last executing test programs: 15m35.833484572s ago: executing program 4 (id=151): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) fsopen(&(0x7f0000000080)='ubifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) fsopen(0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001740)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={r5, 0x9, 0x0, [0x10000, 0x200005, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0xffffffffffffffff, 0x5, 0xc, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xce, 0x91a, 0x3ff, 0x242, 0x3b, 0xe9, 0x9, 0xffffffffffffffff, 0x232, 0x2003, 0x1c00000, 0x5, 0xd1e, 0x8, 0x4, 0x4, 0x22, 0x400, 0xcc, 0x0, 0x8, 0x6, 0xfffffffffffffffd, 0x33, 0x1, 0xfffffffffffffff8, 0x9, 0x2, 0xeb95, 0x1, 0x3, 0x8, 0x401, 0x40, 0x4, 0x2, 0x81df244, 0x25bcdfd2, 0x6, 0x20000008a02, 0x2, 0x4, 0x3, 0x1, 0x0, 0x2, 0x90, 0xb3, 0x8, 0x8, 0x5, 0x1, 0x4, 0xa24, 0x0, 0xffffffffffffffff, 0x9, 0xdb7a, 0x7, 0x9, 0x3ff, 0x8, 0x1, 0xfff, 0x6, 0x2000000, 0x7, 0x18, 0x8, 0x7ff, 0x200, 0x9147, 0x10001, 0xff, 0x2, 0xb, 0x4, 0x1000, 0xd429, 0x2, 0x3, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x2, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0x7, 0x3, 0x3, 0x3, 0x5, 0x20e, 0xffffffffffffffff, 0x3, 0x8000, 0xff, 0x94, 0x4, 0x7, 0x8, 0xffffffff]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000012c0)={0xc, 0x2, {0x10001, @struct={0x6, 0x4}, 0x0, 0x1, 0x1, 0x3, 0x732a, 0x101, 0xa0, @usage=0x5, 0x6, 0xffffffff, [0xcbf5, 0x9ccc, 0x3, 0x81, 0x7fff, 0x3]}, {0x4, @usage=0x6, r6, 0xac0, 0x2, 0x6, 0x2000000000, 0x3, 0x804, @struct={0x5, 0x6d9c}, 0x7, 0x3398, [0x1, 0x7f29, 0x6, 0x7fffffff, 0xa6, 0xf5]}, {0x0, @usage=0x10001, r5, 0x4, 0x9, 0x9059, 0x0, 0xfff, 0x6c, @usage=0x2, 0x100, 0x81, [0x8, 0x16, 0x8, 0x2, 0x8, 0x80000001]}, {0x6, 0x8000000000000000, 0x80}}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r7, 0x1000000, 0x6, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000800) 15m35.113433888s ago: executing program 4 (id=154): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000002c000000180a05000000000000000000010000000900010073797a30000000000c000540000000000000000114000000020a01"], 0xc8}}, 0x4000450) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000c40)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0x9) r8 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r8, 0x110, 0x6, 0x0, 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="88af98ac09ddf0e6e7374791f115efcb10e9efff9521edffd2f55802ba38abf27861ed5aaa8e7ffd190ba5eccdb5621810350ec168ec6aa327191de267168bd1a5cdd737b450e49b078b1a2d68e9a4750a9c75f92676e0363160a5f3f6d1d1aa6d94df08a344cb6968d74e5764c558c6540bcad13828bc1d588f8af997611002a7b86f0fbf0544d67084528dccb1c5be5eeee6f1ed1b558c3d9b1de849b62e9cc2a4da17cda79f415acd61467206da4e9e4918fbd6e46ef9e771b5518afab3cb926e2d7b41596b906d22656ea2ef9943c87502bfcc8c75f5f05dfdfc28ea663b56afbc0b54342679ce4599a5346809b5ea3c08a00e3872f50a42d3246b54aca71deb044fc6998c7a6595a84fc511a337f52e76df780157d66a31eeb1114940fab52c2a1bb859d025bbceee709ecf181f891c2d83c1743420ffabde140ac247ee270fbc11b865482192c725084b124cf1139d8ff4793222443365deb55b4024194a01014b01614509c09ec1ba76a2b77b3766177e82a484222464b9c0398b5f77f28936", 0x183}], 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000300)=0x3) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 15m32.550524881s ago: executing program 4 (id=160): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000300)=r0) r1 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x1, 0x202}, &(0x7f0000000dc0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x4000}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) 15m30.606349781s ago: executing program 4 (id=166): r0 = creat(&(0x7f0000000600)='./file0\x00', 0xe5) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$qrtrtun(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r7}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}) io_uring_enter(r8, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) 15m27.060107652s ago: executing program 4 (id=179): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, &(0x7f0000000300)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x1b8, r2, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x80, 0x3, 0x0, 0x0, {0x1, 0x94, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x8, 0x6, 0xff}}, @NL80211_ATTR_IE={0x173, 0x2a, [@measure_req={0x26, 0x41, {0x0, 0x6, 0x87, "7751f527902d5cba7b69371107b75b598adcd1e49207a4008aba5b43cb546528e96a8e8c4fcca28bf584ed50b5620eb864f6c7876c6d6c8b237b6d40d0d2"}}, @preq={0x82, 0x36, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x1ff, @broadcast, 0x62, @value=@device_b, 0xfffffffd, 0x401, 0x2, [{{}, @device_a, 0x9}, {{0x1}, @broadcast, 0x546}]}}, @channel_switch={0x25, 0x3, {0x0, 0x1, 0x7}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0x43, @broadcast, 0x8, @value=@broadcast, 0x101, 0x73fc27cb, @device_a, 0x6}}, @tim={0x5, 0xc6, {0x7, 0x2f, 0x80, "a572feb393c5362dc0ca8c3ebb5e797cf214d5561c52a5c43472e918651f5f2a2e1671ac42f65e65ecd499368d503cc537bfa5b427bfd2cc015d5a8fc19346ec35fcfed61a0a8452c4138b2f882565e82e7088d2562bc1d942497a3ffdcaaca56738d94cc5763ebb5fb89de6446b1c9bb4fbae0ffc9cedbf8fc9fc077e210c4bcfdfddc766ab7e3323ffb9f33a1481ad760d82e5f1a18ea36066036abf9d8d4c1db21966cf4f059bfe618358ea333785fed19f3f87282136e5304853fd13d3de515b04"}}]}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x80, {0x80, 0x1, 0x5, 0x2}}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20008000}, 0x4050) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, {0xb}, {0xf4ef, 0x1000}, {0x0, 0x0, 0xffe}, 0x3, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x800, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0x30}, 0xc) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0x30}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000000)="97b15eab5002a93d20f881619f1b3c7184e0dd6511ea28279dd85dc3b6eb99b5901ef61016f7fb8b2084bce75d9f6c41d7a114dc842e595f812a379a7e2787b800837e543b03f01ef48854f4e4406e28076e42eccb61661fdc1e0e4421cd0d6c77356f6e66509fa138b0fa", &(0x7f00000002c0)=""/198, &(0x7f0000000180)="3c911ae0b33bda4a5d5591fa97f41d61d913d71e9fc0ba2f9791cd52fea173a9913404990e8b8e17ae7da685f923326a5701278d6b7dc332449af3a6a0a1d17e45321982efa95f691bd9f00ab82a7a57607ece44b74b839295437600d52c39260f82493d241ee54616559439cbeb508c5308a0b4b9541132ed514fecfae7ecb7c57c84b2c801aa716a61258599e16cace3d3cf95b82dcc76a3fe4cf63ee0c44b916f49cb3de1c7cf8e9ddfd2c2562fca7ac04be9be554d1fcd0dff2df78990", &(0x7f00000003c0)="fdc1d14cd87d8362031c899f3478011fda2f42e51b76f0fee77b7dd2dd2ea37ba0e2b763f5ce54c2f37cf271e7aa065b8263fcdd95e30c1b367af9c16058f38efae85514b6263f84ddfaf922ed20f0d5da4ab957d3e8692412e6", 0x0, r5, 0x4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000000)="97b15eab5002a93d20f881619f1b3c7184e0dd6511ea28279dd85dc3b6eb99b5901ef61016f7fb8b2084bce75d9f6c41d7a114dc842e595f812a379a7e2787b800837e543b03f01ef48854f4e4406e28076e42eccb61661fdc1e0e4421cd0d6c77356f6e66509fa138b0fa", &(0x7f00000002c0)=""/198, &(0x7f0000000180)="3c911ae0b33bda4a5d5591fa97f41d61d913d71e9fc0ba2f9791cd52fea173a9913404990e8b8e17ae7da685f923326a5701278d6b7dc332449af3a6a0a1d17e45321982efa95f691bd9f00ab82a7a57607ece44b74b839295437600d52c39260f82493d241ee54616559439cbeb508c5308a0b4b9541132ed514fecfae7ecb7c57c84b2c801aa716a61258599e16cace3d3cf95b82dcc76a3fe4cf63ee0c44b916f49cb3de1c7cf8e9ddfd2c2562fca7ac04be9be554d1fcd0dff2df78990", &(0x7f00000003c0)="fdc1d14cd87d8362031c899f3478011fda2f42e51b76f0fee77b7dd2dd2ea37ba0e2b763f5ce54c2f37cf271e7aa065b8263fcdd95e30c1b367af9c16058f38efae85514b6263f84ddfaf922ed20f0d5da4ab957d3e8692412e6", 0x0, r5, 0x4}, 0x38) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r2, 0x3, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000851}, 0x4) (async) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r2, 0x3, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000851}, 0x4) openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi0\x00', 0x181000, 0x0) 15m26.308418024s ago: executing program 4 (id=181): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() recvfrom$l2tp(r2, &(0x7f00000004c0)=""/159, 0x9f, 0x40002001, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000002060108000000000000000000000000050004000200000009000200ffff7a3100000000050005000a20000005000100060000000c000300686173683a69"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r3, 0x75e7f000) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000440)={r7, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) 15m24.541980652s ago: executing program 32 (id=181): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() recvfrom$l2tp(r2, &(0x7f00000004c0)=""/159, 0x9f, 0x40002001, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000002060108000000000000000000000000050004000200000009000200ffff7a3100000000050005000a20000005000100060000000c000300686173683a69"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r3, 0x75e7f000) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000440)={r7, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) 12m21.659918354s ago: executing program 5 (id=615): syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d492000000010902"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[], 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 0x3, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r2 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = fanotify_init(0xf00, 0x2) fanotify_mark(r3, 0x505, 0x40009975, r2, 0x0) r4 = io_uring_setup(0x4beb, &(0x7f00000001c0)={0x0, 0x35a, 0x200, 0x1cef, 0x35d, 0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x3, 0x10010, r4, 0x0) syz_io_uring_complete(r5) 12m17.73589815s ago: executing program 5 (id=627): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000d80)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\x9a1\a]2F\x02\x8f\x0f\xb9K\x06S\xae,\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\t\x00\x00\x00\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\xe3\xa8\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85\xda\xbfR\xd9\x7f[\x04\x84\xc8l\x8b<\xaa8\x92\x0e!OaN\xf5T\xcb\xa4u\xd1\x81\a\xd7\xf6S\x93\xf0\xd22\x13q\xb8\x95 `k\xdb\x1c\x82\x85NS\xed\xf48=\x04\x00\xccL\xad\xf4\x02?\x9b\xee\x05\x1d\xadK\x99\xb4\x85\x06s\xde\a\xfd\xd2\x15\x955_\x8a\x9d\\\xe7!\xd7t\'\tu\xee\x83M 1\xd0\x8d\xb4\x8e\xa0\xf4\x11g\xfd=\xcf\x10K*+\x82\x9f\xdd\xf4\xab\xa8(i\xbf\x86\x06o\x1aq\xa3,\xda\x7fJ\xe7\xe2\xcc\xcbX?\xbeV9\x8a\xe6\'!\xab\x98]\xe2\xebZ\xcaW\xfd\a2\xbc\xb5\xf6\xb0<\xbc\x98V \x93\x02\x17N\x14\x87U\xa2\xab\xaf\xf8\xe9\fa\xc9\xdc\xa5\xb8\x10\xbd\x81\xc7\x18e\xdaojn\xfb\xc5\t%{\xeb\xad_\x9c\xd3,=\x9d\xa7\xa0vj`\x00:TN\xc0\xb89\x98Y\x12N}\x9a\xa7d\xbdG\xeeA\xe0n\xd5\xd4c\xa0\xfaI\xee\xd9\xff\xf1\xd2\'\xa6~i\xfe\xcb\x12\t\xc2\x9cm\xc2\r\x88\x90l\xbe\xbf\x9fX\xc5\xc5\xe4T\x17\xae\x97\xd8u\x9b\xb6\xd8\xbd\x9d\x82$\x15\x97\xee\b\xa5\xa1mn\x16\x9d\x1b8>Y\xd4H\x82\x12\xa2\xef-\x03k\xe9\xd8\x86\xef\xacF\xe2\x82\xde1\xe8)9\x00\xbdD1\x10B7\xc8\xcc\xba\xb3\xa4s\xc90\xf9\x80\xf6]:\xe3.\bc\xac\xcbi|\xd8,\xa9\xc79#\x9cbL\xe9A\x17\x1f\xb5\xa6a\x85Q\xf9\x12\x9dt\x16\\/9o\xa2?\xde\x95\xc0\x02\xae\xbf\xe1\xf1\xec\xeaDdm\xc6\xc6\xa3\x9e\fE\xcf\x9f\x82\xfaq\xc1$\x05\xd8\xaea\xba\xdc\xedk3\xdb\x13s\xd5\x8aM\x8a\x9e\x05\xb4\xf9\xb5\x88\x02\x85\x03S,HM>\x13\xf1\xa6\xc9%_\xe0\xda\x0fg\xf3O!\xed\x18\x18\xf6\xf9\xff|\xe8\x02\x8a\xcb5Z\xd4;\x10p9+G\x1b\xcc\x8a>]<\x9bT\x15\x9c\xe9~+`\x7fU\xc4\xb5\xdat\xdep\x8e\xc1\'?\tu\xb8;I\x95\xcf\x81\xa9o\x00]1v\x18\xaf\x0ej\xb8\xe3\xdf\xc8\f:\xc3\x89\x11\xfab\xd4\xc3d\x9a\xa4\xed\x874\x96\x84\x99\xe4\xf0\x95?\xed\xa0)K\x01\x80\xbe\xb3{\xdf\x1a\x97\xa1\v\xc1\xd4\x16\xcd\x1d\x87\xdb\xd2\\\x1a\xf1#\xd2*\x92\xbc\x9f\xe8\xaa\xda\x8c\x1d\xa8G+De\x1c', r0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x8882, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f00000005c0)=@assoc_value, &(0x7f0000000640)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x80000001, 0x105501) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x4048841) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10002) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x1, 0x200080000000571}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffff6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000672327af0eaccb8a080034000400000008000300", @ANYRES32=r7, @ANYBLOB="0500330001000000"], 0x2c}}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) 12m13.413611434s ago: executing program 5 (id=639): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) unshare(0x40020000) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, 0x0, 0x0, 0x4, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x11, 0xe, "fa6f7ce522753c82a6b0cab67df1"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000004c0)={0x20, 0x1, 0xe5, "332fd35e6119f383a8b03a5a2caceb33e1c6d37a96752816c8482111301b6d13071166b091b9dfd395154a674367b60eb269c7ba8fd793e12fc55cd0c9fb3291a13363abdcb37675a572377f14a699fa624e6b09065acd69b51e6baec8585a4f379dd8a1bca84dafb7d504ef63ad8e7a9c8f2d1af6a6ad7163197c960a5868b8d3f36a26e256516453cd6fbef29eb96d149c34bd3ea80ba71c933401d063cf6d557f4af3005f51ddb67cfb91105576a30715e669a3d3a705568b43f8a61ea3261d2d97ebcf2da54ea01ffbe78750ed307dc4d0780eaafe4272a26e02e75a24fcfed6b36d5f"}, 0x0}) clock_nanosleep(0x9, 0xfcfdffff, &(0x7f00000004c0), 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000280)=[{0x7fff, 0xffffffffffffffff}, {0x0, 0x1542}]}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000040), 0x10) sendmsg$netlink(r3, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000000540)=ANY=[], 0x10}, {&(0x7f0000001f40)=ANY=[], 0x28}, {&(0x7f0000004540)={0x94, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@generic="fbb58747", @generic="8503c3cf35c1b9da5aac537fbed816bcad3846b3e9f21dba6890e49f13bcee327b706250ffdaab07aa5101b35c67ea18201453f835d9011133720f6235bcb3b65fcc61b32ab24c00936b89c7f78915debc371432d5c4228c36915fb5aec7cbef3ebfc41df75890eda2bd51c2a79acaa6e9a518f07b", @nested={0x4, 0xec}, @nested={0x4, 0x33}]}, 0x94}], 0x3, 0x0, 0x0, 0x44011}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) unshare(0x40020000) (async) socket$packet(0x11, 0x3, 0x300) (async) sendto$packet(r1, 0x0, 0x0, 0x4, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x11, 0xe, "fa6f7ce522753c82a6b0cab67df1"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000004c0)={0x20, 0x1, 0xe5, "332fd35e6119f383a8b03a5a2caceb33e1c6d37a96752816c8482111301b6d13071166b091b9dfd395154a674367b60eb269c7ba8fd793e12fc55cd0c9fb3291a13363abdcb37675a572377f14a699fa624e6b09065acd69b51e6baec8585a4f379dd8a1bca84dafb7d504ef63ad8e7a9c8f2d1af6a6ad7163197c960a5868b8d3f36a26e256516453cd6fbef29eb96d149c34bd3ea80ba71c933401d063cf6d557f4af3005f51ddb67cfb91105576a30715e669a3d3a705568b43f8a61ea3261d2d97ebcf2da54ea01ffbe78750ed307dc4d0780eaafe4272a26e02e75a24fcfed6b36d5f"}, 0x0}) (async) clock_nanosleep(0x9, 0xfcfdffff, &(0x7f00000004c0), 0x0) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000280)=[{0x7fff, 0xffffffffffffffff}, {0x0, 0x1542}]}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r3, &(0x7f0000000040), 0x10) (async) sendmsg$netlink(r3, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000000540)=ANY=[], 0x10}, {&(0x7f0000001f40)=ANY=[], 0x28}, {&(0x7f0000004540)={0x94, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@generic="fbb58747", @generic="8503c3cf35c1b9da5aac537fbed816bcad3846b3e9f21dba6890e49f13bcee327b706250ffdaab07aa5101b35c67ea18201453f835d9011133720f6235bcb3b65fcc61b32ab24c00936b89c7f78915debc371432d5c4228c36915fb5aec7cbef3ebfc41df75890eda2bd51c2a79acaa6e9a518f07b", @nested={0x4, 0xec}, @nested={0x4, 0x33}]}, 0x94}], 0x3, 0x0, 0x0, 0x44011}, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1}) (async) 12m4.623942835s ago: executing program 5 (id=654): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x26020480) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000841}, 0x8000) r5 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2de, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=@getqdisc={0x3c, 0x26, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x12, 0x5}, {0x3, 0xf}, {0x10, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8020) 12m3.012524894s ago: executing program 5 (id=658): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f0000000040)) 12m1.211577488s ago: executing program 5 (id=664): socket$kcm(0x11, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) shutdown(r1, 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) r2 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r2, &(0x7f0000000500)={0x2020}, 0x2020) write$vhost_msg_v2(r2, &(0x7f0000000280)={0x2, 0x0, {&(0x7f00000001c0)=""/132, 0x84, 0x0, 0x0, 0x2}}, 0x48) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000040)=r2, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 11m59.698201166s ago: executing program 33 (id=664): socket$kcm(0x11, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) shutdown(r1, 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) r2 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r2, &(0x7f0000000500)={0x2020}, 0x2020) write$vhost_msg_v2(r2, &(0x7f0000000280)={0x2, 0x0, {&(0x7f00000001c0)=""/132, 0x84, 0x0, 0x0, 0x2}}, 0x48) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000040)=r2, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 4m49.275677125s ago: executing program 1 (id=1653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000000050015"], 0x64}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="000048ff00"/14, 0x0, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffec0, &(0x7f0000000580)=[{&(0x7f0000000240)="7452f0c4a5bd3b0b9b4c4f1010893fdd2fad9250c64335283bd13965713c5c0996f7a9d1843cfd8992e85c1aab068fb76cefc9d256c6e5d5056f9ad007397b59c1b61ba02b73315f60923b5c9a6db51b1cc3ed6c9218e5c0e6b20b0023bb808d2e7582adb3f1d17261a397b9b202fbf2b6"}, {&(0x7f0000000300)="0000000000000000bbcfe77deb2dbaec4f3fb5686aceac8842d91cc82bb54e09f9a80d0409f8638f608cb39424f52f3f9c5f7b86581423c9fe2af11b1048cbc5d1dc1d3ddb5479dfd5759df33da179a425ecd78fe00e1e7ec98f5b4ed08e3ffdb3bca394429e56f9bed453d6895b2cccc6d9d1e8d0585fea"}, {&(0x7f0000000180)="39248b1f61ac622de569a76224bea51af0e5e6ae3b093085f845cc1bd4"}, {&(0x7f00000004c0)="fe69ac14ce03348ec4ffff00000000000025c8f737f8752844140e0d22b49f60f274a4b0f47f7cf07030c0bdd646d01c196cf1e6e2bdd2f8e055c5039d6decaf30265b90be0c92942ddeaef8308484ed4aac8e937ea42179a835a035876afa52e3bace68348642b6a8634ea79bc9eda4a66f632052323b3d5d239e6bfad1fb5eafbdcc505e8c4c017cd32466070ac1f0be7b7ec7620000000000"}, {&(0x7f0000000600)="4c9f42568a320e6e8200ccbff008baf93ab3759181eb227c8a4cf3813c32164b8953eb9698deb24e60f764c4483bf508c34f4d42dc1c8906842114300a58440c4c5a96a9c4525f1f3a8b70bcd20e8778ec21b0968f492b73a8dc43fa7b87c0ac88539ca918beb0c10e53d5a57bef4572ef64d7c5e8730d"}], 0x1, 0x0, 0x0, 0x7400}, 0x400c818) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xf0f03e, 0x2}) 4m49.013769512s ago: executing program 1 (id=1655): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000f80)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = socket(0x1d, 0x2, 0x6) recvmsg(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee8, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r2], 0x84}, 0x1, 0x0, 0x0, 0x40000041}, 0x4000084) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="05"], 0x1c}}, 0x0) 4m47.683206109s ago: executing program 1 (id=1658): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) unshare(0x22020600) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup, r1, 0x1, 0x0, 0x0, @void, @value=r4}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4m45.805274134s ago: executing program 1 (id=1662): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_usbip_server_init(0x3) (async) syz_usbip_server_init(0x3) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x9, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x1, 0x8000, 0x0, r3, r4, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x300) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{}]}, @struct]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) setpgid(r0, 0x0) setpgid(0x0, r0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', 0x0, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r6, 0x509, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1772cb5081a3ae1b}, 0x2004000) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r9, 0x11, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x841}, 0x8800) (async) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r9, 0x11, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x841}, 0x8800) openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x523, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m44.623213961s ago: executing program 1 (id=1666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x50) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)=0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000005c0)=0x3e98, 0x4) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2b4, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1300, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) close(r6) 4m43.739022824s ago: executing program 1 (id=1669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @loopback}, 0x1c) shutdown(r5, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x1b, 0x0, @val=@tracing={0x0, 0x5}}, 0x20) 4m43.029908654s ago: executing program 34 (id=1669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @loopback}, 0x1c) shutdown(r5, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x1b, 0x0, @val=@tracing={0x0, 0x5}}, 0x20) 2m57.020427394s ago: executing program 0 (id=1886): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x42, 0x80, 0x1, "2210011d6f5abd2acb2d1e747a78666f15b3a7604e06d22b14544be8ef6ea4d09421acc0bac2337799c3a6c90958fd31e154d2727af202cbffb5af6c30245b803b99"}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r3, 