last executing test programs: 14m22.332113944s ago: executing program 4 (id=328): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x18}}, 0x0) 14m21.322811991s ago: executing program 4 (id=332): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="020f00001500000000000000000000000800120000000100000000000000000006000000000000000000000000000000fe880000000000000000000000000001e000000200000000000000000000bdde69781900000000000a004e220000000100000000000000000000000000000001060000000a000e2300008001fe80007a136b5c37c8d6d500000000bb01000000030006000000000002000200e00000020000000000000000"], 0xa8}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000100)=0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x6336, 0x0, &(0x7f00000001c0), 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x4208, r3) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], 0x3c}, 0x1, 0x0, 0x0, 0x20040054}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8993, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_eee={0x44, 0x1, 0x0, 0x5, 0x7, 0x0, 0x3, 0x80, [0x200, 0x8923]}}) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) r7 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f0000000100)=0xf5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x1200, 0x0, 0x3) 14m16.799806722s ago: executing program 4 (id=337): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180100001f000100000000000000000006"], 0x118}], 0x1}, 0x0) 14m16.152875459s ago: executing program 4 (id=340): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x141a82, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000600)=ANY=[@ANYBLOB="03000000000000000d0000000180ffff05080800030000000000000000000000010000800800000009000000080000a0877db200000000000000"]) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500005c000000102fa4d778000000000000000000004e20001f907803000000000000006d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8ddec71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"], 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000300)=0x101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = open(&(0x7f0000000340)='./file0\x00', 0x420c41, 0x100) fcntl$setlease(r6, 0x400, 0x0) mmap$snddsp(&(0x7f000070f000/0x4000)=nil, 0x4000, 0x1000004, 0x4010, r7, 0x9000) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000111488f9a07fc8d94546df25080001000000000008003e000000000008004b0028000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040084}, 0x40) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x33, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5d}}, 0x44) r9 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x3}) 14m10.134907473s ago: executing program 4 (id=353): r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="02ff44f35565fa70edd634d3ca65ad077c6c0b775ce24ea8e0d24f11e5618a80bf964703028c92f49e7ee37dd7", @ANYRES16=0x0], 0x2c}}, 0x0) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x24000420) r2 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd=r1, 0x4, &(0x7f0000000080)=""/164, 0xa4, 0x14, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000000206010200000000000000000000000005000500000000000900020073797a3000000000100003006269746d61fa127d87086404195efb7adecd9a703a706f7274001c000780080008400000000006000000060005404e21000005000100070000000500040000000000"], 0x64}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4d0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r10, &(0x7f0000000000), 0xd) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000000000100000cc570800020000009500000042000000"], &(0x7f0000000300)='syzkaller\x00', 0xff, 0xcd, &(0x7f0000000980)=""/205, 0x41100, 0x10, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0xa, 0x8, 0xd}, 0x10, 0xffffffffffffffff, r12, 0x1, &(0x7f0000000840)=[r9, r9, r9, r9, r9, r9], &(0x7f0000000880)=[{0x3, 0x4, 0x6, 0x3}], 0x10, 0x8}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000000)=@arm64={0x7f, 0x4, 0xf, '\x00', 0x3}) syz_pidfd_open(0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x48e9, 0x8daf, 0x0, 0x0, 0x0) 14m7.939776108s ago: executing program 4 (id=360): sendto(0xffffffffffffffff, &(0x7f0000000600)="ae6fbee764d71bdadae47f142234c01b6e5a4ffe", 0x14, 0x800, &(0x7f0000000700)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0xf, 0x0, 0x0, 0x8, 0xef, 0x8}, {0x3000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2000, 0xe, 0x2, 0xfe, 0x10, 0x6, 0x1, 0x1, 0x8, 0x4, 0x6}, {0x0, 0x8000000, 0x0, 0x0, 0x25, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0x80a0000, 0x5000, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2, 0xff}, {0x80a0000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfc, 0x4, 0x0, 0x0, 0x5}, {0x2000, 0x401}, {}, 0xddf8ffdb, 0x0, 0x0, 0x730, 0x8, 0x8000, 0x2000, [0xff, 0x0, 0x2, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000580)=[@textreal={0x8, 0x0}], 0x1, 0x12, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0", 0x25}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r10 = socket$can_raw(0x1d, 0x3, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r10, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r12}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x4904}, 0x4040005) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0xffee, 0xd}, {0x4, 0x4}, {0xfff3, 0xd}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008880}, 0x20040000) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) 13m52.810208871s ago: executing program 32 (id=360): sendto(0xffffffffffffffff, &(0x7f0000000600)="ae6fbee764d71bdadae47f142234c01b6e5a4ffe", 0x14, 0x800, &(0x7f0000000700)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0xf, 0x0, 0x0, 0x8, 0xef, 0x8}, {0x3000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2000, 0xe, 0x2, 0xfe, 0x10, 0x6, 0x1, 0x1, 0x8, 0x4, 0x6}, {0x0, 0x8000000, 0x0, 0x0, 0x25, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0x80a0000, 0x5000, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2, 0xff}, {0x80a0000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfc, 0x4, 0x0, 0x0, 0x5}, {0x2000, 0x401}, {}, 0xddf8ffdb, 0x0, 0x0, 0x730, 0x8, 0x8000, 0x2000, [0xff, 0x0, 0x2, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000580)=[@textreal={0x8, 0x0}], 0x1, 0x12, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0", 0x25}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r10 = socket$can_raw(0x1d, 0x3, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r10, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r12}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x4904}, 0x4040005) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0xffee, 0xd}, {0x4, 0x4}, {0xfff3, 0xd}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008880}, 0x20040000) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) 8m16.887279046s ago: executing program 2 (id=1293): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24008094) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) io_uring_setup(0x5ef3, &(0x7f00000002c0)={0x0, 0xe69, 0x0, 0x1, 0xa1}) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)={0xb8, r2, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xacb}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x802, 0x3, 0x2, 0x0, {0x70, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, 0x800, 0x8, 0x4}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x0, 0x2, 0x0, {0x800, 0x1ff9, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x300, 0x6, 0x1}}, @NL80211_ATTR_HIDDEN_SSID={0x20, 0x7e, @random="2addaea20e5f6885701decc7dc41bff7c0676941fd743db0c4dd5d3b"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1000, 0x1, 0x7, 0x0, {0x0, 0xf, 0x0, 0x9, 0x0, 0x1, 0x1, 0x2}, 0x6, 0x8, 0x3}}]}, 0xb8}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x100000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xe}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="e2153ce675e4588d00000000fdfffff71811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000400000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x0, 0xd95df4, 0x32314d4e, 0x7, 0x0, [{}, {0x0, 0x6}, {0x4}, {0x0, 0x20000}, {}, {0x9}], 0x4e}}) 8m15.505365834s ago: executing program 2 (id=1299): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000009ce352d00000000000"], 0x48) 8m12.63067257s ago: executing program 2 (id=1301): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1d, 0x2, 0x6) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) r3 = socket(0x10, 0x3, 0x0) read(r1, &(0x7f00000000c0)=""/50, 0x32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x44080) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x10, 0xffffffff, 0x19}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x18, 0x0, 0x9, 0x466, 0xffffffffffffffff}, 0x0, 0x0) 8m10.227632023s ago: executing program 2 (id=1305): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902a000030156c0020904000000010100000a24010101bb02010211240601040507000a00080003000200050524050e0f0f2406020504020002e2f49c2e00040a24040201041a0000120924060502010600000924030303030505"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\b'}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 8m5.979560511s ago: executing program 2 (id=1322): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000002c0)="23000000010006", 0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES64=r3, @ANYRES8=r2, @ANYRES32=r3], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000000)={0x1}) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x3) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000186"], 0x0, 0x0, 0x0, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 8m2.710800415s ago: executing program 2 (id=1330): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = syz_io_uring_setup(0x2f1, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) unshare(0x22020600) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x3, {0xa, 0x4e21, 0x2, @private2}}}, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x50, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2de7, 0x4000, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x82, &(0x7f00000001c0)="020900000080efff", 0x8) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xe000000000000000, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 7m58.384958515s ago: executing program 0 (id=1342): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x3, 0x0, 0x4000}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x5608, 0x3) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffef000000000000000085000000ae0000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x7fffffe, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) pread64(r8, &(0x7f0000001500)=""/4075, 0xfeb, 0x7fff) r10 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) listen(r10, 0x8b) ioctl$sock_TIOCOUTQ(r10, 0x5411, 0x0) 7m54.966949396s ago: executing program 0 (id=1351): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000009ce352d00000000000"], 0x48) 7m52.901787072s ago: executing program 0 (id=1356): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x29, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$smackfs_cipso(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={0x0, 0x80}}, 0x0) pread64(r1, &(0x7f0000019800)=""/102380, 0x18fec, 0x48) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="be9e7bf5fe9a7856011b5e4be3280ae9948208a9e6e9aeb19cd18b502a884ac795d6d767ab59b9d11bda1958656da8749ad2f7c0cd09215f37356a296848dcb4f16e24a7"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect(0x3, 0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="120150024bae0110401c3405f3680102030109021a00010209500009047804005e77dd81080b4cc1ff"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) 7m49.769985162s ago: executing program 0 (id=1362): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) r2 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') creat(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chdir(&(0x7f0000000100)='./file0\x00') unshare(0x22020600) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000000)=@o_path={0x0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 7m48.535606072s ago: executing program 0 (id=1364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x9, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x4, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x7, 0x80, 0x8, 0x0, {{0x14, 0x4, 0x1, 0x5, 0x50, 0x64, 0x0, 0x1, 0x29, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0x17, 0xc1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @multicast2, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x24, 0xeb, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x2}, {@multicast2, 0xfffffffa}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x42}, {@multicast2, 0x1ff}]}]}}}}}) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) preadv2(r7, 0x0, 0x0, 0x0, 0x0, 0x9) 7m46.908490977s ago: executing program 33 (id=1330): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = syz_io_uring_setup(0x2f1, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) unshare(0x22020600) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x3, {0xa, 0x4e21, 0x2, @private2}}}, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x50, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2de7, 0x4000, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x82, &(0x7f00000001c0)="020900000080efff", 0x8) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xe000000000000000, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 7m41.531399579s ago: executing program 0 (id=1370): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0, @ANYBLOB="f11d89a09c79de44b6ac522abffc1188f0dbfb918638728a1497433fa952af5237ab1c071caccac15615f55c62c6c2e14e897a1709ff6bd2e2bcab8ae3c9347a40029c472a29ea7bd4ebcf7c35cca7acc565631ea66f328962165fbbbe41e6214a89dbfe337c119d21a9b689d9892b70038f4fc29cd89d127673bb4cfe0dc7bc56b5c54f93cb83cbefd3", @ANYBLOB="0668ecb5570226faf9e328a45a53d6a13951b188428672e54fd91bc1dc71a893643c4a379bf184349e9c8e4857d53d850df34b903b31ee16f8e987010225903ef0d9fe80459276e8b0ce55ecc44ee2512872d983cdea4a2e3f4f8e8c8c579314249e718c544627548a89930bfb8396067b3c8d196897229b11dd8d6089b6c1b1409dbbd030bfe05b97894c", @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES16=0x0], 0x48) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000000)=""/15, &(0x7f0000000100)=0xf) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat2(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x254000, 0x8, 0x38}, 0x18) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, &(0x7f0000000240)) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) inotify_init1(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x298, 0x0, 0x0, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(0xffffffffffffffff, &(0x7f0000003680)={0x2020}, 0x2020) 7m41.273738106s ago: executing program 34 (id=1370): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0, @ANYBLOB="f11d89a09c79de44b6ac522abffc1188f0dbfb918638728a1497433fa952af5237ab1c071caccac15615f55c62c6c2e14e897a1709ff6bd2e2bcab8ae3c9347a40029c472a29ea7bd4ebcf7c35cca7acc565631ea66f328962165fbbbe41e6214a89dbfe337c119d21a9b689d9892b70038f4fc29cd89d127673bb4cfe0dc7bc56b5c54f93cb83cbefd3", @ANYBLOB="0668ecb5570226faf9e328a45a53d6a13951b188428672e54fd91bc1dc71a893643c4a379bf184349e9c8e4857d53d850df34b903b31ee16f8e987010225903ef0d9fe80459276e8b0ce55ecc44ee2512872d983cdea4a2e3f4f8e8c8c579314249e718c544627548a89930bfb8396067b3c8d196897229b11dd8d6089b6c1b1409dbbd030bfe05b97894c", @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES16=0x0], 0x48) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000000)=""/15, &(0x7f0000000100)=0xf) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat2(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x254000, 0x8, 0x38}, 0x18) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, &(0x7f0000000240)) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) inotify_init1(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x298, 0x0, 0x0, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(0xffffffffffffffff, &(0x7f0000003680)={0x2020}, 0x2020) 12.518306182s ago: executing program 3 (id=2619): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x46, 0x50, 0xd3, 0x10, 0xc45, 0x800a, 0xdb47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0xa6, 0x37}}]}}]}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400050000010000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) syz_socket_connect_nvme_tcp() r4 = dup3(r0, r0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x80000000000}, 0x18) close(0x3) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x8001}, 0x4) close(0x3) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1a, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0x1, 0xe, 0xc, 0x5, 0x80000000}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @generic={0x8, 0xc, 0xf, 0x2, 0x100}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x3, 0x1, 0x1, 0xa, 0x6, 0x3e, 0x8}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}, @map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x47096068}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x3, 0x1ff, 0x59}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[r4], &(0x7f0000000600)=[{0x4, 0x3, 0xd, 0x8}, {0x4, 0x1, 0xb, 0xd}, {0x3, 0x3, 0x10, 0x5}, {0x1, 0x1, 0x6, 0x7}, {0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0xf, 0x6}], 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000680)='xen_cpu_write_idt_entry\x00', r5, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) dup3(r7, 0xffffffffffffffff, 0x80000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 12.105492132s ago: executing program 6 (id=2622): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="000095104000f0ffffff000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000100)=0x1000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@gettaction={0xcc, 0x32, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xccf}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfe93}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x31fe}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0xcc}}, 0x0) 11.364792214s ago: executing program 1 (id=2624): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x0, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) listen(r1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) 10.199712701s ago: executing program 1 (id=2626): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000680)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e23, 0x0, @empty, 0x4194}}}, 0x90) 9.582843223s ago: executing program 6 (id=2627): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r3, &(0x7f0000000300)='attr/current\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) r7 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) pwritev(r7, &(0x7f00000004c0)=[{&(0x7f00000000c0)="3213", 0x2}], 0x1, 0x3, 0x7) 9.474469658s ago: executing program 5 (id=2628): syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x1, 0x0, &(0x7f0000000440)) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) lseek(r3, 0x9, 0x0) 8.433321659s ago: executing program 6 (id=2629): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = semget(0x0, 0x2, 0x464) semop(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='wchan\x00') r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x1c, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c00}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000600)='GPL\x00', 0x6, 0x66, &(0x7f00000006c0)=""/102, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) 8.38354011s ago: executing program 1 (id=2630): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet_smc(0x2b, 0x1, 0x0) r1 = getpid() syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580), 0x40000, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000600)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x40000007}, 0x8) 8.210085526s ago: executing program 5 (id=2631): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@delchain={0x11c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xe8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xc0, 0x1, [@m_simple={0x30, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0x8c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x61, 0x6, "455c01c35a2bca70225b757b65e5e4a3d41b6fb981e9f5ab2f14ad001cda09785441b43636124ee3000e13fa20bea090aab2bdd9895404add20f4fcf1a162cef77fa8839a02231378329689c84c729801c399b2e8e9d7612504fe105d4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FD={0x8}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000007940)={'syztnl1\x00', &(0x7f0000007900)={'syztnl1\x00', 0x0, 0x20, 0x7100, 0x0, 0x3c0afb20, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x65, 0x0, 0x1a, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmmsg(r1, &(0x7f0000008d40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="5a2ea4af6092971d275a61ce5b63e180f742d532873df5bb380f17cf24ca2009b5212d5a6325ff65a2aad27871e6dbe5045bead97c7195d973f5e800ea1068cb5973b7ee55e2f39251255d62ce13245a822ce50d13fa8bfe475825fea7bf295e11274e3e263090b7eec585906ba99d67", 0x70}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)="bfe52839006d3fcfe023e007e9d2b2170a34818c34d83936f2f9e0b369d6bbd6577fc8abdd55e431c57c11bb8952fed58cf76abd21e7e6add04dc74405b2f52b39ddba8d8377b41420632be5fc93bffcea65c28dbe5f06cf42359c8cc822c7ed7488e9e8ab200909e60f18e1bc907de55f3e400a", 