last executing test programs: 2m47.694776195s ago: executing program 2 (id=805): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x7, 0xe, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000d6a100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 2m47.452847609s ago: executing program 2 (id=806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) timerfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) sendto(r1, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 2m46.474345703s ago: executing program 2 (id=809): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x80000018}) shutdown(r1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x10000, 0x1, 0x8000000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) epoll_create1(0x80000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a7", 0x13}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/50, 0x32}, {&(0x7f0000000280)=""/203, 0xcb}, {&(0x7f0000000380)=""/14, 0xe}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/226, 0xe2}], 0x5) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000040)={0x1, 0x1, 0x6e, 0x0, 0xd, 0x80000000, 0x4001}) 2m45.960935655s ago: executing program 2 (id=812): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0) r4 = syz_io_uring_setup(0x20074d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5c9}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) wait4(0x0, 0x0, 0x1000000, 0x0) io_uring_enter(r4, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 2m42.904497324s ago: executing program 2 (id=819): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x5, 0x0, 0x4, 0x2672, 0x1, 0x0, 0x0, 0x0, 0x80, 0x1fd}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x1fe, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f00000006c0)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, &(0x7f0000000180)='\x00', 0x1, 0x0, 0x0, 0x0, r3}]) (fail_nth: 4) 2m42.208056973s ago: executing program 2 (id=822): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000340300000ee600f0670200001400000016030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000019300)=ANY=[@ANYRESDEC=r1, @ANYBLOB="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", @ANYRESDEC=r0], 0x48) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 2m26.869815227s ago: executing program 32 (id=822): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000340300000ee600f0670200001400000016030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000019300)=ANY=[@ANYRESDEC=r1, @ANYBLOB="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", @ANYRESDEC=r0], 0x48) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 1m58.322660318s ago: executing program 4 (id=936): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00003c", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf251b0000000700210061610000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='hugetlbfs\x00', 0x30, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x7) prlimit64(r3, 0x3, &(0x7f0000000340)={0x7, 0xeeb6}, &(0x7f0000000380)) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x220082a, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="3c02bae9b71e90a3446352b07309842f481e07261a84028a3f154a04f5c0dff1000000000000000000"]) r6 = syz_io_uring_setup(0x507a, &(0x7f00000005c0)={0x0, 0x2109, 0x100, 0x0, 0x30d}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r6, 0x6f58, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x203, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r10 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x8}) io_uring_enter(r10, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m55.008459145s ago: executing program 4 (id=949): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0xea36451a690d1a2f, 0x7, 0x19, "50b22fd9cdc1f914138511d0a522daee7942631266f1f36b62"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xb8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "b5fb"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'g&'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x10}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x18}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x9}}) 1m51.14713449s ago: executing program 4 (id=962): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) getpid() socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000bf85f34018", @ANYRES16=0x0, @ANYBLOB="200028bd7000fddbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e000300"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) sendmsg$AUDIT_SET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x806, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x1, r1, 0xe, 0x9, 0x6, 0xffffffff, 0x0, 0x7fff, 0x9}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x412240, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) 1m49.873820426s ago: executing program 4 (id=967): socket$kcm(0x21, 0x2, 0xa) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff46}], 0x2) r2 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x400, 0x0, 0x3, 0x8000000000, 0x2, 0x3}, 0x0, &(0x7f0000000280)={0x3ff, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m47.962068477s ago: executing program 4 (id=970): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x36}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1}, 0x24004010) 1m47.522102023s ago: executing program 4 (id=971): unshare(0x26020280) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0x100000001) (async) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc020000", @ANYRES16=r1, @ANYBLOB="00042abd7000fedbdf252800000008000300915e8700f72b26bd3f928f10278b47ae6a2bc73ab1fa0cb2a6288e5dffe92d9665aa94a47e1b89ae31573412f907bbb1e601c67f31a71b0e47833d8b5f3e1ad83566e44973fe0b40fcb572534b4818b8cfc289d7cf4adf862e16e366857b6f252f889b9d3fad43e76b1d9e03f58ec0f5", @ANYRES32=r2, @ANYBLOB="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"], 0x2bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r4, 0x0, 0xfb2}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000040) sendfile(r0, r0, &(0x7f0000000640)=0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x8, 0xffffffffffffffff, 0x4, 0x9}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r9 = socket(0x21, 0x80805, 0x7f) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, 0x0, &(0x7f0000000080)) 1m32.4183029s ago: executing program 33 (id=971): unshare(0x26020280) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0x100000001) (async) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc020000", @ANYRES16=r1, @ANYBLOB="00042abd7000fedbdf252800000008000300915e8700f72b26bd3f928f10278b47ae6a2bc73ab1fa0cb2a6288e5dffe92d9665aa94a47e1b89ae31573412f907bbb1e601c67f31a71b0e47833d8b5f3e1ad83566e44973fe0b40fcb572534b4818b8cfc289d7cf4adf862e16e366857b6f252f889b9d3fad43e76b1d9e03f58ec0f5", @ANYRES32=r2, @ANYBLOB="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"], 0x2bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r4, 0x0, 0xfb2}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000040) sendfile(r0, r0, &(0x7f0000000640)=0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x8, 0xffffffffffffffff, 0x4, 0x9}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r9 = socket(0x21, 0x80805, 0x7f) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, 0x0, &(0x7f0000000080)) 11.957431702s ago: executing program 1 (id=1224): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000002b00)=""/4074, 0xfea}, {&(0x7f0000000580)=""/87, 0x57}, {&(0x7f0000001740)=""/4065, 0xfe1}, {&(0x7f0000000180)=""/244, 0xf4}, {&(0x7f0000000c00)=""/131, 0x83}], 0x5}, 0x40000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x8000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000002c0)=@in6={0xa, 0x4e21, 0x1c4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x400}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000005580)=[{&(0x7f00000000c0)=@in={0x2, 0x4e23, @multicast2}, 0x10, 0xfffffffffffffffc, 0x0, &(0x7f0000000300)=[@authinfo={0x18, 0x84, 0x6, {0xfff5}}], 0x18, 0x200040d4}, {&(0x7f0000000340)=@in6={0xa, 0x4e20, 0xfffff1b1, @private0, 0x5}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000600)="587db19d3514a2d8f38c7582658078f772fa2d66f73dc225a282821187e87e3eb70e8ffb0bbc96f2f51398e6b1eededd81de207649008dce85119198c3f3c8ca0a92ee9c53d7fb5685c661f9a88ce089861c028f31a82463f63f99158ea7ad410e789920f0944b1119401cdf70cba8d0416c4b4dce583c830d90bdfa3fb852a6e8c9a08ceb8d75e7bd8960b863475fa4061a850a20f7d9e5676fc4395a27a6b59dd1c9ba97bf566761abca44728f4d628db500caa894d3", 0xb7}, {&(0x7f0000002800)="028053defddfdbfdff9bffbca6eaea40e71fb0764d0c0a938c779475fa7dcb8da511c6b3d6d21dbbdba179fa3ae39752075a62a22ed484a5645eddd011a19ebf31d1699f82751a46f6d89d808eba384fed7f941c431bd0f6ad188713d17a38f4ffccbd27f51eec1406451662b045ae14d673d6d089d0fdfa2445fb1fbca287303e2917310d7ee453cf02b81bcad4ddaeaeb2f224386f4d8361368d8be39af9c09f8089689dad84dcd413fc113a04fe7ba3ed0ec728de40162f3d0e1f97043b614b8d4ba522639ed7b51232c6cecdafcadf9f93ef5f577fa4061fe43249a4996b679f5bd98e93fd", 0xe7}, {&(0x7f0000000380)="905dafde304314a094c2dd05adaa5fa5dcf29adf22927a75f8107c922e0120a796717d16467144578935771ab83f831dcad4ece7f8526d8ba8f938f9ad9f5c1f76932da6fc006b39e3cd0b4bf165a645ea3a8b37cc8037cf8c9cb6707a47c89d59f9824960bbed5bc7268e7d2ef1ef3535dbae", 0x73}, {&(0x7f0000000480)="a0ac6875a9238704361de17c93ef6fee", 0x10}], 0x4, &(0x7f0000003bc0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x206, 0xffffff81, 0x8}}, @init={0x18, 0x84, 0x0, {0x7, 0x0, 0x5, 0x710}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @sndinfo={0x20, 0x84, 0x2, {0x1ff, 0x101, 0x6, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sndinfo={0x20, 0x84, 0x2, {0x250, 0x0, 0x4, 0xa}}, @init={0x18, 0x84, 0x0, {0x6, 0x6, 0x59, 0x9}}, @authinfo={0x18, 0x84, 0x6, {0x7}}], 0xf8, 0x4}, {&(0x7f0000002ac0)=@in6={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, &(0x7f0000003f80)=[{&(0x7f0000003cc0)="c3beebc9b8d84a5baf2e531333f25ebf81f75fe84de282fda4de53ded14c0aaa0c06c41950c4601c00abb2546ea3d7d553bf0b35d3d970b78c2bc259b5aa533e185d79bcc49e4cbd0aaeb0beb7f7253e0c1a8ab964bc1cfc73d20d7bd290afd9907cc2532056c0e145c9eeda930dcb0c3f8dd99de189e7e4ac3104d1202f634aa8bf2945849661a25db9060ee3efff4ab1a0f1d30e7df2d9d99199344e647df3333f40aeec8cf570500d1314e77f7f815e46135d6748e51307463ee4b39f404a227fe4b82a365b2ed91dc945456f912ac34e517be824a30d764a9b3139c1", 0xde}, {&(0x7f0000003dc0)="4c7232ceaa108b290d781ecb992434533f03f0484e5e9a9a6ca79434227bd63bebfc5df9c9a05211c516756df59780883417f69b8be0e89ac360fd914b42d75597b899aeae6c05a5c099721bd68cac97ee9d89c3af9d5f602627c5c5a0cf8a57842247750c9e752007594e48", 0x6c}, {&(0x7f0000003e40)="d7748aa90ce754cd70c2c32c8949d31f9c892f896e561509ea", 0x19}, {&(0x7f0000003e80)="4bf165e91d72fdf91786e6f04cd19b38b8e7172b5c8705ebe70998e4b415b07a48b02b7bb2c4d75f1c977d884fe4531db68e0caae67dc72cd43a741326fe40908d7c6581d8259c3412e7eb53732b1e28214236c71a1b9e11be95d28d7afe56ffebcd7cd4bd260dd70df1022736c769", 0x6f}, {&(0x7f0000003f00)="4a0bad5358ce6a61ee8cf568cdafeff617a85c8c0e289b381a31d02bbafef93a6a517368abd0acd8b1631a", 0x2b}, {&(0x7f0000003f40)="15e9f01b7a9172a05c6d38d4ae15b08f250ee97bd69d0c0f5d45ed7b840a5106376c1171802ec21b6835ecfc37f83bf86e4b76", 0x33}], 0x6, &(0x7f0000004000)=[@authinfo={0x18}, @init={0x18, 0x84, 0x0, {0x8, 0x5, 0xf, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x50}, {&(0x7f0000004080)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000005440)=[{&(0x7f00000040c0)="16fc727d6bf054bae83e882fbb559b71f0e18c4dbe77a2e79cff2609db90bd6aea68bcd8c458c0250f766f65249cef43d82c809cfd6955873700a30b15dbcc19c470372ce9f037e7e5347913203d56f6fe9a78bd", 0x54}, {&(0x7f0000004140)="301d6106b235ed4f7555f4b97f9ba5797ebe7ecf772f4f172493e66b916e6f9460e03dd64c5d1375fcac9e27664b5c3bc81e8e9c1c136ce94ae89d3afab590a96b3ee43fa27d78bbc89787c5121892ecb8a95815d4d25533139a5f499cd6b89b11f1775bf6ffb739acc92818f534005363c5203b8ac826087dbef26190c579c11609af170792927fc9ec750794f9a5192576333aa16de97e8bfe81a7f3a5ad3ece434a3f73993c8d0d7eeeb9d8cf623fddc85dc1674262bf5eeccf95202cd8f6fa7a81b0a4064802", 0xc8}, {&(0x7f0000004240)="6a50fc5cd6030ec4c5eba9ab1b14ef0db032e562cde12d68c5b70cabb5c6b862d58c845236c64afa2d2d54e8fb69a2f4f9a582fffa229243a4c50486277369fb94904372c31501b89abe994c18acfd5bdfa18933892d946ff818285bcacae86b468829ebf8e345345a8cdb6abd5c7a73cafba0c07062c75f1e2a9979eec26f84d24de1a0e41c965d0c61e5b340d6", 0x8e}, {&(0x7f0000004300)="83a7eb2066b7005800a24e2af039a737578dd9e0d2d95ae56f2149c3e60022f68357238d48cb93cf2a81dfce640acd1bfdc9e0aa9242c4ae1041fce4f3329745b36caa0833559767508a5e05f91c71210460dd82ece4f3da658283b863aa8bfe161ebcddc3e71963f8d353d33f8daeeafe5619d42df3b67a1ff07cf47449ab39b1ce876663aa7c0f3393f9bf9f5ee9e9bd1ea3e102ab330d6bc492f68d89f5a657e3c757328a21f14c145e3d116614716595d7b9e2601b72601b9ff71855f6485208e659601427c1764e56b70315ba33a3f9495999a403d51db4179fa3f6690744f17e7330e4e8406f68a78382ccb19fb4ecd8a8569641723f68ef70ec5de8415d1faad1017e9c0f424e342995ca9eb433292169dfe586788750b973bdd7a539a5c62139c10fafa7438297467085278842e092ebacd768b0e3976a2ab60145c7d08d724be97681672b89fdc47b7bf7aa5e465863b28b6a6c39a5be72a058660df8bdfcef73643fe9d91cbb2f818cc38032167220a3e323a42b1fdcd19232ef3eb077172fdedd0abd0cb16f46e1e9503f3257e8acdd97e41d7d1d1285bd2106dd8e6b5c72244ceaa7a6a7519f747b42ce75b923a51f904b8933aed4bd2ae1fb359d3e8cd1336411bf78a81dd257a6bf4644aedfea6824d9136b226a6ba610c6ec1906c72b860269bbe2c969de5706ccf58b962844bd2b1115945863112676c65622b3e6fa3b993b0676c58f63d9e8f27985cfe2bfd3b9185ba88f67e126f0aa3f3d67b34efe4ede9ea0e31a845c281e2e6390bf057ff56a3c82ad40f3c1e44f23290351f5b30bf592495c852d9a3bd392a971728ee24683e34cdfcad4a9b1147b514966bf1ab2e36b0e88d0afab488fbd9bd19dcec8ce4aae0b23dfa130a38247d755a4bbec36b34e250bed40db5f4eed089021aa71a38b1bff09956378782e04acdd601b0175fe35a8db220ca12f420a3d6ced4856182750292a5fb44a007958ed3196e68d39f3435c8782134bd8ccfa8bb612b9c4eadf30aff59d911c03e07115cb154294e4340da765e109ca90fa840abde7c9d7b90fd47f74c0f7674dac23d953ee5bcedf1d5e2af39675773be72becfa6cc95a560c9b2115bda8b8d03144816b2942d4fa7b8faaff466af6e0244d3887c14cf30124fc52b882be7ac530621fe103efe96735daa42a30c2c07284040f01aba78cf47d34fa38cd718a827d30b25342730c7e55c53281095f9e476548a573b345a5a12b6bbbc8fc8d8751813584bd0b5edd77758d31a36a5026572cc5286a41509254e796e59035a44221271f7a7adc0b20f30ab7a5fdce11de70228c4a054112a66ce138da674dc265083d3ac8395b61ad9602006ce459e1410e80ac6f60523acab0dd1f62395815463b177c71a3e6f196cfa8ece21f3c7e7a6d4312c8fd78f2da7902b12abaea9f2ad06d89ef672f0c16c261b67cd0133472a91c21ddfcf90deb1a68500dfeb0c0567370856a78cba02e6c1685433ee8154f781776f361559167ae0ee7b1146aed7bbdcd3e5400b3474e5cbc06c6bc97dac446bbbcf94826c11afb7dca32073b563886c9a7b7f6fce740c7faf4fa8a9ca75a7cfb02009412152d25dafe54996230504887a3af58c2b194833fcb4ed64c59b5a57fe4c543c38a5447b3f73a71972b34767a56c87960f45b88e730f36abdcfe015b3d090ec08be51a3d756976fd177c2f2ec74d6b1c55bc58ad8f0c1ab16f90af4c5d80c6507232ff7450d234c858a85c3555801131b3e717efe032b5079347594281f0d934d589422eaa7f57883b5f6a971f0ef28197968d9aeab8c4dc68cce6ddbabf5ddb086243d128ae0dc845e35ec020a5373e38646df5ec5d88f12fb98236dfb3b7c328f8b0e9cc57ae0d004192fe92c4208a4e9769bbbb64c931e347e7541d8fb3cc98a015d313b7b86b3fe27706a940fe7a3f5a03759a8bec97db39120b2b5a124c0573d4d621b0ab73355778bc17d6e29d7e710a8b484fd9b0359107596bf2b70a4b5b2b8809284d194c71ee5089ec6c933acf28a2158226b34579db87a8a587420ece8d9bde269c0dc48525e466524d360153da76909d8a0cf70bf283a91e789f66afcf0f594b8bd389e4a8c2a499618c3e59ba48477b18d9cace1b2887ec34263ae925814e49461f5bb559db3a399e99e6d4c9fda8fa4c38961251936bcf6303bbfe649118912da0f2b940ba7a3e4503e5d1d273d7e6e3abec66cb599726aa5aead3624ffc1fe31a55837b0a0df9e216ec95e33fa7fe5b65e4b715c41b22abafb7e63794ce67037324905ebfe303f2a48df4c6213ae0b8fbb26a84492479109f48f0f088866a76e89d42602a51c2e6cc4efc353d2a65af2cc82cd8e01b5dec4bb3f951f8f669968897e16deb3ebc0deb8f2126fbf464e1bab590edaa201e7ed8b4ea8705554605ec26cdd675f3281545b61b4e3ceb76d056736c54e6146fa37e98d3a17a6bea23bd01fb846cceae9a93a8aee3cbc446b0516ee44c971ef8d59a3172c4f9cbfe848b8d1235c0951f72337bf377a88084e5131d6d1096d4490a2a8f01123f671fe763b4c54118e0c6dbb8c004abf39d23429d31a205ae4b408ec746d54623461cbf4c44489c20e9a8586e31f2c35272a1277651aed5fcfad72eb7a03eb49daf0f7686c55f4e34d31da433463571124d93336c401b6e097f40eefb16d1d5fecf38b90edf013ab4ee5bb748f3b6e6ece61f6b96a22f794fde09960fc4ffd60194c862bf7e6b1b7ba43bd82ae31da50d5dcf9b79d08f457b6af278969ba5043ab3bcd021ad3c9796eb1e98be22b860118131ddd11548c901c015642ac99ae16fed86fa05adfc287cccf6fd21efa35ef9ca459a694e1954f06f85b8e5fec436ece401600cc35d44c6837b9c10695a24ea7be2a1d9f56899ee761c517101f99f45df2c82b9a8334186f9217f0b7e5977a2cce12cde6fa758fa37695642589f14053f2906cc71da64aa47accccd10f12d9d9e6ef68a1a6f61240d1dde93476774019bb8b0833bab8a00269971059c6a2c5d97fb481ca916f2aa0436216031aad689a36b34262590d5e847b444c4cce945bde5b2e495659a6ac1db88b6922c65f6d2fcc929b12a1d297739c0207295b82f8dffe03e5766942f369e5fdb90111ab273645142c00a2f4f388f6da7069b61c64f2b6ca8829c3175bc000bbde1af2340e68bf81a6b1385632ac4b6d1a316fec80bd59cb3c22286dc43cab932b11b319c556350ce325abc0493ac6d71481715c03b51d5cc259db0f764e4f24440fae06f7a2071cec897dbde9d068b62079c40367accaf7306160d2955e69c9007df2fc3d38cf09e3ed9f40417a8d20cfee13c6ad84bef7a75b0ce7173a31d36fe4fe5eaf99c22ea839c402006337f514a96bf10048680dbcde05c426e4920b3f006ae99837d7f5f0ce1ea3fe370efeef164ddae63bce60875d83b3f2128c68b8baa131c9bca94ff28de01cb447a33e6f884efc87974143f7b6ff01a245e5887d0b15a55de8d6676f3b6b4d90244428321d5822cf016a7cd82eb6838be796e58bdd861509587d47b8793c6e66417c744a19886102705e79ecc9a8cc531246ab6a6a2ecf06cd4384c222d3df2807fa2e415dec04efa24fecaaeb190277f8625040ced1b5073e821f779523547e2837da077095b01f0abfe42e40160ddaea26aa62b927db02401b6a520f24e79e65ce3ce7fbb3e298e292759dc582ef473ad61b7fbc328294ee9abec4dc2f594f4ff3f3d905864c056dc3dfcdffc262ea61294f063442604ef21193a840131d33b8fc83c32498e416664aa5dcea43ae4674cc722479078d2dd9cc3b28a503cd586cdf583ac8cc7b0bafac11f09884f35c86248c73e5008f1643234977b26ea0030bdcf6e143addb7edd9d583101ab96edd3875a2b4ccac1bc06b5acdf323c1407072ce3325a72e1f46486c79e121fe98c1fcce5971179f690cf02fa8c8e9c4040f0154ed5c6ed27ae04d129fb2c65c6480d05b32f5208133b34b67cec4cdf0d8b6dd2d2b9f7ea35a7be090b483aad7e157ee316f4faa5a418de8c6695669648ba265841dcd2a6a8985b0b588d7b7ce82349f9f94d9b147938cdee759a4885cc2a0d11ea9cf0183537b24a5d179feca6a79f733802880c7def0d8ab0694bbcac32531849c8ca37aa0c18ea41f50812a97c9c81fd00b621d61de6702d937b2b8528d3949c61373fb512ebd07396348c1b0789404f3d38277b14cddd544ab59b8457937c3935dfd700d87e50e0287c77948596171bf74c2d461256d28d2650a4a9cdfbd276717926b1fd8a663c0962e62e27936fe59dd48b3b9e9db478547f2ed4302f5e3b6ee50d008ed212fab18c903e8526789259ea6b4a10856c40656779f5eb8d3537d18775d714a5b18faaa3cf6bf421535eb0400df48e2505c18585a914c091f32e2f7d5ba814775879303e33ea5b00d2c3ab0ba1ac75dce0ce7a605aa5f01d773b56399f031b88ba9861b44bfcc48c5d51b86ea62074b9d1c2f23af46bcedf797ba898382b87aef1b8f17f58979659fe7a03efa639ea28833d5119efb10e4ad969f8b499bab8af5b0df2156b72bffeef135993b9d4a3adaa9450c68ddc6afb7c1a55c3852de9d8adab530d1785e680e3826e784025f2e912f9203b99aa4d8119db408f3044ad5cfbaf7869feeb1d9a6ef6ef7807548ac9c68ee20d2f3e9b07eca9ad6a4f96ea4bafa510d9728a5b55bcd1216e742343b21c8aad202c934a611c59d607c6e927addd9d4210fd67c972e761849b4931ddc95290c1e7b8d672200485b92222015814eca4d3a46e35338d778a3fa874eb771771e407cc7e73da714ea789993250b14606dcfae027a3b2f5d1a68d5e4ddb38d104a7e541c1d669975f1749a3a44dde7ec51afca0b90ae9b2f56e754d3c500a1415871f88c813bdef9ada4ca9973f95f68110b8cd0112fa074426040d2dd188a725f65678e29580d0e88b0472c9f086ee0ac2343d6c357bde337fa26140743a748816f610b94ad9fec9ab4da6224d3edc2b070133e41547cf7f1a9161664d2a1d8a8e2ba3ef26bfb237cf2d2f2d1a405a3d5cc26e2837c8db5629e2d4e66464c89ff95aac5eca1ed78ef1b1f86e4ca29492450624b5b22a617d13a5034dd840fa3a03ede6bacb639be959daab4d46bc44065cf2a715df6ae105a25a445dc19e0c8c412402799e6491c8e56f4da903be8a112370970b03995303a892f4e342d51d876b4373d51230e82da22e02366280e961af4ab5acb6f8bcf60f5756973272e4404aa0a6b47a9cdde025ecd0f651c7628d45c5527223138fb246e5ee560d1b76c4fc711272f22f72439a60a411495a424086aba274a721dd22a1faaa923eaa58b0fdfd29a83b14f559dc17db8cc8232b2d79964fa750a3d779cd9bf3df0d75c11a7c20f0e4f360203877cf2b1b1efd862b7da49616ae25aec69063e703d1c8eaef8e22504b923345f6aced6802cf3c1173f3077231444a015afd6af11e6136b48db280a0ce0234443dbda3d648fa353ba9b26decd2d765d191d9d2e2ffd71082d2e86922e6b0e7578bb30ca9db480c4db29d1b978cd4f42063ea54e471ecb5db14bf439d2b5564b6acdaaf58de0bf0b3bbc97b41db9f85184ab23d7734142cd37a2296028c1fd6fd42af317a58f0465f8814ef0edbe807136720cd61bc6d683947951243c54d9462373bdf183e08532152bfdc98b625e70019d1f9ae80491b5fe925c86c79de3e80f56b459ef870bc7073ad9eb73392ed0a64cf29542b96dc39b34c025e62653f3db2", 