last executing test programs: 13.559528544s ago: executing program 0 (id=857): socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x104) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) socket(0x10, 0x3, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f00000006c0)=""/68, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000340)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'sched_switch\x00'}}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000102c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f00000001c0)='./file0\x00', 0x0, r5) mount$fuseblk(&(0x7f0000000300), &(0x7f0000000500)='./cgroup\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xe00}}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@obj_type={'obj_type', 0x3d, ',]\xd9'}}]}}) 12.716310418s ago: executing program 1 (id=858): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4868b81f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc0dd99ed1c3c609a49cc151", 0xc4}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e58721edf306c382ac611fe34479cb9e2585745ff3c61da74b06eb64f69a4e90d706178176dc533f123b66d04d51fb740c1efdf8db3b99ed18fb67c1f75ef7d55b3bb185f5f38665ea5e09", 0x60}, {&(0x7f0000000380)="3f82090ccda4f8ce1b08afd200c6075794cdd2e0021e32a0f6267447162a2085457cf687e74d142e85e9c4ac6eefcdaa493bcb54152b1339a38d3898707b77a9333cfb7bdc7c523ab4", 0x49}], 0x3}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df9305959f", 0x6d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x249}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, &(0x7f00000007c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x69, 0x1, 0x2}]}}}], 0x18}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 12.010889517s ago: executing program 1 (id=860): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x0, 0x200, 0xf, 0x8, 0x7f, 0x7, 0x9, {0x0, @in6={{0xa, 0x4e20, 0xffff8bba, @empty, 0x17d005ea}}, 0x0, 0x776e, 0x7, 0x10, 0xfffffff9}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000680)={r4, @in6={{0xa, 0x4e22, 0x10000000, @remote, 0x80000001}}, 0x9, 0x3, 0xa63, 0x0, 0x0, 0x6, 0x40}, &(0x7f0000000480)=0x9c) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc4", 0x94}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000000102010200000002a2000000020000040600074000020000240001801400018008000100"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x60008c0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b0001006272696467650000400002800800050000000000050029000100000006002700040000000c00220006000000000000000c0021"], 0x70}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) 11.847873774s ago: executing program 2 (id=861): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000003000/0x2000)=nil, &(0x7f0000779000/0x1000)=nil, 0x2000, 0x3, 0x2}) syz_clone3(&(0x7f0000000340)={0x48841200, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = creat(&(0x7f0000001180)='./file0\x00', 0x8) pread64(r2, 0x0, 0x0, 0x100) mmap$usbfs(&(0x7f000007d000/0x1000)=nil, 0x1000, 0x7, 0x9030, r2, 0x401) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000007) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x5, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce0109000000000705f71f22890b09050c02", @ANYRES64], 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x20) 11.266632123s ago: executing program 0 (id=862): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) listen(r0, 0xa9) listen(r0, 0x802) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0xb, 0x0, 0x1, @broadcast}, 0xfffffffffffffea4) sendmmsg(r4, &(0x7f0000002fc0)=[{{&(0x7f0000000340)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast]}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000200)="8eec24cc", 0x4}, {&(0x7f0000003040)="9cb8830aa363fc990fa88c7fa29c7ffe718951fa601467a559c4045861cc9ce7433a517023c59b06e85906f9b88ade9543b7eed50c9ff02ba3853b86af5f2ff9b1f6666054302b77daad8115325ef47f41eb8a19c6ee792caa023a5e3aea86443825036cbb4bc747215c3287163683f9b12c601e868d27db2122a1fb312dfde0d68123a79166a0de6a3f8e415a6c7c58679b0152af152557030d51db6e9e09d2288c1f40801236be94dd0926006c7260b521ff2e89de9693193d0783df9e6b7f7cec3a84", 0xc4}, {&(0x7f0000000480)="a318ec830aa19463826cbbf705492be1aecc79d864e72cb4b085a6240eb0ce4c5877ffd44333ef676edddd9f242f4ca9a980279e7f2403fdf8cfbde1b254110a5480aa25eb3d25bc99772c68ebda93d86950402c33228fe115053d06c7699b40cd71017c12938883a6096b8ab364ae1fe129ac33db145c31b3ed30c42bed5c5ea8c17f15fc31f4353c1d116dc781edb6fceeaf3aa88fb3c0c6cbf4ee85bac5c3afd966a6901b0ce153a0047b9445571a752465a7a58613e4948cb69f5c02dde5f2a9a97cc8756a0b94e5712480f0237ff2e14545599073fa1e6651a4a225e996e6c93ffc49cbc6e7597edd1e8c8ef0553483", 0xf2}, {&(0x7f0000000580)="f6d0ff9c752466c4323db8fca149f16966a5a28d678b6b8ea8d0940e85a1a1eb699f3b12fd2bb68b124a5b5618263b9b940a453999b316216c49e22e67b3a55e6e1cb4642ed38cf65751ba0f293201323fb34ba9d8d566b458cea45cfa6f7123120cd1d32337b6be7865a53c7898ac170804784326ee694918957d097cb90ca34204799c8d12ed575b2d8a436095d7", 0x8f}, {&(0x7f0000000640)="79b957cf4c844c44e864a28235a0537b6b7ca17a5b59be650806185f88ba3be0bb4902de0c48bf29322a310299328761d65817b00809806a24667fbe015f2891b6479025c547e9817f8272a71b051a70ca1ffb8acae884bdc067361c97b57c550f0006bf579e5aafc72c29802ed1556bb612fd0418a53bee1f4fe67a2e0ae427fb767622a67bf69132373e8dd30a22541fcf386a", 0x94}, {&(0x7f0000000700)="9257d847aba50da7b56783335a5d3ea249ce5508448759222132215abb5412529a46c304e9d74cf0d5bd93ce6e15e74ad4aa22ab2a84b048640a4fb72ab071e94a71bd497d7912b7768e3e8e1b3dffe9591371b651fd9444bcb4fdea4afc1a1765eef40951fc4092aa7357792c371da404d70a6bff15fb66408d48773981a1955698690ec76e72c51015e2a80a6636ec96ce59464493ab491cf5c08608a676e3fff7a32cad142dbb0b07e0c4a1636db7a04c4e13b39916bb5944a4785551b3a4472a410188a44dfa4f", 0xc9}, {&(0x7f0000000240)="68524cd53bbaae1771c426693c1cdaf5f44511631e5fa192d01149de37be571778985efc566344b48d1fb41dc8bb882c16", 0x31}, {&(0x7f0000000800)="db84dbe0ba5549752de804405ceab7ec4985381e8c043681a1d3cdd4d8fc8327382f9795048e5220097bb0fe7948e302a8ceca8aae79ce1def7132b73532472502d04b6b9d94ea56ebf272db22b858417d59f75eea69e3b2f3", 0x59}, {&(0x7f0000000880)="44a6504a45b02b98f2ed919e89f54eb1016c6963fa9356a7aeb06b5c460ea22a06238f6e5f14003d6c3154afb2ea661eddeeda6f39b393d980ea817e97e3391a5fc8df9b92d347f2f35c9bafc2601baff051be0c6009735d3850563235a795f3b2f8be9b41e3ade4eb", 0x69}], 0x9, &(0x7f00000009c0)=[{0x48, 0x1, 0xfffff000, "28f8c966cc4e638dc211b1de41d20e9f2b000724861eb9023c043b964890a32c0299abb490d6071f8119c921bde202b6ec4746d40f4cad"}, {0xa0, 0x10, 0xfff, "90a2d98d2b775732ef655918c3d6e3bdd71b78b4171e84d122f7b444b8b85df51866e8555db129d857390ed93fa7b63f75ba2adca2eb82eb9855a0a204f710991a76bce6c7834999189bb8701f4b0fb3d0aa500a0613be03a9bd97407efaa0401adadd1040ee6e631981bf2ac11c7ab9b902a290ce4ed724e1f7fc105293a2f70dd67155585fb238af0489"}, {0x38, 0x0, 0xffffff8a, "fb5512c55a79e301a68c21c12acf9cc2724c4eacf9e67c1e387e8ad5f5656ef490f6ba"}, {0xb8, 0x101, 0xbd0, "80388817a14a751dfde50d2660792003323a753eb759bea4b29454776a8d39b9156fd0969ccca7a18a7887a1ffa502b0531a5f7e2849bbbf67297e4ce2581aaa2f5bc82c18dcabbda86b98ced23ddb759290f729290db41b7c2e32f14d751bdb3566ac41646dd525b1a093ffd4060a055c331ac92e881de3287afa87c65ad8cb70d1732da73a79b26ce84b95e24aaa82c9b030bdfe726c182e80a9c952ea1667d2744845b94c1790"}], 0x1d8}}, {{&(0x7f0000000bc0)=@rxrpc=@in6={0x21, 0x5, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000c40)="8580262a4db2724cd2156d63b651fcc075c5d52a1048b727e5b93dfbd67289bbde4e962e089f9c68c3cfd5a8a723cf3a7eb42886eb1864d421a95f417bc82a7c743cf9387d1894fd771e86810ca597ae8e0e8cf34b4787067029287a9dc253bbac7977dcb427ec4c7a9d9c8f5d20df96a62012218cb58d0b0ef30a", 0x7b}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="cb3595e938a92213ff8c18db012ba3de89b61f488e896af148c877a1a3fa7043f123a74e5c27da1462e855cc70e56b72cf313a95162f8dc52a41fdf4e1d051f33c04b86ace8af5bbb965bf19e7aa3c945db48cbef209fcab75645d66c7cdd61a3bf6a35004ff2d387a726a602c5a75634a4fcc4303ad3caa9205d1a00fb85dfb546fb910e832d04192d0708f800d2ec3723203034da2841350ca295f9b15792dffe6eb1bd210876e7518470dd632b337ebd7e3c4913b13b9ae20130fe9bbd662536233d914cbeadd8384271c7b1e387e86534a8d640fa34aa9c7a4a96af810206cb666f171fb6885ce", 0xe9}, {&(0x7f0000001dc0)="2a139c606601fe9df01b8ca78125a9cd8349d94bf3aca34450d80ac16ef041612bed28d5a872159969723bde165d28ec37236caaf12fc0e0a2d7a50fe33aeeb4ade5908885d41fae715f3b6e4ed004dc3a1eec084cd91e6460ad2e9b1eb771a1806b1fc7f90c915f5f2b68397454d60a06ebfbaa88772bba39350df23a2c19dc0013e8d65f83807b3d57131e8fb4c86a93540763c860f50d333db410f46524775b9829e9b9ca", 0xa6}], 0x4, &(0x7f0000004300)=ANY=[@ANYBLOB="40000000000000000401000007000000bd7560c5f7a93c27191615eb635f0f00cb8e66ef2c8eb073378bea2faace61ebbedace2fda7f8468c1c7dbf091000000d80000000000000012010000010000001a965df4a79910d7eeda547f0ad39750fc008c7d1c6cf02a1f4520070a9323b12049c94228793d9a447f50e7f1b2f7457d0032758137f5932cbadf50a77ccce533b8d61b24d35304145634ac91fc1afcc7cf4bb6c070fb07c64f6bcc1249cd05ca88c32c166df88756df135cc028edc88db39152c1dd1444640af4386ca54c0dbcd774260e5bd0fa54eafd8ff5c908823f68c58c30d736a9ca8560a7bfb944a32755bbb1cebdd67157daf906d1dda3176c7507e4803950ffc7d79402f50b3cc003df51f2590600001010000000000000880000000200000036dc11f78dc2b2db098a71011eb700a6e79d7e737cb331362a3cc132b6f42cbbe9edaaf64b5b0543c4360e4ab819cb823d0169987cff4949bf13d9a9e91912ce08ad67cd8328a73e9b610d578358751b644dcab5ddb88169571e2c0b22dda3ab2096621050feabf0d1305734ac82ed0aff2c2146846bf2ccf57f1d132abb47b7c3b63cfd379ff28b829aaa7e39f60bbd477196f0602a680b283206d2be8344358b980c8ad3418195e8bce111f9b144796f0fd93b1f4426ed9057b7977cbd7d57ce2bc7b6873949f8cffd5d12285e3c436155c5ee7967faa254bcb520886191e9b20a8fa9667ca367f9ddae19b4433cde86ba460cc0ba583d0713b1b26756b96b5c2196c293da716775857280d09534b6d3ab30e70294aeae8592019dbc58ed0e9821ca97507cc71a0c8abf42aef44c3fda78a27261dfaf0ca78d960457eb56809232668d0fd897733378de126c8d94357a402142d6239dd4fb10c1d24f2d959d357a63b6193dc88234e6841c38b08d17e3ac8091bb1e6097ae4fa56d51f1165c6ec60711d7702eb136e6594ef32782624e20aae4974777e065d61ab452d14608bdd3efb35c50548850483a1165e235657f55db340310dbc61438a3d2c4f0f7c27aa2845b7215d853a86fa85e1349a2b10fa546eb89db3e5d4f04a9ef0f425b0413ac0c865f756fc1f2c088c76a55675b727637a6175f04f9460c396e42a10bca92180d07ead4ffbc47fb4c1e58b3647642d047a41d63d4c65272146749d918731e993861bf383e7834e639c05601fb146454d3985526ed1ff40691901f520bb8b5e25c22acb1de76e43c908c0f94ac595fe424c093578523d921ea141bba27cb118b37ae0589fea75e6d12e08a50d37c3ab3eedf694b73f3bef6183b10656c77048da2cbecc16225cdbc9a5d861d74545ed75f831120baedc50f90436805f58b0fb5ee2e0c3e861342732e9e0dc7edab558789cc6bdebaaca67d545cee098d55fbe1662b33af00acf66b6c4f55b2fbf6ee9ce808c665e2ced3c582d21a5b0065674ca37e8b7b67c0f8f983e3e51affa275aa9d6db0c88097f4f892464aaf8bf3f37f000ae799f4ecb5271e3320871b7bd96c532d4c11c28f14ff92c9dbd60a32a10a86cfde665ca4c3b0853cc6861d79c9e488b2c8badb9234e907c122e7eaae1ff3fd3a14f98de7fca21f45d35c309273fbef1ddd04efe58a95eff7e2c900087bf6a7b89a05bffaa94ba1bba94f70fb7642733942b43884395f0acf38775e6c9e044b3e5b31657f7d7d38c72f5ca546efa6ff04ab9ccd09b363c0f248dc9d0786c5656f5ba993ed66a421fcd1fd3b70cb31f8c551aa13822403467ecba2652226b83ea2093460ef922b998c0d7b2070017b72224a9346affc9bd8be416b0f69bdf6adc079f51718b42c1475f99dbd4e8612303ac5035ccd9713aed5b52c23bd76645dfabd0550d1df2e09f7287f140a48cfb3041ac35f082459f9e2241749961e5dc8c64324646affbc5ea5137e871ad8e7f610ab1cc4aca86d9f947f228a3026d66ae727377bcd53bdb0711789435d24569a159918f2d3f4361161e7df26c3aa8003d9f2ddc137e1d6b447ab463f43d9c29bc51c6ecb116dbdb3eb94c2c38f95afa33371812d6c6a722061d0348bc2c0729da16549505a850e0e57193b145a284cc9abb58912b24544efd086f536fdebab85f9c6e1cc6d0f50b83db7f9c84cfc03dffe4f505171ef36e4d0ce9e1fa0d61498a8ed7c271ee6ab67a9f27af225fda4475fe3acb9136b96f95fdbb5c06d411c79bee034e3dd27456f7c7bef28cd0475403d794c169e40c6b1bc9da2d77845ff31c9d878b2f74e348bf701b6d50febaefae7b41b70567490a94f941f0d383206668e2b25f23730818e790013e3ef667b65818c12ddbda62b5085af7ec500dac4431bafa7cf6fc6e503fb20a27c37dc256082ae8e05a7fb126a31e8035aff30fdad4feab46cd53673a08f1db579e14d5f927a2c78128ec1f2fa7a72b13b8d741d616ced4d14615671344249bae2aab6beadb19af3304dfda454e1b44acd8756186aa7b0a56e9d48353bd29a87fdb1f3936420fe86dc76b9b00c628d28f43f8f6f3d22b287d48ad1f9051d472d0bbea42153f4d953fca59c1e72970697c1e2ccfda8f2fbb1b56c762c88423b78bd4732a68cd5677422498149424079b65ff4fefc3b92e78cce3aa286447d5f02c5fd3183a13afd39684423e7c199732127d78b5ed1447bfaca6cf14d4feabba389cb2fe0c6e084433ea76444f78716be626a0197b62b85e9df75d1550005b2d23b3b6538be01210079af9ecfdd2c7b35adc50690297b450d972900f5f48e493299785df8c3f0744f1f6b919419b30da4d051c944703d97f025bbfb6187799dfde26263de0588a4681a671f06e34ccc8c18060151d347ca8cc726830f063bc0da0d78085af15c8471dc5073fc7ce719dacad7748f58808fc99749336c9ca02450b789ee32a2afa3dff43ffdf25ad551d3efcb3142c2b83d2aae81b3aa768bd21bf2ea2f95a95e7c0e63fbb066fd0f377275a8f3b89f53b634e2319a3a87f93942035bf8defb8ae239febd708756121c7ea29b12c92b8fb725574eef8a91b3136646257bd3bdb4f1340e3603eaac2aa07b11cae8a99fa714672065edd3c173773f8b67e042d42f789b881f3b82119da8894a803a97019779d3f7c7e329c7dee3504599740077de96b6630bbaaa4489ae566bcc7fc387ef1567864fed1f0d1ac7f19336cc2fc5fd5074aecbe64ce736f762fdbc26a6fab53073d8e04c230204ee49c3f42c61d382d5cf34c237ed40ef3f1bd93e75b5a9dc10f04612c3138c9a9d92bb1837060984f9a258593c2de70e5260de2ca74f9e90fcb7414ab03234a390337ea68adef45cac6e77ab26078b2ad5a0a348029a3c5903eaabab31ec3897963523693b57d89ed993aa9be1a79d14212e8192cb3501ad11b7c4cfb776a49e3f273d47bc66bd05e3b3caf36c6221984ad449122224c6b965a7a185628b2de8a35dc24371747e071c36b1a2af2f143a2ad73489641bd4bcbc46d52ba57f0070a06d877c04dcd2ffd0e1181aafa5c23a000a27d1f74545f2d8612355590994002d37219aad46a40b32530eea93e5a724d8295c95cd835a4be62fe97f20e6529908339d63f4e5a81bb5a92376b02a507d399c0ec98456dd19906cf935b72c7c8922d994373639a51e2b305cd7a6ddc7993e6de4845ca744a0751e5d54bbc3a6840b34c3410aacd743f8171f6050947e0130a83a7ff75e25bee97393fbba2d434c04e318aba3f3f6c0cbdf3a1fa8add45172610c97f894d7676870dcde087e47c265d9b76fc56ee4a58d05f6c1c2124cf5722ff36e897f1ffb2f91357d9de3edf4b33cbe78a8cb8242c7c8a252eb609b645a1906b5fb10c7353cfe674cdc36284d7d2d322c685fa5b7f6bb0446b2fc911cef43089a462f6c8924282f08a54058d6a0472fa3a4b5f93626e79726400634357b3e0209434ceeb87353b9fbbe55581e6364913cd7a2b2d2e66e4e24023184fa2353b4d8faf67c21efad7006a0770833ce7e3583cafb3474cff478b4dffcb52ae08da514fbbd28bb85b27f49f7b4f78e8bd2a3b1b322a4941523e943a1a2f99ee608f1e9e8046108b6d1f86b8452986d4af39d66e1cae0fb8e1d35cbe9fb1d8268de218e614dcf07b111f2fe33344771e42e7a439e0218d109c0ca180cef8c9a2343055fbf64fee15dcf4fa7f4f6b5dc28f0d57d4d7ddbcb6aa73c5c85290dc3955785c013e525862d7374d33f24f7329a7d82420dd4afa0c8e79949f37a4b4a7bfec0fe61690db76eba8bbbbd569bd1432c8bc50003344f3def1c9c6ac7d8a2aae95a52c76b6f5eddc86cfab26deed8923e81737ec2530aef25f5692bd29082f697eef558ac5e6f19bc9af4a402a22568abcfb8b4ccf64d0307c81fab62b2093ef6502cc810ed0dd5f349d2be73fce2620228525a9fc95b0f949c132f9ed8d0b8e76871340e6d8bc4ffa30929f33b02d2846ce6cf902017b1d948a895d4d0d10958bd21bcbee470678852edf765853f5bfd1558c7076bfa370ee999dcface86dec8b2d7ebe3a28def661585dcb37497cee684100b96a7f7f87c2fa03b72f8e5856370cddb733cc53efea2f789c97612a6ae0228b409a6f06568921d8113756994a6157bd6e43c1711a5c5a2c73b3cb024336e856c460e9abd647b4dcd094c0d01379b144420ff64e0736db97f58bc8cdf6962021e4aae3627801a585a4dd249f199f37d8445f790095771d29f53200daf28c35654fe63552a1d024cf1361f9168704515e720561a75330f6d60043953506e99f5e2c24714f46d198ad8f2a97821640c6b9f48573caec9905b6887bd3c3449244013e7e154fa1324a53baeee5e55865c66dd4bb20fc422e0e8209e079e503edb881df033b464e03c32e9ad9066cd01111015f0c2f0adb758e04dd4885a59827a66f99078b8b1d8aab628d6525aa0c0d06d156d9f5ec8f0e7b4f3d3e042d922c95198bb6ecbe274c98bf2a64cdff1c83d6476831157025867c552c98459970eeab47defb545d8dcbed29154d560f42a922dea6a286b690d0c704483e575fed6b4e89220eb6a0b1dcff2e38d1b52e3642a75e744d0dca99b545a7c52806cc773db015233e6c077a3a1654ceb9d9b0c702725bf61b5d10fb5d9bfa38c0763bef33546191c70940991d07a3538a6e33cabc06160512025dc6067ccf7c7ca3cb6a2d88a2ef2534761a432bb2df809b3d3233e7cec7257fb109408c8a8ddd3560a253f1033d398b5168d428c4bd2a84694a06ba4980bfd08a7aeb2faa6e690f368f5546cafdf4cd28449ca877f26a44042c1f3ae75671b3cb755e2d4aa63d824de0ca69ffd3584503711997d88c4a5ea9b974485107c2cd6533562c1f178e6a7dc0720046be17e4966ebf143bf214f63224ae5d597207da5acee619a8505eba446793a9ec4916220e799ae47e23c696bd86ea4905bcfe52a68ae1459bb59a0c200e68dde7f8e3436453bb9d66df1bb1412dceeb2e58e4bf8653c4568a0899cc2cf7af6936ccefc73368b03a6c9ef9a089a5908796619805107774b50d3f2c5854d9faddfab0f8848a5f7b9c11aca10bcd5aa205cd025825d9ed376d20e4d05b9dc9779937a50c7811813e1f9fec76f3cc64f3a263189ed0ee926fba2908425f9b42e954e66df20f175c1388aed4f5eb1577461f3b5071bfa9b14a5330e3c62d9896601069657bb164fdbfa1e8298c22dab3a7384ebaf44497318f9b91c8f62f529761f6175433090b68f684b6f81deb3a9ed1736f52dd12b00becc3f17477ba9e59db1df650fd82e7e56a58970d7608b6517e64f0b63ef2a11cf4da11bc37e438da1bf3c4cca9ac89f323907000838928a3d4a036291e5378eac010b9ff24b5323fd916ca19bd324d4230fd7bd76e990ec62a8e0fe9439668042fb472aae6498df4f429b9a52838c6fd7692edeee44a8ea771595237beb31e3fa5135139a36d72fb1ab728fb7e6fa003f38c2bdace9112a03bd39f43022d637f1d28486062a2d30fc965443a21ef79fb9a130db376862a4758ff69f8704fd52dd8d3052b88b14542fff8fe6084e7d9eced0d22b18f036fcc8e2ee79ed52cbab57a4a3fb56efcc52ea4ba75783655bd7b5a5458cc4d5f796941bb76d734bd83e698a0e32ff7446a8fd5ac71541005675cb454b65bc88bd6ad94c2747814c9083612a4fed48fb3f980bb7e48590b4273caa4dd566c0ad19dad127cfb878a0eefe01f42b7fe6af1599ab42b5bb0af00fcf303c9c6b1afe5488c79512236ce0e27e02979c6c7e7fade8b076a77a0c90a294cada274035636965c8b6d790f9339c13e909577e664c63ad5e9a5903b1e137e3b60ddb0aefbe0808a8983c0b50e83838644dbfd7b7c02f6b3e347f48f0760bd0628bc6f14dd0a5a102d7a7dec6bf2b6806471b1f748b312dc1103b82d97ab826098f40dd6ea870b17223d146458b062cd4ff846f461d654f36ea5a1b34014ad9b9ee104ff15062fdd819e7626749a72d17e878b7f159b3a54641b242303aa4126ae71c"], 0x1128}}], 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x49) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x2000004, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019380)=""/102400, 0x19000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000009640), 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x3044405, 0x0) 10.644689805s ago: executing program 1 (id=863): syz_open_dev$dri(&(0x7f0000000000), 0x3c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x205, 0x2, 0xb, 0x5, 0x7, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x55, 0x400, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@in6_addr=@private2, 0x86dd}}}]}, 0x38}}, 0x20044050) r4 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)='A', 0x1}) 10.070203174s ago: executing program 3 (id=865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0xbffd, 0xb9fe, 0x1a, "ff010400"}) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) dup3(r4, r3, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x12) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x4, {{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0xffffffffffffffff}, {0x0, 0x80000001, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x30, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xd30d, 0x8, 0x3, 0x1}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800c000}, 0x8010) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x1) preadv(r10, &(0x7f0000000040)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) 9.780552628s ago: executing program 0 (id=866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.507928696s ago: executing program 1 (id=867): open(0x0, 0x14507e, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @pic={0x7d, 0x9, 0xd, 0x6, 0xa, 0x78, 0xa9, 0xff, 0x0, 0xf, 0x1d, 0x5, 0x9, 0xff, 0x40, 0x3}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x100, 0x9f7c}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000002101020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000140003800800e34000000000080002400000000640000000180a0101000b000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000010114000000100001000000000000000000bf96000a"], 