf00}, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000001600)=[0x0], 0x0, 0x0, 0x0, 0x1}) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x183183, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f0000000080)='syzkaller\x00', 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='qgroup_meta_convert\x00', r4, 0x0, 0x4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r5, 0x0, 0x4}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 15m1.141201064s ago: executing program 42 (id=832): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0800010012000000"], 0x20}, 0x1, 0xf00}, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000001600)=[0x0], 0x0, 0x0, 0x0, 0x1}) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x183183, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f0000000080)='syzkaller\x00', 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='qgroup_meta_convert\x00', r4, 0x0, 0x4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r5, 0x0, 0x4}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 12m9.148191392s ago: executing program 6 (id=1326): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$UFFDIO_POISON(r0, 0xc020aa08, 0x0) 12m7.118953489s ago: executing program 6 (id=1329): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x1c, 0x0, 0x0, &(0x7f0000004540)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}, 0x40) 12m6.059385558s ago: executing program 6 (id=1332): syz_emit_ethernet(0xb2, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa75fb99d6bfc688a801008100200086dd6673f65b00740600fe80000000000000000000000000003e00000000000000000000ffff0a010102000a000000000000000100064c71fc662d1855b4c24512a959a9714151836c716230e243b6dc0eca0879cfe3beb35929a70d9a8c29e7e3f9e0070c0a757bed0d98920dabdfb161113b2d558c04dab2fd72b3f594c9228d8183000000000000004e224e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="510400039078bd8a"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000094", @ANYRES16=r1, @ANYBLOB="040029bd7000fddbdf253b0000000800cd0000000500080022016301000008002600b40900000800270003000000050019010e0000000800a00075e0000008002201c902000004008e0008005700010300000400870004008e0004008e00"], 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x8800) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) syz_open_dev$sg(&(0x7f0000000200), 0x4, 0x20000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "7fb5e441c881d1ea", "7da82a40ae9f4fdfbdd49200bc9ec04e", "5987c963", "485725e9c3eb4811"}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r6, 0x1ff) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="ab", 0xdc, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 12m3.856975899s ago: executing program 6 (id=1338): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x200, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x7ff, @ipv4={'\x00', '\xff\xff', @remote}, 0x100}}, 0x3d2a98fc, 0x2, 0x8000, 0x6, 0x2, 0x6, 0x1}, 0x9c) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x26001) 11m59.853662646s ago: executing program 6 (id=1348): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xa8482, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file2\x00', 0x40880, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000180)={0x9, 0x0, 0xffffffff, 0x1000, 0x1, 0x6}) fremovexattr(r1, &(0x7f00000000c0)=@known='user.incfs.size\x00') ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000380)={0x3, r1}) r2 = syz_create_resource$binfmt(0x0) execveat$binfmt(0xffffffffffffffff, r2, 0x0, &(0x7f0000000780), 0x400) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmmsg$inet(r3, &(0x7f0000006740), 0x0, 0x81) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000) r4 = io_uring_setup(0x688d, &(0x7f0000000500)={0x0, 0xdf2d, 0x1, 0x3, 0x1b8, 0x0, r1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) io_uring_register$IORING_REGISTER_FILES(r4, 0x20, &(0x7f0000000000)=[r4], 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x325880, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 11m57.886290247s ago: executing program 6 (id=1351): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x141880, 0x0) io_setup(0x305, &(0x7f0000000900)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000940), 0x5014c0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r4, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x9}]}, {0x0, [0x5f, 0x30, 0x2e, 0x61, 0x0]}}, &(0x7f0000000b80)=""/11, 0x2b, 0xb, 0x0, 0x40, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c80)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x12, 0x18, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@generic={0x7, 0x7, 0x4, 0xb72, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @jmp={0x5, 0x1, 0xa, 0x4, 0x9, 0x18, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x7e}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @generic={0x6, 0xc, 0x2, 0x1, 0x7}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2a39980f}]}, &(0x7f0000000a40)='syzkaller\x00', 0x7, 0x54, &(0x7f0000000a80)=""/84, 0x40f00, 0x68, '\x00', r5, @fallback=0x1f, r6, 0x8, &(0x7f0000000c00)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000c40)={0x4, 0xa, 0x4, 0x3522}, 0x10, r7, r1, 0x6, &(0x7f0000001d40)=[r1, 0xffffffffffffffff], &(0x7f0000001d80)=[{0x1, 0x5, 0x2}, {0x5, 0x3, 0xa, 0x3}, {0x2, 0x1, 0x10, 0x7}, {0x5, 0x3, 0x5, 0x1}, {0x3, 0x4, 0x4, 0x6}, {0x0, 0x3, 0x2, 0x9}], 0x10, 0x1}, 0x94) r8 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x1b) quotactl_fd$Q_QUOTAOFF(r9, 0x0, 0x0, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}}) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) close(r11) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r1, 0x0, 0x0, 0x3e7ffffffc, 0x0, 0x10}]) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r13 = dup(r12) syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r13, 0x0) ioctl$BLKFLSBUF(r13, 0x1261, 0x0) 11m42.438808886s ago: executing program 43 (id=1351): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x141880, 0x0) io_setup(0x305, &(0x7f0000000900)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000940), 0x5014c0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r4, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x9}]}, {0x0, [0x5f, 0x30, 0x2e, 0x61, 0x0]}}, &(0x7f0000000b80)=""/11, 0x2b, 0xb, 0x0, 0x40, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c80)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x12, 0x18, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@generic={0x7, 0x7, 0x4, 0xb72, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @jmp={0x5, 0x1, 0xa, 0x4, 0x9, 0x18, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x7e}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @generic={0x6, 0xc, 0x2, 0x1, 0x7}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2a39980f}]}, &(0x7f0000000a40)='syzkaller\x00', 0x7, 0x54, &(0x7f0000000a80)=""/84, 0x40f00, 0x68, '\x00', r5, @fallback=0x1f, r6, 0x8, &(0x7f0000000c00)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000c40)={0x4, 0xa, 0x4, 0x3522}, 0x10, r7, r1, 0x6, &(0x7f0000001d40)=[r1, 0xffffffffffffffff], &(0x7f0000001d80)=[{0x1, 0x5, 0x2}, {0x5, 0x3, 0xa, 0x3}, {0x2, 0x1, 0x10, 0x7}, {0x5, 0x3, 0x5, 0x1}, {0x3, 0x4, 0x4, 0x6}, {0x0, 0x3, 0x2, 0x9}], 0x10, 0x1}, 0x94) r8 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x1b) quotactl_fd$Q_QUOTAOFF(r9, 0x0, 0x0, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}}) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) close(r11) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r1, 0x0, 0x0, 0x3e7ffffffc, 0x0, 0x10}]) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r13 = dup(r12) syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r13, 0x0) ioctl$BLKFLSBUF(r13, 0x1261, 0x0) 9m31.636510817s ago: executing program 2 (id=1687): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbmon(0x0, 0x2, 0x101800) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2202, 0x0) unshare(0x22020400) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, &(0x7f0000000b00)={{@any, 0xffffffff}, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20000003}) 9m30.483681743s ago: executing program 2 (id=1689): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x40082) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000bc0)=@bridge_getlink={0x28, 0x12, 0x201, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = gettid() r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) 9m27.113616488s ago: executing program 2 (id=1703): read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x800) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) r4 = syz_io_uring_setup(0x494, &(0x7f0000000200)={0x0, 0x36f1, 0x400, 0x1, 0x381}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) io_uring_setup(0x3eae, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000082e82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000080)={r8, 0x3, r7, 0x120000}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x26c8, 0x0, 0x1, 0x0, 0x10) 9m25.305994444s ago: executing program 2 (id=1711): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}}], 0x2, 0x20004874) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)="59e33c45d2b7752f01d10757e9079ad41ceb39d934", 0x15}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$userio(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) 9m24.201238563s ago: executing program 2 (id=1715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0xac0, 0x0, 0x28}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000640)=0xffffdd2f, 0x4) 9m23.869533837s ago: executing program 2 (id=1717): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1, &(0x7f0000000100)={[0x1]}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000020605000000000000000000000000020c000780080013400000040e0500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a69700085faacda"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003000c"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 9m8.735631411s ago: executing program 44 (id=1717): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1, &(0x7f0000000100)={[0x1]}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000020605000000000000000000000000020c000780080013400000040e0500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a69700085faacda"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003000c"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 6m31.211145137s ago: executing program 8 (id=2180): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) (async, rerun: 64) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async, rerun: 64) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x200, 0x0, 0xe, 0x7, 0x200000000000002f, 0x200, 0x1, 0x3, 0xffffffff, 0x2}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) (async, rerun: 64) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x38, 0x1406, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x38}, 0x1, 0x0, 0x0, 0x80c0}, 0x40080) 6m29.921101309s ago: executing program 8 (id=2184): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xb) 6m28.313113763s ago: executing program 8 (id=2188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x34, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008041}, 0x8190) 6m27.69717467s ago: executing program 8 (id=2191): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xb) (fail_nth: 2) 6m25.889128387s ago: executing program 8 (id=2194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x7, 0x8, 0x9, 0x8000000000000001, 0x4, 0x4, 0xfffffffffffffff9, 0xffffffffffff70ee, 0x1ff, 0x0, 0x9, 0x91ff, 0x0, 0x3, 0x81, 0xaa], 0x10000, 0x200}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000100)=0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m25.354160921s ago: executing program 8 (id=2199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200488c0}, 0xc000) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x400) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='gfs2\x00', 0x5, 0x0) 6m24.987080544s ago: executing program 45 (id=2199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200488c0}, 0xc000) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x400) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='gfs2\x00', 0x5, 0x0) 4m19.354169708s ago: executing program 7 (id=2398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300060000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x9}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200200, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r2 = epoll_create(0xfffffffe) epoll_wait(r2, 0x0, 0x14e, 0xfffffffd) r3 = eventfd(0xeac) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x1}) sendmmsg$inet6(r1, &(0x7f0000000940), 0x0, 0x4400c800) sendto$inet6(r1, &(0x7f0000000140)="1e4a", 0x2, 0x3b00, 0x0, 0x0) 4m17.538962999s ago: executing program 7 (id=2400): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x40047451, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) 4m15.520929368s ago: executing program 7 (id=2407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000000011249024db01020301090212000100e950090d046204006f6f4905"], 0x0) syz_usb_disconnect(r3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m11.934158675s ago: executing program 7 (id=2419): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) 4m10.546227812s ago: executing program 7 (id=2422): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x80, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) (fail_nth: 2) 4m8.447485663s ago: executing program 7 (id=2425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) pipe(&(0x7f00000000c0)) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[], 0x0, 0x34}, 0x28) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4ca31, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x126}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000001000000000c1eb0df0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0xf72}], 0x1}}], 0x1, 0x140, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) syz_open_dev$midi(0x0, 0x2, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) 3m51.689180555s ago: executing program 46 (id=2425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) pipe(&(0x7f00000000c0)) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[], 0x0, 0x34}, 0x28) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4ca31, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x126}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000001000000000c1eb0df0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0xf72}], 0x1}}], 0x1, 0x140, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) syz_open_dev$midi(0x0, 0x2, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) 14.684875083s ago: executing program 3 (id=3091): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x21, 0x40000000, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) syz_open_dev$sndctrl(&(0x7f00000001c0), 0xffff, 0x84080) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000"], 0x7c}}, 0x0) close(r6) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x0, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000340)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x2, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x34}}, 0x4000000) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x0) 12.894332972s ago: executing program 9 (id=3094): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x1e3d50de03aa3d1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) 12.80395633s ago: executing program 3 (id=3095): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) recvmmsg$unix(r4, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="54000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 10.058331905s ago: executing program 5 (id=3100): syz_usb_disconnect(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$smackfs_ipv6host(r1, &(0x7f0000000180)=@l2={{0x1000000000000000, 0x3a, 0x4, 0x3a, 0x2, 0x3a, 0x800, 0x3a, 0xd, 0x3a, 0x5, 0x3a, 0xff, 0x3a, 0x3}, 0x2f, 0x5f, 0x20, ','}, 0xaf) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f0000000400)='x4', 0x0}, 0x20) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1, 0xff, 0xd, 0x0, 0x880}, 0x20) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) r3 = syz_open_procfs(0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000580)=0x1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x1) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$inet(r4, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="3b4b9e797a9167196b60c8534be838524fa18b3a4d10a5bf8cfa59eab24bc2c619035f62b4219ab2094276752a11ede54c157c56aefa4ae54190c615bd673aa4d361b858", 0x44}, {&(0x7f00000005c0)="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", 0x3b5}, {&(0x7f0000000100)="8f96952ed654f86559000000000000261a5ef74fc08b8b00a4c3c2dc951141d6ba0d82be3d61c84cfa3de6d6c01334dbc92a25298fd2dd634ef7bbe164d98bc5212daa2cae151fe9cabb26bcc61f0e7ee3975787532b83e7ddc37bbf9745b06294b2ba5f964f7755c6ea15a507ed573308e81793cda93df696e101cb967beafe6ae118e271fb226aa95a2161884f", 0x8e}, {0x0}], 0x4}}], 0x1, 0x2000c010) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x100, 0xa, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0xfe, 0x7}}}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x9, 0x4, 0x3e, 0x10, 0x81}, 0x124, &(0x7f0000000380)={0x5, 0xf, 0x124, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x5, 0x3, 0xb}, @generic={0x7d, 0x10, 0x0, "41d71099466721ec9b9762610f3e43b8fd766671d05dcdb99cdc43995f8655369fa85355bc62cf4177f3c9c871a9323f52af0c1f515bad31a74c4898ef346f4d43fcd57088cd70db78961f66ac56dd8a7a2792c7222ed1df0a01a803584b5d7995f71bcebd034a1b9d7c6ac08597af6fb672c7d019db6760ad1c"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x9, 0x9c}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "fae17a43e9d4a21871e76b2c576ef976"}, @generic={0x7a, 0x10, 0x3, "a682b0880e7460dfc60fa94d185a1756bab1f1c6152361bb955b03fc6a20e1ef29d63f147efffdd7e9cb684d3e8ecef4025533abec5ab29cfea17487b245715ab8b3b90f67bf8b3a921fc9fa7b5c5f663b59e8b4ac594caab1aa57c3d7697dbcfce73cfabf141f1291c1fea5bfebb0e6a60271410ae1b6"}]}, 0x9, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x419}}, {0x16, &(0x7f0000000280)=@string={0x16, 0x3, "58d7fe803dee65f3fdbffa04a7cdcf0de69eb807"}}, {0x97, &(0x7f00000004c0)=@string={0x97, 0x3, "d8b57a25ac2aed37cd42c6006a7cf2ed1892006a0eefdf91f85ec0c618523ee7deeb768735f3446a2918fc2ddb4f05f0c78545524b8b0476fd1fd24f7e4a627cfd5c63308f2135fdbbd087ded5630d23f5065400e8e4b8e3c6d8d2481c66b9c11f30292f92c2df64c71df4eb9a394740fbd817565346e2d6f54645ffcbdada99d65642838ff66ac0830af82253c5415012a08ea156"}}, {0xa0, &(0x7f0000000980)=@string={0xa0, 0x3, "5df42b1bad42c0fe91671629c6aa3feb6151af6a7c2eb6113e5c163dfb44c6f939163a87c2372cc192535783f8264b8608d51d8288c0cf0a6ef7fbd3406e8879ee7c65ea6e6ee0c0d91df635acd43d551211f44e7f3155e293316f4fc16fcc1be68da7f5ce8dd4644c1f87b4bc324220ac48882e8b0eb5faa215bd0e8cfc7611fbc476d1edc34ae64b9c4752883e174d955f6e6ca8fa49ae2ded7affbbb5"}}, {0xe2, &(0x7f0000000a40)=@string={0xe2, 0x3, "e76e574b75b6ec9e9424f3ab6d6d154c54bbeb4a6d37dcc6ae88e253985b0206682b3051c6e55f0190e7102e24516840383477c46a4cc6abfd8364fb768cab5e620a611c6238c4730d12d8bdd9895f4a1759e155ef0e9252c8983cb6f6cc5d83848eafce541ba4a0b031c7b2a03358d5a55e96176317034f82551e193862ce7aeb7295d87f10e4dec6c50ab826d80026e3d5da9244174d0549490d49ad419e31217ef3e1b0f997cd3ae8bf6e8650d748cd38acfcafb4db732ae1982ff0f211b369d53276c73d4be4295f292e575679ac71f049e934ca88786f68688b8eca5ef3"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x500a}}, {0x98, &(0x7f0000000b40)=@string={0x98, 0x3, "1096238d857576acaefacdf29fb894931fceb1a9b1cb280aad713389f2165793b4959946b4d0e52e52501c84bcac7bc2acb21e8a0814a294a1c593e407b4e556241a99c57ef85543c25230f44fe022df6fefeb69bb7e1f12633af182baef67ac7df8a467fb6452d2e761b4834f788310f8902908aaac94573db81f9db488c5540d3ed5a2c091a883b6235404895994f89f85e950be8f"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x448}}, {0xa1, &(0x7f0000000c00)=@string={0xa1, 0x3, "07c22c6d6defd5632bc19dbb50fd25a4da017dab31d4c7a7446f09cd1842cf9564727191937051500b75a35956cb7b7cf2f510f9ab8e17cb0539d520839141a17b30978b44b5235388e06e2522686e90006ea91d0b7c87220b7095b4ef9463e8e17ba0c16ee62ab2733e6792c5ff128878f4e3566c8718c4274b8dd2e832e0a6f731fc7ded40a2a3d8b38523af9b22413c825db9929f6fa43979debde359fb"}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 