0x1000}, {&(0x7f0000005300)="327503f7d1d2492203dffba4473d85fdfca3c5227d81f5862b967f0e3aca032cd889bfd2ad23cc8f85c77066c4990d2edc3c44", 0x33}, {&(0x7f0000005340)="04c1bd0a4314ada7a38d3e5c3e61bb8fe665b616d1b35fce1e09247218c0cad4565c13918a9ca0be0800fc40324ddf9557925aae8c3d816e88f20d4011ac470c4a7961abac821214e3c331138147201be3f85056b7e2c952ddfd311e062ab6a8b0360c3e3a6f71255d8a", 0x6a}, {&(0x7f00000053c0)="322f6dcaace2f601dc9f9cf48f3bf6fdd3a0ad1668ad4079d0f9d76d76647bf77a5cb82d1d475fa0980ac930c35a1425db8c9633b2abe70d15a247d4301001337c0f33db7522719b35904dc2ddd16b54fdba13535331cf6f", 0x58}], 0x7, &(0x7f00000054c0)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0x4a0, 0x3, 0x3, 0xd, 0x9, 0x9, 0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x41}}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xe359}}, @sndinfo={0x20, 0x84, 0x2, {0xb1cc, 0x0, 0x88f, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @local}], 0xb0}], 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x315, 0x0, r4}, &(0x7f0000000500), &(0x7f00000001c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x800000000d2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x200000c0) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x54, 0x0, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) setuid(0xee00) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89b1, &(0x7f0000000040)={'macvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x44e3763ac5239ba7}}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) 11.280552446s ago: executing program 3 (id=1228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x44830) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (fail_nth: 2) syz_open_dev$vcsn(&(0x7f0000000080), 0x56, 0x20) 10.028618575s ago: executing program 3 (id=1229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendfile(r4, r3, 0x0, 0x800000000fffe82) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$cont(0x20, r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r9, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r10, @ANYBLOB="0a00060008021100000100000c004300"], 0x34}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x24c, r7, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x10001, 0x15}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x80}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xff}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x5}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x20c, 0x84, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8966}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x80000001}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x200}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ccd2e404ef81"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2b}]}, {0xe0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x100}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x80000000}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xf}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xb0e}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1000004}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x7ff}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffffb}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9b9}, @NL80211_BAND_LC={0x8, 0x5, 0x22}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8ca}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xffffffff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x17, 0x1, @random="7bc9a2c766729ebd0011e5448bfa084b6c4f22"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xae}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_60GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}, {0xb4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x17, 0x1, @random="177b2a4fd8d381915b601eda3f8dd4378def30"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x8001}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x80000001}, @NL80211_BAND_LC={0x8, 0x5, 0x425e}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x10000}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="3ff6510d73d7"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}]}]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000000) ptrace(0x11, r5) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x9, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0xd, 0x0, 0x8, 0x5, 0x7d, 0x7, 0x5, 0x3}, {0x2000, 0x100000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x1}, {0x6000, 0xffef3000, 0xa, 0x6, 0x4, 0x42, 0xe0, 0x6, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0x0, 0x3, 0xf8, 0x7, 0xab, 0x7f, 0xf, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0002, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0xf, 0x85, 0x7, 0x5, 0x3d, 0x1, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xf, 0x5, 0xf, 0x0, 0x1, 0x34, 0x2, 0x10, 0xb0, 0x9}, {0x8000000, 0x1}, {0x10000, 0x7}, 0x80000031, 0x0, 0xdddd1000, 0x2010, 0x4, 0xa001, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES16, @ANYRES64=r1, @ANYBLOB="3021ddccd936a9a33f9d499756074f63900439185846568a7c44b851d222561fb952fa1348fc1c6df29efa50ae54595eacd5fd50d8e6b11904d8ff1bcffb995e9af24519788e910ae1e02fb585f9e772af4502517f0c52622e199ad587ca599d85dfa248cec4f1b449dd3c3818783ba3607b09009c2c9d25af4187fc275b51c8197e467877b496a9eba5120b3343c8e1787c2eba2ca3c0b466a91ee66899a2ac9b1e009632c1c04ca54f50310de48452ba1bced9eb490e1771e80908e439ddf6e9a29e0591bd3043623bfc25ad0b7b96", @ANYBLOB="ce7feea268d278b5f10b", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x101000) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_getscheduler(r5) ioctl$TCFLSH(r12, 0x80045438, 0x0) io_setup(0xd, &(0x7f0000000180)=0x0) r14 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x20141, 0x18) io_submit(r13, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x8, 0x1f0e, r14, &(0x7f0000000140)='i', 0x1, 0x24}]) ioctl$VIDIOC_DQBUF(r11, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x7, 0x2, 0x4, 0x0, 0x2, {0x0, 0xea60}, {0x2, 0x0, 0x2, 0xb, 0x26, 0x3, "455bd293"}, 0x2, 0x1, {&(0x7f0000000080)=[{0xd, 0x10, {0x7}, 0x7ff}, {0x5, 0x3ff, {}, 0x27630d64}]}, 0x6, 0x0, r14}) 9.160904274s ago: executing program 5 (id=1232): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x61c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x5f0, 0x2, [@TCA_U32_SEL={0x3a4, 0x5, {0xa, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x9, 0x3}, {0x4, 0x0, 0x6, 0x8}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x6, 0x0, 0x9, 0x7}, {0x0, 0x9, 0x1, 0x4}, {0x5c4, 0xa, 0x6, 0xc}, {0x2, 0x8, 0x4}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x3, 0xd, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x0, 0x4, 0x2, 0x6}, {0x7fff, 0x0, 0x3, 0x101}, {0x4, 0x5b61, 0x0, 0xe37}, {0x7, 0x2, 0x6, 0x6d}, {0x21, 0x600000, 0xffff, 0x54}, {0xff, 0x1081, 0xd4, 0x6}, {0x3, 0x2, 0x3fa4f833, 0x46a}, {0x1, 0x6, 0xff, 0x3ff}, {0x5, 0x9, 0x1, 0x3}, {0x7, 0x1, 0x401, 0x9}, {0x8, 0x100, 0x7, 0x3}, {0x7, 0x9819, 0x6, 0x6}, {0x3, 0xc, 0x5, 0x6}, {0x81, 0x9, 0xf3b8, 0xffff7fff}, {0x0, 0x1, 0x4, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x4, 0xffff, 0x6, 0x2}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x5, 0x400}, {0x8010, 0x0, 0x6, 0x3}, {0xb, 0x5, 0x5, 0x5}, {0x0, 0x9, 0x8, 0xa}, {0x9, 0xd, 0x7f, 0x8000}, {0x7fffffff, 0x51, 0xd6fa, 0x9}, {0xd, 0x6, 0x2, 0x8}, {0xd, 0x9, 0x7ff, 0x9}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0xdc, 0x1ff, 0x101, 0x5}, {0x0, 0x7f, 0x60d4, 0x3}, {0x6, 0x8, 0xc, 0x8}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x234, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0x5, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x4009, 0x7, 0x40, 0x7d}, {0x2, 0xd032, 0x57, 0x8000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x9, 0x10, 0x5, 0x5}, {0xac, 0xfffff08a, 0x8, 0x3}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x10001, 0x7, 0xc841, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x6, 0x0, 0x8, 0x7}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x7, 0x7ff, 0xca97, 0xc7}, {0x6, 0x8, 0x2, 0x1}, {0x7, 0x2, 0x5, 0x2}, {0xaa4, 0x406, 0x2, 0x127c}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x10, 0xb, 0x2, 0x9}, {0x3, 0x7, 0x200, 0x1}, {0x4, 0x5d14, 0x7f, 0x400}, {0x7, 0x2, 0x7, 0x7}, {0x5, 0x7fff, 0x3, 0x438}, {0x7fff, 0x5, 0x401, 0xc42b}, {0x80, 0x3, 0x2, 0x1e0}, {0xfffffffc, 0x9, 0x40, 0x7}, {0x3, 0xa67, 0x400, 0x80}, {0xc, 0x2, 0xfffffffb}]}}]}}]}, 0x61c}}, 0x24040084) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r5, &(0x7f0000002180)=""/4101, 0x1005, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86b}}) 8.92439975s ago: executing program 3 (id=1234): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r2, 0x10, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000841, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$selinux_create(0xffffffffffffffff, &(0x7f0000000840)=@access={'system_u:object_r:fuse_device_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x6}, 0x56) r6 = eventfd2(0x47, 0x1) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)=r6) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r7, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x5, 0x32, 0x7}, 0x9c) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r9, 0x4b68, 0x0) 8.047835649s ago: executing program 3 (id=1235): socket(0x10, 0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r0 = socket$inet6(0xa, 0x802, 0x88) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) r1 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x29cd, 0x10100, 0x2, 0x2d5}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3c, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f00000003c0)=0x400001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000000000000400"/20, @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff001000000100fbfffffffffbffff00"/28], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) 8.005681522s ago: executing program 6 (id=1236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) timerfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="dcdd8d01617570de8694bfe5007541247d8c35e596efd8e614df25a4ebbf8b4f5dfe0bf3d20e52ca8245a1d9ce61ba91ad6749e8cafe3e7b1ca52bbfddd0dfbcbd165312e6457106b89ce3d4fcc463d7a00276cbf3c7deb0891b80ef48dc36ccce57bd5adc85f0c98b0533ef72ac7917e1382f9d0bb576c40ce833ca1382a8f7ca5455bcbe07108af59302bc41ad0b720eaedf5710868868f0aae15ff549ab4455036248ce1c087702eaa051e631d8a307b238bcf3ccb38c8c0bb5bd835fd7e66468dd77c84318faf0a71d9c68830bc41335a6e5520cc143c3146e4150aa37d5e4839390b27c645714d7d6fb1bd90671fcd5ba0957"], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) sendto(r1, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 7.946419255s ago: executing program 1 (id=1237): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="e744954d2ae4498a913e73c405753fe1a8922d52c540fc8774d82b68557336ac3ff3083d9338242eb8ccf327d531d35d61807d032d886710c08e3bc2993fec17ccd2ad3790e0cb5051617735a40a7a370e60ba93b6d3c3"], 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="010002006401010000000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2) r1 = socket(0x23, 0x5, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_follow}, {@nfs_export_on}, {@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file1'}}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@seclabel}]}) 7.057338715s ago: executing program 6 (id=1238): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4, 0x2, 0x3, 0x3, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x204, 0x200004, 0xce1, 0x400}], "", ['\x00', '\x00']}, 0x258) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[], 0xe0}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r8 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "8527d2413790af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589ddb3c101840af347c1a253ec5fb", 0x18}, 0x48, 0xffffffffffffffff) keyctl$read(0xb, r8, &(0x7f0000000000)=""/43, 0x2b) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0xb013, 0x5, 0x0, 0x2, 0x88d7, 0x8f, 0x1007, 0x8010, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x4, 0x5, 0x1, 0x8, 0x3, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) 5.907984839s ago: executing program 6 (id=1239): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffd8d, 0xfffffffffffffffe) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$nl_xfrm(0x10, 0x3, 0x6) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@host}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x3, 0x10001, 0x0, 0x200403, 0x1, 0xc, 0x1, 0xa, 0x100, 0x2, 0x8, 0x7fffffff, 0x2, 0x5, 0x101, 0x0, 0x87, 0x200000, 0x48000003, 0x802, 0x4, 0xf25, 0x1, 0xb, 0xe69, 0x3c, 0x800, 0x6, 0x101, 0xfffffff8]}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="04000000000000000a0000000000008004000000080000002b0f0000050000000700000000000000000000000000000007000080030000000200000002000000190a0000500000000500000000000000000000000000000007000000090000000200000006000000070000008100000066000000000000000000000000000000000000c0060000000500000000040000050000001000000048000000001e436e6b12342335000000"]) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, 0x0) 5.875079377s ago: executing program 1 (id=1240): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="031f600000000000140012800b0001006970766c616e0000040002800800280010b10000"], 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r1 = socket(0xa, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats\x00') read$FUSE(r2, &(0x7f0000000280)={0x2020}, 0x2020) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @dev={0xfe, 0x80, '\x00', 0x3c}}], 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303d20422c02124070e702030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x40, 0x0, 0x1, "b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r6, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x2c048004) timer_create(0x0, 0x0, 0x0) fdatasync(0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@setlink={0x48, 0x13, 0x701, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xb583, 0x8}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'pim6reg\x00'}]}, 0x48}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000002380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x70, r8, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1081}, 0x20000040) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) 4.921670348s ago: executing program 5 (id=1242): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) 4.800037977s ago: executing program 5 (id=1243): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r5, 0x2007ffd) sendfile(r3, r4, 0x0, 0x1000a3) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="124f000072ea2a400a09001287240000000109021288dfc6ddbcba000100000000090400dd3e83b6"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) open(0x0, 0x14927e, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair(0xf, 0x1, 0x4, &(0x7f0000000040)) r7 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(r6, 0x0, 0x4800) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r8 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x100, 0x8, 0xd, 0x0, 0x800006, 0x1, 0x3, 0x9}) 4.636460936s ago: executing program 0 (id=1244): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000"], 0x0) 4.243986409s ago: executing program 3 (id=1245): r0 = io_uring_setup(0x7f69, &(0x7f0000000000)={0x0, 0x23e3, 0x0, 0x3, 0x2a2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3c, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0x9, 0x2, 0x0, 0x0, @binary="b27d9adc61"}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000140)={0x101}, 0x1) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0433"], 0xe) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000002009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000007fc0)}, &(0x7f0000000100)=0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000180)={0x0, 0x18, 0x4, &(0x7f0000000240)={0x97, "a52422ffd60775c221c4031d467d6648a97569b7d49cc4492d050600000000ff00"}}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x200) write$char_usb(r6, &(0x7f0000000080)="5b9774dd8d13b2a058d38a87a305647cf309b2e12ab853ec5a8a4a0f9c5bfd", 0x1f) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) 3.799714212s ago: executing program 6 (id=1246): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xc, {"a2e3ad204fc752f91b5d34f70b06d038e7ff7fc6e5539b325d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b5d9a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa45237f104b98110403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e0090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x100f}}, 0x1006) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000040)={0xd, 0xe}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r4, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x803, 0x84) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r7, &(0x7f00000001c0)=[{&(0x7f00000002c0)="abc6", 0x2}], 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000010c0)=ANY=[@ANYBLOB="f804c392", @ANYRES16=r6, @ANYBLOB="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"], 0x4f8}, 0x1, 0x0, 0x0, 0x40000}, 0x8091) r8 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "f5582684989b69b4", "d075d9389b15b43bb9f1668204201266e600000000000000000000008beb1a00", "28092cab", "31775059a53414ea"}, 0x38) syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000000340)={0x0, 0x400000}) getitimer(0x1, 0x0) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1}, 0x4}, {{0x0, 0x0, 0x0}, 0x2002}, {{&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000400)=""/75, 0x4b}, {&(0x7f0000000480)=""/234, 0xea}, {&(0x7f0000000580)=""/9, 0x9}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f00000006c0)=""/139, 0x8b}, {&(0x7f0000000780)=""/22, 0x16}, {&(0x7f0000000840)=""/142, 0x8e}], 0x7, &(0x7f0000000980)=""/28, 0x1c}, 0xfffffffd}, {{&(0x7f00000009c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000a40)=""/213, 0xd5}, {&(0x7f0000000bc0)=""/121, 0x79}, {&(0x7f0000000c40)=""/181, 0xb5}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/73, 0x49}], 0x5}}], 0x4, 0x40000002, 0x0) 3.184889529s ago: executing program 0 (id=1247): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xfdef, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0xa}}, 0x20) write(r0, 0x0, 0x0) 3.105162318s ago: executing program 0 (id=1248): r0 = syz_io_uring_setup(0x507a, &(0x7f00000005c0)={0x0, 0x2109, 0x100, 0x0, 0x30d}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r0, 0x6f58, 0x0, 0x0, 0x0, 0x0) 3.041740145s ago: executing program 1 (id=1249): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000007140)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x4}]}}}], 0x18}}], 0x2, 0x4800) (fail_nth: 4) 3.020380996s ago: executing program 1 (id=1250): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="e744954d2ae4498a913e73c405753fe1a8922d52c540fc8774d82b68557336ac3ff3083d9338242eb8ccf327d531d35d61807d032d886710c08e3bc2993fec17ccd2ad3790e0cb5051617735a40a7a370e60ba93b6d3c3686fca"], 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="010002006401010000000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2) r1 = socket(0x23, 0x5, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_follow}, {@nfs_export_on}, {@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file1'}}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@seclabel}]}) 2.629648156s ago: executing program 0 (id=1251): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) (fail_nth: 4) 2.624877782s ago: executing program 1 (id=1252): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x22eb}, @void, @mpls={[], @ipv6=@udp={0x9, 0x6, "016ae8", 0x8, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], {0x4e24, 0x4e22, 0x8}}}}}, 0x34) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r3 = syz_io_uring_setup(0x27f0, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0x400001, 0x28c}, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xd762, 0x100, 0x0, 0x134, 0x0, r3}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}) io_uring_enter(r3, 0x8184c, 0x0, 0x9, 0x0, 0x0) 1.652526388s ago: executing program 0 (id=1253): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) 1.633187932s ago: executing program 5 (id=1254): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_enter(0xffffffffffffffff, 0x1499, 0xedd7, 0x20, 0x0, 0xfe) 1.606614327s ago: executing program 0 (id=1255): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)=[0x807, 0x5, 0x3, 0x9d]) r2 = semget$private(0x0, 0x0, 0xc1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfff6}, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x0, 0x40, 0x8, 0xab9, 0x75, 0x3, 0x348, 0x8, 0x3ff}, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x8811}, 0x8800) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000280)=0x40000002) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) 1.071940237s ago: executing program 3 (id=1256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129a01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000180)={0x2, 0xfc}, 0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r5, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x1, 0x3, 0x1, 0x3, 0x3d, 0x6}, @mpls={[{0x3}, {0x7, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xcfdd, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x81}, {0x5}, {0x1, 0x0, 0x1}], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x84, 0x0, @broadcast, @multicast2}, {{0x4e23, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x7, 0x0, 0x13}, {"2244070000bc0be4bdf9da24708a4ec90000932b52c828de6f79d82439"}}}}}, 0x73) 208.409449ms ago: executing program 6 (id=1257): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_int(r0, 0x84, 0x43, &(0x7f0000000000)=0xd, 0x4) 146.33456ms ago: executing program 5 (id=1258): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xfdef, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0xa}}, 0x20) write(r0, 0x0, 0x0) 115.182584ms ago: executing program 6 (id=1259): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x40, 0xff, 0x0, 0xffeffffe}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 0s ago: executing program 5 (id=1260): r0 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000800)={0x1, "c5c2a91e002b1b80000500003d5eff0010ffffffe70000ffe700", 0x1, 0x7, 0x1, 0x1000000, 0x4040300, 0x2}) kernel console output (not intermixed with test programs): ctl+0x3a1/0x6b0 [ 392.113281][ T9942] ? __pfx_sock_ioctl+0x10/0x10 [ 392.113294][ T9942] ? hook_file_ioctl_common+0x145/0x410 [ 392.113316][ T9942] ? selinux_file_ioctl+0x180/0x270 [ 392.113336][ T9942] ? selinux_file_ioctl+0xb4/0x270 [ 392.113359][ T9942] ? __pfx_sock_ioctl+0x10/0x10 [ 392.113374][ T9942] __x64_sys_ioctl+0x18e/0x210 [ 392.113398][ T9942] do_syscall_64+0xcd/0x4e0 [ 392.113421][ T9942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.113437][ T9942] RIP: 0033:0x7fe6a0b8ec29 [ 392.113450][ T9942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.113465][ T9942] RSP: 002b:00007fe6a196d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.113479][ T9942] RAX: ffffffffffffffda RBX: 00007fe6a0dd5fa0 RCX: 00007fe6a0b8ec29 [ 392.113490][ T9942] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 392.113499][ T9942] RBP: 00007fe6a196d090 R08: 0000000000000000 R09: 0000000000000000 [ 392.113508][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.113517][ T9942] R13: 00007fe6a0dd6038 R14: 00007fe6a0dd5fa0 R15: 00007fffc47850f8 [ 392.113537][ T9942] [ 392.458202][ T9948] netlink: 'syz.0.912': attribute type 2 has an invalid length. [ 392.491006][ T5869] Bluetooth: hci0: unexpected event 0x33 length: 11 > 10 [ 392.599548][ T30] audit: type=1400 audit(1758382771.204:642): avc: denied { setopt } for pid=9951 comm="syz.5.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 392.701401][ T5912] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 392.882321][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.934091][ T9963] overlayfs: missing 'lowerdir' [ 393.033727][ T9964] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 393.335854][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.350172][ T5912] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 393.360619][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.371776][ T30] audit: type=1400 audit(1758382772.014:643): avc: denied { setopt } for pid=9959 comm="syz.3.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 393.391650][ T5912] usb 1-1: config 0 descriptor?? [ 393.703239][ T30] audit: type=1400 audit(1758382772.344:644): avc: denied { nlmsg_read } for pid=9959 comm="syz.3.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 394.119747][ T5912] usbhid 1-1:0.0: can't add hid device: -32 [ 394.128222][ T5912] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 395.308165][ T9981] FAULT_INJECTION: forcing a failure. [ 395.308165][ T9981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.371642][ T9981] CPU: 0 UID: 0 PID: 9981 Comm: syz.1.921 Not tainted syzkaller #0 PREEMPT(full) [ 395.371662][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 395.371669][ T9981] Call Trace: [ 395.371673][ T9981] [ 395.371678][ T9981] dump_stack_lvl+0x16c/0x1f0 [ 395.371698][ T9981] should_fail_ex+0x512/0x640 [ 395.371716][ T9981] _copy_from_iter+0x29f/0x1720 [ 395.371736][ T9981] ? __alloc_skb+0x200/0x380 [ 395.371751][ T9981] ? __pfx__copy_from_iter+0x10/0x10 [ 395.371769][ T9981] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 395.371790][ T9981] netlink_sendmsg+0x829/0xdd0 [ 395.371808][ T9981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.371830][ T9981] ____sys_sendmsg+0xa95/0xc70 [ 395.371849][ T9981] ? copy_msghdr_from_user+0x10a/0x160 [ 395.371864][ T9981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.371888][ T9981] ___sys_sendmsg+0x134/0x1d0 [ 395.371903][ T9981] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.371935][ T9981] __sys_sendmsg+0x16d/0x220 [ 395.371950][ T9981] ? __pfx___sys_sendmsg+0x10/0x10 [ 395.371974][ T9981] do_syscall_64+0xcd/0x4e0 [ 395.371991][ T9981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.372003][ T9981] RIP: 0033:0x7f762ff8ec29 [ 395.372014][ T9981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.372026][ T9981] RSP: 002b:00007f762e1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.372037][ T9981] RAX: ffffffffffffffda RBX: 00007f76301d5fa0 RCX: 00007f762ff8ec29 [ 395.372044][ T9981] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 395.372051][ T9981] RBP: 00007f762e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.372058][ T9981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.372065][ T9981] R13: 00007f76301d6038 R14: 00007f76301d5fa0 R15: 00007ffced08f258 [ 395.372079][ T9981] [ 395.863350][ T5970] usb 1-1: USB disconnect, device number 21 [ 395.913400][ T30] audit: type=1400 audit(1758382774.554:645): avc: denied { write } for pid=9991 comm="syz.3.925" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 396.091563][ T30] audit: type=1400 audit(1758382774.584:646): avc: denied { ioctl } for pid=9991 comm="syz.3.925" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 396.231617][ T30] audit: type=1400 audit(1758382774.864:647): avc: denied { getopt } for pid=9989 comm="syz.5.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 396.253253][ T9999] overlayfs: failed to resolve './file1': -2 [ 396.825936][ T30] audit: type=1400 audit(1758382775.464:648): avc: denied { create } for pid=9987 comm="syz.4.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 396.937617][T10022] FAULT_INJECTION: forcing a failure. [ 396.937617][T10022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.957688][T10022] CPU: 0 UID: 0 PID: 10022 Comm: syz.5.931 Not tainted syzkaller #0 PREEMPT(full) [ 396.957714][T10022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 396.957725][T10022] Call Trace: [ 396.957731][T10022] [ 396.957738][T10022] dump_stack_lvl+0x16c/0x1f0 [ 396.957767][T10022] should_fail_ex+0x512/0x640 [ 396.957792][T10022] _copy_from_iter+0x29f/0x1720 [ 396.957821][T10022] ? __alloc_skb+0x200/0x380 [ 396.957843][T10022] ? __pfx__copy_from_iter+0x10/0x10 [ 396.957870][T10022] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 396.957902][T10022] netlink_sendmsg+0x829/0xdd0 [ 396.957930][T10022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.957963][T10022] ____sys_sendmsg+0xa95/0xc70 [ 396.957992][T10022] ? copy_msghdr_from_user+0x10a/0x160 [ 396.958016][T10022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.958054][T10022] ___sys_sendmsg+0x134/0x1d0 [ 396.958078][T10022] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.958131][T10022] __sys_sendmsg+0x16d/0x220 [ 396.958153][T10022] ? __pfx___sys_sendmsg+0x10/0x10 [ 396.958201][T10022] do_syscall_64+0xcd/0x4e0 [ 396.958226][T10022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.958243][T10022] RIP: 0033:0x7fedb318ec29 [ 396.958258][T10022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.958275][T10022] RSP: 002b:00007fedb4042038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.958294][T10022] RAX: ffffffffffffffda RBX: 00007fedb33d5fa0 RCX: 00007fedb318ec29 [ 396.958306][T10022] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000003 [ 396.958317][T10022] RBP: 00007fedb4042090 R08: 0000000000000000 R09: 0000000000000000 [ 396.958328][T10022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.958339][T10022] R13: 00007fedb33d6038 R14: 00007fedb33d5fa0 R15: 00007fffc3b05dc8 [ 396.958364][T10022] [ 397.228902][T10025] FAULT_INJECTION: forcing a failure. [ 397.228902][T10025] name failslab, interval 1, probability 0, space 0, times 0 [ 397.248783][T10025] CPU: 1 UID: 0 PID: 10025 Comm: syz.3.934 Not tainted syzkaller #0 PREEMPT(full) [ 397.248811][T10025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 397.248822][T10025] Call Trace: [ 397.248829][T10025] [ 397.248837][T10025] dump_stack_lvl+0x16c/0x1f0 [ 397.248864][T10025] should_fail_ex+0x512/0x640 [ 397.248891][T10025] should_failslab+0xc2/0x120 [ 397.248912][T10025] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 397.248932][T10025] ? dst_alloc+0x99/0x1a0 [ 397.248954][T10025] dst_alloc+0x99/0x1a0 [ 397.248973][T10025] rt_dst_alloc+0x35/0x3a0 [ 397.249000][T10025] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 397.249028][T10025] ip_route_output_key_hash+0x137/0x2e0 [ 397.249047][T10025] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 397.249070][T10025] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 397.249090][T10025] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.249113][T10025] ? percpu_counter_add_batch+0xb8/0x1f0 [ 397.249136][T10025] ip_route_output_flow+0x27/0x150 [ 397.249157][T10025] tcp_v4_connect+0x899/0x1bb0 [ 397.249193][T10025] ? __pfx_tcp_v4_connect+0x10/0x10 [ 397.249223][T10025] ? __local_bh_enable_ip+0xa4/0x120 [ 397.249249][T10025] mptcp_connect+0x4b5/0xae0 [ 397.249271][T10025] __inet_stream_connect+0x917/0xf60 [ 397.249296][T10025] ? __pfx___inet_stream_connect+0x10/0x10 [ 397.249314][T10025] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 397.249337][T10025] ? __pfx_inet_stream_connect+0x10/0x10 [ 397.249357][T10025] ? __local_bh_enable_ip+0xa4/0x120 [ 397.249382][T10025] ? __pfx_inet_stream_connect+0x10/0x10 [ 397.249398][T10025] inet_stream_connect+0x57/0xa0 [ 397.249416][T10025] __sys_connect_file+0x13e/0x1a0 [ 397.249446][T10025] __sys_connect+0x13b/0x160 [ 397.249464][T10025] ? __pfx___sys_connect+0x10/0x10 [ 397.249492][T10025] ? __pfx_ksys_write+0x10/0x10 [ 397.249517][T10025] __x64_sys_connect+0x72/0xb0 [ 397.249535][T10025] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.249556][T10025] do_syscall_64+0xcd/0x4e0 [ 397.249582][T10025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.249600][T10025] RIP: 0033:0x7fe19b78ec29 [ 397.249615][T10025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.249632][T10025] RSP: 002b:00007fe19c678038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 397.249649][T10025] RAX: ffffffffffffffda RBX: 00007fe19b9d5fa0 RCX: 00007fe19b78ec29 [ 397.249660][T10025] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000004 [ 397.249671][T10025] RBP: 00007fe19c678090 R08: 0000000000000000 R09: 0000000000000000 [ 397.249681][T10025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.249692][T10025] R13: 00007fe19b9d6038 R14: 00007fe19b9d5fa0 R15: 00007ffcc692b1e8 [ 397.249717][T10025] [ 398.387683][ T30] audit: type=1400 audit(1758382776.934:649): avc: denied { remount } for pid=10038 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 399.951643][ T30] audit: type=1400 audit(1758382778.554:650): avc: denied { ioctl } for pid=10062 comm="syz.1.942" path="socket:[21994]" dev="sockfs" ino=21994 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 401.394622][T10082] ip6erspan0: entered allmulticast mode [ 401.573471][T10087] FAULT_INJECTION: forcing a failure. [ 401.573471][T10087] name failslab, interval 1, probability 0, space 0, times 0 [ 401.586492][T10087] CPU: 1 UID: 0 PID: 10087 Comm: syz.5.950 Not tainted syzkaller #0 PREEMPT(full) [ 401.586518][T10087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 401.586528][T10087] Call Trace: [ 401.586534][T10087] [ 401.586541][T10087] dump_stack_lvl+0x16c/0x1f0 [ 401.586568][T10087] should_fail_ex+0x512/0x640 [ 401.586593][T10087] should_failslab+0xc2/0x120 [ 401.586615][T10087] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 401.586634][T10087] ? dst_alloc+0x99/0x1a0 [ 401.586657][T10087] dst_alloc+0x99/0x1a0 [ 401.586674][T10087] ? fib_validate_source+0x13b/0x730 [ 401.586702][T10087] rt_dst_alloc+0x35/0x3a0 [ 401.586729][T10087] ip_route_input_slow+0x1671/0x3df0 [ 401.586753][T10087] ? __pfx_ip_route_input_slow+0x10/0x10 [ 401.586773][T10087] ? __lock_acquire+0x62e/0x1ce0 [ 401.586807][T10087] ? __lock_acquire+0x62e/0x1ce0 [ 401.586849][T10087] ip_route_input_noref+0x120/0x2e0 [ 401.586869][T10087] ? __pfx_ip_route_input_noref+0x10/0x10 [ 401.586893][T10087] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 401.586918][T10087] ip_rcv_finish_core+0x46f/0x22a0 [ 401.586945][T10087] ip_rcv+0x1c0/0x600 [ 401.586965][T10087] ? __pfx_ip_rcv+0x10/0x10 [ 401.586983][T10087] __netif_receive_skb_one_core+0x197/0x1e0 [ 401.587004][T10087] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 401.587024][T10087] ? lock_acquire+0x179/0x350 [ 401.587042][T10087] ? __phys_addr+0xe8/0x180 [ 401.587069][T10087] __netif_receive_skb+0x1d/0x160 [ 401.587088][T10087] netif_receive_skb+0x137/0x7b0 [ 401.587106][T10087] ? __pfx_netif_receive_skb+0x10/0x10 [ 401.587134][T10087] tun_rx_batched.isra.0+0x3ee/0x740 [ 401.587163][T10087] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 401.587194][T10087] ? tun_get_user+0x1d8a/0x3ce0 [ 401.587219][T10087] ? rcu_is_watching+0x12/0xc0 [ 401.587245][T10087] tun_get_user+0x28e4/0x3ce0 [ 401.587283][T10087] ? __pfx_tun_get_user+0x10/0x10 [ 401.587311][T10087] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 401.587343][T10087] ? find_held_lock+0x2b/0x80 [ 401.587370][T10087] ? tun_get+0x191/0x370 [ 401.587401][T10087] tun_chr_write_iter+0xdc/0x210 [ 401.587434][T10087] vfs_write+0x7d3/0x11d0 [ 401.587454][T10087] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 401.587483][T10087] ? __pfx_vfs_write+0x10/0x10 [ 401.587498][T10087] ? find_held_lock+0x2b/0x80 [ 401.587536][T10087] ksys_write+0x12a/0x250 [ 401.587553][T10087] ? __pfx_ksys_write+0x10/0x10 [ 401.587579][T10087] do_syscall_64+0xcd/0x4e0 [ 401.587604][T10087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.587622][T10087] RIP: 0033:0x7fedb318d6df [ 401.587637][T10087] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 401.587653][T10087] RSP: 002b:00007fedb4042000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 401.587671][T10087] RAX: ffffffffffffffda RBX: 00007fedb33d5fa0 RCX: 00007fedb318d6df [ 401.587682][T10087] RDX: 0000000000000046 RSI: 0000200000000000 RDI: 00000000000000c8 [ 401.587693][T10087] RBP: 00007fedb4042090 R08: 0000000000000000 R09: 0000000000000000 [ 401.587704][T10087] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 401.587714][T10087] R13: 00007fedb33d6038 R14: 00007fedb33d5fa0 R15: 00007fffc3b05dc8 [ 401.587737][T10087] [ 402.171507][ T5970] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 402.423278][ T5970] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 402.866521][ T5912] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 402.994708][ T5970] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 403.007031][ T5970] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 403.019074][ T5970] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 403.029228][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.037959][ T5970] usb 5-1: Product: syz [ 403.048109][ T5970] usb 5-1: Manufacturer: syz [ 403.053021][ T5970] usb 5-1: SerialNumber: syz [ 403.062348][ T5970] usb 5-1: config 0 descriptor?? [ 403.069332][T10103] FAULT_INJECTION: forcing a failure. [ 403.069332][T10103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.083194][T10088] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 403.090423][T10088] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 403.173678][T10103] CPU: 1 UID: 0 PID: 10103 Comm: syz.1.956 Not tainted syzkaller #0 PREEMPT(full) [ 403.173705][T10103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 403.173716][T10103] Call Trace: [ 403.173721][T10103] [ 403.173728][T10103] dump_stack_lvl+0x16c/0x1f0 [ 403.173756][T10103] should_fail_ex+0x512/0x640 [ 403.173783][T10103] _copy_to_user+0x32/0xd0 [ 403.173810][T10103] video_usercopy+0xf3e/0x1720 [ 403.173833][T10103] ? __pfx___video_do_ioctl+0x10/0x10 [ 403.173853][T10103] ? selinux_kernel_read_file+0x90/0x130 [ 403.173878][T10103] ? __pfx_video_usercopy+0x10/0x10 [ 403.173916][T10103] v4l2_ioctl+0x1bd/0x250 [ 403.173935][T10103] ? __pfx_v4l2_ioctl+0x10/0x10 [ 403.173955][T10103] __x64_sys_ioctl+0x18e/0x210 [ 403.173984][T10103] do_syscall_64+0xcd/0x4e0 [ 403.174008][T10103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.174026][T10103] RIP: 0033:0x7f762ff8ec29 [ 403.174040][T10103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.174057][T10103] RSP: 002b:00007f762e1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.174074][T10103] RAX: ffffffffffffffda RBX: 00007f76301d5fa0 RCX: 00007f762ff8ec29 [ 403.174116][T10103] RDX: 0000200000000000 RSI: 00000000c0405602 RDI: 0000000000000003 [ 403.174127][T10103] RBP: 00007f762e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 403.174142][T10103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.174153][T10103] R13: 00007f76301d6038 R14: 00007f76301d5fa0 R15: 00007ffced08f258 [ 403.174177][T10103] [ 403.249160][ T5970] usb 5-1: ucan: probing device on interface #0 [ 403.350940][ T5912] usb 6-1: Using ep0 maxpacket: 8 [ 403.532428][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.584533][ T5912] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 403.607420][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.643501][ T5912] usb 6-1: config 0 descriptor?? [ 403.658933][ T5912] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 403.812813][ T5970] usb 5-1: ucan: device reported invalid device info [ 403.819959][ T5970] usb 5-1: ucan: probe failed; try to update the device firmware [ 403.904636][T10114] overlayfs: failed to resolve './file1': -2 [ 404.097229][ T5970] usb 5-1: USB disconnect, device number 21 [ 405.159059][T10119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.191937][T10119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.344130][T10122] netlink: 72 bytes leftover after parsing attributes in process `syz.3.963'. [ 407.543741][ T9] usb 6-1: USB disconnect, device number 3 [ 409.491725][ T5912] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 409.556821][T10175] FAULT_INJECTION: forcing a failure. [ 409.556821][T10175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.586785][T10175] CPU: 1 UID: 0 PID: 10175 Comm: syz.5.975 Not tainted syzkaller #0 PREEMPT(full) [ 409.586811][T10175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 409.586821][T10175] Call Trace: [ 409.586827][T10175] [ 409.586834][T10175] dump_stack_lvl+0x16c/0x1f0 [ 409.586853][T10175] should_fail_ex+0x512/0x640 [ 409.586870][T10175] _copy_from_iter+0x29f/0x1720 [ 409.586889][T10175] ? __alloc_skb+0x200/0x380 [ 409.586902][T10175] ? __pfx__copy_from_iter+0x10/0x10 [ 409.586917][T10175] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 