0x1, &(0x7f0000000100)={&(0x7f00000000c0)=""/19, 0x13}) write$cgroup_pid(r2, &(0x7f0000000040)=r0, 0x12) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x1) 2m55.571560407s ago: executing program 0 (id=1889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x28502, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) getpid() ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000011c0), &(0x7f0000003dc0)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x403, 0xfffffffd, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x100}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmmsg(r1, &(0x7f0000003c80)=[{{&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @private=0xa010101}, 0x0, 0x2, 0x1, 0x1}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000340)="62ffc4602245df65788ca23e7c1a59a164c5d364c627e00e27ca9fc8c1bf0e4b18aa961e5d87c28d073b35e7a471d91efce884c58221a23c9caa40242a07d0a5360ac65d23f388a00700a2d34e38c762b376fa74d933991c56cdc1bcb0712f4ca7a32bcb28b634f9884770fbd6ec50fd0aa172cc4bb2e1f6789f4d8a2ebdccc667ff9301aa01a2971765d9af22475cad4147435963a812736eacd2b24bd4a692b4fd79fa829fcac87129fa41b074bd725245d585a74df0b7874987bec74d79215874dc1004ebc1bc1964a3", 0xcb}, {&(0x7f0000000140)="ba21b35e0eaecce847a670903d9c5774e94681a2f35647869a32d3a7a294b9cf8f6abfc4902842cda2e3ddf5e249697ab10ccfd9d2aec4756533cd3dc619afdd2fceb7", 0x43}, {&(0x7f0000000240)="cf53a4bbae51bbcdb8a0228be0aade66a704c43c1ff695c07ce185cf8318e1188d18e27607c2c9199fc4258eec04c74b049b66823de68068418b8fed2fc7d0c87881793ff722d218f77085cfafd87cd87bad513e8bb05d36cb6b7e5be03e8f2c81ac949910f31891d023095542eefdb8c5eebb3fa0d6549638", 0x79}, {&(0x7f00000002c0)="1e133bd5ee3c4c3e96aad038c1ad18b0fd4eee88e7", 0x15}, {&(0x7f0000000440)="f73cb474eaedb1631f036d4e4edd684bf26d4d4ee3dab0c97f68ed5c45ef47c01cc06c6f65c011dcff0cff7bd75d8269d00f3662c70e7638c3fe8dfb6ec68cc7da158eb61471e84dec87e1d4b88e1ab4ad9fbe2ae0ee1fadadad382c4396c80ce2bf224e2f0312b6686eb31819b6ed9345259aba44105eadece8a6dd57d456673f7a230a6cb04036346c1f6c4013cdb4046f324226f7285b4591035ce23e49249bf21e70f30133a59e5d7a67d56ac447ad9763f966da56f2ecf328f30e58e6f2cc99614f325012e994823c43ff5cbc78092a791ef5d9b69605775dedb444399cd445da", 0xe3}, {&(0x7f0000000600)="41063dc6b480d9672a57eae1fb7f9d09630320e4715fc877dd543f387e1f70890fcb27f7c3c8bc804139b0b9f865e61a3958064ace960483d6f1936368243a33d7ba6af235380e26e6c060694a9a2c328779dc930daa7d7af499cea9be58aa23bcb87f0658f1a38039fa74acc7da8bba039d4a6681647482568bdda8e06f9e9e6172f28332df79334e5055697de99ca9256b2b447fb804db7306f7e9148afefe32110bfb9772c59f7b", 0xa9}, {&(0x7f00000006c0)="167a7f55f7c2d928c266f3db46a05ba604eb12b562e720d5ba46298522261a7d3b88eba40d027e710b3edd3b9e928473b112d695a80e3ed86cf747b213954388671af055dcf39473e9e347c498db6f9eebf5ff7aa939afe78feb0597ba415e9e5e7a8028382d0a0511b81b40e9683e6a4a3c0a2df693cbf0ade9e042b7", 0x7d}, {&(0x7f0000000540)="51768ff658bfa3a3d03e760dbfcce90eefc4", 0x12}], 0x8, &(0x7f00000007c0)=[{0x108, 0x10e, 0x87, "3947438819a868aafa27ca668696b4008358f948a58c1868fce6cab88a449fe28006c2d3b9066e8f3f16866431372921b2c83d1d22a1b8b4d042dcce49f92bf6c3494f67e0dadfdf78cfc1f46a10c2d9e3aaae8625772ac05615874444152e4cdb997537f51099f60539526655dc86342beb68a2e449bafc7bf50d8ff33f1ad1e4da32620f955802fdddf29104e63ccc6b8cfd5b7670318a25f5cacee4b71e2df523354294f7e5b5c4cb9d1a530f6793d3cb308c115fb3e029f714799c4aa1e111ed28d6eecbb24371294ebb56337d0e527bb3cdd68b846de722e08896ffa263b016611fe286f3e4bb42c734846ed96184c7a1dfed"}, {0xb0, 0x29, 0x4, "88fb7b91f4832b947c36f02cbf68f8e38849c5e05ce883615121516891339d8cbcfd688afe773073c41ef7c3c3be5309158efab1ca374bc057bf14eb308e08cc0196246d6f4eb95319ce61ad624f30f62009d2d31018ee9fb58155d45b5c0516312762b985d53dd10a2113eed486f6ff552eb7fc688a9986734ddb02a461c0e6ef05ed4bcb1f70fd4b996c9b1f8970823ba45492c8387b312b42e76e63"}, {0xa0, 0x108, 0x9, "0069d0c6cdcba92cf455474e908e577b64466512d026e21328c3f36539221ad3043db5d4434f8df4c74f0ff7c485f96cf64c75d5d46e05f9f789b64b4796c24a22c0720d09b0b43a45be6f5dbaf3eb2b6e555d780cd5f351d9a49574602ac32d95330ef567e3582d5f47c2aa6220e088c24fbd958e8a39e8211bb653cbf21504c44aba60bbb2cd3ecb824fc85937"}], 0x258}}, {{&(0x7f0000000a40)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="62d5329e8208ae598024a923dbf45f6c421c2dbae5c091536fffb20ca29b96747f3ab23a7d0a3fb8053c1809d4deb5ff5ed7b47b2181bb08899466b2d0558cb9d30f35268ca8a020ea", 0x49}, {&(0x7f0000001300)="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", 0x1000}], 0x2, &(0x7f0000002300)=[{0x70, 0x29, 0x7, "67c87e5f1fcdf6c4cc4cd73cdfcb8dd2a2333311f2c058e7abfb499331546f2616e5a50806b9a32dd9ad190525d9530a591a2ffb0ca74208d3e28629f9819019350d59c0e2a2b8cd83c5615beafc81c09c551b5164d980730da8bfe1e7c41802"}, {0x20, 0xff, 0x1, "d32f65042f3db8108f6aec0f98"}, {0x70, 0x10a, 0x9, "8dba60d65d5abdfecea73334a09a08f149c8b8ffdb4b46bf323649ae28c4b811b185a587c46646c9dc59742f9c20b60799c739ca7257f94abe191e3dddb6ac636349f8d55995ab039c1d90a7b9ab8eb207559db6f89f0330b44156eb4a"}, {0x78, 0x118, 0x7ff, "905551d19e03a1d7e3cb93a9359caab4bf555b842ef9c4560a4534a611a2381c3cc1e63d48a668545d4b25081bfe87540465508ed33888c8230e2d4dffa9a09f15a85cc64e8f4304c2e2f1d030ddf3a30f1df476e962299d9aa4d478b37cb4ab50037f3bd20c49"}, {0x80, 0x10b, 0x3, "17bec093af1b8161dda3c93dbdee402856333b9640df5cda3556e1209b40b2efe0a60e768c588cb9936349a5d4c53b6f8aee4e04aa7ad8a27b9b1b7a6f7aea88ba2f339ce14c386a8b60fa37271f18674435d596351811c59488f89a3a7c4635cc56d918e1e9d3e65a70"}, {0x18, 0x10b, 0xe8, "39c475d3"}, {0x1010, 0x114, 0x2, "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"}], 0x1220}}, {{&(0x7f0000000b80)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x200}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c00)="78c022d83e4d2c36ad6f59cb31354dd543ebab126ec39543de63804b62c9ea1804c2ad01895d7e6f091f2d1b816240c1585d5ff457b17d48a1e0862d8a98d0158c4b3e7ee40d8aebf91fc0a4d9b1f098242458f9c944f85d3829f64c64008c6ffe1006db195e2ec3dd5c01e2233bdd24c2e542a91195", 0x76}, {&(0x7f0000000c80)="7df89adeaaaf8ce427494abfcf718bbac96d722017e8bfcd2a0d9a737a425174cb64c868a6d88f2675e622971addf1a44a3f1275a2695af66dc402872ad8205dbb6dda18540c222dd88c2dd3ae7438518eb79f155bc62b9775276e187695969f89e89fce0a884c0c9ab9837c55855bdda1cb829c9eb4c9f254da8fc32225eb205686df", 0x83}, {&(0x7f0000000d40)="b17495322b8af8b8dd23488e6420ebbef6385088535bff4c974c5c8b8823c556d5a967b526218a590a6e15b0dfcd1b0c484eae04f2d7115662f6e9fc705cdb83b242eb0b9f1ef90aeb2013327eb0e96b25114e34767ed3bd45cd179dcf4ac2dc80bc23b3755c0ecbbfcb358e54eb946b11eafe8aab71b85eb1437064fbe7c80aa54130e9b87ba94bad24396281bea4f1f48b5f95bca207d24d7aea9d73c77852b17034a99728d8fbf793af0d76539b78439987a4721f551d72238fcbf754fd667cf948e44d78e29f2fdb159c6630ac8f747681b9e65fc206ef1cfa2aed31719433b49c0b674963cb29", 0xe9}], 0x3, &(0x7f0000000e80)=[{0xe0, 0x112, 0x1ff, "a1f59fc0296d0acf2619931d75c26b56e4d575a5756135f0750b8a871d471d5e4b03e21bb694482586f1486b842298f8612a1723a9aeb6ae3aa8cbe440cfda13ada3f505cf159222368be52bf8099c1db80fe06cda2f71796abd6224b4c854a69e484a9e6ff8e25fe4e6342772c4ab096bb526e2cf0597971f6c67352138f151aa224c80f11dd6ac70d397001409f02867d0718be65d27896203a124416af9f2ec8eaa66ec1a8eba7d3fc9de79c92cf3cb6d3b8f7725b81176d5c82e73dc203534208afb7276e00b7753"}, {0x88, 0x11, 0x3, "ee32312128613bf2f6e2558323add3b07b10df38749cbfcb78b6d14dc0b98a6d4b051931615dc1377fe28cb43ff59fc754659e049f29b98aea420bdf6eeb34b135ccd665c593de96a5a09a8cb49f4250bdc96e571d4d98b75bcbbc56b0d9bb8230115b74bcfb19b684fab82f98eb13b7f2"}, {0x78, 0x0, 0x2, "965536f04f6f77a16ec95b158b6674ef1a2f883e0e96bf7b921823edfff08dafad8032cae7d7afbe5bb6d898356f878272104355c741af06945b6c4186228e56ac92fcbfbfd32c4d0c291ffb1ed88ad7265f521e50cde2e7c2e1d9cb4e0e40433a"}, {0xc8, 0x115, 0x6, "cbcb73405d4d8672c0e20a0ad9390139cd99893e8a81a7e00069afdee707e1f2f576de4cd5762f005b6b332058b63dd663584bf36d9f2e03a75d0f556e2001d3c4d3317c6e80881ec8aa56fd34c457caa19506596057de8448ee02151bf0dee29e27cd2caa3f5f7e02fdb62b063332525e0d772b0f873fca67c93ca9806a59e2ce9e067f171dd1ab73aa04a9b3a2a58e2859078100e7c5e26a96d7d27d672dead62328897e4f60f62b8f0f99e4ac3def75a8a8db"}], 0x2a8}}, {{&(0x7f0000001140)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f00000011c0)}}, {{&(0x7f0000001200)=@pppoe={0x18, 0x0, {0x2, @local, 'macvlan1\x00'}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000003540)="ebeb5dbd4296140c6b635e31bf40a0b5c4a341e02f60abe04ad09474431862ffbda811593b4b972d73c30897e1132e5d9e3021f9356a9bfff3e6050956f128e7c5da0f70d121a635ceab767bd351034de9a0fcbeb451c68d76f255c59e96d0cdf61a7d803fa0d9047d8c5e6791", 0x6d}, {&(0x7f00000035c0)="c3fb6ffdda7f138eb2ab469b73538c0339ce22edd5cea06ac47a35808c12a4d2ea758cfcfb55353e8a8bfcf9585a4d276ea45e37555bb49aff6d0e640a63773a79b7ba5fa3cd7f8e6a7f35e96b9165fd1850", 0x52}, {&(0x7f0000003640)="06ebea9086638d9c05d7095e2b381b6bcc1390ad12cb8a2fcfe15f414565bb110382533f4d7bd1e725b3a00472d49008a0dcc72fe2d99123bca5f12e339e9f7b3d38e39825ee634a035d8124dd9f94c0fd6a765ccdfab467af8f0f2c66110b3b44ec11553aebc3fd8227f8bf383b2a7c284a87bb227089c9abfb050d5d8cd8d1ce9f0a877559164cacb96996cb6e6bdd12a8c8c4255709789210d67936ad26ddaf6f9e174e19b517bde79eafdddc5e5a0befe845c1c7d34ca41a537cdad0f5b2a54b87ce10f8cd0d3436970d13082326a36729", 0xd3}, {&(0x7f0000003740)="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", 0xfb}], 0x4, &(0x7f0000003840)=[{0x98, 0x3a, 0x0, "d945cdd936d51fcace2f64db64f3ae9030beb57d4206e025a0c2ca81bb9bc5479a3ce8bd328cecd59e57f9058381ffe6b13b45f5535c507373119436768a1d3aead338df606c79716b54b5b7de50ab76176c33497e6cba51aa8555593b3ce97fcef4c30a10688eb3df1e128968a603e380fbf264a8627c306b3ca2947ffa48aea94b1a"}, {0x110, 0x10e, 0x2, "608cbdb0999128cea5cc644c2a8df281e50fcc24517d052ce2685e7d828afa3a4ed871f25e9473cfb56e211238faf1863131f1e04a4e7e4866ec94dac9e53c3f83f48749af6c687be126d7bfc6d927743b8bc652217399e6f45a6fc0dff5727cdd81eab340f579f5841bd72254e27f0e171075a5d3ff582bb3c7ea66fc799eb2c7e08961eced959d5c2c2842613f3b549ba0d56de02e54959020953c5da96830997724a1a52cd002f353bf2243724c815e52f4985787ccc463541d80a8472b44899241618d3b6287af6857d3f8cf0969b1cc1865073747d4de6ee54a5e4ad6a10396858e86a9c3987e75ca1a92df9919517ebf15e79da36f81"}, {0x60, 0x118, 0x3, "461ee80dd118a50a378fadf8dd737ba3bbbb8d73e526f8f76c7ff7257dc95ea8da956278847bb724f9cb717a43bf2b07e4c99c78ba16b5195fa8a0a58c6806751f83e08ee2e174a0da8e641990e1"}, {0x68, 0x112, 0xc, "0679d1864dd9c0040e08877389b7461b16d1755dc73fa35fe0c70f8573972c22ace012607b1c8b418340565d448c7221161ef3a550928a530c01c2c0b342725aa915b50fb27d5cf671e9c340547d63b61a4e"}, {0x110, 0x0, 0x7, "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"}, {0x40, 0x1, 0x9, "db84cfc30cd41397276e51881c5443e094d82b543f27790183e3a05655760b7deb6e5974c404ce63cfbb98c67328d09e"}, {0x68, 0x110, 0x7fff, "7c109fe98becd7ee4745cfa3447657946019c16d0dd0878228a15453de757f93f71a787bed68865de185f8e2a25d092ef6b03d15a14f9b4737d8eb4e85c201c6997a35f8ecd8b2456138f255dd492a22a46e"}], 0x428}}], 0x5, 0xc805) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8902}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) syz_genetlink_get_family_id$devlink(&(0x7f0000003e40), r1) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r7, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xba0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x7dd9, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3df}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = syz_open_dev$loop(0x0, 0x7fffffffffffffff, 0x20000) ioctl$BLKFLSBUF(r9, 0x1261, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) 2m51.66275615s ago: executing program 0 (id=1903): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) lseek(0xffffffffffffffff, 0x1000000000931f, 0x0) syz_emit_ethernet(0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffff0800450000360068000000019078ac1e0001ac54142c053490781200183f25000000000000080d290000ac14149ae0000002001863714ab9"], 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r6, 0x540b, 0x1) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)={0x34, r5, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f00000000c0)=0x58, 0x5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 2m46.66108531s ago: executing program 0 (id=1911): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0xffffffffffffffda, 0x0, {0x3}}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0x0, 0x900f, 0x0, 0xd57b, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 2m44.223942133s ago: executing program 0 (id=1916): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000f80)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = socket(0x1d, 0x2, 0x6) recvmsg(r5, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee8, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 2m43.551210707s ago: executing program 0 (id=1918): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './bus\x00'}) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040)=0x1, 0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='adfs\x00', 0x8000, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000000c0), 0x1) sendto$inet6(r5, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x242, 0x161) write$tcp_mem(r6, &(0x7f000003eec0)={0x7fffffffffffffff, 0x20, 0x1, 0x20, 0x2}, 0x48) 2m28.290305166s ago: executing program 35 (id=1918): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './bus\x00'}) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040)=0x1, 0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='adfs\x00', 0x8000, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000000c0), 0x1) sendto$inet6(r5, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x242, 0x161) write$tcp_mem(r6, &(0x7f000003eec0)={0x7fffffffffffffff, 0x20, 0x1, 0x20, 0x2}, 0x48) 24.933106851s ago: executing program 7 (id=2222): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000440)=[{0x0}], 0x1, 0x5f0e, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000140)={0x42, 0x80, 0x1, "2210011d6f5abd2acb2d1e747a78666f15b3a7604e06d22b14544be8ef6ea4d09421acc0bac2337799c3a6c90958fd31e154d2727af202cbffb5af6c30245b803b99"}) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f0000000100)={&(0x7f00000000c0)=""/19, 0x13}) write$cgroup_pid(r2, &(0x7f0000000040)=r0, 0x12) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x1) 23.207113028s ago: executing program 7 (id=2229): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300), 0x443, 0x0) sendmmsg$inet6(r0, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x74, 0x0, &(0x7f0000000100)=[@acquire_done={0x40106309, 0x3}, @release={0x40046306, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x6, 0x2, 0x15}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0xa, 0x2, 0x29}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}, @free_buffer, @release={0x40046306, 0x2}], 0xa0, 0x0, &(0x7f0000000180)="7c369f11d704400c90122c4e556d48add93d95a8eb96a3ad54c3bbb8989f8652ad71b97efbed954d80909c67460998db7b78d1eb81886dc6af13acce2b0f2edb9f1107518f952730bcdcef6f41ea9739ad6cb89de0d07d626da0c813b5f28147a31ba7f9047501e6665347dd8dcff312448b3c64cedbb3c478baa2be0c2fd6085095dbcc09a016bd06e6a585cb7ffa777bec0ca8209a242cfda0db21814269a2"}) fsetxattr$security_ima(r0, &(0x7f0000000340), &(0x7f0000000380)=@v2={0x3, 0x2, 0x14, 0x4, 0x49, "56ce201360a2534742320af4b929ccc9c0bf7e9fdca7b1e5f8efcb609c7f42cc2ba498bcbac1ab4460fbbbdf164bdf67542100b67495a6e18e84afa23450a506707a0bfec2757c294a"}, 0x52, 0x0) 22.036204582s ago: executing program 7 (id=2231): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0xfffffffc) socket(0x28, 0x5, 0xe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4085}, 0x4000045) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="780000001000010000000000000000000000000a44000000060a030000000000000000000f2d00000900010073797a30000000000900020073797a32000000001800048014000180090001007866726d0000000004000280140000001100010000000000000000000000000a"], 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sched_setaffinity(0x0, 0xfffffe72, &(0x7f0000000440)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) accept$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[], 0x159c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0xef) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000180)=""/62, 0x3e) kexec_load(0x100000000000000, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0xfffffffffffffff7, 0x4}], 0x0) 19.666467979s ago: executing program 7 (id=2233): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f00000005c0)="f4", 0x0}, 0x20) 18.652255093s ago: executing program 7 (id=2237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/fscreate\x00') writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)='k', 0x1}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getmulticast={0x14, 0x3a, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2000000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="808beb668240", 0xffffff33}], 0x1, 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 16.713011628s ago: executing program 7 (id=2243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./file0\x00', &(0x7f0000000a80), 0x0, 0x4, 0x0, 0x1}}, 0x40) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) sync() sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) 13.568028653s ago: executing program 8 (id=2249): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvfrom(r2, 0x0, 0x0, 0x40010000, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x3}]}}}]}, 0x3c}}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x11) syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = syz_io_uring_setup(0x47ac, &(0x7f00000001c0)={0x0, 0xbcb2, 0x1, 0x1, 0x142}, &(0x7f0000000300), &(0x7f0000000340)) r8 = syz_io_uring_setup(0x308, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x31d, 0x0, r7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x8) sendmsg$nl_route(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd29, 0x10, {0x2, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYRES16=r4, @ANYRES32=r4, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) syz_emit_ethernet(0xde, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r12) 11.452897973s ago: executing program 3 (id=2253): bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x40000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) 11.364096148s ago: executing program 6 (id=2255): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x100005, 0xb, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 11.207582496s ago: executing program 6 (id=2257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.150881308s ago: executing program 8 (id=2258): socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000003c0)=@buf) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@newlink={0x68, 0x10, 0x503, 0xbffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x53054}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x9}, @IFLA_GRE_LINK={0x8, 0x1, r8}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r9, &(0x7f00000001c0), 0x2, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r10, &(0x7f0000000080)=[{&(0x7f0000000180)=""/9, 0x9}], 0x1, 0x2f, 0x0) 10.652035615s ago: executing program 2 (id=2259): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f00000005c0)="f4", 0x0}, 0x20) 10.589463436s ago: executing program 6 (id=2260): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x502, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) dup(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x83, 0x3}, 0x6) 10.588940264s ago: executing program 2 (id=2261): write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x8, 0xa, "acde29d7"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a40272216f4b1e7d1f6205462b"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x2a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x0, 0x46, {0x9, 0x21, 0x6, 0x20, 0x1, {0x22, 0xec3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x72, 0x0, 0x2c}}}}}]}}]}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) inotify_init1(0x80000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES16=r4], 0x21c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 8.994593042s ago: executing program 6 (id=2262): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) r2 = socket$inet6(0xa, 0x1, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x4218c02, 0x0, 0x0, 0x1, 0x2}}, 0x50) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x75, 0x4) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) getsockname$packet(r3, 0x0, &(0x7f0000000680)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000000)={0xa9, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0xc, 0x9, 0x21, 0x14, 0x31}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002", @ANYRESOCT=r0], 0x0, 0x0, 0x0}, 0x0) 8.88436053s ago: executing program 8 (id=2263): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000440)=[{0x0}], 0x1, 0x5f0e, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f0000000100)={&(0x7f00000000c0)=""/19, 0x13}) write$cgroup_pid(r2, &(0x7f0000000040)=r0, 0x12) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x1) 8.457928081s ago: executing program 3 (id=2264): socket(0xa, 0x3, 0x3a) syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10) chdir(0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000000)=0x8000, 0x4) syz_open_dev$evdev(&(0x7f0000007bc0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) unshare(0x2020400) 5.440515318s ago: executing program 3 (id=2265): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x2, @local, 0x7}]}, &(0x7f0000002100)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="84270000000001041400657464657673696d30000000000000200016801c00018018000c8014000100040000000b0c00000600000081000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x840) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x9}, 0x8) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x16}, 0x2c) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) 4.97202402s ago: executing program 2 (id=2266): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x100005, 