9.747694264s ago: executing program 3 (id=3101): syz_usb_connect(0x0, 0x3f, &(0x7f0000003240)=ANY=[@ANYBLOB="1201000033bc1840861246202ec10000000109022d0001000040000904d80403ff04010009058f02400009000109050d00100005ba81090501"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) 9.643245203s ago: executing program 9 (id=3102): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x94400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009700000000000000b01c996cb58227c01b273c763f27d8430b90d375e343e73e71de15f90d63f95392a7e076a6e0bc4be45845b4b0a73260710e3867d6417cf67cff86adf59c1b08a2221c3ba6c2e201662c5e8df8d6faf661ef8efde1d6e966e7a2d8fd6b321aa5ffffff7f00000000b8cd42570a2487"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000400}, 0x94) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}}, {0x0, 0xe21, 0x8}}}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x0, 0x9, 0x4003, 0x8, "068357a0ff42a897b9b9af684d435f0bb25e5465eb360342a5be8d3aaeff1e88ccc7e67475d26f6c4c3f1ee400", "cafec80000000000000000a335247271cc58f52ffee6d03f3325c04000", [0x6, 0x8004]}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001300)={r2, &(0x7f0000001480)="b017ad896c7bc0851036b4b8d5a605bf2fc1cd442114cd5f98fe639d177b8fffd2401a1e54e82a818e91c597c202635c19840d4d4b24eb6e0e7bbf5c61e8b1b0a0e91e1cba9ec6dc1e6bf31d631ece4285ad8871f9dee5e1129044f076b86de365deefecd1488b2009f1379e9ffa37bdf6ed1c6f3d82fe4570c19b3088a59099d6cc8be28af7169c09cc421c9a68de65fc3e2dbcd98170e26e5c4a2895172401e794596d4eddd56cfa60773936e3fa4679679005af6c7f9c48454851d9bf5ca775c0d486bf6046ab77b419763b7acd77f0489b723240e6b6cfc5e701e14d74b1ad396fff", &(0x7f0000000200)=""/20}, 0x12) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000180)={0x8ff2263ec52dc727, 0x0, {0x7, 0x2, 0x1002, 0x9, 0x5, 0x7, 0x0, 0x5}}) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x52000, 0x0) open(0x0, 0x0, 0x104) open(0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r5, &(0x7f0000001380)=""/229, 0xe5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x100) 9.107610244s ago: executing program 0 (id=3106): r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r6, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x80000000) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/560, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x233) 8.209666791s ago: executing program 9 (id=3107): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1, &(0x7f0000000100)={[0x1]}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x4000084) 8.144222283s ago: executing program 0 (id=3108): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$smackfs_ipv6host(r2, &(0x7f0000000180)=@l2={{0x1000000000000000, 0x3a, 0x4, 0x3a, 0x2, 0x3a, 0x800, 0x3a, 0xd, 0x3a, 0x5, 0x3a, 0xff, 0x3a, 0x3}, 0x2f, 0x5f, 0x20, ','}, 0xaf) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, &(0x7f0000000400)='x4', 0x0}, 0x20) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1, 0xff, 0xd, 0x0, 0x880}, 0x20) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) r4 = syz_open_procfs(0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000580)=0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x1) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$inet(r5, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="3b4b9e797a9167196b60c8534be838524fa18b3a4d10a5bf8cfa59eab24bc2c619035f62b4219ab2094276752a11ede54c157c56aefa4ae54190c615bd673aa4d361b858", 0x44}, {&(0x7f00000005c0)="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", 0x3b5}, {&(0x7f0000000100)="8f96952ed654f86559000000000000261a5ef74fc08b8b00a4c3c2dc951141d6ba0d82be3d61c84cfa3de6d6c01334dbc92a25298fd2dd634ef7bbe164d98bc5212daa2cae151fe9cabb26bcc61f0e7ee3975787532b83e7ddc37bbf9745b06294b2ba5f964f7755c6ea15a507ed573308e81793cda93df696e101cb967beafe6ae118e271fb226aa95a2161884f", 0x8e}, {0x0}], 0x4}}], 0x1, 0x2000c010) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x100, 0xa, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0xfe, 0x7}}}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x9, 0x4, 0x3e, 0x10, 0x81}, 0x124, &(0x7f0000000380)={0x5, 0xf, 0x124, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x5, 0x3, 0xb}, @generic={0x7d, 0x10, 0x0, "41d71099466721ec9b9762610f3e43b8fd766671d05dcdb99cdc43995f8655369fa85355bc62cf4177f3c9c871a9323f52af0c1f515bad31a74c4898ef346f4d43fcd57088cd70db78961f66ac56dd8a7a2792c7222ed1df0a01a803584b5d7995f71bcebd034a1b9d7c6ac08597af6fb672c7d019db6760ad1c"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x9, 0x9c}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "fae17a43e9d4a21871e76b2c576ef976"}, @generic={0x7a, 0x10, 0x3, "a682b0880e7460dfc60fa94d185a1756bab1f1c6152361bb955b03fc6a20e1ef29d63f147efffdd7e9cb684d3e8ecef4025533abec5ab29cfea17487b245715ab8b3b90f67bf8b3a921fc9fa7b5c5f663b59e8b4ac594caab1aa57c3d7697dbcfce73cfabf141f1291c1fea5bfebb0e6a60271410ae1b6"}]}, 0x9, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x419}}, {0x16, &(0x7f0000000280)=@string={0x16, 0x3, "58d7fe803dee65f3fdbffa04a7cdcf0de69eb807"}}, {0x97, &(0x7f00000004c0)=@string={0x97, 0x3, "d8b57a25ac2aed37cd42c6006a7cf2ed1892006a0eefdf91f85ec0c618523ee7deeb768735f3446a2918fc2ddb4f05f0c78545524b8b0476fd1fd24f7e4a627cfd5c63308f2135fdbbd087ded5630d23f5065400e8e4b8e3c6d8d2481c66b9c11f30292f92c2df64c71df4eb9a394740fbd817565346e2d6f54645ffcbdada99d65642838ff66ac0830af82253c5415012a08ea156"}}, {0xa0, &(0x7f0000000980)=@string={0xa0, 0x3, "5df42b1bad42c0fe91671629c6aa3feb6151af6a7c2eb6113e5c163dfb44c6f939163a87c2372cc192535783f8264b8608d51d8288c0cf0a6ef7fbd3406e8879ee7c65ea6e6ee0c0d91df635acd43d551211f44e7f3155e293316f4fc16fcc1be68da7f5ce8dd4644c1f87b4bc324220ac48882e8b0eb5faa215bd0e8cfc7611fbc476d1edc34ae64b9c4752883e174d955f6e6ca8fa49ae2ded7affbbb5"}}, {0xe2, &(0x7f0000000a40)=@string={0xe2, 0x3, "e76e574b75b6ec9e9424f3ab6d6d154c54bbeb4a6d37dcc6ae88e253985b0206682b3051c6e55f0190e7102e24516840383477c46a4cc6abfd8364fb768cab5e620a611c6238c4730d12d8bdd9895f4a1759e155ef0e9252c8983cb6f6cc5d83848eafce541ba4a0b031c7b2a03358d5a55e96176317034f82551e193862ce7aeb7295d87f10e4dec6c50ab826d80026e3d5da9244174d0549490d49ad419e31217ef3e1b0f997cd3ae8bf6e8650d748cd38acfcafb4db732ae1982ff0f211b369d53276c73d4be4295f292e575679ac71f049e934ca88786f68688b8eca5ef3"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x500a}}, {0x98, &(0x7f0000000b40)=@string={0x98, 0x3, "1096238d857576acaefacdf29fb894931fceb1a9b1cb280aad713389f2165793b4959946b4d0e52e52501c84bcac7bc2acb21e8a0814a294a1c593e407b4e556241a99c57ef85543c25230f44fe022df6fefeb69bb7e1f12633af182baef67ac7df8a467fb6452d2e761b4834f788310f8902908aaac94573db81f9db488c5540d3ed5a2c091a883b6235404895994f89f85e950be8f"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x448}}, {0xa1, &(0x7f0000000c00)=@string={0xa1, 0x3, "07c22c6d6defd5632bc19dbb50fd25a4da017dab31d4c7a7446f09cd1842cf9564727191937051500b75a35956cb7b7cf2f510f9ab8e17cb0539d520839141a17b30978b44b5235388e06e2522686e90006ea91d0b7c87220b7095b4ef9463e8e17ba0c16ee62ab2733e6792c5ff128878f4e3566c8718c4274b8dd2e832e0a6f731fc7ded40a2a3d8b38523af9b22413c825db9929f6fa43979debde359fb"}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 6.681107378s ago: executing program 5 (id=3109): socket(0x10, 0x80002, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmdt(0x0) shmdt(0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500"/12], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 6.64072494s ago: executing program 9 (id=3110): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x8000, 0x0) r1 = open$dir(&(0x7f0000000200)='./file1\x00', 0x400, 0x148) r2 = openat(r1, &(0x7f0000004d00)='./file1\x00', 0x1bc001, 0xfc) openat(r2, &(0x7f0000000400)='./file1\x00', 0xc0c0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xb95}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="140000002b000b93de09a427b36c690000fff005", 0x14}], 0x1}, 0x40080) recvmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @local}}, 0x30000, 0x0, 0x946f, 0x5, 0x22, 0x600000}, &(0x7f00000003c0)=0x9c) 5.792035385s ago: executing program 3 (id=3111): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) recvmmsg$unix(r4, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="54000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="8300045f8a84daf26c86e8b54ff76135b484417d230d0d907e736974002800028014000b00fc01000000000000000000000000000108000c000900000008000300ac1414aa0000000000000000000000df8e02c09de8b0bcb7cf65faca7e3cdc200085526ce3ae1148727a33c142402c76aeb8d4a0ce7443eb1b5a8a60e08f7e4c3c6d7df846c28577dc6dfd8d0cb41fefa5e0fc5ad5671e891f83fb813cf85048c5ef34f811a750fac737f6dc028050ecc3fdffbc66d1e62fa9809e3ef9c4d37b556a1f870f3909f943760aca823dd9aefacc78d6aeab93d6693b74203c44200b9733387e4c73b17473b9848b8f06ef741bb226f67ece5a220fe93c67eaf37a1aecbcc85c76ca0c28f3064e2a843c7c84ab10f283aefa5c214c78b7dcea1f0f7ed089f83718ab51aea56a35de6a403baa70ed552146697459d4da9b8c5b3ae92bff6c2b10"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 5.466905247s ago: executing program 9 (id=3113): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = inotify_init() inotify_rm_watch(r3, 0x0) 5.26596293s ago: executing program 4 (id=3114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x48082, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 4.199786089s ago: executing program 4 (id=3115): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = io_uring_setup(0x1abf, &(0x7f0000000000)={0x0, 0xa4ec, 0x400, 0x1, 0x102a8}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000080)=[0xfff, 0x6], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) timerfd_create(0x7, 0x81000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001ec0)={'ip6gretap0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x3000c88c) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x100, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'dummy0\x00', &(0x7f0000000300)=@ethtool_eeprom={0xb, 0x7104, 0x1, 0x92, "f10f447c671a2a0269913584e228fe29d170d88905842e7373edadbac9afd5249f109efeb928eefef6ea133b4ed588d8434d5c2e06c3bd0b43f015db6e9f2fdbe4fb37b3c15ce0f57c154fd8591692577b80734d7920cc4c1b617b9eb8d735edde817ebdf098639aa4d2764c166e3d4b14ab7bfa70d327a393cbc8aed79c220fb3256933c78eccdd9ef268149e6688074b13"}}) 3.671716017s ago: executing program 0 (id=3116): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r0, 0x540a, 0x2) (fail_nth: 2) 3.659773248s ago: executing program 5 (id=3117): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) pipe(&(0x7f00000000c0)) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[], 0x0, 0x34}, 0x28) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4ca31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x126}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000001000000000c1eb0df0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0xf72}], 0x1}}], 0x1, 0x140, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) syz_open_dev$midi(0x0, 0x2, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) 3.564425678s ago: executing program 4 (id=3118): r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r6, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x80000000) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/560, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x233) 3.078016739s ago: executing program 0 (id=3119): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="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", 0x2000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004"], 0x50) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bind$tipc(r5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x9, 0x0, 0x32a, 0xfffffffffffffffe, 0x3, 0x1, 0x4, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 2.592091937s ago: executing program 5 (id=3120): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1, &(0x7f0000000100)={[0x1]}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x4000084) 2.192073458s ago: executing program 3 (id=3121): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'dummy0\x00', &(0x7f0000000300)=@ethtool_eeprom={0xb, 0x7104, 0x1, 0x92, "f10f447c671a2a0269913584e228fe29d170d88905842e7373edadbac9afd5249f109efeb928eefef6ea133b4ed588d8434d5c2e06c3bd0b43f015db6e9f2fdbe4fb37b3c15ce0f57c154fd8591692577b80734d7920cc4c1b617b9eb8d735edde817ebdf098639aa4d2764c166e3d4b14ab7bfa70d327a393cbc8aed79c220fb3256933c78eccdd9ef268149e6688074b13"}}) 2.191424052s ago: executing program 4 (id=3122): unshare(0x22020400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r1, 0x0, r2, 0x0, 0x10000000000016, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 2.110090736s ago: executing program 0 (id=3123): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x8000, 0x0) r1 = open$dir(&(0x7f0000000200)='./file1\x00', 0x400, 0x148) r2 = openat(r1, &(0x7f0000004d00)='./file1\x00', 0x1bc001, 0xfc) openat(r2, &(0x7f0000000400)='./file1\x00', 0xc0c0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xb95}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="140000002b000b93de09a427b36c690000fff005", 0x14}], 0x1}, 0x40080) recvmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @local}}, 0x30000, 0x0, 0x946f, 0x5, 0x22, 0x600000}, &(0x7f00000003c0)=0x9c) 1.53680102s ago: executing program 3 (id=3124): syz_usb_connect(0x0, 0x3f, &(0x7f0000003240)=ANY=[@ANYBLOB="1201000033bc1840861246202ec10000000109022d0001000040000904d80403ff04010009058f02400009000109050d00100005ba81090501"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) 1.455993226s ago: executing program 0 (id=3125): syz_usb_connect(0x0, 0x3f, &(0x7f0000003240)=ANY=[@ANYBLOB="1201000033bc1840861246202ec10000000109022d0001000040000904d80403ff04010009058f02400009000109050d00100005ba81090501"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(r4) 1.326097265s ago: executing program 9 (id=3126): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$smackfs_ipv6host(r2, &(0x7f0000000180)=@l2={{0x1000000000000000, 0x3a, 0x4, 0x3a, 0x2, 0x3a, 0x800, 0x3a, 0xd, 0x3a, 0x5, 0x3a, 0xff, 0x3a, 0x3}, 0x2f, 0x5f, 0x20, ','}, 0xaf) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, &(0x7f0000000400)='x4', 0x0}, 0x20) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1, 0xff, 0xd, 0x0, 0x880}, 0x20) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) r4 = syz_open_procfs(0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000580)=0x1) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x1) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$inet(r5, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="3b4b9e797a9167196b60c8534be838524fa18b3a4d10a5bf8cfa59eab24bc2c619035f62b4219ab2094276752a11ede54c157c56aefa4ae54190c615bd673aa4d361b858", 0x44}, {&(0x7f00000005c0)="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", 0x3b5}, {&(0x7f0000000100)="8f96952ed654f86559000000000000261a5ef74fc08b8b00a4c3c2dc951141d6ba0d82be3d61c84cfa3de6d6c01334dbc92a25298fd2dd634ef7bbe164d98bc5212daa2cae151fe9cabb26bcc61f0e7ee3975787532b83e7ddc37bbf9745b06294b2ba5f964f7755c6ea15a507ed573308e81793cda93df696e101cb967beafe6ae118e271fb226aa95a2161884f", 0x8e}, {0x0}], 0x4}}], 0x1, 0x2000c010) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x100, 0xa, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0xfe, 0x7}}}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x9, 0x4, 0x3e, 0x10, 0x81}, 0x124, &(0x7f0000000380)={0x5, 0xf, 0x124, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x5, 0x3, 0xb}, @generic={0x7d, 0x10, 0x0, "41d71099466721ec9b9762610f3e43b8fd766671d05dcdb99cdc43995f8655369fa85355bc62cf4177f3c9c871a9323f52af0c1f515bad31a74c4898ef346f4d43fcd57088cd70db78961f66ac56dd8a7a2792c7222ed1df0a01a803584b5d7995f71bcebd034a1b9d7c6ac08597af6fb672c7d019db6760ad1c"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x9, 0x9c}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "fae17a43e9d4a21871e76b2c576ef976"}, @generic={0x7a, 0x10, 0x3, "a682b0880e7460dfc60fa94d185a1756bab1f1c6152361bb955b03fc6a20e1ef29d63f147efffdd7e9cb684d3e8ecef4025533abec5ab29cfea17487b245715ab8b3b90f67bf8b3a921fc9fa7b5c5f663b59e8b4ac594caab1aa57c3d7697dbcfce73cfabf141f1291c1fea5bfebb0e6a60271410ae1b6"}]}, 0x9, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x419}}, {0x16, &(0x7f0000000280)=@string={0x16, 0x3, "58d7fe803dee65f3fdbffa04a7cdcf0de69eb807"}}, {0x97, &(0x7f00000004c0)=@string={0x97, 0x3, "d8b57a25ac2aed37cd42c6006a7cf2ed1892006a0eefdf91f85ec0c618523ee7deeb768735f3446a2918fc2ddb4f05f0c78545524b8b0476fd1fd24f7e4a627cfd5c63308f2135fdbbd087ded5630d23f5065400e8e4b8e3c6d8d2481c66b9c11f30292f92c2df64c71df4eb9a394740fbd817565346e2d6f54645ffcbdada99d65642838ff66ac0830af82253c5415012a08ea156"}}, {0xa0, &(0x7f0000000980)=@string={0xa0, 0x3, "5df42b1bad42c0fe91671629c6aa3feb6151af6a7c2eb6113e5c163dfb44c6f939163a87c2372cc192535783f8264b8608d51d8288c0cf0a6ef7fbd3406e8879ee7c65ea6e6ee0c0d91df635acd43d551211f44e7f3155e293316f4fc16fcc1be68da7f5ce8dd4644c1f87b4bc324220ac48882e8b0eb5faa215bd0e8cfc7611fbc476d1edc34ae64b9c4752883e174d955f6e6ca8fa49ae2ded7affbbb5"}}, {0xe2, &(0x7f0000000a40)=@string={0xe2, 0x3, "e76e574b75b6ec9e9424f3ab6d6d154c54bbeb4a6d37dcc6ae88e253985b0206682b3051c6e55f0190e7102e24516840383477c46a4cc6abfd8364fb768cab5e620a611c6238c4730d12d8bdd9895f4a1759e155ef0e9252c8983cb6f6cc5d83848eafce541ba4a0b031c7b2a03358d5a55e96176317034f82551e193862ce7aeb7295d87f10e4dec6c50ab826d80026e3d5da9244174d0549490d49ad419e31217ef3e1b0f997cd3ae8bf6e8650d748cd38acfcafb4db732ae1982ff0f211b369d53276c73d4be4295f292e575679ac71f049e934ca88786f68688b8eca5ef3"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x500a}}, {0x98, &(0x7f0000000b40)=@string={0x98, 0x3, "1096238d857576acaefacdf29fb894931fceb1a9b1cb280aad713389f2165793b4959946b4d0e52e52501c84bcac7bc2acb21e8a0814a294a1c593e407b4e556241a99c57ef85543c25230f44fe022df6fefeb69bb7e1f12633af182baef67ac7df8a467fb6452d2e761b4834f788310f8902908aaac94573db81f9db488c5540d3ed5a2c091a883b6235404895994f89f85e950be8f"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x448}}, {0xa1, &(0x7f0000000c00)=@string={0xa1, 0x3, "07c22c6d6defd5632bc19dbb50fd25a4da017dab31d4c7a7446f09cd1842cf9564727191937051500b75a35956cb7b7cf2f510f9ab8e17cb0539d520839141a17b30978b44b5235388e06e2522686e90006ea91d0b7c87220b7095b4ef9463e8e17ba0c16ee62ab2733e6792c5ff128878f4e3566c8718c4274b8dd2e832e0a6f731fc7ded40a2a3d8b38523af9b22413c825db9929f6fa43979debde359fb"}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1.201141753s ago: executing program 4 (id=3127): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.06459413s ago: executing program 5 (id=3128): r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000180)='./file0\x00', 0x189) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) keyctl$link(0x8, r8, r8) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000002480)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x80002, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}], [{@dont_measure}]}}) 189.108599ms ago: executing program 4 (id=3129): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = io_uring_setup(0x1abf, &(0x7f0000000000)={0x0, 0xa4ec, 0x400, 0x1, 0x102a8}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000080)=[0xfff, 0x6], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timerfd_create(0x7, 0x81000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0xfffffffc, {0x60, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x8, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x3000c88c) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x100, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'veth0_to_team\x00', &(0x7f0000000200)=@ethtool_dump={0x40, 0x5, 0xe, 0x50, "2e4729c87ef3a15014cf10db6e00ecdab07fb4e3d189a08d79f0552a5489976b0effbefd036a5d19539d67f75260b2b3f3a56564da9f221bb8cc89b4d754c17d71576ff69e6bde90ca778c3b7c7d2f7c"}}) r5 = socket(0x10, 0x803, 0x40000004) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xfd, 0x0, 0x2, 0x4, 0x3, 0x1, 0x2}}) syz_init_net_socket$ax25(0x3, 0x2, 0x7) 0s ago: executing program 5 (id=3130): pipe(&(0x7f00000001c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000100)="b9ff030f6044", 0x0, 0x34e152f7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2, &(0x7f0000000000)=0x2, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x7, 