0xc8}}, 0x0) 8.923834602s ago: executing program 0 (id=868): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05000100060e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000", 0xb6}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000480)={0xe, 0x6, 0x1ff, 0x8, '\x00', '\x00', '\x00', 0x1, 0x4, 0x8, 0x7f, "68cc7554b16899953419da3fc622b08e"}) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 8.322968765s ago: executing program 3 (id=869): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000003b60000000e000000100000000fe9a90780200000000000000e5bd359fb375b1eca075987608b2d0c1f9a55c27911042f861b5b2017bd0c25890f08bbf04f0f2d9cbeb770f826379cc13ce214d7d13d3221eb00e759a9ccd02cd96307319bdeacfaa37f63850836620f6fa080cbd7bfeca0f016a7e8f05e7b3f71be94e1e563bd4bfebbd61be51bcb7b0ce532f97b66348665d117e43248e01287c322070a9"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}]}}}], 0x18}, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000740)="66baf80cb88b39a88eef66bafc0cb04dee66646769a13a00000000600f1c447c9966b813010f00d066b880000f00d80f32673e3ef38612f30f09c4c22d3a99d60000002636450fb2bf5b8b0000", 0x4d}], 0x1, 0xe, 0x0, 0x0) getuid() r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = dup(r4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000200)={'\x00', 0x9, 0xfffffffc, 0x9, 0x5, 0x4, 0x0}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ptrace$ARCH_GET_GS(0x1e, r7, &(0x7f0000000280), 0x1004) socket$nl_xfrm(0x10, 0x3, 0x6) setreuid(0xee00, 0x0) 7.531555243s ago: executing program 2 (id=870): r0 = io_uring_setup(0x3c8e, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x40000) 7.528964362s ago: executing program 4 (id=871): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 6.878287956s ago: executing program 3 (id=872): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000001b00), &(0x7f00000004c0)=0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @empty}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r7) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x0, 0x0, {0x3}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000040)={'netpci0\x00', 0x7}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 6.720134202s ago: executing program 4 (id=873): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000340)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x700, 0x10, 0x2, 0x7, {{0x15, 0x4, 0x0, 0x25, 0x54, 0x65, 0x0, 0x75, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x7, 0x6d, [@private=0xa010102]}, @timestamp_prespec={0x44, 0x1c, 0x5e, 0x3, 0x6, [{@remote, 0x80}, {@private=0xa010101}, {@empty, 0x9}]}, @ra={0x94, 0x4}, @generic={0x86, 0xa, "c6167575cdda1b8a"}, @generic={0x89, 0x8, "7d775ada1ca4"}, @ra={0x94, 0x4}, @end]}}}}}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r2, 0xe, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="02000000040000000800ca3a850000010000910000000030b0c2bbae29f179900776fa129bd573eb2087bfbd3b7b6d1a917b0000f868bb6431e3d9065ea2795789e6d8176debf55534c21457b1f434aa5a025e42abc922ad27aa428dceec5294fd063338274ba5fd839d70c0f91c375ac9fbf42417b0e0d34ded2d5cdeb0ee09dc581eea2e74426cd69cc31d4bc8cde6f773ad7d8656b27f31d8a33454d52a3abf0031f1c7e1a288202291d8a84cbee2e63b739708acd2b2dc3c8308ce6fbb807759fe2c9e0a4af8d38c9523fe18384a", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="06000000040000000400"/28], 0x50) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$VT_DISALLOCATE(r3, 0x5608) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=0x0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0}) accept4$nfc_llcp(r2, &(0x7f0000001a00), &(0x7f0000000800)=0x60, 0x80800) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000000000000009f1c12"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r7}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000007c0)={0x1, 0x401, 0xe, 0xbe, &(0x7f0000000600)=""/190, 0x78, &(0x7f00000006c0)=""/120, 0xcf, &(0x7f0000001900)=""/207}) close(r0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1}) write$UHID_INPUT(r0, &(0x7f00000008c0)={0x8, {"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", 0x1000}}, 0x1006) syz_emit_ethernet(0x7e, &(0x7f0000000480)={@link_local, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @local, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa013200}, {@remote}, {@broadcast}, {@dev}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000580)={"280826e4", 0x2, 0xf9, 0x8, 0x2, 0x4, "3230c285dbccabc0f901eef665e68b", "9f7c11d7", "d3502f48", "092f2d9f", ["c45725a41e5a2ec4da738374", "7bc04564664e113b2c0b4f93", "ea9202b0ee6cdef3314ad5b5", "d68895c6455ce181b73fa197"]}) pread64(r6, &(0x7f0000000040)=""/96, 0x60, 0x2) 6.496552998s ago: executing program 2 (id=874): poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x8004}], 0x1, 0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x5, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd500"], 0x0) 5.486813058s ago: executing program 3 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x5, 0x0) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) semop(r0, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_INFO(r0, 0x0, 0x3, &(0x7f0000000e80)=""/4096) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.30412554s ago: executing program 4 (id=876): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xb, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00', r4}, 0x18) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) lseek(r1, 0x1800000, 0x2) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f0000000100)={{0x0, 0x80}, {0x1, 0x2}, 0xbf00}) r7 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r7, &(0x7f0000000200)=[{&(0x7f0000000040)=""/210, 0xd2}], 0x1, 0xfffffff8, 0x0) lseek(r7, 0x8, 0x1) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x10, &(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYRESDEC=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000100000000009500000000000000308b020010000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x56, &(0x7f0000000440)=""/86, 0x41000, 0x25, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x40000006}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8002}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={r10, 0xa49a, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={r9, @in={{0x2, 0x4e22, @multicast2}}, 0x2, 0x6}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r10, @in={{0x2, 0x4e24, @loopback}}, 0x6, 0x2, 0xc, 0x1, 0xd, 0x7, 0x1}, 0x9c) 4.086263993s ago: executing program 4 (id=877): syz_open_dev$dri(&(0x7f0000000000), 0x3c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x205, 0x2, 0xb, 0x5, 0x7, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x55, 0x400, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@in6_addr=@private2, 0x86dd}}}]}, 0x38}}, 0x20044050) r4 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)='A', 0x1}) 3.929322095s ago: executing program 1 (id=878): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000003b60000000e000000100000000fe9a90780200000000000000e5bd359fb375b1eca075987608b2d0c1f9a55c27911042f861b5b2017bd0c25890f08bbf04f0f2d9cbeb770f826379cc13ce214d7d13d3221eb00e759a9ccd02cd96307319bdeacfaa37f63850836620f6fa080cbd7bfeca0f016a7e8f05e7b3f71be94e1e563bd4bfebbd61be51bcb7b0ce532f97b66348665d117e43248e01287c322070a9"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}]}}}], 0x18}, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000740)="66baf80cb88b39a88eef66bafc0cb04dee66646769a13a00000000600f1c447c9966b813010f00d066b880000f00d80f32673e3ef38612f30f09c4c22d3a99d60000002636450fb2bf5b8b0000", 0x4d}], 0x1, 0xe, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x99080, &(0x7f0000000500)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}, {}, {@max_read={'max_read', 0x3d, 0x8}}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0xed67}}, {@allow_other}, {@allow_other}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, 'GPL\x00'}}]}}) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = dup(r4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000200)={'\x00', 0x9, 0xfffffffc, 0x9, 0x5, 0x4, 0x0}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ptrace$ARCH_GET_GS(0x1e, r7, &(0x7f0000000280), 0x1004) socket$nl_xfrm(0x10, 0x3, 0x6) setreuid(0xee00, 0x0) 3.599283362s ago: executing program 0 (id=879): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x574}}, 0x20004010) r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x41ffffffffffc, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0x40045010, &(0x7f0000000300)=0x3) r2 = syz_open_dev$video(&(0x7f0000000380), 0xd, 0x400) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x59f6, 0xa, 0x3, 0x0, 0x9a}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000400)={0x1, @pix_mp={0x8, 0x401, 0x34524742, 0x9, 0x7, [{0x7306, 0x1000}, {0x2, 0x3}, {0x8, 0x39}, {0x1, 0xfffffff8}, {0x15, 0x3}, {0xa, 0x5}, {0x5c, 0xa100000}, {0x40009, 0x1}], 0x9, 0x5, 0x3, 0x2, 0x1}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100e8ffffff00000000100000002000018008000100", @ANYRES32=r7, @ANYBLOB="14000200776731"], 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000880)={'syztnl1\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x7, 0x700, 0x8, 0x1, {{0x1d, 0x4, 0x0, 0x2, 0x74, 0x67, 0x0, 0x4, 0x4, 0x0, @multicast1, @local, {[@timestamp={0x44, 0x14, 0x3e, 0x0, 0x9, [0x2, 0x9, 0x9, 0x2]}, @rr={0x7, 0x23, 0x8c, [@multicast2, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, @rand_addr=0x64010101, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x2e}]}, @timestamp_addr={0x44, 0x1c, 0x7d, 0x1, 0x0, [{@loopback}, {@dev={0xac, 0x14, 0x14, 0x5}, 0x2}, {@remote, 0x1ff}]}, @ssrr={0x89, 0xb, 0x53, [@multicast2, @dev={0xac, 0x14, 0x14, 0x30}]}, @end]}}}}}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000008c0)={0x0, @multicast1, @multicast1}, &(0x7f0000000900)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000bc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)=ANY=[@ANYBLOB="2c020000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fddbdf250b000000500001801400020064756d6d7930000000000000000000001400020069703665727370616e30000000000000140002006e69637666300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="440063521400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d36726567300000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="28000180140002006970365f767469300000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="2800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d726567310000000000000000004c000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e300000000000000000000000140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="540001800800030000000000140002006970366772657461703000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1400020067726530000000000000000000000000080003000200000008000100", @ANYRES32=r8, @ANYBLOB="400001801400020069705f767469300000000000000000001400020074756e6c30000000000000000000000014000200767863616e310000000000000000000014000180080003000200000008000300000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="3400018008000300020000000800030003000000080003000200000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000"], 0x22c}, 0x1, 0x0, 0x0, 0x20047}, 0x4040) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x700, 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x41, &(0x7f0000000040)={&(0x7f0000000c00)=@deltfilter={0x0, 0x2d, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x8, 0x9}, {0x7, 0xa}, {0x3, 0x3}}, [@filter_kind_options=@f_u32={{}, {0x0, 0x2, [@TCA_U32_FLAGS={0x0, 0xb, 0x7}, @TCA_U32_HASH={0x0, 0x2, 0x1}, @TCA_U32_MARK={0x0, 0xa, {0x3, 0x9f9}}, @TCA_U32_FLAGS={0x0, 0xb, 0x8}, @TCA_U32_CLASSID={0x0, 0x1, {0x0, 0x3}}]}}, @filter_kind_options=@f_flower={{}, {0x0, 0x2, [@TCA_FLOWER_KEY_CT_ZONE_MASK={0x0, 0x5e, 0x3}, @TCA_FLOWER_KEY_ARP_SIP={0x0, 0x39, @empty}, @TCA_FLOWER_KEY_ARP_THA_MASK={0x0, 0x42, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x0, 0xf, [0xff000000, 0xff, 0x0, 0xff]}]}}, @filter_kind_options=@f_route={{}, {0x0, 0x2, [@TCA_ROUTE4_POLICE={0x0, 0x5, [@TCA_POLICE_RATE64={0x0, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x4}, @TCA_POLICE_RATE={0x0, 0x2, [0xe1a5, 0x10, 0x5, 0xffff0000, 0x0, 0x7, 0x8, 0x28, 0xa, 0x100, 0x80000001, 0x80000001, 0x2, 0xa5c, 0x9, 0x5, 0xfffffff1, 0x9, 0x10001, 0xd4, 0xe, 0x81, 0x4b81, 0x10, 0x9, 0x7f, 0x8001, 0x5, 0x10000, 0x300000, 0x5, 0x1, 0x10, 0x0, 0x2, 0xc, 0x9, 0x5, 0x2ba1, 0x9, 0xa, 0x5, 0x3ff, 0x40100000, 0x0, 0x1, 0x8b8, 0xb34, 0x0, 0x7fffffff, 0x8, 0x3, 0xfffffffd, 0x5, 0x1, 0x4, 0x4, 0x9, 0x401, 0x2, 0x8000, 0x6, 0x38e, 0x6, 0x9, 0x80, 0xe0000000, 0x2, 0x53, 0x80000001, 0x7, 0x88c9, 0x2, 0x3, 0x9, 0x6, 0x994, 0x7, 0xbe15, 0xff, 0x2, 0x4, 0x1684a1ea, 0x1f5d, 0x1000, 0xa, 0xffff, 0x0, 0xa7b9, 0x0, 0x6, 0x9, 0x9, 0xaa9, 0x7fffffff, 0x80000000, 0x1, 0xffffffe7, 0xf0, 0x100, 0x7, 0x7, 0x30, 0xfff, 0xbcd, 0x7, 0x3, 0x800, 0x86, 0x7, 0x0, 0x9, 0xfffffe01, 0x0, 0xc, 0x7, 0x5, 0x42, 0xc0, 0x6, 0x6, 0x80000000, 0x3, 0x8001, 0x1, 0x10, 0x100, 0x92, 0x6, 0x5, 0x1000, 0x5, 0x5993, 0x1b, 0x7, 0xfffff8e2, 0x2, 0x16f, 0x5, 0x6, 0x7, 0x8001, 0x4, 0x13, 0x40, 0x9, 0x4, 0x6, 0x9, 0x9, 0x7, 0x5, 0x10, 0x9, 0x9, 0x6, 0xa, 0x6, 0x5, 0xa17, 0x0, 0x3, 0x1, 0x5, 0x9, 0x10001, 0x80000000, 0x1000, 0xe, 0x2, 0x9, 0x1a, 0xfff, 0x9, 0x3, 0x5, 0x2, 0x80000000, 0x401, 0x4, 0x6, 0x6, 0x0, 0x4, 0x5, 0xfe, 0xffffffce, 0x1, 0x8, 0x6, 0xb, 0x10001, 0x1, 0xfffffffc, 0x8001, 0xc550, 0xe7, 0x8000, 0x8, 0x9, 0x6, 0x0, 0xdcf6ed3, 0x6, 0xb91b, 0xb, 0x9, 0x8, 0x1, 0x4, 0xed, 0x10, 0x305e, 0x3, 0x401, 0x93, 0x6, 0x2, 0x5, 0x3ff, 0x0, 0x6, 0x0, 0xed3, 0x1, 0xfff, 0x5, 0x1, 0x3b, 0xfffffc01, 0x2, 0x80000000, 0x4, 0x5, 0x6, 0xffffffff, 0x4, 0x5, 0x5, 0x6, 0x8, 0x4, 0x2494, 0xaf, 0xdf, 0x3, 0x8001, 0x7fffffff, 0x0, 0x239, 0x7fffffff, 0x40, 0x1, 0x100, 0x3ff, 0x6]}, @TCA_POLICE_TBF={0x0, 0x1, {0x81, 0x20000000, 0x9, 0x591f, 0x7, {0x3, 0x2, 0xfff, 0x3, 0xa1c9, 0x100}, {0x3, 0x0, 0x9, 0x182f, 0xff, 0x3}, 0x3, 0x9, 0x7}}]}, @TCA_ROUTE4_FROM={0x0, 0x3, 0xaf}, @TCA_ROUTE4_CLASSID={0x0, 0x1, {0xe, 0xa}}]}}, @TCA_RATE={0x0, 0x5, {0x40, 0x4}}, @TCA_RATE={0x0, 0x5, {0x3, 0x4}}]}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x20008041) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x24}, 0x94) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='qnx4\x00', 0x3000080, &(0x7f0000000280)=',/.\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xab49}, {0x6}]}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[], 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) 2.968343019s ago: executing program 2 (id=880): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000140)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) socket(0x28, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x3, 0x3c) r7 = syz_open_procfs(0x0, &(0x7f0000019140)='net/udp\x00') socket$inet(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r5, 0x5}, 0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) 2.900282013s ago: executing program 4 (id=881): clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) io_pgetevents(0x0, 0x3, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000001c0)={r0, r1+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x3]}, 0x8}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8000, 0x1f7) r3 = fanotify_init(0x200, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getpid() fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(r4, &(0x7f0000000400)='ns\x00') setresuid(0x0, 0xee01, 0xee00) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) readlinkat(r6, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) fanotify_mark(r3, 0x201, 0x4000003e, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) poll(&(0x7f0000002bc0)=[{r6, 0x200}, {r2, 0x8200}], 0x2, 0xfffff001) chdir(&(0x7f0000000dc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000080)={0x9, {"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", 0x8f7}}, 0x1006) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, r3, {0x3, 0x5}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) 1.812246136s ago: executing program 0 (id=882): socket(0x2a, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0xf, 0x4, "c9951377"}, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x18, &(0x7f0000000100)=0x1e79, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x8200, 0x0) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYRES64=r5, @ANYRESHEX=r5], 0x20) 1.798791964s ago: executing program 1 (id=883): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x81000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x33}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0x15, 0x20}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000006180)={0x2020}, 0x2020) 1.525970399s ago: executing program 2 (id=884): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0xb, 0x0, @void}, 0x10) (fail_nth: 1) 1.376218564s ago: executing program 3 (id=885): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000040), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x900000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)=0x8) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) 1.083423986s ago: executing program 2 (id=886): socket(0x2a, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0xf, 0x4, "c9951377"}, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x18, &(0x7f0000000100)=0x1e79, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x8200, 0x0) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYRES64=r5, @ANYRESHEX=r5], 0x20) 1.040448387s ago: executing program 4 (id=887): socket$netlink(0x10, 0x3, 0xe) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}}, 0x800) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000300), 0x6, 0x0) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f00000004c0)={0x0, 0xfffffe01, 0x80, '\x00', &(0x7f0000000180)=0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000004c0), 0x0, 0x40000000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, 0x0, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000500)={0x48}) syz_open_dev$radio(0x0, 0x2, 0x2) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) syz_open_procfs(r4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES32=r1], 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) recvmmsg(r8, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x20, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001700)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000340)=""/232, 0xe8}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000002e00)=""/4086, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f0000000440)=""/122, 0x71}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0xc}], 0x8, 0x40000020, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'pcl726\x00', [0x1d2, 0x80008000, 0x1, 0xa, 0x200, 0x0, 0xfffffff9, 0x49, 0x1000, 0x1, 0xb687, 0x1, 0x6, 0x1, 0x1, 0x6, 0xffffffa7, 0x9, 0xffffffff, 0x5, 0x3ff, 0x10001, 0x7ff, 0xe2df, 0x9, 0xfffffffe, 0x4, 0x3, 0x7, 0xc, 0x5]}) 0s ago: executing program 3 (id=888): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000001b00), &(0x7f00000004c0)=0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @empty}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r7) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x0, 0x0, {0x3}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000040)={'netpci0\x00', 0x7}) r9 = socket$pppl2tp(0x18, 0x1, 0x1) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) kernel console output (not intermixed with test programs): SSID 50:50:50:50:50:50 [ 