last executing test programs: 8m32.64134868s ago: executing program 4 (id=1084): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = eventfd2(0xc, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r1, 0x15, 0x0, r1}) close_range(r0, r3, 0x0) 8m31.44125896s ago: executing program 4 (id=1087): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x1, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pselect6(0x40, &(0x7f0000000000)={0x3, 0x7, 0x35, 0x1, 0x6, 0x9, 0x9, 0x556c8bdb}, &(0x7f0000000100)={0x9, 0x9, 0x800, 0x5, 0x7a, 0x2, 0x7fff, 0x4}, &(0x7f0000000140)={0x6, 0x4ef76f83, 0x9, 0xfffffffffffffff7, 0xff, 0x3, 0x9, 0x48c4a2e1}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x4]}, 0x8}) 8m31.132405905s ago: executing program 4 (id=1091): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e03200009"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000010240)="07d0", 0x2}, {&(0x7f0000010140)="8c", 0x1}], 0x2) 8m28.813145773s ago: executing program 4 (id=1095): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async, rerun: 64) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000004000000000000000000000000040046a500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000000000)=0x1, 0x4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=0x0, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {}, [@srcaddr={0x14, 0xd, @in6=@dev}]}, 0x3c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r7, 0x0, 0x0}, 0x10) recvmmsg(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) close(0x3) 8m28.038903145s ago: executing program 4 (id=1098): ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) linkat(r0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d68bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527ffd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f891f547c7e69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d255b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe0879c77fff7b241439686cb4db435d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b3943"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fa8000000000000000060000d029aef8fe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) recvmmsg$unix(r3, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) io_setup(0x5, &(0x7f0000000740)) 8m26.859848386s ago: executing program 4 (id=1102): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) chdir(0x0) pipe2$9p(&(0x7f0000000000), 0x80) creat(&(0x7f0000000100)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x100) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070056060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded85d3cdd66d9c79f0529d045625b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c700e3806f825f1d0da2a304e06543b56d35235d7897a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664b44e22b72e843e7cf55f394cf75d1cd57c9150bfb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574f20e7f513a2a7c5dad90e7d479724d69fa0c0bf97af1231a49ea166f743279d240e2e6f01d8704f313d68b16198be5f6a50e9e0fd20893b2922df566d2622edee5000000000000000000d91c6da09fa7cdbbf16d4780d8c2401c55aff772aced3ff966ff76d796c171f5f7a31e1b14b0c0c712c0fdd2710f37a3d15710d68e7326a7db043c57784bd9bdb047db75"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='tarEet PCI:17:7:a.b\x00'], 0x14) socket$isdn_base(0x22, 0x3, 0x0) 8m26.013684938s ago: executing program 32 (id=1102): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) chdir(0x0) pipe2$9p(&(0x7f0000000000), 0x80) creat(&(0x7f0000000100)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x100) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='tarEet PCI:17:7:a.b\x00'], 0x14) socket$isdn_base(0x22, 0x3, 0x0) 7m0.699576895s ago: executing program 1 (id=1296): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) getpid() syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setns(0xffffffffffffffff, 0x10000000) r3 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x4000) stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000180)='./file1\x00', r9, 0x0) setresuid(0xee00, r9, 0xee01) ioctl$IOC_PR_RESERVE(r8, 0x401070c9, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@deltfilter={0x44, 0x2d, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x55e713454a0c610f, 0xa}, {0xc, 0xf}, {0x10, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x1, 0xc}}, @TCA_RATE={0x6, 0x5, {0x7, 0xf7}}, @TCA_CHAIN={0x8, 0xb, 0xf}]}, 0x44}}, 0x4000) 6m58.07981086s ago: executing program 1 (id=1303): syz_open_dev$video4linux(0x0, 0x7, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private0, 0x800, 0x0, 0x103, 0x1, 0x3ff}, 0x20) getpid() r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffa1}}}, 0x24}}, 0x0) 6m55.742970279s ago: executing program 1 (id=1310): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYRES32=0xffffffffffffffff], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='\x00', r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES8=r0], 0x20) syz_usb_connect$uac1(0x2, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902920003010000000904000000010100000a240100000002010213240605000600000900000000000000000000092403fd03030000000924050200f8431cfd0924030004020004fc05240504"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8000000003c) mknodat(0xffffffffffffff9c, 0x0, 0x8, 0x702) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000006c0), 0x35c, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x2, 0xe, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x9}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000350000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a0104000000000000000001"], 0xdc}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x20000000000000f5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r6 = syz_clone(0x1200080, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000004c0), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, r1) wait4(r6, 0x0, 0x80000000, 0x0) ptrace(0x10, r6) wait4(r6, 0x0, 0xa0000009, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64ffff00000400028008005c0a", @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 6m50.464700534s ago: executing program 1 (id=1324): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) setresuid(0x0, 0xee01, 0xee00) r6 = syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) kcmp(r6, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 6m48.381551959s ago: executing program 1 (id=1329): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0xfffe, 0x0, @local}}, 0x0, 0x0, 0x2, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078ec00"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0, r4}, 0xc) 6m47.305509204s ago: executing program 1 (id=1332): socket$packet(0x11, 0x2, 0x300) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x34, r3, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040840}, 0x4000050) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x34}, @val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x57466fe51e60fa84) sendmmsg$inet(r1, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x20044840) sendmmsg$inet(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)='D', 0x1}], 0x1}}], 0x1, 0xc1) pipe2(&(0x7f0000000080), 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000280)=0x7) pselect6(0x40, &(0x7f0000000080)={0x4, 0x0, 0x800000000, 0x0, 0x8000000010000000, 0x1, 0x0, 0xffffffffffffffff}, &(0x7f0000000000)={0x18, 0x7, 0x6, 0x1, 0x7, 0x101, 0x1000000000}, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_pts(0xffffffffffffffff, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x0) sendto$inet6(r6, &(0x7f0000000000)="b5ebc308cae8bcf59757ecfde9c25a5050c3cb97b1d34c2895a6bd911ad9a7cbf53be823f3f36c4ceb02767a21f1502eaf38497a16", 0x35, 0x24000, &(0x7f0000000040)={0xa, 0x4e22, 0x50bfe235, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3b}, 0x1c) read(r6, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r6, &(0x7f0000001d40)=""/4095, 0xfff) r7 = socket$can_j1939(0x1d, 0x2, 0x7) write$tun(r7, 0x0, 0x0) r8 = syz_io_uring_setup(0x497, &(0x7f00000003c0)={0x0, 0x7279, 0x0, 0x4, 0xea}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) 6m31.798265314s ago: executing program 33 (id=1332): socket$packet(0x11, 0x2, 0x300) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x34, r3, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040840}, 0x4000050) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x34}, @val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x57466fe51e60fa84) sendmmsg$inet(r1, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x20044840) sendmmsg$inet(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)='D', 0x1}], 0x1}}], 0x1, 0xc1) pipe2(&(0x7f0000000080), 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000280)=0x7) pselect6(0x40, &(0x7f0000000080)={0x4, 0x0, 0x800000000, 0x0, 0x8000000010000000, 0x1, 0x0, 0xffffffffffffffff}, &(0x7f0000000000)={0x18, 0x7, 0x6, 0x1, 0x7, 0x101, 0x1000000000}, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_pts(0xffffffffffffffff, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x0) sendto$inet6(r6, &(0x7f0000000000)="b5ebc308cae8bcf59757ecfde9c25a5050c3cb97b1d34c2895a6bd911ad9a7cbf53be823f3f36c4ceb02767a21f1502eaf38497a16", 0x35, 0x24000, &(0x7f0000000040)={0xa, 0x4e22, 0x50bfe235, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3b}, 0x1c) read(r6, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r6, &(0x7f0000001d40)=""/4095, 0xfff) r7 = socket$can_j1939(0x1d, 0x2, 0x7) write$tun(r7, 0x0, 0x0) r8 = syz_io_uring_setup(0x497, &(0x7f00000003c0)={0x0, 0x7279, 0x0, 0x4, 0xea}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) 3m2.116102858s ago: executing program 0 (id=1973): syz_open_dev$vbi(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x180) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') ioprio_set$pid(0x2, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x46842, 0x0) sendfile(r2, r2, 0x0, 0x7a680000) 3m1.203428587s ago: executing program 0 (id=1974): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0xf360, 0x1880, 0x8000002}) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x5, 0x1, 0x7f, 0x3, 0x3, 0x3e, 0x6, 0x159, 0x40, 0x2a4, 0x3, 0x2, 0x38, 0x4, 0x5, 0x8000, 0x3}, [{0x3, 0x1b4c1f39, 0x7, 0x10, 0x5, 0x80, 0x2, 0xffffffffffffffff}, {0x2, 0x2e72, 0x5, 0xb4b, 0x6, 0x0, 0x3}, {0x60000000, 0x1, 0x7fffffffffffffff, 0x6f0, 0x7f, 0x3, 0x200, 0x9}, {0x3, 0x1c39, 0x9, 0x7, 0x3, 0x5, 0x100000001, 0x8ad6}], "59cd7cd31e2b0db0380e1470f5f9ff21523dc5a46b37e9e9927598252d000a7ce1ff0bf93c61a530c9f34b20423ec9d419e6e8939a5528c565b97e3e1224215b453d05dad0df11146853ce7269b9c541fd006700ec14279538360dca38a55858802e577b6479c80de46512e28f24c80d8d7c6ab2dffdec3ee57b03acf79a36f0292c190e4ad14da5d6b6360778aeb2327dcfad99a15499ff60e834bc1268b5b238833a72dfca07809b18d7144b90dfbdad99c60a13bdfc4d1897fe352ab8c1f0dc1570171b885def5d249a0ed29e2c81d0b6f744f39b0a4406cfbf5cfe9ec4322a3c0dc5f6f5983b0d"}, 0x209) ftruncate(r1, 0x51a9497) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000580)=""/179) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m56.619933491s ago: executing program 0 (id=1986): socket$inet(0x2, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x7, 0x1, @thr={&(0x7f00000000c0)="3b1442f3f353c6d139cec14dbdfe5ac56aed1ac7655bbc8bceb08553fd70ac98959a273faa6ff996b1a86dd6c3deecc7deb77f25e13ab2e4fe41429892776b38155a4e0cf2927e132c5bc1d56d7e76b0741fb2a712aff7455de54cf9fbf81814d40dbd1675bc47af27d966991927bbd1ace5c766bacd7c4af540643749e82ef271ee01301d5fb79cbe3bd023aa239073483c", &(0x7f0000000380)="8df0e8b7d8369a8db65485c4fe2247db766b60635f004d78d925a4f9991df05950a857f1c886a28b2b001b1ea659105bd1f7348397e1adb686cdea70b0bf07a445fa1143bb8f448daa1a95def1726d239debb21eeb19a860005dcbac2e85d606fb3ca9ede2340721d5009e951ecf8fb9cac4266073258457f071750e2eaaad73f1cf380227ddb683c15d4e03bb59c4460eed2748e074084ca03c25"}}, &(0x7f0000000240)=0x0) timer_delete(r1) 2m51.174058771s ago: executing program 0 (id=2000): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r4}, 0xc) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[]) 2m50.963800675s ago: executing program 0 (id=2002): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket(0x18, 0x0, 0x1) getsockopt$nfc_llcp(r3, 0x111, 0x0, 0x0, 0x90aa62107f0000) listen(r3, 0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x20, r1, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m50.888966732s ago: executing program 0 (id=2004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000c00)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x5}, 0x4}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x002\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x45) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x13, 0xffffffffffffffff, 0x6a652000) socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xa001) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000180)=ANY=[@ANYBLOB="18050000000000372600"/24]) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x200081, 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x4668, 0x10100, 0xfffffffd, 0x187}, &(0x7f0000000180), &(0x7f00000001c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000ffdbdf254b5ec836978f64bcfbef1c515c01df450000a60e0000000f0002006e65746465"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x14) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$MSR(&(0x7f0000000040), 0x8, 0x0) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) 2m34.422636226s ago: executing program 34 (id=2004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000c00)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x5}, 0x4}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x002\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x45) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x13, 0xffffffffffffffff, 0x6a652000) socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xa001) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000180)=ANY=[@ANYBLOB="18050000000000372600"/24]) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x200081, 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x4668, 0x10100, 0xfffffffd, 0x187}, &(0x7f0000000180), &(0x7f00000001c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000ffdbdf254b5ec836978f64bcfbef1c515c01df450000a60e0000000f0002006e65746465"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x14) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$MSR(&(0x7f0000000040), 0x8, 0x0) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) 12.22158902s ago: executing program 2 (id=2495): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYRES32=0x0, @ANYBLOB], 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0xfffe, 0x0, @local}}, 0x0, 0x0, 0x2, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078ec00"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0, r4}, 0xc) 10.889632182s ago: executing program 2 (id=2501): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ffffff8000000000000000400f00000000000000b500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000002aec000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000200), &(0x7f00000003c0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000200"/28], 0x50) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r8, &(0x7f0000000200)={0x11, 0x19, r10, 0x1, 0xc, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000003600)={0x3530, 0x13, 0x0, 0x70bd2c, 0x25dfdbff, {0x1e}, [@generic="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", @generic="1c3fb656f196c895ca89ac0fc3af15d59c1f8bc514ad60378e", @nested={0x1500, 0x138, 0x0, 0x1, [@typed={0x8, 0x82, 0x0, 0x0, @fd=r13}, @generic="dbd120733df079e2cf9c3189ba348de8687979dcd460ad91efe5e0e3c154a9842af13a8ef6103a709e1b5139224084ba840dea59805cf7399975bf146ffe07c9d3f74bca8201ea915ccea5f8d26b1a87ead267ea4a9e578d53070b4d11a3bc4e301d1de80152814f7b9ef48186acefea04e790bfc5dc8b9e05a71c03cfe16a367c6f7260dd49a7e5", @typed={0x4, 0x10a}, @nested={0x1468, 0x106, 0x0, 0x1, [@generic="bf71beb9179328068907d555067724524a8a8e9b6db7c4e0ca8935586f079dee6159b74c97ad39094bef4e1043ba601a1514e9ccef689e685f117e286037024c8d4768e288176de579fafe57f469592def7c6c2e820e79b134b13896b2287a56c45584207c6af077ff4131cfd3ed929d76056e1b5ac4be69e01f1a6ab20b94428abdcf73ab40c0917ea61a6f9080435be0373e997b5594b061265d63e302945c948630a7fd5c1c3fc410f7e7aa2502dc17b2bd545ddcdd91178fbedbd5dd2be92e9cba809e0426434f2830", @nested={0x3e, 0x71, 0x0, 0x1, [@nested={0x4, 0x111}, @generic="96ec2084ffdda1220887d77c38bc094b4300dca71e6b6009d2ae78f91b78b70e13631d990b4b64890437551e458d6f630e201e030c50"]}, @typed={0x8, 0xdf, 0x0, 0x0, @u32=0xffffff00}, @generic="1c6373aaad687f9a041e2a6648c4", @nested={0x1141, 0x149, 0x0, 0x1, [@typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@mcast2}, @generic="12dd0953ca2f7448b66880fa3659ea6e4cbd229a00cf53071f2d674c7c80e2bd5067c4666693434d0b7dba684c82bf87b23373d92a2fd5bb444912507f227b1b670d5f65b7de", @generic="32ea4ce6980579571b28115447da118d13acee5bb45d59ba7888f6abf9c342804909290147dc659aed7f80940a95f06669ae7f243f84e4b8dfd457b69215e615dd584df78387d2f12a79238a2385cb94b931123577a8289987cb98295a6d100cbe079cab45079a4b58c81980d3109a0a588b1bf5ac2ceb0ba13aeb33d48e9e956cf8b9d0b5e16d9c7f0ba19851e329b64be5d8", @generic="0c56d2841967beaa9a1b616b890748731985c983e3b2c6881857b1bacec546b1998f6f05ddd4f04bf794cf18ded60288c81b68e480781d7afed751d537be172373a4a52d2a37ee30acbe6bc5158585cbd20b61aa7fc680a95837d86d2207b5e2d106da93aadc77bc1d2327d22abd649c7519bf01c8bfe4ce7860c1b4f9c597ccb6b1eece508bab0c3096ad8f17ded3b49f8b894c75894870c9b09ba4cde76b28fc7f049f8b14d69452c0da14ee3fb5bd2afe2770559a11724c25af58aee2a7e5ae2f550d7cb7e6b80bfc3cb78e2e743bb81f8132f19b067120ce611ce3793d5c9759272da5456a01ac558af68f4239fb541b6522d68c7d1e716b00f97f415eed26f915e46a545bfef6d5ec817cc45e29cae9f7f48ca13e3be25624adae8ae4ef9185e6d355922bc0a3900ec0ce32e2e0bde5f4f909152a0e9184033326fef405941892724d19c9a4e75cbc735265c8988fef2e136ff02dc723badace38c033ee4b6d107fd4e60f44e17200817150ff6a35a133cbb736624dd21e6ed4ce297eabae532212ccf8332c84e0e1bcea52af061974d488ce20deb22c5efdf90b97c19005064ff0b209cd967b476b04f150a7f2da2ff3decabaea91d99cd22a9411bbd125385e8d27339606067f0ffb3e46e7203dca576662c491f8461fa92a13428ccef531a778ddeb5f48f26ad78a1d2b56a2f784d9a7c1afdb5a6816030a1bcec61db434efbcd969a163344ec44df103c831df5173396e8eda2793b007ffb7f36c87c352b4901ee70f4f48a15dc058f3917f3be94d005428a3c5cbfb1b2ab67a5fceeb5e1fe02cdea3c8a3fd7dbd03dce062a11424330a9efcf35a334294b2f830d4ef6173477a2e9ac7e3852663d680334d7315f1f4329b6e279c932dcf47b70199faa5a6119fa8825ae2a2364caad0b246c71737a28aea723203d5b6197b027522aabea1ffbfbc518b709723137f9163949c66b1cfb632b325cd53b48d0ba63278f9b5c39eba427708b5006efce8f9ad31eae43a274c0b010f67c83308c0d6139ed22b98a8f20ed0c28ef4aec008e6f72c597f7d1d01265b28f98d0ea47288535322fc2364bc98442d1a422bf24ad18cf11cdba44457ebdced89e3a6722f98e87761355feff05546e524cf68952e2c2f25a74484a52b25582f1ea9bd413a955028d86217f245be2a501b56f2ab6cef76b4e95081f66ca9fd1433a3f7fcfe62ca075bb7f88e88659df3c947b4be591122fabee656ffe8b9697d1d0732d4eeba70c4d259e846875d5c12b7aa53fb022a97be7fef9eb026c9b614dee6d55d4a9fd6465f598985bc548e5a8ec049097f439b0511d9d111efec8374464a665cd3b280af01ade585b5c6779598ced525de0a1167192c807bd51d90492623d53c2666a45c840df6071f803885f048841e5a6fdc2d12a6b366c8d1c0fc208ceeba58ca77fc33a96f3027cebcd66f649100f4197b2d8216daee1fa72a1ecaed6dbf0305a2b1297a69cc77eef1e26c98dee5b916b82541b99cc2b4824d8c04cdf97bd8bbfa25574ebc61918a6d4a99f634db6c913847acb10ad8a2201892671e610e7a320d2ae8d90d5a5f0d0d3162f8f0e800c793a958cef0661d628d30a4d1476bb2c698e54c737674e6f708b21f7bc88ac77f39abad20593c6f2b22270ed3d5097661f8831d9ecfca8fc99259115ca3d9392b01785b838d9423b948e98dd155fb01af188a6684204b3f8ab467f96cae3ddd0600f3c4f2a1182124ed1328c69d1cdde0a40b0cc03d2023587772ec5d6f800dd8ad6c73bcb081f192b23b5ba662ff20d09287ebb3a57322195c3094439f6d4cbb5e1363e4792662daf48a2a23f29ca6279274e345b4953096afdf1f38e955b8b0368d9564a1b5d779fd58aaa0a09fbcccb48b51da618ed08544dc80b38e0261d0e754a4d46cbe88ecb367d8a89aa764c0e45b43d016c771e64e33d59210abdf06232a068d1e65453bfb9614096a2080e83ef4dfb8bee1bc6348b1ff0c667598e1eb3f2ad019a2993f27275bddbd032018a8120ec5139ffb997c3d7e017e41f9ec15e2d49e953c748cddc6fd0859a13b04325c2f531215fac0ac11314290ae0c23a9d670bc840905a908d26f2b409cf74dcad24dad3929757d36a5bd7cc2a047749f23faab7063ead96c5659c1bbba20e31f0cc5fd416cd680ec41fca4afe143bbd5a460bdc5955fa68ea27bfba07220cc6a60c0496a2eecd9708d580049d0a7b78faca163c089b3c0e0d603f5750fbc5d0cbb9b8c6bc13510feeea12fbffb0f99f9c7310441295f908164686e6ee6cdd8cd1afe1405948d45c322cb69a88fc1dfee66711ebf366f9b051920425114b082b74da56f599653371e682ff2ef2336390e80ad7b7a736309f04d7ff9873f309206428ee732aa2d078ac11d90b92a94595f55c4199eb5c0142ce35cdf0ff9730716febbe1f9f44a82bd40beeef15968ceae8b2b20ba2f7787f050e278ae4275a509f649e7316a010e5b274d37b6081c31f978f3a6eaa85498a54578938638013ff7bcc2ca75ff2c7c337db2fc9af5e5215b7a8f529165251f697a1251a0b1905b463c2981090420140e870f2a387d7920c02f5362618b52d9ec9953f61d26b14bc39c6ddf83e3e22a33cc34727583e869c980784b0e5c53e84c5994042fe0cca120e57bd7776443bbc116a808dcbaa22bec30fe773a676f81cfee46be064fb65354d1ac26b4f0cc1f7b24520