0x83, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0xc}], 0x10}, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0) mq_notify(r7, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r8, 0x5453, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) socket$inet6(0xa, 0x3, 0x8000000003c) kernel console output (not intermixed with test programs): netlink: 52 bytes leftover after parsing attributes in process `syz.4.2506'. [ 1103.838729][ T9647] usb 1-1: SerialNumber: syz [ 1103.845989][ T9647] usb 1-1: config 0 descriptor?? [ 1103.856527][ T9647] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1104.085400][ T9647] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1104.105620][ T9647] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1104.126362][ T5906] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1104.147703][ T9736] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1104.900032][ T5906] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1104.915425][ T5906] usb 6-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1104.932757][ T5906] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1104.942062][T16558] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1104.945547][ T5906] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1104.958190][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.966154][T16558] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1104.966500][ T5906] usb 6-1: Product: 뗘╺⪬㟭䋍Æ籪鈘樀釟廸움刘蝶橄ᠩⷼ俛藇剅譋瘄´俒䩾籢峽っ↏ﴵ킻揕⌍۵T䣒昜솹〟⼩슒擟᷇㦚䁇嘗䙓훢䛵ｅ駚囖荂쁪ઃ⋸앓偁ꀒꆎ [ 1104.996487][ T5906] usb 6-1: Manufacturer: 흘胾뿽Ӻ춧ා黦޸ [ 1105.003881][ T5906] usb 6-1: SerialNumber: ᬫ䊭ﻀ枑⤖꫆兡檯⹼ᆶ尾㴖䓻阮ᘹ蜺㟂섬厒荗⛸虋픈舝삈૏폻湀禈糮湮샠ᷙ㗶풬唽ᄒ仴ㅿ㆓佯濁ᯌ跦跎擔Ὄ뒇㊼⁂䢬⺈຋蝹ᖢຽﲌᅶ쓻텶쏭鱋則㺈䴗徕汮直깉ｺ떻 [ 1105.009787][T16558] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1105.040523][ T9736] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1105.051270][ T9736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.059542][ T9736] usb 4-1: Product: syz [ 1105.063729][ T9736] usb 4-1: Manufacturer: syz [ 1105.070891][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1105.071795][ T5971] usb 1-1: USB disconnect, device number 82 [ 1105.096795][ T5971] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1105.109062][ T9736] usb 4-1: SerialNumber: syz [ 1105.118787][ T9736] usb 4-1: config 0 descriptor?? [ 1105.127536][ T5971] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1105.143073][ T5971] quatech2 1-1:0.51: device disconnected [ 1105.159612][T16700] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1105.172749][T16558] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1105.431030][ T5906] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 6 proto 1 vid 0x0525 pid 0xA4A8 [ 1105.690758][ T5906] usb 6-1: USB disconnect, device number 32 [ 1106.049203][ T5906] usblp0: removed [ 1107.839814][T16719] netlink: 'syz.4.2509': attribute type 1 has an invalid length. [ 1107.848144][T16719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2509'. [ 1107.927429][T16558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.435832][T16558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.460193][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.467356][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.812937][ T9736] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1109.063873][T10163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.065630][ T9736] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1109.071109][T10163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.117881][ T9736] usb 4-1: USB disconnect, device number 59 [ 1109.248554][T16730] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2511'. [ 1109.257991][T16730] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1109.505711][T16558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1109.516148][T16558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1109.934374][T16740] /dev/nullb0: Can't open blockdev [ 1112.365038][T16558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.510745][T16764] kvm: pic: non byte write [ 1112.732543][ T5892] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1112.995501][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.038937][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1113.092490][ T5892] usb 1-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 1113.215088][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.246728][ T5892] usb 1-1: config 0 descriptor?? [ 1113.357001][T16558] veth0_vlan: entered promiscuous mode [ 1113.390958][T16558] veth1_vlan: entered promiscuous mode [ 1113.476127][T16558] veth0_macvtap: entered promiscuous mode [ 1113.628659][T16558] veth1_macvtap: entered promiscuous mode [ 1113.758085][T16783] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1114.177080][T16558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.589525][ T5892] viewsonic 0003:0543:E621.0023: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.0-1/input0 [ 1116.362209][T16558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.413595][T16558] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.462380][T16558] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.482561][T16558] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.513143][T16558] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.704517][ T768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.756142][ T768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.219254][ T5906] usb 1-1: USB disconnect, device number 83 [ 1117.896898][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.917152][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.762264][T16804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.918710][T16804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.117170][T16804] Driver unsupported XDP return value 0 on prog (id 430) dev N/A, expect packet loss! [ 1119.312303][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.596610][T16792] netlink: 'syz.5.2527': attribute type 1 has an invalid length. [ 1119.604358][T16792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2527'. [ 1119.715051][T16818] /dev/nullb0: Can't open blockdev [ 1120.546381][T16823] veth0_to_bond: entered allmulticast mode [ 1120.596834][T16823] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1121.603063][T16836] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2539'. [ 1121.618924][T16836] netlink: 8980 bytes leftover after parsing attributes in process `syz.4.2539'. [ 1122.035362][T16841] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1122.151956][T16842] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2540'. [ 1122.160999][T16842] netlink: 8980 bytes leftover after parsing attributes in process `syz.9.2540'. [ 1124.023369][T16849] netlink: 'syz.4.2542': attribute type 1 has an invalid length. [ 1124.031751][T16849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2542'. [ 1125.335296][T16870] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2550'. [ 1125.453763][ T5971] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1125.721904][ T5971] usb 1-1: Using ep0 maxpacket: 8 [ 1125.781080][ T5971] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1125.826307][ T5971] usb 1-1: config index 0 descriptor too short (expected 144, got 95) [ 1125.829032][T16870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2550'. [ 1125.872546][ T5971] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1125.881437][ T5971] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1125.955625][ T5971] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1125.966963][ T5971] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1125.977020][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.985406][ T5971] usb 1-1: Product: syz [ 1125.990063][ T5971] usb 1-1: Manufacturer: syz [ 1125.995273][ T5971] usb 1-1: SerialNumber: syz [ 1126.580129][ T5971] usb 1-1: 0:2 : does not exist [ 1126.595275][ T5971] usb 1-1: USB disconnect, device number 84 [ 1126.621776][T16889] netlink: 'syz.4.2554': attribute type 13 has an invalid length. [ 1126.632627][T16658] udevd[16658]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1127.672817][T16889] bridge0: port 3(syz_tun) entered disabled state [ 1127.784838][ T5971] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1127.839213][ T5906] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1127.878497][T16889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.885981][T16889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.949317][ T5971] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1127.964614][ T5971] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1128.004155][ T5906] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1128.013565][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.021983][ T5971] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1128.031328][ T5906] usb 6-1: Product: syz [ 1128.035532][ T5971] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.044417][ T5906] usb 6-1: Manufacturer: syz [ 1128.049077][ T5906] usb 6-1: SerialNumber: syz [ 1128.066677][T16888] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1128.075862][ T5906] usb 6-1: config 0 descriptor?? [ 1128.084675][ T5971] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1128.225599][T16889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1128.347904][ T5971] usb 10-1: USB disconnect, device number 7 [ 1129.643137][T16923] FAULT_INJECTION: forcing a failure. [ 1129.643137][T16923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1129.683538][T16923] CPU: 1 UID: 0 PID: 16923 Comm: syz.0.2560 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1129.683569][T16923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1129.683583][T16923] Call Trace: [ 1129.683593][T16923] [ 1129.683603][T16923] dump_stack_lvl+0x189/0x250 [ 1129.683638][T16923] ? __pfx____ratelimit+0x10/0x10 [ 1129.683663][T16923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1129.683687][T16923] ? __pfx__printk+0x10/0x10 [ 1129.683735][T16923] should_fail_ex+0x414/0x560 [ 1129.683764][T16923] strncpy_from_user+0x36/0x290 [ 1129.683804][T16923] getname_flags+0xf3/0x540 [ 1129.683836][T16923] __x64_sys_rmdir+0x3a/0x50 [ 1129.683855][T16923] do_syscall_64+0xfa/0x3b0 [ 1129.683878][T16923] ? lockdep_hardirqs_on+0x9c/0x150 [ 1129.683901][T16923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.683922][T16923] ? clear_bhb_loop+0x60/0xb0 [ 1129.683949][T16923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.683971][T16923] RIP: 0033:0x7ff898b8e9a9 [ 1129.683991][T16923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1129.684011][T16923] RSP: 002b:00007ff899ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1129.684035][T16923] RAX: ffffffffffffffda RBX: 00007ff898db5fa0 RCX: 00007ff898b8e9a9 [ 1129.684052][T16923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 1129.684066][T16923] RBP: 00007ff899ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.684080][T16923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1129.684094][T16923] R13: 0000000000000000 R14: 00007ff898db5fa0 R15: 00007ffee5f85288 [ 1129.684127][T16923] [ 1129.899196][T16889] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.908898][T16889] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.921280][T16889] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.930215][T16889] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.361952][T16930] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1130.372785][T16930] FAULT_INJECTION: forcing a failure. [ 1130.372785][T16930] name failslab, interval 1, probability 0, space 0, times 0 [ 1130.385696][T16930] CPU: 0 UID: 0 PID: 16930 Comm: syz.4.2561 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1130.385721][T16930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1130.385733][T16930] Call Trace: [ 1130.385742][T16930] [ 1130.385750][T16930] dump_stack_lvl+0x189/0x250 [ 1130.385776][T16930] ? __pfx____ratelimit+0x10/0x10 [ 1130.385798][T16930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1130.385820][T16930] ? __pfx__printk+0x10/0x10 [ 1130.385846][T16930] ? __pfx___might_resched+0x10/0x10 [ 1130.385868][T16930] ? fs_reclaim_acquire+0x7d/0x100 [ 1130.385895][T16930] should_fail_ex+0x414/0x560 [ 1130.385919][T16930] should_failslab+0xa8/0x100 [ 1130.385942][T16930] __kmalloc_noprof+0xcb/0x4f0 [ 1130.385960][T16930] ? tomoyo_encode+0x28b/0x550 [ 1130.385988][T16930] tomoyo_encode+0x28b/0x550 [ 1130.386018][T16930] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1130.386053][T16930] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1130.386074][T16930] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1130.386097][T16930] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1130.386134][T16930] ? __lock_acquire+0xab9/0xd20 [ 1130.386172][T16930] ? __fget_files+0x2a/0x420 [ 1130.386196][T16930] ? __fget_files+0x2a/0x420 [ 1130.386216][T16930] ? __fget_files+0x3a0/0x420 [ 1130.386236][T16930] ? __fget_files+0x2a/0x420 [ 1130.386274][T16930] security_file_ioctl+0xcb/0x2d0 [ 1130.386298][T16930] __se_sys_ioctl+0x47/0x170 [ 1130.386329][T16930] do_syscall_64+0xfa/0x3b0 [ 1130.386351][T16930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.386370][T16930] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1130.386388][T16930] ? clear_bhb_loop+0x60/0xb0 [ 1130.386411][T16930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.386430][T16930] RIP: 0033:0x7f21de98e9a9 [ 1130.386447][T16930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1130.386463][T16930] RSP: 002b:00007f21df7bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1130.386484][T16930] RAX: ffffffffffffffda RBX: 00007f21debb6160 RCX: 00007f21de98e9a9 [ 1130.386498][T16930] RDX: 0000200000000000 RSI: 0000000000005417 RDI: 0000000000000005 [ 1130.386511][T16930] RBP: 00007f21df7bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1130.386523][T16930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1130.386534][T16930] R13: 0000000000000000 R14: 00007f21debb6160 R15: 00007ffd6a93a598 [ 1130.386563][T16930] [ 1130.386656][T16930] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1130.686149][T16931] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2562'. [ 1130.695525][T16931] netlink: 8980 bytes leftover after parsing attributes in process `syz.9.2562'. [ 1130.881991][ T5906] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1131.066013][ T5906] asix 6-1:0.0: probe with driver asix failed with error -71 [ 1131.287587][ T5906] usb 6-1: USB disconnect, device number 33 [ 1135.069688][T16981] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1135.150813][T16982] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2576'. [ 1135.695955][T16983] netlink: 'syz.9.2577': attribute type 24 has an invalid length. [ 1138.685490][T17015] netlink: 'syz.9.2587': attribute type 3 has an invalid length. [ 1138.889818][T16921] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1138.963188][T17017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2589'. [ 1138.975254][T17017] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1138.992636][T17019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.006585][T17019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.084821][T16921] usb 1-1: Using ep0 maxpacket: 16 [ 1139.114600][T16921] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1139.169365][T16921] usb 1-1: config 0 has no interface number 0 [ 1139.219352][T16921] usb 1-1: config 0 interface 1 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.284256][T16921] usb 1-1: config 0 interface 1 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.345995][T16921] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1139.430195][T16921] usb 1-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 1.00 [ 1139.482400][T16921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.574464][T16921] usb 1-1: config 0 descriptor?? [ 1140.333625][ T9647] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1140.504605][ T9647] usb 4-1: device descriptor read/64, error -71 [ 1140.711165][T16921] chicony 0003:04F2:0418.0024: item fetching failed at offset 0/4 [ 1140.720056][T16921] chicony 0003:04F2:0418.0024: Chicony hid parse failed: -22 [ 1140.727683][T16921] chicony 0003:04F2:0418.0024: probe with driver chicony failed with error -22 [ 1140.792054][ T9646] usb 1-1: USB disconnect, device number 85 [ 1141.007044][ T9647] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1141.169229][ T9647] usb 4-1: device descriptor read/64, error -71 [ 1141.841354][ T9647] usb usb4-port1: attempt power cycle [ 1142.800419][ T9647] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1143.576764][ T9647] usb 4-1: device descriptor read/8, error -71 [ 1146.568657][T17070] Cannot find del_set index 286 as target [ 1152.898874][T17140] FAULT_INJECTION: forcing a failure. [ 1152.898874][T17140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1152.961515][T17140] CPU: 1 UID: 0 PID: 17140 Comm: syz.0.2622 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1152.961544][T17140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1152.961557][T17140] Call Trace: [ 1152.961565][T17140] [ 1152.961575][T17140] dump_stack_lvl+0x189/0x250 [ 1152.961603][T17140] ? __pfx____ratelimit+0x10/0x10 [ 1152.961627][T17140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1152.961651][T17140] ? __pfx__printk+0x10/0x10 [ 1152.961691][T17140] should_fail_ex+0x414/0x560 [ 1152.961718][T17140] _copy_from_user+0x2d/0xb0 [ 1152.961749][T17140] __copy_msghdr+0x3c5/0x5b0 [ 1152.961786][T17140] ___sys_sendmsg+0x1a5/0x2a0 [ 1152.961821][T17140] ? __pfx____sys_sendmsg+0x10/0x10 [ 1152.961891][T17140] ? __fget_files+0x2a/0x420 [ 1152.961914][T17140] ? __fget_files+0x3a0/0x420 [ 1152.961950][T17140] __x64_sys_sendmsg+0x19b/0x260 [ 1152.961985][T17140] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1152.962028][T17140] ? __pfx_ksys_write+0x10/0x10 [ 1152.962046][T17140] ? rcu_is_watching+0x15/0xb0 [ 1152.962075][T17140] ? do_syscall_64+0xbe/0x3b0 [ 1152.962103][T17140] do_syscall_64+0xfa/0x3b0 [ 1152.962125][T17140] ? lockdep_hardirqs_on+0x9c/0x150 [ 1152.962147][T17140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.962169][T17140] ? clear_bhb_loop+0x60/0xb0 [ 1152.962203][T17140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.962225][T17140] RIP: 0033:0x7ff898b8e9a9 [ 1152.962244][T17140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1152.962263][T17140] RSP: 002b:00007ff899ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1152.962287][T17140] RAX: ffffffffffffffda RBX: 00007ff898db5fa0 RCX: 00007ff898b8e9a9 [ 1152.962302][T17140] RDX: 0000000000000000 RSI: 0000200000005d80 RDI: 0000000000000003 [ 1152.962316][T17140] RBP: 00007ff899ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 1152.962330][T17140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1152.962343][T17140] R13: 0000000000000000 R14: 00007ff898db5fa0 R15: 00007ffee5f85288 [ 1152.962375][T17140] [ 1153.287533][ T5850] Bluetooth: hci4: link tx timeout [ 1153.294473][ T5850] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1153.322964][ T5850] Bluetooth: hci4: link tx timeout [ 1153.328477][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1153.343395][T17146] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2625'. [ 1153.352940][T17146] netlink: 8980 bytes leftover after parsing attributes in process `syz.9.2625'. [ 1153.476453][ T9648] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1153.692413][ T9648] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1153.761982][ T9648] usb 6-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1153.784299][ T9648] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1153.805249][ T9648] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1153.822571][ T9648] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.837817][ T9648] usb 6-1: Product: 뗘╺⪬㟭䋍Æ籪鈘樀釟廸움刘蝶橄ᠩⷼ俛藇剅譋瘄´俒䩾籢峽っ↏ﴵ킻揕⌍۵T䣒昜솹〟⼩슒擟᷇㦚䁇嘗䙓훢䛵ｅ駚囖荂쁪ઃ⋸앓偁ꀒꆎ [ 1154.069830][ T9648] usb 6-1: Manufacturer: 흘胾뿽Ӻ춧ා黦޸ [ 1154.077199][ T9648] usb 6-1: SerialNumber: ᬫ䊭ﻀ枑⤖꫆兡檯⹼ᆶ尾㴖䓻阮ᘹ蜺㟂섬厒荗⛸虋픈舝삈૏폻湀禈糮湮샠ᷙ㗶풬唽ᄒ仴ㅿ㆓佯濁ᯌ跦跎擔Ὄ뒇㊼⁂䢬⺈຋蝹ᖢຽﲌᅶ쓻텶쏭鱋則㺈䴗徕汮直깉ｺ떻 [ 