97.508457][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.001811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.002074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.104286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.237608][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.275893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.285228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.296165][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.392880][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.421592][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.432209][ T5989] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2'. [ 98.783166][ T5996] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12'. [ 98.981107][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 99.046261][ T6001] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.257001][ T6022] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.316132][ T6024] netlink: 152 bytes leftover after parsing attributes in process `syz.2.17'. [ 101.386639][ T6025] can0: slcan on ttyS3. [ 102.418157][ T6036] netlink: 68 bytes leftover after parsing attributes in process `syz.1.19'. [ 102.887464][ T6035] ======================================================= [ 102.887464][ T6035] WARNING: The mand mount option has been deprecated and [ 102.887464][ T6035] and is ignored by this kernel. Remove the mand [ 102.887464][ T6035] option from the mount to silence this warning. [ 102.887464][ T6035] ======================================================= [ 103.011165][ T6035] fuseblk: Bad value for 'fd' [ 103.577964][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 104.129576][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 104.387399][ T6051] netlink: 68 bytes leftover after parsing attributes in process `syz.0.22'. [ 104.550786][ T6065] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.090766][ T6068] fuseblk: Bad value for 'fd' [ 105.226238][ T6027] can0 (unregistered): slcan off ttyS3. [ 108.615286][ T6110] syz.3.34 uses obsolete (PF_INET,SOCK_PACKET) [ 108.847144][ T6113] netlink: 152 bytes leftover after parsing attributes in process `syz.2.36'. [ 110.267524][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 110.452507][ T6137] blktrace: Concurrent blktraces are not allowed on nbd2 [ 113.685434][ T5914] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.767952][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 113.905258][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 113.973704][ T5914] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 113.986143][ T5914] usb 5-1: config 0 has no interface number 0 [ 113.999516][ T5914] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 114.014519][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.028600][ T5914] usb 5-1: Product: syz [ 114.037266][ T5914] usb 5-1: Manufacturer: syz [ 114.047182][ T5914] usb 5-1: SerialNumber: syz [ 114.069416][ T5914] usb 5-1: config 0 descriptor?? [ 114.305218][ T5914] peak_usb 5-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 114.656174][ T6165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.759378][ T6165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.619891][ T6165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.629302][ T6165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.641728][ T5914] peak_usb 5-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 115.650187][ T5914] peak_usb 5-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 115.707788][ T6193] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4 [ 115.714128][ T6193] [U] [“)ÎU°}¸Ç”ÍÚJϬ}N°SEF*œ £‡¿ßÅNZÍÀF[F_H®¦'ª„W"ÓXÅ~¶ÎÏÚ;VA˜)^ˆ`Û1C':ZÂÞ÷ÃÃÚÞFOBÞ *?ÛŸC‹Z˜S¯Ý<8ZNÑ·š Ñ˜¾ÔEY TT<$CÐR¿Æ–»/VG¿Ðà {Y«~Y5\—;ƃZ–ÓDX ŸƒYÖA€Ì"XI®F¦{‚Å`A$í¡55?­É×S«AÃM¢ÅO‰¤«ÝÍ»*K€¶ [ 115.827161][ T5914] peak_usb 5-1:0.56: probe with driver peak_usb failed with error -71 [ 115.849991][ T5914] usb 5-1: USB disconnect, device number 2 [ 118.384143][ T6232] netlink: 152 bytes leftover after parsing attributes in process `syz.0.67'. [ 118.494648][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'. [ 120.407392][ T6249] FAULT_INJECTION: forcing a failure. [ 120.407392][ T6249] name failslab, interval 1, probability 0, space 0, times 1 [ 120.472686][ T6249] CPU: 1 UID: 0 PID: 6249 Comm: syz.2.72 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 120.472715][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.472730][ T6249] Call Trace: [ 120.472739][ T6249] [ 120.472746][ T6249] dump_stack_lvl+0x189/0x250 [ 120.472773][ T6249] ? irqentry_exit+0x74/0x90 [ 120.472813][ T6249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.472857][ T6249] should_fail_ex+0x414/0x560 [ 120.472892][ T6249] should_failslab+0xa8/0x100 [ 120.472924][ T6249] __kmalloc_noprof+0xcb/0x4f0 [ 120.472944][ T6249] ? kfree+0x4d/0x440 [ 120.472960][ T6249] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 120.472980][ T6249] tomoyo_realpath_from_path+0xe3/0x5d0 [ 120.472996][ T6249] ? tomoyo_domain+0xda/0x130 [ 120.473015][ T6249] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 120.473036][ T6249] tomoyo_path_number_perm+0x1e8/0x5a0 [ 120.473059][ T6249] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 120.473093][ T6249] ? __lock_acquire+0xab9/0xd20 [ 120.473129][ T6249] ? __fget_files+0x2a/0x420 [ 120.473145][ T6249] ? __fget_files+0x2a/0x420 [ 120.473157][ T6249] ? __fget_files+0x3a0/0x420 [ 120.473168][ T6249] ? __fget_files+0x2a/0x420 [ 120.473184][ T6249] security_file_ioctl+0xcb/0x2d0 [ 120.473209][ T6249] __se_sys_ioctl+0x47/0x170 [ 120.473230][ T6249] do_syscall_64+0xfa/0x3b0 [ 120.473243][ T6249] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.473271][ T6249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.473302][ T6249] ? clear_bhb_loop+0x60/0xb0 [ 120.473323][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.473336][ T6249] RIP: 0033:0x7f391ef8e929 [ 120.473354][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.473368][ T6249] RSP: 002b:00007f391fdc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.473384][ T6249] RAX: ffffffffffffffda RBX: 00007f391f1b6080 RCX: 00007f391ef8e929 [ 120.473394][ T6249] RDX: 0000200000000080 RSI: 000000004040534e RDI: 0000000000000007 [ 120.473404][ T6249] RBP: 00007f391fdc3090 R08: 0000000000000000 R09: 0000000000000000 [ 120.473412][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.473420][ T6249] R13: 0000000000000001 R14: 00007f391f1b6080 R15: 00007ffdd393c748 [ 120.473443][ T6249] [ 120.701544][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.862076][ T6249] ERROR: Out of memory at tomoyo_realpath_from_path. [ 121.452196][ T5937] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.705101][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 121.714165][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 121.724865][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 121.738157][ T5937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 121.768881][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 121.792591][ T5937] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 121.816864][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.836454][ T5937] usb 5-1: Product: syz [ 121.840696][ T5937] usb 5-1: Manufacturer: syz [ 121.849192][ T5937] usb 5-1: SerialNumber: syz [ 121.859493][ T5937] usb 5-1: config 0 descriptor?? [ 121.873974][ T5937] redrat3 5-1:0.0: Couldn't find all endpoints [ 123.300030][ T1208] usb 5-1: USB disconnect, device number 3 [ 124.426474][ T1208] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.950427][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'. [ 125.117015][ T1208] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.156327][ T1208] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.180106][ T1208] usb 3-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb [ 125.195128][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.197252][ T6296] netlink: 152 bytes leftover after parsing attributes in process `syz.4.85'. [ 125.203256][ T1208] usb 3-1: Product: syz [ 125.203296][ T1208] usb 3-1: Manufacturer: syz [ 125.203312][ T1208] usb 3-1: SerialNumber: syz [ 125.222074][ T1208] usb 3-1: config 0 descriptor?? [ 127.317559][ T6279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.355621][ T6279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.369802][ T1208] snd_usb_podhd 3-1:0.0: Line 6 POD HDDESKTOP found [ 127.566800][ T1208] snd_usb_podhd 3-1:0.0: endpoint not available, using fallback values [ 127.628253][ T1208] snd_usb_podhd 3-1:0.0: invalid control EP [ 127.640906][ T1208] snd_usb_podhd 3-1:0.0: cannot start listening: -22 [ 127.653918][ T1208] snd_usb_podhd 3-1:0.0: Line 6 POD HDDESKTOP now disconnected [ 127.693611][ T1208] snd_usb_podhd 3-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 128.675534][ T6323] vivid-003: ================= START STATUS ================= [ 128.684132][ T6323] vivid-003: Radio HW Seek Mode: Bounded [ 128.690671][ T6323] vivid-003: Radio Programmable HW Seek: false [ 128.707553][ T6323] vivid-003: RDS Rx I/O Mode: Block I/O [ 128.713872][ T6323] vivid-003: Generate RBDS Instead of RDS: false [ 128.734072][ T6323] vivid-003: RDS Reception: true [ 128.740270][ T6323] vivid-003: RDS Program Type: 0 inactive [ 128.746792][ T6323] vivid-003: RDS PS Name: inactive [ 128.752319][ T6323] vivid-003: RDS Radio Text: inactive [ 128.760201][ T6323] vivid-003: RDS Traffic Announcement: false inactive [ 128.768757][ T6323] vivid-003: RDS Traffic Program: false inactive [ 128.776875][ T6323] vivid-003: RDS Music: false inactive [ 128.976499][ T6323] vivid-003: ================== END STATUS ================== [ 129.821003][ T1217] usb 3-1: USB disconnect, device number 2 [ 129.932596][ T6323] netlink: 92 bytes leftover after parsing attributes in process `syz.4.92'. [ 132.115257][ T6352] netlink: 152 bytes leftover after parsing attributes in process `syz.3.102'. [ 132.818814][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.825449][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.547933][ T6370] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.525265][ T6390] overlayfs: missing 'lowerdir' [ 137.332657][ T1208] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 137.936029][ T1208] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.157624][ T1208] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.184441][ T1208] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.223322][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.232828][ T1208] usb 3-1: Product: syz [ 138.237411][ T1208] usb 3-1: Manufacturer: syz [ 138.242112][ T1208] usb 3-1: SerialNumber: syz [ 139.050908][ T1208] usb 3-1: 0:2 : does not exist [ 139.088400][ T1208] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 139.351500][ T1208] usb 3-1: USB disconnect, device number 3 [ 139.396370][ T6419] netlink: 152 bytes leftover after parsing attributes in process `syz.1.118'. [ 139.447575][ T6409] syz.3.115 (6409) used greatest stack depth: 17656 bytes left [ 142.004101][ T6444] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[6444] [ 142.539673][ T6447] Zero length message leads to an empty skb [ 146.324747][ T6493] Falling back ldisc for ptm0. [ 147.695300][ T1208] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 147.805137][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 147.993217][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 148.008060][ T24] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 148.252681][ T24] usb 4-1: config 0 has no interface number 0 [ 148.709109][ T24] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 149.020224][ T1208] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 149.036773][ T1208] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.505174][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.515063][ T24] usb 4-1: Product: syz [ 149.519272][ T24] usb 4-1: Manufacturer: syz [ 149.523888][ T24] usb 4-1: SerialNumber: syz [ 149.535704][ T24] usb 4-1: config 0 descriptor?? [ 149.665025][ T1208] usb 5-1: config 0 has no interface number 0 [ 149.698299][ T1208] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 149.745365][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.795049][ T1208] usb 5-1: Product: syz [ 149.818084][ T1208] usb 5-1: Manufacturer: syz [ 149.832958][ T1208] usb 5-1: SerialNumber: syz [ 149.850706][ T1208] usb 5-1: config 0 descriptor?? [ 149.862061][ T24] peak_usb 4-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 149.868924][ T1208] hub 5-1:0.31: bad descriptor, ignoring hub [ 149.894223][ T1208] hub 5-1:0.31: probe with driver hub failed with error -5 [ 149.928273][ T1208] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 150.768787][ T1208] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 150.800587][ T1208] usb 5-1: Failed to create links for entity 6 [ 150.825261][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.830575][ T1208] usb 5-1: Failed to register entities (-22). [ 150.878973][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.976319][ T1208] usb 5-1: USB disconnect, device number 4 [ 150.999271][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.052842][ T5892] udevd[5892]: setting owner of /dev/bus/usb/005/004 to uid=0, gid=0 failed: No such file or directory [ 151.076285][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.153425][ T24] peak_usb 4-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 151.227736][ T24] peak_usb 4-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 151.469797][ T24] peak_usb 4-1:0.56: probe with driver peak_usb failed with error -71 [ 151.499744][ T24] usb 4-1: USB disconnect, device number 2 [ 152.076481][ T5937] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 152.247368][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 152.266973][ T5937] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.364820][ T5937] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 152.415109][ T5937] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 152.423876][ T5937] usb 3-1: config 4 has no interface number 0 [ 152.474941][ T5937] usb 3-1: string descriptor 0 read error: -22 [ 152.495489][ T5937] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 152.528012][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.571100][ T5937] usb 3-1: Found UVC 0.02 device (04f2:b746) [ 152.593235][ T5937] usb 3-1: No valid video chain found. [ 152.793631][ T5937] usb 3-1: USB disconnect, device number 4 [ 154.734425][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.161'. [ 157.013224][ T6611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.166'. [ 157.287518][ T6611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.166'. [ 157.347663][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 158.084336][ T30] audit: type=1800 audit(1751896646.821:2): pid=6633 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.174" name="file1" dev="tmpfs" ino=227 res=0 errno=0 [ 160.323093][ T6661] can0: slcan on ttyS3. [ 163.747660][ T6660] can0 (unregistered): slcan off ttyS3. [ 163.835266][ T5914] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 164.645461][ T5914] usb 2-1: config 65 has an invalid interface number: 95 but max is 0 [ 164.672396][ T5914] usb 2-1: config 65 has no interface number 0 [ 164.691135][ T5914] usb 2-1: string descriptor 0 read error: -22 [ 164.697953][ T5914] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 164.707385][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.761439][ T5914] usbtest 2-1:65.95: Linux gadget zero [ 164.806202][ T5914] usbtest 2-1:65.95: low-speed {control in/out} tests (+alt) [ 164.945104][ T5872] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 165.145081][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 165.157407][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.341382][ T6695] block nbd1: Device being setup by another task [ 165.349056][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.215234][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 166.221908][ T5872] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 166.232808][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.242702][ T6692] block nbd1: NBD_DISCONNECT [ 166.256026][ T5872] usb 1-1: config 0 descriptor?? [ 166.281652][ T6692] block nbd1: Send disconnect failed -22 [ 166.567042][ T6685] block nbd1: Disconnected due to user request. [ 166.642311][ T6685] block nbd1: shutting down sockets [ 166.736465][ T24] usb 2-1: USB disconnect, device number 2 [ 166.809033][ T6705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.012324][ T6724] netlink: 152 bytes leftover after parsing attributes in process `syz.1.193'. [ 168.032228][ T5872] usbhid 1-1:0.0: can't add hid device: -71 [ 168.060964][ T5872] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 168.155966][ T5872] usb 1-1: USB disconnect, device number 2 [ 170.965077][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 172.473058][ T6799] FAULT_INJECTION: forcing a failure. [ 172.473058][ T6799] name failslab, interval 1, probability 0, space 0, times 0 [ 172.491342][ T6799] CPU: 0 UID: 0 PID: 6799 Comm: syz.1.212 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 172.491371][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.491383][ T6799] Call Trace: [ 172.491392][ T6799] [ 172.491401][ T6799] dump_stack_lvl+0x189/0x250 [ 172.491430][ T6799] ? __pfx____ratelimit+0x10/0x10 [ 172.491461][ T6799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.491484][ T6799] ? __pfx__printk+0x10/0x10 [ 172.491517][ T6799] ? __pfx___might_resched+0x10/0x10 [ 172.491545][ T6799] should_fail_ex+0x414/0x560 [ 172.491580][ T6799] should_failslab+0xa8/0x100 [ 172.491613][ T6799] __kmalloc_cache_noprof+0x70/0x3d0 [ 172.491643][ T6799] ? sctp_association_new+0x89/0x25f0 [ 172.491687][ T6799] sctp_association_new+0x89/0x25f0 [ 172.491716][ T6799] ? sctp_has_association+0x1cd/0x1f0 [ 172.491742][ T6799] ? sctp_has_association+0x2f/0x1f0 [ 172.491784][ T6799] ? __ipv6_addr_type+0x247/0x2f0 [ 172.491818][ T6799] sctp_connect_new_asoc+0x2c5/0x690 [ 172.491847][ T6799] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 172.491874][ T6799] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 172.491899][ T6799] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 172.491921][ T6799] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 172.491947][ T6799] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 172.491964][ T6799] ? security_sctp_bind_connect+0x7e/0x2e0 [ 172.491997][ T6799] sctp_sendmsg+0x155c/0x2810 [ 172.492034][ T6799] ? __pfx_sctp_sendmsg+0x10/0x10 [ 172.492058][ T6799] ? __lock_acquire+0xab9/0xd20 [ 172.492095][ T6799] ? sock_rps_record_flow+0x19/0x410 [ 172.492159][ T6799] ? inet_sendmsg+0x2f4/0x370 [ 172.492177][ T6799] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.492209][ T6799] __sock_sendmsg+0x19c/0x270 [ 172.492243][ T6799] __sys_sendto+0x3bd/0x520 [ 172.492286][ T6799] ? __pfx___sys_sendto+0x10/0x10 [ 172.492305][ T6799] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 172.492339][ T6799] ? __fget_files+0x3a0/0x420 [ 172.492370][ T6799] ? ksys_write+0x22a/0x250 [ 172.492401][ T6799] ? __pfx_ksys_write+0x10/0x10 [ 172.492426][ T6799] ? rcu_is_watching+0x15/0xb0 [ 172.492454][ T6799] __x64_sys_sendto+0xde/0x100 [ 172.492481][ T6799] do_syscall_64+0xfa/0x3b0 [ 172.492499][ T6799] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.492528][ T6799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.492548][ T6799] ? clear_bhb_loop+0x60/0xb0 [ 172.492573][ T6799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.492593][ T6799] RIP: 0033:0x7f413658e929 [ 172.492612][ T6799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.492628][ T6799] RSP: 002b:00007f413740c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 172.492650][ T6799] RAX: ffffffffffffffda RBX: 00007f41367b5fa0 RCX: 