0x74}, {&(0x7f0000000540)="c56d48c9c783b0a24f9f74b5a0405a69b0e02b03f80f6dba205a4bf764b0da7b3ee9c21cc3c9845bbbd8a36fd3fc79", 0x2f}, {&(0x7f0000000580)="70094b194bc4046bafe461aa4f662c3985e3dfef1df78611bc2d5f68", 0x1c}, {&(0x7f00000005c0)="6ff3919101ee8a259d489727e956e5c8", 0x10}], 0x4, &(0x7f0000001fc0)=[{0xb0, 0x88, 0x9, "ea0503e9ccc671ded435e065fcd3dff9b39fea232d9852f7dafd8d5cdd612f197e3d95f165dadb0bc104dfee2d35eebc38e932f66440063aa5c2d813f3a219df43254bf4f3144b8fb7badc67be034293937f159d0e8281096b6eb3fd16097bf4cd17292ccc06f736497f8073a242ef2be29776301dfeb3a7c14b80b061e561b0c392070a790e35559374764558504f320d2f51f2f99187deaf8452161f"}, {0x90, 0x114, 0x5, "30cdaa4a6511563fa07b32048f313cb8697557eef36d35c04d085c997b1ff8795b7ab2b56923a301744effbc52fc2a8840c569532ebe365749367582e48d60a039151df4325627dc4eed29d379b0891e15575fa1cef226252455238891984a8aa9d414c0942e6baf301ee147d91b5404669a0d44f734219e000368c0177d"}, {0x110, 0x84, 0xe, "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"}, {0x30, 0x110, 0x1, "aa08c8ff77577bf2152a81ba6d710e2dcc21b245fc0eb0757a"}, {0xd8, 0x11, 0x0, "609f423db01ff873e5e30c6e650fd44560760adcc7d4fc2f2c8d0f4db5129bbe9b3156f1e262dc519dbf70d51dd5ef63ccbba83efcdcbe202a558d8a0ac0aefe1963bdeeb066cfc0e082c5897afb256541c8010d274f8ffd55fbcb1fa40618b3fb012a0f762c24c18aa42aea1e071ad8b3edeb380f7be83f6cbdffd38b7a61137dff2197487234789853dc4748f4ee6477ba3aac50102f966b57f3f219c9ab966f61b59042dfb0e66ed09a23f0e3ebb2510bc033a85e084087b8965e97c43c3f1aa9c0a793"}, {0x30, 0x84, 0xc, "9a5009e1e8bc7ba7dd712578b0ddf9cdbe3fbc6dd901a7d49e62584b"}, {0xe0, 0x111, 0x0, "c5d0b0fcbe48d76a5131390712906ca046232195846331f67e818a16cb73fcda7ff051669a31724564dfcbf44566bb81880ab7ac8a61e2ca9ab5f071ad4528c382f46a9e0ced35ba554d0428e196e11af74c75c18183643b53290f20b26dde976e81d88ae062e8d0336da8700484420f155400593388cacc58f22712ebbe212d80d2d3a392179d97c0f363b5296b980a1eb3ccdf6fb481ab1fbc9453bdc3fe84456618696ba223e56f447ab9cc5cbff3d7fde20251d0e0a856ab14ae0c320b91d77afefbd96cf60612ea1e1d342304"}, {0xd0, 0x112, 0xe, "cdd7a0033c492393d5f6ece49d78f967a7f07564ea47e11b83a9094415833d7d06d4170497ad2935edbdb1bf327e7dad1cf3e3f7df3f6927b67b8be93b78697084622f36b222bea7b5262baf82430d6c1d09328c05abc9e2f7081eb93c7fed2b6bfbe0ef00e5a1b4bf7589d83a458cca1af268b29ad1b0c08c5052e9446bcac74b0ad807f07bf8a26d4346e3047e90d92e182653c1a4dce6e75f26c35fda10357c6d34b0cf1e630912f4f123fc234ad589ef3d5be19d55f0a9"}, {0x100, 0x111, 0x0, "98a9be8d8e6dcee4680e6dfa237ea38049cee0148fd0e3ece67c6cca48c9b1bbbff7a1e91a04cce2d3652140d3cdbcafbcc2990616b120e3f24afa9a05748fc1f4ae1e2a3c5d0e78f042302c0250395718906b87c35a639fd7244978d786e1bbdd3afae42e3f79a6ca14805db7bb85d431d11919d96f02caf2b1260c25346bb0759e00ecf2bba693fc20fdcfc837a855aa5a9f4fedb8474ad24cef55d985da6a77d14193d501eb787c3b5a046da2b48e633dedb6ef19d83cbc95f790ce9237786b82ac7ed428bc3b76a4d1dadc77784d149c8d27d0743c618609a7a5a11500d3b2f5428118d26c273ea6047ae328"}, {0x28, 0x10c, 0xffff, "bc83ce1801ded508f4fc96c8af39a54427d1d5"}], 0x660}}, {{&(0x7f0000000880)=@l2={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xff81, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000bc0)="d9c70fbf50d571e5d124d5fa780dfff5fa3c828f652b1eb349e0d7550023069e7fad75c18d8ddfbd092e358496eef000d57ebd31fad729e63fd2e352de16d59779b8b8c03c4cb50fe7cf51dfc38d8fc24c5d4f30cdf385cf7615b510ce5a2f2929454325794a7d6b89517bb6eed570cc74f1793e2f953cd156bf433af4dfca3e6f224b9354ea9d1a176f", 0x8a}, {&(0x7f0000002640)="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", 0x1000}, {&(0x7f0000000700)="b5dd8b682b41859b4119a497b775e259677acd44ef91d59f9f8d002d3632deb683f755bf1bc38995b24bf807b3ec737ce66efbc390fa7d72f1c5208810", 0x3d}], 0x3, &(0x7f0000003800)=[{0x80, 0x10d, 0x7fffffff, "55cc83927810451528b5b492777dcbbfdf3e1d475272ccac9fe8acdbf219b8cf29e09fee375982a7e8a83ed49e991d2acbd8d26f4bb445971cbb852b58cd17c88e90548c8c837a7f63965b0259c495c83371884ccd1097eec044b9d92300f70aac8f6c4f02c5e48a157e37bca3a8"}, {0x28, 0x117, 0x7, "cf8557d91107f88fcc04393b3840512f337b8dfbd6bef33a"}, {0x100, 0x107, 0x3, "fce142386356a8dbf8eb7287493b25db5835622222c815036697349dcbc6e9826b8b7fefadf452674082c25326249c962a13f6b02107884a4b08c397bfe692b8603076f690aa69627e1ea2a2db6d48ef69c9e1ce081bc94aef2331f6bfd7041485ce36b017ba19823b206b71e984fd1d60c851ff882fe0f096686c0471c0ba8c6396ca988c1ebf4a380fae622f82a7e345ab8cac26c768d24ef10c056e1575fbe607d8fd14af38b36a3d14a4921a83cd19b09c63c4e92f28af5151f9a380a428c72e001fadaeca72e3e72e7d581909eb876dffc412f284957d900007c066ae53dde3769dfab24b97b186610b2dcc18"}, {0xe0, 0x10a, 0x8001, "19ae4904d7fb5db9a467a0a5147be9526d4a6b27ed52089c6da20d0450ace14cf0eac57f4132283aba3620184ef6d7938acb54d2f65aca458d8180d27e200c10868a1c0416d689c0b69eddf58773dd4a924d97204f117f9a3de3c6bd2da4b7c469cdac9b239b7734491095df508637a373f430badfc3c274093a2eaf1fc0f1fef6d914c583b9a2e1f5963fa5c24afde339496051902b0324cac5c2519d00bb0603214b453178f7f684b3dab4db4f345f07c8ff10f36dd7ccf88525f71285be5cd33ba98400a96353a2"}, {0x10, 0x110, 0x7fff}, {0x1010, 0x119, 0x1, "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"}, {0x1010, 0xff, 0x5, "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"}, {0x50, 0xf, 0x1, "d1a1917da6e095a29488037d842fb0d2877d17e84ccd5ef16d2a5e7b2d36053815f1163f05398f9b3101ab012e413cc61b59ca6fa97e4a61cdb1"}], 0x2308}}, {{&(0x7f0000000900)=@l2tp={0x2, 0x0, @empty, 0x1}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c80)="121d8c2c87aa6297df2ad0352d561db858e226b824ec7f11a3bd8d8f4a74bc86f93da98a4c3145d2f8a7c1ba81f70f0cd906c16dad7027bbe8441d4903a8ca932bb5bdfbfd840aa77912fff6f830088e04c8840802d4c08e67c45c274a9f0c6e8d33ba66b9d41a6f55b5f200b3e7a6bc8a02895cc21dd76e2754513afaf25033cc861b377771160e3e03f30d9426f261870343656cc27398c1cccb3794065216326fc0c6f8ffae92ee9fa176b6c8e8e4c68cf31bfe57317c85c98d03008914c0ab3e535c30dd1750f3a9c413a04b565540cb7908fa39ebd85eafe4cd5b9bedb71cad", 0xe2}, {&(0x7f0000000a00)="a13e22ef79f92a5150918e0848ad33c1d413d887cf80e18b6d854737a8d2e7b075ab678d582d4c8662ecd3eba3277cf55b48ae7aa100b971f2df2065c249462eeab23bedf94351", 0x47}, {&(0x7f0000000d80)="9b364d338d9abdcc9ee5666514311330f1caa1f0ee760266c2ecee3cc9f5130ab7cbc482f090066ac2266c3784b4e2f5d0c9482998f6dfe4c4a84f89153238d030b0e7a2f1be0c91f8d8be38740a60c4c082c478f3fdebbe149d4fc1a4853b72", 0x60}, {&(0x7f0000000e00)="9a82bbd42870816414e22c4b5e560709308dfe9e1caef9e730d61372e725424200310bdc6d50ff47cc2815055f0a273172c252b83bb17d16472d79c5f4e12395836fe3b7db78d3cd", 0x48}, {&(0x7f0000000e80)="e6eb6e99e357a4609f18b392af4f92d2393537d6ca49e211ba8774fd88637a0d5cc46a9a515fbe636d6d43b19f0c5a2d40c9ce7ea95a5779ea474cf80aff0ee129f675", 0x43}], 0x5, &(0x7f0000005b40)=[{0x28, 0x1, 0x9, "63600a7ee1f07f4c66ffa4522cfe7ce1612f6246377c75"}, {0xa8, 0x111, 0x7, "e0e11e8de31c2123280220f1f2759406f51cd558f1099af29e4aedf7a264dbd29a4db3f0004d8575f1888135ded38aeebfc96e5971ef2204de899f9a79b96c196d9ec74431256325a6a658ba99c54c50cf9eec61449706c67ba283805a0d1234da631e8b113261be2d8372550f7a7620e07559fca9ba05254bc306f2477f0fbcc1ea0cb08d35df29266306ce51421fc9f8c1"}, {0xd8, 0x10f, 0x0, "dbc99036477272dc49c366d438da805ee7e499255067a7979142e1bf4c76139fff1942f5418bf78e6d5e1594eaf30d3ea20ce44201740dd1068a34913a3bf6bd1e9f5a387e374150712290189f4175aa2f4969041a7cb7dd1037208a89ef1d4b5650cd72f037aaf46b3d49dd385ff5e9379c51e5da188af1749392cd8ab65b4e3d79d881d9e1c0fdd4e665e2a118ebedb01457bbf2ff10fc362e3738b1de81c587a4d2ea8af517a2e70cacefa2c4f005afabcd9c0a3740b733a727cae7939594838ed857089b"}, {0x100, 0x114, 0x5, "0705a4ab472408124682d6d2fc6b41b34650905cfbee68c7971d24823e6652dfd47c44ae85a38b209e3ec4b2c772d67d92019c0a02c189cf096b477d90a90714ef8c4e7ca36a4761838231c1b034fb56804b92a9a8c89c1e4f104bbddfc7141fa20068bc6950c01650466709546b1cd1d92424099041ea410f090e092b27618645a7181a98f4d1c2a8cb32f1c43d02839e3cf04700bf21f1a8ff877780c663ad91dc8b890ab2ceabb720eafe014464dc1ab359c1e448ee7ed91a83c05a5c1fa2cff6af4ae85401ae47a8677ad9bcc777b7c570e0007c829536dc040a80416906024dd12d9317b16d84150b1a01e80e"}], 0x2a8}}, {{&(0x7f0000003640)=@phonet={0x23, 0xae, 0x7, 0x4}, 0x80, &(0x7f0000006140)=[{&(0x7f0000005e00)="3cbb7699b11fe1e18a55b994ab94aa7d04cf040bb0d0f530720fbeeaceeb116ca520bdbefbf8d26b4d724389e0aa07b0c745967f4c8cbf274d31eefe4f99c74f4bacefc7d89ebc3cef52aada8dd6cb068f06f586d02baa1c37f6a48f5362cdc16912163d055fd7d1e08d0d184a9e30e93db34c365a968be6c99a8c63d68c22e4072985d4e4f4b898ceb81af5635b5ba5fa834b90d9a8d627d405e387d843a1e13e1e1226779a0958ee1cd319f768c76395aa2e29a10e28a7dd8fc12ac86f7c80b8151040dffab758", 0xc8}, {&(0x7f0000000f80)="00bb0be4194d891d12aa2325cb91337c4ef1379c0d1f26f94f60d10fdbf73af8c598d1618fa5e40af5519d39f318c6071a39b76722550628", 0x38}, {&(0x7f00000036c0)="e3", 0x1}, {&(0x7f0000005f00)="34dbc73bdecf6954a76449c6769cd38a66b5cbd9cbe22fe250ca9355a2e0ba672760d2db97000e6a11c26da6c56e7684b2fbbc87d1d1985ada2b03da64172fe8945d50243839d8edbba9cde78ec44193fef1ff95e9128865d9f1f211dff16cc852a07ebb2964df8d9555a4573fab4e253b92bcd5bfce27016613a931141ee766a48e255f5b2c504fa6167eeb09a7251d34bd5faabdde282b44fcc5d5fe577367af8b507462f0f28adcf2ee8cb9ab", 0xae}, {&(0x7f0000005fc0)="3d6ab77f18a9fdb48294bddf02cb0299526cb3b18b89c71e3b684181fcff3920d1f58ccd8de4807be14fada6c307817b7d0d1329450ca69e7a16c37ea0b882c30277677c18af90e30c39b67a54a77188ec632835403cd9c783b3e1a3b2901ef81d2fc8ea2678d0cf8120113d2d61446b66314e6f02be33edd00bfc5ba42d8b94bb7884481c161a8413ab7be473ec9f49d6d01152229fa0df62361b6f328b0ddce9d63cec74f54e876dc9aec81819fa27a986a913ede18d718ac1e74151012bb3218b8f27cf859c4c904e76c28c1e92ae1b3cc3868614be81", 0xd8}, {&(0x7f0000003740)="58614fd564f428edafa6d83f167fb43a27f8facff7c1932bb04de51db2142870f1364d17f602ee1d36cb0308c7e152c55d9a38666f23db9aa1bdccf5330e1920a4a99c57666fde8f98b8b40f9b023020d94fb4192f842c5032c7103011548a26d57ac9ea0953c1ae", 0x68}, {&(0x7f00000060c0)="1fcd15151f1c6dbd8c9cbb6b3eca12c3deb9851a625d58e3689c505bdfa8ee564c1aa67e6a39c5b9c91eb42814e238af95e279a545dcce61de935c9ece5b8e29b8834ea21bd852de25502d8cd913ee00200fd6b1e56ffd39f4ba838d3733a829c8f7a163", 0x64}], 0x7, &(0x7f00000061c0)=[{0x60, 0x8, 0x2, "a27fb0f383528b43d0325705df63c7fcb9288c85fc2290363a975fb93714e53811d08d6ba30e951ee0eeea848d047f874ae333b5186026879494e9e36643fe698bf8c1f7577c3d39b3bf0ea42607"}, {0x20, 0x101, 0xd93, "78604e43fa64285a7cba09030c6a32b5"}, {0x58, 0x117, 0x81, "f6a2c6b82b7732274b09e350dc5ca070c8136835c732991221bb90d5a228c79409f2c37ee42d488c2b39176ec1e01dabc2786f82f04baa8307cc45fcd9de186d0f"}, {0xc0, 0x101, 0x1, "e10de6e141f2554a77bd0363013b08f4874ee30409443ea650bfaa0b351c87d2d85aa75e7cf63135bec051209ffd360b9426cd09f205d51cd61b01b2912f5b1864b3a247a06a6a1fc72549cf8b67596389b1c24204e5e708b2a529ade2fb1d8f3d6f9034ef7e207d8740e6a945988f8e6275350e787fe094271edadb541532c3ce64aa6bb9e0381578a56956471bbfcb5fd87c6477feeea3f0b9216381fe6a03db33b8a5a014a82469"}, {0xb0, 0x111, 0xfffffffd, "c51f415177b8a3c14f1b532e5ec76474bdb3f7c97f0158fcc6d2ce59301d4f652f778702dc48b92e8e781d715e93065f1cb6a1376948abe9831d7f0b123bfc54b1cebc9d97ca15bccc850e1b8d062c4f478a1a0812c418be3fcf8a746a84b09d817e02fb0ba57ed98ee71ad87b70dd1c333fc75f955bf1a519c1c693dd3495b09e5afdb561b43a54dc17cc7dcaf3befe5a9eb988ed35f1dccbfe98"}, {0x78, 0x108, 0xf14a, "138b1536be65941c219f125f61c1c8342e5fcbda3443859d016c72c473aec51fda72952a4e6e9f0775281002411e527fbebc8f5b02e8f71aebd486498f5da979bd6b174d3a7bfa14483c4e255af5f2aa2a78d35eb13f0add67577320c7a7ad73b44266"}, {0xa0, 0x3d, 0xe, "d644a84c44b3f840ef4c21b798be7e1784a4520ee677d07f5ed32c2e0286ac420f12de9a3a1416476787664244207fca7cf6cb5fa92fcffdcf1600b5913a391021a28face614da4cc305b64535951dc63a6a648a429f1079d0dfb124f4a822872bbc8883a6b089f70d20214a4960e4bc079ad8f1aa95370399838037d85bcfa65f88ac0c7ef6e818ef77"}], 0x360}}, {{&(0x7f0000006580)=@caif, 0x80, &(0x7f0000006700)=[{&(0x7f0000006600)="616f194003a43a6ce04a1e957d499a0d890629572a74ba5cc1bd926471e5d0b4013f9f1d5343bbdd912ac294707a6ae3725ed7fc6c5216e1101e56d5f7b70d036f2e5a51206302c6ee65fc08551281e89a09084e30608765a73d1d655f373cd52a7875c63bb3e7abeb5542bf7b252e8e20af96766eeaaa4755717be8c549a2a481c8a82af72f923cdbd9fc3f7d81888085c78c18e427823d70b57cf493e71192a087d3acb20d87c8b7bafcc3401a9849fabe709443ba820dca35939336d7f471e9dc03643f7c3b8cb9227d4e4c54b388d5e8d6a66f958681e98d3c540c0a483b9396e2addea8dbdcbee113", 0xeb}], 0x1, &(0x7f0000006740)=[{0x60, 0x3a, 0x5, "9c738de52e12217702a785996d792003f90006f32262c3dcdff75d36e301cc76a50f3a960a61a0673bbf08c9ceb7112371cdb84dfd9c32cc335d1cade275667e5fb4703b7802f81984"}, {0x38, 0x116, 0x0, "5bca9818a6ecbfe63c84a2d94dc7bdd18a41e0b4753d4cd3cd62f4d76bb1cb2b7f11ae6a55c6e365"}, {0xf8, 0x102, 0x6, "ea1e7cb17e6d88d67ece9e01d8923f070ebbcf0224240b78cf8b0133f13127ac0053e379cb23c28ed9b0907c24a2079c53f9ed44a60036da0230231fef2e01d69d74b64c2228126b8a326bdf1e6a7b7f40b59dd544538c9ef32577a095d2f0a7c26f4db9550543c1b4836f3a7f641ee9e376a8ac2a15650f1e21df60def29854ed52244eae919d4bd92fc483ac953075daf836514f6a8a50b3afb521c03b7158ada563ed59c73de807f674982c3af61e8e0851f132cd28ea190072082ed55326ee47c80436f69f2e194dc14d0613f8e88581ef029c609f4085bc8267acc570472b0832e6"}, {0x1010, 0x10c, 0xb3, "cbe7decc67c18d2924b16ad022b1fc3412ee0a7219272120b93a7f8206db7dde5749f5781ed1846ae69c2474f9909f43763c1521228727d26635870a8904b21046095c31a92caa273617cdf6db5bdfdcc6cb6eb38059e7e2c65873e29b155d8ff74d0b2dba0cd359c0fcad53a5680c1f01085ec7cc74e6c87acc21b61d175a702c8afb669d7d87803169ff64ce6775b18a6a49545f379d2ec7d91ea2a1f88ae14eabc3b8916813aa150fc358ba8389a15eb7fc9a91cca61709d52d036e14eef92d957b0a5cee4dbed19533c9a4378232b224eafecfdba805a9fa14e8aab662fd1b6df88b8b811a3db863ea35dbeb420a09fc84968836ce196089b6836da0e8d30a08e82a4327472374db91061ddb11cd3732239ed4318f453b4723378970af9866df21678ec70a9686389a34f242547fd670cd67a1395eec6a22e4ae9c555a385c1c29d5075e0cc9abb3fc45dc144693c5bb46a905778e9ffea2c899215a6d8d471c925219c382f79fb4eed5f596f948ae73fe899a43e251285ffe86e6e56f1adbd00b82ecd7ecb5547c0012e745c35ac41003c689600c6130c2e52307d503c8ab77aef05495129f5feaf80dd1a2cf275605f7e5e1a3d49edd81efe1c23503c956fc8c41ee1d6a993c8076c2d55fbbb1687b4ed10f9fb0014141d0b22dc32166a95ad1151434ebc726885bf2da420b4f4f3fbca61c28ccf46d7ce696ca0b611c03404ed301138681c816aa76bedef895786ef541f1810f4f19e974be4013faa0d58823566bfd1ca946ae50510ddc979ddf2ee3575e2ef523e44885a048eb2bda01c67369c8407ae3a9ed8990740c9c86408e031939280772b5a396404b48ab117aa488ae6a93a0b2506872eb4b1d8f807c518eab7a3be33c321e36f5b072745091a4ec1d5b1faec9ee4dd3f7168528e656f1f12e0a14aa52eadb868a1699560a642141adf334874278feb8c17fe6b2ca94192b2e4a3c78d8f7d2cd94222f32c6746132b2f2b4fd959a8bd5944ace5505d2b5c358b5d5e6e4655d3793da30d0e83b63e2ec4e961fe26b41a59e1aa275abd0f3af304cb162b2a0442bfdeb65245afb13f74d0f30d3e20330d4a11a53acbfd300dae09fa72a9057f619198badd7262af37852303f3fe1e54db219f6c346acc5bf87f2321402c5a45b96fa086fd9b20bd8ba6ed8786bae86ce7d608b8af635d6855cfba0965ada6c6070f7305ce0a78f29b84741814c7c4e47aab31b5d15e3449e425ddffad8dcfa73a0fb5cfab6f55f9db91c7284d26a74cc53293804f24bc15e0b8d57b90c18ecd3fb704c71be84037fc7f98c17dd5506e620629e5d2c1bc6abcb472581d385e44097da1ced74fae6266c45f1cc34178ce6a7c22a1c77e03a73ebcdf6d50626f59811bb7abae930d6de38b030a18a3a6166701ed99e8b95f83f2a6c4c5af750a45165ad731d6a20237fe303c65e50c29d9952fc9fba8c7a5ff2f8d8f1e3cfb063f21296d61e1d03bb6041c9fd0a406611cdb9ef78475e40a278c487f2e0418123b500dfdd1729ef0696d59b271ddb294eff4d713c13bf29f1c77ed796a56cd82a6d65486beca7fa7525585d0e271723f017d62ed629f15815846aaac851d16665c306ebc716fdea6b67f4ad5afca31f8a4ac5add8f398962442f5174b68a7b6b3fa6c9b1563def31234c8d3ced19db60576636f7de9f8ff1306990022948a93f99c276cab4a6ea7c04e5935dac63424ee572ce2f8ab6df04b74d2e781d5096636c3dc58349f6d0884269146eda49ff573c8902841a2a03f22c70c43c4daf37515e7f087b82fa8efb63aec1da1d39c6f4e5d12e59326e7ff3a4fae2d403e3748946a2e742cd18001dc92a5ea8def78693b38875c652b23f0b87fb8f69ee4efa6c44861931f482f99a38465121e12c3acc3c9531a8153c2fae2b5c6214d8acf7c6d7afc38d6606eba3ce9148d086a877009ff0e7f9c18ac7bfa5005f80538b76f190a3062dcae4f1c4b8dd79ae90832b6b318dcfcae0ec2c2aaf35a26c15dc1477a2144cd1cb2a5a36edeb1ce90b6162e85315af8260b99b5786e30686a29ac0a16766d94cc5d908728cc4dda826e10d8dba35043cac02db24602ac3930b2a22e988e5288ddafa1cd8d0591456b53407e3289ed145d26eb2f6790b4e8fff9bd8bc86f39dd9aff27a3bfe9c1985ba230f95c364a8fe4e54b6f9a8281119f755981b0e5382ed20720cd25a7949ffa7456c32e3c2c5891a3b2bb75c75f9cbf93156d024df401164e5cf9cef030e998291e500d34673b31aadd28d8cdf1b16c156268fd2876c737ec73e679c5b98d809e4c6d16bf769cf363dbcdac35c10671d71aeb631b95e59eba1c68db3c190303459fc93cd2f9a9a93aeef1941015c97b2a8a566cb3f8ba13d8fdc9597f8f82439d861047c89281e1dcdb976aedb54773fd8f419cea79c6e5cd060edbd1cc3e90814c9c21eda544bdbdb5a50c9276152b53d5769be18e1859c7ab991a3aaf0735d3d22d795d3b2a7b7546c510821cdcad130af3789f2402783c19fd642f6483b99db0c3012cdfb6c693fe3aaa58eae42de535299684a3f6d9538d0bbef4b85bd8d39947d8dcc831d940f76c42f88e167503da8c860a9561f8feab37e1060e4c415e888936937635a4b78e7ec1da33f5c38b9e3438fdbc206ada9a9462c5ea92850985b0c50f0d0aee1febae3528f3f9cbb8e6e1d74434a26e7364b860521f4ef5e9415624ea77fb10c1aad4e89433b8e7f2ec63119e6519f1d9d49176f92333db3ed64d1fc0cd7a0dd6d3e07f20a1dc0c1319f48a440068e1509618807f7abeb2fb6d9840aa6a16df9248015ee1cad17748f065a7524f81f20cda0133e32d5f1e5e0a888e78dd3d261c8a568c74607064f71b4c4ebd2b58dc2118b5a4c151ac93c4419024d3984b0e11f1926b9498ceac66a7c63a6fc0ab13571a2707f7326c523dbe10cde7c76db70605d30e6a2ee80e7a0231d62b64a6e07b0d8571d43dfa6ab5820d16741ff287e32d12c896ef0e46ffe950f86f701035cc5a4d6783738f97f485fb6b828da006b6493516e4d78907de8a3696fe3ee0110eed1156cac8ed6d227b151e049dc546212eda7fbfefdfe20b5744a418ec8e496dbb79c5197dcbe10642f99879d997c4cf02ad5e67ab90493da7d4769587056781bc4da638ad227a58802fb301e1f4cbbd1e434e4286ec95cce7d0b4d68f08d0fbfb243d78e4cd1716112d38a1fbf9bce0fe6f1148aca88aa8b4763b8732f11623e5e3d61bf6a40eeb086314e03e0d35b8b983a25a09c4a92206dd7a9e9a7d181420cd6438d32950f802c8b3dfb37e69c9fc27b97d0d5ec028b35af25cff213462a01f0ebe7163bce0a77b8f1256e01b27401d088db1eb0d75a9faac3b76972ea1e091422c19a9abf7c3eb7cd82637a4340704a55267a074cd1e1c7f0e7867f394c20729ce3faf5da12663125f2f1820097a2f09e4e03df148ae0220b36595c4f15810e18e0c303e6a948ed71a4e9145d7eb7c53f90e4157803a7af7549a44715f63647249fa3099ceee6ce4839f7524522ff275993279da613a5874e7a44f6830757e956e917cd5d6230bbb2bd1a0ca7bd0e4b87130ccbf047a23cb9ebaedd390727469347b87e761f5d33609013fc8e903640378f803b827df92a71548205dcbd13a031d18bbc017bb4688e5b4791061157fae2e0a4a71415ea91b0360a58b44ca2f0ae7dd2bbccbb042d2d09a253dbfb92c946f2fd65bd72df639ba6b330134dce5df593a44af4f05cece448684a920344c26dbfbc60f52bdfd5a3d843a8ebf5b0efcd8bebade32deeb03467b306ef968d17258b74e2a5fd2fc8f770510932d8feb0446de4bf37355c5763fa6ed79f20420a7d09c533028bb8dfe482b835da02553ffc788a535dd7ba5fd84f5a0fabb947a484ad3020e2404846b2264b184116486bc3d87a09b5677585d11adea70960af53e854e74872d1ac724a7ba1b0e85f495fd353c12d202fd139ca4357fbcd53dd1db14c4c4c58e356b68be0e69c08536a99db09b735c39579294880914de7b0e207d8909ad88a7e76f1d18ed85750b8553f892fb2261826e974b16fc1d8689b3dc77b79067d47041ecca04c2b04823a290488a143dc1633a41d677c7a0ecbbb77f3fe81ee467b62c806c68c29e99caed9885f9044bbf121b71dc0dbbed038be6158c0a367fe2918cd0480268b0920e18768fe3bb732fd1da610ee5572038d44b9879b531ecc09d6e0100edd7d48f5a84474dc179474af31337652480cfb765a4caa56768fc7253f9fab476ebe934bdc3be4988f930a3348717e39b3a84bbff416e6a9d7a78e84959970cc2a772dcc9a7eb834ab58cde1cbbf2e27238fff3f902488f0b7694920d7df56837e9a7de2039b01ad6445e93b3fb1aef083433bbf077ab43d02976d49691cb7a39d8714453f9a48e0e05df84abb2a29befb9b70045ef3dc4295fbb26dca53a350504cfadf8fd1c11f33f77c9c94478f6cc448a994c87a609408ecc64a0f6e2561f98256bbdf5bb9c58a4defb23fdb56521e2d200ae499bc68f43758d1ebc36753db34631cdbbf1fc6936f34a92d45fa0e227a56f4c3aade5beb9164b5cc7131c7918595415b92bf1b3fae13bc66b3c46867181f5c3a7aa234887889a08f06e74e95e0f8e1374a1a36421462f503efc4130a659e29d8e351600d7238f7631168ee9acceb24aeb46b449e86eec3e0ecfd7b2b02064e1ea4fbc209ee5b499a9ba3a0df5969f184d020f17b1ab710eb37a7a5dd7e463739a82faedd853829837673c53b9b845207634e8ca70c4cd4befeedd282449084f493729dc828d0c9f73d74a550ac73df4daed73013b32be24ef42df6b85c0a5ebc9d930d6b70406ff35ad370435050fd0f62557a5b3ea05bc338a6a603377a079de7244a6062c86e2921acd52a657dd8502422ec2b2a5f8fbb5074d715a39cfe5aa32a88cd10a648c7f9e64629270c812dd8238f9fb7b7a869d9e8be41904140c94f913109761976846d8a508250b4be25b2ca32794469ab57acc7b30d7629a752800abdae403d7bc2187ffa9e03968fb131d19d27306f56ad83ffce609e4a2fde264fbe635a90b5b400fbcae873f7be82938103567e9d9c8d10fdebbdcadfc44e3f369771424ff6b0867f166460ca12632e30bf41e7c880aaf1b0277d775b8878ee1d16343590e26e3fcb1849b0012b03bcc82df6861a9c89155498355fdc13f3c6af9ea96ce3f3b1a5779c81364e0de9be4af75344bb8021924b56b38f1f5867c39f5811b88809787aec343d178ca9a1d6c814a858ad839852e09870aa69ccdc3c76b8d7ed8819d36eb0d51410832cd01bb25e8049ad3a805756aa8ed2cbd50b9e6c3c6c65f1c7068f4bd240984c20ac73151b7ee9385941dabf987da25b9957e22bce79d216457ecef0a2e76093055662469e2ce2f96ac1bc269264f5086a2a8f9dbd2e9bf62bd7ef4b8143f5ef95c28d418f5c7716f769786952e2f7d0322934c8097be02f2c93645f83dca6bc070e686588abd44753d674a9797c029a9305c48e3e218adf2b9213e04af4589c0a3cd432bbad130971df5baaf62a5ffe2fdfff7ec21c51dfb5282cc623f19f5160f414c81aa9507dcf3b594b551ac76d77a6196d288c9b6e3ef6956786f247d116cba64046646e8d4708565d7e78cdac813d1474804d7922a4b10d084144e479b77ba36c8a6bf3cfd70e016569212e6f3fca63291dded0a9a08553c7aa0aefcfcb375108b76b0cb1b50fbd354f19ba9fea07c0cd758e4757617afebfea0deb8aabcd7ad"}], 