1154.110370][T17138] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1154.871681][ T9648] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 6 proto 1 vid 0x0525 pid 0xA4A8 [ 1154.899966][T17158] netlink: 277 bytes leftover after parsing attributes in process `syz.9.2629'. [ 1154.932410][ T9648] usb 6-1: USB disconnect, device number 34 [ 1154.953306][ T9648] usblp0: removed [ 1155.077035][T17158] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2629'. [ 1155.120777][ T5906] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1155.492914][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 1156.027528][ T5906] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1156.101098][ T5906] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1156.270296][ T5906] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.370880][ T5906] usb 1-1: config 220 has no interface number 2 [ 1156.399469][ T5906] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1156.459721][ T5906] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1156.481506][ T5906] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1156.522613][ T5906] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1156.627934][ T9648] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1157.507639][ T5906] usb 1-1: string descriptor 0 read error: -71 [ 1157.604540][ T5906] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1157.956275][ T9648] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 1157.967230][ T9648] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.977932][ T9648] usb 4-1: config 0 has no interface number 0 [ 1157.992046][ T9648] usb 4-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 1158.002380][ T9648] usb 4-1: config 0 interface 216 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1158.007016][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.016061][ T9648] usb 4-1: config 0 interface 216 has no altsetting 0 [ 1158.091937][ T5906] usb 1-1: can't set config #220, error -71 [ 1158.099361][ T9648] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 1158.120338][ T5906] usb 1-1: USB disconnect, device number 86 [ 1158.135460][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 1158.158201][ T9648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.175054][ T9648] usb 4-1: config 0 descriptor?? [ 1158.180920][T17171] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1158.209260][ T9648] usb 4-1: NFC: intf ffff88807dc2d000 id ffffffff8eb3fb20 [ 1160.310379][T17206] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2642'. [ 1160.544395][T17204] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1161.841335][ T9648] usb 4-1: USB disconnect, device number 64 [ 1162.468289][T17229] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2649'. [ 1162.477896][T17229] netlink: 8980 bytes leftover after parsing attributes in process `syz.9.2649'. [ 1162.550627][ T5906] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 1162.558318][T16921] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1162.778277][T16921] usb 4-1: Using ep0 maxpacket: 32 [ 1162.788262][ T5906] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1162.926154][ T5906] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1162.939596][ T5906] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1162.976981][T16921] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1162.998449][T16921] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1163.028479][ T5906] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1163.043774][T16921] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1163.061417][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.095920][ T5906] usb 1-1: Product: 뗘╺⪬㟭䋍Æ籪鈘樀釟廸움刘蝶橄ᠩⷼ俛藇剅譋瘄´俒䩾籢峽っ↏ﴵ킻揕⌍۵T䣒昜솹〟⼩슒擟᷇㦚䁇嘗䙓훢䛵ｅ駚囖荂쁪ઃ⋸앓偁ꀒꆎ [ 1163.128745][T16921] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 1163.138054][T16921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.156966][T16921] usb 4-1: Product: syz [ 1163.168011][T16921] usb 4-1: Manufacturer: syz [ 1163.181362][ T5906] usb 1-1: Manufacturer: 흘胾뿽Ӻ춧ා黦޸ [ 1163.188170][ T5906] usb 1-1: SerialNumber: ᬫ䊭ﻀ枑⤖꫆兡檯⹼ᆶ尾㴖䓻阮ᘹ蜺㟂섬厒荗⛸虋픈舝삈૏폻湀禈糮湮샠ᷙ㗶풬唽ᄒ仴ㅿ㆓佯濁ᯌ跦跎擔Ὄ뒇㊼⁂䢬⺈຋蝹ᖢຽﲌᅶ쓻텶쏭鱋則㺈䴗徕汮直깉ｺ떻 [ 1163.196357][T17236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.213719][T16921] usb 4-1: SerialNumber: syz [ 1163.235643][T16921] usb 4-1: config 0 descriptor?? [ 1163.261795][T17218] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1163.278082][T17236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.782595][T16921] gs_usb 4-1:0.0: Couldn't get device config: (err=-71) [ 1163.841271][T16921] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 1163.951988][T16921] usb 4-1: USB disconnect, device number 65 [ 1164.378843][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 1164.897535][T17248] FAULT_INJECTION: forcing a failure. [ 1164.897535][T17248] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.937985][T17248] CPU: 0 UID: 0 PID: 17248 Comm: syz.4.2657 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1164.938011][T17248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1164.938022][T17248] Call Trace: [ 1164.938030][T17248] [ 1164.938039][T17248] dump_stack_lvl+0x189/0x250 [ 1164.938064][T17248] ? __pfx____ratelimit+0x10/0x10 [ 1164.938085][T17248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1164.938115][T17248] ? __pfx__printk+0x10/0x10 [ 1164.938145][T17248] ? __pfx___might_resched+0x10/0x10 [ 1164.938171][T17248] should_fail_ex+0x414/0x560 [ 1164.938196][T17248] should_failslab+0xa8/0x100 [ 1164.938218][T17248] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1164.938238][T17248] ? __alloc_skb+0x112/0x2d0 [ 1164.938268][T17248] __alloc_skb+0x112/0x2d0 [ 1164.938299][T17248] netlink_sendmsg+0x5c6/0xb30 [ 1164.938335][T17248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1164.938368][T17248] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1164.938387][T17248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1164.938414][T17248] __sock_sendmsg+0x21c/0x270 [ 1164.938439][T17248] ____sys_sendmsg+0x505/0x830 [ 1164.938473][T17248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1164.938513][T17248] ? import_iovec+0x74/0xa0 [ 1164.938543][T17248] ___sys_sendmsg+0x21f/0x2a0 [ 1164.938574][T17248] ? __pfx____sys_sendmsg+0x10/0x10 [ 1164.938636][T17248] ? __fget_files+0x2a/0x420 [ 1164.938656][T17248] ? __fget_files+0x3a0/0x420 [ 1164.938686][T17248] __x64_sys_sendmsg+0x19b/0x260 [ 1164.938718][T17248] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1164.938756][T17248] ? __pfx_ksys_write+0x10/0x10 [ 1164.938772][T17248] ? rcu_is_watching+0x15/0xb0 [ 1164.938797][T17248] ? do_syscall_64+0xbe/0x3b0 [ 1164.938822][T17248] do_syscall_64+0xfa/0x3b0 [ 1164.938841][T17248] ? lockdep_hardirqs_on+0x9c/0x150 [ 1164.938860][T17248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.938880][T17248] ? clear_bhb_loop+0x60/0xb0 [ 1164.938903][T17248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.938922][T17248] RIP: 0033:0x7f21de98e9a9 [ 1164.938938][T17248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1164.938955][T17248] RSP: 002b:00007f21df801038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1164.938975][T17248] RAX: ffffffffffffffda RBX: 00007f21debb5fa0 RCX: 00007f21de98e9a9 [ 1164.938990][T17248] RDX: e821651e0a1b45fc RSI: 0000200000000800 RDI: 0000000000000003 [ 1164.939003][T17248] RBP: 00007f21df801090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.939015][T17248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.939027][T17248] R13: 0000000000000000 R14: 00007f21debb5fa0 R15: 00007ffd6a93a598 [ 1164.939056][T17248] [ 1165.855637][ T5906] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 6 proto 1 vid 0x0525 pid 0xA4A8 [ 1165.870686][ T5906] usb 1-1: USB disconnect, device number 87 [ 1165.905978][ T5906] usblp0: removed [ 1167.946061][T17286] FAULT_INJECTION: forcing a failure. [ 1167.946061][T17286] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.997597][T17286] CPU: 0 UID: 0 PID: 17286 Comm: syz.9.2669 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1167.997625][T17286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1167.997639][T17286] Call Trace: [ 1167.997647][T17286] [ 1167.997656][T17286] dump_stack_lvl+0x189/0x250 [ 1167.997683][T17286] ? __pfx____ratelimit+0x10/0x10 [ 1167.997705][T17286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1167.997728][T17286] ? __pfx__printk+0x10/0x10 [ 1167.997757][T17286] ? __pfx___might_resched+0x10/0x10 [ 1167.997784][T17286] should_fail_ex+0x414/0x560 [ 1167.997828][T17286] should_failslab+0xa8/0x100 [ 1167.997854][T17286] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1167.997877][T17286] ? __alloc_skb+0x112/0x2d0 [ 1167.997910][T17286] __alloc_skb+0x112/0x2d0 [ 1167.997944][T17286] netlink_sendmsg+0x5c6/0xb30 [ 1167.997990][T17286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1167.998030][T17286] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1167.998051][T17286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1167.998082][T17286] __sock_sendmsg+0x21c/0x270 [ 1167.998110][T17286] ____sys_sendmsg+0x505/0x830 [ 1167.998148][T17286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1167.998191][T17286] ? import_iovec+0x74/0xa0 [ 1167.998225][T17286] ___sys_sendmsg+0x21f/0x2a0 [ 1167.998260][T17286] ? __pfx____sys_sendmsg+0x10/0x10 [ 1167.998331][T17286] ? __fget_files+0x2a/0x420 [ 1167.998353][T17286] ? __fget_files+0x3a0/0x420 [ 1167.998389][T17286] __x64_sys_sendmsg+0x19b/0x260 [ 1167.998425][T17286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1167.998468][T17286] ? __pfx_ksys_write+0x10/0x10 [ 1167.998485][T17286] ? rcu_is_watching+0x15/0xb0 [ 1167.998513][T17286] ? do_syscall_64+0xbe/0x3b0 [ 1167.998542][T17286] do_syscall_64+0xfa/0x3b0 [ 1167.998564][T17286] ? lockdep_hardirqs_on+0x9c/0x150 [ 1167.998586][T17286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.998607][T17286] ? clear_bhb_loop+0x60/0xb0 [ 1167.998632][T17286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.998653][T17286] RIP: 0033:0x7fe98478e9a9 [ 1167.998672][T17286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1167.998690][T17286] RSP: 002b:00007fe9855c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1167.998713][T17286] RAX: ffffffffffffffda RBX: 00007fe9849b5fa0 RCX: 00007fe98478e9a9 [ 1167.998728][T17286] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1167.998743][T17286] RBP: 00007fe9855c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.998756][T17286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.998780][T17286] R13: 0000000000000000 R14: 00007fe9849b5fa0 R15: 00007ffebddeb188 [ 1167.998809][T17286] [ 1168.010336][T17290] FAULT_INJECTION: forcing a failure. [ 1168.010336][T17290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1168.072031][T17292] /dev/nullb0: Can't open blockdev [ 1168.151111][T17290] CPU: 1 UID: 0 PID: 17290 Comm: syz.5.2670 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1168.151139][T17290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1168.151153][T17290] Call Trace: [ 1168.151162][T17290] [ 1168.151173][T17290] dump_stack_lvl+0x189/0x250 [ 1168.151203][T17290] ? __pfx____ratelimit+0x10/0x10 [ 1168.151226][T17290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1168.151250][T17290] ? __pfx__printk+0x10/0x10 [ 1168.151309][T17290] should_fail_ex+0x414/0x560 [ 1168.151340][T17290] _copy_to_user+0x31/0xb0 [ 1168.151374][T17290] simple_read_from_buffer+0xe1/0x170 [ 1168.151404][T17290] proc_fail_nth_read+0x1df/0x250 [ 1168.151434][T17290] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1168.151466][T17290] ? rw_verify_area+0x258/0x650 [ 1168.151503][T17290] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1168.151533][T17290] vfs_read+0x200/0x980 [ 1168.151574][T17290] ? __pfx___mutex_lock+0x10/0x10 [ 1168.151599][T17290] ? __pfx_vfs_read+0x10/0x10 [ 1168.151636][T17290] ? __fget_files+0x2a/0x420 [ 1168.151667][T17290] ? __fget_files+0x3a0/0x420 [ 1168.151690][T17290] ? __fget_files+0x2a/0x420 [ 1168.151734][T17290] ksys_read+0x145/0x250 [ 1168.151758][T17290] ? __pfx_ksys_read+0x10/0x10 [ 1168.151776][T17290] ? rcu_is_watching+0x15/0xb0 [ 1168.151807][T17290] ? do_syscall_64+0xbe/0x3b0 [ 1168.151836][T17290] do_syscall_64+0xfa/0x3b0 [ 1168.151859][T17290] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.151882][T17290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.151905][T17290] ? clear_bhb_loop+0x60/0xb0 [ 1168.151933][T17290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.151953][T17290] RIP: 0033:0x7fe86198d3bc [ 1168.151973][T17290] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1168.151992][T17290] RSP: 002b:00007fe86286e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1168.152017][T17290] RAX: ffffffffffffffda RBX: 00007fe861bb5fa0 RCX: 00007fe86198d3bc [ 1168.152034][T17290] RDX: 000000000000000f RSI: 00007fe86286e0a0 RDI: 0000000000000003 [ 1168.152049][T17290] RBP: 00007fe86286e090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.152064][T17290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.152079][T17290] R13: 0000000000000000 R14: 00007fe861bb5fa0 R15: 00007fffc39013d8 [ 1168.152113][T17290] [ 1168.569140][T17302] /dev/nullb0: Can't open blockdev [ 1168.724733][T17306] /dev/nullb0: Can't open blockdev [ 1169.191217][ T5906] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1169.238770][T17313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2671'. [ 1169.339559][T17317] FAULT_INJECTION: forcing a failure. [ 1169.339559][T17317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.394481][T17317] CPU: 0 UID: 0 PID: 17317 Comm: syz.0.2680 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1169.394508][T17317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1169.394523][T17317] Call Trace: [ 1169.394531][T17317] [ 1169.394540][T17317] dump_stack_lvl+0x189/0x250 [ 1169.394566][T17317] ? __pfx____ratelimit+0x10/0x10 [ 1169.394585][T17317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1169.394608][T17317] ? __pfx__printk+0x10/0x10 [ 1169.394641][T17317] should_fail_ex+0x414/0x560 [ 1169.394663][T17317] _copy_to_user+0x31/0xb0 [ 1169.394692][T17317] simple_read_from_buffer+0xe1/0x170 [ 1169.394715][T17317] proc_fail_nth_read+0x1df/0x250 [ 1169.394738][T17317] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1169.394762][T17317] ? rw_verify_area+0x258/0x650 [ 1169.394789][T17317] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1169.394811][T17317] vfs_read+0x200/0x980 [ 1169.394844][T17317] ? __pfx___mutex_lock+0x10/0x10 [ 1169.394869][T17317] ? __pfx_vfs_read+0x10/0x10 [ 1169.394896][T17317] ? __fget_files+0x2a/0x420 [ 1169.394922][T17317] ? __fget_files+0x3a0/0x420 [ 1169.394939][T17317] ? __fget_files+0x2a/0x420 [ 1169.394965][T17317] ksys_read+0x145/0x250 [ 1169.394983][T17317] ? __pfx_ksys_read+0x10/0x10 [ 1169.394996][T17317] ? fput+0xa0/0xd0 [ 1169.395023][T17317] ? do_syscall_64+0xbe/0x3b0 [ 1169.395045][T17317] do_syscall_64+0xfa/0x3b0 [ 1169.395062][T17317] ? lockdep_hardirqs_on+0x9c/0x150 [ 1169.395079][T17317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.395099][T17317] ? clear_bhb_loop+0x60/0xb0 [ 1169.395119][T17317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.395135][T17317] RIP: 0033:0x7ff898b8d3bc [ 1169.395151][T17317] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1169.395167][T17317] RSP: 002b:00007ff899ad7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1169.395188][T17317] RAX: ffffffffffffffda RBX: 00007ff898db5fa0 RCX: 00007ff898b8d3bc [ 1169.395201][T17317] RDX: 000000000000000f RSI: 00007ff899ad70a0 RDI: 0000000000000005 [ 1169.395212][T17317] RBP: 00007ff899ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.395223][T17317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.395233][T17317] R13: 0000000000000000 R14: 00007ff898db5fa0 R15: 00007ffee5f85288 [ 1169.395260][T17317] [ 1169.472226][ T5906] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1169.775069][ T5906] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1169.786809][ T5906] usb 10-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 1169.788149][ T9647] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1169.800252][ T5906] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.851755][ T5906] usb 10-1: config 0 descriptor?? [ 1169.885956][T17311] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1170.008434][ T9647] usb 6-1: device descriptor read/64, error -71 [ 1170.128010][T17330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2685'. [ 1170.171592][T17330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2685'. [ 1170.279989][ T9647] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1170.336315][ T5906] glorious 0003:22D4:1503.0025: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.9-1/input0 [ 1170.381350][T17331] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 1170.423828][ T9647] usb 6-1: device descriptor read/64, error -71 [ 1170.861012][ T9647] usb usb6-port1: attempt power cycle [ 1170.867572][ T978] usb 10-1: USB disconnect, device number 8 [ 1171.231529][ T9647] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1171.371244][ T9647] usb 6-1: device descriptor read/8, error -71 [ 1171.842472][ T9647] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1171.906599][ T9647] usb 6-1: device descriptor read/8, error -71 [ 1172.056443][ T9647] usb usb6-port1: unable to enumerate USB device [ 1172.310678][T17354] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2691'. [ 1172.324891][T17354] tipc: Started in network mode [ 1172.329783][T17354] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 1172.338841][T17354] tipc: Enabling of bearer rejected, failed to enable media [ 1172.589442][T16921] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1172.995318][T16921] usb 1-1: Using ep0 maxpacket: 8 [ 1173.187970][T16921] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1173.212537][T16921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.242179][T16921] usb 1-1: Product: syz [ 1173.246925][T16921] usb 1-1: Manufacturer: syz [ 1173.253281][T16921] usb 1-1: SerialNumber: syz [ 1173.269018][T16921] usb 1-1: config 0 descriptor?? [ 1173.954169][T16921] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1174.678652][T17371] netlink: 'syz.5.2697': attribute type 1 has an invalid length. [ 1174.686762][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2697'. [ 1174.904685][T17375] vlan3: entered promiscuous mode [ 1174.910076][T17375] vlan3: entered allmulticast mode [ 1174.924991][T17375] hsr_slave_1: entered allmulticast mode [ 1175.014994][T17376] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2698'. [ 1175.024096][T17376] netlink: 8980 bytes leftover after parsing attributes in process `syz.4.2698'. [ 1175.149425][T17375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2699'. [ 1176.474382][T17387] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1176.824826][T16921] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1177.011880][T16921] usb 1-1: USB disconnect, device number 88 [ 1177.090236][ T5906] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1177.493856][ T5906] usb 6-1: config 0 has an invalid interface number: 216 but max is 0 [ 1177.513468][ T5906] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.535250][ T5906] usb 6-1: config 0 has no interface number 0 [ 1177.768331][T17406] /dev/nullb0: Can't open blockdev [ 1178.558994][ T5906] usb 6-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 1178.598543][T16921] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1178.789858][T17411] /dev/nullb0: Can't open blockdev [ 1178.958251][ T5906] usb 6-1: config 0 interface 216 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1178.973903][ T5906] usb 6-1: config 0 interface 216 has no altsetting 0 [ 1178.980780][ T5906] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 1179.006188][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.017567][ T5906] usb 6-1: config 0 descriptor?? [ 1179.025065][T17390] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1179.043175][ T5906] usb 6-1: NFC: intf ffff8880327f0000 id ffffffff8eb3fb20 [ 1179.111017][T16921] usb 1-1: device descriptor read/64, error -71 [ 1180.030615][T17417] netlink: 'syz.3.2711': attribute type 1 has an invalid length. [ 1180.038554][T17417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2711'. [ 1180.263624][ T5971] usb 6-1: USB disconnect, device number 39 [ 1180.382614][T16921] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1180.532222][T16921] usb 1-1: device descriptor read/64, error -71 [ 1180.652659][T16921] usb usb1-port1: attempt power cycle [ 1180.668844][T17422] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2713'. [ 1180.678192][T17422] netlink: 8980 bytes leftover after parsing attributes in process `syz.5.2713'. [ 1180.861377][T17426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1180.871795][T17426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.461656][T17423] FAULT_INJECTION: forcing a failure. [ 1181.461656][T17423] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1181.480847][T17423] CPU: 0 UID: 0 PID: 17423 Comm: syz.9.2712 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1181.480869][T17423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1181.480877][T17423] Call Trace: [ 1181.480883][T17423] [ 1181.480889][T17423] dump_stack_lvl+0x189/0x250 [ 1181.480909][T17423] ? __pfx____ratelimit+0x10/0x10 [ 1181.480923][T17423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1181.480939][T17423] ? __pfx__printk+0x10/0x10 [ 1181.480957][T17423] ? fs_reclaim_acquire+0x7d/0x100 [ 1181.480979][T17423] should_fail_ex+0x414/0x560 [ 1181.480996][T17423] prepare_alloc_pages+0x213/0x610 [ 1181.481017][T17423] __alloc_frozen_pages_noprof+0x123/0x370 [ 1181.481037][T17423] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1181.481057][T17423] ? cpuacct_charge+0x117/0x320 [ 1181.481074][T17423] ? policy_nodemask+0x27c/0x720 [ 1181.481091][T17423] alloc_pages_mpol+0x232/0x4a0 [ 1181.481108][T17423] alloc_pages_noprof+0xa9/0x190 [ 1181.481124][T17423] pte_alloc_one+0x21/0x170 [ 1181.481139][T17423] __do_fault+0xd1/0x390 [ 1181.481156][T17423] __handle_mm_fault+0x198b/0x5620 [ 1181.481189][T17423] ? __pfx___handle_mm_fault+0x10/0x10 [ 1181.481223][T17423] ? find_vma+0xe7/0x160 [ 1181.481236][T17423] ? __pfx_find_vma+0x10/0x10 [ 1181.481250][T17423] handle_mm_fault+0x2d5/0x7f0 [ 1181.481277][T17423] do_user_addr_fault+0x764/0x1390 [ 1181.481318][T17423] exc_page_fault+0x76/0xf0 [ 1181.481333][T17423] asm_exc_page_fault+0x26/0x30 [ 1181.481345][T17423] RIP: 0010:__put_user_4+0xd/0x20 [ 1181.481359][T17423] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1181.481371][T17423] RSP: 0018:ffffc90004ee7c98 EFLAGS: 00050202 [ 1181.481383][T17423] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000040 [ 1181.481392][T17423] RDX: 0000000000000001 RSI: ffffffff8db6f792 RDI: ffffffff8be1b9c0 [ 1181.481401][T17423] RBP: ffffc90004ee7d50 R08: 0000000000000000 R09: ffffffff8208a550 [ 1181.481410][T17423] R10: 0000000000000085 R11: 0000000000000000 R12: 0000000000000004 [ 1181.481418][T17423] R13: dffffc0000000000 R14: 1ffff920009dcf98 R15: ffff888056c66410 [ 1181.481449][T17423] ? __might_fault+0xb0/0x130 [ 1181.481468][T17423] sctp_getsockopt_nodelay+0xde/0x1a0 [ 1181.481489][T17423] ? __pfx_sctp_getsockopt_nodelay+0x10/0x10 [ 1181.481518][T17423] sctp_getsockopt+0x8dc/0xb60 [ 1181.481537][T17423] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1181.481557][T17423] do_sock_getsockopt+0x36f/0x450 [ 1181.481591][T17423] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1181.481609][T17423] ? do_syscall_64+0x20/0x3b0 [ 1181.481623][T17423] ? __fget_files+0x3a0/0x420 [ 1181.481637][T17423] ? __fget_files+0x2a/0x420 [ 1181.481656][T17423] __x64_sys_getsockopt+0x1a5/0x250 [ 1181.481674][T17423] ? do_syscall_64+0x20/0x3b0 [ 1181.481689][T17423] ? do_syscall_64+0x20/0x3b0 [ 1181.481705][T17423] do_syscall_64+0xfa/0x3b0 [ 1181.481720][T17423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.481732][T17423] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1181.481744][T17423] ? clear_bhb_loop+0x60/0xb0 [ 1181.481762][T17423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.481775][T17423] RIP: 0033:0x7fe98478e9a9 [ 1181.481786][T17423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1181.481797][T17423] RSP: 002b:00007fe9855a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1181.481810][T17423] RAX: ffffffffffffffda RBX: 00007fe9849b6080 RCX: 00007fe98478e9a9 [ 1181.481820][T17423] RDX: 0000000000000003 RSI: 0000000000000084 RDI: 0000000000000003 [ 1181.481827][T17423] RBP: 00007fe9855a0090 R08: 0000200000000040 R09: 0000000000000000 [ 1181.481836][T17423] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1181.481844][T17423] R13: 0000000000000001 R14: 00007fe9849b6080 R15: 00007ffebddeb188 [ 1181.481864][T17423] [ 1182.343464][T17435] Set syz1 is full, maxelem 1038 reached [ 1182.505406][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2719'. [ 1182.606929][T17447] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2720'. [ 1183.224739][T17434] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1183.879563][ T5971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1183.901727][ T5971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1183.927593][ T5971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1184.050522][ T5971] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1184.057854][ T5971] rtc rtc0: __rtc_set_alarm: err=-22 [ 1185.016286][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1185.878585][T17478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.918394][T17478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.134729][ T5913] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1186.264772][T17485] /dev/nullb0: Can't open blockdev [ 1186.294423][ T5913] usb 6-1: device descriptor read/64, error -71 [ 1186.551410][ T5913] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1186.765091][ T5913] usb 6-1: device descriptor read/64, error -71 [ 1186.884761][ T5913] usb usb6-port1: attempt power cycle [ 1187.170676][T17492] /dev/nullb0: Can't open blockdev [ 1187.791258][ T5913] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1187.827506][ T5913] usb 6-1: device descriptor read/8, error -71 [ 1188.217381][ T5913] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1188.338107][ T5913] usb 6-1: device descriptor read/8, error -71 [ 1188.598678][ T5913] usb usb6-port1: unable to enumerate USB device [ 1190.329519][T17517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.343222][T17517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.616217][T17523] veth0_to_team: entered promiscuous mode [ 1190.622037][T17523] veth0_to_team: entered allmulticast mode [ 1190.646125][ T978] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1190.857095][ T978] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 1190.980004][ T978] usb 10-1: config 0 has no interface number 0 [ 1191.081050][ T978] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1191.198062][ T978] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1191.243121][ T978] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.261225][ T978] usb 10-1: Product: syz [ 1191.267593][ T978] usb 10-1: Manufacturer: syz [ 1191.272419][ T978] usb 10-1: SerialNumber: syz [ 1191.282302][ T978] usb 10-1: config 0 descriptor?? [ 1191.307405][ T978] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 1192.508031][ T9647] usb 10-1: USB disconnect, device number 9 [ 1192.515952][ T9647] yurex 10-1:0.50: USB YUREX #0 now disconnected [ 1193.135815][T17548] /dev/nullb0: Can't open blockdev [ 1194.551515][T17567] /dev/nullb0: Can't open blockdev [ 1195.664552][ T5913] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1195.937872][ T5913] usb 6-1: Using ep0 maxpacket: 8 [ 1195.947129][ T5913] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1195.972732][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.984068][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.994002][ T5913] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1196.008642][ T5913] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1196.017898][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.029608][ T5913] usb 6-1: config 0 descriptor?? [ 1196.613285][ T5913] hid (null): report_id 0 is invalid [ 1196.926785][T17601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1196.938837][ T5913] redragon 0003:0C45:760B.0026: report_id 0 is invalid [ 1196.988567][ T5913] redragon 0003:0C45:760B.0026: item 0 1 1 8 parsing failed [ 1197.002499][T17601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.022382][ T5913] redragon 0003:0C45:760B.0026: probe with driver redragon failed with error -22 [ 1197.274006][T17605] binder: 17603:17605 ioctl ae60 0 returned -22 [ 1197.553851][T17611] FAULT_INJECTION: forcing a failure. [ 1197.553851][T17611] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.569149][T17611] CPU: 0 UID: 0 PID: 17611 Comm: syz.3.2767 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1197.569172][T17611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1197.569185][T17611] Call Trace: [ 1197.569194][T17611] [ 1197.569203][T17611] dump_stack_lvl+0x189/0x250 [ 1197.569228][T17611] ? __pfx____ratelimit+0x10/0x10 [ 1197.569249][T17611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1197.569270][T17611] ? __pfx__printk+0x10/0x10 [ 1197.569299][T17611] ? __pfx___might_resched+0x10/0x10 [ 1197.569324][T17611] should_fail_ex+0x414/0x560 [ 1197.569348][T17611] should_failslab+0xa8/0x100 [ 1197.569370][T17611] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1197.569390][T17611] ? __alloc_skb+0x112/0x2d0 [ 1197.569419][T17611] __alloc_skb+0x112/0x2d0 [ 1197.569448][T17611] netlink_sendmsg+0x5c6/0xb30 [ 1197.569483][T17611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1197.569517][T17611] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1197.569536][T17611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1197.569563][T17611] __sock_sendmsg+0x21c/0x270 [ 1197.569588][T17611] ____sys_sendmsg+0x505/0x830 [ 1197.569620][T17611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1197.569657][T17611] ? import_iovec+0x74/0xa0 [ 1197.569687][T17611] ___sys_sendmsg+0x21f/0x2a0 [ 1197.569717][T17611] ? __pfx____sys_sendmsg+0x10/0x10 [ 1197.569779][T17611] ? __fget_files+0x2a/0x420 [ 1197.569802][T17611] ? __fget_files+0x3a0/0x420 [ 1197.569833][T17611] __x64_sys_sendmsg+0x19b/0x260 [ 1197.569863][T17611] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1197.569906][T17611] ? __pfx_ksys_write+0x10/0x10 [ 1197.569929][T17611] ? do_syscall_64+0xbe/0x3b0 [ 1197.569953][T17611] do_syscall_64+0xfa/0x3b0 [ 1197.569975][T17611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.569993][T17611] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1197.570012][T17611] ? clear_bhb_loop+0x60/0xb0 [ 1197.570034][T17611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.570053][T17611] RIP: 0033:0x7f62a998e9a9 [ 1197.570069][T17611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1197.570086][T17611] RSP: 002b:00007f62aa7a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1197.570107][T17611] RAX: ffffffffffffffda RBX: 00007f62a9bb5fa0 RCX: 00007f62a998e9a9 [ 1197.570120][T17611] RDX: 0000000004040004 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1197.570133][T17611] RBP: 00007f62aa7a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1197.570145][T17611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.570156][T17611] R13: 0000000000000000 R14: 00007f62a9bb5fa0 R15: 00007ffdde196a48 [ 1197.570184][T17611] [ 1199.287657][ T9646] usb 6-1: USB disconnect, device number 44 [ 1200.169402][T17645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1200.181941][T17645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.054404][T17656] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1202.556303][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2782'. [ 1203.313657][T17674] vlan0: entered promiscuous mode [ 1203.350456][T17677] FAULT_INJECTION: forcing a failure. [ 1203.350456][T17677] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.365702][T17677] CPU: 0 UID: 0 PID: 17677 Comm: syz.0.2784 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1203.365726][T17677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1203.365739][T17677] Call Trace: [ 1203.365746][T17677] [ 1203.365755][T17677] dump_stack_lvl+0x189/0x250 [ 1203.365780][T17677] ? __pfx____ratelimit+0x10/0x10 [ 1203.365800][T17677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1203.365821][T17677] ? __pfx__printk+0x10/0x10 [ 1203.365850][T17677] ? __pfx___might_resched+0x10/0x10 [ 1203.365876][T17677] should_fail_ex+0x414/0x560 [ 1203.365901][T17677] should_failslab+0xa8/0x100 [ 1203.365924][T17677] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1203.365944][T17677] ? __alloc_skb+0x112/0x2d0 [ 1203.365973][T17677] __alloc_skb+0x112/0x2d0 [ 1203.366003][T17677] netlink_sendmsg+0x5c6/0xb30 [ 1203.366038][T17677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1203.366072][T17677] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1203.366091][T17677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1203.366118][T17677] __sock_sendmsg+0x21c/0x270 [ 1203.366143][T17677] ____sys_sendmsg+0x505/0x830 [ 1203.366176][T17677] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1203.366213][T17677] ? import_iovec+0x74/0xa0 [ 1203.366243][T17677] ___sys_sendmsg+0x21f/0x2a0 [ 1203.366273][T17677] ? __pfx____sys_sendmsg+0x10/0x10 [ 1203.366335][T17677] ? __fget_files+0x2a/0x420 [ 1203.366355][T17677] ? __fget_files+0x3a0/0x420 [ 1203.366387][T17677] __x64_sys_sendmsg+0x19b/0x260 [ 1203.366417][T17677] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1203.366455][T17677] ? __pfx_ksys_write+0x10/0x10 [ 1203.366471][T17677] ? rcu_is_watching+0x15/0xb0 [ 1203.366496][T17677] ? do_syscall_64+0xbe/0x3b0 [ 1203.366520][T17677] do_syscall_64+0xfa/0x3b0 [ 1203.366540][T17677] ? lockdep_hardirqs_on+0x9c/0x150 [ 1203.366566][T17677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.366586][T17677] ? clear_bhb_loop+0x60/0xb0 [ 1203.366608][T17677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.366627][T17677] RIP: 0033:0x7ff898b8e9a9 [ 1203.366644][T17677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1203.366664][T17677] RSP: 002b:00007ff899ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1203.366685][T17677] RAX: ffffffffffffffda RBX: 00007ff898db5fa0 RCX: 00007ff898b8e9a9 [ 1203.366699][T17677] RDX: 0000000000008800 RSI: 0000200000000280 RDI: 0000000000000003 [ 1203.366713][T17677] RBP: 00007ff899ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.366725][T17677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.366736][T17677] R13: 0000000000000000 R14: 00007ff898db5fa0 R15: 00007ffee5f85288 [ 1203.366765][T17677] [ 1203.470514][T17674] vlan0: entered allmulticast mode [ 1203.585070][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2783'. [ 1203.683803][T17674] hsr_slave_1: entered allmulticast mode [ 1206.500092][T16756] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1206.720055][T16756] usb 4-1: Using ep0 maxpacket: 16 [ 1206.779848][T16756] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1206.793575][T16756] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1206.802188][T16756] usb 4-1: Product: syz [ 1206.821967][T16756] usb 4-1: Manufacturer: syz [ 1206.861704][T16756] usb 4-1: SerialNumber: syz [ 1207.033491][T16756] usb 4-1: config 0 descriptor?? [ 1207.624782][T17727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2798'. [ 1207.665386][T17721] vlan2: entered promiscuous mode [ 1207.846810][T17721] vlan2: entered allmulticast mode [ 1208.130599][T17721] hsr_slave_1: entered allmulticast mode [ 1208.258240][T17733] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2799'. [ 1209.311303][ T9646] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1210.070687][T17749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.081353][T17749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.112024][ T9647] usb 4-1: USB disconnect, device number 66 [ 1210.243396][ T9646] usb 10-1: config 0 has an invalid interface number: 216 but max is 0 [ 1210.305568][ T9646] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.330978][T17752] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1210.892102][ T9646] usb 10-1: config 0 has no interface number 0 [ 1210.899112][ T9646] usb 10-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 1210.909277][ T9646] usb 10-1: config 0 interface 216 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1210.922373][ T9646] usb 10-1: config 0 interface 216 has no altsetting 0 [ 1210.980869][ T9646] usb 10-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 1211.519258][ T9646] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.563889][ T9646] usb 10-1: config 0 descriptor?? [ 1211.564096][T17761] FAULT_INJECTION: forcing a failure. [ 1211.564096][T17761] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.570740][T17744] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1211.601577][ T9646] usb 10-1: NFC: intf ffff888021fdf000 id ffffffff8eb3fb20 [ 1211.623249][T17761] CPU: 1 UID: 0 PID: 17761 Comm: syz.5.2808 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1211.623275][T17761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1211.623288][T17761] Call Trace: [ 1211.623298][T17761] [ 1211.623307][T17761] dump_stack_lvl+0x189/0x250 [ 1211.623335][T17761] ? __pfx____ratelimit+0x10/0x10 [ 1211.623358][T17761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1211.623382][T17761] ? __pfx__printk+0x10/0x10 [ 1211.623413][T17761] ? __pfx___might_resched+0x10/0x10 [ 1211.623441][T17761] should_fail_ex+0x414/0x560 [ 1211.623468][T17761] should_failslab+0xa8/0x100 [ 1211.623493][T17761] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1211.623515][T17761] ? __alloc_skb+0x112/0x2d0 [ 1211.623549][T17761] __alloc_skb+0x112/0x2d0 [ 1211.623583][T17761] netlink_sendmsg+0x5c6/0xb30 [ 1211.623626][T17761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1211.623663][T17761] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1211.623682][T17761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1211.623711][T17761] __sock_sendmsg+0x21c/0x270 [ 1211.623738][T17761] ____sys_sendmsg+0x505/0x830 [ 1211.623780][T17761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1211.623819][T17761] ? import_iovec+0x74/0xa0 [ 1211.623852][T17761] ___sys_sendmsg+0x21f/0x2a0 [ 1211.623884][T17761] ? __pfx____sys_sendmsg+0x10/0x10 [ 1211.623950][T17761] ? __fget_files+0x2a/0x420 [ 1211.623970][T17761] ? __fget_files+0x3a0/0x420 [ 1211.624002][T17761] __x64_sys_sendmsg+0x19b/0x260 [ 1211.624035][T17761] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1211.624075][T17761] ? __pfx_ksys_write+0x10/0x10 [ 1211.624091][T17761] ? rcu_is_watching+0x15/0xb0 [ 1211.624116][T17761] ? do_syscall_64+0xbe/0x3b0 [ 1211.624142][T17761] do_syscall_64+0xfa/0x3b0 [ 1211.624162][T17761] ? lockdep_hardirqs_on+0x9c/0x150 [ 1211.624182][T17761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.624201][T17761] ? clear_bhb_loop+0x60/0xb0 [ 1211.624235][T17761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.624251][T17761] RIP: 0033:0x7fe86198e9a9 [ 1211.624266][T17761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1211.624281][T17761] RSP: 002b:00007fe86286e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1211.624305][T17761] RAX: ffffffffffffffda RBX: 00007fe861bb5fa0 RCX: 00007fe86198e9a9 [ 1211.624317][T17761] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1211.624328][T17761] RBP: 00007fe86286e090 R08: 0000000000000000 R09: 0000000000000000 [ 1211.624338][T17761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1211.624348][T17761] R13: 0000000000000000 R14: 00007fe861bb5fa0 R15: 00007fffc39013d8 [ 1211.624373][T17761] [ 1213.922206][ T9646] usb 10-1: USB disconnect, device number 10 [ 1214.977743][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 1215.019458][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 1215.361808][T17780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.391706][T17780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.400998][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 