00007f413658e929 [ 172.492664][ T6799] RDX: 0000000000000001 RSI: 0000200000847fff RDI: 0000000000000003 [ 172.492677][ T6799] RBP: 00007f413740c090 R08: 000020000005ffe4 R09: 000000000000001c [ 172.492690][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.492702][ T6799] R13: 0000000000000000 R14: 00007f41367b5fa0 R15: 00007ffe9ff2ea18 [ 172.492734][ T6799] [ 172.963880][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 173.634370][ T6810] FAULT_INJECTION: forcing a failure. [ 173.634370][ T6810] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 173.647828][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.2.217 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 173.647846][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.647855][ T6810] Call Trace: [ 173.647861][ T6810] [ 173.647867][ T6810] dump_stack_lvl+0x189/0x250 [ 173.647888][ T6810] ? __pfx____ratelimit+0x10/0x10 [ 173.647911][ T6810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.647927][ T6810] ? __pfx__printk+0x10/0x10 [ 173.647946][ T6810] ? __might_fault+0xb0/0x130 [ 173.647975][ T6810] should_fail_ex+0x414/0x560 [ 173.648000][ T6810] _copy_from_user+0x2d/0xb0 [ 173.648017][ T6810] kstrtouint_from_user+0xc4/0x170 [ 173.648041][ T6810] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 173.648076][ T6810] proc_fail_nth_write+0x88/0x240 [ 173.648091][ T6810] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 173.648110][ T6810] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 173.648126][ T6810] vfs_write+0x27b/0xa90 [ 173.648152][ T6810] ? __pfx_vfs_write+0x10/0x10 [ 173.648173][ T6810] ? __fget_files+0x2a/0x420 [ 173.648189][ T6810] ? __fget_files+0x3a0/0x420 [ 173.648201][ T6810] ? __fget_files+0x2a/0x420 [ 173.648220][ T6810] ksys_write+0x145/0x250 [ 173.648242][ T6810] ? __pfx_ksys_write+0x10/0x10 [ 173.648265][ T6810] ? do_syscall_64+0xbe/0x3b0 [ 173.648282][ T6810] do_syscall_64+0xfa/0x3b0 [ 173.648294][ T6810] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.648315][ T6810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.648329][ T6810] ? clear_bhb_loop+0x60/0xb0 [ 173.648346][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.648360][ T6810] RIP: 0033:0x7f391ef8d3df [ 173.648373][ T6810] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 173.648384][ T6810] RSP: 002b:00007f391fdc3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 173.648399][ T6810] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f391ef8d3df [ 173.648409][ T6810] RDX: 0000000000000001 RSI: 00007f391fdc30a0 RDI: 0000000000000007 [ 173.648417][ T6810] RBP: 00007f391fdc3090 R08: 0000000000000000 R09: 0000000000000000 [ 173.648426][ T6810] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 173.648434][ T6810] R13: 0000000000000000 R14: 00007f391f1b6080 R15: 00007ffdd393c748 [ 173.648456][ T6810] [ 175.192646][ T6826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.845094][ T5937] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 177.889054][ T30] audit: type=1326 audit(1751896666.631:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6851 comm="syz.3.233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59c358e929 code=0x0 [ 178.056729][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.090174][ T5937] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 178.129736][ T5872] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 178.177467][ T5937] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 178.483849][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.530514][ T5937] usb 2-1: config 0 descriptor?? [ 178.656848][ T5872] usb 1-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 178.699827][ T5872] usb 1-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 178.875536][ T6867] fuseblk: Bad value for 'fd' [ 179.368768][ T5872] usb 1-1: config 1 interface 0 has no altsetting 0 [ 179.416237][ T5872] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.433612][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 179.453856][ T5872] usb 1-1: SerialNumber: syz [ 179.675718][ T1217] usb 1-1: USB disconnect, device number 3 [ 181.012220][ T6875] syzkaller1: entered promiscuous mode [ 181.017915][ T6875] syzkaller1: entered allmulticast mode [ 182.382152][ T5937] usb 2-1: can't set config #0, error -71 [ 182.413640][ T5937] usb 2-1: USB disconnect, device number 3 [ 182.614835][ T6900] capability: warning: `syz.3.246' uses 32-bit capabilities (legacy support in use) [ 183.825261][ T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 184.173563][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 184.590694][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 184.607306][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 185.436499][ T24] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 185.567966][ T6915] netlink: 'syz.1.249': attribute type 29 has an invalid length. [ 185.575021][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.584142][ T24] usb 4-1: Product: syz [ 185.584162][ T24] usb 4-1: Manufacturer: syz [ 185.584178][ T24] usb 4-1: SerialNumber: syz [ 185.635527][ T24] usb 4-1: config 0 descriptor?? [ 185.760756][ T24] usb 4-1: can't set config #0, error -71 [ 186.027509][ T6923] FAULT_INJECTION: forcing a failure. [ 186.027509][ T6923] name failslab, interval 1, probability 0, space 0, times 0 [ 186.040262][ T6923] CPU: 1 UID: 0 PID: 6923 Comm: syz.2.251 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 186.040288][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.040300][ T6923] Call Trace: [ 186.040309][ T6923] [ 186.040318][ T6923] dump_stack_lvl+0x189/0x250 [ 186.040346][ T6923] ? __pfx____ratelimit+0x10/0x10 [ 186.040378][ T6923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.040400][ T6923] ? __pfx__printk+0x10/0x10 [ 186.040433][ T6923] ? __pfx___might_resched+0x10/0x10 [ 186.040455][ T6923] ? fs_reclaim_acquire+0x7d/0x100 [ 186.040480][ T6923] should_fail_ex+0x414/0x560 [ 186.040521][ T6923] should_failslab+0xa8/0x100 [ 186.040554][ T6923] __kmalloc_noprof+0xcb/0x4f0 [ 186.040582][ T6923] ? video_usercopy+0x18f/0x14f0 [ 186.040612][ T6923] video_usercopy+0x18f/0x14f0 [ 186.040641][ T6923] ? trace_irq_disable+0x37/0x110 [ 186.040670][ T6923] ? preempt_schedule_irq+0xde/0x150 [ 186.040700][ T6923] ? __pfx___video_do_ioctl+0x10/0x10 [ 186.040725][ T6923] ? __pfx_video_usercopy+0x10/0x10 [ 186.040769][ T6923] ? security_file_ioctl+0x107/0x2d0 [ 186.040803][ T6923] v4l2_ioctl+0x18a/0x1e0 [ 186.040834][ T6923] ? __pfx_v4l2_ioctl+0x10/0x10 [ 186.040857][ T6923] __se_sys_ioctl+0xf9/0x170 [ 186.040886][ T6923] do_syscall_64+0xfa/0x3b0 [ 186.040906][ T6923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.040926][ T6923] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 186.040945][ T6923] ? clear_bhb_loop+0x60/0xb0 [ 186.040970][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.040990][ T6923] RIP: 0033:0x7f391ef8e929 [ 186.041013][ T6923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.041030][ T6923] RSP: 002b:00007f391fda2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.041056][ T6923] RAX: ffffffffffffffda RBX: 00007f391f1b6160 RCX: 00007f391ef8e929 [ 186.041070][ T6923] RDX: 0000200000000040 RSI: 00000000c0cc5615 RDI: 0000000000000007 [ 186.041084][ T6923] RBP: 00007f391fda2090 R08: 0000000000000000 R09: 0000000000000000 [ 186.041096][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.041108][ T6923] R13: 0000000000000000 R14: 00007f391f1b6160 R15: 00007ffdd393c748 [ 186.041139][ T6923] [ 186.406711][ T24] usb 4-1: USB disconnect, device number 3 [ 186.641812][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 187.556004][ T6938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.248482][ T6948] usb usb1: check_ctrlrecip: process 6948 (syz.1.257) requesting ep 01 but needs 81 [ 189.029836][ T30] audit: type=1326 audit(1751896677.761:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6969 comm="syz.3.264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59c358e929 code=0x0 [ 191.048475][ T6991] input: syz1 as /devices/virtual/input/input5 [ 192.240935][ T6983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.269'. [ 192.533433][ T7008] netlink: 'syz.4.274': attribute type 5 has an invalid length. [ 194.715591][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.721956][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.421745][ T7046] netlink: 152 bytes leftover after parsing attributes in process `syz.2.286'. [ 195.614103][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 196.711148][ T7067] netlink: 152 bytes leftover after parsing attributes in process `syz.4.293'. [ 197.845050][ T7084] fuseblk: Bad value for 'fd' [ 198.798639][ T7098] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[7098] [ 199.903891][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 200.550400][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 200.883523][ T5872] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 201.058344][ T5872] usb 5-1: no configurations [ 201.063090][ T5872] usb 5-1: can't read configurations, error -22 [ 201.230382][ T5872] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 201.398481][ T5872] usb 5-1: no configurations [ 201.403262][ T5872] usb 5-1: can't read configurations, error -22 [ 201.410930][ T5872] usb usb5-port1: attempt power cycle [ 201.885134][ T5872] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 201.978578][ T5872] usb 5-1: no configurations [ 202.192710][ T7136] fuseblk: Bad value for 'fd' [ 202.485457][ T5872] usb 5-1: can't read configurations, error -22 [ 202.521224][ T7128] XFS (nullb0): Invalid superblock magic number [ 202.625527][ T5872] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 202.709691][ T5872] usb 5-1: no configurations [ 202.714330][ T5872] usb 5-1: can't read configurations, error -22 [ 203.195859][ T5872] usb usb5-port1: unable to enumerate USB device [ 203.498583][ T7151] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 204.145546][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 204.680608][ T24] usb 4-1: no configurations [ 204.700915][ T24] usb 4-1: can't read configurations, error -22 [ 204.855157][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 205.046660][ T24] usb 4-1: no configurations [ 205.054916][ T24] usb 4-1: can't read configurations, error -22 [ 205.062388][ T24] usb usb4-port1: attempt power cycle [ 205.395266][ T7178] fuseblk: Bad value for 'fd' [ 205.465786][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 205.584518][ T24] usb 4-1: no configurations [ 205.639843][ T24] usb 4-1: can't read configurations, error -22 [ 205.789202][ T7183] veth0: entered promiscuous mode [ 205.818815][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 206.289265][ T5913] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 206.301767][ T24] usb 4-1: no configurations [ 206.313611][ T24] usb 4-1: can't read configurations, error -22 [ 206.333407][ T24] usb usb4-port1: unable to enumerate USB device [ 206.481445][ T5913] usb 3-1: config 105 has an invalid interface number: 211 but max is 1 [ 206.500639][ T5913] usb 3-1: config 105 has an invalid interface number: 106 but max is 1 [ 206.510499][ T5913] usb 3-1: config 105 has no interface number 0 [ 206.518260][ T5913] usb 3-1: config 105 has no interface number 1 [ 206.526407][ T5913] usb 3-1: config 105 interface 211 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 206.538346][ T5913] usb 3-1: config 105 interface 211 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 206.551634][ T5913] usb 3-1: config 105 interface 211 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 206.563428][ T5913] usb 3-1: config 105 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 206.610728][ T5913] usb 3-1: config 105 interface 211 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 206.762045][ T5913] usb 3-1: config 105 interface 211 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 206.774397][ T5913] usb 3-1: config 105 interface 211 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 206.788726][ T7194] can0: slcan on ttyS3. [ 206.800003][ T5913] usb 3-1: config 105 interface 211 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 206.837122][ T5913] usb 3-1: config 105 interface 211 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 206.855929][ T5913] usb 3-1: config 105 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 206.880120][ T5913] usb 3-1: config 105 interface 211 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 206.909068][ T5913] usb 3-1: config 105 interface 106 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 206.944757][ T5913] usb 3-1: config 105 interface 106 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 206.957266][ T5913] usb 3-1: config 105 interface 106 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 206.968697][ T5913] usb 3-1: config 105 interface 106 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 206.987359][ T5913] usb 3-1: config 105 interface 106 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 207.056892][ T5913] usb 3-1: config 105 interface 106 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 207.187414][ T5913] usb 3-1: config 105 interface 106 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 207.225096][ T5913] usb 3-1: config 105 interface 106 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 207.246267][ T5913] usb 3-1: config 105 interface 106 altsetting 9 bulk endpoint 0x8 has invalid maxpacket 8 [ 207.256847][ T5913] usb 3-1: config 105 interface 106 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 207.270956][ T5913] usb 3-1: config 105 interface 106 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 207.282079][ T5913] usb 3-1: config 105 interface 106 has no altsetting 0 [ 207.294737][ T5913] usb 3-1: Dual-Role OTG device on HNP port [ 207.309971][ T5913] usb 3-1: New USB device found, idVendor=19d2, idProduct=1075, bcdDevice=88.e8 [ 207.326957][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.335266][ T5913] usb 3-1: Product: syz [ 207.339469][ T5913] usb 3-1: Manufacturer: 噟试é½ã¡§ë´¡ä’Ÿåæ¿’ã´‰å“™å«æ®—ä¶§ [ 207.378431][ T5913] usb 3-1: SerialNumber: syz [ 207.419357][ T7183] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 207.455739][ T7183] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 207.655750][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 207.680851][ T7208] blktrace: Concurrent blktraces are not allowed on nbd3 [ 207.745915][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 208.660637][ T5913] option 3-1:105.211: GSM modem (1-port) converter detected [ 208.763923][ T5913] usb 3-1: USB disconnect, device number 5 [ 208.786834][ T7193] can0 (unregistered): slcan off ttyS3. [ 208.835928][ T5913] option 3-1:105.211: device disconnected [ 209.726289][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 210.177496][ T24] usb 5-1: no configurations [ 210.192464][ T24] usb 5-1: can't read configurations, error -22 [ 210.262221][ T7236] netlink: 52 bytes leftover after parsing attributes in process `syz.1.335'. [ 210.272859][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.280919][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.355264][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 211.249810][ T7240] tipc: Started in network mode [ 211.254754][ T7240] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 211.274477][ T7240] tipc: Enabled bearer , priority 10 [ 211.315852][ T24] usb 5-1: no configurations [ 211.320627][ T24] usb 5-1: can't read configurations, error -22 [ 211.341401][ T24] usb usb5-port1: attempt power cycle [ 211.627283][ T5914] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 211.735135][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 211.769032][ T24] usb 5-1: no configurations [ 211.773778][ T24] usb 5-1: can't read configurations, error -22 [ 211.785556][ T5914] usb 3-1: device descriptor read/64, error -71 [ 211.830058][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 211.836602][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 211.842904][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.849278][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 211.855855][ T5157] Bluetooth: hci3: command 0x0406 tx timeout [ 211.925191][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 211.949194][ T24] usb 5-1: no configurations [ 211.956446][ T24] usb 5-1: can't read configurations, error -22 [ 211.965316][ T24] usb usb5-port1: unable to enumerate USB device [ 212.188383][ T5914] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 212.511764][ T24] tipc: Node number set to 10398378 [ 212.576469][ T7251] fuseblk: Bad value for 'fd' [ 212.753997][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 213.086948][ T5914] usb 3-1: device descriptor read/64, error -71 [ 213.225142][ T5914] usb usb3-port1: attempt power cycle [ 213.948005][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.342'. [ 213.965879][ T5913] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 214.294764][ T5913] usb 5-1: config 0 has no interfaces? [ 214.392832][ T5913] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 214.435166][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.443431][ T5913] usb 5-1: Product: syz [ 214.448625][ T5913] usb 5-1: Manufacturer: syz [ 214.453354][ T5913] usb 5-1: SerialNumber: syz [ 214.462671][ T5913] usb 5-1: config 0 descriptor?? [ 216.394030][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 216.418900][ T7297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.345'. [ 216.477601][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 216.539538][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 216.996227][ T7298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.345'. [ 217.277821][ T5913] usb 5-1: USB disconnect, device number 13 [ 217.695156][ T5849] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 217.702023][ T5849] Bluetooth: hci0: unexpected event for opcode 0x203e [ 217.989787][ T7316] trusted_key: encrypted_key: insufficient parameters specified [ 217.989841][ T7319] Bluetooth: MGMT ver 1.23 [ 218.971184][ T7328] netlink: 152 bytes leftover after parsing attributes in process `syz.1.354'. [ 219.185683][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 219.193266][ T5849] Bluetooth: hci5: command 0x1003 tx timeout [ 219.970789][ T7342] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[7342] [ 220.409264][ T7343] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[7343] [ 221.742478][ T7357] No buffer was provided with the request [ 226.767977][ T7372] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[7372] [ 228.383338][ T7384] o2cb: This node has not been configured. [ 228.391079][ T7384] o2cb: Cluster check failed. Fix errors before retrying. [ 228.400977][ T7384] (syz.3.368,7384,0):user_dlm_register:674 ERROR: status = -22 [ 228.409363][ T7384] (syz.3.368,7384,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 229.149734][ T7388] FAULT_INJECTION: forcing a failure. [ 229.149734][ T7388] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 229.715351][ T7388] CPU: 1 UID: 0 PID: 7388 Comm: syz.4.369 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 229.715373][ T7388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.715382][ T7388] Call Trace: [ 229.715388][ T7388] [ 229.715394][ T7388] dump_stack_lvl+0x189/0x250 [ 229.715415][ T7388] ? __pfx____ratelimit+0x10/0x10 [ 229.715437][ T7388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.715453][ T7388] ? __pfx__printk+0x10/0x10 [ 229.715473][ T7388] ? fs_reclaim_acquire+0x7d/0x100 [ 229.715505][ T7388] should_fail_ex+0x414/0x560 [ 229.715535][ T7388] prepare_alloc_pages+0x213/0x610 [ 229.715555][ T7388] __alloc_frozen_pages_noprof+0x123/0x370 [ 229.715572][ T7388] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 229.715590][ T7388] ? __pfx___might_resched+0x10/0x10 [ 229.715604][ T7388] ? __folio_put+0x21b/0x2c0 [ 229.715629][ T7388] __folio_alloc_noprof+0x18/0x120 [ 229.715646][ T7388] migrate_pages_batch+0x7a0/0x2830 [ 229.715694][ T7388] ? __pfx_alloc_migration_target+0x10/0x10 [ 229.715710][ T7388] ? __pfx_migrate_pages_batch+0x10/0x10 [ 229.715743][ T7388] migrate_pages+0x230e/0x2930 [ 229.715770][ T7388] ? __pfx_alloc_migration_target+0x10/0x10 [ 229.715790][ T7388] ? __pfx_migrate_pages+0x10/0x10 [ 229.715803][ T7388] ? find_vma+0xe7/0x160 [ 229.715822][ T7388] ? __pfx_find_vma+0x10/0x10 [ 229.715844][ T7388] ? queue_pages_test_walk+0x423/0x790 [ 229.715862][ T7388] ? walk_page_range_mm+0x55a/0x620 [ 229.715891][ T7388] ? __pfx___up_read+0x10/0x10 [ 229.715916][ T7388] do_migrate_pages+0x5ee/0x800 [ 229.715944][ T7388] ? __pfx_do_migrate_pages+0x10/0x10 [ 229.715979][ T7388] ? security_capable+0xbd/0x2e0 [ 229.715999][ T7388] __se_sys_migrate_pages+0x530/0x660 [ 229.716018][ T7388] ? __se_sys_migrate_pages+0x130/0x660 [ 229.716039][ T7388] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 229.716058][ T7388] ? rcu_is_watching+0x15/0xb0 [ 229.716077][ T7388] ? do_syscall_64+0xbe/0x3b0 [ 229.716094][ T7388] do_syscall_64+0xfa/0x3b0 [ 229.716106][ T7388] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.716126][ T7388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.716140][ T7388] ? clear_bhb_loop+0x60/0xb0 [ 229.716157][ T7388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.716171][ T7388] RIP: 0033:0x7fa20db8e929 [ 229.716184][ T7388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.716196][ T7388] RSP: 002b:00007fa20ea21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 229.716212][ T7388] RAX: ffffffffffffffda RBX: 00007fa20ddb5fa0 RCX: 00007fa20db8e929 [ 229.716222][ T7388] RDX: 0000200000000040 RSI: 0000000000000009 RDI: 0000000000000000 [ 229.716231][ T7388] RBP: 00007fa20ea21090 R08: 0000000000000000 R09: 0000000000000000 [ 229.716239][ T7388] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 229.716248][ T7388] R13: 0000000000000000 R14: 00007fa20ddb5fa0 R15: 00007ffc6304bfb8 [ 229.716269][ T7388] [ 230.508646][ T7401] FAULT_INJECTION: forcing a failure. [ 230.508646][ T7401] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 230.531487][ T7401] CPU: 1 UID: 0 PID: 7401 Comm: syz.2.374 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 230.531516][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 230.531528][ T7401] Call Trace: [ 230.531537][ T7401] [ 230.531546][ T7401] dump_stack_lvl+0x189/0x250 [ 230.531575][ T7401] ? __pfx____ratelimit+0x10/0x10 [ 230.531606][ T7401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.531629][ T7401] ? __pfx__printk+0x10/0x10 [ 230.531657][ T7401] ? fs_reclaim_acquire+0x7d/0x100 [ 230.531687][ T7401] should_fail_ex+0x414/0x560 [ 230.531722][ T7401] prepare_alloc_pages+0x213/0x610 [ 230.531756][ T7401] __alloc_frozen_pages_noprof+0x123/0x370 [ 230.531778][ T7401] ? lock_release+0x4b/0x3e0 [ 230.531800][ T7401] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 230.531825][ T7401] ? is_bpf_text_address+0x292/0x2b0 [ 230.531851][ T7401] ? policy_nodemask+0x27c/0x720 [ 230.531877][ T7401] ? __lock_acquire+0xab9/0xd20 [ 230.531902][ T7401] alloc_pages_mpol+0x232/0x4a0 [ 230.531938][ T7401] vma_alloc_folio_noprof+0xe4/0x200 [ 230.531971][ T7401] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 230.532013][ T7401] folio_prealloc+0x30/0x180 [ 230.532046][ T7401] __handle_mm_fault+0x2c88/0x5620 [ 230.532094][ T7401] ? __pfx___handle_mm_fault+0x10/0x10 [ 230.532137][ T7401] ? follow_page_pte+0x8d6/0x14b0 [ 230.532174][ T7401] handle_mm_fault+0x2d5/0x7f0 [ 230.532201][ T7401] ? vma_is_secretmem+0xd/0x50 [ 230.532240][ T7401] __get_user_pages+0x1af4/0x30b0 [ 230.532303][ T7401] ? __pfx___get_user_pages+0x10/0x10 [ 230.532327][ T7401] ? __gup_longterm_locked+0xbf7/0x15b0 [ 230.532353][ T7401] ? down_read_killable+0x1d1/0x350 [ 230.532380][ T7401] __gup_longterm_locked+0xd66/0x15b0 [ 230.532419][ T7401] ? sanity_check_pinned_pages+0x11cf/0x12c0 [ 230.532446][ T7401] ? gup_fast_fallback+0x1afc/0x2260 [ 230.532484][ T7401] gup_fast_fallback+0x1cd4/0x2260 [ 230.532548][ T7401] ? __pfx_gup_fast_fallback+0x10/0x10 [ 230.532578][ T7401] ? stack_depot_save_flags+0x429/0x900 [ 230.532615][ T7401] ? pin_user_pages_fast+0x4d/0xb0 [ 230.532644][ T7401] iov_iter_extract_pages+0x35a/0x5e0 [ 230.532669][ T7401] ? vfs_read+0x4cd/0x980 [ 230.532699][ T7401] extract_iter_to_sg+0xe46/0x24e0 [ 230.532747][ T7401] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 230.532798][ T7401] ? __asan_memset+0x22/0x50 [ 230.532825][ T7401] af_alg_get_rsgl+0x436/0x810 [ 230.532874][ T7401] skcipher_recvmsg+0x3c0/0x11c0 [ 230.532908][ T7401] ? __might_fault+0xb0/0x130 [ 230.532949][ T7401] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 230.532983][ T7401] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 230.533011][ T7401] ? security_socket_recvmsg+0x7e/0x2e0 [ 230.533037][ T7401] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 230.533068][ T7401] sock_recvmsg+0x22c/0x270 [ 230.533105][ T7401] sock_read_iter+0x231/0x2f0 [ 230.533137][ T7401] ? __pfx_sock_read_iter+0x10/0x10 [ 230.533179][ T7401] ? bpf_lsm_file_permission+0x9/0x20 [ 230.533196][ T7401] ? security_file_permission+0x75/0x290 [ 230.533235][ T7401] vfs_read+0x4cd/0x980 [ 230.533272][ T7401] ? __pfx_vfs_read+0x10/0x10 [ 230.533311][ T7401] ? __fget_files+0x2a/0x420 [ 230.533339][ T7401] ksys_read+0x145/0x250 [ 230.533369][ T7401] ? __pfx_ksys_read+0x10/0x10 [ 230.533393][ T7401] ? rcu_is_watching+0x15/0xb0 [ 230.533422][ T7401] ? do_syscall_64+0xbe/0x3b0 [ 230.533445][ T7401] do_syscall_64+0xfa/0x3b0 [ 230.533470][ T7401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.533490][ T7401] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 230.533509][ T7401] ? clear_bhb_loop+0x60/0xb0 [ 230.533534][ T7401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.533553][ T7401] RIP: 0033:0x7f391ef8e929 [ 230.533572][ T7401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.533588][ T7401] RSP: 002b:00007f391fde4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 230.533623][ T7401] RAX: ffffffffffffffda RBX: 00007f391f1b5fa0 RCX: 00007f391ef8e929 [ 230.533637][ T7401] RDX: 000000000000100d RSI: 00002000000012c0 RDI: 0000000000000004 [ 230.533649][ T7401] RBP: 00007f391fde4090 R08: 0000000000000000 R09: 0000000000000000 [ 230.533661][ T7401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.533673][ T7401] R13: 0000000000000000 R14: 00007f391f1b5fa0 R15: 00007ffdd393c748 [ 230.533720][ T7401] [ 231.865909][ T1208] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 232.085056][ T1208] usb 5-1: device descriptor read/64, error -71 [ 232.707345][ T1208] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 232.920831][ T1208] usb 5-1: device descriptor read/64, error -71 [ 233.062755][ T1208] usb usb5-port1: attempt power cycle [ 233.645263][ T1208] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 234.400272][ T1208] usb 5-1: device not accepting address 16, error -71 [ 234.642799][ T7450] capability: warning: `syz.0.389' uses deprecated v2 capabilities in a way that may be insecure [ 235.075345][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 237.708832][ T7494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.735752][ T7494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.817287][ T7485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.824790][ T7485] IPv6: NLM_F_CREATE should be set when creating new route [ 237.935088][ T1208] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 238.135843][ T1208] usb 4-1: device descriptor read/64, error -71 [ 238.426279][ T1208] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 238.595149][ T1208] usb 4-1: device descriptor read/64, error -71 [ 238.725504][ T1208] usb usb4-port1: attempt power cycle [ 239.675807][ T1208] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 239.729431][ T1208] usb 4-1: device descriptor read/8, error -71 [ 239.985055][ T1208] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 240.038293][ T1208] usb 4-1: device descriptor read/8, error -71 [ 240.171413][ T1208] usb usb4-port1: unable to enumerate USB device [ 241.533456][ T7526] netlink: 152 bytes leftover after parsing attributes in process `syz.3.410'. [ 241.695949][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 241.705263][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 243.657744][ T7555] netlink: 44 bytes leftover after parsing attributes in process `syz.4.420'. [ 245.655802][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 246.505120][ T5934] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 246.829332][ T5934] usb 5-1: device descriptor read/64, error -71 [ 247.075206][ T5934] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 247.225276][ T5934] usb 5-1: device descriptor read/64, error -71 [ 247.459827][ T5934] usb usb5-port1: attempt power cycle [ 247.996983][ T5934] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 248.025877][ T5934] usb 5-1: device descriptor read/8, error -71 [ 248.326359][ T5934] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 248.386850][ T5934] usb 5-1: device descriptor read/8, error -71 [ 248.495466][ T5934] usb usb5-port1: unable to enumerate USB device [ 250.075990][ T7632] No buffer was provided with the request [ 255.724687][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.744712][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.137284][ T7687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.456'. [ 256.163670][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 256.285230][ T5937] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 256.335077][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 256.475242][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 256.486283][ T24] usb 4-1: config 7 has an invalid interface number: 193 but max is 0 [ 256.494789][ T24] usb 4-1: config 7 has no interface number 0 [ 256.501146][ T24] usb 4-1: config 7 interface 193 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 256.512153][ T24] usb 4-1: config 7 interface 193 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 257.230881][ T24] usb 4-1: config 7 interface 193 altsetting 7 bulk endpoint 0x5 has invalid maxpacket 935 [ 257.241901][ T24] usb 4-1: config 7 interface 193 has no altsetting 0 [ 257.248814][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 257.389846][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.403280][ T24] usb 4-1: New USB device found, idVendor=12d1, idProduct=855b, bcdDevice=5e.6f [ 257.446866][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.455166][ T5937] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 257.477488][ T24] usb 4-1: Product: syz [ 257.482012][ T24] usb 4-1: Manufacturer: syz [ 257.488051][ T5937] usb 2-1: config 0 interface 0 has no altsetting 0 [ 257.495005][ T24] usb 4-1: SerialNumber: syz [ 257.500179][ T5937] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 257.514849][ T7675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 257.532759][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.548861][ T5937] usb 2-1: config 0 descriptor?? [ 257.579841][ T5937] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 257.761709][ T24] option 4-1:7.193: GSM modem (1-port) converter detected [ 257.797115][ T24] usb 4-1: USB disconnect, device number 12 [ 257.849593][ T24] option 4-1:7.193: device disconnected [ 258.138851][ T7707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.150190][ T7707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.718410][ T7721] overlay: ./file0 is not a directory [ 261.105170][ T7732] random: crng reseeded on system resumption [ 261.425173][ T5937] usb 2-1: USB disconnect, device number 4 [ 264.929972][ T7765] netlink: 68 bytes leftover after parsing attributes in process `syz.1.482'. [ 265.353334][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 267.986874][ T5914] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 268.155243][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 268.176560][ T5914] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 268.215517][ T5914] usb 5-1: config 0 has no interface number 0 [ 268.251611][ T5914] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 268.284981][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.313375][ T5914] usb 5-1: Product: syz [ 268.325077][ T5914] usb 5-1: Manufacturer: syz [ 268.345497][ T5914] usb 5-1: SerialNumber: syz [ 268.436186][ T5914] usb 5-1: config 0 descriptor?? [ 268.650386][ T5914] peak_usb 5-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 268.851337][ T7799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.898150][ T7799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.956317][ T7799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.001674][ T7799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.055200][ T5914] peak_usb 5-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 269.892747][ T5914] peak_usb 5-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 270.976070][ T5914] peak_usb 5-1:0.56: probe with driver peak_usb failed with error -71 [ 271.045067][ T5914] usb 5-1: USB disconnect, device number 22 [ 271.254635][ T7833] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[7833] [ 272.235311][ T5914] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 272.565586][ T5914] usb 2-1: device descriptor read/64, error -71 [ 272.837195][ T5914] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 273.179126][ T5914] usb 2-1: device descriptor read/64, error -71 [ 273.474442][ T5914] usb usb2-port1: attempt power cycle [ 275.325357][ T5914] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 275.484646][ T5914] usb 2-1: device descriptor read/8, error -71 [ 275.513675][ T7860] can0: slcan on ttyS3. [ 275.608256][ T7863] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 275.648806][ T7863] UDF-fs: Scanning with blocksize 512 failed [ 275.660520][ T7863] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 275.726155][ T7863] UDF-fs: Scanning with blocksize 1024 failed [ 275.732823][ T7863] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 275.790457][ T30] audit: type=1326 audit(1751896764.521:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 275.864665][ T7863] UDF-fs: Scanning with blocksize 2048 failed [ 275.905068][ T30] audit: type=1326 audit(1751896764.521:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 276.066624][ T7863] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 276.074265][ T7863] UDF-fs: Scanning with blocksize 4096 failed [ 276.139599][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 276.234198][ T30] audit: type=1326 audit(1751896764.521:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 276.509964][ T30] audit: type=1326 audit(1751896764.521:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 276.613149][ T30] audit: type=1326 audit(1751896764.521:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 276.759222][ T24] usb 5-1: device descriptor read/64, error -71 [ 276.799532][ T30] audit: type=1326 audit(1751896764.531:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 276.906413][ T30] audit: type=1326 audit(1751896764.531:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 276.933778][ T30] audit: type=1326 audit(1751896764.531:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 276.964819][ T30] audit: type=1326 audit(1751896764.531:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 277.015077][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 277.184190][ T30] audit: type=1326 audit(1751896764.531:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 277.207318][ T24] usb 5-1: device descriptor read/64, error -71 [ 277.317249][ T24] usb usb5-port1: attempt power cycle [ 277.470633][ T7889] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[7889] [ 277.685215][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 277.935008][ T24] usb 5-1: device descriptor read/8, error -71 [ 278.535972][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 279.177445][ T24] usb 5-1: device descriptor read/8, error -71 [ 279.295562][ T24] usb usb5-port1: unable to enumerate USB device [ 280.984997][ T7859] can0 (unregistered): slcan off ttyS3. [ 282.158077][ T7925] qrtr: Invalid version 37 [ 282.205860][ T7928] Falling back ldisc for ptm2. [ 282.644241][ T7933] netlink: 'syz.4.526': attribute type 5 has an invalid length. [ 283.726149][ T7919] fuseblk: Bad value for 'fd' [ 283.988252][ T7943] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[7943] [ 286.994719][ T7944] fuseblk: Bad value for 'fd' [ 288.762796][ T7984] netlink: 96 bytes leftover after parsing attributes in process `syz.0.537'. [ 290.020851][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 290.020870][ T30] audit: type=1326 audit(1751896778.761:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 290.059309][ T7992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.103334][ T30] audit: type=1326 audit(1751896778.761:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 290.261818][ T30] audit: type=1326 audit(1751896778.761:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 290.283665][ T30] audit: type=1326 audit(1751896778.761:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 290.306598][ T30] audit: type=1326 audit(1751896778.761:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 290.330702][ T30] audit: type=1326 audit(1751896778.761:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 290.353147][ T30] audit: type=1326 audit(1751896778.761:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 290.425101][ T30] audit: type=1326 audit(1751896778.761:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 290.525011][ T30] audit: type=1326 audit(1751896778.761:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 290.600573][ T8002] netlink: 152 bytes leftover after parsing attributes in process `syz.0.543'. [ 290.608593][ T30] audit: type=1326 audit(1751896778.761:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7993 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fdc32f8e929 code=0x7ffc0000 [ 291.656553][ T8009] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[8009] [ 292.495071][ T1217] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 292.943025][ T1217] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 293.096727][ T1217] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 293.502919][ T1217] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 293.542814][ T1217] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.596328][ T1217] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 294.525575][ T1217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.534021][ T1217] usb 4-1: Product: syz [ 294.542348][ T1217] usb 4-1: Manufacturer: syz [ 294.549283][ T1217] usb 4-1: SerialNumber: syz [ 294.602934][ T1217] usb 4-1: config 0 descriptor?? [ 294.620610][ T8013] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 294.935301][ T8013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.944222][ T8013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.139674][ T1217] rc_core: IR keymap rc-imon-rsc not found [ 296.174971][ T1217] Registered IR keymap rc-empty [ 296.202845][ T1217] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 296.475310][ T5872] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 296.593768][ T1217] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 296.645067][ T1208] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 296.799673][ T1217] usb 4-1: USB disconnect, device number 13 [ 