0x11a0}}, {{0x0, 0x0, &(0x7f0000008bc0)=[{&(0x7f0000007a00)="9ee6cc6161873fec1539", 0xa}, {&(0x7f0000007a40)="c496cf9572e55ba6fbfc5e4e9d0a5e6d8bf00451c1930b6ccd50e5dc049f4d8cc847bf550fb76c37ea72e89f8a04e05426b166815bbba05953d9120f87d8e1b3205e74ff7717c859de6af6f2c58fe056a7c529a50cb32d0ba8b291a38378ed6b91a7fe3063a3febf16266a66431c0dfe575de3bcaefb46b97208477a856d83423a62460d3353056b8ba26d9a13ef95aef7b5d6bfdbc18ab528122854681c4ae8a7b9376ad4aef5192fe2", 0xaa}, {&(0x7f0000007b00)="33bfa7f4d343dcf4f66148c469e0f310de810b1d113643b0a45ba0e1ecd9d0ba460eda742f6b24421b592e8d43c957cbcdb62a4804164ccb97bfb232646d8d44b07720bef1d1d354235ec3e198b4a5437b58b6a7ec57fc671d125a9f51aa", 0x5e}, {&(0x7f0000007b80)="805a3582da44d3da2ff23ebb25087ff9534150a39ef70be2d2101b13", 0x1c}, {&(0x7f0000007bc0)="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", 0x1000}], 0x5, &(0x7f0000008c40)=[{0x88, 0x1, 0xa, "c8ba85df306af42e1fbfbdf38bd2f01051e4c99e81d7335785748d21a8bfe51c48b899aaef73817582c72d2ac156c2f6137c049e4028da43e683b4c7a1a30efd203dd2027c69cfa80fcaf1d98004f13d9e213520daedf19bd573bdf555182786738604b1e8a2463611f928c1ee3e47fc16973a7e61a2"}], 0x88}}], 0x7, 0x180) 8.188334729s ago: executing program 3 (id=2632): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x44997e9625d2448d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="68616e676c6500d6cce81f1a3e36bf0000d70000000000005b00b02ee500000096000000000000000004000000d1a2d6"], &(0x7f0000000180)=0x2c) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) capset(&(0x7f0000000340)={0x19980330}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000526723b703000023000000850000000c00f8ffb70000000000000085100305000018000001000000000000000000000000950000000000000095000000000000009bc01293cf0118f70ce65178c82183e8bb372cad2f0a7034257ecb0c8bd3f065bf93765346844e87c009bb7477a4c8bbf6c2e9f9d70313e1dd1317b7b645a06307a747785992b11be5ab4007b6afe1c2fe51e952e0268a6ad500cd65422a10c9ad91c2945521a48b586bb7378267864bbfc62289f18bb15d90b1d6c9e242f05f00"/216], &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x2, "b43d70dde5dbbbe40f00f40103e6c9000000c67f00", 0x33524742}) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, 0x0, 0x20) 8.099657899s ago: executing program 1 (id=2633): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="b70200000b000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f7a80d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001e8c76bbe7ff988a28ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4522bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b9fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabfd50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd1389a0963de85dd2b189774450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f326df86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c39b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa525235da0000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc32a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f8293cf83bceaf6c9eda1f83166aa1e2093d626870510e6cd176d501fe01e4a752fc30134073188e3f826f695e4e14fca6596943467c7df154493023f77c107b3db20ea75b493b4b38dc43986d94748cbfab954edae20982b6d212a44f4b40387876bc9eb73900"/3112], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000140)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000240)=@x86={0x88, 0x1c, 0x6, 0x0, 0x0, 0x1, 0x7, 0x9, 0x7, 0x8, 0x84, 0x3, 0x0, 0x9, 0x10, 0x8, 0xac, 0xd, 0x6, '\x00', 0x4, 0xffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 6.755619704s ago: executing program 6 (id=2634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x195) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000020000000000f400040000000000000020"], 0x1c, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="020200020d0000002dbd700000000000020008000822cac1e905f5a460000000fd001000000000007301ab91993b094b020001000000000000000500000000a0030006000000000002000000ac1414ff00000000000000000300050000800000020000000a010102000000000000c2a6d6dd0b02bfd701c9e97745fd7f460000"], 0x68}, 0x1, 0x7}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000680), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000001a80)={&(0x7f0000000a80)="ee", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f00000000c0)={r8}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0) 6.755117602s ago: executing program 3 (id=2635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) 6.692996802s ago: executing program 5 (id=2636): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(0x0, 0x20, 0x1) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000000)=0x800000000000006}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 6.414400183s ago: executing program 7 (id=2637): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x0, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfeff}]}]}]}, 0x3c}}, 0x0) 4.607821349s ago: executing program 7 (id=2638): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4.444178322s ago: executing program 6 (id=2639): openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200081, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_dev$usbmon(0x0, 0x6, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.386174664s ago: executing program 5 (id=2640): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000009ce352d00000000000"], 0x48) 4.32111458s ago: executing program 3 (id=2641): syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x1, 0x0, &(0x7f0000000440)) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) lseek(r3, 0x9, 0x0) 4.099089561s ago: executing program 7 (id=2642): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_procfs(r3, &(0x7f0000000300)='attr/current\x00') r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) r9 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) pwritev(r9, &(0x7f00000004c0)=[{&(0x7f00000000c0)="3213", 0x2}], 0x1, 0x3, 0x7) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7ff, 0xef, 0x9, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75, r10}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffff38, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x64}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) 4.098194951s ago: executing program 6 (id=2643): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r3, &(0x7f0000000300)='attr/current\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) r7 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) pwritev(r7, &(0x7f00000004c0)=[{&(0x7f00000000c0)="3213", 0x2}], 0x1, 0x3, 0x7) 3.341403777s ago: executing program 5 (id=2644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x700}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}]}, 0x44}}, 0x0) 2.923010291s ago: executing program 7 (id=2645): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = semget(0x0, 0x2, 0x464) semop(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='wchan\x00') r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x1c, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c00}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000600)='GPL\x00', 0x6, 0x66, &(0x7f00000006c0)=""/102, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) 2.722967152s ago: executing program 1 (id=2646): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x44997e9625d2448d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="68616e676c6500d6cce81f1a3e36bf0000d70000000000005b00b02ee500000096000000000000000004000000d1a2d6"], &(0x7f0000000180)=0x2c) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) capset(&(0x7f0000000340)={0x19980330}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000526723b703000023000000850000000c00f8ffb70000000000000085100305000018000001000000000000000000000000950000000000000095000000000000009bc01293cf0118f70ce65178c82183e8bb372cad2f0a7034257ecb0c8bd3f065bf93765346844e87c009bb7477a4c8bbf6c2e9f9d70313e1dd1317b7b645a06307a747785992b11be5ab4007b6afe1c2fe51e952e0268a6ad500cd65422a10c9ad91c2945521a48b586bb7378267864bbfc62289f18bb15d90b1d6c9e242f05f00"/216], &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x2, "b43d70dde5dbbbe40f00f40103e6c9000000c67f00", 0x33524742}) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, 0x0, 0x20) 2.722328606s ago: executing program 3 (id=2647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) pipe2(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4e, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f00000000c0)=0x2ec, 0x4) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000480)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r5, r6, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x80, 0xe4, 0x7, 0x1, 0x10000}, 0x14) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.449486405s ago: executing program 7 (id=2648): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000088000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000003100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.105234832s ago: executing program 3 (id=2649): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='rcu_utilization\x00', r4}, 0x18) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0408fcc67af208004500002420000000002f907800000000e0000001010088be001090780200000000000000"], 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r5, 0x111, 0x4, 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="a7db9483cae790e452d356", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r0, @ANYRES64=r6, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, 0x0, 0x774) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00ebffffff940200000000000040000000000000000000000000000000000040002c8f3800010000000200000003000000940f000004000000000000000b00000000000000cc0100000000000005"], 0x78) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) renameat2(r5, &(0x7f0000000c00)='./file1\x00', 0xffffffffffffffff, 0x0, 0x2) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r9 = epoll_create(0xd) fcntl$F_SET_RW_HINT(r9, 0x40c, 0x0) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 1.093674142s ago: executing program 5 (id=2650): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x195) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000020000000000f400040000000000000020"], 0x1c, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="020200020d0000002dbd700000000000020008000822cac1e905f5a460000000fd001000000000007301ab91993b094b020001000000000000000500000000a0030006000000000002000000ac1414ff00000000000000000300050000800000020000000a010102000000000000c2a6d6dd0b02bfd701c9e97745fd7f460000"], 0x68}, 0x1, 0x7}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000680), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000001a80)={&(0x7f0000000a80)="ee", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f00000000c0)={r8}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0) 1.083493578s ago: executing program 7 (id=2651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) 0s ago: executing program 1 (id=2652): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x20, 0x1) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000000)=0x800000000000006}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 825.779827][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.813338][ T5897] usb 4-1: Product: syz [ 825.837368][ T5897] usb 4-1: Manufacturer: syz [ 825.872597][ T5897] usb 4-1: SerialNumber: syz [ 825.966532][ T5897] usb 4-1: config 0 descriptor?? [ 826.031303][ T5897] smsc75xx v1.0.0 [ 826.308875][T13295] FAULT_INJECTION: forcing a failure. [ 826.308875][T13295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.353266][T13295] CPU: 1 UID: 0 PID: 13295 Comm: syz.7.1977 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 826.353296][T13295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 826.353308][T13295] Call Trace: [ 826.353317][T13295] [ 826.353325][T13295] dump_stack_lvl+0x189/0x250 [ 826.353354][T13295] ? __pfx____ratelimit+0x10/0x10 [ 826.353377][T13295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 826.353400][T13295] ? __pfx__printk+0x10/0x10 [ 826.353418][T13295] ? __might_fault+0xb0/0x130 [ 826.353449][T13295] should_fail_ex+0x414/0x560 [ 826.353478][T13295] _copy_from_user+0x2d/0xb0 [ 826.353503][T13295] __se_sys_mount+0x18a/0x410 [ 826.353532][T13295] ? __pfx___se_sys_mount+0x10/0x10 [ 826.353550][T13295] ? rcu_is_watching+0x15/0xb0 [ 826.353580][T13295] ? do_syscall_64+0xbe/0x3b0 [ 826.353600][T13295] ? __x64_sys_mount+0x20/0xc0 [ 826.353623][T13295] do_syscall_64+0xfa/0x3b0 [ 826.353644][T13295] ? lockdep_hardirqs_on+0x9c/0x150 [ 826.353666][T13295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.353684][T13295] ? clear_bhb_loop+0x60/0xb0 [ 826.353704][T13295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.353722][T13295] RIP: 0033:0x7ff21878e929 [ 826.353739][T13295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.353754][T13295] RSP: 002b:00007ff219650038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 826.353773][T13295] RAX: ffffffffffffffda RBX: 00007ff2189b5fa0 RCX: 00007ff21878e929 [ 826.353786][T13295] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 826.353798][T13295] RBP: 00007ff219650090 R08: 0000200000000080 R09: 0000000000000000 [ 826.353811][T13295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.353821][T13295] R13: 0000000000000000 R14: 00007ff2189b5fa0 R15: 00007ffc14a95278 [ 826.353850][T13295] [ 826.687448][T12926] kernel write not supported for file /fb0 (pid: 12926 comm: kworker/1:1) [ 827.422566][T13305] netlink: 'syz.7.1981': attribute type 126 has an invalid length. [ 827.499513][ T5897] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 827.977250][ T5897] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 828.028529][T13305] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1981'. [ 828.032350][T13278] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 828.044074][ T5897] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 828.070856][ T5897] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 828.481200][ T30] audit: type=1326 audit(1751512311.958:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13300 comm="syz.6.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e98e929 code=0x7fc00000 [ 828.527238][ T5897] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 828.547673][ T5897] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 828.752232][T13319] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1982'. [ 829.242973][T13330] netlink: 'syz.6.1982': attribute type 83 has an invalid length. [ 829.292094][ T5888] usb 4-1: USB disconnect, device number 61 [ 829.355745][ T5873] hid-generic C98F:0003:0000.000C: item fetching failed at offset 0/2 [ 829.371595][ T5873] hid-generic C98F:0003:0000.000C: probe with driver hid-generic failed with error -22 [ 829.608202][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 829.927445][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 830.143187][T13340] netlink: 260 bytes leftover after parsing attributes in process `syz.7.1987'. [ 830.969858][ T10] usb 7-1: config 0 has an invalid interface number: 36 but max is 0 [ 830.987360][ T10] usb 7-1: config 0 has no interface number 0 [ 831.140524][ T10] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=1b.c4 [ 831.172579][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.258123][ T10] usb 7-1: Product: syz [ 831.262433][ T10] usb 7-1: Manufacturer: syz [ 831.417093][ T10] usb 7-1: SerialNumber: syz [ 831.436945][ T10] usb 7-1: config 0 descriptor?? [ 831.453347][T13350] fuse: Bad value for 'rootmode' [ 831.636522][T13357] netlink: 'syz.7.1994': attribute type 126 has an invalid length. [ 832.165442][T13368] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1994'. [ 832.232595][ T10] cx82310_eth 7-1:0.36: probe with driver cx82310_eth failed with error -71 [ 832.272320][ T10] cxacru 7-1:0.36: usbatm_usb_probe: bind failed: -19! [ 832.324984][ T10] usb 7-1: USB disconnect, device number 17 [ 832.484698][ T30] audit: type=1326 audit(1751512315.948:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13353 comm="syz.1.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x7fc00000 [ 833.799345][T13380] xt_CT: No such helper "pptp" [ 835.937221][ T5881] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 836.117253][ T5881] usb 8-1: Using ep0 maxpacket: 32 [ 836.138158][ T5881] usb 8-1: unable to get BOS descriptor or descriptor too short [ 836.149110][ T5881] usb 8-1: config 1 interface 0 altsetting 32 bulk endpoint 0x82 has invalid maxpacket 1024 [ 836.183468][ T5881] usb 8-1: config 1 interface 0 altsetting 32 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 836.260240][ T5881] usb 8-1: config 1 interface 0 has no altsetting 0 [ 836.331572][ T5881] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 836.351224][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.375503][ T5881] usb 8-1: Product: syz [ 836.429930][ T5881] usb 8-1: Manufacturer: syz [ 836.466244][ T5881] usb 8-1: SerialNumber: syz [ 836.511345][T13399] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 836.526413][T13399] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 837.001350][ T5881] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 837.099314][ T5881] usb 8-1: USB disconnect, device number 13 [ 837.253137][T13416] netlink: 'syz.1.2009': attribute type 126 has an invalid length. [ 837.328124][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2009'. [ 837.338723][ T30] audit: type=1326 audit(1751512320.818:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13411 comm="syz.6.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e98e929 code=0x7fc00000 [ 837.638525][T13423] random: crng reseeded on system resumption [ 838.652897][T13428] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2011'. [ 839.046236][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 839.229330][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 839.246457][ T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 839.372494][T13439] xt_CT: No such helper "pptp" [ 839.846740][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.855204][ T10] usb 7-1: Product: syz [ 839.859416][ T10] usb 7-1: Manufacturer: syz [ 839.864960][ T10] usb 7-1: SerialNumber: syz [ 839.873315][ T10] usb 7-1: config 0 descriptor?? [ 839.880722][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 840.227674][T13431] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2012'. [ 840.425472][ T10] gspca_sn9c2028: read1 error -110 [ 840.467943][T13431] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2012'. [ 840.547725][ T10] gspca_sn9c2028: read1 error -32 [ 840.553259][ T10] gspca_sn9c2028: read1 error -32 [ 840.563147][ T10] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -32 [ 840.589645][T13431] netlink: 'syz.6.2012': attribute type 5 has an invalid length. [ 840.617280][T13431] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2012'. [ 840.677585][T13452] mmap: syz.5.2018 (13452) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 840.680471][ T10] usb 7-1: USB disconnect, device number 18 [ 840.722634][T13452] gfs2: gfs2 mount does not exist [ 840.868784][T13456] fuse: Bad value for 'fd' [ 841.183977][T13460] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2021'. [ 841.220642][T13460] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2021'. [ 841.237546][T13467] nbd1: detected capacity change from 0 to 1073741828 [ 841.250260][T13460] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2021'. [ 841.260515][T13460] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2021'. [ 841.262583][T13468] block nbd1: Send control failed (result -89) [ 841.276865][T13468] block nbd1: Request send failed, requeueing [ 841.286442][ T55] block nbd1: Dead connection, failed to find a fallback [ 841.287531][ T5832] block nbd1: Receive control failed (result -32) [ 841.294211][ T55] block nbd1: shutting down sockets [ 841.308195][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.320926][ T55] Buffer I/O error on dev nbd1, logical block 0, async page read [ 841.331325][T13468] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.340887][T13468] Buffer I/O error on dev nbd1, logical block 0, async page read [ 841.350301][T13468] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.359603][T13468] Buffer I/O error on dev nbd1, logical block 0, async page read [ 841.367685][T13468] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.376771][T13468] Buffer I/O error on dev nbd1, logical block 0, async page read [ 841.384836][T13468] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.393957][T13468] Buffer I/O error on dev nbd1, logical block 0, async page read [ 841.402350][T13468] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.412018][T13468] Buffer I/O error on dev nbd1, logical block 0, async page read [ 841.420043][T13468] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.429183][T13468] Buffer I/O error on dev nbd1, logical block 0, async page read [ 841.437859][T13468] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.446982][T13468] Buffer I/O error on dev nbd1, logical block 0, async page read [ 841.454956][T13468] ldm_validate_partition_table(): Disk read failed. [ 841.461739][T13468] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.470983][T13468] Buffer I/O