1215.415426][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 1215.725793][ T5971] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1215.984102][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 1216.018435][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 1216.737464][T17768] ceph: No mds server is up or the cluster is laggy [ 1217.622102][T17802] /dev/nullb0: Can't open blockdev [ 1218.796977][T17813] netlink: 277 bytes leftover after parsing attributes in process `syz.9.2821'. [ 1218.890940][T17817] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2821'. [ 1219.231544][T17824] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2825'. [ 1219.995166][T17838] FAULT_INJECTION: forcing a failure. [ 1219.995166][T17838] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.038512][T17838] CPU: 1 UID: 0 PID: 17838 Comm: syz.5.2830 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1220.038538][T17838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1220.038550][T17838] Call Trace: [ 1220.038558][T17838] [ 1220.038566][T17838] dump_stack_lvl+0x189/0x250 [ 1220.038593][T17838] ? __pfx____ratelimit+0x10/0x10 [ 1220.038614][T17838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1220.038635][T17838] ? __pfx__printk+0x10/0x10 [ 1220.038665][T17838] ? __pfx___might_resched+0x10/0x10 [ 1220.038689][T17838] should_fail_ex+0x414/0x560 [ 1220.038714][T17838] should_failslab+0xa8/0x100 [ 1220.038736][T17838] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1220.038756][T17838] ? __alloc_skb+0x112/0x2d0 [ 1220.038785][T17838] __alloc_skb+0x112/0x2d0 [ 1220.038814][T17838] netlink_sendmsg+0x5c6/0xb30 [ 1220.038850][T17838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1220.038891][T17838] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1220.038910][T17838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1220.038946][T17838] __sock_sendmsg+0x21c/0x270 [ 1220.038968][T17838] ____sys_sendmsg+0x505/0x830 [ 1220.038999][T17838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1220.039032][T17838] ? import_iovec+0x74/0xa0 [ 1220.039062][T17838] ___sys_sendmsg+0x21f/0x2a0 [ 1220.039092][T17838] ? __pfx____sys_sendmsg+0x10/0x10 [ 1220.039154][T17838] ? __fget_files+0x2a/0x420 [ 1220.039175][T17838] ? __fget_files+0x3a0/0x420 [ 1220.039204][T17838] __x64_sys_sendmsg+0x19b/0x260 [ 1220.039236][T17838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1220.039273][T17838] ? __pfx_ksys_write+0x10/0x10 [ 1220.039288][T17838] ? rcu_is_watching+0x15/0xb0 [ 1220.039314][T17838] ? do_syscall_64+0xbe/0x3b0 [ 1220.039338][T17838] do_syscall_64+0xfa/0x3b0 [ 1220.039357][T17838] ? lockdep_hardirqs_on+0x9c/0x150 [ 1220.039376][T17838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.039393][T17838] ? clear_bhb_loop+0x60/0xb0 [ 1220.039417][T17838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.039434][T17838] RIP: 0033:0x7fe86198e9a9 [ 1220.039452][T17838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1220.039470][T17838] RSP: 002b:00007fe86286e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1220.039490][T17838] RAX: ffffffffffffffda RBX: 00007fe861bb5fa0 RCX: 00007fe86198e9a9 [ 1220.039504][T17838] RDX: 0000000004040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1220.039517][T17838] RBP: 00007fe86286e090 R08: 0000000000000000 R09: 0000000000000000 [ 1220.039529][T17838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1220.039541][T17838] R13: 0000000000000000 R14: 00007fe861bb5fa0 R15: 00007fffc39013d8 [ 1220.039569][T17838] [ 1220.380842][T17844] /dev/nullb0: Can't open blockdev [ 1220.430464][T17845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.489805][T17845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.632151][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 1222.772756][T17870] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2839'. [ 1223.217354][ T5971] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1223.409038][ T5971] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1223.454206][ T5971] usb 4-1: config 0 has no interface number 0 [ 1224.413280][ T5971] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1224.470159][ T5971] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1224.510317][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.590751][ T5971] usb 4-1: Product: syz [ 1224.596215][T17890] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2843'. [ 1224.608833][ T5971] usb 4-1: Manufacturer: syz [ 1224.619298][ T5971] usb 4-1: SerialNumber: syz [ 1224.674965][ T5971] usb 4-1: config 0 descriptor?? [ 1224.720780][ T5971] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 1224.790152][T17894] /dev/nullb0: Can't open blockdev [ 1226.307595][ T9646] usb 4-1: USB disconnect, device number 67 [ 1226.334112][ T9646] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 1227.004432][T16756] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 1227.944283][T16756] usb 10-1: config 0 has an invalid interface number: 30 but max is 0 [ 1227.954435][T16756] usb 10-1: config 0 has no interface number 0 [ 1227.961046][T16756] usb 10-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 1227.975532][T16756] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.052726][T16756] usb 10-1: config 0 descriptor?? [ 1228.068191][T16756] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 1228.094981][T16756] usb 10-1: setting power ON [ 1228.102334][T16756] dvb-usb: bulk message failed: -22 (2/0) [ 1228.501539][T16756] dvb-usb: bulk message failed: -22 (1/0) [ 1228.711003][T16756] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1228.797338][T16756] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 1228.836057][T16756] dvb_usb_cxusb 10-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 1230.579468][ T5971] usb 10-1: USB disconnect, device number 11 [ 1230.700243][T17950] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2858'. [ 1230.757644][T17950] netlink: 8980 bytes leftover after parsing attributes in process `syz.5.2858'. [ 1232.976085][T17972] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2866'. [ 1232.978187][T17973] FAULT_INJECTION: forcing a failure. [ 1232.978187][T17973] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.985305][T17972] netlink: 8980 bytes leftover after parsing attributes in process `syz.0.2866'. [ 1233.009074][T17973] CPU: 0 UID: 0 PID: 17973 Comm: syz.4.2867 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1233.009099][T17973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1233.009111][T17973] Call Trace: [ 1233.009117][T17973] [ 1233.009123][T17973] dump_stack_lvl+0x189/0x250 [ 1233.009142][T17973] ? __pfx____ratelimit+0x10/0x10 [ 1233.009157][T17973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1233.009172][T17973] ? __pfx__printk+0x10/0x10 [ 1233.009193][T17973] ? __pfx___might_resched+0x10/0x10 [ 1233.009207][T17973] ? fs_reclaim_acquire+0x7d/0x100 [ 1233.009226][T17973] should_fail_ex+0x414/0x560 [ 1233.009243][T17973] should_failslab+0xa8/0x100 [ 1233.009258][T17973] __kmalloc_noprof+0xcb/0x4f0 [ 1233.009271][T17973] ? bpf_test_init+0xc2/0x170 [ 1233.009291][T17973] bpf_test_init+0xc2/0x170 [ 1233.009310][T17973] bpf_prog_test_run_skb+0x1e9/0x1560 [ 1233.009327][T17973] ? __fget_files+0x2a/0x420 [ 1233.009344][T17973] ? __fget_files+0x2a/0x420 [ 1233.009364][T17973] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1233.009382][T17973] bpf_prog_test_run+0x2c4/0x340 [ 1233.009405][T17973] __sys_bpf+0x4a4/0x860 [ 1233.009425][T17973] ? __pfx___sys_bpf+0x10/0x10 [ 1233.009453][T17973] ? ksys_write+0x22a/0x250 [ 1233.009476][T17973] ? __pfx_ksys_write+0x10/0x10 [ 1233.009487][T17973] ? rcu_is_watching+0x15/0xb0 [ 1233.009506][T17973] __x64_sys_bpf+0x7c/0x90 [ 1233.009524][T17973] do_syscall_64+0xfa/0x3b0 [ 1233.009540][T17973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.009552][T17973] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1233.009565][T17973] ? clear_bhb_loop+0x60/0xb0 [ 1233.009582][T17973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.009595][T17973] RIP: 0033:0x7f21de98e9a9 [ 1233.009607][T17973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1233.009619][T17973] RSP: 002b:00007f21df801038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1233.009633][T17973] RAX: ffffffffffffffda RBX: 00007f21debb5fa0 RCX: 00007f21de98e9a9 [ 1233.009643][T17973] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 1233.009651][T17973] RBP: 00007f21df801090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.009660][T17973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.009668][T17973] R13: 0000000000000000 R14: 00007f21debb5fa0 R15: 00007ffd6a93a598 [ 1233.009687][T17973] [ 1234.085826][T17989] pimreg: entered allmulticast mode [ 1234.230836][T17993] pimreg: left allmulticast mode [ 1234.378089][T17996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2872'. [ 1234.612373][T17998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2873'. [ 1234.671794][T18004] FAULT_INJECTION: forcing a failure. [ 1234.671794][T18004] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.723278][T18007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2874'. [ 1234.752539][T18004] CPU: 1 UID: 0 PID: 18004 Comm: syz.0.2873 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1234.752567][T18004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1234.752581][T18004] Call Trace: [ 1234.752591][T18004] [ 1234.752600][T18004] dump_stack_lvl+0x189/0x250 [ 1234.752630][T18004] ? __pfx____ratelimit+0x10/0x10 [ 1234.752653][T18004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1234.752677][T18004] ? __pfx__printk+0x10/0x10 [ 1234.752711][T18004] ? __pfx___might_resched+0x10/0x10 [ 1234.752740][T18004] should_fail_ex+0x414/0x560 [ 1234.752767][T18004] should_failslab+0xa8/0x100 [ 1234.752793][T18004] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1234.752815][T18004] ? __alloc_skb+0x112/0x2d0 [ 1234.752849][T18004] __alloc_skb+0x112/0x2d0 [ 1234.752883][T18004] netlink_sendmsg+0x5c6/0xb30 [ 1234.752923][T18004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1234.752968][T18004] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1234.752989][T18004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1234.753038][T18004] __sock_sendmsg+0x21c/0x270 [ 1234.753068][T18004] ____sys_sendmsg+0x505/0x830 [ 1234.753107][T18004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1234.753151][T18004] ? import_iovec+0x74/0xa0 [ 1234.753185][T18004] ___sys_sendmsg+0x21f/0x2a0 [ 1234.753221][T18004] ? __pfx____sys_sendmsg+0x10/0x10 [ 1234.753306][T18004] ? __fget_files+0x2a/0x420 [ 1234.753329][T18004] ? __fget_files+0x3a0/0x420 [ 1234.753366][T18004] __x64_sys_sendmsg+0x19b/0x260 [ 1234.753407][T18004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1234.753450][T18004] ? __pfx_ksys_write+0x10/0x10 [ 1234.753469][T18004] ? rcu_is_watching+0x15/0xb0 [ 1234.753499][T18004] ? do_syscall_64+0xbe/0x3b0 [ 1234.753529][T18004] do_syscall_64+0xfa/0x3b0 [ 1234.753551][T18004] ? lockdep_hardirqs_on+0x9c/0x150 [ 1234.753573][T18004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.753595][T18004] ? clear_bhb_loop+0x60/0xb0 [ 1234.753622][T18004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.753644][T18004] RIP: 0033:0x7ff898b8e9a9 [ 1234.753663][T18004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1234.753683][T18004] RSP: 002b:00007ff899ab6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1234.753706][T18004] RAX: ffffffffffffffda RBX: 00007ff898db6080 RCX: 00007ff898b8e9a9 [ 1234.753722][T18004] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1234.753736][T18004] RBP: 00007ff899ab6090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.753750][T18004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.753763][T18004] R13: 0000000000000000 R14: 00007ff898db6080 R15: 00007ffee5f85288 [ 1234.753796][T18004] [ 1236.192762][ T5913] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 1236.204067][ T5913] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1236.997640][T18019] netlink: 'syz.4.2878': attribute type 1 has an invalid length. [ 1237.006215][T18019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2878'. [ 1238.130786][T18020] fido_id[18020]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1238.252683][T18030] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2880'. [ 1238.732543][T18034] /dev/nullb0: Can't open blockdev [ 1238.927290][T18040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.936979][T18040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.949136][T18040] /dev/nullb0: Can't open blockdev [ 1239.028085][T18043] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1239.303557][T18047] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1241.768395][T18069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2892'. [ 1242.705093][T18069] hsr_slave_1 (unregistering): left promiscuous mode [ 1243.297520][ T5971] raw-gadget.0 gadget.4: failed to queue reset event [ 1243.383305][ T5971] raw-gadget.0 gadget.4: failed to queue resume event [ 1243.891482][ T5971] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1244.025302][T18085] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2897'. [ 1244.034387][T18085] netlink: 8980 bytes leftover after parsing attributes in process `syz.3.2897'. [ 1244.332044][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1244.352618][ T5971] raw-gadget.0 gadget.4: failed to queue reset event [ 1244.494070][ T5971] raw-gadget.0 gadget.4: failed to queue resume event [ 1244.525746][T18087] /dev/nullb0: Can't open blockdev [ 1244.579692][ T5971] usb 5-1: device descriptor read/64, error -32 [ 1244.715981][ T5971] raw-gadget.0 gadget.4: failed to queue suspend event [ 1244.745101][ T5971] raw-gadget.0 gadget.4: failed to queue reset event [ 1245.142706][ T5971] raw-gadget.0 gadget.4: failed to queue resume event [ 1246.129890][ T5971] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1246.138554][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1246.146809][ T5971] raw-gadget.0 gadget.4: failed to queue reset event [ 1246.253637][ T5971] raw-gadget.0 gadget.4: failed to queue resume event [ 1246.306395][T18106] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1246.332889][ T5971] usb 5-1: device descriptor read/64, error -32 [ 1246.536562][ T5971] raw-gadget.0 gadget.4: failed to queue suspend event [ 1246.558187][ T5971] usb usb5-port1: attempt power cycle [ 1246.878067][ T5971] raw-gadget.0 gadget.4: failed to queue disconnect event [ 1246.928243][ T5971] raw-gadget.0 gadget.4: failed to queue reset event [ 1247.074196][ T5971] raw-gadget.0 gadget.4: failed to queue resume event [ 1247.145789][ T5971] raw-gadget.0 gadget.4: failed to queue reset event [ 1247.183862][T18119] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2906'. [ 1247.189153][T18118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1247.668189][ T5971] raw-gadget.0 gadget.4: failed to queue resume event [ 1247.744280][ T5971] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1247.766984][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1247.775129][ T5971] usb 5-1: device descriptor read/8, error -32 [ 1247.893722][ T5971] raw-gadget.0 gadget.4: failed to queue suspend event [ 1247.908065][ T5971] raw-gadget.0 gadget.4: failed to queue reset event [ 1248.492653][ T5971] raw-gadget.0 gadget.4: failed to queue resume event [ 1248.543245][T18129] /dev/nullb0: Can't open blockdev [ 1248.577929][ T5971] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1248.610676][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1248.617905][ T5971] usb 5-1: device descriptor read/8, error -32 [ 1248.661706][T18133] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1248.738948][ T5971] raw-gadget.0 gadget.4: failed to queue suspend event [ 1248.748380][ T5971] usb usb5-port1: unable to enumerate USB device [ 1249.296482][T18139] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2914'. [ 1250.117362][T18142] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1250.666055][T18148] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2917'. [ 1250.695649][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1251.061178][T18150] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2915'. [ 1252.729025][T18166] tipc: Enabled bearer , priority 0 [ 1252.773587][T18166] syzkaller0: entered promiscuous mode [ 1252.950476][T18166] syzkaller0: entered allmulticast mode [ 1252.973747][T18176] FAULT_INJECTION: forcing a failure. [ 1252.973747][T18176] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.991056][T18176] CPU: 1 UID: 0 PID: 18176 Comm: syz.0.2925 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1252.991083][T18176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1252.991097][T18176] Call Trace: [ 1252.991105][T18176] [ 1252.991114][T18176] dump_stack_lvl+0x189/0x250 [ 1252.991142][T18176] ? __pfx____ratelimit+0x10/0x10 [ 1252.991164][T18176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1252.991187][T18176] ? __pfx__printk+0x10/0x10 [ 1252.991216][T18176] ? __pfx___might_resched+0x10/0x10 [ 1252.991238][T18176] ? fs_reclaim_acquire+0x7d/0x100 [ 1252.991267][T18176] should_fail_ex+0x414/0x560 [ 1252.991294][T18176] should_failslab+0xa8/0x100 [ 1252.991318][T18176] __kmalloc_noprof+0xcb/0x4f0 [ 1252.991337][T18176] ? tomoyo_encode+0x28b/0x550 [ 1252.991368][T18176] tomoyo_encode+0x28b/0x550 [ 1252.991400][T18176] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1252.991429][T18176] ? tomoyo_domain+0xda/0x130 [ 1252.991461][T18176] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1252.991482][T18176] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1252.991514][T18176] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1252.991553][T18176] ? __lock_acquire+0xab9/0xd20 [ 1252.991594][T18176] ? __fget_files+0x2a/0x420 [ 1252.991619][T18176] ? __fget_files+0x2a/0x420 [ 1252.991651][T18176] ? __fget_files+0x3a0/0x420 [ 1252.991671][T18176] ? __fget_files+0x2a/0x420 [ 1252.991696][T18176] security_file_ioctl+0xcb/0x2d0 [ 1252.991720][T18176] __se_sys_ioctl+0x47/0x170 [ 1252.991750][T18176] do_syscall_64+0xfa/0x3b0 [ 1252.991770][T18176] ? lockdep_hardirqs_on+0x9c/0x150 [ 1252.991790][T18176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.991808][T18176] ? clear_bhb_loop+0x60/0xb0 [ 1252.991831][T18176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.991850][T18176] RIP: 0033:0x7ff898b8e9a9 [ 1252.991866][T18176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1252.991882][T18176] RSP: 002b:00007ff899ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1252.991901][T18176] RAX: ffffffffffffffda RBX: 00007ff898db5fa0 RCX: 00007ff898b8e9a9 [ 1252.991915][T18176] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000006 [ 1252.991928][T18176] RBP: 00007ff899ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.991940][T18176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.991951][T18176] R13: 0000000000000000 R14: 00007ff898db5fa0 R15: 00007ffee5f85288 [ 1252.991981][T18176] [ 1252.991999][T18176] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1253.251143][T18165] tipc: Resetting bearer [ 1253.354014][T18165] tipc: Disabling bearer [ 1253.743262][T18193] FAULT_INJECTION: forcing a failure. [ 1253.743262][T18193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1253.889988][T18193] CPU: 1 UID: 0 PID: 18193 Comm: syz.5.2926 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1253.890015][T18193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1253.890027][T18193] Call Trace: [ 1253.890035][T18193] [ 1253.890044][T18193] dump_stack_lvl+0x189/0x250 [ 1253.890070][T18193] ? __pfx____ratelimit+0x10/0x10 [ 1253.890091][T18193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1253.890112][T18193] ? __pfx__printk+0x10/0x10 [ 1253.890147][T18193] should_fail_ex+0x414/0x560 [ 1253.890172][T18193] _copy_to_user+0x31/0xb0 [ 1253.890204][T18193] simple_read_from_buffer+0xe1/0x170 [ 1253.890228][T18193] proc_fail_nth_read+0x1df/0x250 [ 1253.890255][T18193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1253.890281][T18193] ? rw_verify_area+0x258/0x650 [ 