297.703979][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 297.898597][ T1208] usb 2-1: no configurations [ 297.903340][ T1208] usb 2-1: can't read configurations, error -22 [ 299.253749][ T5872] usb 5-1: unable to read config index 0 descriptor/all [ 299.845483][ T5872] usb 5-1: can't read configurations, error -71 [ 299.901833][ T8064] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[8064] [ 300.474861][ T1208] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 300.870995][ T8072] netlink: 152 bytes leftover after parsing attributes in process `syz.3.559'. [ 301.954700][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 302.681995][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'. [ 302.808910][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 303.698546][ T8103] No buffer was provided with the request [ 303.755054][ T5913] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 304.425111][ T5914] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 304.677316][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 304.824540][ T5914] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 304.915430][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.002234][ T5914] usb 2-1: Product: syz [ 305.043564][ T5914] usb 2-1: Manufacturer: syz [ 305.102903][ T5914] usb 2-1: SerialNumber: syz [ 305.287173][ T5914] r8152-cfgselector 2-1: Unknown version 0x0000 [ 305.372354][ T5914] r8152-cfgselector 2-1: config 0 descriptor?? [ 306.119250][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 306.309923][ T5913] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 307.194228][ T5913] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.212459][ T5913] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.300735][ T8110] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[8110] [ 307.562820][ T5913] usb 5-1: string descriptor 0 read error: -71 [ 307.654720][ T5913] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.682951][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.887908][ T5913] usb 5-1: can't set config #1, error -71 [ 307.959140][ T5913] usb 5-1: USB disconnect, device number 29 [ 307.992232][ T8112] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.570'. [ 308.030964][ T1217] r8152-cfgselector 2-1: USB disconnect, device number 11 [ 308.075300][ T8112] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 308.105124][ T8112] openvswitch: netlink: Message has 1 unknown bytes. [ 309.447499][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 309.835101][ T24] usb 3-1: no configurations [ 309.839782][ T24] usb 3-1: can't read configurations, error -22 [ 310.145920][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 310.435685][ T5913] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 310.578164][ T24] usb 3-1: no configurations [ 310.723211][ T24] usb 3-1: can't read configurations, error -22 [ 310.745561][ T24] usb usb3-port1: attempt power cycle [ 310.819993][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 310.854255][ T5913] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 310.904552][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.918774][ T5913] usb 5-1: Product: syz [ 310.923001][ T5913] usb 5-1: Manufacturer: syz [ 310.927943][ T5913] usb 5-1: SerialNumber: syz [ 310.947244][ T5913] r8152-cfgselector 5-1: Unknown version 0x0000 [ 310.965243][ T5913] r8152-cfgselector 5-1: config 0 descriptor?? [ 311.115143][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 312.182762][ T24] usb 3-1: device descriptor read/8, error -71 [ 313.950702][ T5913] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 314.171887][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.203933][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.226306][ T5913] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 314.244997][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.291159][ T5913] usb 2-1: config 0 descriptor?? [ 314.906725][ T1217] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 315.295229][ T1217] usb 4-1: Using ep0 maxpacket: 16 [ 315.312823][ T5913] stadia 0003:18D1:9400.0001: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.1-1/input0 [ 315.337790][ T1208] r8152-cfgselector 5-1: USB disconnect, device number 30 [ 315.387555][ T8170] FAULT_INJECTION: forcing a failure. [ 315.387555][ T8170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.440270][ T5913] stadia 0003:18D1:9400.0001: no inputs found [ 315.462795][ T1217] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 315.475273][ T5913] stadia 0003:18D1:9400.0001: force feedback init failed [ 315.484052][ T1217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.505231][ T8170] CPU: 1 UID: 0 PID: 8170 Comm: syz.4.587 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 315.505259][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.505281][ T8170] Call Trace: [ 315.505289][ T8170] [ 315.505298][ T8170] dump_stack_lvl+0x189/0x250 [ 315.505328][ T8170] ? __pfx____ratelimit+0x10/0x10 [ 315.505358][ T8170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.505380][ T8170] ? __pfx__printk+0x10/0x10 [ 315.505405][ T8170] ? __might_fault+0xb0/0x130 [ 315.505446][ T8170] should_fail_ex+0x414/0x560 [ 315.505479][ T8170] _copy_from_user+0x2d/0xb0 [ 315.505503][ T8170] ____sys_sendmsg+0x2fe/0x830 [ 315.505536][ T8170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.505571][ T8170] ? import_iovec+0x74/0xa0 [ 315.505597][ T8170] ___sys_sendmsg+0x21f/0x2a0 [ 315.505633][ T8170] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.505696][ T8170] ? __fget_files+0x2a/0x420 [ 315.505714][ T8170] ? __fget_files+0x3a0/0x420 [ 315.505743][ T8170] __x64_sys_sendmsg+0x19b/0x260 [ 315.505772][ T8170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.505807][ T8170] ? __pfx_ksys_write+0x10/0x10 [ 315.505833][ T8170] ? rcu_is_watching+0x15/0xb0 [ 315.505860][ T8170] ? do_syscall_64+0xbe/0x3b0 [ 315.505883][ T8170] do_syscall_64+0xfa/0x3b0 [ 315.505900][ T8170] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.505929][ T8170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.505949][ T8170] ? clear_bhb_loop+0x60/0xb0 [ 315.505973][ T8170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.505992][ T8170] RIP: 0033:0x7fa20db8e929 [ 315.506010][ T8170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.506027][ T8170] RSP: 002b:00007fa20ea21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.506047][ T8170] RAX: ffffffffffffffda RBX: 00007fa20ddb5fa0 RCX: 00007fa20db8e929 [ 315.506061][ T8170] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 315.506073][ T8170] RBP: 00007fa20ea21090 R08: 0000000000000000 R09: 0000000000000000 [ 315.506084][ T8170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.506095][ T8170] R13: 0000000000000000 R14: 00007fa20ddb5fa0 R15: 00007ffc6304bfb8 [ 315.506124][ T8170] [ 315.765399][ T1217] usb 4-1: Product: syz [ 315.769787][ T1217] usb 4-1: Manufacturer: syz [ 315.774419][ T1217] usb 4-1: SerialNumber: syz [ 315.805129][ T1217] r8152-cfgselector 4-1: Unknown version 0x0000 [ 315.812669][ T1217] r8152-cfgselector 4-1: config 0 descriptor?? [ 317.095678][ T8184] random: crng reseeded on system resumption [ 317.170688][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.185734][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.222275][ T1217] usb 2-1: USB disconnect, device number 12 [ 318.454618][ T8203] FAULT_INJECTION: forcing a failure. [ 318.454618][ T8203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.469440][ T8203] CPU: 1 UID: 0 PID: 8203 Comm: syz.0.595 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 318.469466][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.469478][ T8203] Call Trace: [ 318.469486][ T8203] [ 318.469494][ T8203] dump_stack_lvl+0x189/0x250 [ 318.469523][ T8203] ? __pfx____ratelimit+0x10/0x10 [ 318.469554][ T8203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.469576][ T8203] ? __pfx__printk+0x10/0x10 [ 318.469616][ T8203] should_fail_ex+0x414/0x560 [ 318.469650][ T8203] _copy_to_user+0x31/0xb0 [ 318.469676][ T8203] simple_read_from_buffer+0xe1/0x170 [ 318.469720][ T8203] proc_fail_nth_read+0x1df/0x250 [ 318.469744][ T8203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.469768][ T8203] ? rw_verify_area+0x258/0x650 [ 318.469794][ T8203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.469816][ T8203] vfs_read+0x1fd/0x980 [ 318.469848][ T8203] ? __pfx___mutex_lock+0x10/0x10 [ 318.469868][ T8203] ? __pfx_vfs_read+0x10/0x10 [ 318.469896][ T8203] ? __fget_files+0x2a/0x420 [ 318.469920][ T8203] ? __fget_files+0x3a0/0x420 [ 318.469937][ T8203] ? __fget_files+0x2a/0x420 [ 318.469965][ T8203] ksys_read+0x145/0x250 [ 318.469994][ T8203] ? __pfx_ksys_read+0x10/0x10 [ 318.470018][ T8203] ? rcu_is_watching+0x15/0xb0 [ 318.470047][ T8203] ? do_syscall_64+0xbe/0x3b0 [ 318.470070][ T8203] do_syscall_64+0xfa/0x3b0 [ 318.470087][ T8203] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.470116][ T8203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.470136][ T8203] ? clear_bhb_loop+0x60/0xb0 [ 318.470160][ T8203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.470179][ T8203] RIP: 0033:0x7fdc32f8d33c [ 318.470198][ T8203] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 318.470214][ T8203] RSP: 002b:00007fdc30dd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 318.470236][ T8203] RAX: ffffffffffffffda RBX: 00007fdc331b6160 RCX: 00007fdc32f8d33c [ 318.470250][ T8203] RDX: 000000000000000f RSI: 00007fdc30dd50a0 RDI: 0000000000000009 [ 318.470262][ T8203] RBP: 00007fdc30dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 318.470274][ T8203] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 318.470286][ T8203] R13: 0000000000000000 R14: 00007fdc331b6160 R15: 00007ffd0d2df838 [ 318.470318][ T8203] [ 318.714004][ T1217] r8152-cfgselector 4-1: USB disconnect, device number 14 [ 318.970948][ T8206] fuse: Bad value for 'fd' [ 318.976216][ T5872] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 319.005158][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 319.005177][ T30] audit: type=1400 audit(1751896807.741:61): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8204 comm="syz.3.598" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 319.217646][ T5872] usb 3-1: no configurations [ 319.281369][ T5872] usb 3-1: can't read configurations, error -22 [ 320.146424][ T5872] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 320.790989][ T8216] veth3: entered promiscuous mode [ 320.834987][ T5872] usb 3-1: device not accepting address 14, error -71 [ 320.884206][ T5872] usb usb3-port1: attempt power cycle [ 321.168045][ T30] audit: type=1326 audit(1751896809.911:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8240 comm="syz.1.610" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f413658e929 code=0x0 [ 321.305137][ T5872] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 321.355765][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 321.433155][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 321.576984][ T5872] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 321.705441][ T5872] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 321.963195][ T5872] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 321.985325][ T5872] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 322.039793][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 322.078881][ T5872] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 322.109161][ T5872] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 322.135174][ T5872] usb 3-1: Product: syz [ 322.144437][ T5872] usb 3-1: Manufacturer: syz [ 322.156872][ T5872] usb 3-1: SerialNumber: syz [ 322.174740][ T5872] usb 3-1: config 0 descriptor?? [ 322.231893][ T5872] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 322.314083][ T5872] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 322.475320][ T5872] usb 3-1: USB disconnect, device number 15 [ 322.481381][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 322.503866][ T5872] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 322.867497][ T1208] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 323.068164][ T1208] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 323.094860][ T1208] usb 5-1: config 0 has no interface number 0 [ 323.117059][ T1208] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.140918][ T1208] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.154290][ T1208] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 323.364778][ T1208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.386715][ T1208] usb 5-1: config 0 descriptor?? [ 323.452193][ T30] audit: type=1326 audit(1751896812.191:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8270 comm="syz.0.617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc32f8e929 code=0x0 [ 323.819510][ T1208] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 323.835376][ T1208] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 323.859517][ T1208] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 323.887898][ T1208] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 324.015389][ T1208] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 324.022680][ T1208] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 324.037030][ T1208] logitech 0003:046D:C293.0002: unknown main item tag 0x0 [ 324.038269][ T8258] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 324.051090][ T8258] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 324.051691][ T1208] logitech 0003:046D:C293.0002: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.4-1/input128 [ 324.102419][ T1208] logitech 0003:046D:C293.0002: no inputs found [ 324.188127][ T8258] vhci_hcd vhci_hcd.0: Device attached [ 324.310437][ T5934] usb 5-1: USB disconnect, device number 31 [ 324.317965][ T8282] vhci_hcd: connection closed [ 324.331486][ T2988] vhci_hcd: stop threads [ 324.355114][ T1217] vhci_hcd: vhci_device speed not set [ 324.362318][ T2988] vhci_hcd: release socket [ 324.383102][ T2988] vhci_hcd: disconnect device [ 324.622384][ T1217] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 324.640278][ T1217] usb 41-1: enqueue for inactive port 0 [ 324.716639][ T1217] vhci_hcd: vhci_device speed not set [ 324.743209][ T8294] FAULT_INJECTION: forcing a failure. [ 324.743209][ T8294] name failslab, interval 1, probability 0, space 0, times 0 [ 325.098167][ T8294] CPU: 0 UID: 0 PID: 8294 Comm: syz.2.620 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 325.098190][ T8294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.098199][ T8294] Call Trace: [ 325.098207][ T8294] [ 325.098214][ T8294] dump_stack_lvl+0x189/0x250 [ 325.098235][ T8294] ? __pfx____ratelimit+0x10/0x10 [ 325.098258][ T8294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.098274][ T8294] ? __pfx__printk+0x10/0x10 [ 325.098296][ T8294] ? __pfx___might_resched+0x10/0x10 [ 325.098311][ T8294] ? fs_reclaim_acquire+0x7d/0x100 [ 325.098329][ T8294] should_fail_ex+0x414/0x560 [ 325.098353][ T8294] ? xt_alloc_table_info+0x3b/0xa0 [ 325.098372][ T8294] should_failslab+0xa8/0x100 [ 325.098395][ T8294] __kvmalloc_node_noprof+0x161/0x5f0 [ 325.098417][ T8294] ? xt_alloc_table_info+0x3b/0xa0 [ 325.098440][ T8294] xt_alloc_table_info+0x3b/0xa0 [ 325.098460][ T8294] do_ip6t_set_ctl+0x88a/0xce0 [ 325.098487][ T8294] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 325.098521][ T8294] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 325.098548][ T8294] nf_setsockopt+0x26f/0x290 [ 325.098572][ T8294] rawv6_setsockopt+0x23b/0x5b0 [ 325.098595][ T8294] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 325.098614][ T8294] ? __fget_files+0x2a/0x420 [ 325.098627][ T8294] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 325.098649][ T8294] ? sock_common_setsockopt+0x36/0xc0 [ 325.098664][ T8294] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 325.098679][ T8294] do_sock_setsockopt+0x257/0x3e0 [ 325.098699][ T8294] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 325.098719][ T8294] ? __fget_files+0x2a/0x420 [ 325.098737][ T8294] __x64_sys_setsockopt+0x18b/0x220 [ 325.098759][ T8294] do_syscall_64+0xfa/0x3b0 [ 325.098782][ T8294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.098796][ T8294] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 325.098810][ T8294] ? clear_bhb_loop+0x60/0xb0 [ 325.098827][ T8294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.098841][ T8294] RIP: 0033:0x7f391ef8e929 [ 325.098854][ T8294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.098866][ T8294] RSP: 002b:00007f391fdc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 325.098882][ T8294] RAX: ffffffffffffffda RBX: 00007f391f1b6080 RCX: 00007f391ef8e929 [ 325.098893][ T8294] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 325.098901][ T8294] RBP: 00007f391fdc3090 R08: 00000000000005c0 R09: 0000000000000000 [ 325.098910][ T8294] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 325.098919][ T8294] R13: 0000000000000000 R14: 00007f391f1b6080 R15: 00007ffdd393c748 [ 325.098940][ T8294] [ 325.127074][ T8288] FAULT_INJECTION: forcing a failure. [ 325.127074][ T8288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.415041][ T8288] CPU: 1 UID: 0 PID: 8288 Comm: syz.3.619 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 325.415072][ T8288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.415085][ T8288] Call Trace: [ 325.415093][ T8288] [ 325.415102][ T8288] dump_stack_lvl+0x189/0x250 [ 325.415130][ T8288] ? __pfx____ratelimit+0x10/0x10 [ 325.415161][ T8288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.415184][ T8288] ? __pfx__printk+0x10/0x10 [ 325.415208][ T8288] ? __might_fault+0xb0/0x130 [ 325.415248][ T8288] should_fail_ex+0x414/0x560 [ 325.415281][ T8288] core_sys_select+0x724/0xa20 [ 325.415319][ T8288] ? __pfx_core_sys_select+0x10/0x10 [ 325.415375][ T8288] ? __pfx_set_user_sigmask+0x10/0x10 [ 325.415409][ T8288] __se_sys_pselect6+0x27a/0x300 [ 325.415445][ T8288] ? __pfx___se_sys_pselect6+0x10/0x10 [ 325.415475][ T8288] ? __pfx_ksys_write+0x10/0x10 [ 325.415499][ T8288] ? rcu_is_watching+0x15/0xb0 [ 325.415527][ T8288] ? __x64_sys_pselect6+0x21/0xf0 [ 325.415559][ T8288] do_syscall_64+0xfa/0x3b0 [ 325.415577][ T8288] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.415606][ T8288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.415625][ T8288] ? clear_bhb_loop+0x60/0xb0 [ 325.415650][ T8288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.415669][ T8288] RIP: 0033:0x7f59c358e929 [ 325.415687][ T8288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.415704][ T8288] RSP: 002b:00007f59c44c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 325.415743][ T8288] RAX: ffffffffffffffda RBX: 00007f59c37b5fa0 RCX: 00007f59c358e929 [ 325.415758][ T8288] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 325.415770][ T8288] RBP: 00007f59c44c8090 R08: 0000000000000000 R09: 0000000000000000 [ 325.415782][ T8288] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 325.415794][ T8288] R13: 0000000000000000 R14: 00007f59c37b5fa0 R15: 00007fff3fd63898 [ 325.415825][ T8288] [ 326.770258][ T8315] fuseblk: Bad value for 'fd' [ 328.349295][ T8334] FAULT_INJECTION: forcing a failure. [ 328.349295][ T8334] name failslab, interval 1, probability 0, space 0, times 0 [ 328.445344][ T8334] CPU: 0 UID: 0 PID: 8334 Comm: syz.2.630 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 328.445375][ T8334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.445387][ T8334] Call Trace: [ 328.445395][ T8334] [ 328.445403][ T8334] dump_stack_lvl+0x189/0x250 [ 328.445432][ T8334] ? __pfx____ratelimit+0x10/0x10 [ 328.445463][ T8334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.445485][ T8334] ? __pfx__printk+0x10/0x10 [ 328.445525][ T8334] ? __pfx___might_resched+0x10/0x10 [ 