error on dev nbd1, logical block 0, async page read [ 841.478953][T13468] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 841.488113][T13468] Buffer I/O error on dev nbd1, logical block 0, async page read [ 841.496133][T13468] Dev nbd1: unable to read RDB block 0 [ 841.502191][T13468] nbd1: unable to read partition table [ 841.746147][T13472] netlink: 'syz.6.2024': attribute type 126 has an invalid length. [ 841.808248][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2024'. [ 842.218854][T13484] virtio-fs: tag not found [ 842.466885][T13483] xt_CT: No such helper "pptp" [ 842.638804][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 842.813146][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.826786][T13497] input: syz0 as /devices/virtual/input/input19 [ 842.842211][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 842.861747][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.984082][T13500] fuse: Bad value for 'fd' [ 842.998332][ T10] usb 4-1: config 0 descriptor?? [ 843.252517][T13489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.289511][T13489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.557427][ T5927] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 843.868127][ T5927] usb 7-1: Using ep0 maxpacket: 16 [ 843.916424][ T10] ath6kl: Failed to read usb control message: -71 [ 843.923253][ T10] ath6kl: Unable to read the bmi data from the device: -71 [ 843.930562][ T10] ath6kl: Unable to recv target info: -71 [ 843.947261][ T10] ath6kl: Failed to init ath6kl core: -71 [ 843.974817][ T5927] usb 7-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 843.994684][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.024931][ T5927] usb 7-1: Product: syz [ 844.034106][ T5927] usb 7-1: Manufacturer: syz [ 844.050162][ T5927] usb 7-1: SerialNumber: syz [ 844.058268][ T5927] usb 7-1: config 0 descriptor?? [ 844.072712][ T5927] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 844.087765][ T10] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 844.132368][ T10] usb 4-1: USB disconnect, device number 62 [ 844.529260][T13506] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2035'. [ 844.538972][T13506] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2035'. [ 844.565040][T13506] netlink: 'syz.6.2035': attribute type 5 has an invalid length. [ 844.582850][T13506] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2035'. [ 844.654843][ T5927] gspca_sn9c2028: read1 error -110 [ 844.664162][ T5927] gspca_sn9c2028: read1 error -32 [ 844.677092][ T5927] gspca_sn9c2028: read1 error -32 [ 844.682348][ T5927] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -32 [ 844.702578][T13518] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.775468][ T10] usb 7-1: USB disconnect, device number 19 [ 844.860016][T13524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 845.054686][ T30] audit: type=1326 audit(1751512328.488:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13521 comm="syz.7.2040" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x0 [ 845.750903][T13518] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.790567][T13538] FAULT_INJECTION: forcing a failure. [ 845.790567][T13538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.804107][T13538] CPU: 1 UID: 0 PID: 13538 Comm: syz.7.2045 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 845.804134][T13538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 845.804146][T13538] Call Trace: [ 845.804154][T13538] [ 845.804163][T13538] dump_stack_lvl+0x189/0x250 [ 845.804190][T13538] ? __pfx____ratelimit+0x10/0x10 [ 845.804213][T13538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 845.804236][T13538] ? __pfx__printk+0x10/0x10 [ 845.804266][T13538] should_fail_ex+0x414/0x560 [ 845.804292][T13538] _copy_to_user+0x31/0xb0 [ 845.804326][T13538] simple_read_from_buffer+0xe1/0x170 [ 845.804353][T13538] proc_fail_nth_read+0x1df/0x250 [ 845.804380][T13538] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 845.804406][T13538] ? rw_verify_area+0x258/0x650 [ 845.804424][T13538] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 845.804448][T13538] vfs_read+0x1fd/0x980 [ 845.804477][T13538] ? __pfx___mutex_lock+0x10/0x10 [ 845.804501][T13538] ? __pfx_vfs_read+0x10/0x10 [ 845.804521][T13538] ? __fget_files+0x2a/0x420 [ 845.804545][T13538] ? __fget_files+0x3a0/0x420 [ 845.804564][T13538] ? __fget_files+0x2a/0x420 [ 845.804595][T13538] ksys_read+0x145/0x250 [ 845.804616][T13538] ? __pfx_ksys_read+0x10/0x10 [ 845.804641][T13538] ? do_syscall_64+0xbe/0x3b0 [ 845.804667][T13538] do_syscall_64+0xfa/0x3b0 [ 845.804690][T13538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.804707][T13538] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 845.804724][T13538] ? clear_bhb_loop+0x60/0xb0 [ 845.804745][T13538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.804762][T13538] RIP: 0033:0x7ff21878d33c [ 845.804784][T13538] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 845.804799][T13538] RSP: 002b:00007ff219650030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 845.804819][T13538] RAX: ffffffffffffffda RBX: 00007ff2189b5fa0 RCX: 00007ff21878d33c [ 845.804832][T13538] RDX: 000000000000000f RSI: 00007ff2196500a0 RDI: 0000000000000004 [ 845.804844][T13538] RBP: 00007ff219650090 R08: 0000000000000000 R09: 0000000000000000 [ 845.804855][T13538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.804866][T13538] R13: 0000000000000000 R14: 00007ff2189b5fa0 R15: 00007ffc14a95278 [ 845.804896][T13538] [ 846.069047][T13518] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.202307][T13541] xt_CT: No such helper "pptp" [ 846.232223][T13518] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.155288][T13518] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.215479][T13518] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.237272][T13518] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.355214][T13518] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.278082][ T5897] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 849.563865][ T5897] usb 7-1: Using ep0 maxpacket: 16 [ 849.577494][ T5897] usb 7-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 849.586598][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.596867][ T5897] usb 7-1: Product: syz [ 849.601768][ T5897] usb 7-1: Manufacturer: syz [ 849.606882][ T5897] usb 7-1: SerialNumber: syz [ 849.615116][ T5897] usb 7-1: config 0 descriptor?? [ 849.624113][ T5897] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 850.140936][T13570] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2054'. [ 850.154699][ T5897] gspca_sn9c2028: read1 error -110 [ 850.163404][ T5897] gspca_sn9c2028: read1 error -32 [ 850.167664][T13570] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2054'. [ 850.202726][ T5897] gspca_sn9c2028: read1 error -32 [ 850.210073][ T5897] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -32 [ 850.221389][T13570] netlink: 'syz.6.2054': attribute type 5 has an invalid length. [ 850.246614][T13570] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2054'. [ 850.464053][ T5873] usb 7-1: USB disconnect, device number 20 [ 851.372468][T13597] netlink: 'syz.7.2061': attribute type 5 has an invalid length. [ 853.566170][T13615] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2066'. [ 855.888429][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2076'. [ 856.035924][T13655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.254296][ T30] audit: type=1326 audit(1751512339.728:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13647 comm="syz.1.2075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x0 [ 856.286966][T12153] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 856.337635][ T5897] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 856.957483][T12153] Bluetooth: hci3: command 0x0406 tx timeout [ 856.983174][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.993598][ T5897] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 857.003829][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.443571][ T5897] usb 4-1: config 0 descriptor?? [ 857.578364][T13671] netlink: 'syz.6.2081': attribute type 10 has an invalid length. [ 857.586309][T13671] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2081'. [ 857.665438][T13671] team0: entered promiscuous mode [ 857.672911][T13671] team_slave_0: entered promiscuous mode [ 857.679168][T13671] team_slave_1: entered promiscuous mode [ 857.681113][T13652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.685087][T13671] team0: entered allmulticast mode [ 857.699490][T13671] team_slave_0: entered allmulticast mode [ 857.705301][T13671] team_slave_1: entered allmulticast mode [ 857.715165][T13671] bridge0: port 3(team0) entered blocking state [ 857.722326][T13671] bridge0: port 3(team0) entered disabled state [ 857.733677][T13671] bridge0: port 3(team0) entered blocking state [ 857.740223][T13671] bridge0: port 3(team0) entered forwarding state [ 857.822605][T13652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.865979][T13674] FAULT_INJECTION: forcing a failure. [ 857.865979][T13674] name failslab, interval 1, probability 0, space 0, times 0 [ 857.905832][T13674] CPU: 1 UID: 0 PID: 13674 Comm: syz.7.2082 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 857.905861][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 857.905873][T13674] Call Trace: [ 857.905880][T13674] [ 857.905889][T13674] dump_stack_lvl+0x189/0x250 [ 857.905924][T13674] ? __pfx____ratelimit+0x10/0x10 [ 857.905945][T13674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 857.905967][T13674] ? __pfx__printk+0x10/0x10 [ 857.905991][T13674] ? __pfx___might_resched+0x10/0x10 [ 857.906010][T13674] ? fs_reclaim_acquire+0x7d/0x100 [ 857.906037][T13674] should_fail_ex+0x414/0x560 [ 857.906063][T13674] should_failslab+0xa8/0x100 [ 857.906087][T13674] __kmalloc_noprof+0xcb/0x4f0 [ 857.906105][T13674] ? kfree+0x4d/0x440 [ 857.906121][T13674] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 857.906149][T13674] tomoyo_realpath_from_path+0xe3/0x5d0 [ 857.906175][T13674] ? tomoyo_domain+0xda/0x130 [ 857.906203][T13674] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 857.906223][T13674] tomoyo_path_number_perm+0x1e8/0x5a0 [ 857.906247][T13674] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 857.906286][T13674] ? __lock_acquire+0xab9/0xd20 [ 857.906329][T13674] ? __fget_files+0x2a/0x420 [ 857.906354][T13674] ? __fget_files+0x2a/0x420 [ 857.906374][T13674] ? __fget_files+0x3a0/0x420 [ 857.906393][T13674] ? __fget_files+0x2a/0x420 [ 857.906418][T13674] security_file_ioctl+0xcb/0x2d0 [ 857.906442][T13674] __se_sys_ioctl+0x47/0x170 [ 857.906467][T13674] do_syscall_64+0xfa/0x3b0 [ 857.906488][T13674] ? lockdep_hardirqs_on+0x9c/0x150 [ 857.906510][T13674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.906527][T13674] ? clear_bhb_loop+0x60/0xb0 [ 857.906549][T13674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.906566][T13674] RIP: 0033:0x7ff21878e929 [ 857.906583][T13674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.906598][T13674] RSP: 002b:00007ff219650038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 857.906618][T13674] RAX: ffffffffffffffda RBX: 00007ff2189b5fa0 RCX: 00007ff21878e929 [ 857.906631][T13674] RDX: 0000200000000040 RSI: 0000000000005414 RDI: 0000000000000003 [ 857.906643][T13674] RBP: 00007ff219650090 R08: 0000000000000000 R09: 0000000000000000 [ 857.906655][T13674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.906665][T13674] R13: 0000000000000000 R14: 00007ff2189b5fa0 R15: 00007ffc14a95278 [ 857.906695][T13674] [ 858.198100][T13674] ERROR: Out of memory at tomoyo_realpath_from_path. [ 858.342499][ T30] audit: type=1800 audit(1751512341.788:784): pid=13676 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2083" name="bus" dev="overlay" ino=699 res=0 errno=0 [ 858.907440][ T5897] ath6kl: Failed to read usb control message: -71 [ 858.907492][ T5897] ath6kl: Unable to read the bmi data from the device: -71 [ 858.907508][ T5897] ath6kl: Unable to recv target info: -71 [ 858.990487][ T5897] ath6kl: Failed to init ath6kl core: -71 [ 858.990812][ T5897] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 859.003842][ T5897] usb 4-1: USB disconnect, device number 63 [ 859.436728][T13693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2088'. [ 863.014251][T13712] netlink: 'syz.1.2094': attribute type 1 has an invalid length. [ 863.026136][ T5832] Bluetooth: unknown link type 3 [ 863.031258][ T5832] Bluetooth: hci1: connection err: -111 [ 863.702362][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2099'. [ 864.487788][ T30] audit: type=1326 audit(1751512347.848:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13729 comm="syz.3.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f626d58e929 code=0x7fc00000 [ 865.539941][T13751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 865.558869][ T30] audit: type=1326 audit(1751512349.038:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13748 comm="syz.7.2106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x0 [ 866.526439][T13760] netlink: 'syz.7.2108': attribute type 126 has an invalid length. [ 866.584820][T13760] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2108'. [ 866.642629][ T30] audit: type=1326 audit(1751512350.078:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13756 comm="syz.1.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x7ffc0000 [ 866.683633][ T30] audit: type=1326 audit(1751512350.078:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13756 comm="syz.1.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x7ffc0000 [ 866.816123][ T30] audit: type=1326 audit(1751512350.118:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13756 comm="syz.1.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f993158e929 code=0x7ffc0000 [ 866.839007][ T30] audit: type=1326 audit(1751512350.118:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13756 comm="syz.1.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x7ffc0000 [ 866.867232][ T5897] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 866.906490][ T30] audit: type=1326 audit(1751512350.118:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13756 comm="syz.1.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x7ffc0000 [ 867.075662][ T5897] usb 7-1: config 0 has an invalid interface number: 138 but max is 0 [ 867.130814][ T5897] usb 7-1: config 0 has no interface number 0 [ 867.194798][ T30] audit: type=1326 audit(1751512350.158:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13756 comm="syz.1.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9931590847 code=0x7ffc0000 [ 867.232604][ T5897] usb 7-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 867.386927][ T5897] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=c8.66 [ 867.450009][ T30] audit: type=1326 audit(1751512350.158:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13756 comm="syz.1.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x7ffc0000 [ 867.472188][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.498026][ T5897] usb 7-1: config 0 descriptor?? [ 867.516615][ T30] audit: type=1326 audit(1751512350.158:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13756 comm="syz.1.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x7ffc0000 [ 867.738094][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 867.754024][ T5897] usb 7-1: string descriptor 0 read error: -71 [ 867.794255][ T5897] usbtest 7-1:0.138: Linux gadget zero [ 867.825395][ T5897] usbtest 7-1:0.138: full-speed {control in/out bulk-out iso-out} tests (+alt) [ 867.937464][ T5897] usb 7-1: USB disconnect, device number 21 [ 868.056799][T13785] netlink: 'syz.5.2112': attribute type 5 has an invalid length. [ 870.184303][T13807] netlink: 'syz.3.2120': attribute type 10 has an invalid length. [ 870.203881][T13807] veth1_macvtap: left promiscuous mode [ 870.242145][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.249440][T13807] team0: Device veth1_macvtap failed to register rx_handler [ 870.256865][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.422879][ T5897] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 870.477820][ T5927] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 870.567676][ T5897] usb 2-1: device descriptor read/64, error -71 [ 870.649236][ T5927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 870.770051][T13818] No such timeout policy "syz0" [ 870.914455][T13820] netlink: 1848 bytes leftover after parsing attributes in process `syz.6.2123'. [ 870.931072][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 870.931101][ T30] audit: type=1326 audit(1751512354.338:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13816 comm="syz.7.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 870.964659][ T5897] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 871.207874][T13820] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2123'. [ 871.327424][ T5897] usb 2-1: device descriptor read/64, error -71 [ 871.414482][ T30] audit: type=1326 audit(1751512354.338:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13816 comm="syz.7.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 871.482949][ T5897] usb usb2-port1: attempt power cycle [ 871.839098][ T5927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 871.850975][ T5927] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 871.857104][ T30] audit: type=1326 audit(1751512354.378:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13816 comm="syz.7.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 871.861101][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 871.890063][ T5927] usb 4-1: SerialNumber: syz [ 871.930236][ T30] audit: type=1326 audit(1751512354.378:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13816 comm="syz.7.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 872.131052][T13825] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2125'. [ 872.158030][ T5897] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 872.220917][ T30] audit: type=1326 audit(1751512354.388:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13816 comm="syz.7.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 872.361644][ T5897] usb 2-1: device descriptor read/8, error -71 [ 872.375132][ T30] audit: type=1326 audit(1751512354.408:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13816 comm="syz.7.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff218790847 code=0x7ffc0000 [ 872.635365][ T5927] usb 4-1: 0:2 : does not exist [ 872.664534][ T30] audit: type=1326 audit(1751512354.408:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13816 comm="syz.7.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 872.667245][ T5927] usb 4-1: unit 5 not found! [ 872.689075][ T30] audit: type=1326 audit(1751512354.458:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13816 comm="syz.7.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 872.767905][T13833] 9pnet_fd: Insufficient options for proto=fd [ 872.849893][ T30] audit: type=1326 audit(1751512354.458:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13816 comm="syz.7.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 872.872417][ T30] audit: type=1326 audit(1751512354.458:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13816 comm="syz.7.2124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 873.172823][ T5927] usb 4-1: USB disconnect, device number 64 [ 874.949575][T13855] lo speed is unknown, defaulting to 1000 [ 874.956060][T13855] lo speed is unknown, defaulting to 1000 [ 874.982005][T13855] lo speed is unknown, defaulting to 1000 [ 875.021732][T13855] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 875.152310][T13855] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 875.367794][T13855] lo speed is unknown, defaulting to 1000 [ 875.392011][T13855] lo speed is unknown, defaulting to 1000 [ 875.418433][T13855] lo speed is unknown, defaulting to 1000 [ 875.444166][T13855] lo speed is unknown, defaulting to 1000 [ 875.467428][T13855] lo speed is unknown, defaulting to 1000 [ 875.979903][T13863] netlink: 'syz.6.2135': attribute type 5 has an invalid length. [ 877.428871][T13874] cgroup: name respecified [ 878.097296][ T5888] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 878.395019][T13888] syz.1.2141: attempt to access beyond end of device [ 878.395019][T13888] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 878.891529][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 878.891547][ T30] audit: type=1326 audit(1751512362.368:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13882 comm="syz.1.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x7fc00000 [ 878.979449][ T5888] usb 4-1: device descriptor read/64, error -71 [ 879.005311][ T30] audit: type=1326 audit(1751512362.368:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13882 comm="syz.1.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f993158e929 code=0x7fc00000 [ 879.026907][ C0] vkms_vblank_simulate: vblank timer overrun [ 879.034033][ T30] audit: type=1326 audit(1751512362.368:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13882 comm="syz.1.