1253.890308][T18193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1253.890333][T18193] vfs_read+0x200/0x980 [ 1253.890366][T18193] ? __pfx___mutex_lock+0x10/0x10 [ 1253.890388][T18193] ? __pfx_vfs_read+0x10/0x10 [ 1253.890425][T18193] ? __fget_files+0x2a/0x420 [ 1253.890451][T18193] ? __fget_files+0x3a0/0x420 [ 1253.890471][T18193] ? __fget_files+0x2a/0x420 [ 1253.890501][T18193] ksys_read+0x145/0x250 [ 1253.890521][T18193] ? __pfx_ksys_read+0x10/0x10 [ 1253.890536][T18193] ? rcu_is_watching+0x15/0xb0 [ 1253.890561][T18193] ? do_syscall_64+0xbe/0x3b0 [ 1253.890586][T18193] do_syscall_64+0xfa/0x3b0 [ 1253.890605][T18193] ? lockdep_hardirqs_on+0x9c/0x150 [ 1253.890624][T18193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.890642][T18193] ? clear_bhb_loop+0x60/0xb0 [ 1253.890665][T18193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.890683][T18193] RIP: 0033:0x7fe86198d3bc [ 1253.890700][T18193] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1253.890716][T18193] RSP: 002b:00007fe86282c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1253.890736][T18193] RAX: ffffffffffffffda RBX: 00007fe861bb6160 RCX: 00007fe86198d3bc [ 1253.890750][T18193] RDX: 000000000000000f RSI: 00007fe86282c0a0 RDI: 0000000000000007 [ 1253.890762][T18193] RBP: 00007fe86282c090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.890773][T18193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.890785][T18193] R13: 0000000000000001 R14: 00007fe861bb6160 R15: 00007fffc39013d8 [ 1253.890813][T18193] [ 1255.035424][T18214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2933'. [ 1255.044557][T18214] netlink: 8980 bytes leftover after parsing attributes in process `syz.0.2933'. [ 1256.982377][T18229] openvswitch: netlink: Key type 6928 is out of range max 32 [ 1257.503822][T18237] vlan2: entered promiscuous mode [ 1257.548259][T18237] bond0: entered promiscuous mode [ 1257.578026][T18237] bond_slave_0: entered promiscuous mode [ 1257.587410][T18237] bond_slave_1: entered promiscuous mode [ 1258.146910][T16756] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1258.662314][T16756] usb 10-1: Using ep0 maxpacket: 8 [ 1258.674418][T16756] usb 10-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1258.834745][T16756] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1258.994463][T16756] usb 10-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1259.136970][T16756] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.274261][T16756] usb 10-1: config 0 descriptor?? [ 1260.111194][T16756] logitech 0003:046D:C286.0028: hidraw0: USB HID v0.03 Device [HID 046d:c286] on usb-dummy_hcd.9-1/input0 [ 1260.173960][T16756] logitech 0003:046D:C286.0028: no inputs found [ 1260.355613][T16756] usb 10-1: USB disconnect, device number 12 [ 1260.715418][T18271] fido_id[18271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1260.953381][T18281] syzkaller0: entered promiscuous mode [ 1261.546010][T18281] syzkaller0: entered allmulticast mode [ 1263.170862][T18295] netlink: 277 bytes leftover after parsing attributes in process `syz.9.2957'. [ 1263.296627][T18301] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2957'. [ 1265.664345][T18333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.673684][T18333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.941207][T18335] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1268.560160][T18366] netlink: 'syz.9.2977': attribute type 9 has an invalid length. [ 1268.578982][T18366] netlink: 211988 bytes leftover after parsing attributes in process `syz.9.2977'. [ 1268.847558][ T9648] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1268.969832][T18374] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1269.077634][ T9648] usb 4-1: Using ep0 maxpacket: 32 [ 1269.862149][ T9648] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1269.915915][ T9648] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1269.964775][ T9648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.022655][ T9648] usb 4-1: Product: syz [ 1270.040302][ T9648] usb 4-1: Manufacturer: syz [ 1270.054582][ T9648] usb 4-1: SerialNumber: syz [ 1270.182805][ T9648] usb 4-1: config 0 descriptor?? [ 1270.385457][T18367] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1270.791355][ T9648] hub 4-1:0.0: bad descriptor, ignoring hub [ 1270.810524][ T9648] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1271.296607][T18400] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2984'. [ 1271.885743][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 1271.965033][ T9648] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input35 [ 1272.035741][ T9648] usb 4-1: USB disconnect, device number 68 [ 1272.041699][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1272.254809][ T9647] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 1272.280336][ T9647] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1272.422220][T18405] tipc: Enabled bearer , priority 0 [ 1272.589470][T18409] syzkaller0: entered promiscuous mode [ 1272.594990][T18409] syzkaller0: entered allmulticast mode [ 1272.620824][T18402] netlink: 'syz.9.2987': attribute type 1 has an invalid length. [ 1272.631430][T18402] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2987'. [ 1272.690432][T18409] FAULT_INJECTION: forcing a failure. [ 1272.690432][T18409] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.735910][T18409] CPU: 0 UID: 0 PID: 18409 Comm: syz.3.2988 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1272.735937][T18409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1272.735950][T18409] Call Trace: [ 1272.735958][T18409] [ 1272.735968][T18409] dump_stack_lvl+0x189/0x250 [ 1272.736015][T18409] ? __pfx____ratelimit+0x10/0x10 [ 1272.736038][T18409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1272.736062][T18409] ? __pfx__printk+0x10/0x10 [ 1272.736093][T18409] ? __pfx___might_resched+0x10/0x10 [ 1272.736118][T18409] ? fs_reclaim_acquire+0x7d/0x100 [ 1272.736149][T18409] should_fail_ex+0x414/0x560 [ 1272.736178][T18409] should_failslab+0xa8/0x100 [ 1272.736205][T18409] __kmalloc_noprof+0xcb/0x4f0 [ 1272.736225][T18409] ? tomoyo_encode+0x28b/0x550 [ 1272.736258][T18409] tomoyo_encode+0x28b/0x550 [ 1272.736293][T18409] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1272.736324][T18409] ? tomoyo_domain+0xda/0x130 [ 1272.736359][T18409] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1272.736383][T18409] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1272.736409][T18409] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1272.736452][T18409] ? __lock_acquire+0xab9/0xd20 [ 1272.736496][T18409] ? __fget_files+0x2a/0x420 [ 1272.736524][T18409] ? __fget_files+0x2a/0x420 [ 1272.736547][T18409] ? __fget_files+0x3a0/0x420 [ 1272.736570][T18409] ? __fget_files+0x2a/0x420 [ 1272.736602][T18409] security_file_ioctl+0xcb/0x2d0 [ 1272.736630][T18409] __se_sys_ioctl+0x47/0x170 [ 1272.736665][T18409] do_syscall_64+0xfa/0x3b0 [ 1272.736689][T18409] ? lockdep_hardirqs_on+0x9c/0x150 [ 1272.736711][T18409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.736732][T18409] ? clear_bhb_loop+0x60/0xb0 [ 1272.736759][T18409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.736779][T18409] RIP: 0033:0x7f62a998e9a9 [ 1272.736798][T18409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1272.736817][T18409] RSP: 002b:00007f62aa780038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1272.736848][T18409] RAX: ffffffffffffffda RBX: 00007f62a9bb6080 RCX: 00007f62a998e9a9 [ 1272.736864][T18409] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 1272.736878][T18409] RBP: 00007f62aa780090 R08: 0000000000000000 R09: 0000000000000000 [ 1272.736892][T18409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1272.736905][T18409] R13: 0000000000000000 R14: 00007f62a9bb6080 R15: 00007ffdde196a48 [ 1272.736938][T18409] [ 1272.737508][T18409] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1273.106811][T18409] tipc: Resetting bearer [ 1273.197987][T18418] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1273.201037][T18404] tipc: Resetting bearer [ 1273.509148][T18404] tipc: Disabling bearer [ 1276.177511][T18443] delete_channel: no stack [ 1276.242597][T18451] FAULT_INJECTION: forcing a failure. [ 1276.242597][T18451] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.283930][T18451] CPU: 0 UID: 0 PID: 18451 Comm: syz.3.3001 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1276.283959][T18451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1276.283973][T18451] Call Trace: [ 1276.283982][T18451] [ 1276.283993][T18451] dump_stack_lvl+0x189/0x250 [ 1276.284023][T18451] ? __pfx____ratelimit+0x10/0x10 [ 1276.284047][T18451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1276.284072][T18451] ? __pfx__printk+0x10/0x10 [ 1276.284107][T18451] ? __pfx___might_resched+0x10/0x10 [ 1276.284137][T18451] should_fail_ex+0x414/0x560 [ 1276.284165][T18451] should_failslab+0xa8/0x100 [ 1276.284192][T18451] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1276.284215][T18451] ? __alloc_skb+0x112/0x2d0 [ 1276.284251][T18451] __alloc_skb+0x112/0x2d0 [ 1276.284298][T18451] netlink_sendmsg+0x5c6/0xb30 [ 1276.284352][T18451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1276.284399][T18451] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1276.284419][T18451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1276.284446][T18451] __sock_sendmsg+0x21c/0x270 [ 1276.284472][T18451] ____sys_sendmsg+0x505/0x830 [ 1276.284505][T18451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1276.284547][T18451] ? import_iovec+0x74/0xa0 [ 1276.284577][T18451] ___sys_sendmsg+0x21f/0x2a0 [ 1276.284608][T18451] ? __pfx____sys_sendmsg+0x10/0x10 [ 1276.284670][T18451] ? __fget_files+0x2a/0x420 [ 1276.284691][T18451] ? __fget_files+0x3a0/0x420 [ 1276.284722][T18451] __x64_sys_sendmsg+0x19b/0x260 [ 1276.284754][T18451] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1276.284792][T18451] ? __pfx_ksys_write+0x10/0x10 [ 1276.284808][T18451] ? rcu_is_watching+0x15/0xb0 [ 1276.284834][T18451] ? do_syscall_64+0xbe/0x3b0 [ 1276.284858][T18451] do_syscall_64+0xfa/0x3b0 [ 1276.284878][T18451] ? lockdep_hardirqs_on+0x9c/0x150 [ 1276.284898][T18451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.284917][T18451] ? clear_bhb_loop+0x60/0xb0 [ 1276.284940][T18451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.284958][T18451] RIP: 0033:0x7f62a998e9a9 [ 1276.284975][T18451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1276.284992][T18451] RSP: 002b:00007f62aa7a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1276.285013][T18451] RAX: ffffffffffffffda RBX: 00007f62a9bb5fa0 RCX: 00007f62a998e9a9 [ 1276.285027][T18451] RDX: 0000000000064000 RSI: 0000200000000a00 RDI: 0000000000000004 [ 1276.285040][T18451] RBP: 00007f62aa7a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1276.285052][T18451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1276.285064][T18451] R13: 0000000000000000 R14: 00007f62a9bb5fa0 R15: 00007ffdde196a48 [ 1276.285092][T18451] [ 1276.975665][T18458] FAULT_INJECTION: forcing a failure. [ 1276.975665][T18458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1277.035914][T18458] CPU: 0 UID: 0 PID: 18458 Comm: syz.9.3000 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1277.035939][T18458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1277.035951][T18458] Call Trace: [ 1277.035960][T18458] [ 1277.035968][T18458] dump_stack_lvl+0x189/0x250 [ 1277.035994][T18458] ? __pfx____ratelimit+0x10/0x10 [ 1277.036014][T18458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1277.036035][T18458] ? __pfx__printk+0x10/0x10 [ 1277.036058][T18458] ? __might_fault+0xb0/0x130 [ 1277.036089][T18458] should_fail_ex+0x414/0x560 [ 1277.036112][T18458] _copy_from_user+0x2d/0xb0 [ 1277.036140][T18458] memdup_user+0x5e/0xd0 [ 1277.036164][T18458] strndup_user+0x68/0xd0 [ 1277.036188][T18458] __se_sys_mount+0x9c/0x410 [ 1277.036210][T18458] ? lockdep_hardirqs_on+0x9c/0x150 [ 1277.036233][T18458] ? __pfx___se_sys_mount+0x10/0x10 [ 1277.036259][T18458] ? __x64_sys_mount+0x20/0xc0 [ 1277.036282][T18458] do_syscall_64+0xfa/0x3b0 [ 1277.036303][T18458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.036320][T18458] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1277.036338][T18458] ? clear_bhb_loop+0x60/0xb0 [ 1277.036360][T18458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.036378][T18458] RIP: 0033:0x7fe98478e9a9 [ 1277.036394][T18458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1277.036417][T18458] RSP: 002b:00007fe9855a0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1277.036436][T18458] RAX: ffffffffffffffda RBX: 00007fe9849b6080 RCX: 00007fe98478e9a9 [ 1277.036450][T18458] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 1277.036462][T18458] RBP: 00007fe9855a0090 R08: 00002000000003c0 R09: 0000000000000000 [ 1277.036474][T18458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1277.036485][T18458] R13: 0000000000000000 R14: 00007fe9849b6080 R15: 00007ffebddeb188 [ 1277.036513][T18458] [ 1277.474336][ T5913] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1277.484070][ T5913] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1277.815128][T18457] netlink: 'syz.5.3003': attribute type 1 has an invalid length. [ 1277.822976][T18457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3003'. [ 1280.303355][T18514] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3016'. [ 1280.919912][T18518] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3020'. [ 1282.899713][T18541] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3026'. [ 1283.100296][T18541] syz.4.3026: attempt to access beyond end of device [ 1283.100296][T18541] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1283.119159][T18541] syz.4.3026: attempt to access beyond end of device [ 1283.119159][T18541] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1283.135573][T18541] Mount JFS Failure: -5 [ 1284.174988][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1284.175006][ T30] audit: type=1326 audit(2000000582.432:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18555 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a998e9a9 code=0x7ffc0000 [ 1284.236572][ T30] audit: type=1326 audit(2000000582.432:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18555 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a998e9a9 code=0x7ffc0000 [ 1284.289231][ T30] audit: type=1326 audit(2000000582.460:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18555 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f62a998e9a9 code=0x7ffc0000 [ 1284.338801][ T5913] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1284.370946][ T30] audit: type=1326 audit(2000000582.460:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18555 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a998e9a9 code=0x7ffc0000 [ 1284.412740][ T30] audit: type=1326 audit(2000000582.460:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18555 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a998e9a9 code=0x7ffc0000 [ 1284.438173][T18567] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3032'. [ 1284.490046][ T30] audit: type=1326 audit(2000000582.460:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18555 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f62a998e9a9 code=0x7ffc0000 [ 1284.530374][ T30] audit: type=1326 audit(2000000582.460:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18555 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a998e9a9 code=0x7ffc0000 [ 1284.584528][ T5913] usb 6-1: config 0 has an invalid interface number: 216 but max is 0 [ 1284.592737][ T5913] usb 6-1: config 0 has no interface number 0 [ 1284.602396][ T30] audit: type=1326 audit(2000000582.460:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18555 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f62a998e9a9 code=0x7ffc0000 [ 1284.642427][ T5913] usb 6-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 1284.669319][ T5913] usb 6-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1284.679162][ T5913] usb 6-1: config 0 interface 216 has no altsetting 0 [ 1284.701402][ T30] audit: type=1326 audit(2000000582.460:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18555 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a998e9a9 code=0x7ffc0000 [ 1284.727394][ T5913] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 1284.750645][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.764140][ T30] audit: type=1326 audit(2000000582.460:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18555 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f62a998e9a9 code=0x7ffc0000 [ 1284.797659][ T5913] usb 6-1: config 0 descriptor?? [ 1284.833508][T18554] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1284.862902][ T5913] usb 6-1: NFC: intf ffff88807c717000 id ffffffff8eb3fb20 [ 1285.123950][T18573] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3033'. [ 1286.086610][T18583] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1286.109033][T18582] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3038'. [ 1288.336332][ T9646] usb 6-1: USB disconnect, device number 45 [ 1288.374193][T18608] FAULT_INJECTION: forcing a failure. [ 1288.374193][T18608] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.443610][T18608] CPU: 0 UID: 0 PID: 18608 Comm: syz.4.3044 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1288.443641][T18608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1288.443655][T18608] Call Trace: [ 1288.443664][T18608] [ 1288.443674][T18608] dump_stack_lvl+0x189/0x250 [ 1288.443704][T18608] ? __pfx____ratelimit+0x10/0x10 [ 1288.443729][T18608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1288.443754][T18608] ? __pfx__printk+0x10/0x10 [ 1288.443789][T18608] ? __pfx___might_resched+0x10/0x10 [ 1288.443820][T18608] should_fail_ex+0x414/0x560 [ 1288.443849][T18608] should_failslab+0xa8/0x100 [ 1288.443877][T18608] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1288.443900][T18608] ? __alloc_skb+0x112/0x2d0 [ 1288.443935][T18608] __alloc_skb+0x112/0x2d0 [ 1288.443971][T18608] netlink_dump+0x1b1/0xe60 [ 1288.444015][T18608] ? __pfx_netlink_dump+0x10/0x10 [ 1288.444061][T18608] ? kmem_cache_free+0x18f/0x400 [ 1288.444089][T18608] netlink_recvmsg+0x676/0xa30 [ 1288.444132][T18608] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1288.444183][T18608] ? __lock_acquire+0xab9/0xd20 [ 1288.444205][T18608] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1288.444234][T18608] ? security_socket_recvmsg+0x7e/0x2e0 [ 1288.444253][T18608] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1288.444279][T18608] sock_recvmsg+0x22c/0x270 [ 1288.444313][T18608] ____sys_recvmsg+0x1c9/0x460 [ 1288.444350][T18608] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1288.444395][T18608] ? import_iovec+0x74/0xa0 [ 1288.444425][T18608] ___sys_recvmsg+0x1b5/0x510 [ 1288.444459][T18608] ? __pfx____sys_recvmsg+0x10/0x10 [ 1288.444514][T18608] ? __fget_files+0x3a0/0x420 [ 1288.444546][T18608] do_recvmmsg+0x307/0x770 [ 1288.444577][T18608] ? __pfx_do_recvmmsg+0x10/0x10 [ 1288.444607][T18608] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1288.444647][T18608] __x64_sys_recvmmsg+0x190/0x240 [ 1288.444668][T18608] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1288.444685][T18608] ? rcu_is_watching+0x15/0xb0 [ 1288.444709][T18608] ? do_syscall_64+0xbe/0x3b0 [ 1288.444733][T18608] do_syscall_64+0xfa/0x3b0 [ 1288.444752][T18608] ? lockdep_hardirqs_on+0x9c/0x150 [ 1288.444771][T18608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.444790][T18608] ? clear_bhb_loop+0x60/0xb0 [ 1288.444812][T18608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.444831][T18608] RIP: 0033:0x7f21de98e9a9 [ 1288.444847][T18608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1288.444864][T18608] RSP: 002b:00007f21df801038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1288.444885][T18608] RAX: ffffffffffffffda RBX: 00007f21debb5fa0 RCX: 00007f21de98e9a9 [ 1288.444899][T18608] RDX: 0000000000000009 RSI: 00002000000052c0 RDI: 0000000000000003 [ 1288.444911][T18608] RBP: 00007f21df801090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.444923][T18608] R10: 0000000040002000 