a980ac4e7104db14625310f5190c909d091abf0ebc45f5a0f094af8a7e670000efbe91017e7ab17fba5bb96e06e6269b8371dea79b5a326dbe10f9c0f4701756d8aefff97311d8bd9473f304618d149280e7241a7c38d43ea017692bf39f05c49ee462360e533c6628acbaa2835b7050b3bd720c544083e0646e542d1d62446f7d47f241721cb5b5707ea8c0a4230860b9ed5f9187e8bcea1678b26d2309abca200add53a31b7f8ad8a0eae28e67db350c630cb44f30ddc8d8bd609897eaa151596649a506fbd47dd426dbd4e818c8eef2d956707768e7ebab8e5dc402948fe44e5729ca14581a3406dd70bd15e3d11497bfc870d8cad7968a62641df0f28ee908eae064600f6356db067b1adf57e19c81a5567d1a2abd91c085b410d3f31f8c8cba044eab3f6649b3868db7a0c4fdf6ef4c9c2dd32e6bf1c8f320059033acc1247f8fdd9e027c2e51150aba1286844c7813b71b7e4d68ce56f9b764fae48c4394c44ab50277008bd5d6480830cb8e9e4891ed92aa3731af90cb8d234ea5247be35cf31801a0921dcbb06f96eb4320355f048873b15ddad554c516c494a001e786407a4a7a4aaab89d1df13172313136ae57553de307b9e2a188c1c0a5034b46a58e361c5bde6b3c635e06eaecef73d9b4d98a3920d3188bddd6feaf0cc348928e413b7c38205e10f1fde0446ba3c9a9ef576cee2dd6e02ac458deb19596e674ac6f41c473de00fdaf4f9002e78631f0cb640fac9e26dd5b9519292e4792af18f4b02bf30521af7e7795c438d67d43527a8974265d02ecedb007c249c90b557bc2997f5af0d305ef984ffb4d0474af8d362fe4b51aa8c4e76d6de6f26c67a72ddd146228104961db2167fec0618b71856e53c3070af827f1108550c67f30dc6e5ce9936c1d6bb6fc0b4a2994197530a7edb2048e62440e403eb581541702a9f8e44f0e0b858a1b6f5947d97851b94292deaa6ae6734e794ad00639f4c07805c01b009d63812f7dd29f5c2b451c1553fef4179a8a6cdfbecfaab78b144d214ee121b72afc55e68898fa7697a2c21524027fedd2b364f50a7499b46b134e177df9a4ccab00099d61c8dbbf3b5d2960cbe2d7a92391054196d9bb0fd837fd98e79b57051906987294b18260ee0147108191e25b20a35bed0d5afcc569c6dd665191b99443988e6736e3bb30b4e83d9a2ffd3b8b0a5815c87990520c6dec3f936da878168444c47dffafede878b65a5e0428c333818c52ddeb3250d588c2c371080e4f72a27e367131eb87ae3d019b6d37cbbae917768a796d8fef2b5fc9c7b64665277d9f9280de626f65397fa3ea9b5f121c9b6a7c58fe48626900acc46cde0cd757296f6d5d83ca5f21281e6ac05f164e52089337aac2df0eae1c8f79ea4091475bf72f9c3afefd7a800a5e76677d66ade5ba2adc5a20bbed5e014b3c42c40caa42ea385cfe0fbda7828af5dd447f4e1c4109fa9e07b37013419d7fd06064b761711dc57f6f608e0a37c1fac51761729c74e14e49d9b10e7288810ffac48fa30fe32dd768c3ba0e0f48ed19c57aa70040f91682717f7e91fb3c99f24a7f140edc5c8d5f8e2616b618efe20f45726184290c77b3226b91d994b91716c058f96708d8ff2696ae024c62c8251e5f4016d37297c3a8ff71235ef1e359e7f60cf0e8fa653a3408499068f5dfea68644e67337c851c32aa4b55b5dfcd4c2bdc0b81b93c367ec38ac5bac979da67d10e5fde537b2b1a207a658584ead481ee8dab9ccd6337f564a0a351beda58c7a098ff2af88f09508591e0494f2c30016e658901764aecf3b5b0566590152537899ce58556db54bdc0bb9b775a8dadcc8fc6454a4f591cde7d7bbd85961f6f7ce29bf5c453bb890ba8225f1e3028b1b2d647f6664294539fdda4206249f8f92023d21ff88222fdc5d13c5dde2e97c3a3f057dce890b51da4268c0ee1376daa77f71bab4b06e675801e54cfbcf07128c819fcee59fceb3e257e4ba500435bf5a7285dd0da8b595409928283ab5d492821fbfbc5a1a89d16eb5c2766a8071a22983225903cee14856f8259c0c330bb023dc6a807ac0fab931950f7284af5a3b845f2763a1faa8c6fb7fb1658a0ed2a4f533a948f67eca2fdcd9866eb97611c89018389eae368885c4f6bff2a00e1adf5b891784f35902ffc98f3167042a8a465afa548f0d81382e647700eaeaed80915c1fbe67af26cadf4b42b2e3f65d68ba5bc3740255b88a151b016183e9c94342beef6ccec870bafa2b8a7d3215c98b03310294db55d04384e7e6c37c4ec4fa80a345c76962ca2d50d2612df4c0b75b122b98134d72b04e1cf08323e3f8ef488fb2a58577052bc78044b0f8db55db72833238d316e50f661cc8c6f580cb372dbdd0591fcdd83ea6e872b72663c81baa62641f76692c5e291a3995cdba5f8a343a424d2b149af094a91d4fdb87086dc20ad118349098bd51c13464bcc9901dfaecadf065b6fa118837b865ea918a513a54f6db27abb62da746696cd098a4a9954667107907ac3edcdb29057b59f8306b1886e2cdfdf72b2253c2f433e6c362275e0918bb0daba145a01a9d235b96818b260e6d05bc4de6d87c8252e80b3c450ab0d9439e2dce2cec096c660c979fd66ed0bdc87e5f7d5060500384a881c7088c8c1a175b24f2ba7f12c043ec2ad54f174df93d1420bfd07f792ddd1be569689238da27fc67f167421c03c83ffb3d59e53f5ddc64e1bd40e3583ac7d6e9bf58678db196b7397a0f54a01aa208fca46ac7bfc00e7b1f55fa6e8246867c0446b197e5a2699d45f238af035ca155bbcdd665dcb9b308dfc40858ecab039cd75610804e8b71e6193066703319191f0dcdc5dd555e32ce725fafa6c9d1e08d25475ee4bd73b59781c53fff15fc2ce23b19154cbeca8a697cd58d8633d44fa2878d03e18ef5f06248bef2e454e8d266b7961d9eabbe307b5c085367411fcc02ae6969268059b8b6fb3a1716b45509c0a2814d0e9bc811e14c6457b2b1002b58aca6b9b5ca59d44c72b9804f29df34ebadac514ee7876ea769a62be8e489c02dd61755", @typed={0x14, 0x73, 0x0, 0x0, @ipv6=@remote}, @typed={0x24, 0xd1, 0x0, 0x0, @binary="7b7d5d1d654c28c4809ca42ecaaa2d51783b0ee2b7f9ebb34b5b999045710d0a"}, @nested={0x4, 0x122}, @nested={0x4, 0xfb}, @typed={0x8, 0x1, 0x0, 0x0, @u32=0x401}, @typed={0x8, 0x97, 0x0, 0x0, @fd}]}, @typed={0x8, 0x134, 0x0, 0x0, @ipv4=@local}, @nested={0xe6, 0x22, 0x0, 0x1, [@generic="c9e642c54e4f8e0cf59e046d6a37a482afd6aaf54f0db2a72981fb0510b319b8a59bf7d5910a4b9c23e7766d908b20a6095e8cffa4be1c5c80636c29e25d7f2126a2644c179475ab41198d8b4033dbb67c8551dd11d13cad27d2449ddbd3121d131bae10d3b05700437b520aebcb0381ad1bc458a27befe17273f1aa1f07321da4ebfd574d81fc30997cf87f0c85e9c42afdebfe3350596cad2a287eb2c83e938b39c0f440d775b0eb6a", @typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="a837ad69fc791eff59e4a54dd99dea7a1da876385d5868c6", @nested={0x4, 0x104}, @typed={0x14, 0x9b, 0x0, 0x0, @ipv6=@remote}]}, @generic="020b3e550cba44bc2a9d55a21f89dda0fdfb8a07d8d663b17a3011fd8ff2b6dbff84b4192a2b094214d4620cc656e2a71e872dba759d99238e42b1627644cd32d8b269bcb2e6687d6a964725145a5c01332fa5ebe36231d2f30129ab28f759ac0361bb7a98d65f0015beee1b1273072a58031255bea0c62c0f6f9136822fbce484cbb1ccae7f6e887ca084a6712cebd0835b852d7e23d4a8976dae08c0d45d3bde476d4b65e84a0d12e6e04f31be86151cd6a3a4b4feaa2db91fe3a8cddca8727e39e51243275fe45854108fb06e5a15ad491f49874c599c4cdcee", @generic="b759df119bb6c83bd5ec14cd3d24f3957bbdb5ef3f434335848e9e14726089fcc67b5d5f41e9a5b4e78aba4ba2c071babe7bf959"]}]}, @generic="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"]}, 0x3530}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000040) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x1, 0x0, {0x0, 0x0, 0x0, r12, {0xc}, {0x0, 0x3}, {0xfff3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008044}, 0x8000) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r14}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r15) 9.465855734s ago: executing program 2 (id=2511): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x14, 0x4, 0x200, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 8.391808639s ago: executing program 2 (id=2516): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x9, 0x800000000000, 0x0, 0x0, 0x10, 0x1d, "2401010000000000000d0ec0c100e9b1ab369d03740250ceaac500b1b30000000000000000000000000000000000f0ff00", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d20000000100", "24431a1e58a68e174f0000000000ef8a07580000000000002000", [0x80000000000005]}}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4b05c2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0) connect$inet(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 7.774262822s ago: executing program 7 (id=2519): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2000000080005, 0xffffffd2) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="5c00000012", 0x5}], 0x1, 0x0, 0x1f, 0x1f00c00e}, 0x0) r2 = fanotify_init(0x8, 0x101400) writev(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="191f1c81db764ab5b800040000000400038004000180140002800800050002000000080007002b000000d26d2b4fc4a2ccd9abb2fd423f7721836674bc4a92984c6664ed227856ca8f02bd86f5361a72710c7e5ee8666a1f0eeca1d8c551b520ae6f7656da166d52166fc816086921b68a02"], 0x30}}, 0x0) 7.265066223s ago: executing program 3 (id=2520): r0 = userfaultfd(0x80001) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20000, 0x9, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x40000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0xffffffff, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x180, 0x0, 0xffffffffffffff9c, 0x0) 6.425960987s ago: executing program 7 (id=2522): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$LINK_DETACH(0x22, &(0x7f00000008c0)=r1, 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x1b8, 0x33, 0x8, 0x70bd28, 0x25dfdbfe, {0x1c}, [@generic="fb53a531353bacc9da00fbb74b03cf7831fb5e4f78ea3dc452564636295994d0b33ae0dd16722abb464b30c465f1e1cece281120dcdd6d584931fe44dcea452a497f35864f1b5eebd5e4b7f53b61a6ef0bf18875be34a082560d41a045df9f5d0e6ff1cc5900409ce6b35294b9e01c83b456865c39b139d4c07a716cf4e83f41d0a7fe7a6e30dead5ff1f9f6128e44c287e199ea3de7313ccefefc4bdf30ee5154641204faf58ee9fa927c5aca0c06ee0d3f6f357fb995481d9b99532cb4539aa7b896e8fd9b59b85dd55e2fcced0a955d0d9c1be2796c6d79eb", @generic="aec7f9fa04a32c85cfb1009e77ceac4cee8a5460276a75069fd2dc6922baa161f5a4a39bc5cd2dfde4c67b8d4c9ff388b5e8f7c337bad0f94c213da63bc0c743404f313a78845142423816d31dd02333df7d901c13eed9de68c85d41c7eb93fb5c3ade2ebcf7c18a30191eff670e41576e01fc14ba5ba1bfe3c29f6f524e3d09a44e1101f2fcaa913b7ac32913ae018685f2dd3c4e77e677ad1f4f34bd3c9d0f0a823b0b4bafe7692d30887c8a38a108577997", @typed={0xc, 0xc9, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0xcd, 0x0, 0x0, @u32=0x8}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x48084}, 0x50) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000180)) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="e921f5951e23", 0x0, 0x0, 0x32, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf4240}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xa5}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newtfilter={0x24, 0x11, 0x100, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0x0, 0xffff}, {0x1, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 5.651949681s ago: executing program 3 (id=2524): socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, 0x0) 5.479644315s ago: executing program 3 (id=2526): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x301000, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_uring_enter(0xffffffffffffffff, 0x4cc4, 0xa811, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000200)={0x0, 'veth1_to_bridge\x00', {0x4}, 0x44}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xff7e, 0x1, [0x8]}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xffb) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000040)={0xb}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)) 5.307924861s ago: executing program 6 (id=2527): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.187180134s ago: executing program 6 (id=2529): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e655400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcef"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5.07474484s ago: executing program 7 (id=2530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x101ff, 0x1, 0x80a0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40a040, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) write$binfmt_script(r5, &(0x7f0000000200)={'#! ', '', [], 0xa, "eaab73da33955b4b9394be6df8780822884d3b9fc2caa53362a60839f9234587e2fa000348fcf12c935190f615fd55664494d12524b245dd57870807816f61b3708d514fd8a9d1c13ce7060044922114f5434de67510ce915cbbc056dac2cc2dda"}, 0x65) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_create_chunk\x00', r5, 0x0, 0xd}, 0x18) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x7, 0x2) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0x4c80, &(0x7f0000000500)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b1fac57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000665988ad55f281047000000000000000003000000000100", "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"}) setsockopt$inet_tcp_int(r7, 0x6, 0x6, &(0x7f0000000280)=0x7a, 0xffffffffffffff5c) bind$inet(r7, &(0x7f0000001c00)={0x2, 0xce23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000100)=0x417, 0x4) connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) 4.952034292s ago: executing program 6 (id=2531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0xf360, 0x1880, 0x8000002}) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x5, 0x1, 0x7f, 0x3, 0x3, 0x3e, 0x6, 0x159, 0x40, 0x2a4, 0x3, 0x2, 0x38, 0x2, 0x5, 0x8000, 0x3}, [{0x3, 0x1b4c1f39, 0x7, 0x10, 0x5, 0x80, 0x2, 0xffffffffffffffff}, {0x3, 0x1c39, 0x9, 0x7, 0x3, 0x5, 0x100000001, 0x8ad6}], "59cd7cd31e2b0db0380e1470f5f9ff21523dc5a46b37e9e9927598252d000a7ce1ff0bf93c61a530c9f34b20423ec9d419e6e8939a5528c565b97e3e1224215b453d05dad0df11146853ce7269b9c541fd006700ec14279538360dca38a55858802e577b6479c80de46512e28f24c80d8d7c6ab2dffdec3ee57b03acf79a36f0292c190e4ad14da5d6b6360778aeb2327dcfad99a15499ff60e834bc1268b5b238833a72dfca07809b18d7144b90dfbdad99c60a13bdfc4d1897fe352ab8c1f0dc1570171b885def5d249a0e"}, 0x17c) ftruncate(r1, 0x51a9497) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000580)=""/179) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.811841828s ago: executing program 5 (id=2532): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2000000080005, 0xffffffd2) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="5c00000012", 0x5}], 0x1, 0x0, 0x1f, 0x1f00c00e}, 0x0) r2 = fanotify_init(0x8, 0x101400) writev(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="191f1c81db764ab5b800040000000400038004000180140002800800050002000000080007002b000000d26d2b4fc4a2ccd9abb2fd423f7721836674bc4a92984c6664ed227856ca8f02bd86f5361a72710c7e5ee8666a1f0eeca1d8c551b520ae6f7656da166d52166fc816086921b68a02"], 0x30}}, 0x0) 4.289030513s ago: executing program 6 (id=2533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x88, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x60, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x88}}, 0x0) (fail_nth: 6) 3.750867596s ago: executing program 6 (id=2534): ioperm(0x0, 0x9, 0x5) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0x19, 0x0, 0x0, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 3.667970999s ago: executing program 2 (id=2535): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x5e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000100)={0x20, 0x17, 0x6, "da2f4ab1a674"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x260041, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40603d07, &(0x7f0000000040)={0x0, 0x4}) r5 = io_uring_setup(0x424c, &(0x7f00000004c0)={0x0, 0xad41, 0x2, 0x3, 0x161}) r6 = eventfd2(0x28ea, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000540)=r6, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/3, 0x3}, 0x101}, {{&(0x7f00000012c0)=@ll, 0x80, &(0x7f0000000480)=[{&(0x7f0000001340)=""/48, 0x30}], 0x1, &(0x7f00000013c0)=""/164, 0xa4}, 0x7}, {{&(0x7f0000001480)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001500)=""/181, 0xb5}, {&(0x7f00000015c0)=""/234, 0xea}, {&(0x7f0000000540)=""/59, 0x3b}, {&(0x7f00000016c0)=""/67, 0x43}, {&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000001840)=""/82, 0x52}, {&(0x7f0000000580)=""/179, 0xb3}, {&(0x7f0000001980)=""/179, 0xb3}], 0x8}, 0x5}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)=""/196, 0xc4}, {&(0x7f0000000780)=""/50, 0x32}], 0x2, &(0x7f0000001c00)=""/199, 0xc7}, 0x3}, {{&(0x7f0000001d00)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001d80)=""/76, 0x4c}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/137, 0x89}, {&(0x7f0000001f00)=""/13, 0xd}, {&(0x7f0000001f40)=""/225, 0xe1}, {&(0x7f00000004c0)=""/109, 0x6d}], 0x7, &(0x7f0000002140)=""/237, 0xed}, 0xd748}, {{&(0x7f0000002240)=@isdn, 0x80, &(0x7f0000000700)=[{&(0x7f00000022c0)=""/88, 0x58}, {&(0x7f0000002340)=""/131, 0x83}, {&(0x7f00000007c0)=""/234, 0xea}, {&(0x7f0000002500)=""/196, 0xc4}, {&(0x7f0000000640)=""/136, 0x88}, {&(0x7f0000003900)=""/4085, 0xff5}, {&(0x7f0000001e00)=""/44, 0xfffffd30}], 0x7, &(0x7f00000003c0)=""/91, 0x5b}, 0x9}], 0x6, 0x60010020, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) 3.66745227s ago: executing program 6 (id=2536): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000200)="7a1a", 0x2}], 0x1) syz_usb_connect$uac1(0x1, 0xd2, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x9, 0xd0, 0xaf, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xff}, [@extension_unit={0xb, 0x24, 0x8, 0x3, 0x7fff, 0x6, "2f6aee03"}, @extension_unit={0xd, 0x24, 0x8, 0x4, 0x0, 0xcb, "5ebe7d331157"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7f, 0x4, 0x0, {0x7, 0x25, 0x1, 0x82, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x237, 0x3, "ba4767"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0xc, 0x3, "", "4df00f"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x6, "a5", 'Y'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0xf, 0x55, 0xf, '>w'}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0xe, 0x6, "01f17848237865e4f0"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x10, 0x2, 0xe0, 0x5, "457ea5", '6'}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x6, 0x5, 0x0, {0x7, 0x25, 0x1, 0x1, 0x4d, 0x8}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x210, 0x6, 0x2, 0x0, 0x10, 0x9}, 0x152, &(0x7f0000000340)={0x5, 0xf, 0x152, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x5, 0xf, 0x3, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "d5020da90c91bc287f44a3958863bff7"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x10, 0xfff}, @generic={0xb5, 0x10, 0xb, "6789afe79bc4562303e5d3bc1d499ed8fd40c23b9736ceb9cf35e845d3135d9b1f58dc582ed618d64ec4feecefa4ab666438f52e7b7092585b016aee81baa60bb75faa360606dba08e3b9f017cf6b60f86887cf2ba7b5ac60e27026e46a8102a019a1cb740a19b8436d641807578740adb03a53122cbddc763a912c5f545f9341200c8e52166239f066df7c908c675d20409ba6e0bd0fa00bf957c9367b5df22293b1a05482dba81bc7493efbf9b89d2d458"}, @generic={0x6f, 0x10, 0xa, "ba5bd8c8b346631ebf321a58b31d71d52cbe9cc4e9e8282e4f3f76381bd5876a8d017e9ae42e20b2dff344483ce79f7f2cbe5f4737074e1622dfc3f6778246dd7b2ff1869dfa9cbd34853530c5d2ad9015d11fe2a24bb0bf8a0ae21d04e53f17003c803dddeaeffd863d4060"}]}, 0x4, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x100c}}, {0xbb, &(0x7f0000000500)=@string={0xbb, 0x3, "d03a04e3bba3cbfd13aff6cf0876bc90d404fb33614566f6a80f4cec739855fae9e1c6dbc72c10d79ced8836c208922f7d78a687c8259284df2267e4e36f709a6a050b0b6d7b3c44fd0ab0286a92eedcd65582e2b9f8bb800f984b6aedabb0ddd45b1f07f6a5fb03ded2f051b95f6111d899777db38c9d7095f41753fdeea15fbf04139bb65a301891dde9c7781fd0a06c641f7747598abc412acd1c9f02dcec8c9651acbed71144ef14e21d274a3a858281a5e4c04b12291a"}}]}) 3.666455164s ago: executing program 5 (id=2537): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = fsopen(&(0x7f0000000500)='pstore\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='\xd1S{O', &(0x7f0000000080)='\x1e\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001600)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\x04[\x02\xa9[>\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', &(0x7f0000000340)='\xd1S{O', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000014b315983938ac741ea6625ae89c45429c9c4a95c43dd38cc4b83ad5f7ce12798af5b10bb49e8e734fbba1ed93d0b784149dad2658fca4b534364a273104cfb179779c87"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xc0ff}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x9}, 0x20) 3.566398622s ago: executing program 7 (id=2538): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0xa740, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet(0x2, 0x2, 0x1) bind$inet(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) timerfd_create(0x8, 0x80800) r7 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r7, r7, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d0001000000000004", @ANYRES32=r8], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x480c4}, 0xcc) socket$nl_generic(0x10, 0x3, 0x10) r9 = timerfd_create(0x0, 0x0) timerfd_settime(r9, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 2.372046852s ago: executing program 7 (id=2539): r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x1, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.242066653s ago: executing program 5 (id=2540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_exit\x00', r1, 0x0, 0x4000000000000004}, 0x18) mq_timedreceive(0xffffffffffffffff, 0x0, 0x1100, 0x8000, 0xffffffffffffffff) 2.041375724s ago: executing program 3 (id=2541): socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x1], [0x20000000, 0x500, 0x4], [0x3]], '\x00', [{0xfffffffe, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}], '\x00', 0x6b4}) creat(0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x28, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000540), 0x0, 0x2, 0x0, 0x0, r4}) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 1.9915848s ago: executing program 5 (id=2542): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r2) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(r2, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x2}], 0xc}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000001000000000300000000000000000000000000000200000000000000000000000602"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819275de7a4975a52c1ab9b8b4db3945d1032005ef5597b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab16780d1cf1538cd0b43e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f4647bf9e343ef4674c45e2a085060f1100000000000000", 