409.586933][T10175] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 409.586954][T10175] netlink_sendmsg+0x829/0xdd0 [ 409.586971][T10175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.586991][T10175] ____sys_sendmsg+0xa95/0xc70 [ 409.587009][T10175] ? copy_msghdr_from_user+0x10a/0x160 [ 409.587023][T10175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.587047][T10175] ___sys_sendmsg+0x134/0x1d0 [ 409.587061][T10175] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.587091][T10175] __sys_sendmsg+0x16d/0x220 [ 409.587105][T10175] ? __pfx___sys_sendmsg+0x10/0x10 [ 409.587128][T10175] do_syscall_64+0xcd/0x4e0 [ 409.587148][T10175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.587160][T10175] RIP: 0033:0x7fedb318ec29 [ 409.587169][T10175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.587180][T10175] RSP: 002b:00007fedb4042038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.587190][T10175] RAX: ffffffffffffffda RBX: 00007fedb33d5fa0 RCX: 00007fedb318ec29 [ 409.587197][T10175] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000003 [ 409.587204][T10175] RBP: 00007fedb4042090 R08: 0000000000000000 R09: 0000000000000000 [ 409.587210][T10175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.587216][T10175] R13: 00007fedb33d6038 R14: 00007fedb33d5fa0 R15: 00007fffc3b05dc8 [ 409.587230][T10175] [ 409.784172][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.828941][ T5912] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 409.838952][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 409.850472][ T5912] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 409.874210][ T5912] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 409.883411][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.893011][ T5912] usb 2-1: Product: syz [ 409.897159][ T5912] usb 2-1: Manufacturer: syz [ 409.901779][ T5912] usb 2-1: SerialNumber: syz [ 409.907594][ T5912] usb 2-1: config 0 descriptor?? [ 409.915427][T10172] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 409.922682][T10172] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 409.930489][ T5912] usb 2-1: ucan: probing device on interface #0 [ 410.831362][ T5912] usb 2-1: ucan: device reported invalid device info [ 410.875938][ T5912] usb 2-1: ucan: probe failed; try to update the device firmware [ 411.012495][ T942] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 411.041157][ T5970] usb 2-1: USB disconnect, device number 21 [ 411.211025][ T942] usb 4-1: unable to get BOS descriptor or descriptor too short [ 411.253210][ T942] usb 4-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 411.274907][ T942] usb 4-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 411.296177][ T942] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 411.307294][ T942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.315450][ T942] usb 4-1: Product: syz [ 411.325098][ T942] usb 4-1: Manufacturer: syz [ 411.333539][ T942] usb 4-1: SerialNumber: syz [ 411.403393][ T5912] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 411.788101][ T5912] usb 6-1: unable to get BOS descriptor or descriptor too short [ 411.814956][ T5912] usb 6-1: not running at top speed; connect to a high speed hub [ 412.015516][T10198] kAFS: unable to lookup cell '/,' [ 412.940047][ T5912] usb 6-1: config 10 has an invalid interface number: 18 but max is 1 [ 412.958590][ T5912] usb 6-1: config 10 has an invalid interface number: 83 but max is 1 [ 412.985126][ T5912] usb 6-1: config 10 has no interface number 0 [ 413.010249][ T5912] usb 6-1: config 10 has no interface number 1 [ 413.036876][ T5912] usb 6-1: config 10 interface 18 has no altsetting 0 [ 413.207685][ T5912] usb 6-1: config 10 interface 83 has no altsetting 0 [ 413.241765][ T5912] usb 6-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.1e [ 413.250937][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.311804][T10202] comedi comedi0: Minor 3 specified more than once! [ 413.330183][ T30] audit: type=1400 audit(1758382791.934:651): avc: denied { read } for pid=10199 comm="syz.1.982" path="socket:[22187]" dev="sockfs" ino=22187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 413.597654][ T942] ati_remote2 4-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 413.620330][ T5912] usb 6-1: Product: syz [ 413.640101][ T5912] usb 6-1: Manufacturer: syz [ 413.661640][ T5912] usb 6-1: SerialNumber: syz [ 413.673704][ T942] usb 4-1: USB disconnect, device number 25 [ 413.754315][ T30] audit: type=1400 audit(1758382792.374:652): avc: denied { bind } for pid=10205 comm="syz.0.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 413.779707][ T30] audit: type=1400 audit(1758382792.374:653): avc: denied { node_bind } for pid=10205 comm="syz.0.984" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 414.077224][ T6346] Bluetooth: hci6: Frame reassembly failed (-84) [ 414.091762][ T6346] Bluetooth: hci6: Frame reassembly failed (-84) [ 414.535742][ T5912] usb 6-1: USB disconnect, device number 4 [ 415.600016][T10232] netlink: 'syz.5.988': attribute type 2 has an invalid length. [ 415.625383][ T5863] Bluetooth: hci5: unexpected event 0x33 length: 11 > 10 [ 416.121725][ T5869] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 416.136545][ T5863] Bluetooth: hci6: command 0x1003 tx timeout [ 416.212546][ T942] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 416.319199][T10244] batman_adv: batadv0: Adding interface: dummy0 [ 416.325860][T10244] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.351241][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.359312][T10244] batman_adv: batadv0: Interface activated: dummy0 [ 416.373551][ T942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.389049][ T942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.399312][ T942] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 416.408789][ T942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.432460][ T942] usb 6-1: config 0 descriptor?? [ 417.728653][ T942] usbhid 6-1:0.0: can't add hid device: -32 [ 417.734851][ T942] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 419.416692][ T5970] usb 6-1: USB disconnect, device number 5 [ 419.580885][T10283] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 420.004732][ T30] audit: type=1400 audit(1758382798.144:654): avc: denied { setopt } for pid=10281 comm="syz.0.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 420.374417][T10287] debugfs: '!' already exists in 'ieee80211' [ 420.503196][ T30] audit: type=1400 audit(1758382798.144:655): avc: denied { ioctl } for pid=10281 comm="syz.0.1001" path="socket:[22629]" dev="sockfs" ino=22629 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 420.647301][ T30] audit: type=1326 audit(1758382798.994:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10279 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762ff8ec29 code=0x7ffc0000 [ 420.671322][ T30] audit: type=1326 audit(1758382798.994:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10279 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762ff8ec29 code=0x7ffc0000 [ 420.876422][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 421.258220][ T30] audit: type=1326 audit(1758382798.994:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10279 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f762ff8ec29 code=0x7ffc0000 [ 421.281652][ T30] audit: type=1326 audit(1758382799.004:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10279 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762ff8ec29 code=0x7ffc0000 [ 421.331385][ T30] audit: type=1326 audit(1758382799.004:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10279 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f762ff8ec29 code=0x7ffc0000 [ 421.452818][ T30] audit: type=1326 audit(1758382799.004:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10279 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762ff8ec29 code=0x7ffc0000 [ 422.473506][ T30] audit: type=1326 audit(1758382799.004:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10279 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762ff8ec29 code=0x7ffc0000 [ 422.511441][ T30] audit: type=1326 audit(1758382799.004:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10279 comm="syz.1.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f762ff8ec29 code=0x7ffc0000 [ 423.341545][ T5869] Bluetooth: hci6: command 0x1003 tx timeout [ 423.347938][ T5863] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 423.770166][T10309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1006'. [ 423.851544][T10287] loop6: detected capacity change from 0 to 63 [ 426.016797][ T5869] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 426.031765][ T5869] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 426.049926][ T5869] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 426.084282][ T5869] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 426.112533][ T5869] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 426.783166][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 426.783185][ T30] audit: type=1326 audit(1758382805.404:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10335 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a0b8ec29 code=0x7ffc0000 [ 426.937019][T10341] debugfs: '!' already exists in 'ieee80211' [ 427.256622][ T30] audit: type=1326 audit(1758382805.404:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10335 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe6a0b8ec29 code=0x7ffc0000 [ 427.320548][ T30] audit: type=1326 audit(1758382805.404:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10335 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a0b8ec29 code=0x7ffc0000 [ 427.344162][ T30] audit: type=1326 audit(1758382805.404:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10335 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a0b8ec29 code=0x7ffc0000 [ 427.391579][ T30] audit: type=1326 audit(1758382805.404:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10335 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6a0b8ec29 code=0x7ffc0000 [ 427.415213][ T30] audit: type=1326 audit(1758382805.404:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10335 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a0b8ec29 code=0x7ffc0000 [ 427.481421][ T48] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 427.491875][ T30] audit: type=1326 audit(1758382805.404:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10335 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe6a0b8ec29 code=0x7ffc0000 [ 427.556118][T10333] chnl_net:caif_netlink_parms(): no params data found [ 427.583587][ T30] audit: type=1326 audit(1758382805.844:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10335 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a0b8ec29 code=0x7ffc0000 [ 427.631561][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 427.641942][ T48] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 427.655915][ T30] audit: type=1326 audit(1758382805.844:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10335 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a0b8ec29 code=0x7ffc0000 [ 427.761021][ T48] usb 6-1: config 0 has no interface number 0 [ 427.834451][ T48] usb 6-1: config 0 interface 12 has no altsetting 0 [ 427.849147][ T48] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 427.858428][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.869050][ T48] usb 6-1: Product: syz [ 427.873538][ T48] usb 6-1: Manufacturer: syz [ 427.879233][ T48] usb 6-1: SerialNumber: syz [ 428.040918][ T48] usb 6-1: config 0 descriptor?? [ 428.073901][T10333] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.081557][T10333] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.091645][T10333] bridge_slave_0: entered allmulticast mode [ 428.107708][T10333] bridge_slave_0: entered promiscuous mode [ 428.116502][T10333] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.123860][T10333] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.133035][T10333] bridge_slave_1: entered allmulticast mode [ 428.147647][T10333] bridge_slave_1: entered promiscuous mode [ 428.188752][T10333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.200878][T10333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.210848][ T5863] Bluetooth: hci6: command tx timeout [ 428.392465][T10333] team0: Port device team_slave_0 added [ 428.667606][T10333] team0: Port device team_slave_1 added [ 429.819061][ T48] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71 [ 429.827871][ T48] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 429.838433][ T48] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 429.847772][T10333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.851210][ T48] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 429.868299][ T48] usb 6-1: USB disconnect, device number 6 [ 429.876887][T10333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.904082][T10333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.918223][T10333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.925784][T10333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.078032][T10382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1022'. [ 430.081364][ T5933] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 430.281365][ T5863] Bluetooth: hci6: command tx timeout [ 430.281504][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 430.472857][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 430.563628][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 430.660383][ T9] usb 4-1: config 1 has no interface number 1 [ 430.718504][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 430.757071][T10385] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1023'. [ 430.815159][T10333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.821365][T10385] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1023'. [ 430.873481][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 430.896726][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.913703][ T9] usb 4-1: Product: syz [ 430.917949][ T9] usb 4-1: Manufacturer: syz [ 430.930705][ T9] usb 4-1: SerialNumber: syz [ 430.931116][T10333] hsr_slave_0: entered promiscuous mode [ 430.956564][T10333] hsr_slave_1: entered promiscuous mode [ 430.971359][ T5933] usb 1-1: Using ep0 maxpacket: 8 [ 430.977297][T10333] debugfs: 'hsr0' already exists in 'hsr' [ 430.985101][T10333] Cannot create hsr debugfs directory [ 430.985427][T10389] FAULT_INJECTION: forcing a failure. [ 430.985427][T10389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.991939][ T5933] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 431.004533][T10387] FAULT_INJECTION: forcing a failure. [ 431.004533][T10387] name failslab, interval 1, probability 0, space 0, times 0 [ 431.021760][ T5933] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 431.030711][T10387] CPU: 0 UID: 0 PID: 10387 Comm: syz.1.1024 Not tainted syzkaller #0 PREEMPT(full) [ 431.030734][T10387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 431.030743][T10387] Call Trace: [ 431.030755][T10387] [ 431.030768][T10387] dump_stack_lvl+0x16c/0x1f0 [ 431.030812][T10387] should_fail_ex+0x512/0x640 [ 431.030835][T10387] should_failslab+0xc2/0x120 [ 431.030853][T10387] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 431.030870][T10387] ? skb_clone+0x190/0x3f0 [ 431.030893][T10387] skb_clone+0x190/0x3f0 [ 431.030912][T10387] netlink_deliver_tap+0xabd/0xd30 [ 431.030937][T10387] netlink_dump+0xa5f/0xd30 [ 431.030958][T10387] ? __pfx_netlink_dump+0x10/0x10 [ 431.030994][T10387] netlink_recvmsg+0x7dc/0xa90 [ 431.031015][T10387] ? __pfx_netlink_recvmsg+0x10/0x10 [ 431.031044][T10387] sock_recvmsg+0x1f9/0x250 [ 431.031068][T10387] ____sys_recvmsg+0x218/0x6b0 [ 431.031100][T10387] ? __pfx_____sys_recvmsg+0x10/0x10 [ 431.031131][T10387] ? __lock_acquire+0x62e/0x1ce0 [ 431.031161][T10387] ___sys_recvmsg+0x114/0x1a0 [ 431.031181][T10387] ? __pfx____sys_recvmsg+0x10/0x10 [ 431.031202][T10387] ? find_held_lock+0x2b/0x80 [ 431.031235][T10387] do_recvmmsg+0x2fe/0x750 [ 431.031257][T10387] ? __pfx_do_recvmmsg+0x10/0x10 [ 431.031280][T10387] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 431.031309][T10387] ? __fget_files+0x20e/0x3c0 [ 431.031331][T10387] __x64_sys_recvmmsg+0x22a/0x280 [ 431.031351][T10387] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 431.031378][T10387] do_syscall_64+0xcd/0x4e0 [ 431.031399][T10387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.031415][T10387] RIP: 0033:0x7f762ff8ec29 [ 431.031428][T10387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.031443][T10387] RSP: 002b:00007f762e1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 431.031459][T10387] RAX: ffffffffffffffda RBX: 00007f76301d5fa0 RCX: 00007f762ff8ec29 [ 431.031469][T10387] RDX: 0000000000000004 RSI: 00002000000086c0 RDI: 0000000000000003 [ 431.031478][T10387] RBP: 00007f762e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 431.031487][T10387] R10: 0000000000004022 R11: 0000000000000246 R12: 0000000000000001 [ 431.031497][T10387] R13: 00007f76301d6038 R14: 00007f76301d5fa0 R15: 00007ffced08f258 [ 431.031519][T10387] [ 431.034118][T10389] CPU: 0 UID: 0 PID: 10389 Comm: syz.5.1025 Not tainted syzkaller #0 PREEMPT(full) [ 431.034137][T10389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 431.034150][T10389] Call Trace: [ 431.034154][T10389] [ 431.034160][T10389] dump_stack_lvl+0x16c/0x1f0 [ 431.034181][T10389] should_fail_ex+0x512/0x640 [ 431.034203][T10389] _copy_from_iter+0x29f/0x1720 [ 431.034227][T10389] ? __alloc_skb+0x200/0x380 [ 431.034245][T10389] ? __pfx__copy_from_iter+0x10/0x10 [ 431.034268][T10389] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 431.034294][T10389] netlink_sendmsg+0x829/0xdd0 [ 431.034317][T10389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.034345][T10389] ____sys_sendmsg+0xa95/0xc70 [ 431.034368][T10389] ? copy_msghdr_from_user+0x10a/0x160 [ 431.034387][T10389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.034419][T10389] ___sys_sendmsg+0x134/0x1d0 [ 431.034439][T10389] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.034483][T10389] __sys_sendmsg+0x16d/0x220 [ 431.034503][T10389] ? __pfx___sys_sendmsg+0x10/0x10 [ 431.034538][T10389] do_syscall_64+0xcd/0x4e0 [ 431.034561][T10389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.034576][T10389] RIP: 0033:0x7fedb318ec29 [ 431.034590][T10389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.034604][T10389] RSP: 002b:00007fedb4042038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.034620][T10389] RAX: ffffffffffffffda RBX: 00007fedb33d5fa0 RCX: 00007fedb318ec29 [ 431.034630][T10389] RDX: 0000000004000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 431.034640][T10389] RBP: 00007fedb4042090 R08: 0000000000000000 R09: 0000000000000000 [ 431.034650][T10389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.034660][T10389] R13: 00007fedb33d6038 R14: 00007fedb33d5fa0 R15: 00007fffc3b05dc8 [ 431.034682][T10389] [ 431.453411][ T5933] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 431.496831][ T5933] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 431.508720][ T9] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 431.538933][ T5933] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.582704][ T9] usb 4-1: USB disconnect, device number 26 [ 431.609256][ T5933] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 431.644295][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.650712][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.680826][T10399] netlink: 'syz.1.1027': attribute type 2 has an invalid length. [ 431.708362][ T5863] Bluetooth: hci4: unexpected event 0x33 length: 11 > 10 [ 431.889443][ T5933] usb 1-1: GET_CAPABILITIES returned 0 [ 431.902495][ T5933] usbtmc 1-1:16.0: can't read capabilities [ 431.922174][T10333] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 431.932541][T10333] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 431.941803][ T5970] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 431.945738][T10333] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 431.964959][T10333] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 432.076008][T10333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.092834][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.119898][T10333] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.146971][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.184992][T10411] misc userio: The device must be registered before sending interrupts [ 432.193687][ T5970] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 432.225367][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.247505][ T5970] usb 2-1: config 0 descriptor?? [ 432.361808][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.361886][ T5863] Bluetooth: hci6: command tx timeout [ 432.368932][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.758766][ T942] usb 1-1: USB disconnect, device number 22 [ 432.815183][T10373] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 432.916382][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.923555][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.047305][ T6448] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.180220][ T6448] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.267325][T10333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 433.285948][T10333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.329641][ T6448] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.463359][ T5970] usbhid 2-1:0.0: can't add hid device: -32 [ 433.469370][ T5970] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 433.524402][ T6448] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.699356][ T30] audit: type=1400 audit(1758382812.334:689): avc: denied { read } for pid=5514 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 433.879955][T10333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.013270][ T30] audit: type=1400 audit(1758382812.654:690): avc: denied { bind } for pid=10436 comm="syz.5.