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x7fc00000 [ 879.125928][ T30] audit: type=1326 audit(1751512362.368:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13882 comm="syz.1.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x7fc00000 [ 879.226985][ T30] audit: type=1326 audit(1751512362.368:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13882 comm="syz.1.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x7fc00000 [ 879.248984][ T5888] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 879.295303][T13895] netlink: 3340 bytes leftover after parsing attributes in process `syz.7.2144'. [ 879.325039][ T30] audit: type=1326 audit(1751512362.368:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13882 comm="syz.1.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x7fc00000 [ 879.346873][ C0] vkms_vblank_simulate: vblank timer overrun [ 879.394726][ T30] audit: type=1326 audit(1751512362.368:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13882 comm="syz.1.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x7fc00000 [ 879.429859][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2144'. [ 879.437548][ T5888] usb 4-1: device descriptor read/64, error -71 [ 880.068463][ T5888] usb usb4-port1: attempt power cycle [ 880.121041][ T5897] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 880.443799][T13910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2147'. [ 880.453321][T13910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2147'. [ 880.637382][T13910] [U] „ [ 880.997294][ T5888] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 881.058064][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 881.078882][ T5897] usb 6-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 881.100267][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.133185][ T5897] usb 6-1: Product: syz [ 881.314085][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 881.322968][ T5888] usb 4-1: device not accepting address 67, error -71 [ 881.331491][ T5897] usb 6-1: Manufacturer: syz [ 881.336128][ T5897] usb 6-1: SerialNumber: syz [ 881.343677][ T5897] usb 6-1: config 0 descriptor?? [ 881.352111][ T5897] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 881.961254][ T5897] gspca_sn9c2028: read1 error -110 [ 881.977407][ T5897] gspca_sn9c2028: read1 error -32 [ 881.996607][ T5897] gspca_sn9c2028: read1 error -32 [ 882.002227][ T5897] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -32 [ 882.006098][ T30] audit: type=1800 audit(1751512365.448:849): pid=13920 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2152" name="bus" dev="overlay" ino=2679 res=0 errno=0 [ 882.037773][ T9020] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 882.051540][ T5897] usb 6-1: USB disconnect, device number 46 [ 882.057803][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 882.064874][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 882.074622][ T10] usb 8-1: config 0 has an invalid interface number: 88 but max is 0 [ 882.145890][ T10] usb 8-1: config 0 has no interface number 0 [ 882.156570][ T10] usb 8-1: config 0 interface 88 altsetting 8 has an endpoint descriptor with address 0x68, changing to 0x8 [ 882.169255][ T10] usb 8-1: config 0 interface 88 altsetting 8 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 882.180421][ T10] usb 8-1: config 0 interface 88 altsetting 8 endpoint 0x8 has invalid wMaxPacketSize 0 [ 882.193327][ T10] usb 8-1: config 0 interface 88 has no altsetting 0 [ 882.210448][ T10] usb 8-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=40.31 [ 882.225325][ T10] usb 8-1: New USB device strings: Mfr=0, Product=84, SerialNumber=3 [ 882.247934][ T9020] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.259071][ T10] usb 8-1: Product: syz [ 882.263292][ T10] usb 8-1: SerialNumber: syz [ 882.277197][ T9020] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 882.287515][ T9020] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 882.299536][ T10] usb 8-1: config 0 descriptor?? [ 882.304761][ T9020] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.318204][ T9020] usb 7-1: config 0 descriptor?? [ 882.541512][ T9020] Bluetooth: Can't get state to change to load ram patch err [ 882.542029][T13914] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2149'. [ 882.557194][ T9020] Bluetooth: Loading patch file failed [ 882.573524][ T9020] ath3k 7-1:0.0: probe with driver ath3k failed with error -32 [ 882.586745][ T10] usb 8-1: USB disconnect, device number 14 [ 883.016559][T13928] syz.1.2154: attempt to access beyond end of device [ 883.016559][T13928] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 883.041118][ T9020] usb 7-1: USB disconnect, device number 22 [ 883.325047][ T30] audit: type=1326 audit(1751512366.628:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13925 comm="syz.1.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x7fc00000 [ 883.346623][ C0] vkms_vblank_simulate: vblank timer overrun [ 883.520768][T13937] netlink: 'syz.5.2157': attribute type 126 has an invalid length. [ 883.603558][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2157'. [ 884.440481][T13953] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2161'. [ 884.960092][T13967] virtio-fs: tag not found [ 885.963188][T13978] syz.7.2166: attempt to access beyond end of device [ 885.963188][T13978] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 886.523169][ T30] audit: type=1326 audit(1751512625.934:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13974 comm="syz.7.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 886.745769][T13982] netlink: 51 bytes leftover after parsing attributes in process `syz.7.2167'. [ 887.580368][ T5832] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 887.725041][T13995] netlink: 'syz.1.2171': attribute type 126 has an invalid length. [ 887.740087][T13996] netlink: 'syz.7.2170': attribute type 8 has an invalid length. [ 887.818226][T14002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2171'. [ 887.918295][T13992] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.344710][T14010] netlink: 'syz.6.2172': attribute type 8 has an invalid length. [ 888.574902][T14007] netlink: 'syz.5.2173': attribute type 5 has an invalid length. [ 888.979105][T14006] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.046373][T14013] netlink: 'syz.1.2174': attribute type 29 has an invalid length. [ 889.133823][T13992] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.199649][T14006] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.352273][T13992] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.402086][T14006] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.620778][ T30] audit: type=1800 audit(1751512629.014:852): pid=14019 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2175" name="bus" dev="overlay" ino=2730 res=0 errno=0 [ 889.925936][T13992] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.345165][T14006] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.488307][T14023] FAULT_INJECTION: forcing a failure. [ 890.488307][T14023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.502072][T14023] CPU: 1 UID: 0 PID: 14023 Comm: syz.5.2176 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 890.502097][T14023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 890.502108][T14023] Call Trace: [ 890.502116][T14023] [ 890.502123][T14023] dump_stack_lvl+0x189/0x250 [ 890.502150][T14023] ? __pfx____ratelimit+0x10/0x10 [ 890.502170][T14023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 890.502189][T14023] ? __pfx__printk+0x10/0x10 [ 890.502202][T14023] ? __might_fault+0xb0/0x130 [ 890.502225][T14023] should_fail_ex+0x414/0x560 [ 890.502244][T14023] _copy_from_user+0x2d/0xb0 [ 890.502264][T14023] __sys_bpf+0x1ed/0x860 [ 890.502282][T14023] ? __pfx___sys_bpf+0x10/0x10 [ 890.502318][T14023] __x64_sys_bpf+0x7c/0x90 [ 890.502333][T14023] do_syscall_64+0xfa/0x3b0 [ 890.502350][T14023] ? lockdep_hardirqs_on+0x9c/0x150 [ 890.502367][T14023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.502379][T14023] ? clear_bhb_loop+0x60/0xb0 [ 890.502395][T14023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.502407][T14023] RIP: 0033:0x7f2cef98e929 [ 890.502420][T14023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 890.502431][T14023] RSP: 002b:00007f2cf07da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 890.502451][T14023] RAX: ffffffffffffffda RBX: 00007f2cefbb6160 RCX: 00007f2cef98e929 [ 890.502464][T14023] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 890.502473][T14023] RBP: 00007f2cf07da090 R08: 0000000000000000 R09: 0000000000000000 [ 890.502482][T14023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.502490][T14023] R13: 0000000000000000 R14: 00007f2cefbb6160 R15: 00007fff6a1a9438 [ 890.502511][T14023] [ 890.780514][T13992] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.245546][T13992] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.432121][T13992] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.854106][ T5832] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 891.864482][ T5832] Bluetooth: hci3: Injecting HCI hardware error event [ 891.875831][ T5832] Bluetooth: hci3: hardware error 0x00 [ 891.889420][T14032] syz.5.2178: attempt to access beyond end of device [ 891.889420][T14032] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 892.111778][ T30] audit: type=1326 audit(1751512631.584:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14024 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef98e929 code=0x7fc00000 [ 892.334814][T13992] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.359368][ T30] audit: type=1326 audit(1751512631.584:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14024 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2cef98e929 code=0x7fc00000 [ 892.385151][ T30] audit: type=1326 audit(1751512631.584:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14024 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef98e929 code=0x7fc00000 [ 892.436878][ T30] audit: type=1326 audit(1751512631.584:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14024 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef98e929 code=0x7fc00000 [ 892.473096][T14038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 892.488787][T14038] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 892.524057][T14006] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.569568][ T30] audit: type=1326 audit(1751512631.584:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14024 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef98e929 code=0x7fc00000 [ 892.652850][ T30] audit: type=1326 audit(1751512631.584:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14024 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef98e929 code=0x7fc00000 [ 892.721589][T14006] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.843349][T14006] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.433418][ T30] audit: type=1326 audit(1751512631.584:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14024 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef98e929 code=0x7fc00000 [ 893.525846][T14006] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.077491][ T5832] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 895.338271][T14082] syz.7.2189: attempt to access beyond end of device [ 895.338271][T14082] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 895.881156][ T30] audit: type=1326 audit(1751512635.244:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14074 comm="syz.7.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 896.282850][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2194'. [ 896.292020][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2194'. [ 896.794870][T14083] virtio-fs: tag not found [ 897.309580][T14094] virtio-fs: tag not found [ 897.609006][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2195'. [ 897.618178][T14100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2195'. [ 898.495042][T14107] sctp: [Deprecated]: syz.1.2199 (pid 14107) Use of int in maxseg socket option. [ 898.495042][T14107] Use struct sctp_assoc_value instead [ 898.720444][ T5881] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 899.080953][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 899.108740][ T5881] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 899.119144][ T5881] usb 4-1: config 0 has no interface number 1 [ 899.125747][ T5881] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 899.139802][ T5881] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 899.152485][ T5881] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 899.179038][ T5881] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 899.202433][ T5881] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 899.221459][T14112] netlink: 'syz.1.2201': attribute type 126 has an invalid length. [ 899.239710][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 899.251903][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 899.266546][ T5881] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 899.282545][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2201'. [ 899.311160][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.332206][ T5881] usb 4-1: Product: syz [ 899.343256][ T5881] usb 4-1: Manufacturer: syz [ 899.352577][ T5881] usb 4-1: SerialNumber: syz [ 899.373476][ T5881] usb 4-1: config 0 descriptor?? [ 899.393524][T14105] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 899.431134][ T5881] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 899.465369][ T5881] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 899.746776][ T5881] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 900.086439][T14105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.124850][T14105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.162287][T14105] 8021q: VLANs not supported on nlmon0 [ 900.982158][ T30] audit: type=1800 audit(1751512639.984:861): pid=14127 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.2200" name="file1" dev="overlay" ino=1973 res=0 errno=0 [ 901.435563][T14133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 902.129518][ T30] audit: type=1326 audit(1751512640.924:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14131 comm="syz.1.2206" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x0 [ 902.217384][ T10] usb 4-1: USB disconnect, device number 69 [ 902.366570][T14139] virtio-fs: tag not found [ 904.557931][T12926] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 904.900408][ T30] audit: type=1800 audit(1751512644.374:863): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.2214" name="bus" dev="overlay" ino=907 res=0 errno=0 [ 905.010361][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2213'. [ 905.077242][T12926] usb 2-1: device descriptor read/64, error -71 [ 905.097746][T14164] virtio-fs: tag not found [ 905.335923][T14172] virtio-fs: tag not found [ 905.360021][T12926] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 905.477444][ T5818] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 905.957244][T12926] usb 2-1: device descriptor read/64, error -71 [ 905.989003][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.010570][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 906.030530][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 906.041223][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 906.080568][T12926] usb usb2-port1: attempt power cycle [ 906.132683][ T5818] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 906.148806][ T5818] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 906.171903][T14176] fuse: Bad value for 'group_id' [ 906.178733][T14176] fuse: Bad value for 'group_id' [ 906.193110][ T5818] usb 4-1: Manufacturer: syz [ 906.222296][ T5818] usb 4-1: config 0 descriptor?? [ 906.437328][T12926] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 906.483892][T14181] virtio-fs: tag not found [ 906.863100][T12926] usb 2-1: device descriptor read/8, error -71 [ 906.977255][ T5818] rc_core: IR keymap rc-hauppauge not found [ 907.025146][T14185] FAULT_INJECTION: forcing a failure. [ 907.025146][T14185] name failslab, interval 1, probability 0, space 0, times 0 [ 907.037983][T14185] CPU: 1 UID: 0 PID: 14185 Comm: syz.6.2220 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 907.038009][T14185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 907.038021][T14185] Call Trace: [ 907.038030][T14185] [ 907.038038][T14185] dump_stack_lvl+0x189/0x250 [ 907.038067][T14185] ? __pfx____ratelimit+0x10/0x10 [ 907.038090][T14185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 907.038113][T14185] ? __pfx__printk+0x10/0x10 [ 907.038137][T14185] ? __pfx___might_resched+0x10/0x10 [ 907.038165][T14185] should_fail_ex+0x414/0x560 [ 907.038191][T14185] should_failslab+0xa8/0x100 [ 907.038214][T14185] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 907.038244][T14185] ? __alloc_skb+0x112/0x2d0 [ 907.038267][T14185] __alloc_skb+0x112/0x2d0 [ 907.038289][T14185] netlink_sendmsg+0x5c6/0xb30 [ 907.038307][T14185] ? finish_task_switch+0x18b/0x950 [ 907.038336][T14185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 907.038362][T14185] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 907.038383][T14185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 907.038403][T14185] __sock_sendmsg+0x21c/0x270 [ 907.038430][T14185] ____sys_sendmsg+0x505/0x830 [ 907.038459][T14185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 907.038489][T14185] ? import_iovec+0x74/0xa0 [ 907.038517][T14185] ___sys_sendmsg+0x21f/0x2a0 [ 907.038540][T14185] ? __pfx____sys_sendmsg+0x10/0x10 [ 907.038595][T14185] ? __fget_files+0x2a/0x420 [ 907.038616][T14185] ? __fget_files+0x3a0/0x420 [ 907.038648][T14185] __x64_sys_sendmsg+0x19b/0x260 [ 907.038671][T14185] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 907.038700][T14185] ? __pfx_ksys_write+0x10/0x10 [ 907.038717][T14185] ? rcu_is_watching+0x15/0xb0 [ 907.038745][T14185] ? do_syscall_64+0xbe/0x3b0 [ 907.038772][T14185] do_syscall_64+0xfa/0x3b0 [ 907.038795][T14185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.038812][T14185] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 907.038828][T14185] ? clear_bhb_loop+0x60/0xb0 [ 907.038850][T14185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.038867][T14185] RIP: 0033:0x7f5f3e98e929 [ 907.038884][T14185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.038899][T14185] RSP: 002b:00007f5f3f7f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.038919][T14185] RAX: ffffffffffffffda RBX: 00007f5f3ebb6080 RCX: 00007f5f3e98e929 [ 907.038932][T14185] RDX: 0000000000000000 RSI: 0000200000005c40 RDI: 0000000000000005 [ 907.038943][T14185] RBP: 00007f5f3f7f2090 R08: 0000000000000000 R09: 0000000000000000 [ 907.038955][T14185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.038965][T14185] R13: 0000000000000000 R14: 00007f5f3ebb6080 R15: 00007ffd5f779018 [ 907.038993][T14185] [ 907.063894][T14167] random: crng reseeded on system resumption [ 907.862720][ T5818] Registered IR keymap rc-empty [ 908.032910][T12926] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 908.065276][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.117283][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.138917][ T5818] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 908.199552][ T5818] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20 [ 908.255642][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.297349][T12926] usb 2-1: device not accepting address 56, error -71 [ 908.305284][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.325280][T12926] usb usb2-port1: unable to enumerate USB device [ 908.377718][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.410506][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.416455][ T30] audit: type=1800 audit(1751512647.884:864): pid=14195 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2223" name="file1" dev="overlay" ino=857 res=0 errno=0 [ 908.490072][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.517300][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.538614][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.557915][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.587511][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.617492][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.647435][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 908.669209][ T5818] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 908.680928][ T5818] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 909.080227][T14203] overlayfs: failed to resolve './file0': -2 [ 909.794903][ T9020] usb 4-1: USB disconnect, device number 70 [ 910.857615][T14210] netlink: 'syz.5.2227': attribute type 126 has an invalid length. [ 911.038311][T14220] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2227'. [ 911.068890][T14223] netlink: 'syz.7.2229': attribute type 5 has an invalid length. [ 912.750439][T14245] virtio-fs: tag not found [ 914.437468][ T10] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 915.267447][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 915.288812][ T10] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 