0xb, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 4.899856766s ago: executing program 6 (id=2267): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902"], 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x48, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0xc0, 0xf9, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x418, 0xfd, 0x1, 0x8}}}}}]}}]}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 4.895078657s ago: executing program 8 (id=2268): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8800620000000000000000000001"], 0x28}}], 0x1, 0x4000005) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019380)=""/102400, 0x19000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000009640), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x1, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) lsm_get_self_attr(0x66, &(0x7f0000000580)={0x0, 0x0, 0xbf, 0x9f, ""/159}, &(0x7f0000000640)=0xbf, 0x0) 4.114574581s ago: executing program 2 (id=2269): socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000003c0)=@buf) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@newlink={0x68, 0x10, 0x503, 0xbffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x53054}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x9}, @IFLA_GRE_LINK={0x8, 0x1, r8}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r9, &(0x7f00000001c0), 0x2, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r10, &(0x7f0000000080)=[{&(0x7f0000000180)=""/9, 0x9}], 0x1, 0x2f, 0x0) 3.027856483s ago: executing program 8 (id=2270): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet6(0xa, 0x6, 0x5) setsockopt$inet6_buf(r0, 0x29, 0xce, &(0x7f0000000300)="694ac0407277e3542f11c44fa09bdc33e5dc62dd87da4a859e96bad9dc08e6afd906de045fbed63c669f041dfc679f422855a6156b64ce0d30922d7181975434d98da555d6697c3e645c74266ee755e8fbe78fc1703167221ed72161cf3fd9ca82d6a2f693b8bae3b86b07aaf8745f7aa4f4da9f97b65392e81165401d58e178", 0x80) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getrlimit(0xa, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.884040048s ago: executing program 2 (id=2271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f00000005c0)="f4", 0x0}, 0x20) 2.768873991s ago: executing program 3 (id=2272): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x502, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) dup(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x83, 0x3}, 0x6) 2.6441141s ago: executing program 2 (id=2273): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = syz_open_dev$vbi(&(0x7f0000000340), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = msgget$private(0x0, 0x790) msgsnd(r5, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0) prctl$PR_SET_IO_FLUSHER(0x4a, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000200)={0x49, 0xc, r2, 0x0, 0x0, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b402000000000000611148000000000085000000c4000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setreuid(0x0, 0xee01) listen(r0, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1.286923473s ago: executing program 36 (id=2243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./file0\x00', &(0x7f0000000a80), 0x0, 0x4, 0x0, 0x1}}, 0x40) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) sync() sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) 1.27821027s ago: executing program 3 (id=2275): socket(0xa, 0x3, 0x3a) syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10) chdir(0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000000)=0x8000, 0x4) syz_open_dev$evdev(&(0x7f0000007bc0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) unshare(0x2020400) 1.276318856s ago: executing program 8 (id=2276): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0xfffffffc) socket(0x28, 0x5, 0xe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4085}, 0x4000045) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="780000001000010000000000000000000000000a44000000060a030000000000000000000f2d00000900010073797a30000000000900020073797a32000000001800048014000180090001007866726d0000000004000280140000001100010000000000000000000000000a"], 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) sched_setaffinity(0x0, 0xfffffe72, &(0x7f0000000440)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) accept$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[], 0x159c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0xef) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000180)=""/62, 0x3e) kexec_load(0x100000000000000, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0xfffffffffffffff7, 0x4}], 0x0) 1.270606229s ago: executing program 6 (id=2277): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000001040)="cfc2b15df5fb6197a6a7ffe46f5e5755", 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) r3 = dup2(r2, r0) write$P9_RWRITE(r3, &(0x7f0000000140)={0xb, 0x77, 0x2, 0x9}, 0xb) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000000)=0x2040069e, 0x4) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, &(0x7f0000000180)={0x0, 0x800, 0x4f, 0x4, 0x401, 0x6}) r6 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0xc0045103, &(0x7f0000000040)) 0s ago: executing program 3 (id=2278): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000440)=[{0x0}], 0x1, 0x5f0e, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) ptrace$getregset(0x4204, 0x0, 0x1, &(0x7f0000000100)={&(0x7f00000000c0)=""/19, 0x13}) write$cgroup_pid(r2, &(0x7f0000000040)=r0, 0x12) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x1) kernel console output (not intermixed with test programs): 00000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.365975][T13393] R13: 0000000000000000 R14: 00007ff4c3fb5fa0 R15: 00007ffc85365078 [ 893.366008][T13393] [ 893.501094][T13424] SET target dimension over the limit! [ 894.098742][T13393] ERROR: Out of memory at tomoyo_realpath_from_path. [ 894.475132][ T5919] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 894.570474][ T9384] block nbd0: Possible stuck request ffff888025675080: control (read@0,1024B). Runtime 210 seconds [ 894.582180][ T9384] block nbd0: Possible stuck request ffff888025675240: control (read@1024,1024B). Runtime 210 seconds [ 894.594414][ T9384] block nbd0: Possible stuck request ffff888025675400: control (read@2048,1024B). Runtime 210 seconds [ 894.606980][ T9384] block nbd0: Possible stuck request ffff8880256755c0: control (read@3072,1024B). Runtime 210 seconds [ 894.667405][ T5919] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 894.685139][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.705920][ T5919] usb 1-1: config 0 descriptor?? [ 894.713627][ T5919] cp210x 1-1:0.0: cp210x converter detected [ 894.835707][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 895.710734][ T5919] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 895.725203][ T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 895.734457][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.805069][ T5919] cp210x 1-1:0.0: querying part number failed [ 895.888047][ T24] usb 4-1: config 0 descriptor?? [ 895.893542][ T5919] usb 1-1: cp210x converter now attached to ttyUSB0 [ 895.913641][ T24] cp210x 4-1:0.0: cp210x converter detected [ 896.820846][ T24] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 896.844264][ T24] cp210x 4-1:0.0: querying part number failed [ 897.037223][ T24] usb 4-1: cp210x converter now attached to ttyUSB1 [ 898.419967][T11076] usb 4-1: USB disconnect, device number 50 [ 898.492854][T11076] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 898.520471][T11076] cp210x 4-1:0.0: device disconnected [ 898.599590][ T5919] usb 1-1: USB disconnect, device number 39 [ 898.645648][ T5919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 898.828930][T13489] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1856'. [ 898.979350][T13489] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 899.407459][ T5919] cp210x 1-1:0.0: device disconnected [ 899.466387][T13501] FAULT_INJECTION: forcing a failure. [ 899.466387][T13501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 899.496802][T13489] binder: 13488:13489 ioctl c0306201 0 returned -14 [ 899.545271][T13501] CPU: 1 UID: 0 PID: 13501 Comm: syz.2.1859 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 899.545311][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 899.545325][T13501] Call Trace: [ 899.545334][T13501] [ 899.545344][T13501] dump_stack_lvl+0x189/0x250 [ 899.545374][T13501] ? __pfx____ratelimit+0x10/0x10 [ 899.545406][T13501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 899.545430][T13501] ? __pfx__printk+0x10/0x10 [ 899.545457][T13501] ? __might_fault+0xb0/0x130 [ 899.545499][T13501] should_fail_ex+0x414/0x560 [ 899.545534][T13501] _copy_from_user+0x2d/0xb0 [ 899.545559][T13501] bm_entry_write+0x105/0x470 [ 899.545588][T13501] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 899.545614][T13501] ? __pfx_bm_entry_write+0x10/0x10 [ 899.545649][T13501] ? __pfx_bm_entry_write+0x10/0x10 [ 899.545681][T13501] vfs_write+0x27e/0xa90 [ 899.545720][T13501] ? __pfx_vfs_write+0x10/0x10 [ 899.545750][T13501] ? __fget_files+0x2a/0x420 [ 899.545778][T13501] ? __fget_files+0x3a0/0x420 [ 899.545796][T13501] ? __fget_files+0x2a/0x420 [ 899.545825][T13501] ksys_write+0x145/0x250 [ 899.545856][T13501] ? __pfx_ksys_write+0x10/0x10 [ 899.545881][T13501] ? rcu_is_watching+0x15/0xb0 [ 899.545910][T13501] ? do_syscall_64+0xbe/0x3b0 [ 899.545934][T13501] do_syscall_64+0xfa/0x3b0 [ 899.545952][T13501] ? lockdep_hardirqs_on+0x9c/0x150 [ 899.545983][T13501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.546003][T13501] ? clear_bhb_loop+0x60/0xb0 [ 899.546029][T13501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.546049][T13501] RIP: 0033:0x7ff4c3d8e929 [ 899.546067][T13501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 899.546085][T13501] RSP: 002b:00007ff4c4c9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 899.546107][T13501] RAX: ffffffffffffffda RBX: 00007ff4c3fb5fa0 RCX: 00007ff4c3d8e929 [ 899.546123][T13501] RDX: 0000000000000001 RSI: 0000200000003080 RDI: 0000000000000003 [ 899.546154][T13501] RBP: 00007ff4c4c9d090 R08: 0000000000000000 R09: 0000000000000000 [ 899.546167][T13501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.546180][T13501] R13: 0000000000000000 R14: 00007ff4c3fb5fa0 R15: 00007ffc85365078 [ 899.546215][T13501] [ 899.779572][ C1] vkms_vblank_simulate: vblank timer overrun [ 900.285253][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 900.512767][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 900.715915][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.733719][ T10] usb 3-1: config 0 descriptor?? [ 901.543521][ T10] cp210x 3-1:0.0: cp210x converter detected [ 902.527982][ T10] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 902.552224][ T10] cp210x 3-1:0.0: querying part number failed [ 902.819617][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 902.848837][ T122] usb 3-1: USB disconnect, device number 56 [ 902.857503][ T122] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 902.873911][ T122] cp210x 3-1:0.0: device disconnected [ 903.232809][T13545] FAULT_INJECTION: forcing a failure. [ 903.232809][T13545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.602078][T13545] CPU: 0 UID: 0 PID: 13545 Comm: syz.7.1869 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 903.602110][T13545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 903.602124][T13545] Call Trace: [ 903.602139][T13545] [ 903.602148][T13545] dump_stack_lvl+0x189/0x250 [ 903.602178][T13545] ? __pfx____ratelimit+0x10/0x10 [ 903.602210][T13545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 903.602234][T13545] ? __pfx__printk+0x10/0x10 [ 903.602261][T13545] ? __might_fault+0xb0/0x130 [ 903.602302][T13545] should_fail_ex+0x414/0x560 [ 903.602338][T13545] _copy_from_user+0x2d/0xb0 [ 903.602363][T13545] ___sys_recvmsg+0x12e/0x510 [ 903.602401][T13545] ? __pfx____sys_recvmsg+0x10/0x10 [ 903.602456][T13545] ? __fget_files+0x3a0/0x420 [ 903.602488][T13545] do_recvmmsg+0x307/0x770 [ 903.602525][T13545] ? __pfx_do_recvmmsg+0x10/0x10 [ 903.602586][T13545] __x64_sys_recvmmsg+0x190/0x240 [ 903.602618][T13545] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 903.602644][T13545] ? rcu_is_watching+0x15/0xb0 [ 903.602673][T13545] ? do_syscall_64+0xbe/0x3b0 [ 903.602697][T13545] do_syscall_64+0xfa/0x3b0 [ 903.602719][T13545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.602739][T13545] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 903.602760][T13545] ? clear_bhb_loop+0x60/0xb0 [ 903.602785][T13545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.602817][T13545] RIP: 0033:0x7f5f6a98e929 [ 903.602834][T13545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 903.602852][T13545] RSP: 002b:00007f5f6b80b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 903.602873][T13545] RAX: ffffffffffffffda RBX: 00007f5f6abb5fa0 RCX: 00007f5f6a98e929 [ 903.602887][T13545] RDX: 0000000000000001 RSI: 0000200000002080 RDI: 0000000000000004 [ 903.602900][T13545] RBP: 00007f5f6b80b090 R08: 0000000000000000 R09: 0000000000000000 [ 903.602929][T13545] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 903.602942][T13545] R13: 0000000000000000 R14: 00007f5f6abb5fa0 R15: 00007fff92ee1538 [ 903.602974][T13545] [ 905.295095][T13551] FAULT_INJECTION: forcing a failure. [ 905.295095][T13551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.314943][T13551] CPU: 1 UID: 0 PID: 13551 Comm: syz.7.1872 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 905.314971][T13551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 905.314983][T13551] Call Trace: [ 905.314991][T13551] [ 905.315000][T13551] dump_stack_lvl+0x189/0x250 [ 905.315026][T13551] ? __pfx____ratelimit+0x10/0x10 [ 905.315055][T13551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 905.315077][T13551] ? __pfx__printk+0x10/0x10 [ 905.315101][T13551] ? __might_fault+0xb0/0x130 [ 905.315140][T13551] should_fail_ex+0x414/0x560 [ 905.315173][T13551] _copy_from_user+0x2d/0xb0 [ 905.315196][T13551] ___sys_sendmsg+0x158/0x2a0 [ 905.315225][T13551] ? __pfx____sys_sendmsg+0x10/0x10 [ 905.315286][T13551] ? __fget_files+0x2a/0x420 [ 905.315307][T13551] ? __fget_files+0x3a0/0x420 [ 905.315335][T13551] __x64_sys_sendmsg+0x19b/0x260 [ 905.315362][T13551] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 905.315395][T13551] ? __pfx_ksys_write+0x10/0x10 [ 905.315419][T13551] ? rcu_is_watching+0x15/0xb0 [ 905.315446][T13551] ? do_syscall_64+0xbe/0x3b0 [ 905.315468][T13551] do_syscall_64+0xfa/0x3b0 [ 905.315503][T13551] ? lockdep_hardirqs_on+0x9c/0x150 [ 905.315532][T13551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.315552][T13551] ? clear_bhb_loop+0x60/0xb0 [ 905.315578][T13551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.315598][T13551] RIP: 0033:0x7f5f6a98e929 [ 905.315616][T13551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.315633][T13551] RSP: 002b:00007f5f6b80b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.315656][T13551] RAX: ffffffffffffffda RBX: 00007f5f6abb5fa0 RCX: 00007f5f6a98e929 [ 905.315671][T13551] RDX: 0000000000000004 RSI: 0000200000007640 RDI: 0000000000000003 [ 905.315685][T13551] RBP: 00007f5f6b80b090 R08: 0000000000000000 R09: 0000000000000000 [ 905.315698][T13551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.315710][T13551] R13: 0000000000000000 R14: 00007f5f6abb5fa0 R15: 00007fff92ee1538 [ 905.315749][T13551] [ 907.746019][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1877'. [ 907.983178][T13577] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1879'. [ 908.535152][T13579] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 909.805258][ T5919] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 910.015922][ T5919] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 910.960613][ T5919] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.972247][ T5919] usb 7-1: config 0 has no interface number 0 [ 910.978574][ T5919] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 910.987780][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.998811][ T5919] usb 7-1: config 0 descriptor?? [ 911.007089][ T5919] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 911.107698][T13607] tmpfs: Unknown parameter 'usrquota÷ÿÿÿÿÿÿÿúÿÿÿÿÿÿÿ' [ 911.119065][T13607] loop2: detected capacity change from 0 to 7 [ 911.120969][T13603] FAULT_INJECTION: forcing a failure. [ 911.120969][T13603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.145369][T13607] loop2: [POWERTEC] p1 p2 p3 [ 911.149530][T13605] macsec1: entered promiscuous mode [ 911.155685][T13607] loop2: p1 start 1768123251 is beyond EOD, truncated [ 911.163258][T13607] loop2: p2 start 1700867426 is beyond EOD, truncated [ 911.170569][T13605] macsec1: entered allmulticast mode [ 911.170642][T13603] CPU: 0 UID: 0 PID: 13603 Comm: syz.2.1888 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 911.170678][T13603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 911.170695][T13603] Call Trace: [ 911.170706][T13603] [ 911.170717][T13603] dump_stack_lvl+0x189/0x250 [ 911.170751][T13603] ? __pfx____ratelimit+0x10/0x10 [ 911.170788][T13603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 911.170815][T13603] ? __pfx__printk+0x10/0x10 [ 911.170845][T13603] ? __might_fault+0xb0/0x130 [ 911.170894][T13603] should_fail_ex+0x414/0x560 [ 911.170932][T13603] _copy_from_user+0x2d/0xb0 [ 911.170961][T13603] ___sys_sendmsg+0x158/0x2a0 [ 911.170995][T13603] ? __pfx____sys_sendmsg+0x10/0x10 [ 911.171069][T13603] ? __fget_files+0x2a/0x420 [ 911.171089][T13603] ? __fget_files+0x3a0/0x420 [ 911.171124][T13603] __x64_sys_sendmsg+0x19b/0x260 [ 911.171156][T13603] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 911.171197][T13603] ? __pfx_ksys_write+0x10/0x10 [ 911.171226][T13603] ? rcu_is_watching+0x15/0xb0 [ 911.171258][T13603] ? do_syscall_64+0xbe/0x3b0 [ 911.171286][T13603] do_syscall_64+0xfa/0x3b0 [ 911.171306][T13603] ? lockdep_hardirqs_on+0x9c/0x150 [ 911.171340][T13603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.171365][T13603] ? clear_bhb_loop+0x60/0xb0 [ 911.171406][T13603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.171428][T13603] RIP: 0033:0x7ff4c3d8e929 [ 911.171450][T13603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 911.171471][T13603] RSP: 002b:00007ff4c4c9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 911.171496][T13603] RAX: ffffffffffffffda RBX: 00007ff4c3fb5fa0 RCX: 00007ff4c3d8e929 [ 911.171514][T13603] RDX: 0000000020084084 RSI: 0000200000000580 RDI: 0000000000000004 [ 911.171529][T13603] RBP: 00007ff4c4c9d090 R08: 0000000000000000 R09: 0000000000000000 [ 911.171553][T13603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.171568][T13603] R13: 0000000000000000 R14: 00007ff4c3fb5fa0 R15: 00007ffc85365078 [ 911.171609][T13603] [ 911.237249][T13607] loop2: p3 start 2735865856 is beyond EOD, [ 911.257289][ T24] usb 7-1: USB disconnect, device number 12 [ 911.400370][T13607] truncated [ 911.565919][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1892'. [ 911.947647][T11076] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 912.215008][T11076] usb 1-1: Using ep0 maxpacket: 16 [ 912.216897][T13623] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1895'. [ 912.282669][T11076] usb 1-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.348524][ T10] IPVS: starting estimator thread 0... [ 912.413873][T11076] usb 1-1: config 0 interface 0 has no altsetting 0 [ 912.474478][T13624] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 912.485401][T13625] IPVS: using max 25 ests per chain, 60000 per kthread [ 912.521214][T11076] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 912.541781][T11076] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.566442][T11076] usb 1-1: config 0 descriptor?? [ 912.947377][T13630] FAULT_INJECTION: forcing a failure. [ 912.947377][T13630] name failslab, interval 1, probability 0, space 0, times 0 [ 913.038147][T13630] CPU: 1 UID: 0 PID: 13630 Comm: syz.2.1896 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 913.038177][T13630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 913.038193][T13630] Call Trace: [ 913.038207][T13630] [ 913.038215][T13630] dump_stack_lvl+0x189/0x250 [ 913.038241][T13630] ? __pfx____ratelimit+0x10/0x10 [ 913.038271][T13630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 913.038294][T13630] ? __pfx__printk+0x10/0x10 [ 913.038326][T13630] ? __pfx___might_resched+0x10/0x10 [ 913.038348][T13630] ? fs_reclaim_acquire+0x7d/0x100 [ 913.038373][T13630] should_fail_ex+0x414/0x560 [ 913.038406][T13630] should_failslab+0xa8/0x100 [ 913.038440][T13630] __kmalloc_cache_noprof+0x70/0x3d0 [ 913.038469][T13630] ? snd_pcm_oss_change_params_locked+0x172/0x3e40 [ 913.038508][T13630] snd_pcm_oss_change_params_locked+0x172/0x3e40 [ 913.038549][T13630] ? __pfx___mutex_trylock_common+0x10/0x10 [ 913.038581][T13630] ? rcu_is_watching+0x15/0xb0 [ 913.038604][T13630] ? trace_contention_end+0x39/0x120 [ 913.038630][T13630] ? __mutex_lock+0x330/0xe80 [ 913.038660][T13630] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 913.038692][T13630] ? snd_pcm_oss_write+0x28f/0x11a0 [ 913.038726][T13630] ? __pfx___mutex_lock+0x10/0x10 [ 913.038753][T13630] ? sched_clock_cpu+0x74/0x430 [ 913.038773][T13630] ? psi_task_switch+0x318/0x6d0 [ 913.038806][T13630] snd_pcm_oss_write+0x2fb/0x11a0 [ 913.038856][T13630] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 913.038889][T13630] ? bpf_lsm_file_permission+0x9/0x20 [ 913.038908][T13630] ? security_file_permission+0x75/0x290 [ 913.038941][T13630] ? rw_verify_area+0x258/0x650 [ 913.038967][T13630] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 913.039000][T13630] vfs_write+0x27e/0xa90 [ 913.039037][T13630] ? __pfx_vfs_write+0x10/0x10 [ 