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 434.073438][ T30] audit: type=1400 audit(1758382812.694:691): avc: denied { listen } for pid=10436 comm="syz.5.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 434.383082][ T5969] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 434.448922][ T5863] Bluetooth: hci6: command tx timeout [ 434.611402][ T5969] usb 6-1: Using ep0 maxpacket: 8 [ 434.935761][ T5969] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 435.358357][ T5969] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 435.368386][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.376437][ T5969] usb 6-1: Product: syz [ 435.380917][ T5969] usb 6-1: Manufacturer: syz [ 435.385767][ T5969] usb 6-1: SerialNumber: syz [ 435.393306][ T5969] usb 6-1: config 0 descriptor?? [ 435.403686][ T5969] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 435.419825][ T5969] usb 6-1: setting power ON [ 435.425055][ T5969] dvb-usb: bulk message failed: -22 (2/0) [ 435.433739][ T5969] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 435.459178][ T6017] usb 2-1: USB disconnect, device number 22 [ 435.520547][ T30] audit: type=1400 audit(1758382814.154:692): avc: denied { connect } for pid=10460 comm="syz.1.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 435.570577][ T5969] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 435.587659][ T5969] usb 6-1: media controller created [ 435.606224][T10437] dvb-usb: bulk message failed: -22 (3/0) [ 435.642868][ T30] audit: type=1400 audit(1758382814.274:693): avc: denied { mounton } for pid=10460 comm="syz.1.1035" path="/229/file0" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 435.648757][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 435.666783][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.821994][ T5969] usb 6-1: selecting invalid altsetting 6 [ 435.827985][ T5969] usb 6-1: digital interface selection failed (-22) [ 435.845623][ T5969] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 435.870340][ T5969] usb 6-1: setting power OFF [ 435.882638][ T5969] dvb-usb: bulk message failed: -22 (2/0) [ 435.888618][ T5969] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 435.898426][ T5969] (NULL device *): no alternate interface [ 435.964634][ T5969] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 436.009919][ T6448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.026042][ T6448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.026590][ T5969] usb 6-1: USB disconnect, device number 7 [ 436.045812][ T6448] bond0 (unregistering): Released all slaves [ 436.128013][ T6448] bond1 (unregistering): Released all slaves [ 436.398187][T10475] overlayfs: failed to resolve './file1': -2 [ 438.034880][ T30] audit: type=1400 audit(1758382816.674:694): avc: denied { map } for pid=10491 comm="syz.0.1041" path="socket:[23249]" dev="sockfs" ino=23249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 438.070201][T10492] block nbd0: Attempted send on invalid socket [ 438.205555][T10492] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.685626][T10492] block nbd0: Attempted send on invalid socket [ 438.706175][T10492] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.723401][T10493] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.1038'. [ 438.725438][T10492] Mount JFS Failure: -5 [ 438.849077][ T30] audit: type=1400 audit(1758382817.484:695): avc: denied { read } for pid=10505 comm="syz.3.1043" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 438.874174][ T6448] hsr_slave_0: left promiscuous mode [ 438.883155][ T6448] hsr_slave_1: left promiscuous mode [ 438.900177][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.018406][ T6448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.025786][ T30] audit: type=1400 audit(1758382817.484:696): avc: denied { open } for pid=10505 comm="syz.3.1043" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 439.049676][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.206005][ T6448] veth1_macvtap: left promiscuous mode [ 439.236638][ T6448] veth0_macvtap: left promiscuous mode [ 439.244017][ T6448] veth1_vlan: left promiscuous mode [ 439.891350][ T6017] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 439.932114][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.938433][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.001512][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'. [ 440.356225][ T6448] veth0_vlan: left promiscuous mode [ 440.545914][ T6017] usb 6-1: not running at top speed; connect to a high speed hub [ 440.607202][ T6017] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 440.620236][ T6017] usb 6-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 440.645354][ T6017] usb 6-1: config 1 interface 0 has no altsetting 0 [ 440.659148][ T6017] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 440.668772][ T6017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.750537][ T6017] usb 6-1: Product: syz [ 440.798085][ T6017] usb 6-1: Manufacturer: syz [ 440.818206][ T6017] usb 6-1: SerialNumber: syz [ 440.847636][T10516] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 440.858381][T10516] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 441.044440][ T6448] team_slave_1 (unregistering): left promiscuous mode [ 441.051657][ T6448] team_slave_1 (unregistering): left allmulticast mode [ 441.082272][ T6448] team0 (unregistering): Port device team_slave_1 removed [ 441.098541][ T6017] usb 6-1: USB disconnect, device number 8 [ 441.201188][ T6448] C (unregistering): left promiscuous mode [ 441.207271][ T6448] C (unregistering): left allmulticast mode [ 441.226005][ T6448] team0 (unregistering): Port device C removed [ 441.486173][ T5863] Bluetooth: hci3: command 0x1003 tx timeout [ 441.487386][ T5869] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 441.660623][T10333] veth0_vlan: entered promiscuous mode [ 441.672446][T10333] veth1_vlan: entered promiscuous mode [ 441.698716][T10333] veth0_macvtap: entered promiscuous mode [ 441.708173][T10333] veth1_macvtap: entered promiscuous mode [ 442.293472][T10333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.338805][T10333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.399995][ T6346] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.247305][ T6346] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.256474][ T6346] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.265217][ T6346] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.591868][T10555] FAULT_INJECTION: forcing a failure. [ 443.591868][T10555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.598289][T10557] FAULT_INJECTION: forcing a failure. [ 443.598289][T10557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.624447][T10555] CPU: 0 UID: 0 PID: 10555 Comm: syz.1.1054 Not tainted syzkaller #0 PREEMPT(full) [ 443.624473][T10555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 443.624484][T10555] Call Trace: [ 443.624489][T10555] [ 443.624496][T10555] dump_stack_lvl+0x16c/0x1f0 [ 443.624523][T10555] should_fail_ex+0x512/0x640 [ 443.624550][T10555] _copy_from_iter+0x29f/0x1720 [ 443.624578][T10555] ? __alloc_skb+0x200/0x380 [ 443.624599][T10555] ? __pfx__copy_from_iter+0x10/0x10 [ 443.624626][T10555] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 443.624658][T10555] netlink_sendmsg+0x829/0xdd0 [ 443.624686][T10555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.624718][T10555] ____sys_sendmsg+0xa95/0xc70 [ 443.624747][T10555] ? copy_msghdr_from_user+0x10a/0x160 [ 443.624768][T10555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.624804][T10555] ___sys_sendmsg+0x134/0x1d0 [ 443.624826][T10555] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.624878][T10555] __sys_sendmsg+0x16d/0x220 [ 443.624899][T10555] ? __pfx___sys_sendmsg+0x10/0x10 [ 443.624937][T10555] do_syscall_64+0xcd/0x4e0 [ 443.624962][T10555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.624980][T10555] RIP: 0033:0x7f762ff8ec29 [ 443.624994][T10555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.625008][T10555] RSP: 002b:00007f762e1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.625031][T10555] RAX: ffffffffffffffda RBX: 00007f76301d5fa0 RCX: 00007f762ff8ec29 [ 443.625042][T10555] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 443.625052][T10555] RBP: 00007f762e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 443.625062][T10555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.625072][T10555] R13: 00007f76301d6038 R14: 00007f76301d5fa0 R15: 00007ffced08f258 [ 443.625093][T10555] [ 443.826598][T10557] CPU: 0 UID: 0 PID: 10557 Comm: syz.0.1056 Not tainted syzkaller #0 PREEMPT(full) [ 443.826626][T10557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 443.826637][T10557] Call Trace: [ 443.826642][T10557] [ 443.826649][T10557] dump_stack_lvl+0x16c/0x1f0 [ 443.826678][T10557] should_fail_ex+0x512/0x640 [ 443.826704][T10557] _copy_from_iter+0x29f/0x1720 [ 443.826730][T10557] ? __alloc_skb+0x200/0x380 [ 443.826748][T10557] ? __pfx__copy_from_iter+0x10/0x10 [ 443.826774][T10557] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 443.826805][T10557] netlink_sendmsg+0x829/0xdd0 [ 443.826831][T10557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.826862][T10557] ____sys_sendmsg+0xa95/0xc70 [ 443.826889][T10557] ? copy_msghdr_from_user+0x10a/0x160 [ 443.826910][T10557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.826946][T10557] ___sys_sendmsg+0x134/0x1d0 [ 443.826968][T10557] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.827031][T10557] __sys_sendmsg+0x16d/0x220 [ 443.827053][T10557] ? __pfx___sys_sendmsg+0x10/0x10 [ 443.827090][T10557] do_syscall_64+0xcd/0x4e0 [ 443.827116][T10557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.827133][T10557] RIP: 0033:0x7fe6a0b8ec29 [ 443.827147][T10557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.827164][T10557] RSP: 002b:00007fe6a196d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.827181][T10557] RAX: ffffffffffffffda RBX: 00007fe6a0dd5fa0 RCX: 00007fe6a0b8ec29 [ 443.827192][T10557] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 443.827202][T10557] RBP: 00007fe6a196d090 R08: 0000000000000000 R09: 0000000000000000 [ 443.827212][T10557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.827222][T10557] R13: 00007fe6a0dd6038 R14: 00007fe6a0dd5fa0 R15: 00007fffc47850f8 [ 443.827246][T10557] [ 444.136591][ T6329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.146371][ T6329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.281010][ T6329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.292945][ T30] audit: type=1400 audit(1758382822.914:697): avc: denied { open } for pid=10554 comm="syz.5.1055" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 444.344221][ T6329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.091327][ T5969] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 447.261532][ T5969] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 447.272241][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.310289][ T5969] usb 1-1: config 0 descriptor?? [ 447.454377][T10618] FAULT_INJECTION: forcing a failure. [ 447.454377][T10618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.546241][T10618] CPU: 0 UID: 0 PID: 10618 Comm: syz.3.1065 Not tainted syzkaller #0 PREEMPT(full) [ 447.546273][T10618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 447.546286][T10618] Call Trace: [ 447.546293][T10618] [ 447.546300][T10618] dump_stack_lvl+0x16c/0x1f0 [ 447.546327][T10618] should_fail_ex+0x512/0x640 [ 447.546354][T10618] _copy_from_iter+0x29f/0x1720 [ 447.546382][T10618] ? __alloc_skb+0x200/0x380 [ 447.546402][T10618] ? __pfx__copy_from_iter+0x10/0x10 [ 447.546429][T10618] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 447.546458][T10618] netlink_sendmsg+0x829/0xdd0 [ 447.546485][T10618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.546517][T10618] ____sys_sendmsg+0xa95/0xc70 [ 447.546544][T10618] ? copy_msghdr_from_user+0x10a/0x160 [ 447.546566][T10618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.546603][T10618] ___sys_sendmsg+0x134/0x1d0 [ 447.546626][T10618] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.546677][T10618] __sys_sendmsg+0x16d/0x220 [ 447.546699][T10618] ? __pfx___sys_sendmsg+0x10/0x10 [ 447.546736][T10618] do_syscall_64+0xcd/0x4e0 [ 447.546761][T10618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.546779][T10618] RIP: 0033:0x7fe19b78ec29 [ 447.546793][T10618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.546809][T10618] RSP: 002b:00007fe19c678038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.546827][T10618] RAX: ffffffffffffffda RBX: 00007fe19b9d5fa0 RCX: 00007fe19b78ec29 [ 447.546838][T10618] RDX: 0000000000000884 RSI: 0000200000000140 RDI: 0000000000000003 [ 447.546848][T10618] RBP: 00007fe19c678090 R08: 0000000000000000 R09: 0000000000000000 [ 447.546859][T10618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.546868][T10618] R13: 00007fe19b9d6038 R14: 00007fe19b9d5fa0 R15: 00007ffcc692b1e8 [ 447.546890][T10618] [ 447.936159][T10628] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1067'. [ 448.412343][ T5969] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 448.593132][ T5969] usb 1-1: USB disconnect, device number 23 [ 448.632939][ T30] audit: type=1400 audit(1758382827.274:698): avc: denied { relabelfrom } for pid=10630 comm="syz.1.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 448.727071][ T30] audit: type=1400 audit(1758382827.294:699): avc: denied { relabelto } for pid=10630 comm="syz.1.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 448.752757][T10638] syzkaller0: create flow: hash 4254869325 index 1 [ 448.770431][ T1107] syzkaller0: tun_net_xmit 76 [ 448.777501][ T1107] syzkaller0: tun_net_xmit 48 [ 448.811524][ T5933] syzkaller0: tun_net_xmit 76 [ 448.978109][ T48] syzkaller0: tun_net_xmit 76 [ 449.358085][T10630] syzkaller0: delete flow: hash 4254869325 index 1 [ 449.549171][ T5933] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 449.702018][ T5933] usb 6-1: Using ep0 maxpacket: 8 [ 449.777388][ T5933] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.829163][ T5933] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 449.840557][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.878069][ T5933] usb 6-1: config 0 descriptor?? [ 449.929639][ T5933] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 450.738986][T10654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.749875][T10654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.141925][T10659] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 453.896921][ T5933] usb 6-1: USB disconnect, device number 9 [ 454.435114][ T6017] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 454.601692][ T6017] usb 7-1: Using ep0 maxpacket: 16 [ 454.638723][T10687] netlink: 'syz.3.1080': attribute type 1 has an invalid length. [ 454.652922][ T6017] usb 7-1: config index 0 descriptor too short (expected 102, got 36) [ 454.669660][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 454.678957][ T6017] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.824183][ T6017] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 454.845150][ T6017] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.913774][ T6017] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 454.931462][ T6017] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.986363][ T6017] usb 7-1: Product: syz [ 455.115768][ T6017] usb 7-1: Manufacturer: syz [ 455.178924][ T6017] usb 7-1: SerialNumber: syz [ 455.273188][ T6017] usb 7-1: config 0 descriptor?? [ 455.298861][ T6017] port100 7-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 455.762399][ T5912] usb 7-1: USB disconnect, device number 2 [ 456.242460][ T5969] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 456.287018][ T30] audit: type=1400 audit(1758382834.894:700): avc: denied { append } for pid=10721 comm="syz.1.1088" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 457.270889][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 457.320470][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.341574][ T5969] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 457.370351][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.501107][ T5969] usb 1-1: config 0 descriptor?? [ 457.954535][ T5956] Bluetooth: hci3: Frame reassembly failed (-84) [ 457.961092][ T5956] Bluetooth: hci3: Frame reassembly failed (-84) [ 457.995422][ T5956] Bluetooth: hci3: Frame reassembly failed (-84) [ 458.937126][ T5969] isku 0003:1E7D:319C.000E: unknown main item tag 0x1 [ 458.980086][ T5969] isku 0003:1E7D:319C.000E: item fetching failed at offset 3/7 [ 459.025197][ T5969] isku 0003:1E7D:319C.000E: parse failed [ 459.030979][ T5969] isku 0003:1E7D:319C.000E: probe with driver isku failed with error -22 [ 459.043652][ T30] audit: type=1400 audit(1758382837.684:701): avc: denied { view } for pid=10749 comm="syz.5.1095" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 459.132495][ T6015] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 459.141112][ T5969] usb 1-1: USB disconnect, device number 24 [ 459.227610][ T30] audit: type=1400 audit(1758382837.864:702): avc: denied { read write } for pid=10752 comm="syz.5.1096" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 459.254524][ T30] audit: type=1400 audit(1758382837.864:703): avc: denied { open } for pid=10752 comm="syz.5.1096" path="/dev/sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 459.279279][ T30] audit: type=1400 audit(1758382837.874:704): avc: denied { ioctl } for pid=10752 comm="syz.5.1096" path="/dev/sg0" dev="devtmpfs" ino=749 ioctlcmd=0x227d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 459.331312][ T6015] usb 4-1: Using ep0 maxpacket: 8 [ 459.339970][ T6015] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.355154][ T6015] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 459.364697][ T6015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.376118][ T6015] usb 4-1: config 0 descriptor?? [ 459.384615][ T6015] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 460.163333][ T5863] Bluetooth: hci3: command 0x1003 tx timeout [ 460.170696][ T5869] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 460.185774][T10746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.239340][ T6015] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 460.262996][T10746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.421339][ T6015] usb 6-1: Using ep0 maxpacket: 32 [ 460.435750][ T6015] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 