915.367641][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 915.410402][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 915.473986][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 915.517723][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 915.540969][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 915.661428][T14267] overlayfs: failed to resolve './file0': -2 [ 916.389049][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 916.397327][ T10] usb 6-1: SerialNumber: syz [ 916.440289][T14259] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 916.449134][ T10] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 916.456973][ T10] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 916.467212][ T10] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 916.684471][T14255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.693182][T14255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.736506][ T5881] usb 6-1: USB disconnect, device number 47 [ 917.930067][T14282] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2244'. [ 917.994697][T14283] netlink: 'syz.5.2245': attribute type 126 has an invalid length. [ 918.063428][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2245'. [ 919.918143][ T5881] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 919.999089][T14312] 9pnet_fd: Insufficient options for proto=fd [ 920.257356][ T5881] usb 6-1: Using ep0 maxpacket: 16 [ 920.395412][ T5881] usb 6-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 920.469431][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.079659][ T5881] usb 6-1: Product: syz [ 922.084069][ T5881] usb 6-1: Manufacturer: syz [ 922.098232][ T5881] usb 6-1: SerialNumber: syz [ 922.334579][ T5881] usb 6-1: config 0 descriptor?? [ 922.459931][ T5881] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 922.717796][ T5881] gspca_sn9c2028: read1 error -71 [ 922.724950][ T5881] gspca_sn9c2028: read1 error -71 [ 922.744222][ T5881] gspca_sn9c2028: read1 error -71 [ 922.765356][ T5881] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 922.812786][ T5881] usb 6-1: USB disconnect, device number 48 [ 922.847495][T14328] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 922.942247][T14330] virtio-fs: tag not found [ 923.605177][T14334] virtio-fs: tag not found [ 924.084874][T14336] netlink: 'syz.5.2258': attribute type 126 has an invalid length. [ 924.145527][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2258'. [ 924.168281][T14339] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2259'. [ 926.483886][T14371] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.597666][T14373] virtio-fs: tag not found [ 927.429332][ T5832] Bluetooth: hci5: unexpected event for opcode 0x2042 [ 927.452126][T14371] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.512552][T14371] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.606843][T14384] virtio-fs: tag not found [ 929.173401][T14381] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 929.467639][T14381] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 929.481797][T14381] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 929.488004][T14381] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 929.509081][T14381] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 929.526135][T14371] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.555978][T14381] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 930.125321][T14395] netlink: 4912 bytes leftover after parsing attributes in process `syz.1.2272'. [ 931.164544][T14401] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.174029][ T30] audit: type=1326 audit(1751512670.654:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14399 comm="syz.1.2274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x0 [ 931.213921][T14371] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.216641][T14402] netlink: 'syz.6.2273': attribute type 126 has an invalid length. [ 931.272047][T14371] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.352414][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2273'. [ 931.369597][T14371] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.439597][T14371] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.694775][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.868145][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.437603][ T24] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 935.448397][T12926] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 935.690102][T12926] usb 7-1: device descriptor read/64, error -71 [ 935.696859][ T24] usb 4-1: device descriptor read/64, error -71 [ 935.753704][T14446] FAULT_INJECTION: forcing a failure. [ 935.753704][T14446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 935.767434][T14446] CPU: 1 UID: 0 PID: 14446 Comm: syz.1.2285 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 935.767462][T14446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 935.767474][T14446] Call Trace: [ 935.767483][T14446] [ 935.767491][T14446] dump_stack_lvl+0x189/0x250 [ 935.767527][T14446] ? __pfx____ratelimit+0x10/0x10 [ 935.767551][T14446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 935.767573][T14446] ? __pfx__printk+0x10/0x10 [ 935.767592][T14446] ? __might_fault+0xb0/0x130 [ 935.767624][T14446] should_fail_ex+0x414/0x560 [ 935.767649][T14446] _copy_from_user+0x2d/0xb0 [ 935.767673][T14446] ___sys_sendmsg+0x158/0x2a0 [ 935.767701][T14446] ? __pfx____sys_sendmsg+0x10/0x10 [ 935.767757][T14446] ? __fget_files+0x2a/0x420 [ 935.767777][T14446] ? __fget_files+0x3a0/0x420 [ 935.767809][T14446] __x64_sys_sendmsg+0x19b/0x260 [ 935.767831][T14446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 935.767872][T14446] ? __pfx_ksys_write+0x10/0x10 [ 935.767890][T14446] ? rcu_is_watching+0x15/0xb0 [ 935.767918][T14446] ? do_syscall_64+0xbe/0x3b0 [ 935.767945][T14446] do_syscall_64+0xfa/0x3b0 [ 935.767969][T14446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.767986][T14446] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 935.768003][T14446] ? clear_bhb_loop+0x60/0xb0 [ 935.768025][T14446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.768042][T14446] RIP: 0033:0x7f993158e929 [ 935.768059][T14446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.768081][T14446] RSP: 002b:00007f9932344038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.768101][T14446] RAX: ffffffffffffffda RBX: 00007f99317b6160 RCX: 00007f993158e929 [ 935.768114][T14446] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000006 [ 935.768127][T14446] RBP: 00007f9932344090 R08: 0000000000000000 R09: 0000000000000000 [ 935.768138][T14446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.768150][T14446] R13: 0000000000000000 R14: 00007f99317b6160 R15: 00007ffd4e8e48d8 [ 935.768179][T14446] [ 936.297922][T12926] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 936.501703][ T24] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 936.643852][T12926] usb 7-1: device descriptor read/64, error -71 [ 936.778271][T12926] usb usb7-port1: attempt power cycle [ 936.784683][T14461] IPv6: addrconf: prefix option has invalid lifetime [ 936.867894][T14459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 936.881210][ T30] audit: type=1326 audit(1751512676.354:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14457 comm="syz.1.2290" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x0 [ 937.190091][T14468] netlink: 'syz.6.2291': attribute type 126 has an invalid length. [ 937.294303][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2291'. [ 937.398195][ T24] usb 4-1: device descriptor read/64, error -71 [ 937.517931][ T24] usb usb4-port1: attempt power cycle [ 937.877261][ T24] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 937.927943][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 937.949599][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 937.961960][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.973296][ T24] usb 4-1: Product: syz [ 937.977984][ T24] usb 4-1: Manufacturer: syz [ 937.982679][ T24] usb 4-1: SerialNumber: syz [ 938.037764][ T24] usb 4-1: config 0 descriptor?? [ 938.049127][ T24] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 938.267405][ T24] gspca_sn9c2028: read1 error -71 [ 938.292620][ T24] gspca_sn9c2028: read1 error -71 [ 938.360757][ T24] gspca_sn9c2028: read1 error -71 [ 938.381172][ T24] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 938.485597][ T30] audit: type=1800 audit(1751512677.954:867): pid=14498 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2300" name="bus" dev="overlay" ino=2916 res=0 errno=0 [ 938.973318][ T24] usb 4-1: USB disconnect, device number 73 [ 940.205735][T14507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 940.296282][ T30] audit: type=1326 audit(1751512679.764:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14502 comm="syz.3.2303" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f626d58e929 code=0x0 [ 940.317337][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.705137][ T10] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 942.354213][T14529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 942.796856][ T10] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 942.826086][ T10] usb 4-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 942.837006][T14531] netlink: 'syz.7.2309': attribute type 126 has an invalid length. [ 942.845682][ T10] usb 4-1: Product: syz [ 942.855731][ T10] usb 4-1: Manufacturer: syz [ 942.861084][ T10] usb 4-1: SerialNumber: syz [ 942.871799][ T10] usb 4-1: config 0 descriptor?? [ 942.923064][T14536] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2309'. [ 943.306255][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 943.322413][ T10] asix 4-1:0.0: probe with driver asix failed with error -71 [ 943.355283][ T10] usb 4-1: USB disconnect, device number 74 [ 944.068600][ T30] audit: type=1800 audit(1751512683.524:869): pid=14553 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2313" name="bus" dev="overlay" ino=965 res=0 errno=0 [ 944.211568][ T10] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 944.467435][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 944.523369][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 944.575313][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 944.644674][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 944.728625][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 944.877943][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 944.897871][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 944.943100][ T10] usb 4-1: SerialNumber: syz [ 945.109960][T14550] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 945.246441][ T10] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 945.338645][ T10] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 945.428337][ T10] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 945.642183][T14560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2312'. [ 945.785702][T14550] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2312'. [ 946.027913][ T5927] usb 4-1: USB disconnect, device number 75 [ 946.647239][T12926] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 947.057215][T12926] usb 7-1: device descriptor read/64, error -71 [ 947.177069][T14578] virtio-fs: tag not found [ 947.297356][T12926] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 947.364827][T14581] netlink: 'syz.3.2321': attribute type 126 has an invalid length. [ 947.433238][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2321'. [ 947.467963][T12926] usb 7-1: device descriptor read/64, error -71 [ 947.587428][ T5927] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 947.618605][T12926] usb usb7-port1: attempt power cycle [ 947.792169][ T5927] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 947.806164][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.815530][ T5927] usb 6-1: Product: syz [ 947.822850][ T5927] usb 6-1: Manufacturer: syz [ 947.829203][ T5927] usb 6-1: SerialNumber: syz [ 947.921821][ T5927] usb 6-1: config 0 descriptor?? [ 948.188608][T12926] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 948.407957][T12926] usb 7-1: device descriptor read/8, error -71 [ 948.419925][ T5927] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 948.859292][T12926] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 948.994132][T14598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2324'. [ 949.003589][T14598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2324'. [ 949.158904][T12926] usb 7-1: device not accepting address 29, error -71 [ 949.240508][T12926] usb usb7-port1: unable to enumerate USB device [ 949.893275][T14613] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2328'. [ 950.737246][T12926] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 950.790653][ T5927] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 950.825597][ T5927] usb 6-1: USB disconnect, device number 49 [ 950.977266][T12926] usb 7-1: Using ep0 maxpacket: 16 [ 951.188859][T12926] usb 7-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 951.207237][T12926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.215364][T12926] usb 7-1: Product: syz [ 951.228280][T12926] usb 7-1: Manufacturer: syz [ 951.260875][T12926] usb 7-1: SerialNumber: syz [ 951.466854][T12926] usb 7-1: config 0 descriptor?? [ 951.608620][ T5927] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 951.779802][T12926] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 951.819013][T14629] virtio-fs: tag not found [ 951.937341][ T5927] usb 8-1: device descriptor read/64, error -71 [ 951.993507][T14609] netlink: 'syz.6.2327': attribute type 72 has an invalid length. [ 952.002350][T14609] netlink: 740 bytes leftover after parsing attributes in process `syz.6.2327'. [ 952.013752][T12926] gspca_sn9c2028: read1 error -71 [ 952.019917][T12926] gspca_sn9c2028: read1 error -71 [ 952.027508][T12926] gspca_sn9c2028: read1 error -71 [ 952.032840][T12926] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -71 [ 952.053155][T12926] usb 7-1: USB disconnect, device number 30 [ 952.203670][ T5927] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 952.308054][ T10] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 952.551709][ T5927] usb 8-1: device descriptor read/64, error -71 [ 952.607287][ T10] usb 6-1: device descriptor read/64, error -71 [ 952.711082][ T5927] usb usb8-port1: attempt power cycle [ 952.916209][ T10] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 953.057496][ T10] usb 6-1: device descriptor read/64, error -71 [ 953.216064][ T10] usb usb6-port1: attempt power cycle [ 953.613865][ T10] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 953.690562][ T10] usb 6-1: device descriptor read/8, error -71 [ 953.726816][ T5927] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 953.758446][ T5927] usb 8-1: device descriptor read/8, error -71 [ 953.772035][T14651] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2340'. [ 953.901546][T14654] virtio-fs: tag not found [ 954.287265][ T10] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 954.295119][ T5881] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 954.332204][ T10] usb 6-1: device descriptor read/8, error -71 [ 954.457695][ T10] usb usb6-port1: unable to enumerate USB device [ 954.464136][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 954.478455][ T5881] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 954.487696][ T5881] usb 4-1: config 0 has no interface number 0 [ 954.493965][ T5881] usb 4-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 954.506182][ T5881] usb 4-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 954.520520][ T5881] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 954.539777][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.565481][ T5881] usb 4-1: Product: syz [ 954.570375][ T5881] usb 4-1: Manufacturer: syz [ 954.577317][ T5881] usb 4-1: SerialNumber: syz [ 954.594532][ T5881] usb 4-1: config 0 descriptor?? [ 954.600513][T14649] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 955.687219][ T5881] ath6kl: Failed to submit usb control message: -110 [ 955.708439][ T5881] ath6kl: unable to send the bmi data to the device: -110 [ 955.727313][ T5881] ath6kl: Unable to send get target info: -110 [ 955.738175][ T5881] ath6kl: Failed to init ath6kl core: -110 [ 955.754413][ T5881] ath6kl_usb 4-1:0.239: probe with driver ath6kl_usb failed with error -110 [ 956.058063][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2347'. [ 956.067218][T14689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2347'. [ 956.595389][ T30] audit: type=1326 audit(1751512696.064:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.7.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 956.617009][ C0] vkms_vblank_simulate: vblank timer overrun [ 956.640245][ T30] audit: type=1326 audit(1751512696.064:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.7.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 956.685350][ T30] audit: type=1326 audit(1751512696.064:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.7.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 956.744243][ T5881] usb 4-1: USB disconnect, device number 76 [ 956.783540][ T30] audit: type=1326 audit(1751512696.064:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.7.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 956.814116][ T30] audit: type=1326 audit(1751512696.064:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.7.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 956.835764][ C0] vkms_vblank_simulate: vblank timer overrun [ 956.846822][ T30] audit: type=1326 audit(1751512696.064:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.7.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 956.868409][ C0] vkms_vblank_simulate: vblank timer overrun [ 956.879169][ T30] audit: type=1326 audit(1751512696.064:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.7.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 956.900735][ C0] vkms_vblank_simulate: vblank timer overrun [ 956.911403][ T30] audit: type=1326 audit(1751512696.064:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.7.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 956.933049][ C0] vkms_vblank_simulate: vblank timer overrun [ 957.693609][ T30] audit: type=1326 audit(1751512696.064:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.7.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 957.715554][ T30] audit: type=1326 audit(1751512696.064:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.7.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 957.737110][ C0] vkms_vblank_simulate: vblank timer overrun [ 959.009594][ T5881] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 959.268666][ T5881] usb 8-1: device descriptor read/64, error -71 [ 959.587284][ T5881] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 960.262029][ T5881] usb 8-1: device descriptor read/64, error -71 [ 960.418600][ T5881] usb usb8-port1: attempt power cycle [ 960.791570][ T5881] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 960.924309][ T5881] usb 8-1: device descriptor read/8, error -71 [ 963.010575][T14746] netlink: 260 bytes leftover after parsing attributes in process `syz.7.2362'. [ 965.443208][T14768] virtio-fs: tag not found [ 965.467995][T14770] FAULT_INJECTION: forcing a failure. [ 965.467995][T14770] name failslab, interval 1, probability 0, space 0, times 0 [ 965.481285][T14770] CPU: 0 UID: 0 PID: 14770 Comm: syz.5.2370 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 965.481309][T14770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 965.481322][T14770] Call Trace: [ 965.481330][T14770] [ 965.481339][T14770] dump_stack_lvl+0x189/0x250 [ 965.481368][T14770] ? __pfx____ratelimit+0x10/0x10 [ 965.481390][T14770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 965.481414][T14770] ? __pfx__printk+0x10/0x10 [ 965.481439][T14770] ? stack_trace_save+0x9c/0xe0 [ 965.481459][T14770] should_fail_ex+0x414/0x560 [ 965.481483][T14770] should_failslab+0xa8/0x100 [ 965.481506][T14770] kmem_cache_alloc_noprof+0x73/0x3c0 [ 965.481526][T14770] ? radix_tree_node_alloc+0x7e/0x3a0 [ 965.481545][T14770] ? __kasan_slab_free+0x62/0x70 [ 965.481575][T14770] radix_tree_node_alloc+0x7e/0x3a0 [ 965.481602][T14770] idr_get_free+0x2b3/0xa70 [ 965.481637][T14770] idr_alloc_u32+0x159/0x2d0 [ 965.481666][T14770] ? __pfx_idr_alloc_u32+0x10/0x10 [ 965.481690][T14770] ? do_raw_spin_lock+0x121/0x290 [ 965.481717][T14770] idr_alloc_cyclic+0x9b/0x1b0 [ 965.481746][T14770] btf_new_fd+0x7d0/0xc90 [ 965.481775][T14770] ? __pfx_btf_new_fd+0x10/0x10 [ 965.481793][T14770] ? bpf_token_put+0x143/0x160 [ 965.481813][T14770] ? bpf_btf_load+0x126/0x190 [ 965.481838][T14770] __sys_bpf+0x635/0x860 [ 965.481861][T14770] ? __pfx___sys_bpf+0x10/0x10 [ 965.481895][T14770] ? ksys_write+0x22a/0x250 [ 965.481917][T14770] ? __pfx_ksys_write+0x10/0x10 [ 965.481933][T14770] ? rcu_is_watching+0x15/0xb0 [ 965.481964][T14770] __x64_sys_bpf+0x7c/0x90 [ 965.481988][T14770] do_syscall_64+0xfa/0x3b0 [ 965.482009][T14770] ? lockdep_hardirqs_on+0x9c/0x150 [ 965.482031][T14770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.482048][T14770] ? clear_bhb_loop+0x60/0xb0 [ 965.482069][T14770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.482086][T14770] RIP: 0033:0x7f2cef98e929 [ 965.482103][T14770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 965.482118][T14770] RSP: 002b:00007f2cf081c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 965.482137][T14770] RAX: ffffffffffffffda RBX: 00007f2cefbb5fa0 RCX: 00007f2cef98e929 [ 965.482151][T14770] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 965.482162][T14770] RBP: 00007f2cf081c090 R08: 0000000000000000 R09: 0000000000000000 [ 965.482173][T14770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 965.482184][T14770] R13: 0000000000000001 R14: 00007f2cefbb5fa0 R15: 00007fff6a1a9438 [ 965.482212][T14770] [ 965.741144][ C0] vkms_vblank_simulate: vblank timer overrun [ 965.887345][ T10] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 966.017739][ T10] usb 8-1: device descriptor read/64, error -71 [ 966.110329][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 966.110343][ T30] audit: type=1326 audit(1751512705.584:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14783 comm="syz.5.