R11: 0000000000000246 R12: 0000000000000001 [ 1288.444935][T18608] R13: 0000000000000000 R14: 00007f21debb5fa0 R15: 00007ffd6a93a598 [ 1288.444963][T18608] [ 1288.790741][T18610] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3045'. [ 1288.799971][T18610] netlink: 8980 bytes leftover after parsing attributes in process `syz.5.3045'. [ 1289.511851][T18620] FAULT_INJECTION: forcing a failure. [ 1289.511851][T18620] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.776239][T18620] CPU: 0 UID: 0 PID: 18620 Comm: syz.0.3046 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1289.776269][T18620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1289.776282][T18620] Call Trace: [ 1289.776290][T18620] [ 1289.776303][T18620] dump_stack_lvl+0x189/0x250 [ 1289.776331][T18620] ? __pfx____ratelimit+0x10/0x10 [ 1289.776353][T18620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1289.776376][T18620] ? __pfx__printk+0x10/0x10 [ 1289.776405][T18620] ? __pfx___might_resched+0x10/0x10 [ 1289.776427][T18620] ? fs_reclaim_acquire+0x7d/0x100 [ 1289.776457][T18620] should_fail_ex+0x414/0x560 [ 1289.776483][T18620] should_failslab+0xa8/0x100 [ 1289.776507][T18620] __kmalloc_noprof+0xcb/0x4f0 [ 1289.776526][T18620] ? tomoyo_encode+0x28b/0x550 [ 1289.776557][T18620] tomoyo_encode+0x28b/0x550 [ 1289.776588][T18620] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1289.776626][T18620] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1289.776648][T18620] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1289.776673][T18620] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1289.776694][T18620] ? finish_task_switch+0x26b/0x950 [ 1289.776740][T18620] ? __lock_acquire+0xab9/0xd20 [ 1289.776781][T18620] ? __fget_files+0x2a/0x420 [ 1289.776807][T18620] ? __fget_files+0x2a/0x420 [ 1289.776828][T18620] ? __fget_files+0x3a0/0x420 [ 1289.776849][T18620] ? __fget_files+0x2a/0x420 [ 1289.776877][T18620] security_file_ioctl+0xcb/0x2d0 [ 1289.776903][T18620] __se_sys_ioctl+0x47/0x170 [ 1289.776946][T18620] do_syscall_64+0xfa/0x3b0 [ 1289.776970][T18620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.776988][T18620] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1289.777006][T18620] ? clear_bhb_loop+0x60/0xb0 [ 1289.777030][T18620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.777048][T18620] RIP: 0033:0x7ff898b8e9a9 [ 1289.777064][T18620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1289.777081][T18620] RSP: 002b:00007ff899ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1289.777102][T18620] RAX: ffffffffffffffda RBX: 00007ff898db5fa0 RCX: 00007ff898b8e9a9 [ 1289.777116][T18620] RDX: 0000200000000000 RSI: 00000000c008561c RDI: 0000000000000004 [ 1289.777128][T18620] RBP: 00007ff899ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 1289.777140][T18620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1289.777151][T18620] R13: 0000000000000000 R14: 00007ff898db5fa0 R15: 00007ffee5f85288 [ 1289.777180][T18620] [ 1289.909990][T18623] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3049'. [ 1290.128576][T18620] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1290.177501][T18628] netlink: 277 bytes leftover after parsing attributes in process `syz.5.3051'. [ 1290.305673][T18631] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3051'. [ 1293.333922][T18668] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3061'. [ 1294.216471][T18674] random: crng reseeded on system resumption [ 1294.283943][T18676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3063'. [ 1294.474933][T18679] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3065'. [ 1295.082036][ T5913] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1295.220500][T18692] netlink: 277 bytes leftover after parsing attributes in process `syz.5.3068'. [ 1295.314306][T18693] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3068'. [ 1295.323023][ T5913] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 1295.366523][ T5913] usb 10-1: config 0 has no interface number 0 [ 1295.392811][ T5913] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1295.444225][ T5913] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1295.482038][ T5913] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.504165][ T5913] usb 10-1: Product: syz [ 1295.532495][ T5913] usb 10-1: Manufacturer: syz [ 1295.548068][ T5913] usb 10-1: SerialNumber: syz [ 1295.589522][ T5913] usb 10-1: config 0 descriptor?? [ 1295.645439][ T5913] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 1296.975129][T18716] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3073'. [ 1298.408459][ T5913] usb 10-1: USB disconnect, device number 13 [ 1298.429351][ T5913] yurex 10-1:0.50: USB YUREX #0 now disconnected [ 1299.205297][T18740] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3081'. [ 1302.322298][T18760] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3087'. [ 1302.523455][T18766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3087'. [ 1303.364771][T18768] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3088'. [ 1303.957636][T18774] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3090'. [ 1304.637035][T18781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 1304.717525][T18782] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1306.524203][T18794] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3095'. [ 1308.468146][T18808] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1308.980049][ T5913] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1309.054898][T16756] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 1309.142454][ T5913] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 1309.151101][ T5913] usb 4-1: config 0 has no interface number 0 [ 1309.159678][ T5913] usb 4-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 1309.172060][T18823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.179162][T18821] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3104'. [ 1309.184245][ T5913] usb 4-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1309.202356][T18823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.211963][ T5913] usb 4-1: config 0 interface 216 has no altsetting 0 [ 1309.219040][ T5913] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 1309.228854][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.432328][T16756] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1309.443978][T16756] usb 6-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1309.458055][ T5913] usb 4-1: config 0 descriptor?? [ 1309.464036][T16756] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1309.472949][T18813] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1310.002275][ T5913] usb 4-1: NFC: intf ffff88807c595000 id ffffffff8eb3fb20 [ 1310.026123][T16756] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1310.047878][T16756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.063612][T16756] usb 6-1: Product: 뗘╺⪬㟭䋍Æ籪鈘樀釟廸움刘蝶橄ᠩⷼ俛藇剅譋瘄´俒䩾籢峽っ↏ﴵ킻揕⌍۵T䣒昜솹〟⼩슒擟᷇㦚䁇嘗䙓훢䛵ｅ駚囖荂쁪ઃ⋸앓偁ꀒꆎ [ 1310.086362][T16756] usb 6-1: Manufacturer: 흘胾뿽Ӻ춧ා黦޸ [ 1310.093888][T16756] usb 6-1: SerialNumber: ᬫ䊭ﻀ枑⤖꫆兡檯⹼ᆶ尾㴖䓻阮ᘹ蜺㟂섬厒荗⛸虋픈舝삈૏폻湀禈糮湮샠ᷙ㗶풬唽ᄒ仴ㅿ㆓佯濁ᯌ跦跎擔Ὄ뒇㊼⁂䢬⺈຋蝹ᖢຽﲌᅶ쓻텶쏭鱋則㺈䴗徕汮直깉ｺ떻 [ 1310.138508][T18815] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1310.882880][T18812] Bluetooth: hci4: command 0x0406 tx timeout [ 1311.609613][ T9647] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 1311.658420][T16756] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 6 proto 1 vid 0x0525 pid 0xA4A8 [ 1311.755240][T16756] usb 6-1: USB disconnect, device number 46 [ 1311.775518][T16756] usblp0: removed [ 1311.796972][ T9647] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1311.879858][ T9647] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1312.090926][ T9647] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1312.353771][ T9647] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1312.363370][ T9647] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.538774][ T9646] usb 4-1: USB disconnect, device number 69 [ 1312.600739][ T9647] usb 1-1: Product: 뗘╺⪬㟭䋍Æ籪鈘樀釟廸움刘蝶橄ᠩⷼ俛藇剅譋瘄´俒䩾籢峽っ↏ﴵ킻揕⌍۵T䣒昜솹〟⼩슒擟᷇㦚䁇嘗䙓훢䛵ｅ駚囖荂쁪ઃ⋸앓偁ꀒꆎ [ 1312.856507][ T9647] usb 1-1: Manufacturer: 흘胾뿽Ӻ춧ා黦޸ [ 1312.874796][ T9647] usb 1-1: SerialNumber: ᬫ䊭ﻀ枑⤖꫆兡檯⹼ᆶ尾㴖䓻阮ᘹ蜺㟂섬厒荗⛸虋픈舝삈૏폻湀禈糮湮샠ᷙ㗶풬唽ᄒ仴ㅿ㆓佯濁ᯌ跦跎擔Ὄ뒇㊼⁂䢬⺈຋蝹ᖢຽﲌᅶ쓻텶쏭鱋則㺈䴗徕汮直깉ｺ떻 [ 1312.941695][T18854] bpf: Bad value for 'uid' [ 1312.965838][T18838] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1312.987220][T18856] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3111'. [ 1313.399935][ T9647] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 93 if 0 alt 6 proto 1 vid 0x0525 pid 0xA4A8 [ 1313.415439][ T9647] usb 1-1: USB disconnect, device number 93 [ 1313.446939][ T9647] usblp0: removed [ 1314.047276][T16658] udevd[16658]: setting mode of /dev/bus/usb/001/093 to 020664 failed: No such file or directory [ 1314.081160][T16658] udevd[16658]: setting owner of /dev/bus/usb/001/093 to uid=0, gid=7 failed: No such file or directory [ 1314.821517][T18871] FAULT_INJECTION: forcing a failure. [ 1314.821517][T18871] name failslab, interval 1, probability 0, space 0, times 0 [ 1314.913324][T18871] CPU: 1 UID: 0 PID: 18871 Comm: syz.0.3116 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1314.913356][T18871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1314.913369][T18871] Call Trace: [ 1314.913379][T18871] [ 1314.913389][T18871] dump_stack_lvl+0x189/0x250 [ 1314.913420][T18871] ? __pfx____ratelimit+0x10/0x10 [ 1314.913443][T18871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1314.913468][T18871] ? __pfx__printk+0x10/0x10 [ 1314.913507][T18871] ? __pfx___might_resched+0x10/0x10 [ 1314.913531][T18871] ? fs_reclaim_acquire+0x7d/0x100 [ 1314.913564][T18871] should_fail_ex+0x414/0x560 [ 1314.913593][T18871] should_failslab+0xa8/0x100 [ 1314.913619][T18871] __kmalloc_noprof+0xcb/0x4f0 [ 1314.913639][T18871] ? tomoyo_encode+0x28b/0x550 [ 1314.913673][T18871] tomoyo_encode+0x28b/0x550 [ 1314.913708][T18871] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1314.913750][T18871] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1314.913778][T18871] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1314.913805][T18871] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1314.913849][T18871] ? __lock_acquire+0xab9/0xd20 [ 1314.913892][T18871] ? __fget_files+0x2a/0x420 [ 1314.913920][T18871] ? __fget_files+0x2a/0x420 [ 1314.913944][T18871] ? __fget_files+0x3a0/0x420 [ 1314.913967][T18871] ? __fget_files+0x2a/0x420 [ 1314.913996][T18871] security_file_ioctl+0xcb/0x2d0 [ 1314.914024][T18871] __se_sys_ioctl+0x47/0x170 [ 1314.914059][T18871] do_syscall_64+0xfa/0x3b0 [ 1314.914082][T18871] ? lockdep_hardirqs_on+0x9c/0x150 [ 1314.914105][T18871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.914127][T18871] ? clear_bhb_loop+0x60/0xb0 [ 1314.914154][T18871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.914175][T18871] RIP: 0033:0x7ff898b8e9a9 [ 1314.914194][T18871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1314.914213][T18871] RSP: 002b:00007ff899ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1314.914247][T18871] RAX: ffffffffffffffda RBX: 00007ff898db5fa0 RCX: 00007ff898b8e9a9 [ 1314.914263][T18871] RDX: 0000000000000002 RSI: 000000000000540a RDI: 0000000000000003 [ 1314.914285][T18871] RBP: 00007ff899ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 1314.914297][T18871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1314.914308][T18871] R13: 0000000000000000 R14: 00007ff898db5fa0 R15: 00007ffee5f85288 [ 1314.914336][T18871] [ 1314.914375][T18871] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1316.360841][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1317.211946][ T9647] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1317.264982][ T5913] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1317.428535][ T5913] usb 1-1: config 0 has an invalid interface number: 216 but max is 0 [ 1317.440167][ T5913] usb 1-1: config 0 has no interface number 0 [ 1317.446389][ T5913] usb 1-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 1317.465269][ T5913] usb 1-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1317.476952][ T5913] usb 1-1: config 0 interface 216 has no altsetting 0 [ 1317.487823][ T5913] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 1317.497231][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.527848][ T5913] usb 1-1: config 0 descriptor?? [ 1317.540484][T18897] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1317.554194][ T5913] usb 1-1: NFC: intf ffff888031bb8000 id ffffffff8eb3fb20 [ 1317.555905][ T9647] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 1317.570210][ T9647] usb 4-1: config 0 has no interface number 0 [ 1317.576698][ T9647] usb 4-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 1317.587155][ T9647] usb 4-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1317.607585][T16756] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 1317.786320][T16756] usb 10-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1317.817119][T16756] usb 10-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1317.929583][T16756] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1318.036345][T16756] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1318.099430][ T9647] usb 4-1: config 0 interface 216 has no altsetting 0 [ 1318.106368][ T9647] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 1318.112257][T16756] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.115715][ T9647] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.191049][ T9647] usb 4-1: config 0 descriptor?? [ 1318.207050][T18895] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1318.226604][ T9647] usb 4-1: NFC: intf ffff88802a11e000 id ffffffff8eb3fb20 [ 1318.344139][T16756] usb 10-1: Product: 뗘╺⪬㟭䋍Æ籪鈘樀釟廸움刘蝶橄ᠩⷼ俛藇剅譋瘄´俒䩾籢峽っ↏ﴵ킻揕⌍۵T䣒昜솹〟⼩슒擟᷇㦚䁇嘗䙓훢䛵ｅ駚囖荂쁪ઃ⋸앓偁ꀒꆎ [ 1318.385729][T16756] usb 10-1: Manufacturer: 흘胾뿽Ӻ춧ා黦޸ [ 1318.392850][T16756] usb 10-1: SerialNumber: ᬫ䊭ﻀ枑⤖꫆兡檯⹼ᆶ尾㴖䓻阮ᘹ蜺㟂섬厒荗⛸虋픈舝삈૏폻湀禈糮湮샠ᷙ㗶풬唽ᄒ仴ㅿ㆓佯濁ᯌ跦跎擔Ὄ뒇㊼⁂䢬⺈຋蝹ᖢຽﲌᅶ쓻텶쏭鱋則㺈䴗徕汮直깉ｺ떻 [ 1319.651357][T18905] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 1319.713269][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 1321.490030][T18921] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1321.611845][ C0] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 1321.611913][T18921] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1321.617935][ C0] CPU: 0 UID: 0 PID: 18920 Comm: syz.5.3130 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1321.636579][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1321.646641][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 1321.652736][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 1321.672351][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046 [ 1321.678427][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff8880499df080 [ 1321.686396][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88805ceba000 [ 1321.694370][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 1321.702347][ C0] R10: dffffc0000000000 R11: ffffffff88d8dbe0 R12: dffffc0000000000 [ 1321.710340][ C0] R13: ffff8880499df038 R14: 0000000000000000 R15: ffff8880499df000 [ 1321.718312][ C0] FS: 00007fe86282c6c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 1321.727249][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1321.733839][ C0] CR2: ffffffffffffffe8 CR3: 0000000047cde000 CR4: 00000000003526f0 [ 1321.741829][ C0] Call Trace: [ 1321.745117][ C0] [ 1321.747972][ C0] ? __pfx_das16m1_ai_munge+0x10/0x10 [ 1321.753373][ C0] comedi_buf_write_samples+0x369/0x5a0 [ 1321.758940][ C0] das16m1_handler+0x213/0x4b0 [ 1321.763737][ C0] das16m1_interrupt+0xaf/0x180 [ 1321.768617][ C0] ? __pfx_das16m1_interrupt+0x10/0x10 [ 1321.774097][ C0] __handle_irq_event_percpu+0x289/0x980 [ 1321.779752][ C0] ? __pfx___handle_irq_event_percpu+0x10/0x10 [ 1321.786127][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1321.791345][ C0] handle_irq_event+0x8b/0x1e0 [ 1321.796112][ C0] ? handle_edge_irq+0x25d/0x9c0 [ 1321.801050][ C0] handle_edge_irq+0x267/0x9c0 [ 1321.805820][ C0] __common_interrupt+0x140/0x250 [ 1321.810845][ C0] common_interrupt+0xb6/0xe0 [ 1321.815521][ C0] [ 1321.818463][ C0] [ 1321.821393][ C0] asm_common_interrupt+0x26/0x40 [ 1321.826419][ C0] RIP: 0010:__mutex_unlock_slowpath+0xa/0x700 [ 1321.832489][ C0] Code: f3 0f 1e fa 48 8b 34 24 eb 16 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 e4 e0 48 81 ec e0 00 00 00 49 89 ff 65 [ 1321.852092][ C0] RSP: 0018:ffffc9000bd176c8 EFLAGS: 00000246 [ 1321.858179][ C0] RAX: ffffffff89465cff RBX: ffff8880494fe000 RCX: 0000000000080000 [ 1321.866153][ C0] RDX: ffffc9001e33a000 RSI: ffffffff8a1463f5 RDI: ffff8880791e95f0 [ 1321.874127][ C0] RBP: ffffc9000bd176d0 R08: ffff8880617144a7 R09: 1ffff1100c2e2894 [ 1321.882103][ C0] R10: dffffc0000000000 R11: ffffed100c2e2895 R12: ffff8880617143c0 [ 1321.890074][ C0] R13: 1ffff920017a2eec R14: 0000000000000002 R15: dffffc0000000000 [ 1321.898050][ C0] ? consume_skb+0xbf/0xf0 [ 1321.902474][ C0] ? __unix_dgram_recvmsg+0xa25/0xd80 [ 1321.907863][ C0] __unix_dgram_recvmsg+0xa25/0xd80 [ 1321.913095][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1321.918830][ C0] ? irqentry_exit+0x74/0x90 [ 1321.923433][ C0] ? irqentry_exit+0x74/0x90 [ 1321.928027][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 1321.933075][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1321.938660][ C0] sock_recvmsg_nosec+0x183/0x1c0 [ 1321.943693][ C0] ____sys_recvmsg+0x3aa/0x460 [ 1321.948474][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1321.953773][ C0] ? import_iovec+0x74/0xa0 [ 1321.958292][ C0] ___sys_recvmsg+0x1b5/0x510 [ 1321.962978][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1321.968198][ C0] ? __might_fault+0xb0/0x130 [ 1321.972875][ C0] do_recvmmsg+0x307/0x770 [ 1321.977290][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1321.982230][ C0] ? count_memcg_event_mm+0x21/0x260 [ 1321.987520][ C0] ? count_memcg_event_mm+0x21/0x260 [ 1321.992820][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 1321.997849][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1322.003400][ C0] ? do_syscall_64+0xbe/0x3b0 [ 1322.008085][ C0] do_syscall_64+0xfa/0x3b0 [ 1322.012588][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1322.017789][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.023867][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1322.028547][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.034437][ C0] RIP: 0033:0x7fe86198e9a9 [ 1322.038858][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1322.058469][ C0] RSP: 002b:00007fe86282c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1322.066896][ C0] RAX: ffffffffffffffda RBX: 00007fe861bb6160 RCX: 00007fe86198e9a9 [ 1322.074872][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000009 [ 1322.082843][ C0] RBP: 00007fe861a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1322.090816][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1322.098787][ C0] R13: 0000000000000001 R14: 00007fe861bb6160 R15: 00007fffc39013d8 [ 1322.106780][ C0] [ 1322.109828][ C0] Modules linked in: [ 1322.113741][ C0] ---[ end trace 0000000000000000 ]--- [ 1322.119200][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 1322.125294][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 1322.144896][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046 [ 1322.150969][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff8880499df080 [ 1322.158947][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88805ceba000 [ 1322.166950][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 1322.175025][ C0] R10: dffffc0000000000 R11: ffffffff88d8dbe0 R12: dffffc0000000000 [ 1322.183010][ C0] R13: ffff8880499df038 R14: 0000000000000000 R15: ffff8880499df000 [ 1322.190996][ C0] FS: 00007fe86282c6c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 1322.199926][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1322.206518][ C0] CR2: ffffffffffffffe8 CR3: 0000000047cde000 CR4: 00000000003526f0 [ 1322.214515][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 1322.222004][ C0] Kernel Offset: disabled [ 1322.226333][ C0] Rebooting in 86400 seconds..