460.456384][ T6015] usb 6-1: config 0 has no interface number 0 [ 460.495874][ T30] audit: type=1400 audit(1758382839.134:705): avc: denied { mounton } for pid=10765 comm="syz.0.1101" path="/222/file1" dev="autofs" ino=25011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 460.638153][ T6015] usb 6-1: config 0 interface 12 has no altsetting 0 [ 460.656282][ T6015] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 460.669554][ T6015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.693387][ T6015] usb 6-1: Product: syz [ 460.697547][ T6015] usb 6-1: Manufacturer: syz [ 460.731431][ T5933] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 460.760522][ T6015] usb 6-1: SerialNumber: syz [ 460.769678][ T6015] usb 6-1: config 0 descriptor?? [ 460.893781][ T5933] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 460.905552][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 460.920045][ T5933] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 460.938159][ T5933] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 460.948315][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.960922][ T5933] usb 2-1: Product: syz [ 460.968383][ T5933] usb 2-1: Manufacturer: syz [ 460.978030][ T5933] usb 2-1: SerialNumber: syz [ 460.998952][ T5933] usb 2-1: config 0 descriptor?? [ 461.016006][T10771] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 461.023624][T10771] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 461.034547][ T5933] usb 2-1: ucan: probing device on interface #0 [ 461.267116][ T30] audit: type=1400 audit(1758382839.904:706): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 461.557933][ T30] audit: type=1800 audit(1758382840.194:707): pid=10781 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1103" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 461.648984][ T5933] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 461.717740][ T5933] usb 2-1: USB disconnect, device number 23 [ 461.768293][ T30] audit: type=1400 audit(1758382840.404:708): avc: denied { write } for pid=10783 comm="syz.6.1104" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 461.888536][ T5970] usb 4-1: USB disconnect, device number 27 [ 462.132609][ T30] audit: type=1400 audit(1758382840.444:709): avc: denied { read write } for pid=10783 comm="syz.6.1104" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 462.319189][ T30] audit: type=1400 audit(1758382840.444:710): avc: denied { open } for pid=10783 comm="syz.6.1104" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 462.720447][T10792] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 462.732686][T10792] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 463.442412][ T6015] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -32 [ 463.450671][ T6015] f81534 6-1:0.12: f81534_find_config_idx: read failed: -32 [ 463.460964][ T6015] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 463.528045][ T6015] f81534 6-1:0.12: probe with driver f81534 failed with error -32 [ 463.586069][T10800] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 463.658981][ T6346] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xeb [ 464.037223][ T30] audit: type=1400 audit(1758382842.674:711): avc: denied { create } for pid=10808 comm="syz.1.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 464.354148][T10809] ubi31: attaching mtd0 [ 464.384129][T10809] ubi31: scanning is finished [ 464.400121][ T5933] usb 6-1: USB disconnect, device number 10 [ 464.686140][T10809] ubi31: empty MTD device detected [ 464.722790][T10812] support for cryptoloop has been removed. Use dm-crypt instead. [ 464.819240][T10819] batman_adv: batadv0: Adding interface: dummy0 [ 465.002103][T10819] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.178676][ T30] audit: type=1400 audit(1758382843.814:712): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 465.184023][T10819] batman_adv: batadv0: Interface activated: dummy0 [ 465.209746][T10812] overlayfs: failed to resolve './bus': -2 [ 465.290273][T10827] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 465.353943][T10825] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1112'. [ 465.738713][T10809] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 465.781511][ T5970] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 465.789004][T10809] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 465.816215][T10809] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 465.887925][T10809] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 465.991416][ T5970] usb 7-1: device descriptor read/64, error -71 [ 466.704499][T10809] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 466.729919][T10809] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 466.758391][T10809] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1709305744 [ 466.799404][T10809] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 466.812586][T10834] ubi31: background thread "ubi_bgt31d" started, PID 10834 [ 466.851364][ T5970] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 467.071601][ T5970] usb 7-1: device descriptor read/64, error -71 [ 467.203448][ T5970] usb usb7-port1: attempt power cycle [ 467.725636][T10851] input: syz1 as /devices/virtual/input/input14 [ 468.827458][T10860] ubi: mtd0 is already attached to ubi31 [ 469.051552][ T942] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 469.222301][ T942] usb 2-1: Using ep0 maxpacket: 32 [ 469.365654][ T942] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 469.924795][ T942] usb 2-1: config 0 has no interface number 0 [ 469.931118][ T942] usb 2-1: config 0 interface 12 has no altsetting 0 [ 469.942165][ T942] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 469.951443][ T942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.981766][ T942] usb 2-1: Product: syz [ 469.986025][ T942] usb 2-1: Manufacturer: syz [ 469.991299][ T942] usb 2-1: SerialNumber: syz [ 469.999534][ T942] usb 2-1: config 0 descriptor?? [ 471.433948][T10889] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 471.557261][T10890] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 471.827489][ T942] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71 [ 471.840042][ T942] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 471.896491][ T942] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 471.920841][ T942] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 471.948575][ T942] usb 2-1: USB disconnect, device number 24 [ 472.328501][T10913] overlayfs: missing 'lowerdir' [ 472.635533][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1129'. [ 472.828804][T10919] bridge_slave_1: left allmulticast mode [ 472.887378][T10919] bridge_slave_1: left promiscuous mode [ 472.928420][T10919] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.178694][T10919] bridge_slave_0: left allmulticast mode [ 473.185346][T10919] bridge_slave_0: left promiscuous mode [ 473.191936][T10919] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.213146][T10937] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 474.224654][T10937] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 475.616003][T10953] bond0: (slave dummy0): Releasing backup interface [ 476.064551][T10960] netlink: 'syz.0.1136': attribute type 10 has an invalid length. [ 476.099470][T10953] bond0: (slave bond_slave_0): Releasing backup interface [ 476.151152][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'. [ 476.452774][T10953] bond0: (slave bond_slave_1): Releasing backup interface [ 476.731070][T10953] team0: Port device team_slave_0 removed [ 477.628265][T10953] team0: Port device team_slave_1 removed [ 477.647831][T10953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.657848][T10953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.673702][T10953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.681191][T10953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.715096][T10953] bond0: (slave wlan1): Releasing backup interface [ 477.844586][ T30] audit: type=1400 audit(1758382856.484:713): avc: denied { watch watch_reads } for pid=10972 comm="syz.6.1139" path="/12" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 477.931383][ T5970] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 478.233765][ T5970] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 478.473856][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.493027][ T5970] usb 6-1: config 0 descriptor?? [ 478.514869][T10960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.541497][T10960] team0: Port device bond0 added [ 478.781038][T10950] team0 (unregistering): Port device bond0 removed [ 479.010210][T10973] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1139'. [ 479.144258][T11007] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 479.155616][T11007] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 479.983957][ T5970] pegasus 6-1:0.0: probe with driver pegasus failed with error -71 [ 480.723809][ T5970] usb 6-1: USB disconnect, device number 11 [ 481.223924][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1151'. [ 482.442676][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 485.106863][ T30] audit: type=1400 audit(1758382863.744:714): avc: denied { create } for pid=11074 comm="syz.0.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 485.361148][T11098] FAULT_INJECTION: forcing a failure. [ 485.361148][T11098] name failslab, interval 1, probability 0, space 0, times 0 [ 485.413716][ T30] audit: type=1400 audit(1758382864.044:715): avc: denied { block_suspend } for pid=11100 comm="syz.1.1164" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 485.441532][T11104] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1163'. [ 485.462276][T11098] CPU: 1 UID: 0 PID: 11098 Comm: syz.6.1161 Not tainted syzkaller #0 PREEMPT(full) [ 485.462303][T11098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 485.462314][T11098] Call Trace: [ 485.462320][T11098] [ 485.462327][T11098] dump_stack_lvl+0x16c/0x1f0 [ 485.462357][T11098] should_fail_ex+0x512/0x640 [ 485.462381][T11098] ? __kvmalloc_node_noprof+0x124/0x620 [ 485.462403][T11098] should_failslab+0xc2/0x120 [ 485.462433][T11098] __kvmalloc_node_noprof+0x137/0x620 [ 485.462452][T11098] ? tun_attach.isra.0+0x8fc/0x17e0 [ 485.462488][T11098] ? tun_attach.isra.0+0x8fc/0x17e0 [ 485.462513][T11098] tun_attach.isra.0+0x8fc/0x17e0 [ 485.462541][T11098] ? __pfx_avc_has_perm+0x10/0x10 [ 485.462563][T11098] ? find_held_lock+0x2b/0x80 [ 485.462591][T11098] ? selinux_tun_dev_open+0x173/0x1c0 [ 485.462616][T11098] __tun_chr_ioctl+0x14b3/0x48b0 [ 485.462642][T11098] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 485.462675][T11098] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 485.462713][T11098] ? hook_file_ioctl_common+0x145/0x410 [ 485.462748][T11098] ? selinux_file_ioctl+0x180/0x270 [ 485.462773][T11098] ? selinux_file_ioctl+0xb4/0x270 [ 485.462797][T11098] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 485.462823][T11098] __x64_sys_ioctl+0x18e/0x210 [ 485.462852][T11098] do_syscall_64+0xcd/0x4e0 [ 485.462879][T11098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.462897][T11098] RIP: 0033:0x7f43d7d8ec29 [ 485.462912][T11098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.462935][T11098] RSP: 002b:00007f43d8b9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.462952][T11098] RAX: ffffffffffffffda RBX: 00007f43d7fd6180 RCX: 00007f43d7d8ec29 [ 485.462964][T11098] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000003 [ 485.462975][T11098] RBP: 00007f43d8b9f090 R08: 0000000000000000 R09: 0000000000000000 [ 485.462985][T11098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.462996][T11098] R13: 00007f43d7fd6218 R14: 00007f43d7fd6180 R15: 00007ffc8a231558 [ 485.463020][T11098] [ 485.465182][T11104] netlink: 'syz.5.1163': attribute type 7 has an invalid length. [ 485.699032][ T30] audit: type=1400 audit(1758382864.324:716): avc: denied { accept } for pid=11100 comm="syz.1.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 485.723677][T11104] netlink: 'syz.5.1163': attribute type 8 has an invalid length. [ 485.734802][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1163'. [ 486.055545][T11104] ip6gretap0: entered promiscuous mode [ 486.071149][T11104] batadv_slave_1: entered promiscuous mode [ 486.115186][T11104] ip6gretap0: left promiscuous mode [ 486.125086][T11104] batadv_slave_1: left promiscuous mode [ 488.527240][T11138] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 488.791080][T11138] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 488.893515][T11149] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 488.905083][T11149] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 490.724502][ T30] audit: type=1400 audit(1758382869.334:717): avc: denied { create } for pid=11156 comm="syz.6.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 490.803112][ T5969] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 491.092685][ T5969] usb 2-1: Using ep0 maxpacket: 8 [ 491.103670][ T5969] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.113961][ T5969] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 491.145257][ T30] audit: type=1400 audit(1758382869.784:718): avc: denied { write } for pid=11168 comm="syz.6.1182" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 491.169696][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.183037][ T30] audit: type=1400 audit(1758382869.784:719): avc: denied { open } for pid=11168 comm="syz.6.1182" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 491.207272][ T5969] usb 2-1: config 0 descriptor?? [ 491.215507][ T5969] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 491.246642][ T30] audit: type=1400 audit(1758382869.784:720): avc: denied { ioctl } for pid=11168 comm="syz.6.1182" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 491.279655][ T30] audit: type=1400 audit(1758382869.814:721): avc: denied { ioctl } for pid=11168 comm="syz.6.1182" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 491.357122][T11171] FAULT_INJECTION: forcing a failure. [ 491.357122][T11171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.373501][T11171] CPU: 1 UID: 0 PID: 11171 Comm: syz.6.1184 Not tainted syzkaller #0 PREEMPT(full) [ 491.373527][T11171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 491.373537][T11171] Call Trace: [ 491.373544][T11171] [ 491.373551][T11171] dump_stack_lvl+0x16c/0x1f0 [ 491.373578][T11171] should_fail_ex+0x512/0x640 [ 491.373604][T11171] _copy_from_iter+0x29f/0x1720 [ 491.373632][T11171] ? __alloc_skb+0x200/0x380 [ 491.373653][T11171] ? __pfx__copy_from_iter+0x10/0x10 [ 491.373678][T11171] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 491.373706][T11171] netlink_sendmsg+0x829/0xdd0 [ 491.373724][T11171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.373743][T11171] ____sys_sendmsg+0xa95/0xc70 [ 491.373761][T11171] ? copy_msghdr_from_user+0x10a/0x160 [ 491.373775][T11171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.373809][T11171] ___sys_sendmsg+0x134/0x1d0 [ 491.373828][T11171] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.373859][T11171] __sys_sendmsg+0x16d/0x220 [ 491.373873][T11171] ? __pfx___sys_sendmsg+0x10/0x10 [ 491.373897][T11171] do_syscall_64+0xcd/0x4e0 [ 491.373913][T11171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.373925][T11171] RIP: 0033:0x7f43d7d8ec29 [ 491.373934][T11171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.373945][T11171] RSP: 002b:00007f43d8be1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.373957][T11171] RAX: ffffffffffffffda RBX: 00007f43d7fd5fa0 RCX: 00007f43d7d8ec29 [ 491.373964][T11171] RDX: 0000000010040000 RSI: 000020000000a280 RDI: 0000000000000003 [ 491.373970][T11171] RBP: 00007f43d8be1090 R08: 0000000000000000 R09: 0000000000000000 [ 491.373979][T11171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.373985][T11171] R13: 00007f43d7fd6038 R14: 00007f43d7fd5fa0 R15: 00007ffc8a231558 [ 491.373999][T11171] [ 491.452381][ T6017] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 491.992247][T11181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.006520][T11181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.084964][ T6017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.098102][ T6017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.177077][ T6017] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 492.238970][ T6017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.057880][T11186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.570740][ T6017] usb 4-1: config 0 descriptor?? [ 493.918413][T11199] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 493.930178][T11199] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 494.747123][T11203] FAULT_INJECTION: forcing a failure. [ 494.747123][T11203] name failslab, interval 1, probability 0, space 0, times 0 [ 494.760052][T11203] CPU: 1 UID: 0 PID: 11203 Comm: syz.6.1191 Not tainted syzkaller #0 PREEMPT(full) [ 494.760078][T11203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 494.760088][T11203] Call Trace: [ 494.760095][T11203] [ 494.760102][T11203] dump_stack_lvl+0x16c/0x1f0 [ 494.760130][T11203] should_fail_ex+0x512/0x640 [ 494.760158][T11203] ? fs_reclaim_acquire+0xae/0x150 [ 494.760184][T11203] ? tomoyo_encode2+0x100/0x3e0 [ 494.760208][T11203] should_failslab+0xc2/0x120 [ 494.760229][T11203] __kmalloc_noprof+0xd2/0x510 [ 494.760247][T11203] ? d_absolute_path+0x136/0x1a0 [ 494.760277][T11203] tomoyo_encode2+0x100/0x3e0 [ 494.760306][T11203] tomoyo_encode+0x29/0x50 [ 494.760330][T11203] tomoyo_realpath_from_path+0x18f/0x6e0 [ 494.760363][T11203] tomoyo_path_number_perm+0x245/0x580 [ 494.760386][T11203] ? tomoyo_path_number_perm+0x237/0x580 [ 494.760411][T11203] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 494.760435][T11203] ? find_held_lock+0x2b/0x80 [ 494.760479][T11203] ? find_held_lock+0x2b/0x80 [ 494.760500][T11203] ? hook_file_ioctl_common+0x145/0x410 [ 494.760529][T11203] ? __fget_files+0x20e/0x3c0 [ 494.760553][T11203] security_file_ioctl+0x9b/0x240 [ 494.760580][T11203] __x64_sys_ioctl+0xb7/0x210 [ 494.760609][T11203] do_syscall_64+0xcd/0x4e0 [ 494.760634][T11203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.760655][T11203] RIP: 0033:0x7f43d7d8ec29 [ 494.760670][T11203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.760687][T11203] RSP: 002b:00007f43d8be1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.760704][T11203] RAX: ffffffffffffffda RBX: 00007f43d7fd5fa0 RCX: 00007f43d7d8ec29 [ 494.760716][T11203] RDX: 0000200000003280 RSI: 00000000c01864cd RDI: 0000000000000003 [ 494.760727][T11203] RBP: 00007f43d8be1090 R08: 0000000000000000 R09: 0000000000000000 [ 494.760738][T11203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.760748][T11203] R13: 00007f43d7fd6038 R14: 00007f43d7fd5fa0 R15: 00007ffc8a231558 [ 494.760773][T11203] [ 494.760808][T11203] ERROR: Out of memory at tomoyo_realpath_from_path. [ 494.886161][ T6017] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 494.986238][ T48] usb 2-1: USB disconnect, device number 25 [ 495.707241][ T6017] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 495.714618][ T30] audit: type=1400 audit(1758382874.354:722): avc: denied { ioctl } for pid=11210 comm="syz.0.1193" path="socket:[26414]" dev="sockfs" ino=26414 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 495.749077][T11215] kvm: pic: non byte read [ 495.761777][T11215] kvm: pic: level sensitive irq not supported [ 495.761914][T11215] kvm: pic: non byte read [ 495.776206][T11215] kvm: pic: single mode not supported [ 495.776224][T11215] kvm: pic: level sensitive irq not supported [ 495.783836][ T6017] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 495.797128][T11215] kvm: pic: non byte read [ 495.802561][T11215] kvm: pic: non byte read [ 495.807124][ T6017] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 495.814889][T11223] netlink: 4276 bytes leftover after parsing attributes in process `syz.0.1193'. [ 495.825225][ T6017] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 495.835600][T11215] kvm: pic: non byte read [ 495.842363][T11215] kvm: pic: non byte read [ 495.846757][ T6017] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 495.854316][T11223] netlink: 4276 bytes leftover after parsing attributes in process `syz.0.1193'. [ 495.876563][ T6017] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 495.897893][T11215] kvm: pic: non byte read [ 495.912831][ T6017] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 495.927733][T11215] kvm: pic: single mode not supported [ 495.927776][T11215] kvm: pic: non byte read [ 496.012230][T11223] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1193'. [ 496.022646][ T6017] cp2112 0003:10C4:EA90.000F: error requesting version [ 496.063849][ T6017] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -71 [ 496.105235][T11215] kvm: pic: single mode not supported [ 496.105308][T11215] kvm: pic: non byte read [ 496.216605][ T6017] usb 4-1: USB disconnect, device number 28 [ 496.232748][ T30] audit: type=1400 audit(1758382874.854:723): avc: denied { ioctl } for pid=11227 comm="syz.6.1199" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 496.599296][T11224] fido_id[11224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 497.062880][T11243] overlay: Unknown parameter 'fowner' [ 497.621298][ T6017] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 497.729446][T11258] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 497.741109][T11258] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 497.966977][ T5869] Bluetooth: hci5: command 0x0406 tx timeout [ 498.075235][T11253] overlay: Unknown parameter 'mask' [ 498.202230][ T6017] usb 1-1: too many configurations: 13, using maximum allowed: 8 [ 498.288272][ T6017] usb 1-1: config 0 has no interfaces? [ 498.306921][ T5863] Bluetooth: hci5: unexpected event 0x33 length: 11 > 10 [ 498.315387][T11260] FAULT_INJECTION: forcing a failure. [ 498.315387][T11260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.342916][ T6017] usb 1-1: config 0 has no interfaces? [ 498.346900][T11260] CPU: 1 UID: 0 PID: 11260 Comm: syz.6.1205 Not tainted syzkaller #0 PREEMPT(full) [ 498.346924][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 498.346933][T11260] Call Trace: [ 498.346938][T11260] [ 498.346945][T11260] dump_stack_lvl+0x16c/0x1f0 [ 498.346969][T11260] should_fail_ex+0x512/0x640 [ 498.346992][T11260] _copy_from_iter+0x29f/0x1720 [ 498.347018][T11260] ? __alloc_skb+0x200/0x380 [ 498.347036][T11260] ? __pfx__copy_from_iter+0x10/0x10 [ 498.347059][T11260] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 498.347094][T11260] netlink_sendmsg+0x829/0xdd0 [ 498.347118][T11260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.347147][T11260] ____sys_sendmsg+0xa95/0xc70 [ 498.347170][T11260] ? copy_msghdr_from_user+0x10a/0x160 [ 498.347189][T11260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.347222][T11260] ___sys_sendmsg+0x134/0x1d0 [ 498.347243][T11260] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.347287][T11260] __sys_sendmsg+0x16d/0x220 [ 498.347306][T11260] ? __pfx___sys_sendmsg+0x10/0x10 [ 498.347339][T11260] do_syscall_64+0xcd/0x4e0 [ 498.347361][T11260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.347376][T11260] RIP: 0033:0x7f43d7d8ec29 [ 498.347389][T11260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.347403][T11260] RSP: 002b:00007f43d8be1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.347418][T11260] RAX: ffffffffffffffda RBX: 00007f43d7fd5fa0 RCX: 00007f43d7d8ec29 [ 498.347428][T11260] RDX: 0000000000008000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 498.347437][T11260] RBP: 00007f43d8be1090 R08: 0000000000000000 R09: 0000000000000000 [ 498.347446][T11260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.347454][T11260] R13: 00007f43d7fd6038 R14: 00007f43d7fd5fa0 R15: 00007ffc8a231558 [ 498.347474][T11260] [ 498.531467][T11262] netlink: 'syz.3.1206': attribute type 1 has an invalid length. [ 498.545159][ T6017] usb 1-1: config 0 has no interfaces? [ 498.552454][ T6017] usb 1-1: config 0 has no interfaces? [ 498.555156][ T5912] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 498.558871][ T6017] usb 1-1: config 0 has no interfaces? [ 498.583813][ T6017] usb 1-1: config 0 has no interfaces? [ 498.592670][ T6017] usb 1-1: config 0 has no interfaces? [ 498.610387][ T6017] usb 1-1: config 0 has no interfaces? [ 498.628004][ T6017] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.637420][ T6017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.654044][ T6017] usb 1-1: Product: syz [ 498.688708][ T6017] usb 1-1: Manufacturer: syz [ 498.713901][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.812351][ T6017] usb 1-1: SerialNumber: syz [ 498.923813][T11279] 9pnet_fd: Insufficient options for proto=fd [ 499.076281][ T6017] usb 1-1: config 0 descriptor?? [ 499.110800][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.160572][ T5912] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 499.201560][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.233453][ T5912] usb 6-1: config 0 descriptor?? [ 499.311759][ T48] usb 1-1: USB disconnect, device number 25 [ 499.453271][T11283] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 499.473621][T11283] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 499.480292][T11283] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 499.488167][T11283] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 499.495542][T11283] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 499.505273][T11283] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 499.513441][T11283] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 499.519953][T11283] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 499.528188][T11283] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 499.536040][T11283] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 499.544217][T11283] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 499.551086][T11283] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 499.685119][ T5912] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 499.709766][ T5912] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 499.729529][ T5912] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 499.777532][ T5912] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 499.891827][ T5912] cp2112 0003:10C4:EA90.0010: Part Number: 0x00 Device Version: 0x00 [ 500.001407][ T48] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 500.061449][T11286] misc userio: The device must be registered before sending interrupts [ 500.251379][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 500.623572][T11287] syzkaller1: entered promiscuous mode [ 500.629162][T11287] syzkaller1: entered allmulticast mode [ 500.661637][ T48] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 500.684260][ T48] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 500.697370][ T48] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 500.706869][ T48] usb 1-1: Product: syz [ 500.711293][ T48] usb 1-1: Manufacturer: syz [ 500.718639][ T48] usb 1-1: SerialNumber: syz [ 500.756705][ T48] usb 1-1: config 0 descriptor?? [ 500.765208][T11249] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 500.805696][ T48] usb 1-1: USB disconnect, device number 26 [ 500.832333][ T5912] cp2112 0003:10C4:EA90.0010: error reading lock byte: -32 [ 500.915362][ T5912] usb 6-1: USB disconnect, device number 12 [ 500.957491][ T5863] Bluetooth: hci0: unexpected event 0x33 length: 11 > 10 [ 501.006608][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.020186][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.321537][ T48] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 502.303321][T11274] syz.6.1210 (11274): drop_caches: 2 [ 502.316121][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.379580][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.447020][ T48] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 503.469674][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.574582][ T48] usb 1-1: config 0 descriptor?? [ 503.724117][ T30] audit: type=1400 audit(1758382882.344:724): avc: denied { getopt } for pid=11308 comm="syz.6.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 503.893972][ T30] audit: type=1400 audit(1758382882.344:725): avc: denied { ioctl } for pid=11310 comm="syz.1.1219" path="socket:[26621]" dev="sockfs" ino=26621 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 504.241758][ T48] hid_parser_main: 4 callbacks suppressed [ 504.241772][ T48] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 504.257136][ T48] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 504.266355][ T48] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 504.276020][ T48] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 504.308718][ T48] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 504.350336][ T48] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 504.371398][ T48] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 504.435834][ T48] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 504.562057][ T48] cp2112 0003:10C4:EA90.0011: Part Number: 0x00 Device Version: 0x00 [ 504.618165][T11336] overlayfs: failed to resolve './file1': -2 [ 504.948160][T11337] : renamed from bridge_slave_0 (while UP) [ 505.174159][ T48] cp2112 0003:10C4:EA90.0011: error reading lock byte: -32 [ 505.187554][ T48] usb 1-1: USB disconnect, device number 27 [ 505.253155][T11344] FAULT_INJECTION: forcing a failure. [ 505.253155][T11344] name failslab, interval 1, probability 0, space 0, times 0 [ 505.265784][T11344] CPU: 0 UID: 0 PID: 11344 Comm: syz.3.1228 Not tainted syzkaller #0 PREEMPT(full) [ 505.265801][T11344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 505.265807][T11344] Call Trace: [ 505.265811][T11344] [ 505.265817][T11344] dump_stack_lvl+0x16c/0x1f0 [ 505.265836][T11344] should_fail_ex+0x512/0x640 [ 505.265851][T11344] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 505.265864][T11344] should_failslab+0xc2/0x120 [ 505.265877][T11344] __kmalloc_cache_node_noprof+0x6d/0x420 [ 505.265888][T11344] ? __get_vm_area_node+0x101/0x330 [ 505.265904][T11344] ? __lock_acquire+0x62e/0x1ce0 [ 505.265923][T11344] __get_vm_area_node+0x101/0x330 [ 505.265940][T11344] __vmalloc_node_range_noprof+0x271/0x14b0 [ 505.265957][T11344] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 505.265970][T11344] ? find_held_lock+0x2b/0x80 [ 505.265984][T11344] ? avc_has_perm_noaudit+0x117/0x3b0 [ 505.265997][T11344] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 505.266011][T11344] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 505.266028][T11344] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 505.266048][T11344] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 505.266059][T11344] __vmalloc_node_noprof+0xad/0xf0 [ 505.266075][T11344] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 505.266087][T11344] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 505.266098][T11344] ? security_capable+0x7e/0x260 [ 505.266113][T11344] bpf_prog_alloc+0x3b/0x230 [ 505.266122][T11344] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 505.266137][T11344] bpf_prog_load+0x1a04/0x2490 [ 505.266154][T11344] ? __pfx_bpf_prog_load+0x10/0x10 [ 505.266170][T11344] ? avc_has_perm+0x144/0x1f0 [ 505.266187][T11344] ? selinux_bpf+0xde/0x130 [ 505.266198][T11344] ? bpf_lsm_bpf+0x9/0x10 [ 505.266215][T11344] __sys_bpf+0x4a3f/0x4de0 [ 505.266231][T11344] ? __pfx___sys_bpf+0x10/0x10 [ 505.266246][T11344] ? ksys_write+0x190/0x250 [ 505.266260][T11344] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 505.266283][T11344] ? fput+0x9b/0xd0 [ 505.266297][T11344] ? ksys_write+0x1ac/0x250 [ 505.266308][T11344] ? __pfx_ksys_write+0x10/0x10 [ 505.266321][T11344] __x64_sys_bpf+0x78/0xc0 [ 505.266336][T11344] ? lockdep_hardirqs_on+0x7c/0x110 [ 505.266350][T11344] do_syscall_64+0xcd/0x4e0 [ 505.266365][T11344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.266377][T11344] RIP: 0033:0x7fe19b78ec29 [ 505.266386][T11344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.266398][T11344] RSP: 002b:00007fe19c678038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 505.266408][T11344] RAX: ffffffffffffffda RBX: 00007fe19b9d5fa0 RCX: 00007fe19b78ec29 [ 505.266415][T11344] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 505.266421][T11344] RBP: 00007fe19c678090 R08: 0000000000000000 R09: 0000000000000000 [ 505.266428][T11344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.266434][T11344] R13: 00007fe19b9d6038 R14: 00007fe19b9d5fa0 R15: 00007ffcc692b1e8 [ 505.266447][T11344] [ 505.266592][T11344] syz.3.1228: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 505.578140][T11344] CPU: 0 UID: 0 PID: 11344 Comm: syz.3.1228 Not tainted syzkaller #0 PREEMPT(full) [ 505.578157][T11344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 505.578163][T11344] Call Trace: [ 505.578168][T11344] [ 505.578172][T11344] dump_stack_lvl+0x16c/0x1f0 [ 505.578199][T11344] warn_alloc+0x248/0x3a0 [ 505.578220][T11344] ? __pfx_warn_alloc+0x10/0x10 [ 505.578238][T11344] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 505.578251][T11344] ? __kasan_kmalloc+0x8a/0xb0 [ 505.578262][T11344] ? __get_vm_area_node+0x208/0x330 [ 505.578280][T11344] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 505.578298][T11344] ? find_held_lock+0x2b/0x80 [ 505.578312][T11344] ? avc_has_perm_noaudit+0x117/0x3b0 [ 505.578325][T11344] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 505.578340][T11344] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 505.578357][T11344] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 505.578377][T11344] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 505.578388][T11344] __vmalloc_node_noprof+0xad/0xf0 [ 505.578404][T11344] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 505.578416][T11344] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 505.578427][T11344] ? security_capable+0x7e/0x260 [ 505.578441][T11344] bpf_prog_alloc+0x3b/0x230 [ 505.578451][T11344] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 505.578465][T11344] bpf_prog_load+0x1a04/0x2490 [ 505.578483][T11344] ? __pfx_bpf_prog_load+0x10/0x10 [ 505.578498][T11344] ? avc_has_perm+0x144/0x1f0 [ 505.578515][T11344] ? selinux_bpf+0xde/0x130 [ 505.578526][T11344] ? bpf_lsm_bpf+0x9/0x10 [ 505.578543][T11344] __sys_bpf+0x4a3f/0x4de0 [ 505.578559][T11344] ? __pfx___sys_bpf+0x10/0x10 [ 505.578575][T11344] ? ksys_write+0x190/0x250 [ 505.578589][T11344] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 505.578612][T11344] ? fput+0x9b/0xd0 [ 505.578626][T11344] ? ksys_write+0x1ac/0x250 [ 505.578637][T11344] ? __pfx_ksys_write+0x10/0x10 [ 505.578650][T11344] __x64_sys_bpf+0x78/0xc0 [ 505.578665][T11344] ? lockdep_hardirqs_on+0x7c/0x110 [ 505.578679][T11344] do_syscall_64+0xcd/0x4e0 [ 505.578694][T11344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.578705][T11344] RIP: 0033:0x7fe19b78ec29 [ 505.578715][T11344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.578726][T11344] RSP: 002b:00007fe19c678038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 505.578736][T11344] RAX: ffffffffffffffda RBX: 00007fe19b9d5fa0 RCX: 00007fe19b78ec29 [ 505.578742][T11344] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 505.578749][T11344] RBP: 00007fe19c678090 R08: 0000000000000000 R09: 0000000000000000 [ 505.578755][T11344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.578761][T11344] R13: 00007fe19b9d6038 R14: 00007fe19b9d5fa0 R15: 00007ffcc692b1e8 [ 505.578775][T11344] [ 505.578779][T11344] Mem-Info: [ 505.860066][T11344] active_anon:13260 inactive_anon:0 isolated_anon:0 [ 505.860066][T11344] active_file:14730 inactive_file:40758 isolated_file:0 [ 505.860066][T11344] unevictable:769 dirty:399 writeback:0 [ 505.860066][T11344] slab_reclaimable:12116 slab_unreclaimable:101980 [ 505.860066][T11344] mapped:36667 shmem:2461 pagetables:1445 [ 505.860066][T11344] sec_pagetables:0 bounce:0 [ 505.860066][T11344] kernel_misc_reclaimable:0 [ 505.860066][T11344] free:1280583 free_pcp:17223 free_cma:0 [ 505.905750][T11344] Node 0 active_anon:53040kB inactive_anon:0kB active_file:58920kB inactive_file:162828kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:146668kB dirty:1596kB writeback:0kB shmem:8308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12804kB pagetables:5660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 505.937986][T11344] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 505.967886][T11344] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 505.996625][T11344] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 506.002349][T11344] Node 0 DMA32 free:1214540kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53012kB inactive_anon:0kB active_file:58920kB inactive_file:161512kB unevictable:1540kB writepending:1596kB present:3129332kB managed:2539316kB mlocked:0kB bounce:0kB free_pcp:50328kB local_pcp:20284kB free_cma:0kB [ 506.035436][T11344] lowmem_reserve[]: 0 0 1 1 1 [ 506.040124][T11344] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 506.069074][T11344] lowmem_reserve[]: 0 0 0 0 0 [ 506.073762][T11344] Node 1 Normal free:3892424kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18528kB local_pcp:10560kB free_cma:0kB [ 506.104939][T11344] lowmem_reserve[]: 0 0 0 0 0 [ 506.109605][T11344] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 506.124572][T11344] Node 0 DMA32: 1393*4kB (UME) 610*8kB (UME) 486*16kB (UME) 501*32kB (UME) 145*64kB (UME) 133*128kB (UME) 80*256kB (UM) 42*512kB (UME) 22*1024kB (UME) 8*2048kB (UME) 262*4096kB (M) = 1214612kB [ 506.143533][T11344] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 506.155315][T11344] Node 1 Normal: 224*4kB (UME) 47*8kB (UME) 53*16kB (UME) 170*32kB (UME) 43*64kB (UME) 15*128kB (UME) 5*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3892424kB [ 506.231351][T11344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.240922][T11344] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 506.250227][T11344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.259763][T11344] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 506.269078][T11344] 57956 total pagecache pages [ 506.273744][T11344] 0 pages in swap cache [ 506.277864][T11344] Free swap = 124996kB [ 506.282085][T11344] Total swap = 124996kB [ 506.286225][T11344] 2097051 pages RAM [ 506.289995][T11344] 0 pages HighMem/MovableOnly [ 506.294663][T11344] 430260 pages reserved [ 506.298786][T11344] 0 pages cma reserved [ 506.610796][T11351] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 506.622301][T11351] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 507.007568][ T30] audit: type=1400 audit(1758382885.641:726): avc: denied { write } for pid=11349 comm="syz.3.1229" path="socket:[27100]" dev="sockfs" ino=27100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 507.392551][T11341] netlink: 'syz.6.1227': attribute type 13 has an invalid length. [ 507.559959][T11341] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 507.831730][T11367] netlink: 'syz.3.1234': attribute type 2 has an invalid length. [ 508.211282][ T5969] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 508.394929][ T5969] usb 1-1: unable to get BOS descriptor or descriptor too short [ 508.406924][ T5969] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 508.562807][T11372] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 508.570054][T11372] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 508.583220][ T5969] usb 1-1: can't read configurations, error -22 [ 508.588607][T11372] vhci_hcd vhci_hcd.0: Device attached [ 508.685124][T11372] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 509.291425][ T48] vhci_hcd: vhci_device speed not set [ 509.381740][ T48] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 509.408757][ T5969] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 509.438132][T11372] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11) [ 509.444764][T11372] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 509.458254][T11382] overlayfs: failed to resolve './file1': -2 [ 509.790776][T11372] vhci_hcd vhci_hcd.0: Device attached [ 509.800972][T11383] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14) [ 509.807615][T11383] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 509.818069][ T5969] usb 1-1: unable to get BOS descriptor or descriptor too short [ 509.827406][ T5969] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 510.348164][ T5969] usb 1-1: can't read configurations, error -22 [ 