913.039067][T13630] ? __fget_files+0x2a/0x420 [ 913.039089][T13630] ? __fget_files+0x2a/0x420 [ 913.039106][T13630] ? __fget_files+0x3a0/0x420 [ 913.039123][T13630] ? __fget_files+0x2a/0x420 [ 913.039152][T13630] ksys_write+0x145/0x250 [ 913.039193][T13630] ? __pfx_ksys_write+0x10/0x10 [ 913.039225][T13630] ? rcu_is_watching+0x15/0xb0 [ 913.039251][T13630] ? do_syscall_64+0xbe/0x3b0 [ 913.039274][T13630] do_syscall_64+0xfa/0x3b0 [ 913.039294][T13630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.039313][T13630] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 913.039331][T13630] ? clear_bhb_loop+0x60/0xb0 [ 913.039354][T13630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.039372][T13630] RIP: 0033:0x7ff4c3d8e929 [ 913.039390][T13630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.039406][T13630] RSP: 002b:00007ff4c4c9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 913.039427][T13630] RAX: ffffffffffffffda RBX: 00007ff4c3fb5fa0 RCX: 00007ff4c3d8e929 [ 913.039442][T13630] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 913.039455][T13630] RBP: 00007ff4c4c9d090 R08: 0000000000000000 R09: 0000000000000000 [ 913.039468][T13630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.039479][T13630] R13: 0000000000000000 R14: 00007ff4c3fb5fa0 R15: 00007ffc85365078 [ 913.039508][T13630] [ 913.351659][ C1] vkms_vblank_simulate: vblank timer overrun [ 914.102547][T11076] usbhid 1-1:0.0: can't add hid device: -71 [ 914.111007][T11076] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 914.183966][T11076] usb 1-1: USB disconnect, device number 40 [ 914.425046][ T5919] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 914.659787][ T5919] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 914.701120][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.829735][ T5919] usb 7-1: config 0 descriptor?? [ 914.867504][ T5919] cp210x 7-1:0.0: cp210x converter detected [ 915.652004][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1905'. [ 916.159529][ T5919] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 916.249383][T13660] Cannot find del_set index 0 as target [ 916.553702][ T5919] cp210x 7-1:0.0: querying part number failed [ 916.575384][ T5919] usb 7-1: cp210x converter now attached to ttyUSB0 [ 916.793675][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1905'. [ 916.804555][T13662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1905'. [ 917.958255][T13668] FAULT_INJECTION: forcing a failure. [ 917.958255][T13668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.005090][T13668] CPU: 0 UID: 0 PID: 13668 Comm: syz.2.1907 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 918.005115][T13668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 918.005126][T13668] Call Trace: [ 918.005133][T13668] [ 918.005142][T13668] dump_stack_lvl+0x189/0x250 [ 918.005166][T13668] ? __pfx____ratelimit+0x10/0x10 [ 918.005191][T13668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 918.005211][T13668] ? __pfx__printk+0x10/0x10 [ 918.005232][T13668] ? __might_fault+0xb0/0x130 [ 918.005264][T13668] should_fail_ex+0x414/0x560 [ 918.005296][T13668] _copy_from_iter+0x1db/0x16f0 [ 918.005315][T13668] ? __lock_acquire+0xab9/0xd20 [ 918.005338][T13668] ? __pfx__copy_from_iter+0x10/0x10 [ 918.005369][T13668] tun_get_user+0x20f/0x3ce0 [ 918.005391][T13668] ? __lock_acquire+0xab9/0xd20 [ 918.005416][T13668] ? __might_fault+0xb0/0x130 [ 918.005440][T13668] ? __pfx_tun_get_user+0x10/0x10 [ 918.005462][T13668] ? __lock_acquire+0xab9/0xd20 [ 918.005482][T13668] ? ref_tracker_alloc+0x318/0x460 [ 918.005504][T13668] ? __lock_acquire+0xab9/0xd20 [ 918.005520][T13668] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 918.005548][T13668] ? tun_get+0x1c/0x2f0 [ 918.005570][T13668] ? tun_get+0x1c/0x2f0 [ 918.005585][T13668] ? tun_get+0x1c/0x2f0 [ 918.005605][T13668] tun_chr_write_iter+0x113/0x200 [ 918.005624][T13668] vfs_write+0x54b/0xa90 [ 918.005650][T13668] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 918.005668][T13668] ? __pfx_vfs_write+0x10/0x10 [ 918.005698][T13668] ? __fget_files+0x2a/0x420 [ 918.005721][T13668] ksys_write+0x145/0x250 [ 918.005746][T13668] ? __pfx_ksys_write+0x10/0x10 [ 918.005767][T13668] ? rcu_is_watching+0x15/0xb0 [ 918.005789][T13668] ? do_syscall_64+0xbe/0x3b0 [ 918.005817][T13668] do_syscall_64+0xfa/0x3b0 [ 918.005834][T13668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.005850][T13668] ? asm_sysvec_call_function_single+0x1a/0x20 [ 918.005867][T13668] ? clear_bhb_loop+0x60/0xb0 [ 918.005887][T13668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.005904][T13668] RIP: 0033:0x7ff4c3d8e929 [ 918.005920][T13668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.005935][T13668] RSP: 002b:00007ff4c4c9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 918.005954][T13668] RAX: ffffffffffffffda RBX: 00007ff4c3fb5fa0 RCX: 00007ff4c3d8e929 [ 918.005968][T13668] RDX: 0000000000000ffe RSI: 00002000000000c0 RDI: 0000000000000004 [ 918.005980][T13668] RBP: 00007ff4c4c9d090 R08: 0000000000000000 R09: 0000000000000000 [ 918.005991][T13668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.006002][T13668] R13: 0000000000000000 R14: 00007ff4c3fb5fa0 R15: 00007ffc85365078 [ 918.006027][T13668] [ 918.315177][ T5919] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 918.331758][T11076] usb 7-1: USB disconnect, device number 13 [ 918.395176][T11076] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 918.403949][T11076] cp210x 7-1:0.0: device disconnected [ 918.477107][ T5919] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 918.593596][ T5919] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.661458][ T5919] usb 8-1: config 0 descriptor?? [ 918.680915][ T5919] cp210x 8-1:0.0: cp210x converter detected [ 919.286143][ T5919] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 919.293849][ T5919] cp210x 8-1:0.0: querying part number failed [ 919.908763][ T5919] usb 8-1: cp210x converter now attached to ttyUSB0 [ 920.184195][T13684] FAULT_INJECTION: forcing a failure. [ 920.184195][T13684] name failslab, interval 1, probability 0, space 0, times 0 [ 920.265022][T13684] CPU: 1 UID: 0 PID: 13684 Comm: syz.0.1911 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 920.265051][T13684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 920.265063][T13684] Call Trace: [ 920.265071][T13684] [ 920.265080][T13684] dump_stack_lvl+0x189/0x250 [ 920.265107][T13684] ? __pfx____ratelimit+0x10/0x10 [ 920.265137][T13684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 920.265159][T13684] ? __pfx__printk+0x10/0x10 [ 920.265200][T13684] ? __pfx___might_resched+0x10/0x10 [ 920.265219][T13684] ? fs_reclaim_acquire+0x7d/0x100 [ 920.265242][T13684] should_fail_ex+0x414/0x560 [ 920.265273][T13684] should_failslab+0xa8/0x100 [ 920.265302][T13684] __kmalloc_noprof+0xcb/0x4f0 [ 920.265326][T13684] ? kfree+0x4d/0x440 [ 920.265346][T13684] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 920.265371][T13684] tomoyo_realpath_from_path+0xe3/0x5d0 [ 920.265392][T13684] ? tomoyo_domain+0xda/0x130 [ 920.265418][T13684] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 920.265444][T13684] tomoyo_path_number_perm+0x1e8/0x5a0 [ 920.265473][T13684] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 920.265524][T13684] ? __lock_acquire+0xab9/0xd20 [ 920.265561][T13684] ? __fget_files+0x2a/0x420 [ 920.265581][T13684] ? __fget_files+0x2a/0x420 [ 920.265596][T13684] ? __fget_files+0x3a0/0x420 [ 920.265611][T13684] ? __fget_files+0x2a/0x420 [ 920.265631][T13684] security_file_ioctl+0xcb/0x2d0 [ 920.265661][T13684] __se_sys_ioctl+0x47/0x170 [ 920.265687][T13684] do_syscall_64+0xfa/0x3b0 [ 920.265703][T13684] ? lockdep_hardirqs_on+0x9c/0x150 [ 920.265730][T13684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.265748][T13684] ? clear_bhb_loop+0x60/0xb0 [ 920.265770][T13684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.265788][T13684] RIP: 0033:0x7f422918e929 [ 920.265804][T13684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.265818][T13684] RSP: 002b:00007f422a062038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 920.265838][T13684] RAX: ffffffffffffffda RBX: 00007f42293b5fa0 RCX: 00007f422918e929 [ 920.265852][T13684] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 920.265863][T13684] RBP: 00007f422a062090 R08: 0000000000000000 R09: 0000000000000000 [ 920.265874][T13684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.265885][T13684] R13: 0000000000000000 R14: 00007f42293b5fa0 R15: 00007ffd0dc0dc28 [ 920.265913][T13684] [ 920.268335][T13684] ERROR: Out of memory at tomoyo_realpath_from_path. [ 921.011168][ T5919] usb 8-1: USB disconnect, device number 4 [ 922.201487][ T5919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 922.210690][ T5919] cp210x 8-1:0.0: device disconnected [ 922.287657][T11076] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 922.499689][T11076] usb 4-1: Using ep0 maxpacket: 16 [ 922.506663][T11076] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 922.525917][T11076] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.017066][T11076] usb 4-1: config 0 has no interface number 0 [ 923.043898][T11076] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 923.073853][T11076] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.141144][T11076] usb 4-1: Product: syz [ 923.169301][T11076] usb 4-1: Manufacturer: syz [ 923.174004][T11076] usb 4-1: SerialNumber: syz [ 923.217082][T11076] usb 4-1: config 0 descriptor?? [ 923.454994][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 924.025792][T11076] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 924.794937][T11076] usb 4-1: No valid video chain found. [ 924.813409][ T9384] block nbd0: Possible stuck request ffff888025675080: control (read@0,1024B). Runtime 240 seconds [ 924.824526][ T9384] block nbd0: Possible stuck request ffff888025675240: control (read@1024,1024B). Runtime 240 seconds [ 924.835902][ T9384] block nbd0: Possible stuck request ffff888025675400: control (read@2048,1024B). Runtime 240 seconds [ 924.847291][ T9384] block nbd0: Possible stuck request ffff8880256755c0: control (read@3072,1024B). Runtime 240 seconds [ 924.858596][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 924.870448][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 924.889917][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 924.910595][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 924.928905][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.941489][ T24] usb 1-1: Product: syz [ 924.947637][ T24] usb 1-1: Manufacturer: syz [ 924.953378][ T24] usb 1-1: SerialNumber: syz [ 924.969021][ T24] usb 1-1: config 0 descriptor?? [ 924.989444][ T24] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 926.118118][ T122] usb 4-1: USB disconnect, device number 51 [ 926.491705][T13728] netlink: 'syz.7.1923': attribute type 10 has an invalid length. [ 926.887285][T13728] team0: Device dummy0 is up. Set it down before adding it as a team port [ 927.286717][T13732] FAULT_INJECTION: forcing a failure. [ 927.286717][T13732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.327604][T13732] CPU: 0 UID: 0 PID: 13732 Comm: syz.6.1924 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 927.327633][T13732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 927.327647][T13732] Call Trace: [ 927.327656][T13732] [ 927.327666][T13732] dump_stack_lvl+0x189/0x250 [ 927.327694][T13732] ? __pfx____ratelimit+0x10/0x10 [ 927.327726][T13732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 927.327749][T13732] ? __pfx__printk+0x10/0x10 [ 927.327777][T13732] ? __might_fault+0xb0/0x130 [ 927.327818][T13732] should_fail_ex+0x414/0x560 [ 927.327852][T13732] _copy_from_user+0x2d/0xb0 [ 927.327877][T13732] ___sys_sendmsg+0x158/0x2a0 [ 927.327907][T13732] ? __pfx____sys_sendmsg+0x10/0x10 [ 927.327972][T13732] ? __fget_files+0x2a/0x420 [ 927.327990][T13732] ? __fget_files+0x3a0/0x420 [ 927.328020][T13732] __x64_sys_sendmsg+0x19b/0x260 [ 927.328049][T13732] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 927.328086][T13732] ? __pfx_ksys_write+0x10/0x10 [ 927.328110][T13732] ? rcu_is_watching+0x15/0xb0 [ 927.328138][T13732] ? do_syscall_64+0xbe/0x3b0 [ 927.328162][T13732] do_syscall_64+0xfa/0x3b0 [ 927.328180][T13732] ? lockdep_hardirqs_on+0x9c/0x150 [ 927.328209][T13732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.328229][T13732] ? clear_bhb_loop+0x60/0xb0 [ 927.328254][T13732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.328274][T13732] RIP: 0033:0x7fb02f18e929 [ 927.328292][T13732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.328309][T13732] RSP: 002b:00007fb0300cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 927.328331][T13732] RAX: ffffffffffffffda RBX: 00007fb02f3b5fa0 RCX: 00007fb02f18e929 [ 927.328346][T13732] RDX: 0000000004000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 927.328359][T13732] RBP: 00007fb0300cf090 R08: 0000000000000000 R09: 0000000000000000 [ 927.328372][T13732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.328385][T13732] R13: 0000000000000000 R14: 00007fb02f3b5fa0 R15: 00007ffd9a6def38 [ 927.328420][T13732] [ 927.534790][ C0] vkms_vblank_simulate: vblank timer overrun [ 929.573720][T13747] new mount options do not match the existing superblock, will be ignored [ 929.630762][T13747] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 931.248922][ T24] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 931.295066][ T24] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 931.315132][ T24] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 931.586320][ T24] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 931.822421][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.202238][T13768] fido_id[13768]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 932.837477][T10001] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 933.277047][T10001] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.289204][T13778] overlayfs: statfs failed on './file0' [ 933.297794][T10001] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.331543][T10001] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 933.462491][T10001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.478897][T10001] usb 7-1: config 0 descriptor?? [ 933.818384][T13793] random: crng reseeded on system resumption [ 934.214701][T13799] loop5: detected capacity change from 0 to 15535 [ 934.345455][T10001] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 934.434287][T13799] loop5: unable to read partition table [ 934.440475][T13799] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 934.440475][T13799] ) failed (rc=-5) [ 934.477438][T10001] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 934.801207][T10001] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x00 [ 935.613498][T13776] cp2112 0003:10C4:EA90.000C: Error starting transaction: -38 [ 935.632459][T10001] cp2112 0003:10C4:EA90.000C: error reading lock byte: -71 [ 935.775907][T10001] usb 7-1: USB disconnect, device number 14 [ 937.909950][T13824] sp0: Synchronizing with TNC [ 938.141732][T10001] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 938.149125][ T5950] libceph: connect (1)[c::]:6789 error -101 [ 938.164771][ T5950] libceph: mon0 (1)[c::]:6789 connect error [ 938.427609][ T5950] libceph: connect (1)[c::]:6789 error -101 [ 938.480854][ T5950] libceph: mon0 (1)[c::]:6789 connect error [ 938.498402][T10001] usb 7-1: Using ep0 maxpacket: 16 [ 938.598769][T13824] ceph: No mds server is up or the cluster is laggy [ 938.671551][T10001] usb 7-1: too many configurations: 207, using maximum allowed: 8 [ 938.755377][T10001] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 939.082555][T10001] usb 7-1: can't read configurations, error -61 [ 939.317496][T10001] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 939.914873][T10001] usb 7-1: Using ep0 maxpacket: 16 [ 940.058545][T13836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 940.070841][T13836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 940.084088][T13836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 940.095847][T13836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 940.105492][T13836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 940.128440][T10001] usb 7-1: too many configurations: 207, using maximum allowed: 8 [ 940.144513][T10001] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 940.156798][T10001] usb 7-1: can't read configurations, error -61 [ 940.163680][T10001] usb usb7-port1: attempt power cycle [ 942.551183][T13836] Bluetooth: hci5: command tx timeout [ 942.689411][T13872] FAULT_INJECTION: forcing a failure. [ 942.689411][T13872] name failslab, interval 1, probability 0, space 0, times 0 [ 942.702296][T13872] CPU: 0 UID: 0 PID: 13872 Comm: syz.6.1956 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 942.702322][T13872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 942.702335][T13872] Call Trace: [ 942.702345][T13872] [ 942.702353][T13872] dump_stack_lvl+0x189/0x250 [ 942.702386][T13872] ? __pfx____ratelimit+0x10/0x10 [ 942.702419][T13872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 942.702455][T13872] ? __pfx__printk+0x10/0x10 [ 942.702485][T13872] ? __pfx___might_resched+0x10/0x10 [ 942.702506][T13872] ? fs_reclaim_acquire+0x7d/0x100 [ 942.702530][T13872] should_fail_ex+0x414/0x560 [ 942.702562][T13872] should_failslab+0xa8/0x100 [ 942.702593][T13872] kmem_cache_alloc_noprof+0x73/0x3c0 [ 942.702619][T13872] ? create_new_namespaces+0x31/0x720 [ 942.702650][T13872] create_new_namespaces+0x31/0x720 [ 942.702670][T13872] ? safesetid_security_capable+0xa9/0x1a0 [ 942.702700][T13872] ? bpf_lsm_capable+0x9/0x20 [ 942.702720][T13872] ? security_capable+0x7e/0x2e0 [ 942.702749][T13872] unshare_nsproxy_namespaces+0x11c/0x170 [ 942.702773][T13872] ksys_unshare+0x4c8/0x8c0 [ 942.702805][T13872] ? __pfx_ksys_unshare+0x10/0x10 [ 942.702830][T13872] ? __pfx_ksys_write+0x10/0x10 [ 942.702854][T13872] ? rcu_is_watching+0x15/0xb0 [ 942.702885][T13872] __x64_sys_unshare+0x38/0x50 [ 942.702909][T13872] do_syscall_64+0xfa/0x3b0 [ 942.702927][T13872] ? lockdep_hardirqs_on+0x9c/0x150 [ 942.702954][T13872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.702973][T13872] ? clear_bhb_loop+0x60/0xb0 [ 942.702995][T13872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.703012][T13872] RIP: 0033:0x7fb02f18e929 [ 942.703026][T13872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 942.703039][T13872] RSP: 002b:00007fb03008d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 942.703056][T13872] RAX: ffffffffffffffda RBX: 00007fb02f3b6160 RCX: 00007fb02f18e929 [ 942.703067][T13872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000066000080 [ 942.703077][T13872] RBP: 00007fb03008d090 R08: 0000000000000000 R09: 0000000000000000 [ 942.703086][T13872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.703095][T13872] R13: 0000000000000000 R14: 00007fb02f3b6160 R15: 00007ffd9a6def38 [ 942.703125][T13872] [ 942.935219][T13835] chnl_net:caif_netlink_parms(): no params data found [ 943.488285][T13835] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.514560][T13835] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.550766][T13835] bridge_slave_0: entered allmulticast mode [ 943.589234][T13835] bridge_slave_0: entered promiscuous mode [ 943.612306][T13835] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.626610][T13835] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.683654][T13835] bridge_slave_1: entered allmulticast mode [ 943.774739][T13835] bridge_slave_1: entered promiscuous mode [ 944.522593][T13835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.565043][T13836] Bluetooth: hci5: command tx timeout [ 944.630793][T13835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.304036][T13895] netlink: 'syz.7.1961': attribute type 39 has an invalid length. [ 946.639890][T13835] team0: Port device team_slave_0 added [ 946.646038][T13836] Bluetooth: hci5: command tx timeout [ 946.698638][T13835] team0: Port device team_slave_1 added [ 946.993624][T13835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.023364][T13835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.080047][T13835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.093717][T13835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.138011][T13835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.402973][T13835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.480630][T13835] hsr_slave_0: entered promiscuous mode [ 947.495525][T13835] hsr_slave_1: entered promiscuous mode [ 947.501857][T13835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 947.515248][T13835] Cannot create hsr debugfs directory [ 948.772880][T13836] Bluetooth: hci5: command tx timeout [ 949.767633][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 949.915787][T13835] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 949.943634][T13835] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 949.958306][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 949.975461][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.998880][T13835] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 950.007565][ T10] usb 3-1: config 0 descriptor?? [ 950.021083][T13934] FAULT_INJECTION: forcing a failure. [ 950.021083][T13934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.034455][T13934] CPU: 0 UID: 0 PID: 13934 Comm: syz.3.1972 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 950.034481][T13934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 950.034494][T13934] Call Trace: [ 950.034503][T13934] [ 950.034512][T13934] dump_stack_lvl+0x189/0x250 [ 950.034541][T13934] ? __pfx____ratelimit+0x10/0x10 [ 950.034572][T13934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 950.034594][T13934] ? __pfx__printk+0x10/0x10 [ 950.034636][T13934] should_fail_ex+0x414/0x560 [ 950.034670][T13934] strncpy_from_user+0x36/0x290 [ 950.034702][T13934] path_setxattrat+0x150/0x3a0 [ 950.034737][T13934] ? __pfx_path_setxattrat+0x10/0x10 [ 950.034759][T13934] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 950.034812][T13934] ? __pfx_ksys_write+0x10/0x10 [ 950.034846][T13934] __x64_sys_fsetxattr+0xbc/0xe0 [ 950.034870][T13934] do_syscall_64+0xfa/0x3b0 [ 950.034889][T13934] ? lockdep_hardirqs_on+0x9c/0x150 [ 950.034918][T13934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.034938][T13934] ? clear_bhb_loop+0x60/0xb0 [ 950.034962][T13934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.034979][T13934] RIP: 0033:0x7f9401d8e929 [ 950.034994][T13934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.035009][T13934] RSP: 002b:00007f9402b11038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 950.035027][T13934] RAX: ffffffffffffffda RBX: 00007f9401fb5fa0 RCX: 00007f9401d8e929 [ 950.035040][T13934] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 950.035050][T13934] RBP: 00007f9402b11090 R08: 0000000000000002 R09: 0000000000000000 [ 950.035060][T13934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.035070][T13934] R13: 0000000000000000 R14: 00007f9401fb5fa0 R15: 00007ffd4fde88a8 [ 950.035094][T13934] [ 950.264429][ T10] cp210x 3-1:0.0: cp210x converter detected [ 950.277626][T13835] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 951.276595][ T10] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 951.284641][ T10] cp210x 3-1:0.0: querying part number failed [ 951.323552][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 951.428418][T13950] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1975'. [ 951.797117][T13835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.898313][T13953] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 951.951069][T13835] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.001324][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.008605][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.028148][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.035458][ T7166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.523190][ T10] usb 3-1: USB disconnect, device number 57 [ 952.541090][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 952.566774][ T10] cp210x 3-1:0.0: device disconnected [ 952.896260][T13968] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 953.793099][T13835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.935107][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 954.965473][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 955.590932][ T97] block nbd0: Possible stuck request ffff888025675080: control (read@0,1024B). Runtime 270 seconds [ 955.603027][ T97] block nbd0: Possible stuck request ffff888025675240: control (read@1024,1024B). Runtime 270 seconds [ 955.614956][ T97] block nbd0: Possible stuck request ffff888025675400: control (read@2048,1024B). Runtime 270 seconds [ 955.626155][ T97] block nbd0: Possible stuck request ffff8880256755c0: control (read@3072,1024B). Runtime 270 seconds [ 955.883128][T13991] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 955.998509][T13835] veth0_vlan: entered promiscuous mode [ 956.048786][T13835] veth1_vlan: entered promiscuous mode [ 956.232980][T13835] veth0_macvtap: entered promiscuous mode [ 956.258794][T13835] veth1_macvtap: entered promiscuous mode [ 956.328160][T13835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.368790][T13835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.501915][ T5950] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 956.549356][T13835] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.565362][T13835] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.574234][T13835] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.583740][T13835] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.685125][ T5950] usb 4-1: device descriptor read/64, error -71 [ 956.747860][ T7166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.771079][ T7166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.798524][T12679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.809270][T12679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.954903][ T5950] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 957.134987][ T5950] usb 4-1: device descriptor read/64, error -71 [ 957.249226][ T5950] usb usb4-port1: attempt power cycle [ 957.605049][ T5950] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 957.650034][ T5950] usb 4-1: device descriptor read/8, error -71 [ 957.895330][ T5950] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 957.961318][ T5950] usb 4-1: device descriptor read/8, error -71 [ 958.105773][ T5950] usb usb4-port1: unable to enumerate USB device [ 958.904931][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 959.257954][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 959.520687][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.599681][ T10] usb 3-1: config 0 descriptor?? [ 960.289827][ T10] cp210x 3-1:0.0: cp210x converter detected [ 962.372913][ T10] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 962.380707][ T10] cp210x 3-1:0.0: querying part number failed [ 962.404188][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 962.567801][T14028] FAULT_INJECTION: forcing a failure. [ 962.567801][T14028] name failslab, interval 1, probability 0, space 0, times 0 [ 962.597202][T14028] CPU: 0 UID: 0 PID: 14028 Comm: syz.8.1992 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 962.597233][T14028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 962.597246][T14028] Call Trace: [ 962.597254][T14028] [ 962.597264][T14028] dump_stack_lvl+0x189/0x250 [ 962.597292][T14028] ? __pfx____ratelimit+0x10/0x10 [ 962.597322][T14028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 962.597344][T14028] ? __pfx__printk+0x10/0x10 [ 962.597389][T14028] ? __pfx___might_resched+0x10/0x10 [ 962.597420][T14028] ? fs_reclaim_acquire+0x7d/0x100 [ 962.597446][T14028] should_fail_ex+0x414/0x560 [ 962.597480][T14028] should_failslab+0xa8/0x100 [ 962.597512][T14028] __kmalloc_noprof+0xcb/0x4f0 [ 962.597537][T14028] ? kfree+0x4d/0x440 [ 962.597559][T14028] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 962.597587][T14028] tomoyo_realpath_from_path+0xe3/0x5d0 [ 962.597610][T14028] ? tomoyo_domain+0xda/0x130 [ 962.597637][T14028] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 962.597665][T14028] tomoyo_path_number_perm+0x1e8/0x5a0 [ 962.597694][T14028] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 962.597738][T14028] ? __lock_acquire+0xab9/0xd20 [ 962.597777][T14028] ? __fget_files+0x2a/0x420 [ 962.597798][T14028] ? __fget_files+0x2a/0x420 [ 962.597813][T14028] ? __fget_files+0x3a0/0x420 [ 962.597828][T14028] ? __fget_files+0x2a/0x420 [ 962.597849][T14028] security_file_ioctl+0xcb/0x2d0 [ 962.597882][T14028] __se_sys_ioctl+0x47/0x170 [ 962.597909][T14028] do_syscall_64+0xfa/0x3b0 [ 962.597930][T14028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.597949][T14028] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 962.597968][T14028] ? clear_bhb_loop+0x60/0xb0 [ 962.597993][T14028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.598011][T14028] RIP: 0033:0x7fd8cd78e929 [ 962.598029][T14028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 962.598046][T14028] RSP: 002b:00007fd8ce69c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 962.598067][T14028] RAX: ffffffffffffffda RBX: 00007fd8cd9b5fa0 RCX: 00007fd8cd78e929 [ 962.598082][T14028] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 962.598095][T14028] RBP: 00007fd8ce69c090 R08: 0000000000000000 R09: 0000000000000000 [ 962.598106][T14028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.598118][T14028] R13: 0000000000000000 R14: 00007fd8cd9b5fa0 R15: 00007ffc37ce5b28 [ 962.598149][T14028] [ 962.598181][T14028] ERROR: Out of memory at tomoyo_realpath_from_path. [ 963.370567][T14036] Cannot find del_set index 0 as target [ 963.379199][T14034] SET target dimension over the limit! [ 963.387486][T14038] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1993'. [ 963.625761][ T24] usb 3-1: USB disconnect, device number 58 [ 963.637726][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 963.701734][ T24] cp210x 3-1:0.0: device disconnected [ 964.266982][ T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 964.623885][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 964.718555][ T24] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 964.745414][ T24] usb 3-1: config 0 has no interface number 0 [ 964.763951][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 964.785910][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.794094][ T24] usb 3-1: Product: syz [ 964.804209][ T24] usb 3-1: Manufacturer: syz [ 964.809125][ T24] usb 3-1: SerialNumber: syz [ 964.829957][ T24] usb 3-1: config 0 descriptor?? [ 964.838658][ T24] smsc95xx v2.0.0 [ 964.966612][T14054] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1999'. [ 964.976014][T14054] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1999'. [ 965.528037][T14063] new mount options do not match the existing superblock, will be ignored [ 965.565663][T14063] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 965.830669][T14067] FAULT_INJECTION: forcing a failure. [ 965.830669][T14067] name failslab, interval 1, probability 0, space 0, times 0 [ 965.843692][T14067] CPU: 1 UID: 0 PID: 14067 Comm: syz.6.2001 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 965.843722][T14067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 965.843735][T14067] Call Trace: [ 965.843744][T14067] [ 965.843752][T14067] dump_stack_lvl+0x189/0x250 [ 965.843778][T14067] ? __pfx____ratelimit+0x10/0x10 [ 965.843808][T14067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 965.843830][T14067] ? __pfx__printk+0x10/0x10 [ 965.843859][T14067] ? __pfx___might_resched+0x10/0x10 [ 965.843880][T14067] ? fs_reclaim_acquire+0x7d/0x100 [ 965.843904][T14067] should_fail_ex+0x414/0x560 [ 965.843937][T14067] should_failslab+0xa8/0x100 [ 965.843967][T14067] __kmalloc_noprof+0xcb/0x4f0 [ 965.843999][T14067] ? copy_splice_read+0x143/0x9b0 [ 965.844024][T14067] ? rcu_is_watching+0x15/0xb0 [ 965.844049][T14067] copy_splice_read+0x143/0x9b0 [ 965.844086][T14067] ? splice_file_to_pipe+0x2e/0x440 [ 965.844122][T14067] ? __pfx_copy_splice_read+0x10/0x10 [ 965.844149][T14067] ? __pfx___mutex_lock+0x10/0x10 [ 965.844173][T14067] ? __fget_files+0x2a/0x420 [ 965.844190][T14067] ? wait_for_space+0x24d/0x2d0 [ 965.844223][T14067] ? __pfx_copy_splice_read+0x10/0x10 [ 965.844250][T14067] splice_file_to_pipe+0x273/0x440 [ 965.844282][T14067] do_sendfile+0x475/0x7e0 [ 965.844301][T14067] ? __pfx_vfs_write+0x10/0x10 [ 965.844333][T14067] ? __pfx_do_sendfile+0x10/0x10 [ 965.844352][T14067] ? __fget_files+0x3a0/0x420 [ 965.844380][T14067] __se_sys_sendfile64+0x13e/0x190 [ 965.844402][T14067] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 965.844419][T14067] ? rcu_is_watching+0x15/0xb0 [ 965.844444][T14067] ? do_syscall_64+0xbe/0x3b0 [ 965.844467][T14067] do_syscall_64+0xfa/0x3b0 [ 965.844483][T14067] ? lockdep_hardirqs_on+0x9c/0x150 [ 965.844511][T14067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.844530][T14067] ? clear_bhb_loop+0x60/0xb0 [ 965.844553][T14067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.844572][T14067] RIP: 0033:0x7fb02f18e929 [ 965.844589][T14067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 965.844605][T14067] RSP: 002b:00007fb03005c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 965.844625][T14067] RAX: ffffffffffffffda RBX: 00007fb02f3b6160 RCX: 00007fb02f18e929 [ 965.844639][T14067] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 965.844651][T14067] RBP: 00007fb03005c090 R08: 0000000000000000 R09: 0000000000000000 [ 965.844662][T14067] R10: 0000000000110003 R11: 0000000000000246 R12: 0000000000000001 [ 965.844675][T14067] R13: 0000000000000001 R14: 00007fb02f3b6160 R15: 00007ffd9a6def38 [ 965.844705][T14067] [ 966.222212][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 966.233173][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 966.701725][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 966.929731][ T24] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 967.042801][T14072] FAULT_INJECTION: forcing a failure. [ 967.042801][T14072] name failslab, interval 1, probability 0, space 0, times 0 [ 967.884302][ T24] usb 3-1: USB disconnect, device number 59 [ 968.210035][T14072] CPU: 0 UID: 0 PID: 14072 Comm: syz.7.2004 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 968.210063][T14072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 968.210074][T14072] Call Trace: [ 968.210082][T14072] [ 968.210091][T14072] dump_stack_lvl+0x189/0x250 [ 968.210117][T14072] ? __pfx____ratelimit+0x10/0x10 [ 968.210147][T14072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 968.210168][T14072] ? __pfx__printk+0x10/0x10 [ 968.210196][T14072] ? __pfx___might_resched+0x10/0x10 [ 968.210221][T14072] should_fail_ex+0x414/0x560 [ 968.210253][T14072] should_failslab+0xa8/0x100 [ 968.210284][T14072] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 968.210311][T14072] ? __alloc_skb+0x112/0x2d0 [ 968.210338][T14072] __alloc_skb+0x112/0x2d0 [ 968.210362][T14072] netlink_sendmsg+0x5c6/0xb30 [ 968.210395][T14072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 968.210430][T14072] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 968.210455][T14072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 968.210479][T14072] __sock_sendmsg+0x219/0x270 [ 968.210511][T14072] sock_write_iter+0x258/0x330 [ 968.210542][T14072] ? __pfx_sock_write_iter+0x10/0x10 [ 968.210580][T14072] ? finish_task_switch+0x266/0x950 [ 968.210614][T14072] do_iter_readv_writev+0x56b/0x7f0 [ 968.210646][T14072] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 968.210671][T14072] ? __schedule+0x16c0/0x4cb0 [ 968.210701][T14072] ? bpf_lsm_file_permission+0x9/0x20 [ 968.210719][T14072] ? security_file_permission+0x75/0x290 [ 968.210749][T14072] ? rw_verify_area+0x258/0x650 [ 968.210778][T14072] vfs_writev+0x31a/0x960 [ 968.210795][T14072] ? preempt_schedule_irq+0xb5/0x150 [ 968.210827][T14072] ? __lock_acquire+0xab9/0xd20 [ 968.210847][T14072] ? __pfx_vfs_writev+0x10/0x10 [ 968.210880][T14072] ? __fget_files+0x2a/0x420 [ 968.210901][T14072] ? __fget_files+0x3a0/0x420 [ 968.210917][T14072] ? __fget_files+0x2a/0x420 [ 968.210943][T14072] do_writev+0x14d/0x2d0 [ 968.210970][T14072] ? __pfx_do_writev+0x10/0x10 [ 968.211002][T14072] do_syscall_64+0xfa/0x3b0 [ 968.211021][T14072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.211039][T14072] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 968.211067][T14072] ? clear_bhb_loop+0x60/0xb0 [ 968.211089][T14072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.211107][T14072] RIP: 0033:0x7f5f6a98e929 [ 968.211122][T14072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 968.211138][T14072] RSP: 002b:00007f5f6b80b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 968.211175][T14072] RAX: ffffffffffffffda RBX: 00007f5f6abb5fa0 RCX: 00007f5f6a98e929 [ 968.211190][T14072] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 968.211202][T14072] RBP: 00007f5f6b80b090 R08: 0000000000000000 R09: 0000000000000000 [ 968.211214][T14072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.211225][T14072] R13: 0000000000000000 R14: 00007f5f6abb5fa0 R15: 00007fff92ee1538 [ 968.211254][T14072] [ 968.655069][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2006'. [ 968.665178][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2006'. [ 969.486912][T14093] SET target dimension over the limit! [ 970.664999][T10001] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 970.837267][T10001] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 970.877140][T10001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.960815][T10001] usb 9-1: config 0 descriptor?? [ 970.988272][T10001] cp210x 9-1:0.0: cp210x converter detected [ 971.747195][T10001] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 971.799840][T10001] cp210x 9-1:0.0: querying part number failed [ 971.814038][T10001] usb 9-1: cp210x converter now attached to ttyUSB0 [ 971.846873][T10001] usb 9-1: USB disconnect, device number 2 [ 971.895991][T10001] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 971.925485][T10001] cp210x 9-1:0.0: device disconnected [ 972.145011][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 972.907481][T10001] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 973.036714][ T24] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 973.052531][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.094490][ T24] usb 7-1: config 0 descriptor?? [ 973.101826][T10001] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 973.115883][T10001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.277820][T14135] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 973.558223][ T24] cp210x 7-1:0.0: cp210x converter detected [ 973.867224][T10001] usb 9-1: config 0 descriptor?? [ 974.072293][T10001] cp210x 9-1:0.0: cp210x converter detected [ 974.325133][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 974.959398][ T24] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 975.206643][ T24] cp210x 7-1:0.0: querying part number failed [ 975.245370][ T24] usb 7-1: cp210x converter now attached to ttyUSB0 [ 975.365379][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 975.551690][T10001] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 975.833518][T10001] cp210x 9-1:0.0: querying part number failed [ 976.049797][T10001] usb 9-1: cp210x converter now attached to ttyUSB1 [ 976.460430][T14154] SET target dimension over the limit! [ 977.897318][ T5950] usb 7-1: USB disconnect, device number 18 [ 977.913489][ T5950] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 977.984621][ T10] usb 9-1: USB disconnect, device number 3 [ 978.000251][ T5950] cp210x 7-1:0.0: device disconnected [ 978.028360][ T10] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 978.057273][ T10] cp210x 9-1:0.0: device disconnected [ 978.385909][T14163] FAULT_INJECTION: forcing a failure. [ 978.385909][T14163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 978.429557][T14163] CPU: 1 UID: 0 PID: 14163 Comm: syz.6.2026 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 978.429579][T14163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 978.429588][T14163] Call Trace: [ 978.429594][T14163] [ 978.429601][T14163] dump_stack_lvl+0x189/0x250 [ 978.429622][T14163] ? __pfx____ratelimit+0x10/0x10 [ 978.429645][T14163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 978.429661][T14163] ? __pfx__printk+0x10/0x10 [ 978.429680][T14163] ? __might_fault+0xb0/0x130 [ 978.429708][T14163] should_fail_ex+0x414/0x560 [ 978.429738][T14163] _copy_from_user+0x2d/0xb0 [ 978.429755][T14163] core_sys_select+0x4b7/0xa20 [ 978.429785][T14163] ? __pfx_core_sys_select+0x10/0x10 [ 978.429824][T14163] ? __pfx_set_user_sigmask+0x10/0x10 [ 978.429847][T14163] __se_sys_pselect6+0x27a/0x300 [ 978.429873][T14163] ? __pfx___se_sys_pselect6+0x10/0x10 [ 978.429895][T14163] ? __pfx_ksys_write+0x10/0x10 [ 978.429914][T14163] ? rcu_is_watching+0x15/0xb0 [ 978.429933][T14163] ? __x64_sys_pselect6+0x21/0xf0 [ 978.429956][T14163] do_syscall_64+0xfa/0x3b0 [ 978.429970][T14163] ? lockdep_hardirqs_on+0x9c/0x150 [ 978.429993][T14163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.430008][T14163] ? clear_bhb_loop+0x60/0xb0 [ 978.430025][T14163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.430039][T14163] RIP: 0033:0x7fb02f18e929 [ 978.430052][T14163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 978.430064][T14163] RSP: 002b:00007fb0300cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 978.430079][T14163] RAX: ffffffffffffffda RBX: 00007fb02f3b5fa0 RCX: 00007fb02f18e929 [ 978.430090][T14163] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000040 [ 978.430099][T14163] RBP: 00007fb0300cf090 R08: 0000000000000000 R09: 0000000000000000 [ 978.430108][T14163] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 978.430117][T14163] R13: 0000000000000000 R14: 00007fb02f3b5fa0 R15: 00007ffd9a6def38 [ 978.430139][T14163] [ 978.660103][T14151] netlink: 'syz.7.2022': attribute type 4 has an invalid length. [ 978.835282][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 979.087309][ T10] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 979.106331][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.214174][T14173] FAULT_INJECTION: forcing a failure. [ 979.214174][T14173] name failslab, interval 1, probability 0, space 0, times 0 [ 979.227497][T14173] CPU: 0 UID: 0 PID: 14173 Comm: syz.6.2027 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 979.227522][T14173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 979.227535][T14173] Call Trace: [ 979.227544][T14173] [ 979.227553][T14173] dump_stack_lvl+0x189/0x250 [ 979.227580][T14173] ? __pfx____ratelimit+0x10/0x10 [ 979.227611][T14173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 979.227632][T14173] ? __pfx__printk+0x10/0x10 [ 979.227661][T14173] ? lock_acquire+0x175/0x360 [ 979.227680][T14173] ? __pfx___might_resched+0x10/0x10 [ 979.227707][T14173] should_fail_ex+0x414/0x560 [ 979.227740][T14173] should_failslab+0xa8/0x100 [ 979.227770][T14173] __kmalloc_noprof+0xcb/0x4f0 [ 979.227797][T14173] ? sock_kmalloc+0xd6/0x160 [ 979.227826][T14173] ? lockdep_hardirqs_on+0x9c/0x150 [ 979.227860][T14173] sock_kmalloc+0xd6/0x160 [ 979.227889][T14173] alg_setkey+0x55/0x190 [ 979.227913][T14173] ? alg_setsockopt+0x3c5/0x4a0 [ 979.227942][T14173] alg_setsockopt+0x3da/0x4a0 [ 979.227968][T14173] ? __pfx_alg_setsockopt+0x10/0x10 [ 979.227996][T14173] do_sock_setsockopt+0x257/0x3e0 [ 