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef98e929 code=0x7ffc0000 [ 966.245495][ T30] audit: type=1326 audit(1751512705.614:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14783 comm="syz.5.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f2cef98e929 code=0x7ffc0000 [ 966.267173][ C0] vkms_vblank_simulate: vblank timer overrun [ 966.274010][ T30] audit: type=1326 audit(1751512705.614:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14783 comm="syz.5.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef98e929 code=0x7ffc0000 [ 966.306164][ T30] audit: type=1326 audit(1751512705.614:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14783 comm="syz.5.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef98e929 code=0x7ffc0000 [ 966.407299][ T10] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 966.467978][ T30] audit: type=1326 audit(1751512705.614:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14783 comm="syz.5.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2cef990847 code=0x7ffc0000 [ 966.597225][ T10] usb 8-1: device descriptor read/64, error -71 [ 966.741175][ T30] audit: type=1326 audit(1751512705.614:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14783 comm="syz.5.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef98e929 code=0x7ffc0000 [ 966.771752][ T30] audit: type=1326 audit(1751512705.614:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14783 comm="syz.5.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef98e929 code=0x7ffc0000 [ 966.941087][ T10] usb usb8-port1: attempt power cycle [ 967.467316][ T30] audit: type=1326 audit(1751512705.614:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14783 comm="syz.5.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2cef98e929 code=0x7ffc0000 [ 967.542770][ T30] audit: type=1326 audit(1751512705.614:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14783 comm="syz.5.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef98e929 code=0x7ffc0000 [ 967.693428][ T30] audit: type=1326 audit(1751512705.614:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14783 comm="syz.5.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef98e929 code=0x7ffc0000 [ 970.547599][T14817] netlink: 'syz.6.2380': attribute type 126 has an invalid length. [ 971.246684][T14820] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2380'. [ 972.517466][ T10] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 972.655713][T14836] FAULT_INJECTION: forcing a failure. [ 972.655713][T14836] name failslab, interval 1, probability 0, space 0, times 0 [ 972.667485][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 972.669013][T14836] CPU: 1 UID: 0 PID: 14836 Comm: syz.7.2386 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 972.669036][T14836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 972.669057][T14836] Call Trace: [ 972.669066][T14836] [ 972.669074][T14836] dump_stack_lvl+0x189/0x250 [ 972.669101][T14836] ? __pfx____ratelimit+0x10/0x10 [ 972.669125][T14836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 972.669147][T14836] ? __pfx__printk+0x10/0x10 [ 972.669167][T14836] ? __pfx___might_resched+0x10/0x10 [ 972.669189][T14836] ? fs_reclaim_acquire+0x7d/0x100 [ 972.669217][T14836] should_fail_ex+0x414/0x560 [ 972.669242][T14836] should_failslab+0xa8/0x100 [ 972.669264][T14836] __kmalloc_noprof+0xcb/0x4f0 [ 972.669283][T14836] ? tomoyo_encode+0x28b/0x550 [ 972.669309][T14836] tomoyo_encode+0x28b/0x550 [ 972.669335][T14836] tomoyo_mount_permission+0x44d/0x970 [ 972.669360][T14836] ? tomoyo_mount_permission+0x27a/0x970 [ 972.669426][T14836] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 972.669507][T14836] security_sb_mount+0xec/0x350 [ 972.669534][T14836] path_mount+0xbc/0xfe0 [ 972.669554][T14836] ? user_path_at+0x44/0x60 [ 972.669568][T14836] ? kmem_cache_free+0x18f/0x400 [ 972.669596][T14836] __se_sys_mount+0x317/0x410 [ 972.669624][T14836] ? __pfx___se_sys_mount+0x10/0x10 [ 972.669641][T14836] ? rcu_is_watching+0x15/0xb0 [ 972.669669][T14836] ? do_syscall_64+0xbe/0x3b0 [ 972.669689][T14836] ? __x64_sys_mount+0x20/0xc0 [ 972.669712][T14836] do_syscall_64+0xfa/0x3b0 [ 972.669732][T14836] ? lockdep_hardirqs_on+0x9c/0x150 [ 972.669754][T14836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.669769][T14836] ? clear_bhb_loop+0x60/0xb0 [ 972.669790][T14836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.669806][T14836] RIP: 0033:0x7ff21878e929 [ 972.669823][T14836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.669835][T14836] RSP: 002b:00007ff219650038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 972.669854][T14836] RAX: ffffffffffffffda RBX: 00007ff2189b5fa0 RCX: 00007ff21878e929 [ 972.669867][T14836] RDX: 000020000015bffc RSI: 0000200000000240 RDI: 0000000000000000 [ 972.669895][T14836] RBP: 00007ff219650090 R08: 0000200000000000 R09: 0000000000000000 [ 972.669906][T14836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 972.669916][T14836] R13: 0000000000000000 R14: 00007ff2189b5fa0 R15: 00007ffc14a95278 [ 972.669944][T14836] [ 972.933343][ T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 972.943886][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.952076][ T10] usb 6-1: Product: syz [ 972.956443][ T10] usb 6-1: Manufacturer: syz [ 972.961296][ T10] usb 6-1: SerialNumber: syz [ 972.970443][ T10] usb 6-1: config 0 descriptor?? [ 972.980266][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 973.186190][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 973.186211][ T30] audit: type=1326 audit(1751512712.484:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14830 comm="syz.6.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e98e929 code=0x7fc00000 [ 973.214819][T14832] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2385'. [ 973.214848][T14832] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2385'. [ 973.214886][T14832] netlink: 'syz.5.2385': attribute type 5 has an invalid length. [ 973.214901][T14832] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2385'. [ 973.792350][ T10] gspca_sn9c2028: read1 error -71 [ 973.802634][ T10] gspca_sn9c2028: read1 error -71 [ 973.810476][ T10] gspca_sn9c2028: read1 error -71 [ 973.829972][ T10] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 973.911421][ T10] usb 6-1: USB disconnect, device number 54 [ 974.101327][T14850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 974.131458][ T30] audit: type=1326 audit(1751512713.604:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14849 comm="syz.7.2390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x0 [ 974.387443][ T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 974.598991][T14858] netlink: 'syz.5.2394': attribute type 126 has an invalid length. [ 974.657859][T14859] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2393'. [ 975.147297][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 975.189537][T14863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2394'. [ 975.202682][ T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 975.216222][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.244032][ T10] usb 7-1: Product: syz [ 975.252345][ T10] usb 7-1: Manufacturer: syz [ 975.260916][ T10] usb 7-1: SerialNumber: syz [ 975.284511][ T10] usb 7-1: config 0 descriptor?? [ 975.303620][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 975.946081][ T10] gspca_sn9c2028: read1 error -71 [ 975.964256][ T10] gspca_sn9c2028: read1 error -71 [ 975.976362][ T10] gspca_sn9c2028: read1 error -71 [ 975.999941][ T10] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -71 [ 976.015850][ T10] usb 7-1: USB disconnect, device number 31 [ 978.800735][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2404'. [ 978.809862][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2404'. [ 979.426781][T14915] netlink: 'syz.5.2408': attribute type 126 has an invalid length. [ 979.610985][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2408'. [ 979.730341][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2406'. [ 979.739551][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2406'. [ 979.832597][ T24] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 980.557443][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 980.717715][ T24] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 980.727962][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 980.734851][ T24] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 980.773445][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.797001][ T24] usb 7-1: config 0 descriptor?? [ 981.569511][ T24] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 981.580916][ T24] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 982.277386][ T24] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 982.306114][ T24] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 982.333013][ T24] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 982.445989][ T24] corsair-cpro 0003:1B1C:0C10.000D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.6-1/input0 [ 982.597785][ T24] corsair-cpro 0003:1B1C:0C10.000D: probe with driver corsair-cpro failed with error -38 [ 982.918347][ T24] usb 7-1: USB disconnect, device number 32 [ 983.188356][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2417'. [ 983.197514][T14955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2417'. [ 985.243547][ T9020] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 985.670654][T14967] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.698143][ T9020] usb 7-1: Using ep0 maxpacket: 16 [ 985.717073][ T9020] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.745586][ T9020] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 985.758359][ T9020] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.772512][ T9020] usb 7-1: config 0 descriptor?? [ 985.865944][T14967] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.506898][T14967] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.676029][T14967] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.114688][T14968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.234319][T14968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.320675][ T5888] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 987.682952][ T9020] usbhid 7-1:0.0: can't add hid device: -71 [ 987.689410][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 987.759285][ T9020] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 987.977349][ T5888] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 987.991256][ T9020] usb 7-1: USB disconnect, device number 33 [ 988.167856][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.389280][ T5888] usb 4-1: Product: syz [ 988.393520][ T5888] usb 4-1: Manufacturer: syz [ 988.444060][T14967] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.447612][ T5888] usb 4-1: SerialNumber: syz [ 988.463606][ T5888] usb 4-1: config 0 descriptor?? [ 988.479626][ T5888] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 988.505753][T14967] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.567906][T14967] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.960620][T14989] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2426'. [ 989.072561][ T5888] gspca_sn9c2028: read1 error -110 [ 989.072990][T14967] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.081138][ T5888] gspca_sn9c2028: read1 error -32 [ 989.097570][T14989] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2426'. [ 989.106938][ T5888] gspca_sn9c2028: read1 error -32 [ 989.113073][ T5888] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 989.137367][T14989] netlink: 'syz.3.2426': attribute type 5 has an invalid length. [ 989.157600][T14989] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2426'. [ 989.302509][ T5888] usb 4-1: USB disconnect, device number 77 [ 989.641726][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2431'. [ 989.650731][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2431'. [ 989.862508][T15016] virtio-fs: tag not found [ 992.739735][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2439'. [ 993.167513][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.173881][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.227965][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2442'. [ 993.236880][T15047] netlink: 'syz.1.2442': attribute type 1 has an invalid length. [ 993.418990][T15047] netlink: 'syz.1.2442': attribute type 2 has an invalid length. [ 993.478210][T15049] FAULT_INJECTION: forcing a failure. [ 993.478210][T15049] name failslab, interval 1, probability 0, space 0, times 0 [ 993.513752][T15049] CPU: 0 UID: 0 PID: 15049 Comm: syz.7.2440 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 993.513779][T15049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 993.513790][T15049] Call Trace: [ 993.513798][T15049] [ 993.513806][T15049] dump_stack_lvl+0x189/0x250 [ 993.513833][T15049] ? __pfx____ratelimit+0x10/0x10 [ 993.513855][T15049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 993.513877][T15049] ? __pfx__printk+0x10/0x10 [ 993.513900][T15049] ? __pfx___might_resched+0x10/0x10 [ 993.513921][T15049] ? fs_reclaim_acquire+0x7d/0x100 [ 993.513948][T15049] should_fail_ex+0x414/0x560 [ 993.513973][T15049] should_failslab+0xa8/0x100 [ 993.513995][T15049] __kmalloc_noprof+0xcb/0x4f0 [ 993.514012][T15049] ? kfree+0x4d/0x440 [ 993.514026][T15049] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 993.514053][T15049] tomoyo_realpath_from_path+0xe3/0x5d0 [ 993.514076][T15049] ? tomoyo_domain+0xda/0x130 [ 993.514104][T15049] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 993.514123][T15049] tomoyo_path_number_perm+0x1e8/0x5a0 [ 993.514146][T15049] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 993.514170][T15049] ? sb_end_write+0xe9/0x1c0 [ 993.514193][T15049] ? vfs_write+0x8d8/0xa90 [ 993.514247][T15049] ? ksys_write+0x1e1/0x250 [ 993.514274][T15049] security_file_ioctl+0xcb/0x2d0 [ 993.514297][T15049] __se_sys_ioctl+0x47/0x170 [ 993.514319][T15049] do_syscall_64+0xfa/0x3b0 [ 993.514340][T15049] ? lockdep_hardirqs_on+0x9c/0x150 [ 993.514362][T15049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.514379][T15049] ? clear_bhb_loop+0x60/0xb0 [ 993.514400][T15049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.514417][T15049] RIP: 0033:0x7ff21878e929 [ 993.514433][T15049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.514448][T15049] RSP: 002b:00007ff219650038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 993.514468][T15049] RAX: ffffffffffffffda RBX: 00007ff2189b5fa0 RCX: 00007ff21878e929 [ 993.514488][T15049] RDX: 0000200000000280 RSI: 000000004008af60 RDI: 0000000000000003 [ 993.514498][T15049] RBP: 00007ff219650090 R08: 0000000000000000 R09: 0000000000000000 [ 993.514508][T15049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.514519][T15049] R13: 0000000000000000 R14: 00007ff2189b5fa0 R15: 00007ffc14a95278 [ 993.514549][T15049] [ 993.514557][T15049] ERROR: Out of memory at tomoyo_realpath_from_path. [ 994.047332][T12926] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 994.672976][T15067] netlink: 260 bytes leftover after parsing attributes in process `syz.7.2447'. [ 994.929553][ T24] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 995.170608][T12926] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.06 [ 995.180079][T12926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.188344][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 995.244586][T12926] ums-freecom 2-1:127.0: USB Mass Storage device detected [ 995.255321][T15073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 995.270313][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 995.291906][ T30] audit: type=1326 audit(1751512990.764:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15072 comm="syz.7.2449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x0 [ 995.293985][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.329958][ T24] usb 7-1: Product: syz [ 995.334203][ T24] usb 7-1: Manufacturer: syz [ 995.354031][ T24] usb 7-1: SerialNumber: syz [ 995.361440][ T24] usb 7-1: config 0 descriptor?? [ 995.370194][ T24] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 995.444032][T12926] usb 2-1: USB disconnect, device number 57 [ 995.517570][ T9020] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 995.584064][ T24] gspca_sn9c2028: read1 error -71 [ 995.590475][ T24] gspca_sn9c2028: read1 error -71 [ 995.598376][ T24] gspca_sn9c2028: read1 error -71 [ 995.603602][ T24] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -71 [ 995.619681][ T24] usb 7-1: USB disconnect, device number 34 [ 995.681685][ T9020] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.692369][ T9020] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 995.708068][ T9020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.720222][ T9020] usb 6-1: config 0 descriptor?? [ 995.937001][T15076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.937396][ T5881] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 995.945944][T15076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.205602][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2454'. [ 996.218484][T15089] netlink: 'syz.6.2454': attribute type 1 has an invalid length. [ 996.221269][ T9020] ath6kl: Failed to read usb control message: -71 [ 996.233641][ T9020] ath6kl: Unable to read the bmi data from the device: -71 [ 996.241142][ T9020] ath6kl: Unable to recv target info: -71 [ 996.250956][ T9020] ath6kl: Failed to init ath6kl core: -71 [ 996.258206][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.269192][ T5881] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 996.278482][ T9020] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 996.287224][ T5881] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 996.300102][ T9020] usb 6-1: USB disconnect, device number 55 [ 996.307215][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.324960][ T5881] usb 4-1: config 0 descriptor?? [ 997.241500][T15081] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2451'. [ 997.317530][ T5881] Bluetooth: Can't get version to change to load ram patch err [ 997.337260][ T5881] Bluetooth: Loading patch file failed [ 997.343052][ T30] audit: type=1326 audit(1751512992.804:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15083 comm="syz.7.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 997.379996][ T5881] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 997.461073][ T5881] usb 4-1: USB disconnect, device number 78 [ 997.561528][T15103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 998.672394][T15115] virtio-fs: tag not found [ 999.268651][T15124] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.403674][T15126] virtio-fs: tag not found [ 1000.349766][T15124] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.508270][T15124] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.965133][T15138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1001.018363][T15124] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.347193][ T30] audit: type=1326 audit(1751513252.755:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15133 comm="syz.1.