328.445552][ T8334] should_fail_ex+0x414/0x560 [ 328.445586][ T8334] should_failslab+0xa8/0x100 [ 328.445617][ T8334] __kmalloc_cache_noprof+0x70/0x3d0 [ 328.445646][ T8334] ? binder_get_thread+0x1c8/0x6d0 [ 328.445675][ T8334] binder_get_thread+0x1c8/0x6d0 [ 328.445696][ T8334] ? add_wait_queue+0xba/0x170 [ 328.445728][ T8334] binder_poll+0x46/0x380 [ 328.445749][ T8334] ? do_select+0x104a/0x17e0 [ 328.445776][ T8334] ? __pfx_binder_poll+0x10/0x10 [ 328.445801][ T8334] do_select+0x105e/0x17e0 [ 328.445828][ T8334] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 328.445867][ T8334] ? do_select+0x811/0x17e0 [ 328.445917][ T8334] ? __pfx_do_select+0x10/0x10 [ 328.445945][ T8334] ? __lock_acquire+0xab9/0xd20 [ 328.445969][ T8334] ? __pfx___pollwait+0x10/0x10 [ 328.446002][ T8334] ? __pfx_pollwake+0x10/0x10 [ 328.446034][ T8334] ? __pfx_pollwake+0x10/0x10 [ 328.446067][ T8334] ? __pfx_pollwake+0x10/0x10 [ 328.446099][ T8334] ? __pfx_pollwake+0x10/0x10 [ 328.446132][ T8334] ? __pfx_pollwake+0x10/0x10 [ 328.446213][ T8334] core_sys_select+0x6dd/0xa20 [ 328.446255][ T8334] ? __pfx_core_sys_select+0x10/0x10 [ 328.446310][ T8334] ? __pfx_set_user_sigmask+0x10/0x10 [ 328.446331][ T8334] ? do_sys_openat2+0x154/0x1c0 [ 328.446351][ T8334] ? kmem_cache_free+0x18f/0x400 [ 328.446388][ T8334] __se_sys_pselect6+0x27a/0x300 [ 328.446424][ T8334] ? __pfx___se_sys_pselect6+0x10/0x10 [ 328.446454][ T8334] ? __pfx_ksys_write+0x10/0x10 [ 328.446478][ T8334] ? rcu_is_watching+0x15/0xb0 [ 328.446511][ T8334] ? __x64_sys_pselect6+0x21/0xf0 [ 328.446544][ T8334] do_syscall_64+0xfa/0x3b0 [ 328.446562][ T8334] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.446591][ T8334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.446610][ T8334] ? clear_bhb_loop+0x60/0xb0 [ 328.446635][ T8334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.446654][ T8334] RIP: 0033:0x7f391ef8e929 [ 328.446673][ T8334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.446689][ T8334] RSP: 002b:00007f391fde4038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 328.446710][ T8334] RAX: ffffffffffffffda RBX: 00007f391f1b5fa0 RCX: 00007f391ef8e929 [ 328.446725][ T8334] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 328.446738][ T8334] RBP: 00007f391fde4090 R08: 0000000000000000 R09: 0000000000000000 [ 328.446750][ T8334] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 328.446762][ T8334] R13: 0000000000000000 R14: 00007f391f1b5fa0 R15: 00007ffdd393c748 [ 328.446793][ T8334] [ 328.448884][ T8335] xt_hashlimit: size too large, truncated to 1048576 [ 329.336494][ T8348] FAULT_INJECTION: forcing a failure. [ 329.336494][ T8348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.382624][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.1.633 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 329.382653][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.382665][ T8348] Call Trace: [ 329.382681][ T8348] [ 329.382690][ T8348] dump_stack_lvl+0x189/0x250 [ 329.382718][ T8348] ? __pfx____ratelimit+0x10/0x10 [ 329.382750][ T8348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.382773][ T8348] ? __pfx__printk+0x10/0x10 [ 329.382799][ T8348] ? __might_fault+0xb0/0x130 [ 329.382838][ T8348] should_fail_ex+0x414/0x560 [ 329.382873][ T8348] _copy_from_user+0x2d/0xb0 [ 329.382897][ T8348] do_ipv6_setsockopt+0x32d/0x2fb0 [ 329.382936][ T8348] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 329.382973][ T8348] ? get_pid_task+0x20/0x1f0 [ 329.383015][ T8348] ? rcu_read_lock_any_held+0xb3/0x120 [ 329.383039][ T8348] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 329.383066][ T8348] ? vfs_write+0x8d8/0xa90 [ 329.383110][ T8348] ? __lock_acquire+0xab9/0xd20 [ 329.383139][ T8348] ipv6_setsockopt+0x59/0x170 [ 329.383165][ T8348] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 329.383188][ T8348] do_sock_setsockopt+0x257/0x3e0 [ 329.383215][ T8348] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 329.383244][ T8348] ? __fget_files+0x2a/0x420 [ 329.383271][ T8348] __x64_sys_setsockopt+0x18b/0x220 [ 329.383302][ T8348] do_syscall_64+0xfa/0x3b0 [ 329.383320][ T8348] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.383349][ T8348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.383369][ T8348] ? clear_bhb_loop+0x60/0xb0 [ 329.383393][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.383413][ T8348] RIP: 0033:0x7f413658e929 [ 329.383431][ T8348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.383447][ T8348] RSP: 002b:00007f413740c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 329.383468][ T8348] RAX: ffffffffffffffda RBX: 00007f41367b5fa0 RCX: 00007f413658e929 [ 329.383483][ T8348] RDX: 0000000000000011 RSI: 0000000000000029 RDI: 0000000000000003 [ 329.383494][ T8348] RBP: 00007f413740c090 R08: 0000000000000004 R09: 0000000000000000 [ 329.383506][ T8348] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 329.383519][ T8348] R13: 0000000000000000 R14: 00007f41367b5fa0 R15: 00007ffe9ff2ea18 [ 329.383550][ T8348] [ 330.129431][ T5937] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 330.445596][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 330.468690][ T5937] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 330.493807][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.532819][ T5937] usb 5-1: Product: syz [ 330.542955][ T5937] usb 5-1: Manufacturer: syz [ 330.553099][ T5937] usb 5-1: SerialNumber: syz [ 330.584500][ T5937] r8152-cfgselector 5-1: Unknown version 0x0000 [ 330.591114][ T5937] r8152-cfgselector 5-1: config 0 descriptor?? [ 331.027068][ T5937] r8152-cfgselector 5-1: USB disconnect, device number 32 [ 333.314344][ T8413] FAULT_INJECTION: forcing a failure. [ 333.314344][ T8413] name failslab, interval 1, probability 0, space 0, times 0 [ 333.337740][ T8413] CPU: 1 UID: 0 PID: 8413 Comm: syz.3.646 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 333.337770][ T8413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.337782][ T8413] Call Trace: [ 333.337791][ T8413] [ 333.337799][ T8413] dump_stack_lvl+0x189/0x250 [ 333.337828][ T8413] ? __pfx____ratelimit+0x10/0x10 [ 333.337859][ T8413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.337882][ T8413] ? __pfx__printk+0x10/0x10 [ 333.337911][ T8413] ? __pfx___might_resched+0x10/0x10 [ 333.337934][ T8413] ? fs_reclaim_acquire+0x7d/0x100 [ 333.337959][ T8413] should_fail_ex+0x414/0x560 [ 333.338001][ T8413] should_failslab+0xa8/0x100 [ 333.338033][ T8413] kmem_cache_alloc_noprof+0x73/0x3c0 [ 333.338061][ T8413] ? security_file_alloc+0x34/0x330 [ 333.338095][ T8413] security_file_alloc+0x34/0x330 [ 333.338126][ T8413] init_file+0x93/0x2f0 [ 333.338151][ T8413] alloc_empty_file+0x6e/0x1d0 [ 333.338173][ T8413] dentry_open+0x44/0xa0 [ 333.338193][ T8413] ovl_dir_read+0x85/0x5f0 [ 333.338222][ T8413] ? __pfx_ovl_dir_read+0x10/0x10 [ 333.338237][ T8413] ? ovl_path_upper+0x105/0x170 [ 333.338267][ T8413] ? ovl_path_next+0x3b8/0x470 [ 333.338296][ T8413] ovl_dir_read_merged+0x19d/0x360 [ 333.338331][ T8413] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 333.338364][ T8413] ? __pfx_ovl_fill_merge+0x10/0x10 [ 333.338394][ T8413] ? __kasan_kmalloc+0x93/0xb0 [ 333.338425][ T8413] ? ovl_iterate+0xcf6/0x1f40 [ 333.338448][ T8413] ovl_iterate+0xdbd/0x1f40 [ 333.338466][ T8413] ? check_noncircular+0xe0/0x160 [ 333.338499][ T8413] ? validate_chain+0x897/0x2140 [ 333.338529][ T8413] ? __pfx_ovl_iterate+0x10/0x10 [ 333.338565][ T8413] ? __lock_acquire+0xab9/0xd20 [ 333.338596][ T8413] ? wrap_directory_iterator+0x5a/0xe0 [ 333.338636][ T8413] ? down_write+0x162/0x1f0 [ 333.338656][ T8413] ? __pfx_down_write+0x10/0x10 [ 333.338682][ T8413] ? __pfx_ovl_iterate+0x10/0x10 [ 333.338702][ T8413] wrap_directory_iterator+0x93/0xe0 [ 333.338731][ T8413] iterate_dir+0x5ac/0x770 [ 333.338762][ T8413] __se_sys_getdents+0xe4/0x250 [ 333.338793][ T8413] ? __pfx___se_sys_getdents+0x10/0x10 [ 333.338818][ T8413] ? ksys_write+0x22a/0x250 [ 333.338842][ T8413] ? __pfx_filldir+0x10/0x10 [ 333.338871][ T8413] ? __pfx_ksys_write+0x10/0x10 [ 333.338905][ T8413] ? do_syscall_64+0xbe/0x3b0 [ 333.338928][ T8413] do_syscall_64+0xfa/0x3b0 [ 333.338945][ T8413] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.338975][ T8413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.339002][ T8413] ? clear_bhb_loop+0x60/0xb0 [ 333.339027][ T8413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.339046][ T8413] RIP: 0033:0x7f59c358e929 [ 333.339064][ T8413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.339080][ T8413] RSP: 002b:00007f59c44a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 333.339102][ T8413] RAX: ffffffffffffffda RBX: 00007f59c37b6080 RCX: 00007f59c358e929 [ 333.339117][ T8413] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 333.339129][ T8413] RBP: 00007f59c44a7090 R08: 0000000000000000 R09: 0000000000000000 [ 333.339141][ T8413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.339152][ T8413] R13: 0000000000000001 R14: 00007f59c37b6080 R15: 00007fff3fd63898 [ 333.339183][ T8413] [ 333.668013][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.534521][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.647'. [ 334.556960][ T8426] blktrace: Concurrent blktraces are not allowed on nbd1 [ 335.653283][ T8443] syz.3.654 uses old SIOCAX25GETINFO [ 335.675198][ T5937] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 335.834987][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 335.847439][ T5937] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 335.860764][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 335.903273][ T5937] usb 5-1: Product: syz [ 335.921914][ T5937] usb 5-1: Manufacturer: syz [ 335.939875][ T5937] usb 5-1: SerialNumber: syz [ 335.963072][ T5937] usb 5-1: config 0 descriptor?? [ 336.045178][ T5934] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 336.195989][ T8435] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 336.227585][ T5934] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.260423][ T5914] usb 5-1: USB disconnect, device number 33 [ 336.285867][ T5934] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.323221][ T5934] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 336.343698][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 336.366359][ T5934] usb 4-1: SerialNumber: syz [ 337.219048][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.659'. [ 339.246723][ T5934] usb 4-1: 0:2 : does not exist [ 339.364860][ T5934] usb 4-1: USB disconnect, device number 15 [ 339.539433][ T7979] udevd[7979]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.955196][ T5934] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 340.650497][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.822742][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.836097][ T5934] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 340.847625][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.082403][ T5934] usb 3-1: config 0 descriptor?? [ 341.614355][ T30] audit: type=1326 audit(1751896830.351:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8514 comm="syz.1.670" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f413658e929 code=0x0 [ 342.595545][ T5934] uclogic 0003:5543:0522.0003: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input0 [ 342.627201][ T5934] usb 3-1: USB disconnect, device number 16 [ 342.813603][ T8527] fido_id[8527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 342.909345][ T8526] block device autoloading is deprecated and will be removed. [ 344.102028][ T30] audit: type=1326 audit(1751896832.821:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.2.675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f391ef8e929 code=0x0 [ 345.478037][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'. [ 350.561699][ T10] IPVS: starting estimator thread 0... [ 350.665361][ T8591] IPVS: using max 24 ests per chain, 57600 per kthread [ 350.795178][ T8597] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[8597] [ 350.875995][ T8594] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 351.438462][ T8578] syz_tun: entered allmulticast mode [ 351.955620][ T8578] syz_tun: left allmulticast mode [ 352.114614][ T8610] netlink: 'syz.4.692': attribute type 25 has an invalid length. [ 353.342290][ T8623] FAULT_INJECTION: forcing a failure. [ 353.342290][ T8623] name failslab, interval 1, probability 0, space 0, times 0 [ 353.355853][ T8623] CPU: 0 UID: 0 PID: 8623 Comm: syz.2.697 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 353.355880][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 353.355892][ T8623] Call Trace: [ 353.355900][ T8623] [ 353.355909][ T8623] dump_stack_lvl+0x189/0x250 [ 353.355938][ T8623] ? __pfx____ratelimit+0x10/0x10 [ 353.355969][ T8623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.355992][ T8623] ? __pfx__printk+0x10/0x10 [ 353.356015][ T8623] ? irqentry_exit+0x74/0x90 [ 353.356061][ T8623] should_fail_ex+0x414/0x560 [ 353.356095][ T8623] should_failslab+0xa8/0x100 [ 353.356129][ T8623] __kmalloc_noprof+0xcb/0x4f0 [ 353.356157][ T8623] ? io_cache_alloc_new+0x40/0x100 [ 353.356183][ T8623] io_cache_alloc_new+0x40/0x100 [ 353.356206][ T8623] io_arm_poll_handler+0x537/0xb70 [ 353.356237][ T8623] ? __pfx_io_write+0x10/0x10 [ 353.356271][ T8623] ? __pfx_io_arm_poll_handler+0x10/0x10 [ 353.356308][ T8623] ? io_file_get_normal+0x101/0x2f0 [ 353.356337][ T8623] ? io_issue_sqe+0x3bb/0xfd0 [ 353.356366][ T8623] io_queue_async+0x79/0x2f0 [ 353.356399][ T8623] io_submit_sqes+0xe22/0x1c50 [ 353.356459][ T8623] __se_sys_io_uring_enter+0x2df/0x2b20 [ 353.356516][ T8623] ? ksys_write+0x1cb/0x250 [ 353.356548][ T8623] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 353.356573][ T8623] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 353.356593][ T8623] ? __pfx_vfs_write+0x10/0x10 [ 353.356624][ T8623] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 353.356648][ T8623] ? __fget_files+0x3a0/0x420 [ 353.356675][ T8623] ? fput+0xa0/0xd0 [ 353.356697][ T8623] ? ksys_write+0x22a/0x250 [ 353.356727][ T8623] ? __pfx_ksys_write+0x10/0x10 [ 353.356761][ T8623] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 353.356794][ T8623] do_syscall_64+0xfa/0x3b0 [ 353.356814][ T8623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.356833][ T8623] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 353.356854][ T8623] ? clear_bhb_loop+0x60/0xb0 [ 353.356879][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.356899][ T8623] RIP: 0033:0x7f391ef8e929 [ 353.356918][ T8623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.356936][ T8623] RSP: 002b:00007f391fdc3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 353.356958][ T8623] RAX: ffffffffffffffda RBX: 00007f391f1b6080 RCX: 00007f391ef8e929 [ 353.356973][ T8623] RDX: 0000000000000002 RSI: 0000000000004d10 RDI: 0000000000000006 [ 353.356985][ T8623] RBP: 00007f391fdc3090 R08: 0000000000000000 R09: 0000000000000000 [ 353.356998][ T8623] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 353.357010][ T8623] R13: 0000000000000000 R14: 00007f391f1b6080 R15: 00007ffdd393c748 [ 353.357043][ T8623] [ 353.632085][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.815018][ T8653] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[8653] [ 357.478520][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 357.591723][ T8672] netlink: 'syz.2.709': attribute type 29 has an invalid length. [ 357.601382][ T8672] netlink: 'syz.2.709': attribute type 29 has an invalid length. [ 357.614718][ T8672] FAULT_INJECTION: forcing a failure. [ 357.614718][ T8672] name failslab, interval 1, probability 0, space 0, times 0 [ 357.627634][ T8672] CPU: 1 UID: 0 PID: 8672 Comm: syz.2.709 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 357.627662][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.627675][ T8672] Call Trace: [ 357.627683][ T8672] [ 357.627692][ T8672] dump_stack_lvl+0x189/0x250 [ 357.627720][ T8672] ? __pfx____ratelimit+0x10/0x10 [ 357.627753][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.627775][ T8672] ? __pfx__printk+0x10/0x10 [ 357.627815][ T8672] ? __pfx___might_resched+0x10/0x10 [ 357.627843][ T8672] should_fail_ex+0x414/0x560 [ 357.627878][ T8672] should_failslab+0xa8/0x100 [ 357.627911][ T8672] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 357.627940][ T8672] ? __alloc_skb+0x112/0x2d0 [ 357.627968][ T8672] __alloc_skb+0x112/0x2d0 [ 357.627996][ T8672] netlink_sendmsg+0x5c6/0xb30 [ 357.628031][ T8672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.628058][ T8672] ? rcu_is_watching+0x15/0xb0 [ 357.628085][ T8672] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 357.628114][ T8672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.628139][ T8672] __sock_sendmsg+0x21c/0x270 [ 357.628175][ T8672] ____sys_sendmsg+0x505/0x830 [ 357.628207][ T8672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.628242][ T8672] ? import_iovec+0x7b/0xa0 [ 357.628271][ T8672] ___sys_sendmsg+0x21f/0x2a0 [ 357.628299][ T8672] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.628364][ T8672] ? __fget_files+0x2a/0x420 [ 357.628382][ T8672] ? __fget_files+0x3a0/0x420 [ 357.628412][ T8672] __x64_sys_sendmsg+0x19b/0x260 [ 357.628442][ T8672] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.628479][ T8672] ? __pfx_ksys_write+0x10/0x10 [ 357.628512][ T8672] ? do_syscall_64+0xbe/0x3b0 [ 357.628537][ T8672] do_syscall_64+0xfa/0x3b0 [ 357.628557][ T8672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.628576][ T8672] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 357.628596][ T8672] ? clear_bhb_loop+0x60/0xb0 [ 357.628621][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.628641][ T8672] RIP: 0033:0x7f391ef8e929 [ 357.628659][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.628677][ T8672] RSP: 002b:00007f391fda2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.628700][ T8672] RAX: ffffffffffffffda RBX: 00007f391f1b6160 RCX: 00007f391ef8e929 [ 357.628714][ T8672] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000007 [ 357.628727][ T8672] RBP: 00007f391fda2090 R08: 0000000000000000 R09: 0000000000000000 [ 357.628740][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.628752][ T8672] R13: 0000000000000000 R14: 00007f391f1b6160 R15: 00007ffdd393c748 [ 357.628785][ T8672] [ 357.896865][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.080722][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 358.091570][ T8671] syz.2.709: attempt to access beyond end of device [ 358.091570][ T8671] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 358.123946][ T24] usb 2-1: config 0 has an invalid interface number: 166 but max is 0 [ 358.132270][ T24] usb 2-1: config 0 has no interface number 0 [ 358.138770][ T24] usb 2-1: config 0 interface 166 has no altsetting 0 [ 358.219203][ T24] usb 2-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=59.4c [ 358.243105][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.251718][ T24] usb 2-1: Product: syz [ 358.319013][ T24] usb 2-1: Manufacturer: syz [ 358.355093][ T24] usb 2-1: SerialNumber: syz [ 358.368345][ T8679] netlink: 'syz.4.710': attribute type 29 has an invalid length. [ 358.374022][ T24] usb 2-1: config 0 descriptor?? [ 358.381872][ T8679] netlink: 'syz.4.710': attribute type 29 has an invalid length. [ 358.390685][ T8679] netlink: 500 bytes leftover after parsing attributes in process `syz.4.710'. [ 358.401669][ T8679] unsupported nla_type 6145 [ 358.482350][ T24] HFC-S_USB 2-1:0.166: probe with driver HFC-S_USB failed with error -5 [ 358.942919][ T1208] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 359.399991][ T1208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.445137][ T1208] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.677800][ T24] usb 2-1: USB disconnect, device