979.228023][T14173] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 979.228052][T14173] ? __fget_files+0x2a/0x420 [ 979.228097][T14173] __x64_sys_setsockopt+0x18b/0x220 [ 979.228129][T14173] do_syscall_64+0xfa/0x3b0 [ 979.228150][T14173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.228170][T14173] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 979.228191][T14173] ? clear_bhb_loop+0x60/0xb0 [ 979.228216][T14173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.228236][T14173] RIP: 0033:0x7fb02f18e929 [ 979.228256][T14173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 979.228274][T14173] RSP: 002b:00007fb03008d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 979.228295][T14173] RAX: ffffffffffffffda RBX: 00007fb02f3b6160 RCX: 00007fb02f18e929 [ 979.228310][T14173] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000005 [ 979.228322][T14173] RBP: 00007fb03008d090 R08: 0000000000000008 R09: 0000000000000000 [ 979.228336][T14173] R10: 0000200000412ff8 R11: 0000000000000246 R12: 0000000000000001 [ 979.228349][T14173] R13: 0000000000000000 R14: 00007fb02f3b6160 R15: 00007ffd9a6def38 [ 979.228381][T14173] [ 979.454776][ C0] vkms_vblank_simulate: vblank timer overrun [ 979.891609][ T10] usb 9-1: config 0 descriptor?? [ 979.899513][ T10] cp210x 9-1:0.0: cp210x converter detected [ 980.452053][T14181] FAULT_INJECTION: forcing a failure. [ 980.452053][T14181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.526526][T14181] CPU: 1 UID: 0 PID: 14181 Comm: syz.6.2030 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 980.526558][T14181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 980.526572][T14181] Call Trace: [ 980.526582][T14181] [ 980.526592][T14181] dump_stack_lvl+0x189/0x250 [ 980.526623][T14181] ? __pfx____ratelimit+0x10/0x10 [ 980.526656][T14181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 980.526705][T14181] ? __pfx__printk+0x10/0x10 [ 980.526734][T14181] ? __might_fault+0xb0/0x130 [ 980.526777][T14181] should_fail_ex+0x414/0x560 [ 980.526814][T14181] _copy_from_user+0x2d/0xb0 [ 980.526839][T14181] ___sys_recvmsg+0x12e/0x510 [ 980.526875][T14181] ? __pfx____sys_recvmsg+0x10/0x10 [ 980.526931][T14181] ? __fget_files+0x3a0/0x420 [ 980.526964][T14181] __x64_sys_recvmsg+0x198/0x260 [ 980.526995][T14181] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 980.527034][T14181] ? __pfx_ksys_write+0x10/0x10 [ 980.527071][T14181] ? do_syscall_64+0xbe/0x3b0 [ 980.527096][T14181] do_syscall_64+0xfa/0x3b0 [ 980.527117][T14181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.527137][T14181] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 980.527159][T14181] ? clear_bhb_loop+0x60/0xb0 [ 980.527184][T14181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.527207][T14181] RIP: 0033:0x7fb02f18e929 [ 980.527226][T14181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 980.527244][T14181] RSP: 002b:00007fb0300cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 980.527268][T14181] RAX: ffffffffffffffda RBX: 00007fb02f3b5fa0 RCX: 00007fb02f18e929 [ 980.527283][T14181] RDX: 0000000000000104 RSI: 0000200000001500 RDI: 0000000000000003 [ 980.527297][T14181] RBP: 00007fb0300cf090 R08: 0000000000000000 R09: 0000000000000000 [ 980.527315][T14181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.527329][T14181] R13: 0000000000000000 R14: 00007fb02f3b5fa0 R15: 00007ffd9a6def38 [ 980.527373][T14181] [ 981.173492][ T10] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 981.273368][ T10] cp210x 9-1:0.0: querying part number failed [ 981.297720][ T10] usb 9-1: cp210x converter now attached to ttyUSB0 [ 982.425019][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 982.527798][ T122] usb 9-1: USB disconnect, device number 4 [ 982.558665][ T122] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 982.567213][ T122] cp210x 9-1:0.0: device disconnected [ 983.594479][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.644439][ T24] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.688773][ T24] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.861891][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 983.862411][ T122] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 984.044970][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 984.066467][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.242185][ T24] usb 3-1: config 0 descriptor?? [ 984.250128][ T122] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 984.274280][ T122] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.524158][ T122] usb 9-1: config 0 descriptor?? [ 984.578832][ T122] cp210x 9-1:0.0: cp210x converter detected [ 984.730059][ T24] kye 0003:0458:5015.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 984.745548][ T24] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 984.752520][ T24] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 984.763488][ T24] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 984.772072][ T24] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 984.780018][ T24] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 984.895173][ T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 985.001386][ T24] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 985.008630][ T24] kye 0003:0458:5015.000D: unknown main item tag 0x0 [ 985.037306][ T24] kye 0003:0458:5015.000D: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 985.096731][ T24] kye 0003:0458:5015.000D: tablet-enabling feature report not found [ 985.111240][ T122] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 985.128574][ T122] cp210x 9-1:0.0: querying part number failed [ 985.176966][ T122] usb 9-1: cp210x converter now attached to ttyUSB0 [ 986.032707][ T24] kye 0003:0458:5015.000D: tablet enabling failed [ 986.045763][ T24] usb 3-1: USB disconnect, device number 60 [ 986.066748][ T10] usb 7-1: config 0 has no interfaces? [ 986.123480][ T10] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 986.177734][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.281362][ T97] block nbd0: Possible stuck request ffff888025675080: control (read@0,1024B). Runtime 300 seconds [ 986.292332][ T97] block nbd0: Possible stuck request ffff888025675240: control (read@1024,1024B). Runtime 300 seconds [ 986.303666][ T97] block nbd0: Possible stuck request ffff888025675400: control (read@2048,1024B). Runtime 300 seconds [ 986.314944][ T97] block nbd0: Possible stuck request ffff8880256755c0: control (read@3072,1024B). Runtime 300 seconds [ 986.387913][T14230] new mount options do not match the existing superblock, will be ignored [ 986.397579][T14230] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 986.516994][T11076] usb 9-1: USB disconnect, device number 5 [ 986.529538][ T10] usb 7-1: Product: syz [ 986.533812][ T10] usb 7-1: Manufacturer: syz [ 986.567231][T11076] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 986.594870][ T10] usb 7-1: SerialNumber: syz [ 986.615517][T11076] cp210x 9-1:0.0: device disconnected [ 986.624009][T14225] fido_id[14225]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 986.646084][ T10] usb 7-1: config 0 descriptor?? [ 986.911109][ T122] usb 7-1: USB disconnect, device number 19 [ 987.819069][T14245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2047'. [ 988.094908][T10001] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 988.201190][T14250] FAULT_INJECTION: forcing a failure. [ 988.201190][T14250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.334178][T14250] CPU: 1 UID: 0 PID: 14250 Comm: syz.3.2049 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 988.334199][T14250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 988.334208][T14250] Call Trace: [ 988.334214][T14250] [ 988.334220][T14250] dump_stack_lvl+0x189/0x250 [ 988.334241][T14250] ? __pfx____ratelimit+0x10/0x10 [ 988.334262][T14250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 988.334277][T14250] ? __pfx__printk+0x10/0x10 [ 988.334303][T14250] should_fail_ex+0x414/0x560 [ 988.334326][T14250] _copy_to_user+0x31/0xb0 [ 988.334343][T14250] simple_read_from_buffer+0xe1/0x170 [ 988.334369][T14250] proc_fail_nth_read+0x1df/0x250 [ 988.334395][T14250] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 988.334418][T14250] ? rw_verify_area+0x258/0x650 [ 988.334437][T14250] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 988.334452][T14250] vfs_read+0x200/0x980 [ 988.334474][T14250] ? __pfx___mutex_lock+0x10/0x10 [ 988.334488][T14250] ? __pfx_vfs_read+0x10/0x10 [ 988.334507][T14250] ? __fget_files+0x2a/0x420 [ 988.334523][T14250] ? __fget_files+0x3a0/0x420 [ 988.334535][T14250] ? __fget_files+0x2a/0x420 [ 988.334553][T14250] ksys_read+0x145/0x250 [ 988.334571][T14250] ? __fget_files+0x3a0/0x420 [ 988.334584][T14250] ? __pfx_ksys_read+0x10/0x10 [ 988.334606][T14250] ? do_syscall_64+0xbe/0x3b0 [ 988.334622][T14250] do_syscall_64+0xfa/0x3b0 [ 988.334634][T14250] ? lockdep_hardirqs_on+0x9c/0x150 [ 988.334654][T14250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.334668][T14250] ? clear_bhb_loop+0x60/0xb0 [ 988.334684][T14250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.334698][T14250] RIP: 0033:0x7f9401d8d33c [ 988.334711][T14250] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 988.334723][T14250] RSP: 002b:00007f9402b11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 988.334738][T14250] RAX: ffffffffffffffda RBX: 00007f9401fb5fa0 RCX: 00007f9401d8d33c [ 988.334748][T14250] RDX: 000000000000000f RSI: 00007f9402b110a0 RDI: 0000000000000006 [ 988.334757][T14250] RBP: 00007f9402b11090 R08: 0000000000000000 R09: 0000000000000000 [ 988.334771][T14250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.334785][T14250] R13: 0000000000000000 R14: 00007f9401fb5fa0 R15: 00007ffd4fde88a8 [ 988.334814][T14250] [ 988.567168][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2051'. [ 988.577075][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2051'. [ 988.914095][T14263] FAULT_INJECTION: forcing a failure. [ 988.914095][T14263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 989.017753][T14263] CPU: 0 UID: 0 PID: 14263 Comm: syz.6.2052 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 989.017782][T14263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 989.017795][T14263] Call Trace: [ 989.017805][T14263] [ 989.017814][T14263] dump_stack_lvl+0x189/0x250 [ 989.017843][T14263] ? __pfx____ratelimit+0x10/0x10 [ 989.017880][T14263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 989.017904][T14263] ? __pfx__printk+0x10/0x10 [ 989.017945][T14263] should_fail_ex+0x414/0x560 [ 989.017979][T14263] strncpy_from_user+0x36/0x290 [ 989.018011][T14263] path_setxattrat+0x150/0x3a0 [ 989.018046][T14263] ? __pfx_path_setxattrat+0x10/0x10 [ 989.018068][T14263] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 989.018116][T14263] ? ksys_write+0x22a/0x250 [ 989.018147][T14263] ? __pfx_ksys_write+0x10/0x10 [ 989.018171][T14263] ? rcu_is_watching+0x15/0xb0 [ 989.018199][T14263] __x64_sys_setxattr+0xbc/0xe0 [ 989.018234][T14263] do_syscall_64+0xfa/0x3b0 [ 989.018251][T14263] ? lockdep_hardirqs_on+0x9c/0x150 [ 989.018279][T14263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.018297][T14263] ? clear_bhb_loop+0x60/0xb0 [ 989.018320][T14263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.018339][T14263] RIP: 0033:0x7fb02f18e929 [ 989.018356][T14263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 989.018376][T14263] RSP: 002b:00007fb0300cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 989.018396][T14263] RAX: ffffffffffffffda RBX: 00007fb02f3b5fa0 RCX: 00007fb02f18e929 [ 989.018411][T14263] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000000 [ 989.018424][T14263] RBP: 00007fb0300cf090 R08: 0000000000000002 R09: 0000000000000000 [ 989.018436][T14263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.018448][T14263] R13: 0000000000000000 R14: 00007fb02f3b5fa0 R15: 00007ffd9a6def38 [ 989.018477][T14263] [ 989.241033][T10001] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 989.295128][T10001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.365667][T10001] usb 9-1: config 0 descriptor?? [ 989.402842][T10001] cp210x 9-1:0.0: cp210x converter detected [ 989.665043][T11076] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 990.518680][T10001] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 990.538220][T10001] cp210x 9-1:0.0: querying part number failed [ 990.838315][T10001] usb 9-1: cp210x converter now attached to ttyUSB0 [ 990.886739][T11076] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 990.906283][T11076] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.931330][T11076] usb 7-1: config 0 descriptor?? [ 990.940109][T11076] cp210x 7-1:0.0: cp210x converter detected [ 991.447764][T11076] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 991.495702][T11076] cp210x 7-1:0.0: querying part number failed [ 991.512653][T11076] usb 7-1: cp210x converter now attached to ttyUSB1 [ 991.820788][T14293] FAULT_INJECTION: forcing a failure. [ 991.820788][T14293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 991.835062][T14293] CPU: 1 UID: 0 PID: 14293 Comm: syz.3.2059 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 991.835087][T14293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 991.835100][T14293] Call Trace: [ 991.835109][T14293] [ 991.835117][T14293] dump_stack_lvl+0x189/0x250 [ 991.835145][T14293] ? __pfx____ratelimit+0x10/0x10 [ 991.835174][T14293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 991.835196][T14293] ? __pfx__printk+0x10/0x10 [ 991.835222][T14293] ? __might_fault+0xb0/0x130 [ 991.835259][T14293] should_fail_ex+0x414/0x560 [ 991.835292][T14293] _copy_from_user+0x2d/0xb0 [ 991.835315][T14293] __sys_bpf+0x1ed/0x860 [ 991.835355][T14293] ? __pfx___sys_bpf+0x10/0x10 [ 991.835395][T14293] ? ksys_write+0x1e1/0x250 [ 991.835424][T14293] ? __pfx_ksys_write+0x10/0x10 [ 991.835448][T14293] ? rcu_is_watching+0x15/0xb0 [ 991.835481][T14293] __x64_sys_bpf+0x7c/0x90 [ 991.835507][T14293] do_syscall_64+0xfa/0x3b0 [ 991.835525][T14293] ? lockdep_hardirqs_on+0x9c/0x150 [ 991.835553][T14293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.835577][T14293] ? clear_bhb_loop+0x60/0xb0 [ 991.835600][T14293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.835619][T14293] RIP: 0033:0x7f9401d8e929 [ 991.835635][T14293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 991.835652][T14293] RSP: 002b:00007f9402b11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 991.835672][T14293] RAX: ffffffffffffffda RBX: 00007f9401fb5fa0 RCX: 00007f9401d8e929 [ 991.835687][T14293] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 991.835710][T14293] RBP: 00007f9402b11090 R08: 0000000000000000 R09: 0000000000000000 [ 991.835721][T14293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.835749][T14293] R13: 0000000000000000 R14: 00007f9401fb5fa0 R15: 00007ffd4fde88a8 [ 991.835779][T14293] [ 992.115081][T11076] usb 9-1: USB disconnect, device number 6 [ 992.801100][T11076] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 992.878791][T10001] usb 7-1: USB disconnect, device number 20 [ 992.966572][T11076] cp210x 9-1:0.0: device disconnected [ 993.011336][T10001] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 993.071451][T10001] cp210x 7-1:0.0: device disconnected [ 993.131516][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.166072][T14307] tipc: Enabled bearer , priority 0 [ 993.189545][T14307] syzkaller0: entered promiscuous mode [ 993.515047][T14307] syzkaller0: entered allmulticast mode [ 993.764452][T14307] FAULT_INJECTION: forcing a failure. [ 993.764452][T14307] name failslab, interval 1, probability 0, space 0, times 0 [ 993.783374][T14307] CPU: 1 UID: 0 PID: 14307 Comm: syz.2.2063 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 993.783403][T14307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 993.783434][T14307] Call Trace: [ 993.783443][T14307] [ 993.783453][T14307] dump_stack_lvl+0x189/0x250 [ 993.783483][T14307] ? __pfx____ratelimit+0x10/0x10 [ 993.783519][T14307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 993.783543][T14307] ? __pfx__printk+0x10/0x10 [ 993.783576][T14307] ? __pfx___might_resched+0x10/0x10 [ 993.783599][T14307] ? fs_reclaim_acquire+0x7d/0x100 [ 993.783626][T14307] should_fail_ex+0x414/0x560 [ 993.783661][T14307] should_failslab+0xa8/0x100 [ 993.783695][T14307] __kmalloc_noprof+0xcb/0x4f0 [ 993.783723][T14307] ? kfree+0x4d/0x440 [ 993.783747][T14307] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 993.783775][T14307] tomoyo_realpath_from_path+0xe3/0x5d0 [ 993.783801][T14307] ? tomoyo_domain+0xda/0x130 [ 993.783830][T14307] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 993.783861][T14307] tomoyo_path_number_perm+0x1e8/0x5a0 [ 993.783895][T14307] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 993.783945][T14307] ? __lock_acquire+0xab9/0xd20 [ 993.783989][T14307] ? __fget_files+0x2a/0x420 [ 993.784011][T14307] ? __fget_files+0x2a/0x420 [ 993.784029][T14307] ? __fget_files+0x3a0/0x420 [ 993.784047][T14307] ? __fget_files+0x2a/0x420 [ 993.784071][T14307] security_file_ioctl+0xcb/0x2d0 [ 993.784106][T14307] __se_sys_ioctl+0x47/0x170 [ 993.784136][T14307] do_syscall_64+0xfa/0x3b0 [ 993.784158][T14307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.784185][T14307] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 993.784206][T14307] ? clear_bhb_loop+0x60/0xb0 [ 993.784233][T14307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.784253][T14307] RIP: 0033:0x7ff4c3d8e929 [ 993.784272][T14307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.784290][T14307] RSP: 002b:00007ff4c4c9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 993.784312][T14307] RAX: ffffffffffffffda RBX: 00007ff4c3fb5fa0 RCX: 00007ff4c3d8e929 [ 993.784327][T14307] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 993.784341][T14307] RBP: 00007ff4c4c9d090 R08: 0000000000000000 R09: 0000000000000000 [ 993.784354][T14307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.784367][T14307] R13: 0000000000000000 R14: 00007ff4c3fb5fa0 R15: 00007ffc85365078 [ 993.784401][T14307] [ 994.035886][T14307] ERROR: Out of memory at tomoyo_realpath_from_path. [ 994.049681][T14307] tipc: Resetting bearer [ 994.355708][T14306] tipc: Resetting bearer [ 994.630025][T14306] tipc: Disabling bearer [ 995.839092][T14334] new mount options do not match the existing superblock, will be ignored [ 995.848912][T14334] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 996.674979][ T122] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 996.900519][ T122] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 996.929536][ T122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.999763][ T122] usb 4-1: config 0 descriptor?? [ 997.013818][ T122] cp210x 4-1:0.0: cp210x converter detected [ 997.465315][ T5919] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 998.106192][ T122] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 998.120337][ T5919] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 998.130682][ T122] cp210x 4-1:0.0: querying part number failed [ 998.159118][ T122] usb 4-1: cp210x converter now attached to ttyUSB0 [ 998.167107][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.223836][ T5919] usb 7-1: config 0 descriptor?? [ 998.254282][ T5919] cp210x 7-1:0.0: cp210x converter detected [ 998.948951][ T5919] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 998.987385][ T5919] cp210x 7-1:0.0: querying part number failed [ 999.065783][ T5919] usb 7-1: cp210x converter now attached to ttyUSB1 [ 1000.025911][ T122] usb 4-1: USB disconnect, device number 56 [ 1000.094510][ T122] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1000.314661][ T122] cp210x 4-1:0.0: device disconnected [ 1000.323612][T11076] usb 7-1: USB disconnect, device number 21 [ 1000.361058][T11076] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1000.378753][T11076] cp210x 7-1:0.0: device disconnected [ 1001.300704][T14371] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2080'. [ 1003.435285][ T122] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1003.596742][ T122] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1003.606270][ T122] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.618205][ T122] usb 9-1: config 0 descriptor?? [ 1003.626963][ T122] cp210x 9-1:0.0: cp210x converter detected [ 1004.796929][ T122] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1004.804713][ T122] cp210x 9-1:0.0: querying part number failed [ 1004.851046][ T122] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1006.402447][T11076] usb 9-1: USB disconnect, device number 7 [ 1006.411142][T11076] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1006.419984][T11076] cp210x 9-1:0.0: device disconnected [ 1006.659550][T14419] FAULT_INJECTION: forcing a failure. [ 1006.659550][T14419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1006.673107][T14419] CPU: 0 UID: 0 PID: 14419 Comm: syz.3.2095 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1006.673135][T14419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1006.673148][T14419] Call Trace: [ 1006.673157][T14419] [ 1006.673166][T14419] dump_stack_lvl+0x189/0x250 [ 1006.673194][T14419] ? __pfx____ratelimit+0x10/0x10 [ 1006.673226][T14419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1006.673250][T14419] ? __pfx__printk+0x10/0x10 [ 1006.673276][T14419] ? __might_fault+0xb0/0x130 [ 1006.673318][T14419] should_fail_ex+0x414/0x560 [ 1006.673352][T14419] _copy_from_user+0x2d/0xb0 [ 1006.673381][T14419] __sys_bpf+0x1ed/0x860 [ 1006.673414][T14419] ? __pfx___sys_bpf+0x10/0x10 [ 1006.673458][T14419] ? ksys_write+0x22a/0x250 [ 1006.673489][T14419] ? __pfx_ksys_write+0x10/0x10 [ 1006.673514][T14419] ? rcu_is_watching+0x15/0xb0 [ 1006.673545][T14419] __x64_sys_bpf+0x7c/0x90 [ 1006.673573][T14419] do_syscall_64+0xfa/0x3b0 [ 1006.673592][T14419] ? lockdep_hardirqs_on+0x9c/0x150 [ 1006.673623][T14419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.673644][T14419] ? clear_bhb_loop+0x60/0xb0 [ 1006.673681][T14419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.673699][T14419] RIP: 0033:0x7f9401d8e929 [ 1006.673717][T14419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.673751][T14419] RSP: 002b:00007f9402b11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1006.673773][T14419] RAX: ffffffffffffffda RBX: 00007f9401fb5fa0 RCX: 00007f9401d8e929 [ 1006.673788][T14419] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1006.673801][T14419] RBP: 00007f9402b11090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.673815][T14419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.673828][T14419] R13: 0000000000000000 R14: 00007f9401fb5fa0 R15: 00007ffd4fde88a8 [ 1006.673860][T14419] [ 1008.590222][T14437] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2101'. [ 1009.125904][T14444] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1009.286168][T14446] pim6reg: entered allmulticast mode [ 1009.355597][T14446] pim6reg: left allmulticast mode [ 1012.120617][T14462] netlink: 'syz.6.2107': attribute type 21 has an invalid length. [ 1012.148712][T14462] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2107'. [ 1012.330689][T14462] netlink: 'syz.6.2107': attribute type 5 has an invalid length. [ 1012.859284][T14462] netlink: 'syz.6.2107': attribute type 6 has an invalid length. [ 1012.879022][T14468] netlink: 'syz.8.2108': attribute type 39 has an invalid length. [ 1012.891396][T14462] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2107'. [ 1013.290729][T14473] random: crng reseeded on system resumption [ 1014.749802][T14490] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2115'. [ 1017.083009][ T9384] block nbd0: Possible stuck request ffff888025675080: control (read@0,1024B). Runtime 330 seconds [ 1017.094344][ T9384] block nbd0: Possible stuck request ffff888025675240: control (read@1024,1024B). Runtime 330 seconds [ 1017.120042][ T9384] block nbd0: Possible stuck request ffff888025675400: control (read@2048,1024B). Runtime 330 seconds [ 1017.136646][ T9384] block nbd0: Possible stuck request ffff8880256755c0: control (read@3072,1024B). Runtime 330 seconds [ 1020.549640][ T5205] udevd[5205]: worker [11431] /devices/virtual/block/nbd0 timeout; kill it [ 1020.666664][ T5205] udevd[5205]: seq 15460 '/devices/virtual/block/nbd0' killed [ 1021.242209][T14505] FAULT_INJECTION: forcing a failure. [ 1021.242209][T14505] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.263246][T14505] CPU: 0 UID: 0 PID: 14505 Comm: syz.7.2118 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1021.263274][T14505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1021.263288][T14505] Call Trace: [ 1021.263296][T14505] [ 1021.263305][T14505] dump_stack_lvl+0x189/0x250 [ 1021.263333][T14505] ? __pfx____ratelimit+0x10/0x10 [ 1021.263368][T14505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1021.263391][T14505] ? __pfx__printk+0x10/0x10 [ 1021.263420][T14505] ? __pfx___might_resched+0x10/0x10 [ 1021.263443][T14505] ? fs_reclaim_acquire+0x7d/0x100 [ 1021.263469][T14505] should_fail_ex+0x414/0x560 [ 1021.263509][T14505] should_failslab+0xa8/0x100 [ 1021.263541][T14505] __kmalloc_cache_noprof+0x70/0x3d0 [ 1021.263569][T14505] ? __vb2_init_fileio+0x1e8/0xff0 [ 1021.263593][T14505] ? rcu_is_watching+0x15/0xb0 [ 1021.263619][T14505] __vb2_init_fileio+0x1e8/0xff0 [ 1021.263644][T14505] ? preempt_schedule_irq+0xde/0x150 [ 1021.263679][T14505] ? irqentry_exit+0x74/0x90 [ 1021.263708][T14505] ? lockdep_hardirqs_on+0x9c/0x150 [ 1021.263743][T14505] __vb2_perform_fileio+0x284/0x1600 [ 1021.263787][T14505] vb2_fop_write+0x22f/0x340 [ 1021.263817][T14505] v4l2_write+0x199/0x2c0 [ 1021.263840][T14505] ? __pfx_v4l2_write+0x10/0x10 [ 1021.263865][T14505] vfs_write+0x27e/0xa90 [ 1021.263902][T14505] ? __pfx_vfs_write+0x10/0x10 [ 1021.263930][T14505] ? __fget_files+0x2a/0x420 [ 1021.263952][T14505] ? __fget_files+0x2a/0x420 [ 1021.263970][T14505] ? __fget_files+0x3a0/0x420 [ 1021.263986][T14505] ? __fget_files+0x2a/0x420 [ 1021.264015][T14505] ksys_write+0x145/0x250 [ 1021.264043][T14505] ? __pfx_ksys_write+0x10/0x10 [ 1021.264081][T14505] do_syscall_64+0xfa/0x3b0 [ 1021.264101][T14505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.264120][T14505] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1021.264140][T14505] ? clear_bhb_loop+0x60/0xb0 [ 1021.264164][T14505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.264184][T14505] RIP: 0033:0x7f5f6a98e929 [ 1021.264201][T14505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1021.264219][T14505] RSP: 002b:00007f5f6b7ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1021.264240][T14505] RAX: ffffffffffffffda RBX: 00007f5f6abb6080 RCX: 00007f5f6a98e929 [ 1021.264255][T14505] RDX: 000000000000e000 RSI: 0000200000000180 RDI: 0000000000000005 [ 1021.264268][T14505] RBP: 00007f5f6b7ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.264281][T14505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.264292][T14505] R13: 0000000000000000 R14: 00007f5f6abb6080 R15: 00007fff92ee1538 [ 1021.264323][T14505] [ 1021.977026][T14509] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2119'. [ 1022.330278][T14515] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1022.360736][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1023.103662][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1023.113116][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.254533][ T10] usb 4-1: config 0 descriptor?? [ 1023.287809][ T10] cp210x 4-1:0.0: cp210x converter detected [ 1024.511989][ T10] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1024.535988][ T10] cp210x 4-1:0.0: querying part number failed [ 1024.559753][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1025.096360][T14545] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2129'. [ 1026.070657][T14545] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1026.156886][T11076] usb 4-1: USB disconnect, device number 57 [ 1026.200273][T11076] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1026.585425][T11076] cp210x 4-1:0.0: device disconnected [ 1027.408482][T14563] netlink: 'syz.6.2133': attribute type 39 has an invalid length. [ 1032.522542][T14601] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2143'. [ 1032.781295][T14602] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1034.146068][T14616] FAULT_INJECTION: forcing a failure. [ 1034.146068][T14616] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.405893][T14616] CPU: 0 UID: 0 PID: 14616 Comm: syz.8.2149 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1034.405920][T14616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1034.405932][T14616] Call Trace: [ 1034.405941][T14616] [ 1034.405951][T14616] dump_stack_lvl+0x189/0x250 [ 1034.405979][T14616] ? __pfx____ratelimit+0x10/0x10 [ 1034.406008][T14616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1034.406029][T14616] ? __pfx__printk+0x10/0x10 [ 1034.406058][T14616] ? __pfx___might_resched+0x10/0x10 [ 1034.406079][T14616] ? fs_reclaim_acquire+0x7d/0x100 [ 1034.406103][T14616] should_fail_ex+0x414/0x560 [ 1034.406135][T14616] should_failslab+0xa8/0x100 [ 1034.406166][T14616] __kmalloc_noprof+0xcb/0x4f0 [ 1034.406191][T14616] ? kfree+0x4d/0x440 [ 1034.406255][T14616] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1034.406285][T14616] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1034.406310][T14616] ? tomoyo_domain+0xda/0x130 [ 1034.406339][T14616] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1034.406373][T14616] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1034.406408][T14616] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1034.406458][T14616] ? __lock_acquire+0xab9/0xd20 [ 1034.406508][T14616] ? __fget_files+0x2a/0x420 [ 1034.406531][T14616] ? __fget_files+0x2a/0x420 [ 1034.406549][T14616] ? __fget_files+0x3a0/0x420 [ 1034.406567][T14616] ? __fget_files+0x2a/0x420 [ 1034.406591][T14616] security_file_ioctl+0xcb/0x2d0 [ 1034.406625][T14616] __se_sys_ioctl+0x47/0x170 [ 1034.406656][T14616] do_syscall_64+0xfa/0x3b0 [ 1034.406675][T14616] ? lockdep_hardirqs_on+0x9c/0x150 [ 1034.406705][T14616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.406727][T14616] ? clear_bhb_loop+0x60/0xb0 [ 1034.406753][T14616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.406774][T14616] RIP: 0033:0x7fd8cd78e929 [ 1034.406793][T14616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1034.406811][T14616] RSP: 002b:00007fd8ce69c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1034.406833][T14616] RAX: ffffffffffffffda RBX: 00007fd8cd9b5fa0 RCX: 00007fd8cd78e929 [ 1034.406849][T14616] RDX: 0000200000000240 RSI: 000000004008ae89 RDI: 0000000000000005 [ 1034.406863][T14616] RBP: 00007fd8ce69c090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.406876][T14616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1034.406889][T14616] R13: 0000000000000000 R14: 00007fd8cd9b5fa0 R15: 00007ffc37ce5b28 [ 1034.406921][T14616] [ 1034.406954][T14616] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1036.494271][T14645] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2155'. [ 1036.516131][T14639] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2155'. [ 1036.988247][T14652] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2159'. [ 1037.168116][T14655] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1037.847130][T14658] netlink: 'syz.7.2160': attribute type 39 has an invalid length. [ 1038.051648][T14665] FAULT_INJECTION: forcing a failure. [ 1038.051648][T14665] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.088149][T14665] CPU: 0 UID: 0 PID: 14665 Comm: syz.3.2163 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1038.088178][T14665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1038.088192][T14665] Call Trace: [ 1038.088201][T14665] [ 1038.088211][T14665] dump_stack_lvl+0x189/0x250 [ 1038.088240][T14665] ? __pfx____ratelimit+0x10/0x10 [ 1038.088281][T14665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1038.088303][T14665] ? __pfx__printk+0x10/0x10 [ 1038.088334][T14665] ? __pfx___might_resched+0x10/0x10 [ 1038.088360][T14665] ? fs_reclaim_acquire+0x7d/0x100 [ 1038.088385][T14665] should_fail_ex+0x414/0x560 [ 1038.088418][T14665] should_failslab+0xa8/0x100 [ 1038.088448][T14665] __kmalloc_noprof+0xcb/0x4f0 [ 1038.088473][T14665] ? kfree+0x4d/0x440 [ 1038.088495][T14665] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1038.088521][T14665] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1038.088544][T14665] ? tomoyo_domain+0xda/0x130 [ 1038.088571][T14665] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1038.088599][T14665] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1038.088630][T14665] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1038.088676][T14665] ? __lock_acquire+0xab9/0xd20 [ 1038.088715][T14665] ? __fget_files+0x2a/0x420 [ 1038.088737][T14665] ? __fget_files+0x2a/0x420 [ 1038.088753][T14665] ? __fget_files+0x3a0/0x420 [ 1038.088769][T14665] ? __fget_files+0x2a/0x420 [ 1038.088791][T14665] security_file_ioctl+0xcb/0x2d0 [ 1038.088823][T14665] __se_sys_ioctl+0x47/0x170 [ 1038.088851][T14665] do_syscall_64+0xfa/0x3b0 [ 1038.088876][T14665] ? lockdep_hardirqs_on+0x9c/0x150 [ 1038.088904][T14665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.088923][T14665] ? clear_bhb_loop+0x60/0xb0 [ 1038.088947][T14665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.088966][T14665] RIP: 0033:0x7f9401d8e929 [ 1038.088983][T14665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1038.088999][T14665] RSP: 002b:00007f9402b11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1038.089020][T14665] RAX: ffffffffffffffda RBX: 00007f9401fb5fa0 RCX: 00007f9401d8e929 [ 1038.089034][T14665] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1038.089046][T14665] RBP: 00007f9402b11090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.089058][T14665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.089069][T14665] R13: 0000000000000000 R14: 00007f9401fb5fa0 R15: 00007ffd4fde88a8 [ 1038.089100][T14665] [ 1038.089126][T14665] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1038.837251][T14675] FAULT_INJECTION: forcing a failure. [ 1038.837251][T14675] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1038.850764][T14675] CPU: 1 UID: 0 PID: 14675 Comm: syz.2.2165 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1038.850788][T14675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1038.850801][T14675] Call Trace: [ 1038.850809][T14675] [ 1038.850818][T14675] dump_stack_lvl+0x189/0x250 [ 1038.850844][T14675] ? __pfx____ratelimit+0x10/0x10 [ 1038.850880][T14675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1038.850902][T14675] ? __pfx__printk+0x10/0x10 [ 1038.850930][T14675] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1038.850959][T14675] ? lockdep_hardirqs_on+0x9c/0x150 [ 1038.850994][T14675] should_fail_ex+0x414/0x560 [ 1038.851026][T14675] get_futex_key+0x1a8/0x1640 [ 1038.851053][T14675] ? look_up_lock_class+0x74/0x170 [ 1038.851087][T14675] ? __pfx_get_futex_key+0x10/0x10 [ 1038.851112][T14675] ? __lock_acquire+0xab9/0xd20 [ 1038.851139][T14675] futex_wake+0xf8/0x500 [ 1038.851173][T14675] ? __pfx_futex_wake+0x10/0x10 [ 1038.851204][T14675] ? __lock_acquire+0xab9/0xd20 [ 1038.851233][T14675] do_futex+0x395/0x420 [ 1038.851263][T14675] ? __pfx_do_futex+0x10/0x10 [ 1038.851290][T14675] ? __might_fault+0xb0/0x130 [ 1038.851321][T14675] mm_release+0x188/0x390 [ 1038.851343][T14675] ? __pfx_mm_release+0x10/0x10 [ 1038.851363][T14675] ? lockdep_hardirqs_on+0x9c/0x150 [ 1038.851403][T14675] exit_mm+0xa8/0x2c0 [ 1038.851432][T14675] ? __pfx_exit_mm+0x10/0x10 [ 1038.851460][T14675] ? rcu_is_watching+0x15/0xb0 [ 1038.851486][T14675] do_exit+0x648/0x22e0 [ 1038.851518][T14675] ? do_raw_spin_lock+0x121/0x290 [ 1038.851546][T14675] ? __pfx_do_exit+0x10/0x10 [ 1038.851588][T14675] do_group_exit+0x21c/0x2d0 [ 1038.851614][T14675] ? lockdep_hardirqs_on+0x9c/0x150 [ 1038.851645][T14675] get_signal+0x125e/0x1310 [ 1038.851687][T14675] arch_do_signal_or_restart+0x9a/0x750 [ 1038.851715][T14675] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1038.851748][T14675] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1038.851793][T14675] ? exit_to_user_mode_loop+0x40/0x110 [ 1038.851815][T14675] exit_to_user_mode_loop+0x75/0x110 [ 1038.851834][T14675] do_syscall_64+0x2bd/0x3b0 [ 1038.851854][T14675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.851877][T14675] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1038.851896][T14675] ? clear_bhb_loop+0x60/0xb0 [ 1038.851919][T14675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.851938][T14675] RIP: 0033:0x7ff4c3d8e929 [ 1038.851955][T14675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1038.851971][T14675] RSP: 002b:00007ff4c4c5b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d0 [ 1038.851991][T14675] RAX: fffffffffffffffc RBX: 00007ff4c3fb6160 RCX: 00007ff4c3d8e929 [ 1038.852006][T14675] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 00007ff4c4c2b000 [ 1038.852018][T14675] RBP: 00007ff4c4c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.852030][T14675] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 1038.852043][T14675] R13: 0000000000000000 R14: 00007ff4c3fb6160 R15: 00007ffc85365078 [ 1038.852072][T14675] [ 1042.109535][T14704] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2171'. [ 1042.228487][T14706] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1042.241715][ T5919] IPVS: starting estimator thread 0... [ 1042.364843][T14707] IPVS: using max 43 ests per chain, 103200 per kthread [ 1043.213974][T14713] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2175'. [ 1043.223103][T14713] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2175'. [ 1044.487333][T14742] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2184'. [ 1044.497456][T14742] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2184'. [ 1044.507780][T14742] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2184'. [ 1047.309676][T14764] SET target dimension over the limit! [ 1047.915248][ T9384] block nbd0: Possible stuck request ffff888025675080: control (read@0,1024B). Runtime 360 seconds [ 1047.928153][ T9384] block nbd0: Possible stuck request ffff888025675240: control (read@1024,1024B). Runtime 360 seconds [ 1047.939321][ T9384] block nbd0: Possible stuck request ffff888025675400: control (read@2048,1024B). Runtime 360 seconds [ 1047.950402][ T9384] block nbd0: Possible stuck request ffff8880256755c0: control (read@3072,1024B). Runtime 360 seconds [ 1048.055626][T13996] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1048.707228][T13996] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.054724][T13996] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1049.081809][T13996] usb 7-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1049.104469][T13996] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.152576][T13996] usb 7-1: config 0 descriptor?? [ 1049.222314][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2194'. [ 1049.475189][T14776] netlink: 'syz.7.2195': attribute type 39 has an invalid length. [ 1050.129678][T13996] nti 0003:0757:0A00.000E: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.6-1/input0 [ 1050.475389][T13996] usb 7-1: USB disconnect, device number 22 [ 1052.281586][T14804] SET target dimension over the limit! [ 1053.428358][T14812] FAULT_INJECTION: forcing a failure. [ 1053.428358][T14812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.491834][T14812] CPU: 1 UID: 0 PID: 14812 Comm: syz.6.2205 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1053.491862][T14812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1053.491874][T14812] Call Trace: [ 1053.491883][T14812] [ 1053.491892][T14812] dump_stack_lvl+0x189/0x250 [ 1053.491919][T14812] ? __pfx____ratelimit+0x10/0x10 [ 1053.491945][T14812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1053.491960][T14812] ? __pfx__printk+0x10/0x10 [ 1053.491986][T14812] should_fail_ex+0x414/0x560 [ 1053.492010][T14812] _copy_to_user+0x31/0xb0 [ 1053.492027][T14812] simple_read_from_buffer+0xe1/0x170 [ 1053.492051][T14812] proc_fail_nth_read+0x1df/0x250 [ 1053.492068][T14812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1053.492084][T14812] ? rw_verify_area+0x258/0x650 [ 1053.492101][T14812] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1053.492116][T14812] vfs_read+0x200/0x980 [ 1053.492137][T14812] ? __pfx___mutex_lock+0x10/0x10 [ 1053.492151][T14812] ? __pfx_vfs_read+0x10/0x10 [ 1053.492170][T14812] ? __fget_files+0x2a/0x420 [ 1053.492185][T14812] ? __fget_files+0x3a0/0x420 [ 1053.492197][T14812] ? __fget_files+0x2a/0x420 [ 1053.492215][T14812] ksys_read+0x145/0x250 [ 1053.492231][T14812] ? __fget_files+0x2a/0x420 [ 1053.492245][T14812] ? __pfx_ksys_read+0x10/0x10 [ 1053.492266][T14812] ? do_syscall_64+0xbe/0x3b0 [ 1053.492282][T14812] do_syscall_64+0xfa/0x3b0 [ 1053.492294][T14812] ? lockdep_hardirqs_on+0x9c/0x150 [ 1053.492313][T14812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.492327][T14812] ? clear_bhb_loop+0x60/0xb0 [ 1053.492347][T14812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.492366][T14812] RIP: 0033:0x7fb02f18d33c [ 1053.492382][T14812] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1053.492395][T14812] RSP: 002b:00007fb0300cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1053.492413][T14812] RAX: ffffffffffffffda RBX: 00007fb02f3b5fa0 RCX: 00007fb02f18d33c [ 1053.492424][T14812] RDX: 000000000000000f RSI: 00007fb0300cf0a0 RDI: 0000000000000004 [ 1053.492435][T14812] RBP: 00007fb0300cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.492447][T14812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.492457][T14812] R13: 0000000000000000 R14: 00007fb02f3b5fa0 R15: 00007ffd9a6def38 [ 1053.492478][T14812] [ 1054.356425][T14828] FAULT_INJECTION: forcing a failure. [ 1054.356425][T14828] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.369313][T14828] CPU: 1 UID: 0 PID: 14828 Comm: syz.3.2209 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1054.369338][T14828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1054.369351][T14828] Call Trace: [ 1054.369359][T14828] [ 1054.369368][T14828] dump_stack_lvl+0x189/0x250 [ 1054.369395][T14828] ? __pfx____ratelimit+0x10/0x10 [ 1054.369423][T14828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1054.369445][T14828] ? __pfx__printk+0x10/0x10 [ 1054.369472][T14828] ? __pfx___might_resched+0x10/0x10 [ 1054.369501][T14828] should_fail_ex+0x414/0x560 [ 1054.369533][T14828] should_failslab+0xa8/0x100 [ 1054.369563][T14828] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1054.369596][T14828] ? getname_flags+0xb8/0x540 [ 1054.369620][T14828] getname_flags+0xb8/0x540 [ 1054.369644][T14828] __x64_sys_mkdir+0x5d/0x80 [ 1054.369671][T14828] do_syscall_64+0xfa/0x3b0 [ 1054.369691][T14828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.369709][T14828] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1054.369728][T14828] ? clear_bhb_loop+0x60/0xb0 [ 1054.369751][T14828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.369770][T14828] RIP: 0033:0x7f9401d8e929 [ 1054.369787][T14828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.369804][T14828] RSP: 002b:00007f93ffbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1054.369824][T14828] RAX: ffffffffffffffda RBX: 00007f9401fb6160 RCX: 00007f9401d8e929 [ 1054.369839][T14828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580 [ 1054.369852][T14828] RBP: 00007f93ffbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.369864][T14828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.369876][T14828] R13: 0000000000000000 R14: 00007f9401fb6160 R15: 00007ffd4fde88a8 [ 1054.369923][T14828] [ 1054.725824][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.074276][ T30] audit: type=1326 audit(1752521235.829:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14832 comm="syz.7.