0xc2}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.848859756s ago: executing program 5 (id=2543): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ptrace$setsig(0x4203, 0x0, 0x6b82, &(0x7f0000000340)={0x3b, 0xb, 0x20000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x100, &(0x7f0000131000/0x3000)=nil, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port0\x00', 0xe3, 0x1b1c07, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x240bf, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="08009f00020000000800260080090000"], 0x2c}}, 0x0) 987.677321ms ago: executing program 7 (id=2544): ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fa8000000000000000060000d029aef8fe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) recvmmsg$unix(r2, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) io_setup(0x5, &(0x7f0000000740)) 901.871202ms ago: executing program 3 (id=2545): openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x5, 0x0) r0 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xf1aa, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) clock_gettime(0x0, &(0x7f00000005c0)) clock_gettime(0x6, &(0x7f0000000280)) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 901.228098ms ago: executing program 5 (id=2546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@fallback=0xffffffffffffffff, 0x1d, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f000027e000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000340)="0fc79fc83766b95e0b000066b813c1000066ba000000000f30f20f2db00000b89c000f00d866b92409000066b89fc9000066ba000000000f300f684b00670fdf12baa000b085ee9ab600640036f30f1efa", 0x51}], 0x1, 0x24, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20081c}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x80000400000bce) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007e00), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000600)=""/266, 0x10a}], 0x1, 0x1fc, 0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x25, 0x5, 0x8, &(0x7f0000000040)) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000000c0)=0xfffffffc, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 94.297975ms ago: executing program 3 (id=2547): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2000000080005, 0xffffffd2) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="5c00000012", 0x5}], 0x1, 0x0, 0x1f, 0x1f00c00e}, 0x0) r2 = fanotify_init(0x8, 0x101400) writev(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="191f1c81db764ab5b800040000000400038004000180140002800800050002000000080007002b000000d26d2b4fc4a2ccd9abb2fd423f7721836674bc4a92984c6664ed227856ca8f02bd86f5361a72710c7e5ee8666a1f0eeca1d8c551b520ae6f7656da166d52166fc816086921b68a02"], 0x30}}, 0x0) 0s ago: executing program 2 (id=2548): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x0, 0xfff0}, 'syz1\x00', 0xd}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x7, 0xd, 0x2, 0x6}, 'syz1\x00', 0x49}) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x0, 0x4}, 0x10) kernel console output (not intermixed with test programs): 0 [ 819.861711][T13640] ? __pfx___split_vma+0x10/0x10 [ 819.861738][T13640] ? mas_find+0x950/0xbb0 [ 819.861765][T13640] vms_gather_munmap_vmas+0x4c1/0x1600 [ 819.861812][T13640] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 819.861841][T13640] ? mas_find+0x8c0/0xbb0 [ 819.861868][T13640] mmap_region+0xa32/0x2f80 [ 819.861897][T13640] ? irqentry_exit+0x63/0x90 [ 819.861930][T13640] ? mark_lock+0x9a/0x360 [ 819.861958][T13640] ? __pfx_mmap_region+0x10/0x10 [ 819.862024][T13640] ? mark_lock+0x9a/0x360 [ 819.862048][T13640] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 819.862072][T13640] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 819.862098][T13640] ? irqentry_exit+0x63/0x90 [ 819.862117][T13640] ? lockdep_hardirqs_on+0x99/0x150 [ 819.862146][T13640] ? file_mmap_ok+0x50/0x170 [ 819.862167][T13640] ? do_mmap+0x89d/0x13a0 [ 819.862191][T13640] ? __sanitizer_cov_trace_switch+0xe/0x120 [ 819.862210][T13640] ? shmem_mapping+0xd/0x50 [ 819.862237][T13640] do_mmap+0xecc/0x13a0 [ 819.862265][T13640] ? ima_file_mmap+0x17e/0x220 [ 819.862290][T13640] ? __pfx_do_mmap+0x10/0x10 [ 819.862310][T13640] ? down_write_killable+0x19e/0x260 [ 819.862333][T13640] ? vm_mmap_pgoff+0x182/0x430 [ 819.862357][T13640] ? __pfx_down_write_killable+0x10/0x10 [ 819.862388][T13640] vm_mmap_pgoff+0x214/0x430 [ 819.862423][T13640] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 819.862446][T13640] ? __rcu_read_unlock+0xa1/0x110 [ 819.862464][T13640] ? __fget_files+0x2a/0x410 [ 819.862487][T13640] ? __fget_files+0x395/0x410 [ 819.862506][T13640] ? __fget_files+0x2a/0x410 [ 819.862531][T13640] ksys_mmap_pgoff+0x4eb/0x720 [ 819.862554][T13640] ? __x64_sys_mmap+0x7f/0x140 [ 819.862579][T13640] do_syscall_64+0xf3/0x230 [ 819.862600][T13640] ? clear_bhb_loop+0x35/0x90 [ 819.862625][T13640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.862646][T13640] RIP: 0033:0x7f3bf718cde9 [ 819.862662][T13640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.862676][T13640] RSP: 002b:00007f3bf8070038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 819.862694][T13640] RAX: ffffffffffffffda RBX: 00007f3bf73a6160 RCX: 00007f3bf718cde9 [ 819.862707][T13640] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 00002000005b1000 [ 819.862719][T13640] RBP: 00007f3bf8070090 R08: 0000000000000008 R09: 0000000000000000 [ 819.862729][T13640] R10: 0000000000021011 R11: 0000000000000246 R12: 0000000000000001 [ 819.862740][T13640] R13: 0000000000000000 R14: 00007f3bf73a6160 R15: 00007ffd141f9748 [ 819.862767][T13640] [ 820.643424][T12696] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 251, using maximum allowed: 30 [ 820.795519][T12696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.822029][T12696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.872770][T12696] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 820.910252][T12696] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 821.104041][T12696] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.501939][T12696] usb 6-1: config 0 descriptor?? [ 821.602602][T13654] mkiss: ax0: crc mode is auto. [ 821.617404][T13655] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2096'. [ 821.671577][T13655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2096'. [ 821.712195][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 821.712213][ T29] audit: type=1326 audit(1738996036.463:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13651 comm="syz.3.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf718cde9 code=0x7ffc0000 [ 821.942297][T13662] FAULT_INJECTION: forcing a failure. [ 821.942297][T13662] name failslab, interval 1, probability 0, space 0, times 0 [ 821.953613][ T29] audit: type=1326 audit(1738996036.501:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13651 comm="syz.3.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3bf718cde9 code=0x7ffc0000 [ 822.031766][ T29] audit: type=1326 audit(1738996036.501:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13651 comm="syz.3.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf718cde9 code=0x7ffc0000 [ 822.056377][T13662] CPU: 0 UID: 0 PID: 13662 Comm: syz.7.2099 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 822.056409][T13662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 822.056419][T13662] Call Trace: [ 822.056426][T13662] [ 822.056434][T13662] dump_stack_lvl+0x241/0x360 [ 822.056467][T13662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 822.056490][T13662] ? __pfx__printk+0x10/0x10 [ 822.056513][T13662] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 822.056535][T13662] ? __pfx___might_resched+0x10/0x10 [ 822.056556][T13662] should_fail_ex+0x40a/0x550 [ 822.056579][T13662] should_failslab+0xac/0x100 [ 822.056600][T13662] __kmalloc_node_noprof+0xe1/0x4d0 [ 822.056619][T13662] ? __kvmalloc_node_noprof+0x72/0x190 [ 822.056645][T13662] __kvmalloc_node_noprof+0x72/0x190 [ 822.056666][T13662] tun_attach+0x8bd/0x15a0 [ 822.056683][T13662] ? rcu_is_watching+0x15/0xb0 [ 822.056714][T13662] ? bpf_lsm_capable+0x9/0x10 [ 822.056732][T13662] ? security_capable+0x7e/0x2d0 [ 822.056752][T13662] ? ns_capable+0x8a/0xf0 [ 822.056775][T13662] tun_set_iff+0x473/0xe80 [ 822.056794][T13662] ? tun_get+0x27d/0x2f0 [ 822.056819][T13662] __tun_chr_ioctl+0x863/0x2400 [ 822.056848][T13662] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 822.056881][T13662] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 822.056905][T13662] __se_sys_ioctl+0xf5/0x170 [ 822.056926][T13662] do_syscall_64+0xf3/0x230 [ 822.056948][T13662] ? clear_bhb_loop+0x35/0x90 [ 822.056973][T13662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.056993][T13662] RIP: 0033:0x7f345b18cde9 [ 822.057009][T13662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.057023][T13662] RSP: 002b:00007f345bf2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 822.057042][T13662] RAX: ffffffffffffffda RBX: 00007f345b3a5fa0 RCX: 00007f345b18cde9 [ 822.057055][T13662] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 822.057067][T13662] RBP: 00007f345bf2c090 R08: 0000000000000000 R09: 0000000000000000 [ 822.057078][T13662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.057088][T13662] R13: 0000000000000000 R14: 00007f345b3a5fa0 R15: 00007ffe31a60388 [ 822.057115][T13662] [ 822.296871][ T29] audit: type=1326 audit(1738996036.501:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13651 comm="syz.3.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bf718cde9 code=0x7ffc0000 [ 822.343052][ T29] audit: type=1326 audit(1738996036.501:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13651 comm="syz.3.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf718cde9 code=0x7ffc0000 [ 822.413564][ T29] audit: type=1326 audit(1738996036.501:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13651 comm="syz.3.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3bf718cde9 code=0x7ffc0000 [ 822.425030][T12696] koneplus 0003:1E7D:2D51.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 822.640772][ T29] audit: type=1326 audit(1738996036.501:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13651 comm="syz.3.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf718cde9 code=0x7ffc0000 [ 822.675008][T13675] input: syz1 as /devices/virtual/input/input55 [ 822.694922][T12696] usb 6-1: USB disconnect, device number 37 [ 822.707884][ T29] audit: type=1326 audit(1738996036.501:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13651 comm="syz.3.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3bf718cde9 code=0x7ffc0000 [ 822.776806][ T29] audit: type=1326 audit(1738996036.697:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13651 comm="syz.3.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf718cde9 code=0x7ffc0000 [ 822.842027][ T29] audit: type=1326 audit(1738996036.697:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13651 comm="syz.3.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bf718cde9 code=0x7ffc0000 [ 822.997073][ T5905] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 823.030952][T13687] FAULT_INJECTION: forcing a failure. [ 823.030952][T13687] name failslab, interval 1, probability 0, space 0, times 0 [ 823.049191][T11778] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 823.219094][T13687] CPU: 1 UID: 0 PID: 13687 Comm: syz.6.2104 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 823.219121][T13687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 823.219131][T13687] Call Trace: [ 823.219137][T13687] [ 823.219145][T13687] dump_stack_lvl+0x241/0x360 [ 823.219176][T13687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 823.219201][T13687] ? __pfx__printk+0x10/0x10 [ 823.219238][T13687] should_fail_ex+0x40a/0x550 [ 823.219263][T13687] should_failslab+0xac/0x100 [ 823.219282][T13687] ? skb_clone+0x20c/0x390 [ 823.219298][T13687] kmem_cache_alloc_noprof+0x70/0x380 [ 823.219330][T13687] skb_clone+0x20c/0x390 [ 823.219356][T13687] __netlink_deliver_tap+0x3cc/0x7f0 [ 823.219384][T13687] ? netlink_deliver_tap+0x2e/0x1b0 [ 823.219402][T13687] netlink_deliver_tap+0x19d/0x1b0 [ 823.219420][T13687] netlink_unicast+0x7c4/0x990 [ 823.219451][T13687] ? __pfx_netlink_unicast+0x10/0x10 [ 823.219471][T13687] ? __virt_addr_valid+0x45f/0x530 [ 823.219494][T13687] ? __phys_addr_symbol+0x2f/0x70 [ 823.219514][T13687] ? __check_object_size+0x47a/0x730 [ 823.219538][T13687] netlink_sendmsg+0x8e4/0xcb0 [ 823.219567][T13687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.219594][T13687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.219609][T13687] __sock_sendmsg+0x221/0x270 [ 823.219633][T13687] ____sys_sendmsg+0x52a/0x7e0 [ 823.219660][T13687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 823.219675][T13687] ? __fget_files+0x2a/0x410 [ 823.219699][T13687] ? __fget_files+0x2a/0x410 [ 823.219728][T13687] __sys_sendmsg+0x269/0x350 [ 823.219751][T13687] ? __pfx___sys_sendmsg+0x10/0x10 [ 823.219782][T13687] ? do_sys_openat2+0x17a/0x1d0 [ 823.219829][T13687] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 823.219852][T13687] ? do_syscall_64+0x100/0x230 [ 823.219877][T13687] ? do_syscall_64+0xb6/0x230 [ 823.219901][T13687] do_syscall_64+0xf3/0x230 [ 823.219922][T13687] ? clear_bhb_loop+0x35/0x90 [ 823.219947][T13687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.219967][T13687] RIP: 0033:0x7fda4038cde9 [ 823.219983][T13687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 823.219997][T13687] RSP: 002b:00007fda4114e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.220015][T13687] RAX: ffffffffffffffda RBX: 00007fda405a5fa0 RCX: 00007fda4038cde9 [ 823.220028][T13687] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 823.220039][T13687] RBP: 00007fda4114e090 R08: 0000000000000000 R09: 0000000000000000 [ 823.220050][T13687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.220059][T13687] R13: 0000000000000000 R14: 00007fda405a5fa0 R15: 00007fffd18541b8 [ 823.220087][T13687] [ 823.232253][ T5905] usb 8-1: Using ep0 maxpacket: 8 [ 823.739636][ T5905] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 823.792375][ T5905] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 824.317552][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 824.491967][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 825.478091][ T5905] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 825.508642][ T5905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.558553][ T5905] usb 8-1: Product: syz [ 825.581664][ T5905] usb 8-1: Manufacturer: syz [ 825.603812][ T5905] usb 8-1: SerialNumber: syz [ 825.634408][ T5905] usb 8-1: config 0 descriptor?? [ 825.651308][T13678] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 825.830136][T12696] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 825.888387][ T5905] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 825.899483][T11778] usb 4-1: unable to get BOS descriptor or descriptor too short [ 825.907831][T11778] usb 4-1: too many configurations: 182, using maximum allowed: 8 [ 825.920046][T11778] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 825.933158][T11778] usb 4-1: can't read configurations, error -71 [ 825.947191][ T5905] input: Griffin SoundKnob as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input56 [ 825.990499][T12696] usb 7-1: device descriptor read/64, error -71 [ 827.316083][T12696] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 827.746591][ C0] powermate: config urb returned -71 [ 827.752278][ C0] powermate: config urb returned -71 [ 827.757815][ C0] powermate: config urb returned -71 [ 827.768436][T12696] usb 7-1: device descriptor read/64, error -71 [ 827.797428][T12331] usb 8-1: USB disconnect, device number 2 [ 827.803306][ C0] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 827.919035][T12696] usb usb7-port1: attempt power cycle [ 828.438659][T12696] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 828.505690][T12696] usb 7-1: device descriptor read/8, error -71 [ 828.781991][T12696] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 829.069386][T12696] usb 7-1: device not accepting address 27, error -71 [ 829.198206][T12696] usb usb7-port1: unable to enumerate USB device [ 829.485204][T13757] FAULT_INJECTION: forcing a failure. [ 829.485204][T13757] name failslab, interval 1, probability 0, space 0, times 0 [ 829.498067][T13757] CPU: 0 UID: 0 PID: 13757 Comm: syz.6.2118 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 829.498090][T13757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 829.498100][T13757] Call Trace: [ 829.498108][T13757] [ 829.498116][T13757] dump_stack_lvl+0x241/0x360 [ 829.498149][T13757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 829.498174][T13757] ? __pfx__printk+0x10/0x10 [ 829.498212][T13757] should_fail_ex+0x40a/0x550 [ 829.498237][T13757] should_failslab+0xac/0x100 [ 829.498259][T13757] ? skb_clone+0x20c/0x390 [ 829.498275][T13757] kmem_cache_alloc_noprof+0x70/0x380 [ 829.498302][T13757] skb_clone+0x20c/0x390 [ 829.498324][T13757] __netlink_deliver_tap+0x3cc/0x7f0 [ 829.498352][T13757] ? netlink_deliver_tap+0x2e/0x1b0 [ 829.498368][T13757] netlink_deliver_tap+0x19d/0x1b0 [ 829.498386][T13757] netlink_unicast+0x7c4/0x990 [ 829.498417][T13757] ? __pfx_netlink_unicast+0x10/0x10 [ 829.498440][T13757] ? __check_object_size+0x467/0x730 [ 829.498458][T13757] ? __check_object_size+0x47a/0x730 [ 829.498484][T13757] netlink_sendmsg+0x8e4/0xcb0 [ 829.498513][T13757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 829.498543][T13757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 829.498558][T13757] __sock_sendmsg+0x221/0x270 [ 829.498583][T13757] ____sys_sendmsg+0x52a/0x7e0 [ 829.498609][T13757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 829.498624][T13757] ? __fget_files+0x2a/0x410 [ 829.498648][T13757] ? __fget_files+0x2a/0x410 [ 829.498678][T13757] __sys_sendmsg+0x269/0x350 [ 829.498701][T13757] ? __pfx___sys_sendmsg+0x10/0x10 [ 829.498745][T13757] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 829.498794][T13757] do_syscall_64+0xf3/0x230 [ 829.498816][T13757] ? clear_bhb_loop+0x35/0x90 [ 829.498841][T13757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.498869][T13757] RIP: 0033:0x7fda4038cde9 [ 829.498885][T13757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.498900][T13757] RSP: 002b:00007fda4110c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.498918][T13757] RAX: ffffffffffffffda RBX: 00007fda405a6160 RCX: 00007fda4038cde9 [ 829.498931][T13757] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 829.498942][T13757] RBP: 00007fda4110c090 R08: 0000000000000000 R09: 0000000000000000 [ 829.498953][T13757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.498964][T13757] R13: 0000000000000000 R14: 00007fda405a6160 R15: 00007fffd18541b8 [ 829.498991][T13757] [ 830.203224][ T5905] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 830.443564][ T5905] usb 3-1: config 252 has an invalid interface number: 12 but max is 0 [ 830.526065][ T5905] usb 3-1: config 252 has no interface number 0 [ 830.546830][ T5905] usb 3-1: New USB device found, idVendor=7392, idProduct=a611, bcdDevice=70.dc [ 830.601542][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.641719][ T5905] usb 3-1: Product: syz [ 830.645929][ T5905] usb 3-1: Manufacturer: syz [ 830.682725][ T5905] usb 3-1: SerialNumber: syz [ 831.635196][T11778] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 831.829174][T11778] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.845947][T11778] usb 4-1: config 0 has no interfaces? [ 831.854412][T11778] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 831.871786][T11778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.879925][T11778] usb 4-1: Product: syz [ 831.890295][T11778] usb 4-1: Manufacturer: syz [ 831.896159][T11778] usb 4-1: SerialNumber: syz [ 831.909570][T11778] usb 4-1: config 0 descriptor?? [ 832.016999][ T5905] usb 3-1: USB disconnect, device number 54 [ 832.048663][T13786] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2128'. [ 832.214938][T12713] usb 4-1: USB disconnect, device number 50 [ 833.057328][T12696] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 833.790328][T12696] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 833.840524][T12696] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.948282][T12696] usb 7-1: config 0 descriptor?? [ 834.871311][T12696] cp210x 7-1:0.0: cp210x converter detected [ 835.066045][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2137'. [ 835.080702][ T98] block nbd0: Possible stuck request ffff888025770000: control (read@0,4096B). Runtime 360 seconds [ 835.112056][T13798] netlink: 628 bytes leftover after parsing attributes in process `syz.6.2132'. [ 835.168489][T13824] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2139'. [ 835.688797][T12696] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 835.709433][T12696] cp210x 7-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 835.719017][T12696] cp210x 7-1:0.0: GPIO initialisation failed: -121 [ 835.729614][T12696] usb 7-1: cp210x converter now attached to ttyUSB0 [ 836.239219][T13843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 837.225067][T12696] usb 7-1: USB disconnect, device number 28 [ 837.290886][T12696] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 837.298927][T12696] cp210x 7-1:0.0: device disconnected [ 838.058923][T13861] FAULT_INJECTION: forcing a failure. [ 838.058923][T13861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 838.072047][T13861] CPU: 1 UID: 0 PID: 13861 Comm: syz.3.2145 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 838.072062][T13861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 838.072068][T13861] Call Trace: [ 838.072072][T13861] [ 838.072077][T13861] dump_stack_lvl+0x241/0x360 [ 838.072097][T13861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 838.072112][T13861] ? __pfx__printk+0x10/0x10 [ 838.072129][T13861] ? snprintf+0xda/0x120 [ 838.072141][T13861] should_fail_ex+0x40a/0x550 [ 838.072155][T13861] _copy_to_user+0x31/0xb0 [ 838.072171][T13861] simple_read_from_buffer+0xca/0x150 [ 838.072184][T13861] proc_fail_nth_read+0x1e9/0x250 [ 838.072197][T13861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 838.072210][T13861] ? rw_verify_area+0x243/0x630 [ 838.072224][T13861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 838.072236][T13861] vfs_read+0x1f8/0xb40 [ 838.072251][T13861] ? fdget_pos+0x254/0x320 [ 838.072264][T13861] ? __pfx___mutex_lock+0x10/0x10 [ 838.072282][T13861] ? __pfx_vfs_read+0x10/0x10 [ 838.072297][T13861] ? __fget_files+0x2a/0x410 [ 838.072310][T13861] ? __fget_files+0x395/0x410 [ 838.072321][T13861] ? __fget_files+0x2a/0x410 [ 838.072337][T13861] ksys_read+0x18f/0x2b0 [ 838.072348][T13861] ? __pfx_ksys_read+0x10/0x10 [ 838.072357][T13861] ? do_syscall_64+0x100/0x230 [ 838.072372][T13861] ? do_syscall_64+0xb6/0x230 [ 838.072386][T13861] do_syscall_64+0xf3/0x230 [ 838.072398][T13861] ? clear_bhb_loop+0x35/0x90 [ 838.072413][T13861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.072425][T13861] RIP: 0033:0x7f3bf718b7fc [ 838.072434][T13861] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 838.072443][T13861] RSP: 002b:00007f3bf8091030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 838.072454][T13861] RAX: ffffffffffffffda RBX: 00007f3bf73a6080 RCX: 00007f3bf718b7fc [ 838.072461][T13861] RDX: 000000000000000f RSI: 00007f3bf80910a0 RDI: 0000000000000007 [ 838.072467][T13861] RBP: 00007f3bf8091090 R08: 0000000000000000 R09: 0000000000000000 [ 838.072473][T13861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.072479][T13861] R13: 0000000000000000 R14: 00007f3bf73a6080 R15: 00007ffd141f9748 [ 838.072494][T13861] [ 838.305995][T12331] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 838.520003][T12331] usb 8-1: Using ep0 maxpacket: 16 [ 838.606672][T12331] usb 8-1: config 0 has an invalid interface number: 4 but max is 0 [ 838.751703][T12331] usb 8-1: config 0 has no interface number 0 [ 838.966695][T12331] usb 8-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.247457][T12696] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 839.287671][T13872] overlayfs: missing 'lowerdir' [ 839.468765][T12331] usb 8-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.503609][T12331] usb 8-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 839.512701][T12331] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.575896][T12331] usb 8-1: config 0 descriptor?? [ 839.655040][T12696] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 839.680338][T12696] usb 7-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 839.697476][T12696] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.724234][T12696] usb 7-1: Product: syz [ 839.734099][T12696] usb 7-1: Manufacturer: syz [ 839.742695][T12696] usb 7-1: SerialNumber: syz [ 840.006266][ T5873] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 840.076103][T13890] FAULT_INJECTION: forcing a failure. [ 840.076103][T13890] name failslab, interval 1, probability 0, space 0, times 0 [ 840.089226][T13890] CPU: 1 UID: 0 PID: 13890 Comm: syz.3.2153 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 840.089248][T13890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 840.089260][T13890] Call Trace: [ 840.089267][T13890] [ 840.089275][T13890] dump_stack_lvl+0x241/0x360 [ 840.089307][T13890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 840.089331][T13890] ? __pfx__printk+0x10/0x10 [ 840.089366][T13890] should_fail_ex+0x40a/0x550 [ 840.089399][T13890] should_failslab+0xac/0x100 [ 840.089421][T13890] ? skb_clone+0x20c/0x390 [ 840.089437][T13890] kmem_cache_alloc_noprof+0x70/0x380 [ 840.089465][T13890] skb_clone+0x20c/0x390 [ 840.089480][T13890] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 840.089506][T13890] dev_queue_xmit_nit+0x249/0xca0 [ 840.089530][T13890] ? dev_queue_xmit_nit+0x2b/0xca0 [ 840.089554][T13890] ? validate_xmit_skb+0x9b8/0xff0 [ 840.089577][T13890] dev_hard_start_xmit+0x15f/0x7d0 [ 840.089595][T13890] ? __pfx_validate_xmit_skb+0x10/0x10 [ 840.089623][T13890] __dev_queue_xmit+0x1b73/0x3f50 [ 840.089640][T13890] ? kasan_save_track+0x51/0x80 [ 840.089662][T13890] ? __sys_sendto+0x363/0x4c0 [ 840.089691][T13890] ? __dev_queue_xmit+0x2f4/0x3f50 [ 840.089713][T13890] ? __pfx___dev_queue_xmit+0x10/0x10 [ 840.089747][T13890] ? __copy_skb_header+0x437/0x5b0 [ 840.089766][T13890] ? __asan_memcpy+0x40/0x70 [ 840.089790][T13890] ? __copy_skb_header+0x437/0x5b0 [ 840.089811][T13890] ? __skb_clone+0x454/0x6c0 [ 840.089837][T13890] ? skb_clone+0x240/0x390 [ 840.089858][T13890] __netlink_deliver_tap+0x56b/0x7f0 [ 840.089887][T13890] ? netlink_deliver_tap+0x2e/0x1b0 [ 840.089903][T13890] netlink_deliver_tap+0x19d/0x1b0 [ 840.089921][T13890] netlink_unicast+0x7c4/0x990 [ 840.089953][T13890] ? __pfx_netlink_unicast+0x10/0x10 [ 840.089973][T13890] ? security_netlink_send+0x220/0x280 [ 840.089995][T13890] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 840.090036][T13890] netlink_sendmsg+0x8e4/0xcb0 [ 840.090067][T13890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.090097][T13890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.090113][T13890] __sock_sendmsg+0x221/0x270 [ 840.090136][T13890] __sys_sendto+0x363/0x4c0 [ 840.090165][T13890] ? __pfx___sys_sendto+0x10/0x10 [ 840.090202][T13890] ? __fget_files+0x2a/0x410 [ 840.090233][T13890] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 840.090258][T13890] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 840.090284][T13890] __x64_sys_sendto+0xde/0x100 [ 840.090312][T13890] do_syscall_64+0xf3/0x230 [ 840.090334][T13890] ? clear_bhb_loop+0x35/0x90 [ 840.090359][T13890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.090386][T13890] RIP: 0033:0x7f3bf718cde9 [ 840.090402][T13890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.090416][T13890] RSP: 002b:00007f3bf8070038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 840.090434][T13890] RAX: ffffffffffffffda RBX: 00007f3bf73a6160 RCX: 00007f3bf718cde9 [ 840.090447][T13890] RDX: 0000000000000078 RSI: 0000200000000080 RDI: 0000000000000008 [ 840.090458][T13890] RBP: 00007f3bf8070090 R08: 0000000000000000 R09: 0000000000000000 [ 840.090469][T13890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.090480][T13890] R13: 0000000000000000 R14: 00007f3bf73a6160 R15: 00007ffd141f9748 [ 840.090508][T13890] [ 840.416473][T13890] netlink: 'syz.3.2153': attribute type 5 has an invalid length. [ 840.440376][T12696] usb 7-1: selecting invalid altsetting 1 [ 840.522802][ T5873] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 840.533086][ T5873] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 840.562684][ T5873] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 840.597256][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.600174][T13893] fuse: Bad value for 'group_id' [ 840.605724][ T5873] usb 6-1: Product: syz [ 840.615231][ T5873] usb 6-1: Manufacturer: syz [ 840.620185][ T5873] usb 6-1: SerialNumber: syz [ 840.628654][T13893] fuse: Bad value for 'group_id' [ 840.640595][ T5873] usb 6-1: config 0 descriptor?? [ 840.656569][T12696] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 840.656655][T12696] dvb_usb_lmedm04 7-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 840.681632][T13876] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 840.701843][T13876] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 840.746349][T12331] hid (null): unknown global tag 0xc [ 840.757991][T12331] hid (null): unknown global tag 0xc [ 840.763463][T12331] hid (null): unknown global tag 0xc [ 840.771230][T12331] hid (null): unknown global tag 0xc [ 840.779390][T12331] hid (null): unknown global tag 0xc [ 840.791988][T12331] hid (null): unknown global tag 0xc [ 840.804055][T12331] hid (null): unknown global tag 0xc [ 840.815400][T12331] hid (null): unknown global tag 0xc [ 840.823149][T12331] hid (null): unknown global tag 0xc [ 840.835602][T12331] hid (null): unknown global tag 0xc [ 840.842241][T12331] hid (null): invalid report_size 26159 [ 840.848111][T12331] hid (null): unknown global tag 0xc [ 840.859650][T12331] hid (null): unknown global tag 0xc [ 840.866336][T12331] hid (null): unknown global tag 0xc [ 840.877578][T12331] hid (null): unknown global tag 0xc [ 840.884804][T12331] hid (null): unknown global tag 0xc [ 840.890250][T12331] hid (null): unknown global tag 0xc [ 840.911108][ T5905] usb 7-1: USB disconnect, device number 29 [ 840.922058][T12331] hid (null): unknown global tag 0xc [ 840.941390][T12331] hid (null): unknown global tag 0xc [ 840.949325][T12331] hid (null): unknown global tag 0xc [ 840.954914][T12331] hid (null): unknown global tag 0xc [ 840.965010][T12331] hid (null): unknown global tag 0xc [ 840.984054][T12331] hid (null): unknown global tag 0xc [ 840.994693][T12331] hid (null): unknown global tag 0xc [ 841.004221][T12331] hid (null): unknown global tag 0xc [ 841.012685][T13876] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 841.029894][T12331] hid (null): unknown global tag 0xc [ 841.030979][T13876] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 841.042352][T12331] hid (null): unknown global tag 0xc [ 841.054397][T12331] hid (null): unknown global tag 0xc [ 841.059935][T12331] hid (null): unknown global tag 0xc [ 841.065738][T12331] hid (null): unknown global tag 0xc [ 841.073547][T12331] hid (null): unknown global tag 0xc [ 841.079126][T12331] hid (null): unknown global tag 0xc [ 841.084756][T12331] hid (null): unknown global tag 0xc [ 841.094663][T12331] usb 8-1: USB disconnect, device number 3 [ 842.380184][T13910] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 842.387539][T13910] overlayfs: failed to set xattr on upper [ 842.393315][T13910] overlayfs: ...falling back to redirect_dir=nofollow. [ 842.400190][T13910] overlayfs: ...falling back to index=off. [ 842.406080][T13910] overlayfs: ...falling back to uuid=null. [ 842.411952][T13910] overlayfs: maximum fs stacking depth exceeded [ 843.322826][T13902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.370973][T13902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.515308][ T5873] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 843.547574][ T5873] dm9601 6-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 54:01:47:1e:47:20 [ 843.584529][ T5873] usb 6-1: USB disconnect, device number 38 [ 843.602763][ T5873] dm9601 6-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 843.756915][T13927] FAULT_INJECTION: forcing a failure. [ 843.756915][T13927] name failslab, interval 1, probability 0, space 0, times 0 [ 843.833234][T13927] CPU: 1 UID: 0 PID: 13927 Comm: syz.2.2163 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 843.833259][T13927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 843.833268][T13927] Call Trace: [ 843.833274][T13927] [ 843.833282][T13927] dump_stack_lvl+0x241/0x360 [ 843.833311][T13927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 843.833333][T13927] ? __pfx__printk+0x10/0x10 [ 843.833366][T13927] should_fail_ex+0x40a/0x550 [ 843.833389][T13927] should_failslab+0xac/0x100 [ 843.833410][T13927] ? skb_clone+0x20c/0x390 [ 843.833425][T13927] kmem_cache_alloc_noprof+0x70/0x380 [ 843.833451][T13927] skb_clone+0x20c/0x390 [ 843.833470][T13927] __netlink_deliver_tap+0x3cc/0x7f0 [ 843.833496][T13927] ? netlink_deliver_tap+0x2e/0x1b0 [ 843.833512][T13927] netlink_deliver_tap+0x19d/0x1b0 [ 843.833528][T13927] netlink_unicast+0x7c4/0x990 [ 843.833556][T13927] ? __pfx_netlink_unicast+0x10/0x10 [ 843.833575][T13927] ? __virt_addr_valid+0x45f/0x530 [ 843.833596][T13927] ? __phys_addr_symbol+0x2f/0x70 [ 843.833616][T13927] ? __check_object_size+0x47a/0x730 [ 843.833640][T13927] netlink_sendmsg+0x8e4/0xcb0 [ 843.833670][T13927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.833700][T13927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.833715][T13927] __sock_sendmsg+0x221/0x270 [ 843.833739][T13927] ____sys_sendmsg+0x52a/0x7e0 [ 843.833765][T13927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 843.833780][T13927] ? __fget_files+0x2a/0x410 [ 843.833804][T13927] ? __fget_files+0x2a/0x410 [ 843.833834][T13927] __sys_sendmmsg+0x36a/0x720 [ 843.833875][T13927] ? __pfx___sys_sendmmsg+0x10/0x10 [ 843.833905][T13927] ? __pfx_lock_release+0x10/0x10 [ 843.833924][T13927] ? kstrtouint_from_user+0x128/0x190 [ 843.833970][T13927] ? ksys_write+0x22a/0x2b0 [ 843.833987][T13927] ? __pfx_lock_release+0x10/0x10 [ 843.834013][T13927] ? sb_end_write+0xe9/0x1c0 [ 843.834035][T13927] ? vfs_write+0x7fa/0xd10 [ 843.834055][T13927] ? __mutex_unlock_slowpath+0x227/0x800 [ 843.834106][T13927] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 843.834129][T13927] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 843.834151][T13927] ? do_syscall_64+0x100/0x230 [ 843.834177][T13927] __x64_sys_sendmmsg+0xa0/0xb0 [ 843.834196][T13927] do_syscall_64+0xf3/0x230 [ 843.834217][T13927] ? clear_bhb_loop+0x35/0x90 [ 843.834242][T13927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.834266][T13927] RIP: 0033:0x7f794958cde9 [ 843.834282][T13927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.834296][T13927] RSP: 002b:00007f79493f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 843.834315][T13927] RAX: ffffffffffffffda RBX: 00007f79497a5fa0 RCX: 00007f794958cde9 [ 843.834328][T13927] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000004 [ 843.834339][T13927] RBP: 00007f79493f9090 R08: 0000000000000000 R09: 0000000000000000 [ 843.834350][T13927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.834361][T13927] R13: 0000000000000000 R14: 00007f79497a5fa0 R15: 00007ffe292807a8 [ 843.834388][T13927] [ 844.147037][T13927] netlink: 'syz.2.2163': attribute type 1 has an invalid length. [ 844.163614][T13927] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2163'. [ 844.626391][ T5873] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 845.159764][ T5873] usb 6-1: device descriptor read/64, error -71 [ 845.499164][ T5871] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 845.714929][ T5873] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 846.118156][ T5871] usb 3-1: unable to get BOS descriptor or descriptor too short [ 846.274871][ T5871] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 846.293205][ T5871] usb 3-1: config 1 has no interface number 1 [ 846.302569][ T5871] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 846.323998][ T5871] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 846.356039][ T5871] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 846.377464][ T5871] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 846.400058][ T5871] usb 3-1: string descriptor 0 read error: -22 [ 846.406334][ T5871] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 846.430820][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.444794][ T5873] usb 6-1: device descriptor read/64, error -71 [ 846.561726][T13937] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 846.572942][ T5871] usb 3-1: low speed audio streaming not supported [ 846.872336][ T5873] usb usb6-port1: attempt power cycle [ 847.522833][T13964] FAULT_INJECTION: forcing a failure. [ 847.522833][T13964] name failslab, interval 1, probability 0, space 0, times 0 [ 847.582328][ T5871] usb 3-1: USB disconnect, device number 55 [ 847.766274][T13964] CPU: 1 UID: 0 PID: 13964 Comm: syz.3.2172 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 847.766303][T13964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 847.766314][T13964] Call Trace: [ 847.766321][T13964] [ 847.766329][T13964] dump_stack_lvl+0x241/0x360 [ 847.766373][T13964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 847.766397][T13964] ? __pfx__printk+0x10/0x10 [ 847.766434][T13964] should_fail_ex+0x40a/0x550 [ 847.766459][T13964] should_failslab+0xac/0x100 [ 847.766481][T13964] ? skb_clone+0x20c/0x390 [ 847.766498][T13964] kmem_cache_alloc_noprof+0x70/0x380 [ 847.766525][T13964] skb_clone+0x20c/0x390 [ 847.766546][T13964] __netlink_deliver_tap+0x3cc/0x7f0 [ 847.766575][T13964] ? netlink_deliver_tap+0x2e/0x1b0 [ 847.766624][T13964] netlink_deliver_tap+0x19d/0x1b0 [ 847.766642][T13964] netlink_unicast+0x7c4/0x990 [ 847.766674][T13964] ? __pfx_netlink_unicast+0x10/0x10 [ 847.766695][T13964] ? __virt_addr_valid+0x45f/0x530 [ 847.766718][T13964] ? __phys_addr_symbol+0x2f/0x70 [ 847.766739][T13964] ? __check_object_size+0x47a/0x730 [ 847.766764][T13964] netlink_sendmsg+0x8e4/0xcb0 [ 847.766794][T13964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.766824][T13964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 847.766840][T13964] __sock_sendmsg+0x221/0x270 [ 847.766863][T13964] ____sys_sendmsg+0x52a/0x7e0 [ 847.766889][T13964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 847.766904][T13964] ? __fget_files+0x2a/0x410 [ 847.766929][T13964] ? __fget_files+0x2a/0x410 [ 847.766959][T13964] __sys_sendmmsg+0x36a/0x720 [ 847.766988][T13964] ? __pfx___sys_sendmmsg+0x10/0x10 [ 847.767018][T13964] ? __pfx_lock_release+0x10/0x10 [ 847.767037][T13964] ? kstrtouint_from_user+0x128/0x190 [ 847.767083][T13964] ? ksys_write+0x22a/0x2b0 [ 847.767099][T13964] ? __pfx_lock_release+0x10/0x10 [ 847.767123][T13964] ? sb_end_write+0xe9/0x1c0 [ 847.767143][T13964] ? vfs_write+0x7fa/0xd10 [ 847.767161][T13964] ? __mutex_unlock_slowpath+0x227/0x800 [ 847.767211][T13964] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 847.767235][T13964] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 847.767257][T13964] ? do_syscall_64+0x100/0x230 [ 847.767282][T13964] __x64_sys_sendmmsg+0xa0/0xb0 [ 847.767303][T13964] do_syscall_64+0xf3/0x230 [ 847.767324][T13964] ? clear_bhb_loop+0x35/0x90 [ 847.767349][T13964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.767371][T13964] RIP: 0033:0x7f3bf718cde9 [ 847.767387][T13964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 847.767401][T13964] RSP: 002b:00007f3bf80b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 847.767426][T13964] RAX: ffffffffffffffda RBX: 00007f3bf73a5fa0 RCX: 00007f3bf718cde9 [ 847.767439][T13964] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 847.767451][T13964] RBP: 00007f3bf80b2090 R08: 0000000000000000 R09: 0000000000000000 [ 847.767463][T13964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.767474][T13964] R13: 0000000000000000 R14: 00007f3bf73a5fa0 R15: 00007ffd141f9748 [ 847.767502][T13964] [ 848.750697][ T5873] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 848.767802][T13964] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2172'. [ 848.790687][ T5873] usb 6-1: device descriptor read/8, error -71 [ 850.982270][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2180'. [ 851.564875][T13994] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2180'. [ 851.603066][T13994] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2180'. [ 851.747806][T13994] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2180'. [ 851.777248][T14001] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2180'. [ 853.954226][T14017] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2186'. [ 854.030950][T14017] loop9: detected capacity change from 0 to 1 [ 854.039739][T14017] Dev loop9: unable to read RDB block 1 [ 854.077239][T14017] loop9: unable to read partition table [ 854.096329][T14017] loop9: partition table beyond EOD, truncated [ 854.130189][T14017] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 854.292565][T14037] input: syz0 as /devices/virtual/input/input58 [ 854.595539][T14047] netlink: 'syz.5.2195': attribute type 3 has an invalid length. [ 854.630700][T14047] netlink: 'syz.5.2195': attribute type 1 has an invalid length. [ 855.328684][T14047] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 856.814290][T14073] fuse: blksize only supported for fuseblk [ 857.148397][T14079] FAULT_INJECTION: forcing a failure. [ 857.148397][T14079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.161735][T13967] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 857.161822][T14079] CPU: 1 UID: 0 PID: 14079 Comm: syz.3.2197 