number 13 [ 361.735035][ T1208] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 361.744155][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.769814][ T1208] usb 3-1: config 0 descriptor?? [ 361.862639][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.715'. [ 361.961050][ T8698] dummy0: entered promiscuous mode [ 362.025072][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.715'. [ 362.044767][ T1208] usb 3-1: can't set config #0, error -71 [ 362.060797][ T8698] macvtap1: entered promiscuous mode [ 362.097386][ T1208] usb 3-1: USB disconnect, device number 17 [ 362.106858][ T8698] macvtap1: entered allmulticast mode [ 362.138516][ T8698] dummy0: entered allmulticast mode [ 362.183915][ T8699] dummy0: left allmulticast mode [ 362.243370][ T8702] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[8702] [ 362.288903][ T8699] dummy0: left promiscuous mode [ 367.598352][ T8734] netlink: 'syz.3.725': attribute type 3 has an invalid length. [ 367.598386][ T8734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.725'. [ 367.794325][ T8741] FAULT_INJECTION: forcing a failure. [ 367.794325][ T8741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.794391][ T8741] CPU: 0 UID: 0 PID: 8741 Comm: syz.0.728 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 367.794415][ T8741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.794433][ T8741] Call Trace: [ 367.794445][ T8741] [ 367.794454][ T8741] dump_stack_lvl+0x189/0x250 [ 367.794483][ T8741] ? __pfx____ratelimit+0x10/0x10 [ 367.794515][ T8741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.794539][ T8741] ? __pfx__printk+0x10/0x10 [ 367.794579][ T8741] should_fail_ex+0x414/0x560 [ 367.794614][ T8741] _copy_to_user+0x31/0xb0 [ 367.794640][ T8741] simple_read_from_buffer+0xe1/0x170 [ 367.794677][ T8741] proc_fail_nth_read+0x1df/0x250 [ 367.794701][ T8741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.794726][ T8741] ? rw_verify_area+0x258/0x650 [ 367.794752][ T8741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.794775][ T8741] vfs_read+0x1fd/0x980 [ 367.794808][ T8741] ? __pfx___mutex_lock+0x10/0x10 [ 367.794828][ T8741] ? __pfx_vfs_read+0x10/0x10 [ 367.794857][ T8741] ? __fget_files+0x2a/0x420 [ 367.794885][ T8741] ? __fget_files+0x3a0/0x420 [ 367.794902][ T8741] ? __fget_files+0x2a/0x420 [ 367.794929][ T8741] ksys_read+0x145/0x250 [ 367.794959][ T8741] ? __pfx_ksys_read+0x10/0x10 [ 367.794992][ T8741] ? do_syscall_64+0xbe/0x3b0 [ 367.795015][ T8741] do_syscall_64+0xfa/0x3b0 [ 367.795032][ T8741] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.795060][ T8741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.795080][ T8741] ? clear_bhb_loop+0x60/0xb0 [ 367.795106][ T8741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.795125][ T8741] RIP: 0033:0x7fdc32f8d33c [ 367.795151][ T8741] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 367.795169][ T8741] RSP: 002b:00007fdc30df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 367.795190][ T8741] RAX: ffffffffffffffda RBX: 00007fdc331b6080 RCX: 00007fdc32f8d33c [ 367.795205][ T8741] RDX: 000000000000000f RSI: 00007fdc30df60a0 RDI: 0000000000000008 [ 367.795218][ T8741] RBP: 00007fdc30df6090 R08: 0000000000000000 R09: 0000000000000000 [ 367.795231][ T8741] R10: 000000000000004a R11: 0000000000000246 R12: 0000000000000001 [ 367.795243][ T8741] R13: 0000000000000001 R14: 00007fdc331b6080 R15: 00007ffd0d2df838 [ 367.795276][ T8741] [ 370.525432][ T8758] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[8758] [ 372.340531][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.737'. [ 372.816616][ T30] audit: type=1326 audit(1751896861.561:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8784 comm="syz.1.739" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f413658e929 code=0x0 [ 373.107189][ T5849] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 373.114410][ T5849] Bluetooth: hci4: unexpected event for opcode 0x203e [ 373.185031][ T1217] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 374.465760][ T1217] usb 2-1: Using ep0 maxpacket: 32 [ 374.487537][ T1217] usb 2-1: unable to get BOS descriptor or descriptor too short [ 374.624359][ T1217] usb 2-1: no configurations [ 374.757644][ T1217] usb 2-1: can't read configurations, error -22 [ 375.257854][ T1217] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 375.343695][ T8809] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[8809] [ 375.465004][ T1217] usb 2-1: Using ep0 maxpacket: 32 [ 375.472528][ T1217] usb 2-1: unable to get BOS descriptor or descriptor too short [ 375.481405][ T1217] usb 2-1: no configurations [ 375.489648][ T1217] usb 2-1: can't read configurations, error -22 [ 375.508127][ T1217] usb usb2-port1: attempt power cycle [ 375.908232][ T1217] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 375.971621][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 376.364979][ T1217] usb 2-1: device descriptor read/8, error -32 [ 378.406419][ T8832] fuseblk: Bad value for 'fd' [ 378.563812][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.570256][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.791533][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 378.848708][ T8851] blktrace: Concurrent blktraces are not allowed on nbd2 [ 387.865107][ T1208] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 388.212887][ T1208] usb 4-1: no configurations [ 388.696293][ T1208] usb 4-1: can't read configurations, error -22 [ 388.855183][ T1208] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 389.815000][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 390.027769][ T10] usb 3-1: device descriptor read/64, error -71 [ 390.465172][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 390.618983][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 390.656571][ T10] usb 3-1: device descriptor read/64, error -71 [ 390.786216][ T10] usb usb3-port1: attempt power cycle [ 391.405179][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 391.436321][ T10] usb 3-1: device descriptor read/8, error -71 [ 391.696001][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 391.737618][ T10] usb 3-1: device descriptor read/8, error -71 [ 391.849315][ T10] usb usb3-port1: unable to enumerate USB device [ 391.973611][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'. [ 391.997404][ T8941] blktrace: Concurrent blktraces are not allowed on nbd3 [ 392.158607][ T8934] netlink: 188 bytes leftover after parsing attributes in process `syz.0.778'. [ 392.427878][ T8931] delete_channel: no stack [ 395.334525][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 397.757982][ T9011] netlink: 152 bytes leftover after parsing attributes in process `syz.3.798'. [ 397.996968][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'. [ 398.084173][ T9020] blktrace: Concurrent blktraces are not allowed on nbd1 [ 398.541501][ T9027] mmap: syz.4.803 (9027) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 398.833218][ T9035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.804'. [ 400.704493][ T9048] x_tables: ip_tables: osf match: only valid for protocol 6 [ 401.139805][ T9055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.813'. [ 401.245209][ T9058] input: syz1 as /devices/virtual/input/input8 [ 403.271800][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'. [ 403.789976][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.819'. [ 403.844151][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.819'. [ 404.844059][ T10] libceph: connect (1)[c::]:6789 error -101 [ 404.884587][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 405.097074][ T10] libceph: connect (1)[c::]:6789 error -101 [ 405.136845][ T9100] ceph: No mds server is up or the cluster is laggy [ 405.191085][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 406.230747][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'. [ 406.860633][ T9125] blktrace: Concurrent blktraces are not allowed on nbd0 [ 407.054792][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.831'. [ 407.232844][ T9130] input: syz0 as /devices/virtual/input/input9 [ 407.360415][ T9130] overlayfs: failed to get inode (-116) [ 407.433387][ T9130] overlayfs: failed to get inode (-116) [ 407.512476][ T9130] overlayfs: failed to get inode (-116) [ 407.610219][ T9130] overlayfs: failed to get inode (-116) [ 409.915427][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 410.894936][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 410.908532][ T24] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0x59, changing to 0x9 [ 410.920064][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 410.930043][ T24] usb 5-1: New USB device found, idVendor=16d0, idProduct=10bb, bcdDevice=de.8e [ 410.951883][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.960008][ T24] usb 5-1: Product: syz [ 410.964293][ T24] usb 5-1: Manufacturer: syz [ 410.969022][ T24] usb 5-1: SerialNumber: syz [ 410.977732][ T24] usb 5-1: config 0 descriptor?? [ 411.414657][ T9166] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 411.424038][ T9166] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 412.349111][ T9170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.844'. [ 412.784984][ T5931] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 413.084422][ T5931] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 413.212268][ T5931] usb 2-1: config 0 has no interface number 0 [ 413.382585][ T5931] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 413.521111][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.534790][ T10] usb 5-1: USB disconnect, device number 34 [ 413.541030][ T5931] usb 2-1: config 0 descriptor?? [ 413.600196][ T5931] cp210x 2-1:0.1: cp210x converter detected [ 414.257730][ T5931] cp210x 2-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 414.305594][ T5931] cp210x 2-1:0.1: failed to get vendor val 0x3711 size 2: -71 [ 414.321045][ T5931] cp210x 2-1:0.1: GPIO initialisation failed: -71 [ 414.341413][ T5931] usb 2-1: cp210x converter now attached to ttyUSB0 [ 415.259743][ T5931] usb 2-1: USB disconnect, device number 18 [ 415.291985][ T5931] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 415.310108][ T5931] cp210x 2-1:0.1: device disconnected [ 416.580720][ T9210] @ÿ: renamed from veth0_vlan (while UP) [ 416.762917][ T9214] fuseblk: Bad value for 'fd' [ 417.479512][ T9220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.860'. [ 417.516889][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'. [ 417.548785][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.860'. [ 418.167781][ T9222] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 420.285522][ T30] audit: type=1326 audit(1751896908.811:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9242 comm="syz.4.864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa20db8e929 code=0x0 [ 420.336723][ T5934] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 421.263512][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 421.875164][ T5934] usb 3-1: device descriptor read/all, error -71 [ 423.139924][ T9277] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 423.149268][ T9277] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 424.245169][ T5934] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 425.297655][ T5934] usb 3-1: no configurations [ 425.303437][ T5934] usb 3-1: can't read configurations, error -22 [ 425.475382][ T5934] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 425.655863][ T5934] usb 3-1: no configurations [ 425.671655][ T5934] usb 3-1: can't read configurations, error -22 [ 425.722298][ T5934] usb usb3-port1: attempt power cycle [ 427.093130][ T9308] syz.0.879: attempt to access beyond end of device [ 427.093130][ T9308] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 427.987134][ T9325] FAULT_INJECTION: forcing a failure. [ 427.987134][ T9325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.062977][ T9325] CPU: 0 UID: 0 PID: 9325 Comm: syz.2.884 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 428.063008][ T9325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 428.063021][ T9325] Call Trace: [ 428.063029][ T9325] [ 428.063039][ T9325] dump_stack_lvl+0x189/0x250 [ 428.063068][ T9325] ? __pfx____ratelimit+0x10/0x10 [ 428.063100][ T9325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.063123][ T9325] ? __pfx__printk+0x10/0x10 [ 428.063149][ T9325] ? __might_fault+0xb0/0x130 [ 428.063191][ T9325] should_fail_ex+0x414/0x560 [ 428.063226][ T9325] _copy_from_user+0x2d/0xb0 [ 428.063252][ T9325] __sys_bpf+0x1ed/0x860 [ 428.063286][ T9325] ? __pfx___sys_bpf+0x10/0x10 [ 428.063338][ T9325] ? ksys_write+0x22a/0x250 [ 428.063369][ T9325] ? __pfx_ksys_write+0x10/0x10 [ 428.063394][ T9325] ? rcu_is_watching+0x15/0xb0 [ 428.063425][ T9325] __x64_sys_bpf+0x7c/0x90 [ 428.063454][ T9325] do_syscall_64+0xfa/0x3b0 [ 428.063472][ T9325] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.063501][ T9325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.063535][ T9325] ? clear_bhb_loop+0x60/0xb0 [ 428.063559][ T9325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.063578][ T9325] RIP: 0033:0x7f391ef8e929 [ 428.063596][ T9325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.063613][ T9325] RSP: 002b:00007f391fde4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 428.063635][ T9325] RAX: ffffffffffffffda RBX: 00007f391f1b5fa0 RCX: 00007f391ef8e929 [ 428.063649][ T9325] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 000000000000001c [ 428.063662][ T9325] RBP: 00007f391fde4090 R08: 0000000000000000 R09: 0000000000000000 [ 428.063675][ T9325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.063686][ T9325] R13: 0000000000000000 R14: 00007f391f1b5fa0 R15: 00007ffdd393c748 [ 428.063717][ T9325] [ 428.254172][ C0] vkms_vblank_simulate: vblank timer overrun [ 428.939129][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 429.332706][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 429.350572][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 429.366815][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.396953][ T10] usb 3-1: Product: syz [ 429.403341][ T10] usb 3-1: Manufacturer: syz [ 429.416331][ T10] usb 3-1: SerialNumber: syz [ 429.422112][ T9345] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 429.463506][ T9345] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 429.477031][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 429.483528][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 429.653064][ T9351] ------------[ cut here ]------------ [ 429.660060][ T9351] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl726.c:331:46 [ 429.668787][ T9351] shift exponent -2147450880 is negative [ 429.674431][ T9351] CPU: 1 UID: 0 PID: 9351 Comm: syz.4.887 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 429.674451][ T9351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.674461][ T9351] Call Trace: [ 429.674467][ T9351] [ 429.674473][ T9351] dump_stack_lvl+0x189/0x250 [ 429.674497][ T9351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.674514][ T9351] ? __pfx__printk+0x10/0x10 [ 429.674545][ T9351] ubsan_epilogue+0xa/0x40 [ 429.674565][ T9351] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 429.674593][ T9351] ? __kmalloc_noprof+0x29b/0x4f0 [ 429.674622][ T9351] pcl726_attach+0xac4/0xd50 [ 429.674654][ T9351] comedi_device_attach+0x520/0x670 [ 429.674693][ T9351] comedi_unlocked_ioctl+0x686/0xf40 [ 429.674731][ T9351] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 429.674777][ T9351] ? __pfx_smack_log+0x10/0x10 [ 429.674800][ T9351] ? smk_access+0x14c/0x4e0 [ 429.674832][ T9351] ? smk_tskacc+0x2fc/0x370 [ 429.674860][ T9351] ? smack_file_ioctl+0x24a/0x340 [ 429.674891][ T9351] ? __pfx_smack_file_ioctl+0x10/0x10 [ 429.674930][ T9351] ? __fget_files+0x2a/0x420 [ 429.674948][ T9351] ? __fget_files+0x3a0/0x420 [ 429.674966][ T9351] ? __fget_files+0x2a/0x420 [ 429.674988][ T9351] ? bpf_lsm_file_ioctl+0x9/0x20 [ 429.675009][ T9351] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 429.675037][ T9351] __se_sys_ioctl+0xf9/0x170 [ 429.675067][ T9351] do_syscall_64+0xfa/0x3b0 [ 429.675086][ T9351] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.675117][ T9351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.675138][ T9351] ? clear_bhb_loop+0x60/0xb0 [ 429.675164][ T9351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.675192][ T9351] RIP: 0033:0x7fa20db8e929 [ 429.675212][ T9351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.675231][ T9351] RSP: 002b:00007fa20e99d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.675254][ T9351] RAX: ffffffffffffffda RBX: 00007fa20ddb6320 RCX: 00007fa20db8e929 [ 429.675270][ T9351] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000004 [ 429.675284][ T9351] RBP: 00007fa20dc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 429.675297][ T9351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.675309][ T9351] R13: 0000000000000001 R14: 00007fa20ddb6320 R15: 00007ffc6304bfb8 [ 429.675354][ T9351] [ 429.909897][ T9351] ---[ end trace ]--- [ 429.913941][ T9351] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 429.921214][ T9351] CPU: 1 UID: 0 PID: 9351 Comm: syz.4.887 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 429.931400][ T9351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.941480][ T9351] Call Trace: [ 429.944767][ T9351] [ 429.947724][ T9351] dump_stack_lvl+0x99/0x250 [ 429.952335][ T9351] ? __asan_memcpy+0x40/0x70 [ 429.956960][ T9351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.962187][ T9351] ? __pfx__printk+0x10/0x10 [ 429.966826][ T9351] panic+0x2db/0x790 [ 429.970777][ T9351] ? __pfx_panic+0x10/0x10 [ 429.975232][ T9351] ? _printk+0xcf/0x120 [ 429.979423][ T9351] ? __pfx__printk+0x10/0x10 [ 429.984057][ T9351] check_panic_on_warn+0x89/0xb0 [ 429.989037][ T9351] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 429.995468][ T9351] ? __kmalloc_noprof+0x29b/0x4f0 [ 430.000540][ T9351] pcl726_attach+0xac4/0xd50 [ 430.005170][ T9351] comedi_device_attach+0x520/0x670 [ 430.010413][ T9351] comedi_unlocked_ioctl+0x686/0xf40 [ 430.015720][ T9351] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 430.021551][ T9351] ? __pfx_smack_log+0x10/0x10 [ 430.026347][ T9351] ? smk_access+0x14c/0x4e0 [ 430.030888][ T9351] ? smk_tskacc+0x2fc/0x370 [ 430.035407][ T9351] ? smack_file_ioctl+0x24a/0x340 [ 430.040446][ T9351] ? __pfx_smack_file_ioctl+0x10/0x10 [ 430.045854][ T9351] ? __fget_files+0x2a/0x420 [ 430.050459][ T9351] ? __fget_files+0x3a0/0x420 [ 430.055177][ T9351] ? __fget_files+0x2a/0x420 [ 430.059802][ T9351] ? bpf_lsm_file_ioctl+0x9/0x20 [ 430.064752][ T9351] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 430.070591][ T9351] __se_sys_ioctl+0xf9/0x170 [ 430.075201][ T9351] do_syscall_64+0xfa/0x3b0 [ 430.079727][ T9351] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.084966][ T9351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.091072][ T9351] ? clear_bhb_loop+0x60/0xb0 [ 430.095782][ T9351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.101684][ T9351] RIP: 0033:0x7fa20db8e929 [ 430.106136][ T9351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.125784][ T9351] RSP: 002b:00007fa20e99d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.134244][ T9351] RAX: ffffffffffffffda RBX: 00007fa20ddb6320 RCX: 00007fa20db8e929 [ 430.142233][ T9351] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000004 [ 430.150230][ T9351] RBP: 00007fa20dc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 430.158244][ T9351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.166246][ T9351] R13: 0000000000000001 R14: 00007fa20ddb6320 R15: 00007ffc6304bfb8 [ 430.174269][ T9351] [ 430.177809][ T9351] Kernel Offset: disabled [ 430.182216][ T9351] Rebooting in 86400 seconds..