510.408810][T11388] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(13) [ 510.415522][T11388] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 510.461808][ T5969] usb usb1-port1: attempt power cycle [ 510.527247][T11383] vhci_hcd vhci_hcd.0: Device attached [ 511.403860][T11388] vhci_hcd vhci_hcd.0: Device attached [ 511.404209][T11372] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 511.478676][T11391] vhci_hcd: connection closed [ 511.522910][ T6327] vhci_hcd: stop threads [ 511.543628][T11386] vhci_hcd: connection closed [ 511.544921][T11381] vhci_hcd: connection closed [ 511.552330][T11373] vhci_hcd: connection reset by peer [ 511.621729][ T6327] vhci_hcd: release socket [ 511.653845][ T6327] vhci_hcd: disconnect device [ 511.672332][ T6017] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 511.685312][ T6327] vhci_hcd: stop threads [ 511.697088][ T6327] vhci_hcd: release socket [ 511.703509][ T6327] vhci_hcd: disconnect device [ 511.709877][ T6327] vhci_hcd: stop threads [ 511.716807][ T6327] vhci_hcd: release socket [ 511.725671][ T6327] vhci_hcd: disconnect device [ 511.734041][ T6327] vhci_hcd: stop threads [ 511.756887][ T6327] vhci_hcd: release socket [ 511.762731][ T6327] vhci_hcd: disconnect device [ 511.882596][ T6017] usb 2-1: Using ep0 maxpacket: 32 [ 511.897566][ T6017] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 511.913794][ T6017] usb 2-1: config 0 has no interface number 0 [ 511.927323][ T6017] usb 2-1: config 0 interface 12 has no altsetting 0 [ 511.946933][ T6017] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 511.959771][ T6017] usb 2-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 511.969886][ T6017] usb 2-1: Product: syz [ 511.981421][ T6017] usb 2-1: Manufacturer: syz [ 511.988602][ T6017] usb 2-1: SerialNumber: syz [ 512.002915][ T6017] usb 2-1: config 0 descriptor?? [ 512.121464][ T942] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 512.171346][ T5969] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 512.202196][ T5969] usb 1-1: Using ep0 maxpacket: 16 [ 512.209001][ T5969] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.221076][ T5969] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 512.230611][T11414] netlink: 'syz.3.1245': attribute type 2 has an invalid length. [ 512.241486][ T5969] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 512.252305][ T5969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.377470][ T5969] usb 1-1: Product: syz [ 512.382474][ T5969] usb 1-1: Manufacturer: syz [ 512.387152][ T5969] usb 1-1: SerialNumber: syz [ 512.387283][ T942] usb 6-1: device descriptor read/64, error -71 [ 512.403156][ T5969] usb 1-1: config 0 descriptor?? [ 512.501431][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 512.633570][ T5911] usb 1-1: USB disconnect, device number 30 [ 512.651974][ T6017] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 512.652020][ T6017] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 512.652038][ T6017] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 512.652098][ T6017] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 512.657298][ T6017] usb 2-1: USB disconnect, device number 26 [ 512.674835][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.674867][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.674896][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 512.674916][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.676995][ T9] usb 4-1: config 0 descriptor?? [ 512.698549][T11418] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 512.741866][ T942] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 512.991305][T11419] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 512.998971][ T942] usb 6-1: device descriptor read/64, error -71 [ 513.113820][ T942] usb usb6-port1: attempt power cycle [ 513.153381][T11419] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 513.161577][T11419] usb 7-1: config 0 has no interface number 0 [ 513.167687][T11419] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 513.221389][T11419] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.291324][T11425] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 513.302979][ T9] usbhid 4-1:0.0: can't add hid device: -32 [ 513.309219][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 513.351965][T11419] usb 7-1: config 0 descriptor?? [ 513.441562][T11429] overlayfs: failed to resolve './file1': -2 [ 513.639828][ T942] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 513.665270][T11419] usb 7-1: selecting invalid altsetting 1 [ 513.689927][ T942] usb 6-1: device descriptor read/8, error -71 [ 513.699117][T11419] dvb_ttusb_budget: ttusb_init_controller: error [ 513.747000][T11419] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 513.858494][T11419] DVB: Unable to find symbol cx22700_attach() [ 513.869934][T11416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.893677][T11440] FAULT_INJECTION: forcing a failure. [ 513.893677][T11440] name failslab, interval 1, probability 0, space 0, times 0 [ 513.897545][T11416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.906380][T11440] CPU: 0 UID: 0 PID: 11440 Comm: syz.0.1251 Not tainted syzkaller #0 PREEMPT(full) [ 513.906403][T11440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 513.906411][T11440] Call Trace: [ 513.906418][T11440] [ 513.906425][T11440] dump_stack_lvl+0x16c/0x1f0 [ 513.906449][T11440] should_fail_ex+0x512/0x640 [ 513.906473][T11440] should_failslab+0xc2/0x120 [ 513.906492][T11440] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 513.906509][T11440] ? __alloc_skb+0x2b2/0x380 [ 513.906531][T11440] __alloc_skb+0x2b2/0x380 [ 513.906548][T11440] ? __pfx___alloc_skb+0x10/0x10 [ 513.906567][T11440] ? find_held_lock+0x2b/0x80 [ 513.906591][T11440] __neigh_notify+0xe6/0x380 [ 513.906614][T11440] __neigh_update+0x1593/0x2ca0 [ 513.906646][T11440] arp_process+0x8fc/0x2440 [ 513.906668][T11440] ? __pfx_arp_process+0x10/0x10 [ 513.906683][T11440] ? __pfx_arp_process+0x10/0x10 [ 513.906699][T11440] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 513.906727][T11440] arp_rcv+0x41a/0x510 [ 513.906748][T11440] ? __pfx_arp_rcv+0x10/0x10 [ 513.906762][T11440] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 513.906786][T11440] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 513.906803][T11440] ? lock_acquire+0x179/0x350 [ 513.906819][T11440] ? __phys_addr+0xe8/0x180 [ 513.906842][T11440] __netif_receive_skb+0x1d/0x160 [ 513.906858][T11440] netif_receive_skb+0x137/0x7b0 [ 513.906874][T11440] ? __pfx_netif_receive_skb+0x10/0x10 [ 513.906898][T11440] tun_rx_batched.isra.0+0x3ee/0x740 [ 513.906923][T11440] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 513.906951][T11440] ? tun_get_user+0x1d8a/0x3ce0 [ 513.906973][T11440] ? rcu_is_watching+0x12/0xc0 [ 513.906996][T11440] tun_get_user+0x28e4/0x3ce0 [ 513.907029][T11440] ? __pfx_tun_get_user+0x10/0x10 [ 513.907058][T11440] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 513.907088][T11440] ? find_held_lock+0x2b/0x80 [ 513.907107][T11440] ? tun_get+0x191/0x370 [ 513.907134][T11440] tun_chr_write_iter+0xdc/0x210 [ 513.907164][T11440] vfs_write+0x7d3/0x11d0 [ 513.907181][T11440] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 513.907207][T11440] ? __pfx_vfs_write+0x10/0x10 [ 513.907220][T11440] ? find_held_lock+0x2b/0x80 [ 513.907252][T11440] ksys_write+0x12a/0x250 [ 513.907267][T11440] ? __pfx_ksys_write+0x10/0x10 [ 513.907289][T11440] do_syscall_64+0xcd/0x4e0 [ 513.907311][T11440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.907326][T11440] RIP: 0033:0x7fe6a0b8d6df [ 513.907339][T11440] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 513.907354][T11440] RSP: 002b:00007fe6a194c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 513.907369][T11440] RAX: ffffffffffffffda RBX: 00007fe6a0dd6090 RCX: 00007fe6a0b8d6df [ 513.907379][T11440] RDX: 000000000000002a RSI: 0000200000000080 RDI: 00000000000000c8 [ 513.907388][T11440] RBP: 00007fe6a194c090 R08: 0000000000000000 R09: 0000000000000000 [ 513.907397][T11440] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 513.907407][T11440] R13: 00007fe6a0dd6128 R14: 00007fe6a0dd6090 R15: 00007fffc47850f8 [ 513.907428][T11440] [ 514.235160][ T942] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 514.244339][T11419] DVB: Unable to find symbol tda10046_attach() [ 514.250753][T11419] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 514.270144][ T942] usb 6-1: device descriptor read/8, error -71 [ 514.381623][ T942] usb usb6-port1: unable to enumerate USB device [ 514.389525][ T5933] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 514.511294][ T48] vhci_hcd: vhci_device speed not set [ 514.541390][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 514.548225][ T5933] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 514.556704][ T5933] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 514.565481][ T5933] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 514.575177][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 514.585038][ T5933] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 514.594783][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 514.608412][ T5933] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 514.618017][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.627791][ T5933] usb 2-1: config 0 descriptor?? [ 514.840756][ T5933] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 514.977472][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 515.053643][ T30] audit: type=1400 audit(1758382893.681:727): avc: denied { read write } for pid=11433 comm="syz.1.1252" name="lp0" dev="devtmpfs" ino=3394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 515.140067][ T5933] usb 2-1: USB disconnect, device number 27 [ 515.154910][ T5933] usblp0: removed [ 515.160226][ T30] audit: type=1400 audit(1758382893.681:728): avc: denied { open } for pid=11433 comm="syz.1.1252" path="/dev/usb/lp0" dev="devtmpfs" ino=3394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 515.243519][ T942] usb 4-1: USB disconnect, device number 29 [ 515.382732][T11454] misc userio: The device must be registered before sending interrupts [ 516.080511][ T5933] usb 7-1: USB disconnect, device number 6 [ 516.327310][ T30] audit: type=1400 audit(1758382894.961:729): avc: denied { read } for pid=11462 comm="syz.6.1259" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 516.362264][ T31] INFO: task syz-executor:5848 blocked for more than 143 seconds. [ 516.370106][ T31] Not tainted syzkaller #0 [ 516.404951][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.438844][ T31] task:syz-executor state:D stack:22488 pid:5848 tgid:5848 ppid:1 task_flags:0x400140 flags:0x00004004 [ 516.480750][ T31] Call Trace: [ 516.485338][ T31] [ 516.489206][ T31] __schedule+0x1190/0x5de0 [ 516.499883][ T31] ? __pfx___schedule+0x10/0x10 [ 516.504926][ T31] ? find_held_lock+0x2b/0x80 [ 516.509750][ T31] ? schedule+0x2d7/0x3a0 [ 516.516355][ T31] schedule+0xe7/0x3a0 [ 516.520612][ T31] v9fs_evict_inode+0x26f/0x300 [ 516.525974][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 516.533810][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 516.545881][ T31] ? evict+0x3a2/0x920 [ 516.550151][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 516.555966][ T31] evict+0x3e3/0x920 [ 516.560785][ T31] ? __pfx_evict+0x10/0x10 [ 516.565764][ T31] ? iput+0x519/0x880 [ 516.569930][ T31] iput+0x521/0x880 [ 516.574270][ T31] ? __pfx_v9fs_drop_inode+0x10/0x10 [ 516.579683][ T31] dentry_unlink_inode+0x29c/0x480 [ 516.609340][ T31] __dentry_kill+0x1d0/0x600 [ 516.614359][ T31] dput.part.0+0x4b1/0x9b0 [ 516.618888][ T31] shrink_dcache_for_umount+0x159/0x3e0 [ 516.624652][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 516.629883][ T31] generic_shutdown_super+0x6c/0x390 [ 516.635262][ T31] kill_anon_super+0x3a/0x60 [ 516.639871][ T31] v9fs_kill_super+0x3d/0xa0 [ 516.644512][ T31] deactivate_locked_super+0xc1/0x1a0 [ 516.649915][ T31] deactivate_super+0xde/0x100 [ 516.654704][ T31] cleanup_mnt+0x225/0x450 [ 516.659120][ T31] task_work_run+0x150/0x240 [ 516.664461][ T31] ? __pfx_task_work_run+0x10/0x10 [ 516.669605][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 516.675015][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 516.680297][ T31] do_syscall_64+0x41c/0x4e0 [ 516.685073][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.690975][ T31] RIP: 0033:0x7fc77c38ff57 [ 516.695431][ T31] RSP: 002b:00007ffc47978778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 516.704006][ T31] RAX: 0000000000000000 RBX: 00007fc77c411c2d RCX: 00007fc77c38ff57 [ 516.712245][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc47978830 [ 516.720224][ T31] RBP: 00007ffc47978830 R08: 0000000000000000 R09: 0000000000000000 [ 516.728359][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc479798c0 [ 516.737376][ T31] R13: 00007fc77c411c2d R14: 000000000005657c R15: 00007ffc47979900 [ 516.745532][ T31] [ 516.753027][ T31] [ 516.753027][ T31] Showing all locks held in the system: [ 516.760922][ T31] 3 locks held by kworker/u8:0/12: [ 516.767594][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 516.779152][ T31] #1: ffffc90000117d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 516.789708][ T31] #2: ffffffff90385548 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 516.798843][ T31] 1 lock held by khungtaskd/31: [ 516.803716][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 516.813711][ T31] 4 locks held by kworker/u8:5/1107: [ 516.819010][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 516.829083][ T31] #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 516.837883][ T31] #2: ffff8880b8425b18 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6b8/0xd30 [ 516.846894][ T31] #3: ffffffff9b0fef88 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 516.857385][ T31] 2 locks held by getty/5606: [ 516.862098][ T31] #0: ffff888035f9e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 516.872181][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 516.882365][ T31] 1 lock held by syz-executor/5848: [ 516.887570][ T31] #0: ffff88802b8ae0e0 (&type->s_umount_key#77){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 516.898021][ T31] 2 locks held by syz.1.1252/11433: [ 516.903245][ T31] #0: ffffffff90385548 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 516.912298][ T31] #1: ffffffff8e5ccb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 516.922456][ T31] 1 lock held by syz.3.1256/11457: [ 516.927585][ T31] #0: ffffffff90385548 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x255/0x48b0 [ 516.936985][ T31] 2 locks held by syz.6.1259/11463: [ 516.942231][ T31] #0: ffffffff8f7a53c8 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xc2/0x2670 [ 516.950970][ T31] #1: ffffffff90385548 (rtnl_mutex){+.+.}-{4:4}, at: ppp_ioctl+0x17cd/0x2670 [ 516.959926][ T31] 1 lock held by syz.6.1259/11466: [ 516.965075][ T31] #0: ffffffff8f7a53c8 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xc2/0x2670 [ 516.974114][ T31] [ 516.976458][ T31] ============================================= [ 516.976458][ T31] [ 516.985103][ T31] NMI backtrace for cpu 1 [ 516.985118][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 516.985136][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 516.985146][ T31] Call Trace: [ 516.985151][ T31] [ 516.985158][ T31] dump_stack_lvl+0x116/0x1f0 [ 516.985184][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 516.985199][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 516.985218][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 516.985245][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 516.985262][ T31] watchdog+0xf0e/0x1260 [ 516.985283][ T31] ? __pfx_watchdog+0x10/0x10 [ 516.985298][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 516.985319][ T31] ? __kthread_parkme+0x19e/0x250 [ 516.985343][ T31] ? __pfx_watchdog+0x10/0x10 [ 516.985359][ T31] kthread+0x3c2/0x780 [ 516.985375][ T31] ? __pfx_kthread+0x10/0x10 [ 516.985391][ T31] ? rcu_is_watching+0x12/0xc0 [ 516.985410][ T31] ? __pfx_kthread+0x10/0x10 [ 516.985427][ T31] ret_from_fork+0x56a/0x730 [ 516.985441][ T31] ? __pfx_kthread+0x10/0x10 [ 516.985457][ T31] ret_from_fork_asm+0x1a/0x30 [ 516.985486][ T31] [ 516.985492][ T31] Sending NMI from CPU 1 to CPUs 0: [ 517.107889][ C0] NMI backtrace for cpu 0 [ 517.107905][ C0] CPU: 0 UID: 0 PID: 11462 Comm: syz.6.1259 Not tainted syzkaller #0 PREEMPT(full) [ 517.107921][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 517.107929][ C0] RIP: 0010:__hrtimer_setup+0x2/0x280 [ 517.107949][ C0] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 17 66 13 00 31 ff e9 40 cd 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 <41> 56 49 89 f6 41 55 41 89 d5 41 54 41 89 cc 55 44 89 e5 53 83 e5 [ 517.107962][ C0] RSP: 0018:ffffc90003cbfd38 EFLAGS: 00000293 [ 517.107974][ C0] RAX: 0000000000000000 RBX: 1ffff92000797fa9 RCX: 0000000000000001 [ 517.107983][ C0] RDX: 0000000000000000 RSI: ffffffff81a83a10 RDI: ffffc90003cbfd78 [ 517.107997][ C0] RBP: ffffc90003cbfd78 R08: 0000000000000001 R09: 0000000000000000 [ 517.108005][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 517.108012][ C0] R13: 0000000000000001 R14: 00000000000f4240 R15: dffffc0000000000 [ 517.108021][ C0] FS: 0000555570428500(0000) GS:ffff8881246b2000(0000) knlGS:0000000000000000 [ 517.108035][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 517.108044][ C0] CR2: 0000555585a425c8 CR3: 000000001f72e000 CR4: 00000000003526f0 [ 517.108052][ C0] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 517.108060][ C0] DR3: ffffffffefffff18 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 517.108068][ C0] Call Trace: [ 517.108073][ C0] [ 517.108079][ C0] hrtimer_nanosleep+0xc3/0x380 [ 517.108095][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 517.108113][ C0] ? get_timespec64+0x147/0x240 [ 517.108131][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 517.108150][ C0] common_nsleep+0xa1/0xd0 [ 517.108169][ C0] __x64_sys_clock_nanosleep+0x34a/0x4a0 [ 517.108186][ C0] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 517.108204][ C0] do_syscall_64+0xcd/0x4e0 [ 517.108223][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.108237][ C0] RIP: 0033:0x7f43d7dc14e5 [ 517.108247][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 517.108259][ C0] RSP: 002b:00007ffc8a231650 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 517.108270][ C0] RAX: ffffffffffffffda RBX: 00007f43d7fd5fa0 RCX: 00007f43d7dc14e5 [ 517.108279][ C0] RDX: 00007ffc8a231690 RSI: 0000000000000000 RDI: 0000000000000000 [ 517.108287][ C0] RBP: 00007f43d7fd7da0 R08: 0000000000000000 R09: 00007f43d8be2000 [ 517.108295][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000007e3ff [ 517.108303][ C0] R13: 00007f43d7fd6180 R14: ffffffffffffffff R15: 00007ffc8a2317d0 [ 517.108317][ C0] [ 517.123131][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 517.123148][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 517.123166][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 517.123176][ T31] Call Trace: [ 517.123182][ T31] [ 517.123188][ T31] dump_stack_lvl+0x3d/0x1f0 [ 517.123213][ T31] vpanic+0x6e8/0x7a0 [ 517.123238][ T31] ? __pfx_vpanic+0x10/0x10 [ 517.123262][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 517.123285][ T31] panic+0xca/0xd0 [ 517.123298][ T31] ? __pfx_panic+0x10/0x10 [ 517.123321][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 517.123345][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 517.123363][ T31] ? watchdog+0xd78/0x1260 [ 517.123381][ T31] ? watchdog+0xd6b/0x1260 [ 517.123398][ T31] watchdog+0xd89/0x1260 [ 517.123419][ T31] ? __pfx_watchdog+0x10/0x10 [ 517.123435][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 517.123455][ T31] ? __kthread_parkme+0x19e/0x250 [ 517.123478][ T31] ? __pfx_watchdog+0x10/0x10 [ 517.123494][ T31] kthread+0x3c2/0x780 [ 517.123510][ T31] ? __pfx_kthread+0x10/0x10 [ 517.123527][ T31] ? rcu_is_watching+0x12/0xc0 [ 517.123548][ T31] ? __pfx_kthread+0x10/0x10 [ 517.123564][ T31] ret_from_fork+0x56a/0x730 [ 517.123579][ T31] ? __pfx_kthread+0x10/0x10 [ 517.123595][ T31] ret_from_fork_asm+0x1a/0x30 [ 517.123624][ T31] [ 517.510066][ T31] Kernel Offset: disabled [ 517.514368][ T31] Rebooting in 86400 seconds..