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 857.161844][T14079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 857.161854][T14079] Call Trace: [ 857.161861][T14079] [ 857.161869][T14079] dump_stack_lvl+0x241/0x360 [ 857.161898][T14079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 857.161922][T14079] ? __pfx__printk+0x10/0x10 [ 857.161947][T14079] ? __pfx_lock_release+0x10/0x10 [ 857.161973][T14079] should_fail_ex+0x40a/0x550 [ 857.161995][T14079] _copy_from_user+0x2d/0xb0 [ 857.162014][T14079] move_addr_to_kernel+0x82/0x150 [ 857.162036][T14079] copy_msghdr_from_user+0x43e/0x680 [ 857.162061][T14079] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 857.162079][T14079] ? __fget_files+0x2a/0x410 [ 857.162102][T14079] ? __fget_files+0x2a/0x410 [ 857.162129][T14079] __sys_sendmmsg+0x32b/0x720 [ 857.162155][T14079] ? __pfx___sys_sendmmsg+0x10/0x10 [ 857.162182][T14079] ? __pfx_lock_release+0x10/0x10 [ 857.162206][T14079] ? kstrtouint_from_user+0x128/0x190 [ 857.162247][T14079] ? ksys_write+0x22a/0x2b0 [ 857.162263][T14079] ? __pfx_lock_release+0x10/0x10 [ 857.162287][T14079] ? sb_end_write+0xe9/0x1c0 [ 857.162308][T14079] ? vfs_write+0x7fa/0xd10 [ 857.162326][T14079] ? __mutex_unlock_slowpath+0x227/0x800 [ 857.162371][T14079] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 857.162394][T14079] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 857.162414][T14079] ? do_syscall_64+0x100/0x230 [ 857.162438][T14079] __x64_sys_sendmmsg+0xa0/0xb0 [ 857.162456][T14079] do_syscall_64+0xf3/0x230 [ 857.162476][T14079] ? clear_bhb_loop+0x35/0x90 [ 857.162499][T14079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.162519][T14079] RIP: 0033:0x7f3bf718cde9 [ 857.162534][T14079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.162547][T14079] RSP: 002b:00007f3bf8070038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 857.162565][T14079] RAX: ffffffffffffffda RBX: 00007f3bf73a6160 RCX: 00007f3bf718cde9 [ 857.162578][T14079] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000005 [ 857.162588][T14079] RBP: 00007f3bf8070090 R08: 0000000000000000 R09: 0000000000000000 [ 857.162598][T14079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.162608][T14079] R13: 0000000000000000 R14: 00007f3bf73a6160 R15: 00007ffd141f9748 [ 857.162633][T14079] [ 857.731567][T14084] input: syz0 as /devices/virtual/input/input60 [ 858.314640][T13967] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 858.322888][T13967] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 858.346407][T13967] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 858.376050][T13967] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 858.390804][T13967] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 858.433795][T13967] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 858.443133][T13967] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 858.463398][T13967] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 858.489176][T13967] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 858.515453][T13967] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 858.552191][T13967] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 858.573129][T13967] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 858.605511][T13967] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 858.632498][T13967] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 858.664118][T13967] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 858.711930][T13967] usb 6-1: string descriptor 0 read error: -22 [ 858.724423][T13967] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 858.755869][T13967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.767804][T12696] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 858.775494][T13967] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 858.994814][T12696] usb 8-1: unable to get BOS descriptor or descriptor too short [ 859.027582][ T5905] usb 6-1: USB disconnect, device number 43 [ 859.041791][T12696] usb 8-1: config 1 has an invalid interface number: 222 but max is 0 [ 859.067567][T12696] usb 8-1: config 1 has no interface number 0 [ 859.118158][T12696] usb 8-1: config 1 interface 222 has no altsetting 0 [ 859.204704][T12696] usb 8-1: string descriptor 0 read error: -22 [ 859.229180][T12696] usb 8-1: New USB device found, idVendor=19d2, idProduct=1057, bcdDevice= 9.6c [ 860.254395][T12696] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.011826][T12696] option 8-1:1.222: GSM modem (1-port) converter detected [ 861.021572][T12696] usb 8-1: USB disconnect, device number 4 [ 861.028653][T12696] option 8-1:1.222: device disconnected [ 861.172317][T14111] program syz.3.2210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 861.182583][T14111] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 861.730892][T14111] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 861.736917][T14111] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 863.210753][T14127] FAULT_INJECTION: forcing a failure. [ 863.210753][T14127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.243237][T14127] CPU: 1 UID: 0 PID: 14127 Comm: syz.6.2217 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 863.243263][T14127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 863.243273][T14127] Call Trace: [ 863.243279][T14127] [ 863.243287][T14127] dump_stack_lvl+0x241/0x360 [ 863.243319][T14127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 863.243342][T14127] ? __pfx__printk+0x10/0x10 [ 863.243366][T14127] ? __pfx_lock_release+0x10/0x10 [ 863.243395][T14127] should_fail_ex+0x40a/0x550 [ 863.243419][T14127] _copy_to_iter+0x440/0x1c50 [ 863.243457][T14127] ? __pfx__copy_to_iter+0x10/0x10 [ 863.243481][T14127] ? __virt_addr_valid+0x183/0x530 [ 863.243501][T14127] ? __virt_addr_valid+0x183/0x530 [ 863.243520][T14127] ? __virt_addr_valid+0x45f/0x530 [ 863.243541][T14127] ? __phys_addr_symbol+0x2f/0x70 [ 863.243577][T14127] seq_read_iter+0xb80/0xd70 [ 863.243613][T14127] seq_read+0x3a9/0x4f0 [ 863.243634][T14127] ? __pfx_seq_read+0x10/0x10 [ 863.243675][T14127] ? rw_verify_area+0x243/0x630 [ 863.243698][T14127] ? __pfx_seq_read+0x10/0x10 [ 863.243723][T14127] vfs_read+0x1f8/0xb40 [ 863.243748][T14127] ? fdget_pos+0x254/0x320 [ 863.243769][T14127] ? __pfx___mutex_lock+0x10/0x10 [ 863.243792][T14127] ? __pfx_vfs_read+0x10/0x10 [ 863.243812][T14127] ? do_sys_openat2+0x17a/0x1d0 [ 863.243837][T14127] ? __fget_files+0x2a/0x410 [ 863.243858][T14127] ? __fget_files+0x395/0x410 [ 863.243877][T14127] ? __fget_files+0x2a/0x410 [ 863.243907][T14127] ksys_read+0x18f/0x2b0 [ 863.243925][T14127] ? __pfx_ksys_read+0x10/0x10 [ 863.243942][T14127] ? do_syscall_64+0x100/0x230 [ 863.243966][T14127] ? do_syscall_64+0xb6/0x230 [ 863.243991][T14127] do_syscall_64+0xf3/0x230 [ 863.244012][T14127] ? clear_bhb_loop+0x35/0x90 [ 863.244036][T14127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.244056][T14127] RIP: 0033:0x7fda4038cde9 [ 863.244072][T14127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.244086][T14127] RSP: 002b:00007fda4114e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 863.244105][T14127] RAX: ffffffffffffffda RBX: 00007fda405a5fa0 RCX: 00007fda4038cde9 [ 863.244117][T14127] RDX: 0000000000002020 RSI: 0000200000006140 RDI: 0000000000000005 [ 863.244128][T14127] RBP: 00007fda4114e090 R08: 0000000000000000 R09: 0000000000000000 [ 863.244138][T14127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.244148][T14127] R13: 0000000000000000 R14: 00007fda405a5fa0 R15: 00007fffd18541b8 [ 863.244176][T14127] [ 863.493183][ C1] vkms_vblank_simulate: vblank timer overrun [ 864.409342][T14142] dummy0: entered promiscuous mode [ 864.429696][T14142] vlan3: entered promiscuous mode [ 864.485371][T14142] dummy0: left promiscuous mode [ 864.644750][T14139] nlmon0: entered promiscuous mode [ 864.650198][T14139] vlan2: entered promiscuous mode [ 864.660577][T14139] nlmon0: left promiscuous mode [ 865.248655][T14151] dummy0: entered promiscuous mode [ 865.254304][T14151] macsec1: entered allmulticast mode [ 865.259922][T14151] dummy0: entered allmulticast mode [ 865.995902][T14151] dummy0: left allmulticast mode [ 866.000925][T14151] dummy0: left promiscuous mode [ 866.280523][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2211'. [ 866.562144][T14165] FAULT_INJECTION: forcing a failure. [ 866.562144][T14165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 866.585107][T14165] CPU: 0 UID: 0 PID: 14165 Comm: syz.3.2227 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 866.585134][T14165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 866.585145][T14165] Call Trace: [ 866.585151][T14165] [ 866.585159][T14165] dump_stack_lvl+0x241/0x360 [ 866.585192][T14165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 866.585216][T14165] ? __pfx__printk+0x10/0x10 [ 866.585242][T14165] ? __pfx_lock_release+0x10/0x10 [ 866.585270][T14165] should_fail_ex+0x40a/0x550 [ 866.585293][T14165] _copy_from_user+0x2d/0xb0 [ 866.585312][T14165] copy_msghdr_from_user+0xae/0x680 [ 866.585333][T14165] ? __pfx___might_resched+0x10/0x10 [ 866.585353][T14165] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 866.585371][T14165] ? __fget_files+0x2a/0x410 [ 866.585395][T14165] ? __sys_sendmmsg+0x392/0x720 [ 866.585413][T14165] ? __might_fault+0xaa/0x120 [ 866.585440][T14165] __sys_sendmmsg+0x32b/0x720 [ 866.585468][T14165] ? __pfx___sys_sendmmsg+0x10/0x10 [ 866.585496][T14165] ? __pfx_lock_release+0x10/0x10 [ 866.585514][T14165] ? kstrtouint_from_user+0x128/0x190 [ 866.585565][T14165] ? ksys_write+0x22a/0x2b0 [ 866.585582][T14165] ? __pfx_lock_release+0x10/0x10 [ 866.585607][T14165] ? sb_end_write+0xe9/0x1c0 [ 866.585629][T14165] ? vfs_write+0x7fa/0xd10 [ 866.585648][T14165] ? __mutex_unlock_slowpath+0x227/0x800 [ 866.585696][T14165] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 866.585719][T14165] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 866.585741][T14165] ? do_syscall_64+0x100/0x230 [ 866.585766][T14165] __x64_sys_sendmmsg+0xa0/0xb0 [ 866.585785][T14165] do_syscall_64+0xf3/0x230 [ 866.585807][T14165] ? clear_bhb_loop+0x35/0x90 [ 866.585831][T14165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.585852][T14165] RIP: 0033:0x7f3bf718cde9 [ 866.585867][T14165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.585882][T14165] RSP: 002b:00007f3bf80b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 866.585901][T14165] RAX: ffffffffffffffda RBX: 00007f3bf73a5fa0 RCX: 00007f3bf718cde9 [ 866.585914][T14165] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000005 [ 866.585924][T14165] RBP: 00007f3bf80b2090 R08: 0000000000000000 R09: 0000000000000000 [ 866.585935][T14165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.585946][T14165] R13: 0000000000000000 R14: 00007f3bf73a5fa0 R15: 00007ffd141f9748 [ 866.585972][T14165] [ 867.029255][T13967] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 867.278555][T13967] usb 3-1: Using ep0 maxpacket: 8 [ 867.471483][T13967] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 867.512398][T13967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.552196][T13967] usb 3-1: config 0 descriptor?? [ 867.567520][ T98] block nbd0: Possible stuck request ffff888025770000: control (read@0,4096B). Runtime 390 seconds [ 869.383655][ T5905] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 869.694789][ T5905] usb 7-1: Using ep0 maxpacket: 16 [ 869.723004][ T5905] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.760380][ T5905] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 869.796743][ T5905] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 869.841056][ T5905] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 869.874657][ T5905] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 869.997672][ T5905] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 870.023569][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 870.034464][ T5905] usb 7-1: SerialNumber: syz [ 870.046550][T14185] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 870.055735][ T5905] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 870.081684][T14166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.100778][ T5905] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12 [ 870.109296][T14166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.216371][T14198] nlmon0: entered promiscuous mode [ 870.222244][T14198] vlan2: entered promiscuous mode [ 870.239350][T14198] nlmon0: left promiscuous mode [ 871.133944][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2236'. [ 871.186514][T14203] FAULT_INJECTION: forcing a failure. [ 871.186514][T14203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.199722][T14203] CPU: 0 UID: 0 PID: 14203 Comm: syz.5.2236 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 871.199744][T14203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 871.199755][T14203] Call Trace: [ 871.199763][T14203] [ 871.199771][T14203] dump_stack_lvl+0x241/0x360 [ 871.199805][T14203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 871.199830][T14203] ? __pfx__printk+0x10/0x10 [ 871.199855][T14203] ? __pfx_lock_release+0x10/0x10 [ 871.199884][T14203] should_fail_ex+0x40a/0x550 [ 871.199908][T14203] _copy_from_user+0x2d/0xb0 [ 871.199927][T14203] copy_msghdr_from_user+0xae/0x680 [ 871.199954][T14203] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 871.199972][T14203] ? __fget_files+0x2a/0x410 [ 871.199996][T14203] ? __fget_files+0x2a/0x410 [ 871.200040][T14203] __sys_sendmsg+0x209/0x350 [ 871.200063][T14203] ? __pfx___sys_sendmsg+0x10/0x10 [ 871.200105][T14203] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 871.200151][T14203] do_syscall_64+0xf3/0x230 [ 871.200181][T14203] ? clear_bhb_loop+0x35/0x90 [ 871.200205][T14203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.200233][T14203] RIP: 0033:0x7f0f3998cde9 [ 871.200248][T14203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 871.200262][T14203] RSP: 002b:00007f0f3a80e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 871.200281][T14203] RAX: ffffffffffffffda RBX: 00007f0f39ba6160 RCX: 00007f0f3998cde9 [ 871.200294][T14203] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000009 [ 871.200305][T14203] RBP: 00007f0f3a80e090 R08: 0000000000000000 R09: 0000000000000000 [ 871.200316][T14203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.200326][T14203] R13: 0000000000000000 R14: 00007f0f39ba6160 R15: 00007ffd897c1f08 [ 871.200354][T14203] [ 871.474104][T13967] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 871.484458][T13967] asix 3-1:0.0: probe with driver asix failed with error -71 [ 871.494854][T13967] usb 3-1: USB disconnect, device number 56 [ 871.752129][ T8] usb 7-1: USB disconnect, device number 30 [ 871.777227][T14213] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 872.369951][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'. [ 872.630276][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2239'. [ 872.642609][T14213] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2239'. [ 873.670604][T12696] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 873.906445][T12696] usb 6-1: Using ep0 maxpacket: 16 [ 874.118675][T12696] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 874.170081][T12696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.251903][T12696] usb 6-1: Product: syz [ 874.257936][T12696] usb 6-1: Manufacturer: syz [ 874.298098][T12696] usb 6-1: SerialNumber: syz [ 874.432930][T12696] usb 6-1: config 0 descriptor?? [ 875.029991][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2256'. [ 875.949873][T14273] syzkaller0: entered promiscuous mode [ 875.955577][T14273] syzkaller0: entered allmulticast mode [ 876.843177][ T5905] usb 6-1: USB disconnect, device number 44 [ 878.022142][T12696] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 878.040730][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2265'. [ 878.542129][T12696] usb 6-1: Using ep0 maxpacket: 8 [ 878.591220][T12696] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 878.629384][T12696] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 878.725349][T12696] usb 6-1: config 8 has no interface number 0 [ 878.750715][T12696] usb 6-1: config 8 interface 188 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 878.788968][T12696] usb 6-1: config 8 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 878.848260][T12696] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 878.877309][T12696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.911805][T12696] usb 6-1: Product: syz [ 878.918584][T12696] usb 6-1: Manufacturer: syz [ 878.928928][T12696] usb 6-1: SerialNumber: syz [ 879.559198][T12696] vmk80xx 6-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 879.597342][T12696] usb 6-1: USB disconnect, device number 45 [ 881.773154][T14307] nlmon0: entered promiscuous mode [ 881.784851][T14307] vlan2: entered promiscuous mode [ 881.806636][T14307] nlmon0: left promiscuous mode [ 881.807625][T14332] openvswitch: netlink: nsh attribute has 32 unknown bytes. [ 881.841994][T14332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.067705][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.093778][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.115279][T14349] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0 [ 882.124948][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.161132][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.187493][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.207947][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.223249][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.240771][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.259541][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.282481][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.296382][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.308361][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.322657][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.353603][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.383162][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.407005][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.426330][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.434805][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.449808][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.457804][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.480753][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.507782][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.531614][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.555449][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.580116][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.603138][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.671510][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 882.693425][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.388305][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.396126][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.441063][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.473426][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.499893][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.538802][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.581063][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.603659][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.611451][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.644683][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.671922][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.698918][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.708607][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.737810][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.758082][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.768864][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.777958][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.792418][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.800355][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.816999][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.830998][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.840469][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.852823][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.865397][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.895046][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.902239][ T5873] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 883.918352][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: unknown main item tag 0x0 [ 883.967438][T13967] hid-generic 0002:03FF:FFFFFFFF.000A: hidraw0: HID v0.03 Device [syz1] on syz0 [ 884.230514][ T5873] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.338443][ T5873] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 884.461510][ T5873] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 884.610531][ T5873] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 884.639104][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.647172][ T5873] usb 7-1: Product: syz [ 884.662368][ T5873] usb 7-1: Manufacturer: syz [ 884.667007][ T5873] usb 7-1: SerialNumber: syz [ 884.679933][T14377] syzkaller0: entered promiscuous mode [ 884.700679][T14377] syzkaller0: entered allmulticast mode [ 884.731382][ T5873] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 884.746281][ T5873] cdc_ncm 7-1:1.0: bind() failure [ 887.214343][T13967] usb 7-1: USB disconnect, device number 31 [ 887.340966][T14413] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2298'. [ 888.553355][T14396] nlmon0: entered promiscuous mode [ 888.568094][T14396] vlan2: entered promiscuous mode [ 888.576885][T14396] nlmon0: left promiscuous mode [ 889.003876][T14427] ip_vti0: entered promiscuous mode [ 889.009163][T14427] ip_vti0: entered allmulticast mode [ 889.720057][T14444] FAULT_INJECTION: forcing a failure. [ 889.720057][T14444] name failslab, interval 1, probability 0, space 0, times 0 [ 889.767295][T14444] CPU: 0 UID: 0 PID: 14444 Comm: syz.5.2307 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 889.767322][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 889.767333][T14444] Call Trace: [ 889.767340][T14444] [ 889.767348][T14444] dump_stack_lvl+0x241/0x360 [ 889.767380][T14444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 889.767404][T14444] ? __pfx__printk+0x10/0x10 [ 889.767430][T14444] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 889.767453][T14444] ? __pfx___might_resched+0x10/0x10 [ 889.767476][T14444] should_fail_ex+0x40a/0x550 [ 889.767500][T14444] should_failslab+0xac/0x100 [ 889.767521][T14444] ? hugetlbfs_alloc_inode+0xf5/0x140 [ 889.767540][T14444] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 889.767566][T14444] hugetlbfs_alloc_inode+0xf5/0x140 [ 889.767584][T14444] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 889.767606][T14444] alloc_inode+0x65/0x1a0 [ 889.767628][T14444] new_inode+0x22/0x1d0 [ 889.767647][T14444] ? resv_map_alloc+0x1c4/0x2c0 [ 889.767668][T14444] hugetlbfs_get_inode+0x74/0x690 [ 889.767701][T14444] hugetlb_file_setup+0x204/0x5c0 [ 889.767723][T14444] ksys_mmap_pgoff+0x20d/0x720 [ 889.767751][T14444] do_syscall_64+0xf3/0x230 [ 889.767773][T14444] ? clear_bhb_loop+0x35/0x90 [ 889.767799][T14444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.767819][T14444] RIP: 0033:0x7f0f3998cde9 [ 889.767834][T14444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.767847][T14444] RSP: 002b:00007f0f3a82f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 889.767867][T14444] RAX: ffffffffffffffda RBX: 00007f0f39ba6080 RCX: 00007f0f3998cde9 [ 889.767879][T14444] RDX: 0000000004000002 RSI: 0000000000c00000 RDI: 0000200000400000 [ 889.767890][T14444] RBP: 00007f0f3a82f090 R08: ffffffffffffffff R09: 0000000000000000 [ 889.767901][T14444] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000001 [ 889.767912][T14444] R13: 0000000000000000 R14: 00007f0f39ba6080 R15: 00007ffd897c1f08 [ 889.767938][T14444] [ 890.096769][T14446] fuse: blksize only supported for fuseblk [ 890.241079][T13967] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 891.470486][T13967] usb 3-1: Using ep0 maxpacket: 8 [ 891.482711][T13967] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 891.485718][T14467] nlmon0: entered promiscuous mode [ 891.504172][T13967] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 891.522862][T13967] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 891.531205][T14467] vlan3: entered promiscuous mode [ 891.545182][T13967] usb 3-1: Product: syz [ 891.551720][T13967] usb 3-1: Manufacturer: syz [ 891.567433][T14467] nlmon0: left promiscuous mode [ 891.572745][T13967] usb 3-1: SerialNumber: syz [ 892.275995][T13967] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 892.293676][T13967] visor 3-1:1.0: probe with driver visor failed with error -110 [ 892.425052][T14480] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2315'. [ 892.446798][T14480] loop9: detected capacity change from 0 to 1 [ 892.463409][T14480] Dev loop9: unable to read RDB block 1 [ 892.470593][T14480] loop9: unable to read partition table [ 892.486459][T14480] loop9: partition table beyond EOD, truncated [ 892.493043][T14480] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 892.683514][T14487] kvm: MONITOR instruction emulated as NOP! [ 892.977860][T11778] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 893.188234][T14510] Smack: duplicate mount options [ 893.448144][T11778] usb 6-1: Using ep0 maxpacket: 16 [ 893.454919][T11778] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 893.470892][T11778] usb 6-1: config 0 has no interface number 0 [ 893.674692][T11778] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 893.696820][T11778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.705114][T11778] usb 6-1: Product: syz [ 893.709299][T11778] usb 6-1: Manufacturer: syz [ 893.713908][T11778] usb 6-1: SerialNumber: syz [ 893.720211][T11778] usb 6-1: config 0 descriptor?? [ 894.105655][ T5905] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 894.438420][T11778] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 894.478220][T14521] FAULT_INJECTION: forcing a failure. [ 894.478220][T14521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.491763][T14521] CPU: 1 UID: 0 PID: 14521 Comm: syz.5.2320 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 894.491786][T14521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 894.491797][T14521] Call Trace: [ 894.491804][T14521] [ 894.491812][T14521] dump_stack_lvl+0x241/0x360 [ 894.491847][T14521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 894.491871][T14521] ? __pfx__printk+0x10/0x10 [ 894.491897][T14521] ? __pfx_lock_release+0x10/0x10 [ 894.491926][T14521] should_fail_ex+0x40a/0x550 [ 894.491950][T14521] _copy_from_user+0x2d/0xb0 [ 894.491968][T14521] copy_msghdr_from_user+0xae/0x680 [ 894.491995][T14521] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 894.492014][T14521] ? __fget_files+0x2a/0x410 [ 894.492038][T14521] ? __fget_files+0x2a/0x410 [ 894.492067][T14521] __sys_sendmsg+0x209/0x350 [ 894.492089][T14521] ? __pfx___sys_sendmsg+0x10/0x10 [ 894.492119][T14521] ? do_sys_openat2+0x17a/0x1d0 [ 894.492165][T14521] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 894.492187][T14521] ? do_syscall_64+0x100/0x230 [ 894.492211][T14521] ? do_syscall_64+0xb6/0x230 [ 894.492236][T14521] do_syscall_64+0xf3/0x230 [ 894.492257][T14521] ? clear_bhb_loop+0x35/0x90 [ 894.492281][T14521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.492302][T14521] RIP: 0033:0x7f0f3998cde9 [ 894.492318][T14521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.492332][T14521] RSP: 002b:00007f0f3a82f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.492350][T14521] RAX: ffffffffffffffda RBX: 00007f0f39ba6080 RCX: 00007f0f3998cde9 [ 894.492363][T14521] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 894.492374][T14521] RBP: 00007f0f3a82f090 R08: 0000000000000000 R09: 0000000000000000 [ 894.492385][T14521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.492395][T14521] R13: 0000000000000000 R14: 00007f0f39ba6080 R15: 00007ffd897c1f08 [ 894.492422][T14521] [ 894.698170][ T5905] usb 8-1: device descriptor read/64, error -71 [ 894.723003][ T5871] usb 3-1: USB disconnect, device number 57 [ 894.906184][T11778] gspca_spca1528: reg_w err -71 [ 894.924158][T11778] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 894.957031][T11778] usb 6-1: USB disconnect, device number 46 [ 894.967207][ T5905] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 894.998691][T14530] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2327'. [ 895.323007][ T5905] usb 8-1: device descriptor read/64, error -71 [ 895.534273][ T5905] usb usb8-port1: attempt power cycle [ 896.223589][ T5905] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 896.250090][ T5905] usb 8-1: device descriptor read/8, error -71 [ 896.698318][ T5905] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 897.139762][ T5905] usb 8-1: device descriptor read/8, error -71 [ 897.186432][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 897.186450][ T29] audit: type=1804 audit(1738996107.067:291): pid=14553 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.2336" name="/newroot/55/file0" dev="tmpfs" ino=324 res=1 errno=0 [ 897.252548][T14559] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2334'. [ 897.264208][T14559] loop9: detected capacity change from 0 to 1 [ 897.273100][ T5905] usb usb8-port1: unable to enumerate USB device [ 897.287315][T14559] Dev loop9: unable to read RDB block 1 [ 897.309330][T14559] loop9: unable to read partition table [ 897.326031][ T29] audit: type=1804 audit(1738996107.105:292): pid=14553 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.7.2336" name="/newroot/55/file0" dev="tmpfs" ino=324 res=1 errno=0 [ 897.361082][T14559] loop9: partition table beyond EOD, truncated [ 897.369947][T14559] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 898.045327][ T5875] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 898.399992][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 898.436755][ T5875] usb 3-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 898.466809][ T5875] usb 3-1: config 1 interface 0 has no altsetting 0 [ 898.598114][ T5875] usb 3-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.40 [ 899.266118][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.292619][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2340'. [ 899.302316][ T5875] usb 3-1: Product: syz [ 899.306676][ T5875] usb 3-1: Manufacturer: 㰁 [ 899.311517][T14579] nlmon0: Master is either lo or non-ether device [ 899.318755][ T5875] usb 3-1: SerialNumber: syz [ 900.184966][ T5875] usbhid 3-1:1.0: can't add hid device: -71 [ 900.299090][ T98] block nbd0: Possible stuck request ffff888025770000: control (read@0,4096B). Runtime 420 seconds [ 900.321527][ T5875] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 900.339212][ T5875] usb 3-1: USB disconnect, device number 58 [ 900.946537][T11778] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 901.091207][ T8] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 901.252523][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 902.094932][ T8] usb 6-1: no configurations [ 902.110299][ T8] usb 6-1: can't read configurations, error -22 [ 902.193755][T11778] usb 4-1: Using ep0 maxpacket: 32 [ 902.429305][ T8] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 902.488133][T11778] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 902.625285][T11778] usb 4-1: config 0 has no interfaces? [ 902.762155][T11778] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 902.781132][T11778] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 902.807643][T11778] usb 4-1: Product: syz [ 902.811889][T11778] usb 4-1: Manufacturer: syz [ 902.829981][T11778] usb 4-1: SerialNumber: syz [ 902.842058][T11778] usb 4-1: config 0 descriptor?? [ 902.847150][T14619] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 902.863328][T14619] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 902.866678][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 902.901019][ T8] usb 6-1: no configurations [ 902.912207][ T8] usb 6-1: can't read configurations, error -22 [ 902.933051][ T8] usb usb6-port1: attempt power cycle [ 903.412096][ T8] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 904.000999][ T5905] usb 4-1: USB disconnect, device number 52 [ 904.128686][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 904.257683][ T8] usb 6-1: no configurations [ 904.521639][ T8] usb 6-1: can't read configurations, error -22 [ 904.624143][T14646] vlan2: entered allmulticast mode [ 904.659071][T14646] dummy0: entered allmulticast mode [ 904.686038][ T8] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 904.759242][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 904.760287][T14646] dummy0: left allmulticast mode [ 904.815904][ T8] usb 6-1: no configurations [ 904.824241][ T8] usb 6-1: can't read configurations, error -22 [ 904.854222][ T8] usb usb6-port1: unable to enumerate USB device [ 905.941935][T11778] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 906.586956][T11778] usb 7-1: Using ep0 maxpacket: 8 [ 906.750200][T14678] fuse: Bad value for 'fd' [ 906.756624][T14678] fuse: blksize only supported for fuseblk [ 906.844752][T11778] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 907.418458][T11778] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 907.427629][T11778] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 907.474201][T11778] usb 7-1: Product: syz [ 907.478420][T11778] usb 7-1: Manufacturer: syz [ 907.510817][T11778] usb 7-1: SerialNumber: syz [ 908.330583][T11778] usb 7-1: Handspring Visor / Palm OS: No valid connect info available [ 908.339909][T11778] usb 7-1: Handspring Visor / Palm OS: port 177, is for unknown use [ 908.348273][T11778] usb 7-1: Handspring Visor / Palm OS: port 116, is for unknown use [ 908.357227][T11778] usb 7-1: Handspring Visor / Palm OS: Number of ports: 2 [ 908.556688][T14697] IPv6: sit1: Disabled Multicast RS [ 908.562955][T14697] sit1: entered allmulticast mode [ 908.779946][T11778] usb 7-1: palm_os_3_probe - error -110 getting bytes available request [ 908.789163][T11778] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 908.812281][T13967] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 908.928236][T11778] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 908.967222][T11778] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 909.239053][T13967] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 909.259040][T13967] usb 8-1: config 0 has no interfaces? [ 909.280451][T13967] usb 8-1: config 0 has no interfaces? [ 909.297091][T13967] usb 8-1: config 0 has no interfaces? [ 909.314323][T13967] usb 8-1: config 0 has no interfaces? [ 909.329885][T13967] usb 8-1: config 0 has no interfaces? [ 909.403902][T13967] usb 8-1: config 0 has no interfaces? [ 909.412654][T13967] usb 8-1: config 0 has no interfaces? [ 909.424763][T13967] usb 8-1: config 0 has no interfaces? [ 909.460582][T13967] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 909.811618][T13967] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 909.840144][T13967] usb 8-1: Product: syz [ 909.883958][T14701] sctp: [Deprecated]: syz.5.2369 (pid 14701) Use of int in maxseg socket option. [ 909.883958][T14701] Use struct sctp_assoc_value instead [ 909.907983][T13967] usb 8-1: Manufacturer: syz [ 909.912723][T13967] usb 8-1: SerialNumber: syz [ 909.919374][T13967] usb 8-1: config 0 descriptor?? [ 910.184358][ T5905] usb 7-1: USB disconnect, device number 32 [ 910.211477][ T5905] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 910.221860][T11778] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 910.259317][ T5905] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 910.301655][ T5905] visor 7-1:1.0: device disconnected [ 910.550056][T11778] usb 4-1: Using ep0 maxpacket: 32 [ 910.600159][T11778] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.711094][T11778] usb 4-1: config 0 has no interfaces? [ 910.906011][T11778] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 910.945821][T11778] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 910.963770][T11778] usb 4-1: Product: syz [ 910.969177][T11778] usb 4-1: Manufacturer: syz [ 910.977610][T11778] usb 4-1: SerialNumber: syz [ 910.987300][T11778] usb 4-1: config 0 descriptor?? [ 911.326652][ T5905] usb 4-1: USB disconnect, device number 53 [ 911.369081][ T5873] usb 8-1: USB disconnect, device number 9 [ 915.342554][ T5905] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 915.465671][T14777] misc userio: The device must be registered before sending interrupts [ 915.552142][T14779] FAULT_INJECTION: forcing a failure. [ 915.552142][T14779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.565977][T14779] CPU: 1 UID: 0 PID: 14779 Comm: syz.7.2390 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 915.566001][T14779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 915.566012][T14779] Call Trace: [ 915.566019][T14779] [ 915.566026][T14779] dump_stack_lvl+0x241/0x360 [ 915.566059][T14779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 915.566083][T14779] ? __pfx__printk+0x10/0x10 [ 915.566110][T14779] ? snprintf+0xda/0x120 [ 915.566132][T14779] should_fail_ex+0x40a/0x550 [ 915.566156][T14779] _copy_to_user+0x31/0xb0 [ 915.566177][T14779] simple_read_from_buffer+0xca/0x150 [ 915.566200][T14779] proc_fail_nth_read+0x1e9/0x250 [ 915.566223][T14779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 915.566246][T14779] ? rw_verify_area+0x243/0x630 [ 915.566269][T14779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 915.566291][T14779] vfs_read+0x1f8/0xb40 [ 915.566315][T14779] ? fdget_pos+0x254/0x320 [ 915.566337][T14779] ? __pfx___mutex_lock+0x10/0x10 [ 915.566360][T14779] ? __pfx_vfs_read+0x10/0x10 [ 915.566387][T14779] ? __fget_files+0x2a/0x410 [ 915.566409][T14779] ? __fget_files+0x395/0x410 [ 915.566427][T14779] ? __fget_files+0x2a/0x410 [ 915.566456][T14779] ksys_read+0x18f/0x2b0 [ 915.566475][T14779] ? __pfx_ksys_read+0x10/0x10 [ 915.566502][T14779] do_syscall_64+0xf3/0x230 [ 915.566524][T14779] ? clear_bhb_loop+0x35/0x90 [ 915.566548][T14779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.566569][T14779] RIP: 0033:0x7f345b18b7fc [ 915.566584][T14779] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 915.566598][T14779] RSP: 002b:00007f3458ff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 915.566617][T14779] RAX: ffffffffffffffda RBX: 00007f345b3a6160 RCX: 00007f345b18b7fc [ 915.566630][T14779] RDX: 000000000000000f RSI: 00007f3458ff60a0 RDI: 0000000000000007 [ 915.566641][T14779] RBP: 00007f3458ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 915.566652][T14779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.566663][T14779] R13: 0000000000000000 R14: 00007f345b3a6160 R15: 00007ffe31a60388 [ 915.566691][T14779] [ 915.791488][T14778] misc userio: The device must be registered before sending interrupts [ 915.941348][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 916.136246][ T5905] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 916.453694][ T5905] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 916.462894][ T5905] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 916.996696][ T5905] usb 4-1: Product: syz [ 917.011363][ T5905] usb 4-1: Manufacturer: syz [ 917.032303][ T5905] usb 4-1: SerialNumber: syz [ 917.299293][ T5905] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 917.307620][ T5905] usb 4-1: Handspring Visor / Palm OS: port 177, is for unknown use [ 917.341081][ T5905] usb 4-1: Handspring Visor / Palm OS: port 116, is for unknown use [ 917.353770][T13967] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 917.399938][ T5905] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 917.630455][T13967] usb 8-1: Using ep0 maxpacket: 32 [ 917.637864][T13967] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.673714][T13967] usb 8-1: config 0 has no interfaces? [ 917.686490][T13967] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 917.697375][T13967] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 917.713616][T13967] usb 8-1: Product: syz [ 917.718481][T13967] usb 8-1: Manufacturer: syz [ 917.723172][T13967] usb 8-1: SerialNumber: syz [ 917.753917][T13967] usb 8-1: config 0 descriptor?? [ 917.851139][T14803] vlan2: entered promiscuous mode [ 917.856454][T14803] bridge0: entered promiscuous mode [ 917.876476][ T5905] usb 4-1: palm_os_3_probe - error -110 getting bytes available request [ 917.886962][T14803] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2399'. [ 917.896161][ T5905] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 917.904174][T14803] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2399'. [ 917.915621][ T5905] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 917.925330][ T5905] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 917.942098][T14803] gretap1: entered promiscuous mode [ 917.953036][T14803] gretap1: entered allmulticast mode [ 917.988829][T13967] usb 8-1: USB disconnect, device number 10 [ 918.276533][T14815] FAULT_INJECTION: forcing a failure. [ 918.276533][T14815] name failslab, interval 1, probability 0, space 0, times 0 [ 918.304209][T14815] CPU: 1 UID: 0 PID: 14815 Comm: syz.6.2403 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 918.304236][T14815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 918.304246][T14815] Call Trace: [ 918.304252][T14815] [ 918.304260][T14815] dump_stack_lvl+0x241/0x360 [ 918.304292][T14815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 918.304316][T14815] ? __pfx__printk+0x10/0x10 [ 918.304340][T14815] ? __kmalloc_cache_noprof+0x48/0x390 [ 918.304361][T14815] ? __pfx___might_resched+0x10/0x10 [ 918.304384][T14815] should_fail_ex+0x40a/0x550 [ 918.304406][T14815] should_failslab+0xac/0x100 [ 918.304426][T14815] __kmalloc_cache_noprof+0x70/0x390 [ 918.304444][T14815] ? sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 