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 1056.131701][ T30] audit: type=1326 audit(1752521235.829:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14832 comm="syz.7.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 1056.396105][ T30] audit: type=1326 audit(1752521235.829:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14832 comm="syz.7.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 1056.491656][T14847] SET target dimension over the limit! [ 1057.162425][ T30] audit: type=1326 audit(1752521235.829:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14832 comm="syz.7.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 1057.423920][ T30] audit: type=1326 audit(1752521235.829:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14832 comm="syz.7.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 1057.851707][ T30] audit: type=1326 audit(1752521237.429:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14832 comm="syz.7.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 1058.625812][ T30] audit: type=1326 audit(1752521237.429:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14832 comm="syz.7.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 1058.656395][ T30] audit: type=1326 audit(1752521237.439:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14832 comm="syz.7.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 1058.678665][ T30] audit: type=1326 audit(1752521237.439:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14832 comm="syz.7.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 1058.700723][ T30] audit: type=1326 audit(1752521237.439:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14832 comm="syz.7.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f6a98e929 code=0x7ffc0000 [ 1059.121564][T14861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2217'. [ 1059.130792][T14861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2217'. [ 1059.139843][T14861] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2217'. [ 1065.602784][T14918] input: syz0 as /devices/virtual/input/input16 [ 1066.969969][T10894] Bluetooth: hci5: command 0x0406 tx timeout [ 1068.172050][T14939] block nbd6: shutting down sockets [ 1069.594883][T13996] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1070.018445][T13996] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1070.052397][T13996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.235039][T13996] usb 4-1: config 0 descriptor?? [ 1070.245465][T14958] netlink: 'syz.8.2242': attribute type 4 has an invalid length. [ 1070.801113][T13996] cp210x 4-1:0.0: cp210x converter detected [ 1071.559560][T14966] netlink: 'syz.8.2242': attribute type 4 has an invalid length. [ 1071.641035][T13996] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1071.662607][T13996] cp210x 4-1:0.0: querying part number failed [ 1071.747377][T14969] trusted_key: encrypted_key: master key parameter '00N0040' is invalid [ 1071.772165][T14969] FAULT_INJECTION: forcing a failure. [ 1071.772165][T14969] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.786408][T14969] CPU: 0 UID: 0 PID: 14969 Comm: syz.6.2246 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1071.786436][T14969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1071.786449][T14969] Call Trace: [ 1071.786458][T14969] [ 1071.786468][T14969] dump_stack_lvl+0x189/0x250 [ 1071.786495][T14969] ? __pfx____ratelimit+0x10/0x10 [ 1071.786526][T14969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1071.786549][T14969] ? __pfx__printk+0x10/0x10 [ 1071.786580][T14969] ? __pfx___might_resched+0x10/0x10 [ 1071.786602][T14969] ? fs_reclaim_acquire+0x7d/0x100 [ 1071.786628][T14969] should_fail_ex+0x414/0x560 [ 1071.786661][T14969] should_failslab+0xa8/0x100 [ 1071.786693][T14969] __kmalloc_noprof+0xcb/0x4f0 [ 1071.786720][T14969] ? kfree+0x4d/0x440 [ 1071.786743][T14969] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1071.786772][T14969] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1071.786796][T14969] ? tomoyo_domain+0xda/0x130 [ 1071.786823][T14969] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1071.786853][T14969] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1071.786896][T14969] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1071.786944][T14969] ? __lock_acquire+0xab9/0xd20 [ 1071.786985][T14969] ? __fget_files+0x2a/0x420 [ 1071.787010][T14969] ? __fget_files+0x2a/0x420 [ 1071.787027][T14969] ? __fget_files+0x3a0/0x420 [ 1071.787045][T14969] ? __fget_files+0x2a/0x420 [ 1071.787069][T14969] security_file_ioctl+0xcb/0x2d0 [ 1071.787103][T14969] __se_sys_ioctl+0x47/0x170 [ 1071.787133][T14969] do_syscall_64+0xfa/0x3b0 [ 1071.787156][T14969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.787176][T14969] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1071.787197][T14969] ? clear_bhb_loop+0x60/0xb0 [ 1071.787223][T14969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.787242][T14969] RIP: 0033:0x7fb02f18e929 [ 1071.787261][T14969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1071.787279][T14969] RSP: 002b:00007fb0300ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1071.787301][T14969] RAX: ffffffffffffffda RBX: 00007fb02f3b6080 RCX: 00007fb02f18e929 [ 1071.787316][T14969] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000005 [ 1071.787334][T14969] RBP: 00007fb0300ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.787347][T14969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.787360][T14969] R13: 0000000000000000 R14: 00007fb02f3b6080 R15: 00007ffd9a6def38 [ 1071.787393][T14969] [ 1071.787475][T14969] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1072.509768][T13996] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1073.065994][T14977] trusted_key: encrypted_key: master key parameter '00N0040' is invalid [ 1073.711246][T14984] FAULT_INJECTION: forcing a failure. [ 1073.711246][T14984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1073.735131][T14984] CPU: 1 UID: 0 PID: 14984 Comm: syz.2.2250 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1073.735160][T14984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1073.735174][T14984] Call Trace: [ 1073.735183][T14984] [ 1073.735192][T14984] dump_stack_lvl+0x189/0x250 [ 1073.735222][T14984] ? __pfx____ratelimit+0x10/0x10 [ 1073.735254][T14984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1073.735277][T14984] ? __pfx__printk+0x10/0x10 [ 1073.735304][T14984] ? __might_fault+0xb0/0x130 [ 1073.735345][T14984] should_fail_ex+0x414/0x560 [ 1073.735381][T14984] _copy_from_user+0x2d/0xb0 [ 1073.735406][T14984] ___sys_sendmsg+0x158/0x2a0 [ 1073.735446][T14984] ? __pfx____sys_sendmsg+0x10/0x10 [ 1073.735510][T14984] ? __fget_files+0x2a/0x420 [ 1073.735528][T14984] ? __fget_files+0x3a0/0x420 [ 1073.735558][T14984] __x64_sys_sendmsg+0x19b/0x260 [ 1073.735588][T14984] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1073.735624][T14984] ? __pfx_ksys_write+0x10/0x10 [ 1073.735650][T14984] ? rcu_is_watching+0x15/0xb0 [ 1073.735678][T14984] ? do_syscall_64+0xbe/0x3b0 [ 1073.735702][T14984] do_syscall_64+0xfa/0x3b0 [ 1073.735720][T14984] ? lockdep_hardirqs_on+0x9c/0x150 [ 1073.735749][T14984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.735770][T14984] ? clear_bhb_loop+0x60/0xb0 [ 1073.735794][T14984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.735815][T14984] RIP: 0033:0x7ff4c3d8e929 [ 1073.735832][T14984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1073.735850][T14984] RSP: 002b:00007ff4c4c9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1073.735872][T14984] RAX: ffffffffffffffda RBX: 00007ff4c3fb5fa0 RCX: 00007ff4c3d8e929 [ 1073.735887][T14984] RDX: 0000000000004000 RSI: 0000200000000580 RDI: 0000000000000003 [ 1073.735900][T14984] RBP: 00007ff4c4c9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.735913][T14984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.735925][T14984] R13: 0000000000000000 R14: 00007ff4c3fb5fa0 R15: 00007ffc85365078 [ 1073.735956][T14984] [ 1074.030477][T13996] usb 4-1: USB disconnect, device number 58 [ 1074.140836][T13996] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1074.173312][T13996] cp210x 4-1:0.0: device disconnected [ 1074.330962][T14985] can0: slcan on ttyS3. [ 1075.282606][T15001] netlink: 'syz.6.2255': attribute type 39 has an invalid length. [ 1075.297672][T14979] can0 (unregistered): slcan off ttyS3. [ 1075.417467][T15005] FAULT_INJECTION: forcing a failure. [ 1075.417467][T15005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1075.461927][T15005] CPU: 0 UID: 0 PID: 15005 Comm: syz.2.2256 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1075.461958][T15005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1075.461972][T15005] Call Trace: [ 1075.461981][T15005] [ 1075.461991][T15005] dump_stack_lvl+0x189/0x250 [ 1075.462021][T15005] ? __pfx____ratelimit+0x10/0x10 [ 1075.462054][T15005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1075.462079][T15005] ? __pfx__printk+0x10/0x10 [ 1075.462106][T15005] ? __might_fault+0xb0/0x130 [ 1075.462149][T15005] should_fail_ex+0x414/0x560 [ 1075.462186][T15005] _copy_from_user+0x2d/0xb0 [ 1075.462212][T15005] ___sys_sendmsg+0x158/0x2a0 [ 1075.462242][T15005] ? __pfx____sys_sendmsg+0x10/0x10 [ 1075.462336][T15005] ? __fget_files+0x2a/0x420 [ 1075.462355][T15005] ? __fget_files+0x3a0/0x420 [ 1075.462386][T15005] __x64_sys_sendmsg+0x19b/0x260 [ 1075.462416][T15005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1075.462454][T15005] ? __pfx_ksys_write+0x10/0x10 [ 1075.462489][T15005] ? do_syscall_64+0xbe/0x3b0 [ 1075.462515][T15005] do_syscall_64+0xfa/0x3b0 [ 1075.462534][T15005] ? lockdep_hardirqs_on+0x9c/0x150 [ 1075.462565][T15005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.462587][T15005] ? clear_bhb_loop+0x60/0xb0 [ 1075.462613][T15005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.462633][T15005] RIP: 0033:0x7ff4c3d8e929 [ 1075.462653][T15005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1075.462672][T15005] RSP: 002b:00007ff4c4c7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1075.462695][T15005] RAX: ffffffffffffffda RBX: 00007ff4c3fb6080 RCX: 00007ff4c3d8e929 [ 1075.462712][T15005] RDX: 00000000000088d4 RSI: 0000200000000d40 RDI: 0000000000000003 [ 1075.462726][T15005] RBP: 00007ff4c4c7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.462739][T15005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.462752][T15005] R13: 0000000000000001 R14: 00007ff4c3fb6080 R15: 00007ffc85365078 [ 1075.462786][T15005] [ 1076.252337][T15018] ip6gretap1: entered allmulticast mode [ 1077.746627][T15024] random: crng reseeded on system resumption [ 1077.947160][T10001] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1078.220733][T10001] usb 7-1: Using ep0 maxpacket: 32 [ 1078.375997][ T9384] block nbd0: Possible stuck request ffff888025675080: control (read@0,1024B). Runtime 390 seconds [ 1078.387769][ T9384] block nbd0: Possible stuck request ffff888025675240: control (read@1024,1024B). Runtime 390 seconds [ 1078.402431][ T9384] block nbd0: Possible stuck request ffff888025675400: control (read@2048,1024B). Runtime 390 seconds [ 1078.415329][ T9384] block nbd0: Possible stuck request ffff8880256755c0: control (read@3072,1024B). Runtime 390 seconds [ 1078.444347][T10001] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.595182][T10001] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.721488][T10001] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1078.828708][T10001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.189989][T10001] hub 7-1:4.0: USB hub found [ 1079.649010][T10001] hub 7-1:4.0: 2 ports detected [ 1079.989486][T10001] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 1080.200174][T10001] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 1081.315236][T10001] usb 7-1: USB disconnect, device number 23 [ 1081.744114][T15038] netlink: 'syz.2.2266': attribute type 39 has an invalid length. [ 1081.783860][T15041] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2265'. [ 1081.894326][T15043] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1081.965826][T10001] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1082.402716][T10001] usb 7-1: config 0 has no interfaces? [ 1082.413150][T10001] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1082.429715][T10001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.448846][T10001] usb 7-1: config 0 descriptor?? [ 1082.745733][T15035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.960804][T15049] ip6gretap1: entered allmulticast mode [ 1083.436232][T15035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.450767][T11076] usb 7-1: USB disconnect, device number 24 [ 1087.205086][ T31] INFO: task syz.0.1918:13722 blocked for more than 143 seconds. [ 1087.212963][ T31] Not tainted 6.16.0-rc6-syzkaller #0 [ 1087.231013][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1087.314521][ T31] task:syz.0.1918 state:D stack:28904 pid:13722 tgid:13703 ppid:5836 task_flags:0x400140 flags:0x00004004 [ 1087.365522][ T31] Call Trace: [ 1087.368853][ T31] [ 1087.371792][ T31] __schedule+0x16a2/0x4cb0 [ 1087.421736][ T31] ? schedule+0x165/0x360 [ 1087.446864][ T31] ? __pfx___schedule+0x10/0x10 [ 1087.451782][ T31] ? schedule+0x91/0x360 [ 1087.563968][ T31] schedule+0x165/0x360 [ 1087.588599][ T31] schedule_preempt_disabled+0x13/0x30 [ 1087.594148][ T31] __mutex_lock+0x724/0xe80 [ 1087.630848][ T31] ? __mutex_lock+0x51b/0xe80 [ 1087.645298][ T31] ? bdev_open+0xe0/0xd30 [ 1087.649720][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1087.665144][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 1087.670836][ T31] ? alloc_file_pseudo_noaccount+0x203/0x2c0 [ 1087.685233][ T31] ? disk_block_events+0xab/0x120 [ 1087.690312][ T31] ? bdev_open+0xbe/0xd30 [ 1087.694676][ T31] bdev_open+0xe0/0xd30 [ 1087.714807][ T31] bdev_file_open_by_dev+0x1be/0x240 [ 1087.720252][ T31] setup_bdev_super+0x5a/0x5b0 [ 1087.735296][ T31] get_tree_bdev_flags+0x366/0x4d0 [ 1087.740507][ T31] ? __pfx_adfs_fill_super+0x10/0x10 [ 1087.775061][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1087.780796][ T31] ? cap_capable+0x11f/0x460 [ 1087.797649][ T31] ? safesetid_security_capable+0xa9/0x1a0 [ 1087.803524][ T31] vfs_get_tree+0x92/0x2b0 [ 1087.814871][ T31] do_new_mount+0x24a/0xa40 [ 1087.835701][ T31] __se_sys_mount+0x317/0x410 [ 1087.845105][ T31] ? __pfx___se_sys_mount+0x10/0x10 [ 1087.859539][ T31] ? rcu_is_watching+0x15/0xb0 [ 1087.879796][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1087.884534][ T31] ? __x64_sys_mount+0x20/0xc0 [ 1087.903612][ T31] do_syscall_64+0xfa/0x3b0 [ 1087.929925][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.958833][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1087.984805][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1087.999615][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.014885][ T31] RIP: 0033:0x7f422918e929 [ 1088.029421][ T31] RSP: 002b:00007f422a041038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1088.044842][ T31] RAX: ffffffffffffffda RBX: 00007f42293b6080 RCX: 00007f422918e929 [ 1088.075040][ T31] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 00002000000000c0 [ 1088.083084][ T31] RBP: 00007f4229210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1088.114853][ T31] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 1088.122977][ T31] R13: 0000000000000000 R14: 00007f42293b6080 R15: 00007ffd0dc0dc28 [ 1088.170504][ T31] [ 1088.173682][ T31] [ 1088.173682][ T31] Showing all locks held in the system: [ 1088.235117][ T31] 3 locks held by kworker/0:1/10: [ 1088.240399][ T31] 1 lock held by khungtaskd/31: [ 1088.281276][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1088.329169][ T31] 2 locks held by getty/5594: [ 1088.333905][ T31] #0: ffff888030d590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1088.374865][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1088.386298][ T31] 1 lock held by udevd/11431: [ 1088.391017][ T31] #0: ffff888142b03358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1088.400804][ T31] 2 locks held by syz.0.1918/13722: [ 1088.406357][ T31] #0: ffff88807d8d40e0 (&type->s_umount_key#88/1){+.+.}-{4:4}, at: alloc_super+0x204/0x970 [ 1088.417010][ T31] #1: ffff888142b03358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1088.426614][ T31] 1 lock held by syz.3.2278/15084: [ 1088.431760][ T31] #0: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1088.465835][ T31] [ 1088.468292][ T31] ============================================= [ 1088.468292][ T31] [ 1088.504803][ T31] NMI backtrace for cpu 1 [ 1088.504824][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1088.504847][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1088.504859][ T31] Call Trace: [ 1088.504868][ T31] [ 1088.504877][ T31] dump_stack_lvl+0x189/0x250 [ 1088.504904][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1088.504934][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1088.504957][ T31] ? __pfx__printk+0x10/0x10 [ 1088.504997][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1088.505026][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1088.505056][ T31] ? _printk+0xcf/0x120 [ 1088.505086][ T31] ? __pfx__printk+0x10/0x10 [ 1088.505114][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1088.505147][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1088.505176][ T31] watchdog+0xfee/0x1030 [ 1088.505207][ T31] ? watchdog+0x1de/0x1030 [ 1088.505245][ T31] kthread+0x711/0x8a0 [ 1088.505276][ T31] ? __pfx_watchdog+0x10/0x10 [ 1088.505304][ T31] ? __pfx_kthread+0x10/0x10 [ 1088.505333][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1088.505361][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1088.505389][ T31] ? __pfx_kthread+0x10/0x10 [ 1088.505416][ T31] ret_from_fork+0x3fc/0x770 [ 1088.505439][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1088.505466][ T31] ? __switch_to_asm+0x39/0x70 [ 1088.505489][ T31] ? __switch_to_asm+0x33/0x70 [ 1088.505513][ T31] ? __pfx_kthread+0x10/0x10 [ 1088.505541][ T31] ret_from_fork_asm+0x1a/0x30 [ 1088.505581][ T31] [ 1088.505589][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1088.662458][ C0] NMI backtrace for cpu 0 [ 1088.662475][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1088.662494][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1088.662505][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1088.662535][ C0] Code: 93 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 fd 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1088.662549][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 1088.662564][ C0] RAX: de2917729e9d8e00 RBX: ffffffff81976938 RCX: de2917729e9d8e00 [ 1088.662577][ C0] RDX: 0000000000000001 RSI: ffffffff8d985414 RDI: ffffffff8be1c9c0 [ 1088.662589][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 1088.662602][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa0cbf0 [ 1088.662631][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 1088.662642][ C0] FS: 0000000000000000(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 1088.662656][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1088.662669][ C0] CR2: 000000110c3a3106 CR3: 000000007ea1a000 CR4: 00000000003526f0 [ 1088.662685][ C0] Call Trace: [ 1088.662691][ C0] [ 1088.662698][ C0] default_idle+0x13/0x20 [ 1088.662716][ C0] default_idle_call+0x74/0xb0 [ 1088.662734][ C0] do_idle+0x1e8/0x510 [ 1088.662753][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1088.662771][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1088.662797][ C0] ? __pfx_do_idle+0x10/0x10 [ 1088.662821][ C0] ? do_idle+0x5/0x510 [ 1088.662839][ C0] cpu_startup_entry+0x44/0x60 [ 1088.662858][ C0] rest_init+0x2de/0x300 [ 1088.662876][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1088.662903][ C0] start_kernel+0x47d/0x500 [ 1088.662923][ C0] x86_64_start_reservations+0x24/0x30 [ 1088.662957][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1088.662979][ C0] common_startup_64+0x13e/0x147 [ 1088.663014][ C0] [ 1088.877319][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1088.884239][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1088.894327][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1088.904406][ T31] Call Trace: [ 1088.907710][ T31] [ 1088.910662][ T31] dump_stack_lvl+0x99/0x250 [ 1088.915275][ T31] ? __asan_memcpy+0x40/0x70 [ 1088.919892][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1088.925113][ T31] ? __pfx__printk+0x10/0x10 [ 1088.929737][ T31] panic+0x2db/0x790 [ 1088.933667][ T31] ? __pfx_panic+0x10/0x10 [ 1088.938110][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1088.943943][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1088.949350][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1088.955543][ T31] watchdog+0x102d/0x1030 [ 1088.959912][ T31] ? watchdog+0x1de/0x1030 [ 1088.964371][ T31] kthread+0x711/0x8a0 [ 1088.968476][ T31] ? __pfx_watchdog+0x10/0x10 [ 1088.973190][ T31] ? __pfx_kthread+0x10/0x10 [ 1088.977827][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1088.983075][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1088.988321][ T31] ? __pfx_kthread+0x10/0x10 [ 1088.992939][ T31] ret_from_fork+0x3fc/0x770 [ 1088.997564][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1089.002699][ T31] ? __switch_to_asm+0x39/0x70 [ 1089.007490][ T31] ? __switch_to_asm+0x33/0x70 [ 1089.012290][ T31] ? __pfx_kthread+0x10/0x10 [ 1089.016924][ T31] ret_from_fork_asm+0x1a/0x30 [ 1089.021744][ T31] [ 1089.025165][ T31] Kernel Offset: disabled [ 1089.029502][ T31] Rebooting in 86400 seconds..