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x7fc00000 [ 1001.368882][ C0] vkms_vblank_simulate: vblank timer overrun [ 1001.462829][T15124] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.594787][T15124] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.800523][T15124] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.235956][T15124] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.522279][T15157] virtio-fs: tag not found [ 1002.528131][T12926] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1003.121601][T12926] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.142880][T12926] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1003.167535][T12926] usb 8-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1003.197686][T12926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.228368][T12926] usb 8-1: config 0 descriptor?? [ 1003.477263][T15171] virtio-fs: tag not found [ 1003.902844][T15153] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2473'. [ 1004.016685][T12926] Bluetooth: Can't get version to change to load ram patch err [ 1004.187555][T12926] Bluetooth: Loading patch file failed [ 1004.195267][T12926] ath3k 8-1:0.0: probe with driver ath3k failed with error -71 [ 1004.208075][T12926] usb 8-1: USB disconnect, device number 26 [ 1005.086519][T15184] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1005.095740][ T30] audit: type=1326 audit(1751513512.565:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15183 comm="syz.7.2482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x0 [ 1005.116832][ C0] vkms_vblank_simulate: vblank timer overrun [ 1007.072153][ T30] audit: type=1800 audit(1751513770.513:971): pid=15205 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2488" name="bus" dev="overlay" ino=2679 res=0 errno=0 [ 1007.151610][T15207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1007.479387][T15212] 9pnet_fd: Insufficient options for proto=fd [ 1007.797262][ T9020] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1008.315167][ T9020] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.326926][ T9020] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1008.336498][ T9020] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1008.374319][ T9020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.443285][ T9020] usb 6-1: config 0 descriptor?? [ 1008.858402][T15217] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2493'. [ 1008.870007][ T9020] Bluetooth: Can't get version to change to load ram patch err [ 1008.887244][ T9020] Bluetooth: Loading patch file failed [ 1008.910326][ T9020] ath3k 6-1:0.0: probe with driver ath3k failed with error -71 [ 1008.949682][ T9020] usb 6-1: USB disconnect, device number 56 [ 1013.748268][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2506'. [ 1013.757247][T15278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2506'. [ 1014.838798][T15282] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2505'. [ 1015.184649][T15284] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.633274][T15284] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.729509][T15294] overlayfs: missing 'lowerdir' [ 1017.265581][T15284] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.696332][T15284] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.849036][T15314] syz.6.2513: attempt to access beyond end of device [ 1017.849036][T15314] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1017.890577][T15284] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.958645][T15284] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.022439][T15284] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.191421][T15284] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.400086][ T30] audit: type=1326 audit(1751514037.877:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15307 comm="syz.6.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e98e929 code=0x7fc00000 [ 1018.422205][ T30] audit: type=1326 audit(1751514037.877:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15307 comm="syz.6.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f3e98e929 code=0x7fc00000 [ 1018.444168][ T30] audit: type=1326 audit(1751514037.877:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15307 comm="syz.6.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e98e929 code=0x7fc00000 [ 1018.526925][ T30] audit: type=1326 audit(1751514037.877:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15307 comm="syz.6.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e98e929 code=0x7fc00000 [ 1018.557751][ T30] audit: type=1326 audit(1751514037.877:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15307 comm="syz.6.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e98e929 code=0x7fc00000 [ 1018.619711][ T30] audit: type=1326 audit(1751514037.877:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15307 comm="syz.6.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e98e929 code=0x7fc00000 [ 1018.645275][ T30] audit: type=1326 audit(1751514037.877:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15307 comm="syz.6.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3e98e929 code=0x7fc00000 [ 1022.353194][T15343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1024.395986][T15369] syz.7.2527: attempt to access beyond end of device [ 1024.395986][T15369] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1025.017709][ T30] audit: type=1326 audit(1751514044.417:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15361 comm="syz.7.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 1025.416950][ T30] audit: type=1326 audit(1751514044.417:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15361 comm="syz.7.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 1025.674155][T15379] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2531'. [ 1026.173637][T15386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2533'. [ 1026.183331][T15386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2533'. [ 1026.832715][T15390] virtio-fs: tag not found [ 1027.231710][T15396] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1028.007301][ T9020] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1028.210988][ T9020] usb 4-1: Using ep0 maxpacket: 16 [ 1028.787591][ T9020] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 1028.831104][ T9020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.020081][ T9020] usb 4-1: Product: syz [ 1029.045705][ T9020] usb 4-1: Manufacturer: syz [ 1029.056335][ T9020] usb 4-1: SerialNumber: syz [ 1029.086508][ T9020] usb 4-1: config 0 descriptor?? [ 1029.095703][ T9020] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 1029.115054][T15417] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.611480][T15404] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2538'. [ 1029.625234][T15404] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2538'. [ 1029.634802][T15404] netlink: 'syz.3.2538': attribute type 5 has an invalid length. [ 1029.638426][T15417] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.666864][T15404] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2538'. [ 1029.850926][ T9020] gspca_sn9c2028: read1 error -71 [ 1029.856548][ T9020] gspca_sn9c2028: read1 error -71 [ 1029.862186][ T9020] gspca_sn9c2028: read1 error -71 [ 1029.867493][ T9020] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1029.878558][ T9020] usb 4-1: USB disconnect, device number 79 [ 1030.740054][T15417] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.805329][T15433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1031.475032][T15417] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.557929][T15448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2549'. [ 1031.732238][T15417] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.784750][T15417] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.867082][T15417] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.895028][T15417] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.636494][T15461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1033.888801][T15472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1034.122253][T15473] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 1034.147729][T15473] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1034.164957][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.555259][T15499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1038.798805][T15544] overlayfs: missing 'lowerdir' [ 1040.369683][T12926] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1041.183721][T12926] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.213479][T12926] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1041.413563][T12926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.910136][T12926] usb 6-1: config 0 descriptor?? [ 1042.274779][T15553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.474734][T15553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.848004][ T30] audit: type=1326 audit(1751514318.301:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15587 comm="syz.7.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 1043.697258][T12926] ath6kl: Failed to read usb control message: -71 [ 1043.703852][T12926] ath6kl: Unable to read the bmi data from the device: -71 [ 1043.738004][T12926] ath6kl: Unable to recv target info: -71 [ 1043.738277][ T30] audit: type=1326 audit(1751514318.321:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15587 comm="syz.7.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 1043.756806][T12926] ath6kl: Failed to init ath6kl core: -71 [ 1043.765367][ C0] vkms_vblank_simulate: vblank timer overrun [ 1043.787552][T12926] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1043.842125][T12926] usb 6-1: USB disconnect, device number 57 [ 1044.097382][ T30] audit: type=1326 audit(1751514318.321:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15587 comm="syz.7.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 1044.140701][ T30] audit: type=1326 audit(1751514318.321:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15587 comm="syz.7.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 1044.162811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1044.281686][ T30] audit: type=1326 audit(1751514318.321:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15587 comm="syz.7.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 1044.306518][ T30] audit: type=1326 audit(1751514318.321:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15587 comm="syz.7.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 1044.328088][ C0] vkms_vblank_simulate: vblank timer overrun [ 1044.554234][T15602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2590'. [ 1044.563587][T15602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2590'. [ 1044.938721][ T30] audit: type=1326 audit(1751514318.321:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15587 comm="syz.7.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 1045.037638][ T30] audit: type=1326 audit(1751514318.321:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15587 comm="syz.7.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 1045.105554][ T30] audit: type=1326 audit(1751514318.321:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15587 comm="syz.7.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 1045.127152][ C0] vkms_vblank_simulate: vblank timer overrun [ 1045.145163][ T30] audit: type=1326 audit(1751514318.321:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15587 comm="syz.7.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7ffc0000 [ 1046.917011][T15630] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.413065][T15630] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.452824][T15639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1048.429530][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1048.429549][ T30] audit: type=1326 audit(1751514323.791:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15636 comm="syz.5.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef98e929 code=0x7ffc0000 [ 1048.484737][T15630] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.505398][ T30] audit: type=1326 audit(1751514323.791:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15636 comm="syz.5.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef98e929 code=0x7ffc0000 [ 1049.539178][T15630] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.097789][T15630] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.137018][T15630] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.174212][T15630] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.219317][T15630] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.577529][ T30] audit: type=1326 audit(1751514326.051:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15648 comm="syz.7.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 1050.608767][ T30] audit: type=1326 audit(1751514326.051:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15648 comm="syz.7.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 1050.640551][ T30] audit: type=1326 audit(1751514326.051:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15648 comm="syz.7.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 1050.682295][ T30] audit: type=1326 audit(1751514326.051:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15648 comm="syz.7.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 1050.888406][ T30] audit: type=1326 audit(1751514326.051:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15648 comm="syz.7.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 1050.910295][ T30] audit: type=1326 audit(1751514326.051:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15648 comm="syz.7.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 1050.932271][ T30] audit: type=1326 audit(1751514326.051:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15648 comm="syz.7.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 1050.955522][ T30] audit: type=1326 audit(1751514326.051:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15648 comm="syz.7.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21878e929 code=0x7fc00000 [ 1051.105012][T15676] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1051.114298][T15676] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1052.041162][T15681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1053.859613][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 1053.859652][ T30] audit: type=1326 audit(1751514329.301:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15689 comm="syz.1.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x7ffc0000 [ 1054.578022][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.584547][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.797702][ T30] audit: type=1326 audit(1751514329.301:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15689 comm="syz.1.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993158e929 code=0x7ffc0000 [ 1055.827664][ T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1056.188403][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1056.465411][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 1056.476761][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.486540][ T10] usb 4-1: Product: syz [ 1056.491088][ T10] usb 4-1: Manufacturer: syz [ 1056.501099][ T10] usb 4-1: SerialNumber: syz [ 1056.711715][ T30] audit: type=1326 audit(1751514332.181:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15711 comm="syz.5.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cef98e929 code=0x7fc00000 [ 1056.987736][ T10] usb 4-1: config 0 descriptor?? [ 1056.997658][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 1057.517724][ T10] gspca_sn9c2028: read1 error -110 [ 1057.521817][T15702] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2619'. [ 1057.540700][ T10] gspca_sn9c2028: read1 error -32 [ 1057.546096][ T10] gspca_sn9c2028: read1 error -32 [ 1057.551805][ T10] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1057.567364][T15702] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2619'. [ 1057.737703][T15702] netlink: 'syz.3.2619': attribute type 5 has an invalid length. [ 1057.787378][T15702] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2619'. [ 1057.856206][ T10] usb 4-1: USB disconnect, device number 80 [ 1057.876354][T15729] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1062.943471][T15775] 9pnet_fd: Insufficient options for proto=fd [ 1063.615671][T15785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1063.696743][T15786] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1067.292108][T15816] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000083: 0000 [#1] SMP KASAN PTI [ 1067.304043][T15816] KASAN: null-ptr-deref in range [0x0000000000000418-0x000000000000041f] [ 1067.312475][T15816] CPU: 0 UID: 0 PID: 15816 Comm: syz.3.2649 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1067.324544][T15816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1067.334599][T15816] RIP: 0010:fib_lookup_good_nhc+0x85/0x3d0 [ 1067.340410][T15816] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 4b c2 34 f8 41 bc 18 04 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 2c c2 34 f8 4d 8b 24 24 e8 33 0c [ 1067.360019][T15816] RSP: 0018:ffffc9000f3ef2b0 EFLAGS: 00010202 [ 1067.366083][T15816] RAX: 0000000000000083 RBX: ffff88803399b020 RCX: 0000000000000002 [ 1067.374048][T15816] RDX: ffff88803f610000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1067.382012][T15816] RBP: ffff88803399b037 R08: ffffc9000f3ef52f R09: 0000000000000000 [ 1067.389980][T15816] R10: ffffc9000f3ef500 R11: fffff52001e7dea6 R12: 0000000000000418 [ 1067.397954][T15816] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff11006733606 [ 1067.405918][T15816] FS: 00007f626e45e6c0(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 1067.414840][T15816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1067.421414][T15816] CR2: 0000000000000000 CR3: 000000007d336000 CR4: 00000000003526f0 [ 1067.429385][T15816] Call Trace: [ 1067.432652][T15816] [ 1067.435575][T15816] nexthop_get_nhc_lookup+0x1af/0x400 [ 1067.440951][T15816] fib_table_lookup+0xf26/0x16e0 [ 1067.445886][T15816] __inet_dev_addr_type+0x2a2/0x4b0 [ 1067.451076][T15816] ? __inet_dev_addr_type+0x11f/0x4b0 [ 1067.456444][T15816] ? __pfx___inet_dev_addr_type+0x10/0x10 [ 1067.462161][T15816] ? rds_ib_laddr_check+0x246/0x470 [ 1067.467356][T15816] ? rds_ib_laddr_check+0x246/0x470 [ 1067.472566][T15816] ? __pfx_rds_ib_laddr_check+0x10/0x10 [ 1067.478119][T15816] rds_tcp_laddr_check+0x103/0x330 [ 1067.483246][T15816] rds_trans_get_preferred+0x23b/0x3c0 [ 1067.488706][T15816] __rds_conn_create+0xa41/0x2060 [ 1067.493727][T15816] ? __rds_conn_create+0x2e3/0x2060 [ 1067.498937][T15816] ? __pfx___rds_conn_create+0x10/0x10 [ 1067.504468][T15816] ? __raw_spin_lock_init+0x45/0x100 [ 1067.509755][T15816] rds_conn_create_outgoing+0x43/0x60 [ 1067.515130][T15816] rds_sendmsg+0x1001/0x1f00 [ 1067.519811][T15816] ? __pfx_rds_sendmsg+0x10/0x10 [ 1067.524747][T15816] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1067.531169][T15816] ? __lock_acquire+0xab9/0xd20 [ 1067.536036][T15816] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1067.541325][T15816] ? __pfx_rds_sendmsg+0x10/0x10 [ 1067.546263][T15816] __sock_sendmsg+0x21c/0x270 [ 1067.550943][T15816] ____sys_sendmsg+0x505/0x830 [ 1067.555706][T15816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1067.560992][T15816] ? import_iovec+0x74/0xa0 [ 1067.565498][T15816] ___sys_sendmsg+0x21f/0x2a0 [ 1067.570176][T15816] ? __pfx____sys_sendmsg+0x10/0x10 [ 1067.575379][T15816] ? __fget_files+0x2a/0x420 [ 1067.579987][T15816] ? __fget_files+0x3a0/0x420 [ 1067.584669][T15816] __x64_sys_sendmsg+0x19b/0x260 [ 1067.589615][T15816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1067.595100][T15816] ? do_syscall_64+0xbe/0x3b0 [ 1067.599793][T15816] do_syscall_64+0xfa/0x3b0 [ 1067.604316][T15816] ? lockdep_hardirqs_on+0x9c/0x150 [ 1067.609690][T15816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.615747][T15816] ? clear_bhb_loop+0x60/0xb0 [ 1067.620420][T15816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.626325][T15816] RIP: 0033:0x7f626d58e929 [ 1067.630756][T15816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1067.650361][T15816] RSP: 002b:00007f626e45e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1067.658772][T15816] RAX: ffffffffffffffda RBX: 00007f626d7b6080 RCX: 00007f626d58e929 [ 1067.666763][T15816] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000b [ 1067.674740][T15816] RBP: 00007f626d610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1067.682707][T15816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1067.690670][T15816] R13: 0000000000000000 R14: 00007f626d7b6080 R15: 00007ffca0ccfc88 [ 1067.698642][T15816] [ 1067.701659][T15816] Modules linked in: [ 1067.706070][T15816] ---[ end trace 0000000000000000 ]--- [ 1067.717460][T15816] RIP: 0010:fib_lookup_good_nhc+0x85/0x3d0 [ 1067.723617][T15816] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 4b c2 34 f8 41 bc 18 04 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 2c c2 34 f8 4d 8b 24 24 e8 33 0c [ 1067.743706][T15816] RSP: 0018:ffffc9000f3ef2b0 EFLAGS: 00010202 [ 1067.753137][T15816] RAX: 0000000000000083 RBX: ffff88803399b020 RCX: 0000000000000002 [ 1067.761310][T15816] RDX: ffff88803f610000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1067.769329][T15816] RBP: ffff88803399b037 R08: ffffc9000f3ef52f R09: 0000000000000000 [ 1067.777337][T15816] R10: ffffc9000f3ef500 R11: fffff52001e7dea6 R12: 0000000000000418 [ 1067.785329][T15816] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff11006733606 [ 1067.793363][T15816] FS: 00007f626e45e6c0(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 1067.802339][T15816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1067.831549][T15816] CR2: 00007f99317b7bac CR3: 000000007d336000 CR4: 00000000003526f0 [ 1067.839983][T15816] Kernel panic - not syncing: Fatal exception [ 1067.846307][T15816] Kernel Offset: disabled [ 1067.850620][T15816] Rebooting in 86400 seconds..