918.304468][T14815] sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 918.304495][T14815] sctp_association_new+0x15ad/0x2400 [ 918.304548][T14815] sctp_connect_new_asoc+0x2d8/0x6c0 [ 918.304573][T14815] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 918.304592][T14815] ? sctp_get_af_specific+0x1a/0x80 [ 918.304609][T14815] ? security_sctp_bind_connect+0xaf/0x2d0 [ 918.304629][T14815] ? security_sctp_bind_connect+0x74/0x2d0 [ 918.304654][T14815] ? __sanitizer_cov_trace_pc+0x11/0x70 [ 918.304675][T14815] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 918.304696][T14815] sctp_sendmsg+0x219a/0x3520 [ 918.304734][T14815] ? __pfx_sctp_sendmsg+0x10/0x10 [ 918.304754][T14815] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 918.304775][T14815] ? __pfx_lock_release+0x10/0x10 [ 918.304801][T14815] ? inet_sendmsg+0x330/0x390 [ 918.304825][T14815] __sock_sendmsg+0x1a6/0x270 [ 918.304850][T14815] ____sys_sendmsg+0x52a/0x7e0 [ 918.304876][T14815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 918.304891][T14815] ? __fget_files+0x2a/0x410 [ 918.304917][T14815] ? __fget_files+0x2a/0x410 [ 918.304946][T14815] __sys_sendmmsg+0x36a/0x720 [ 918.304980][T14815] ? __pfx___sys_sendmmsg+0x10/0x10 [ 918.305007][T14815] ? __pfx_lock_release+0x10/0x10 [ 918.305024][T14815] ? kstrtouint_from_user+0x128/0x190 [ 918.305078][T14815] ? ksys_write+0x22a/0x2b0 [ 918.305094][T14815] ? __pfx_lock_release+0x10/0x10 [ 918.305121][T14815] ? sb_end_write+0xe9/0x1c0 [ 918.305142][T14815] ? vfs_write+0x7fa/0xd10 [ 918.305161][T14815] ? __mutex_unlock_slowpath+0x227/0x800 [ 918.305210][T14815] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 918.305233][T14815] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 918.305255][T14815] ? do_syscall_64+0x100/0x230 [ 918.305281][T14815] __x64_sys_sendmmsg+0xa0/0xb0 [ 918.305300][T14815] do_syscall_64+0xf3/0x230 [ 918.305321][T14815] ? clear_bhb_loop+0x35/0x90 [ 918.305346][T14815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.305366][T14815] RIP: 0033:0x7fda4038cde9 [ 918.305382][T14815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.305396][T14815] RSP: 002b:00007fda4114e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 918.305415][T14815] RAX: ffffffffffffffda RBX: 00007fda405a5fa0 RCX: 00007fda4038cde9 [ 918.305428][T14815] RDX: 0000000000000001 RSI: 0000200000001680 RDI: 0000000000000003 [ 918.305439][T14815] RBP: 00007fda4114e090 R08: 0000000000000000 R09: 0000000000000000 [ 918.305451][T14815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.305461][T14815] R13: 0000000000000000 R14: 00007fda405a5fa0 R15: 00007fffd18541b8 [ 918.305488][T14815] [ 918.853678][T14820] Invalid source name [ 918.918989][ T8] usb 4-1: USB disconnect, device number 54 [ 918.982206][T14820] UBIFS error (pid: 14820): cannot open "./file0", error -22 [ 919.010474][ T8] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 919.081676][ T8] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 919.125252][ T8] visor 4-1:1.0: device disconnected [ 919.506716][T14826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2407'. [ 919.651556][ T8] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 919.801113][T14826] loop9: detected capacity change from 0 to 1 [ 919.848142][T14826] Dev loop9: unable to read RDB block 1 [ 919.854249][T14826] loop9: unable to read partition table [ 919.950171][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 919.995686][ T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 920.006478][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 920.016681][T14826] loop9: partition table beyond EOD, truncated [ 920.313633][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 920.323462][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 920.360765][T14826] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 920.452709][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 920.471742][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 920.482994][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.705119][T14844] futex_wake_op: syz.6.2410 tries to shift op by -1; fix this program [ 921.256516][ T8] usb 4-1: usb_control_msg returned -32 [ 921.264446][ T8] usbtmc 4-1:16.0: can't read capabilities [ 922.282270][T14858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.306415][T14858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.378863][T14858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.400631][T14858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.007324][ T5871] usb 4-1: USB disconnect, device number 55 [ 923.948674][ T8] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 924.336689][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 924.571696][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.611133][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 924.670571][ T8] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 924.684770][ T8] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 924.702673][ T8] usb 3-1: Product: syz [ 924.706888][ T8] usb 3-1: Manufacturer: syz [ 924.738895][ T8] usb 3-1: SerialNumber: syz [ 924.761243][ T8] usb 3-1: config 0 descriptor?? [ 924.849082][ T29] audit: type=1326 audit(1738996132.950:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.6.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 924.905772][ T29] audit: type=1326 audit(1738996132.950:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.6.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 924.929959][ T29] audit: type=1326 audit(1738996132.950:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.6.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 924.960269][ T29] audit: type=1326 audit(1738996132.969:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.6.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 924.984391][T14898] FAULT_INJECTION: forcing a failure. [ 924.984391][T14898] name failslab, interval 1, probability 0, space 0, times 0 [ 925.002860][ T5871] usb 3-1: USB disconnect, device number 59 [ 925.010732][T14898] CPU: 0 UID: 0 PID: 14898 Comm: syz.7.2429 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 925.010755][T14898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 925.010766][T14898] Call Trace: [ 925.010772][T14898] [ 925.010780][T14898] dump_stack_lvl+0x241/0x360 [ 925.010812][T14898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 925.010837][T14898] ? __pfx__printk+0x10/0x10 [ 925.010862][T14898] ? __kmalloc_cache_noprof+0x48/0x390 [ 925.010885][T14898] ? __pfx___might_resched+0x10/0x10 [ 925.010908][T14898] should_fail_ex+0x40a/0x550 [ 925.010933][T14898] should_failslab+0xac/0x100 [ 925.010955][T14898] __kmalloc_cache_noprof+0x70/0x390 [ 925.010975][T14898] ? genl_start+0x1cb/0x6d0 [ 925.011000][T14898] genl_start+0x1cb/0x6d0 [ 925.011029][T14898] __netlink_dump_start+0x45c/0x790 [ 925.011063][T14898] genl_rcv_msg+0x88c/0xec0 [ 925.011092][T14898] ? __pfx_genl_rcv_msg+0x10/0x10 [ 925.011118][T14898] ? __pfx_genl_start+0x10/0x10 [ 925.011136][T14898] ? __pfx_genl_dumpit+0x10/0x10 [ 925.011153][T14898] ? __pfx_genl_done+0x10/0x10 [ 925.011191][T14898] ? __pfx_lock_acquire+0x10/0x10 [ 925.011217][T14898] ? __pfx_batadv_mcast_flags_dump+0x10/0x10 [ 925.011242][T14898] ? __pfx___might_resched+0x10/0x10 [ 925.011271][T14898] netlink_rcv_skb+0x1e3/0x430 [ 925.011296][T14898] ? __pfx_genl_rcv_msg+0x10/0x10 [ 925.011318][T14898] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 925.011355][T14898] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 925.011387][T14898] genl_rcv+0x28/0x40 [ 925.011405][T14898] netlink_unicast+0x7f6/0x990 [ 925.011436][T14898] ? __pfx_netlink_unicast+0x10/0x10 [ 925.011455][T14898] ? __virt_addr_valid+0x45f/0x530 [ 925.011475][T14898] ? __phys_addr_symbol+0x2f/0x70 [ 925.011495][T14898] ? __check_object_size+0x47a/0x730 [ 925.011522][T14898] netlink_sendmsg+0x8e4/0xcb0 [ 925.011551][T14898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 925.011582][T14898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 925.011596][T14898] __sock_sendmsg+0x221/0x270 [ 925.011621][T14898] ____sys_sendmsg+0x52a/0x7e0 [ 925.011648][T14898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 925.011662][T14898] ? __fget_files+0x2a/0x410 [ 925.011687][T14898] ? __fget_files+0x2a/0x410 [ 925.011717][T14898] __sys_sendmsg+0x269/0x350 [ 925.011740][T14898] ? __pfx___sys_sendmsg+0x10/0x10 [ 925.011770][T14898] ? do_sys_openat2+0x17a/0x1d0 [ 925.011820][T14898] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 925.011843][T14898] ? do_syscall_64+0x100/0x230 [ 925.011868][T14898] ? do_syscall_64+0xb6/0x230 [ 925.011892][T14898] do_syscall_64+0xf3/0x230 [ 925.011913][T14898] ? clear_bhb_loop+0x35/0x90 [ 925.011938][T14898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.011958][T14898] RIP: 0033:0x7f345b18cde9 [ 925.011974][T14898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.011988][T14898] RSP: 002b:00007f345bf2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.012007][T14898] RAX: ffffffffffffffda RBX: 00007f345b3a5fa0 RCX: 00007f345b18cde9 [ 925.012019][T14898] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 925.012030][T14898] RBP: 00007f345bf2c090 R08: 0000000000000000 R09: 0000000000000000 [ 925.012041][T14898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.012051][T14898] R13: 0000000000000000 R14: 00007f345b3a5fa0 R15: 00007ffe31a60388 [ 925.012079][T14898] [ 925.370165][ T29] audit: type=1326 audit(1738996132.969:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.6.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 925.392551][ T29] audit: type=1326 audit(1738996132.969:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.6.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 925.425931][ T29] audit: type=1326 audit(1738996132.969:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.6.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 925.457483][ T29] audit: type=1326 audit(1738996132.969:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.6.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 925.484608][T14901] x_tables: duplicate underflow at hook 2 [ 925.494692][ T29] audit: type=1326 audit(1738996132.969:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.6.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 925.536076][ T29] audit: type=1326 audit(1738996132.969:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14895 comm="syz.6.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 925.540937][T14902] FAULT_INJECTION: forcing a failure. [ 925.540937][T14902] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 925.573304][T14902] CPU: 1 UID: 0 PID: 14902 Comm: syz.5.2425 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 925.573331][T14902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 925.573341][T14902] Call Trace: [ 925.573348][T14902] [ 925.573356][T14902] dump_stack_lvl+0x241/0x360 [ 925.573386][T14902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 925.573409][T14902] ? __pfx__printk+0x10/0x10 [ 925.573449][T14902] should_fail_ex+0x40a/0x550 [ 925.573473][T14902] prepare_alloc_pages+0x1da/0x5b0 [ 925.573496][T14902] __alloc_frozen_pages_noprof+0x16f/0x710 [ 925.573517][T14902] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 925.573552][T14902] alloc_pages_mpol+0x311/0x660 [ 925.573577][T14902] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 925.573606][T14902] alloc_migration_target_by_mpol+0x33c/0x5d0 [ 925.573637][T14902] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 925.573663][T14902] ? folio_mapped+0xe2/0x210 [ 925.573685][T14902] migrate_pages_batch+0x8e6/0x30b0 [ 925.573716][T14902] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 925.573748][T14902] ? __pfx_migrate_pages_batch+0x10/0x10 [ 925.573768][T14902] ? __pfx_lock_release+0x10/0x10 [ 925.573795][T14902] ? walk_pgd_range+0x1702/0x17e0 [ 925.573818][T14902] ? mt_find+0x6c8/0x920 [ 925.573842][T14902] migrate_pages+0x1e2e/0x34a0 [ 925.573881][T14902] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 925.573902][T14902] ? __pfx_migrate_pages+0x10/0x10 [ 925.573920][T14902] ? __se_sys_mbind+0x145f/0x1980 [ 925.573948][T14902] ? mas_next_slot+0xdc6/0xea0 [ 925.573978][T14902] ? __pfx_up_write+0x10/0x10 [ 925.574009][T14902] __se_sys_mbind+0x14b8/0x1980 [ 925.574046][T14902] ? __pfx___se_sys_mbind+0x10/0x10 [ 925.574070][T14902] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 925.574090][T14902] ? __fget_files+0x2a/0x410 [ 925.574130][T14902] ? do_syscall_64+0x100/0x230 [ 925.574154][T14902] ? __x64_sys_mbind+0x21/0xf0 [ 925.574173][T14902] do_syscall_64+0xf3/0x230 [ 925.574195][T14902] ? clear_bhb_loop+0x35/0x90 [ 925.574217][T14902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.574237][T14902] RIP: 0033:0x7f0f3998cde9 [ 925.574252][T14902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.574266][T14902] RSP: 002b:00007f0f3a82f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 925.574284][T14902] RAX: ffffffffffffffda RBX: 00007f0f39ba6080 RCX: 00007f0f3998cde9 [ 925.574295][T14902] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 925.574306][T14902] RBP: 00007f0f3a82f090 R08: fffffffffffffffd R09: 0000000000000002 [ 925.574318][T14902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.574328][T14902] R13: 0000000000000001 R14: 00007f0f39ba6080 R15: 00007ffd897c1f08 [ 925.574352][T14902] [ 926.077369][T12331] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 926.321137][T12331] usb 7-1: config 0 has an invalid descriptor of length 161, skipping remainder of the config [ 926.377744][T12331] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 926.398651][T12331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.406694][T12331] usb 7-1: Product: syz [ 926.434554][T12331] usb 7-1: Manufacturer: syz [ 926.439212][T12331] usb 7-1: SerialNumber: syz [ 926.477690][T12331] usb 7-1: config 0 descriptor?? [ 926.624386][T14912] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 927.486756][T12331] ims_pcu 7-1:0.0: Missing CDC union descriptor [ 927.497048][T12331] ims_pcu 7-1:0.0: probe with driver ims_pcu failed with error -22 [ 927.507189][T12331] usb 7-1: USB disconnect, device number 33 [ 927.779445][T14927] netlink: 'syz.2.2438': attribute type 10 has an invalid length. [ 930.076065][T14946] input: syz0 as /devices/virtual/input/input68 [ 930.513372][T14953] 9pnet_fd: Insufficient options for proto=fd [ 931.748680][ T5873] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 931.844408][T14974] FAULT_INJECTION: forcing a failure. [ 931.844408][T14974] name failslab, interval 1, probability 0, space 0, times 0 [ 931.857576][T14974] CPU: 1 UID: 0 PID: 14974 Comm: syz.7.2454 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 931.857600][T14974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 931.857612][T14974] Call Trace: [ 931.857618][T14974] [ 931.857627][T14974] dump_stack_lvl+0x241/0x360 [ 931.857659][T14974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 931.857684][T14974] ? __pfx__printk+0x10/0x10 [ 931.857709][T14974] ? __kmalloc_noprof+0xb5/0x4c0 [ 931.857732][T14974] ? __pfx___might_resched+0x10/0x10 [ 931.857756][T14974] should_fail_ex+0x40a/0x550 [ 931.857779][T14974] should_failslab+0xac/0x100 [ 931.857802][T14974] __kmalloc_noprof+0xdd/0x4c0 [ 931.857822][T14974] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 931.857849][T14974] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 931.857877][T14974] genl_rcv_msg+0x802/0xec0 [ 931.857906][T14974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 931.857949][T14974] ? __pfx_lock_acquire+0x10/0x10 [ 931.857977][T14974] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 931.857996][T14974] ? __pfx_nl80211_set_cqm+0x10/0x10 [ 931.858016][T14974] ? __pfx_nl80211_post_doit+0x10/0x10 [ 931.858037][T14974] ? __pfx___might_resched+0x10/0x10 [ 931.858065][T14974] netlink_rcv_skb+0x1e3/0x430 [ 931.858090][T14974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 931.858112][T14974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 931.858149][T14974] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 931.858180][T14974] genl_rcv+0x28/0x40 [ 931.858198][T14974] netlink_unicast+0x7f6/0x990 [ 931.858230][T14974] ? __pfx_netlink_unicast+0x10/0x10 [ 931.858250][T14974] ? __virt_addr_valid+0x45f/0x530 [ 931.858273][T14974] ? __phys_addr_symbol+0x2f/0x70 [ 931.858294][T14974] ? __check_object_size+0x47a/0x730 [ 931.858319][T14974] netlink_sendmsg+0x8e4/0xcb0 [ 931.858349][T14974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 931.858378][T14974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 931.858394][T14974] __sock_sendmsg+0x221/0x270 [ 931.858419][T14974] ____sys_sendmsg+0x52a/0x7e0 [ 931.858444][T14974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 931.858460][T14974] ? __fget_files+0x2a/0x410 [ 931.858484][T14974] ? __fget_files+0x2a/0x410 [ 931.858513][T14974] __sys_sendmsg+0x269/0x350 [ 931.858536][T14974] ? __pfx___sys_sendmsg+0x10/0x10 [ 931.858570][T14974] ? do_sys_openat2+0x17a/0x1d0 [ 931.858618][T14974] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 931.858640][T14974] ? do_syscall_64+0x100/0x230 [ 931.858666][T14974] ? do_syscall_64+0xb6/0x230 [ 931.858689][T14974] do_syscall_64+0xf3/0x230 [ 931.858710][T14974] ? clear_bhb_loop+0x35/0x90 [ 931.858734][T14974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.858755][T14974] RIP: 0033:0x7f345b18cde9 [ 931.858771][T14974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 931.858784][T14974] RSP: 002b:00007f345bf2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 931.858803][T14974] RAX: ffffffffffffffda RBX: 00007f345b3a5fa0 RCX: 00007f345b18cde9 [ 931.858815][T14974] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 931.858827][T14974] RBP: 00007f345bf2c090 R08: 0000000000000000 R09: 0000000000000000 [ 931.858837][T14974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.858847][T14974] R13: 0000000000000000 R14: 00007f345b3a5fa0 R15: 00007ffe31a60388 [ 931.858875][T14974] [ 932.241645][T14975] fuse: blksize only supported for fuseblk [ 932.270484][ T5873] usb 3-1: device descriptor read/64, error -71 [ 932.671324][ T5873] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 932.832483][ T5873] usb 3-1: device descriptor read/64, error -71 [ 933.048427][ T5873] usb usb3-port1: attempt power cycle [ 933.124692][ T98] block nbd0: Possible stuck request ffff888025770000: control (read@0,4096B). Runtime 450 seconds [ 933.447463][ T5873] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 933.506347][ T5873] usb 3-1: device descriptor read/8, error -71 [ 933.971059][T14999] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2459'. [ 934.265430][ T5873] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 934.987019][ T5873] usb 3-1: device not accepting address 63, error -71 [ 935.001631][ T5873] usb usb3-port1: unable to enumerate USB device [ 939.245334][T15052] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 939.256720][T15052] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 940.050785][T15075] FAULT_INJECTION: forcing a failure. [ 940.050785][T15075] name failslab, interval 1, probability 0, space 0, times 0 [ 940.076774][T15075] CPU: 0 UID: 0 PID: 15075 Comm: syz.6.2478 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 940.076800][T15075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 940.076811][T15075] Call Trace: [ 940.076818][T15075] [ 940.076827][T15075] dump_stack_lvl+0x241/0x360 [ 940.076859][T15075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 940.076884][T15075] ? __pfx__printk+0x10/0x10 [ 940.076910][T15075] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 940.076934][T15075] ? __pfx___might_resched+0x10/0x10 [ 940.076958][T15075] should_fail_ex+0x40a/0x550 [ 940.076983][T15075] should_failslab+0xac/0x100 [ 940.077005][T15075] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 940.077027][T15075] ? simple_xattr_set+0xc8/0x360 [ 940.077056][T15075] kstrdup+0x39/0xb0 [ 940.077080][T15075] simple_xattr_set+0xc8/0x360 [ 940.077108][T15075] shmem_xattr_handler_set+0x14d/0x2f0 [ 940.077131][T15075] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 940.077164][T15075] __vfs_setxattr+0x468/0x4a0 [ 940.077195][T15075] __vfs_setxattr_noperm+0x12e/0x660 [ 940.077224][T15075] vfs_setxattr+0x221/0x430 [ 940.077254][T15075] ? __pfx_vfs_setxattr+0x10/0x10 [ 940.077285][T15075] ovl_xattr_set+0x3e9/0x520 [ 940.077310][T15075] ? __pfx_ovl_xattr_set+0x10/0x10 [ 940.077329][T15075] ? trace_kmalloc+0x1f/0xd0 [ 940.077346][T15075] ? __kmalloc_noprof+0x2a5/0x4c0 [ 940.077379][T15075] ovl_own_xattr_set+0x173/0x1c0 [ 940.077400][T15075] ? __pfx_ovl_own_xattr_set+0x10/0x10 [ 940.077422][T15075] __vfs_setxattr+0x468/0x4a0 [ 940.077452][T15075] __vfs_setxattr_noperm+0x12e/0x660 [ 940.077480][T15075] vfs_setxattr+0x221/0x430 [ 940.077507][T15075] ? __pfx_vfs_setxattr+0x10/0x10 [ 940.077538][T15075] filename_setxattr+0x2af/0x430 [ 940.077557][T15075] ? __phys_addr_symbol+0x2f/0x70 [ 940.077585][T15075] ? __pfx_filename_setxattr+0x10/0x10 [ 940.077609][T15075] ? getname_flags+0x1e3/0x540 [ 940.077635][T15075] path_setxattrat+0x440/0x510 [ 940.077662][T15075] ? __pfx_path_setxattrat+0x10/0x10 [ 940.077683][T15075] ? vfs_write+0x7fa/0xd10 [ 940.077734][T15075] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 940.077758][T15075] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 940.077783][T15075] __x64_sys_setxattr+0xbc/0xe0 [ 940.077807][T15075] do_syscall_64+0xf3/0x230 [ 940.077831][T15075] ? clear_bhb_loop+0x35/0x90 [ 940.077856][T15075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.077875][T15075] RIP: 0033:0x7fda4038cde9 [ 940.077891][T15075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.077905][T15075] RSP: 002b:00007fda4114e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 940.077923][T15075] RAX: ffffffffffffffda RBX: 00007fda405a5fa0 RCX: 00007fda4038cde9 [ 940.077936][T15075] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000080 [ 940.077947][T15075] RBP: 00007fda4114e090 R08: 0000000000000000 R09: 0000000000000000 [ 940.077957][T15075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.077967][T15075] R13: 0000000000000000 R14: 00007fda405a5fa0 R15: 00007fffd18541b8 [ 940.077994][T15075] [ 941.723907][T11778] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 942.197362][T11778] usb 4-1: Using ep0 maxpacket: 16 [ 942.215619][T11778] usb 4-1: config 249 has 1 interface, different from the descriptor's value: 11 [ 942.246760][T11778] usb 4-1: config 249 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 942.296798][T11778] usb 4-1: config 249 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 942.320757][T11778] usb 4-1: config 249 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 942.342106][T11778] usb 4-1: config 249 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 942.406848][T11778] usb 4-1: config 249 interface 0 has no altsetting 0 [ 942.433664][T11778] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 942.445374][T11778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.195327][T11778] usb 4-1: string descriptor 0 read error: -71 [ 943.213481][T11778] ums-sddr09 4-1:249.0: USB Mass Storage device detected [ 943.278500][T11778] ums-sddr09 4-1:249.0: probe with driver ums-sddr09 failed with error -22 [ 943.497120][T11778] usb 4-1: USB disconnect, device number 56 [ 945.775245][T15132] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2493'. [ 945.785588][T15132] smc: net device bond0 applied user defined pnetid SYZ [ 948.047336][T15160] netlink: 'syz.5.2505': attribute type 10 has an invalid length. [ 948.055258][T15160] syz_tun: left promiscuous mode [ 948.161605][T15159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2501'. [ 948.304240][T15177] loop6: detected capacity change from 0 to 524287999 [ 948.317566][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 948.317582][ T29] audit: type=1326 audit(1738996154.894:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 948.342977][T15177] FAULT_INJECTION: forcing a failure. [ 948.342977][T15177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.350842][ T29] audit: type=1326 audit(1738996154.894:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 948.381252][ T29] audit: type=1326 audit(1738996154.894:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 948.404974][ T29] audit: type=1326 audit(1738996154.894:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 948.421054][T15177] CPU: 1 UID: 0 PID: 15177 Comm: syz.7.2506 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 948.421079][T15177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 948.421090][T15177] Call Trace: [ 948.421098][T15177] [ 948.421106][T15177] dump_stack_lvl+0x241/0x360 [ 948.421139][T15177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 948.421162][T15177] ? __pfx__printk+0x10/0x10 [ 948.421194][T15177] should_fail_ex+0x40a/0x550 [ 948.421217][T15177] strncpy_from_user+0x36/0x270 [ 948.421239][T15177] getname_flags+0xf1/0x540 [ 948.421259][T15177] ? _copy_from_user+0x95/0xb0 [ 948.421280][T15177] user_path_at+0x24/0x60 [ 948.421303][T15177] __se_sys_mount+0x297/0x3c0 [ 948.421323][T15177] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 948.421346][T15177] ? __pfx___se_sys_mount+0x10/0x10 [ 948.421367][T15177] ? do_syscall_64+0x100/0x230 [ 948.421392][T15177] ? __x64_sys_mount+0x20/0xc0 [ 948.421414][T15177] do_syscall_64+0xf3/0x230 [ 948.421434][T15177] ? clear_bhb_loop+0x35/0x90 [ 948.421458][T15177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.421479][T15177] RIP: 0033:0x7f345b18cde9 [ 948.421494][T15177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.421508][T15177] RSP: 002b:00007f345bf2c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 948.421526][T15177] RAX: ffffffffffffffda RBX: 00007f345b3a5fa0 RCX: 00007f345b18cde9 [ 948.421538][T15177] RDX: 0000200000000000 RSI: 00002000000002c0 RDI: 0000200000000100 [ 948.421549][T15177] RBP: 00007f345bf2c090 R08: 0000000000000000 R09: 0000000000000000 [ 948.421559][T15177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.421569][T15177] R13: 0000000000000000 R14: 00007f345b3a5fa0 R15: 00007ffe31a60388 [ 948.421594][T15177] [ 948.426518][ C0] vkms_vblank_simulate: vblank timer overrun [ 948.473007][ T5873] usb 6-1: new low-speed USB device number 51 using dummy_hcd [ 948.501325][ T29] audit: type=1326 audit(1738996154.894:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 948.666630][ T29] audit: type=1326 audit(1738996154.894:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 948.696699][ T29] audit: type=1326 audit(1738996154.894:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 949.379176][ T29] audit: type=1326 audit(1738996154.894:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 949.413595][ T8] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 949.555228][ T29] audit: type=1326 audit(1738996154.894:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 949.592817][ T29] audit: type=1326 audit(1738996154.894:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4038cde9 code=0x7ffc0000 [ 949.628126][T15199] nft_compat: unsupported protocol 1 [ 949.987793][T15204] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2514'. [ 949.997118][T15204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2514'. [ 950.029222][T15206] loop6: detected capacity change from 0 to 524287999 [ 951.440425][T15220] input: syz0 as /devices/virtual/input/input73 [ 953.959063][T15282] FAULT_INJECTION: forcing a failure. [ 953.959063][T15282] name failslab, interval 1, probability 0, space 0, times 0 [ 954.011559][T15282] CPU: 0 UID: 0 PID: 15282 Comm: syz.6.2533 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 954.011590][T15282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 954.011602][T15282] Call Trace: [ 954.011609][T15282] [ 954.011617][T15282] dump_stack_lvl+0x241/0x360 [ 954.011650][T15282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 954.011674][T15282] ? __pfx__printk+0x10/0x10 [ 954.011700][T15282] ? __kmalloc_noprof+0xb5/0x4c0 [ 954.011723][T15282] ? __pfx___might_resched+0x10/0x10 [ 954.011747][T15282] should_fail_ex+0x40a/0x550 [ 954.011771][T15282] should_failslab+0xac/0x100 [ 954.011794][T15282] __kmalloc_noprof+0xdd/0x4c0 [ 954.011813][T15282] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 954.011840][T15282] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 954.011868][T15282] genl_rcv_msg+0x802/0xec0 [ 954.011896][T15282] ? __pfx_genl_rcv_msg+0x10/0x10 [ 954.011945][T15282] ? __pfx_lock_acquire+0x10/0x10 [ 954.011965][T15282] ? __pfx_wg_set_device+0x10/0x10 [ 954.011987][T15282] ? __pfx___might_resched+0x10/0x10 [ 954.012015][T15282] netlink_rcv_skb+0x1e3/0x430 [ 954.012041][T15282] ? __pfx_genl_rcv_msg+0x10/0x10 [ 954.012062][T15282] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 954.012100][T15282] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 954.012133][T15282] genl_rcv+0x28/0x40 [ 954.012151][T15282] netlink_unicast+0x7f6/0x990 [ 954.012222][T15282] ? __pfx_netlink_unicast+0x10/0x10 [ 954.012242][T15282] ? __virt_addr_valid+0x45f/0x530 [ 954.012266][T15282] ? __phys_addr_symbol+0x2f/0x70 [ 954.012287][T15282] ? __check_object_size+0x47a/0x730 [ 954.012311][T15282] netlink_sendmsg+0x8e4/0xcb0 [ 954.012340][T15282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.012370][T15282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.012385][T15282] __sock_sendmsg+0x221/0x270 [ 954.012410][T15282] ____sys_sendmsg+0x52a/0x7e0 [ 954.012432][T15282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 954.012451][T15282] ? __fget_files+0x2a/0x410 [ 954.012476][T15282] ? __fget_files+0x2a/0x410 [ 954.012505][T15282] __sys_sendmsg+0x269/0x350 [ 954.012527][T15282] ? __pfx___sys_sendmsg+0x10/0x10 [ 954.012559][T15282] ? do_sys_openat2+0x17a/0x1d0 [ 954.012608][T15282] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 954.012635][T15282] ? do_syscall_64+0x100/0x230 [ 954.012661][T15282] ? do_syscall_64+0xb6/0x230 [ 954.012686][T15282] do_syscall_64+0xf3/0x230 [ 954.012708][T15282] ? clear_bhb_loop+0x35/0x90 [ 954.012733][T15282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.012753][T15282] RIP: 0033:0x7fda4038cde9 [ 954.012769][T15282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 954.012785][T15282] RSP: 002b:00007fda4114e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 954.012804][T15282] RAX: ffffffffffffffda RBX: 00007fda405a5fa0 RCX: 00007fda4038cde9 [ 954.012817][T15282] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 954.012828][T15282] RBP: 00007fda4114e090 R08: 0000000000000000 R09: 0000000000000000 [ 954.012838][T15282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.012849][T15282] R13: 0000000000000000 R14: 00007fda405a5fa0 R15: 00007fffd18541b8 [ 954.012877][T15282] [ 955.290273][ T5873] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 955.796005][ T8] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 955.939891][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 955.960541][ T5873] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 956.004937][ T5873] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 956.020415][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 956.035366][ T5873] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 956.038127][ T8] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 956.063676][ T5873] usb 3-1: Product: syz [ 956.068303][ T5873] usb 3-1: Manufacturer: syz [ 956.073126][ T5873] usb 3-1: SerialNumber: syz [ 956.074825][ T8] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 956.124957][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 956.145698][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 956.178646][ T8] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 956.210234][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 956.245659][ T8] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 956.267855][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.288928][ T8] usb 7-1: config 0 descriptor?? [ 956.470330][ T5873] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 956.484660][ T5873] usb 3-1: Handspring Visor / Palm OS: port 177, is for unknown use [ 956.500911][ T5873] usb 3-1: Handspring Visor / Palm OS: port 116, is for unknown use [ 956.508997][ T5873] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 956.518852][ T8] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 957.207188][ T5873] usb 3-1: palm_os_3_probe - error -110 getting bytes available request [ 957.255637][ T5873] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 957.283655][ T8] usb 7-1: USB disconnect, device number 34 [ 957.303497][ T8] usblp0: removed [ 957.324715][ T5873] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 957.358423][ T5873] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 957.441286][ T5873] usb 3-1: USB disconnect, device number 64 [ 957.699807][ T5873] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 957.927739][ T8] usb 7-1: new low-speed USB device number 35 using dummy_hcd [ 957.952460][ T5873] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 958.051691][ T5873] visor 3-1:1.0: device disconnected [ 958.126457][ T8] usb 7-1: Invalid ep0 maxpacket: 32 [ 958.330923][ T30] INFO: task syz.0.2004:13298 blocked for more than 144 seconds. [ 958.338835][ T30] Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 958.369452][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 958.412884][ T8] usb 7-1: new low-speed USB device number 36 using dummy_hcd [ 958.690292][ T30] task:syz.0.2004 state:D stack:25024 pid:13298 tgid:13296 ppid:5829 task_flags:0x400140 flags:0x00000004 [ 958.779941][T15348] input: syz1 as /devices/virtual/input/input74 [ 958.786324][ T30] Call Trace: [ 958.789669][ T30] [ 958.799941][ T30] __schedule+0x18bc/0x4c40 [ 958.813279][ T30] ? __pfx___schedule+0x10/0x10 [ 958.818177][ T30] ? __pfx_lock_release+0x10/0x10 [ 958.832911][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 958.838860][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 958.845280][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 958.851638][ T30] ? schedule+0x90/0x320 [ 958.856076][ T30] schedule+0x14b/0x320 [ 958.860264][ T30] schedule_preempt_disabled+0x13/0x30 [ 958.865839][ T30] __mutex_lock+0x817/0x1010 [ 958.870453][ T30] ? __mutex_lock+0x602/0x1010 [ 958.876402][ T30] ? bdev_open+0xf0/0xc50 [ 958.880767][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 958.888444][ T30] ? wait_on_inode+0xc1/0x230 [ 958.893163][ T30] ? __pfx_wait_on_inode+0x10/0x10 [ 958.898385][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 958.903609][ T30] ? disk_block_events+0xa9/0x120 [ 958.908768][ T30] ? bdev_open+0xb1/0xc50 [ 958.913125][ T30] bdev_open+0xf0/0xc50 [ 958.917302][ T30] ? iput+0x3be/0xa50 [ 958.921390][ T30] blkdev_open+0x38e/0x4e0 [ 958.925835][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 958.930898][ T30] do_dentry_open+0xdec/0x1960 [ 958.935689][ T30] ? vfs_open+0x31/0x370 [ 958.940018][ T30] vfs_open+0x3b/0x370 [ 958.944117][ T30] path_openat+0x2c81/0x3590 [ 958.948756][ T30] ? __pfx_path_openat+0x10/0x10 [ 958.953885][ T30] do_filp_open+0x27f/0x4e0 [ 958.958413][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 958.963490][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 958.968571][ T30] do_sys_openat2+0x13e/0x1d0 [ 958.973376][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 958.978608][ T30] __x64_sys_openat+0x247/0x2a0 [ 958.983526][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 958.988918][ T30] ? exc_page_fault+0x590/0x8b0 [ 958.998502][ T30] ? do_syscall_64+0xb6/0x230 [ 959.006231][ T30] do_syscall_64+0xf3/0x230 [ 959.010774][ T30] ? clear_bhb_loop+0x35/0x90 [ 959.015738][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.021659][ T30] RIP: 0033:0x7fba00d8b750 [ 959.026172][ T30] RSP: 002b:00007fba01bdfb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 959.034616][ T30] RAX: ffffffffffffffda RBX: 000000000000a001 RCX: 00007fba00d8b750 [ 959.042643][ T30] RDX: 000000000000a001 RSI: 00007fba01bdfc10 RDI: 00000000ffffff9c [ 959.050687][ T30] RBP: 00007fba01bdfc10 R08: 0000000000000000 R09: 002364626e2f7665 [ 959.058719][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 959.066710][ T30] R13: 0000000000000000 R14: 00007fba00fa5fa0 R15: 00007ffcc4620ba8 [ 959.074762][ T30] [ 959.077842][ T30] [ 959.077842][ T30] Showing all locks held in the system: [ 959.085565][ T30] 6 locks held by kworker/0:0/8: [ 959.094764][ T30] #0: ffff888144aead48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 959.108366][ T30] #1: ffffc900000d7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 959.122665][ T30] #2: ffff88802869b190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 [ 959.131724][ T30] #3: ffff88802869e510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x25b9/0x5150 [ 959.141713][ T30] #4: ffff888028490668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x25f7/0x5150 [ 959.151482][ T30] #5: ffffffff8f58e950 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1f8/0x1b30 [ 959.162048][ T30] 1 lock held by khungtaskd/30: [ 959.166934][ T30] #0: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 959.176930][ T30] 3 locks held by kworker/u8:4/67: [ 959.182090][ T30] 2 locks held by getty/5580: [ 959.186855][ T30] #0: ffff88803136f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 959.196772][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 959.207033][ T30] 3 locks held by kworker/0:5/5905: [ 959.212246][ T30] 1 lock held by udevd/7950: [ 959.216883][ T30] #0: ffff8880256424c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 959.226158][ T30] 1 lock held by syz.0.2004/13298: [ 959.231339][ T30] #0: ffff8880256424c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 959.241910][ T30] 4 locks held by kworker/u8:18/14448: [ 959.247392][ T30] #0: ffff8880b863e7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 959.257451][ T30] #1: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x244/0x590 [ 959.266921][ T30] #2: ffff8880b862a398 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x24a/0x10e0 [ 959.276038][ T30] #3: ffffffff9a6966d0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x17f/0x580 [ 959.286519][ T30] [ 959.288853][ T30] ============================================= [ 959.288853][ T30] [ 959.297590][ T30] NMI backtrace for cpu 1 [ 959.297605][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 959.297623][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 959.297633][ T30] Call Trace: [ 959.297639][ T30] [ 959.297648][ T30] dump_stack_lvl+0x241/0x360 [ 959.297679][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 959.297703][ T30] ? __pfx__printk+0x10/0x10 [ 959.297738][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 959.297762][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 959.297779][ T30] ? _printk+0xd5/0x120 [ 959.297806][ T30] ? __pfx__printk+0x10/0x10 [ 959.297828][ T30] ? __wake_up_klogd+0xcc/0x110 [ 959.297846][ T30] ? __pfx__printk+0x10/0x10 [ 959.297868][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 959.297890][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 959.297909][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 959.297931][ T30] watchdog+0x1058/0x10a0 [ 959.297952][ T30] ? watchdog+0x1ea/0x10a0 [ 959.297976][ T30] ? __pfx_watchdog+0x10/0x10 [ 959.297996][ T30] kthread+0x7a9/0x920 [ 959.298015][ T30] ? __pfx_kthread+0x10/0x10 [ 959.298037][ T30] ? __pfx_watchdog+0x10/0x10 [ 959.298055][ T30] ? __pfx_kthread+0x10/0x10 [ 959.298073][ T30] ? __pfx_kthread+0x10/0x10 [ 959.298095][ T30] ? __pfx_kthread+0x10/0x10 [ 959.298113][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 959.298132][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 959.298158][ T30] ? __pfx_kthread+0x10/0x10 [ 959.298179][ T30] ret_from_fork+0x4b/0x80 [ 959.298197][ T30] ? __pfx_kthread+0x10/0x10 [ 959.298217][ T30] ret_from_fork_asm+0x1a/0x30 [ 959.298247][ T30] [ 959.298254][ T30] Sending NMI from CPU 1 to CPUs 0: [ 959.470820][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 959.480693][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 959.487557][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0 [ 959.498051][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 959.508104][ T30] Call Trace: [ 959.511378][ T30] [ 959.514301][ T30] dump_stack_lvl+0x241/0x360 [ 959.518983][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 959.524180][ T30] ? __pfx__printk+0x10/0x10 [ 959.528762][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 959.534749][ T30] ? vscnprintf+0x5d/0x90 [ 959.539075][ T30] panic+0x349/0x880 [ 959.542966][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 959.549113][ T30] ? __pfx_panic+0x10/0x10 [ 959.553521][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 959.558889][ T30] ? __irq_work_queue_local+0x137/0x410 [ 959.564431][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 959.569801][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 959.575962][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 959.582124][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 959.588281][ T30] watchdog+0x1097/0x10a0 [ 959.592612][ T30] ? watchdog+0x1ea/0x10a0 [ 959.597030][ T30] ? __pfx_watchdog+0x10/0x10 [ 959.601709][ T30] kthread+0x7a9/0x920 [ 959.605785][ T30] ? __pfx_kthread+0x10/0x10 [ 959.610373][ T30] ? __pfx_watchdog+0x10/0x10 [ 959.615044][ T30] ? __pfx_kthread+0x10/0x10 [ 959.619628][ T30] ? __pfx_kthread+0x10/0x10 [ 959.624214][ T30] ? __pfx_kthread+0x10/0x10 [ 959.628803][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 959.633993][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 959.639182][ T30] ? __pfx_kthread+0x10/0x10 [ 959.643766][ T30] ret_from_fork+0x4b/0x80 [ 959.648182][ T30] ? __pfx_kthread+0x10/0x10 [ 959.652760][ T30] ret_from_fork_asm+0x1a/0x30 [ 959.657528][ T30] [ 959.660797][ T30] Kernel Offset: disabled [ 959.665107][ T30] Rebooting in 86400 seconds..